last executing test programs:

7.805017262s ago: executing program 2 (id=37):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2200005, @local, 0x1}, 0x1c)
getdents(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x110, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000044}, 0x200040d4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)

7.308318415s ago: executing program 2 (id=30):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0x9}, {0xa, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040050)
r3 = socket$key(0xf, 0x3, 0x2)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil)
r4 = userfaultfd(0x80001)
syz_clone3(&(0x7f00000024c0)={0x4000000, &(0x7f0000000280), &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000340), {0x3c}, &(0x7f0000000380)=""/110, 0x6e, &(0x7f0000001480)=""/4096, &(0x7f0000002480)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
move_pages(r5, 0x1, &(0x7f0000002540)=[&(0x7f0000ffa000/0x4000)=nil], 0x0, &(0x7f0000002580)=[0x0, 0x0], 0x2)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000400)={"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"})
r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042)
writev(r6, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x4300}, {&(0x7f0000000900), 0x4000}], 0xe)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$netlink(r7, 0x10e, 0x8, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=0x1000)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000240)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}})
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="543db42d56d6e3baba2309f1ed3f4ac605a7098e08b3307f3266baa540c9ce68c1d15cb0f56768c1b55aeaeafa7c9a005e6b284a0d8fd5ac90d3f0a05d8c318472f006a484742e4435cbdc70b3dc3230c46ad357c6d3312ba714ccdc8fa1f6605d0c7f63c354c5d054bec4feff32d3a21e6bd358713607d5208cfbe32a7b53b076f82449da56f865ed2a5db9b94f52a8ee07d4f1926fa5f049d72946b5"], 0x90}, 0x1, 0x7}, 0x0)

7.109203057s ago: executing program 2 (id=33):
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
copy_file_range(r0, &(0x7f0000000040)=0x14, 0xffffffffffffffff, 0x0, 0x5, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x1})
r1 = io_uring_setup(0x70b3, &(0x7f0000000100)={0x0, 0x42f8, 0x20000, 0x3, 0x1a3})
io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000009a40)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/156, 0x9c}]}, {0x8, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)=""/22, 0x16}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000480)=""/251, 0xfb}, {&(0x7f0000000580)=""/4096, 0x1000}]}, {0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001600)=""/88, 0x58}, {&(0x7f0000001680)=""/96, 0x60}, {&(0x7f0000001700)=""/149, 0x95}, {&(0x7f00000017c0)=""/148, 0x94}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/220, 0xdc}, {&(0x7f0000002980)=""/235, 0xeb}]}, {0x3, 0x0, &(0x7f0000003000)=[{&(0x7f0000002b00)=""/145, 0x91}, {&(0x7f0000002bc0)=""/197, 0xc5}, {&(0x7f0000002cc0)=""/104, 0x68}, {&(0x7f0000002d40)=""/14, 0xe}, {&(0x7f0000002d80)=""/133, 0x85}, {&(0x7f0000002e40)=""/103, 0x67}, {&(0x7f0000002ec0)=""/102, 0x66}, {&(0x7f0000002f40)=""/65, 0x41}, {&(0x7f0000002fc0)=""/51, 0x33}]}, {0x2, 0x0, &(0x7f00000037c0)=[{&(0x7f00000030c0)=""/160, 0xa0}, {&(0x7f0000003180)=""/236, 0xec}, {&(0x7f0000003280)=""/246, 0xf6}, {&(0x7f0000003380)=""/126, 0x7e}, {&(0x7f0000003400)=""/144, 0x90}, {&(0x7f00000034c0)=""/158, 0x9e}, {&(0x7f0000003580)=""/14, 0xe}, {&(0x7f00000035c0)=""/229, 0xe5}, {&(0x7f00000036c0)=""/236, 0xec}]}, {0xfffffff7, 0x0, &(0x7f0000004b40)=[{&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/66, 0x42}, {&(0x7f0000004900)}, {&(0x7f0000004940)=""/86, 0x56}, {&(0x7f00000049c0)=""/190, 0xbe}, {&(0x7f0000004a80)=""/168, 0xa8}]}, {0x2, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004bc0)=""/163, 0xa3}, {&(0x7f0000004c80)=""/80, 0x50}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/25, 0x19}]}, {0x6, 0x0, &(0x7f0000006000)=[{&(0x7f0000005d80)=""/201, 0xc9}, {&(0x7f0000005e80)=""/139, 0x8b}, {&(0x7f0000005f40)=""/155, 0x9b}]}, {0xf62, 0x0, &(0x7f0000006500)=[{&(0x7f0000006040)=""/120, 0x78}, {&(0x7f00000060c0)=""/1, 0x1}, {&(0x7f0000006100)=""/222, 0xde}, {&(0x7f0000006200)=""/243, 0xf3}, {&(0x7f0000006300)=""/149, 0x95}, {&(0x7f00000063c0)=""/45, 0x2d}, {&(0x7f0000006400)=""/60, 0x3c}, {&(0x7f0000006440)=""/149, 0x95}]}, {0x1420, 0x0, &(0x7f0000006800)=[{&(0x7f0000006580)=""/47, 0x2f}, {&(0x7f00000065c0)=""/176, 0xb0}, {&(0x7f0000006680)=""/81, 0x51}, {&(0x7f0000006700)=""/228, 0xe4}]}, {0x1, 0x0, &(0x7f0000006a40)=[{&(0x7f0000006840)=""/232, 0xe8}, {&(0x7f0000006940)=""/16, 0x10}, {&(0x7f0000006980)=""/98, 0x62}, {&(0x7f0000006a00)=""/53, 0x35}]}, {0x4, 0x0, &(0x7f0000007dc0)=[{&(0x7f0000006a80)=""/82, 0x52}, {&(0x7f0000006b00)}, {&(0x7f0000006b40)=""/4096, 0x1000}, {&(0x7f0000007b40)=""/217, 0xd9}, {&(0x7f0000007c40)=""/35, 0x23}, {&(0x7f0000007c80)=""/128, 0x80}, {&(0x7f0000007d00)=""/178, 0xb2}]}, {0x3, 0x0, &(0x7f0000008040)=[{&(0x7f0000007e40)=""/199, 0xc7}, {&(0x7f0000007f40)=""/136, 0x88}, {&(0x7f0000008000)=""/51, 0x33}]}, {0x5, 0x0, &(0x7f0000008400)=[{&(0x7f0000008080)=""/209, 0xd1}, {&(0x7f0000008180)=""/70, 0x46}, {&(0x7f0000008200)=""/71, 0x47}, {&(0x7f0000008280)=""/186, 0xba}, {&(0x7f0000008340)=""/165, 0xa5}]}, {0x3, 0x0, &(0x7f00000085c0)=[{&(0x7f0000008480)=""/8, 0x8}, {&(0x7f00000084c0)=""/107, 0x6b}, {&(0x7f0000008540)=""/104, 0x68}]}, {0x6, 0x0, &(0x7f00000099c0)=[{&(0x7f0000008600)=""/158, 0x9e}, {&(0x7f00000086c0)=""/252, 0xfc}, {&(0x7f00000087c0)=""/4096, 0x1000}, {&(0x7f00000097c0)=""/192, 0xc0}, {&(0x7f0000009880)=""/72, 0x48}, {&(0x7f0000009900)=""/146, 0x92}]}], 0x10)
io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000009b40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x35)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000009d00), 0x2c0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000009d40)={'syz_tun\x00', 0x2})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000009e00)={'syztnl1\x00', &(0x7f0000009d80)={'ip6tnl0\x00', <r4=>0x0, 0x116ebf7a48cca760, 0x5, 0x0, 0x7fff, 0x71, @local, @mcast1, 0x7, 0x7, 0x7, 0x5}})
bind$can_raw(r3, &(0x7f0000009e40)={0x1d, r4}, 0x10)
add_key(&(0x7f0000009e80)='id_resolver\x00', &(0x7f0000009ec0)={'syz', 0x2}, &(0x7f0000009f00)="adc949909d9c4d171d686212c0a21bce0c92ed0ffc8d02d930bcd216fb510bc4f7e915609ea538d4e2017a26d0a37f6977d1fcd0b036bc1abc66109086409c01f8cca8a9e9766c476562ab35037604ce5a128979104a9e973d28b7742cf8c56f27869d5021c272922812660369ecaf2c93109136f1951ce0a27df78bde1452e94435ab8846a771", 0x87, 0xfffffffffffffffc)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f000000a000)={'syztnl0\x00', &(0x7f0000009fc0)={'syztnl1\x00', r4, 0x40, 0x8, 0xb, 0x6, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @multicast1, {[@end]}}}}})
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f000000a040)={0x3, 0x0, [{0xa49, 0x0, 0x4026}, {0x94f, 0x0, 0x7}, {0xb79, 0x0, 0xef}]})
read$FUSE(r1, &(0x7f000000a080)={0x2020}, 0x2020)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f000000c100)={0x1, 0x0, &(0x7f000000c0c0)=[r6, r3, r0, r0]}, 0x4)
ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, &(0x7f0000010840)={&(0x7f0000010680)=[&(0x7f000000c140)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f000000c180)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x3}}, &(0x7f000000c1c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f000000c240)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f000000c2c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f000000c300)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f000000c340)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f000000c380)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f000000c3c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x781fb30c691305c8}}, &(0x7f000000c400)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000003}, [{0x5e, 0x4}, {0xffffffffffffffff, 0x9}, {0x80000001, 0x2}, {0x9, 0xbb1}, {0xd7, 0x2}, {0x80, 0x60000000000}, {0x3, 0x1}, {0x90, 0x1}, {0x6, 0x200}, {0xdb, 0x3}, {0x9, 0x4}, {0x80, 0xffffffffffffff74}, {0x1b74000000, 0x2}, {0x800000000, 0x8}, {0xffffffffffffff00, 0xffffffffffffffff}, {0x8, 0x7}, {0xb, 0x4}, {0xfffffffffffffff7, 0x8}, {0x1, 0x8}, {0xab05, 0x80000000}, {0x5, 0x1}, {0x7ff, 0x1}, {0xe, 0x6}, {0x29c, 0xb}, {0x6, 0x2}, {0xfa6, 0xffffffffffffffff}, {0x4, 0x73d}, {0x5, 0x2}, {0x7, 0x2}, {0x1, 0x9}, {0x6, 0x80000000}, {0x6, 0x2}, {0x8, 0xc9}, {0x10001, 0x1f84}, {0x9, 0x7}, {0x0, 0x3}, {0x40, 0x31fb}, {0x0, 0x7}, {0x7832, 0xf03}, {0x192, 0x9}, {0x5, 0xa6e1}, {0x2, 0x2}, {0x1, 0xa6e}, {0xffff, 0xf}, {0x100000001, 0x100}, {0x401, 0xe1}, {0x81, 0x85}, {0x627, 0x7}, {0x400, 0x400}, {0x6}, {0x2, 0x3c}, {0xe, 0x6}, {0xffffffffffffffff, 0x9}, {0x80, 0x8}, {0x0, 0xff}, {0x7, 0x92b6}, {0x8a, 0x5}, {0x4, 0xb}, {0x7, 0x7}, {0x61c800}, {0x8000}, {0xfffffffffffffffe, 0x1}, {0xc, 0xff}, {0xfffffffffffffff8, 0x800}, {0x8, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x5}, {0x7ff, 0x3}, {0xffffffffffffffff, 0x1}, {0x8000000000000000, 0x8}, {0x2d, 0x7bf}, {0x8}, {0x8000, 0x8}, {0x0, 0x101}, {0xff, 0x4}, {0x1f7, 0x1728787}, {0xffffffff, 0x1ff}, {0x8, 0x7}, {0x44, 0x2}, {0x6, 0x4}, {0x4, 0x400}, {0x642}, {0x4, 0xe0000000000000}, {0x8, 0x400}, {0x5, 0x5}, {0x10000, 0xfffffffffffffff8}, {0x80, 0x9}, {0xfff, 0x7fff}, {0x4, 0xa902}, {0x6, 0xfff}, {0xffff, 0x9}, {0x9, 0xa}, {0x3, 0x1}, {0x3c3c, 0x3}, {0x8, 0xfffffffffffffff3}, {0x200, 0x7}, {0x3, 0x100000000}, {0x9, 0x5}, {0x3, 0x5}, {0x5, 0x9}, {0x2, 0x8000}, {0x1, 0x767}, {0x6, 0x8}, {0x3, 0x200}, {0x7f, 0x7}, {0x1, 0x80000001}, {0x7, 0x7}, {0x4, 0x2}, {0x800, 0x1}, {0x8639, 0x5}, {0x6b489cad, 0x958}, {0xd0c3, 0x3}, {0xfd, 0x9}, {0x0, 0x8}, {0xa, 0x5}, {0x10000, 0x6}, {0x81, 0x5}, {0x6, 0x8000000000000001}, {0xfffffffffffff328}, {0x8, 0xbcc1}, {0x9, 0x64e}, {0x2, 0x4}, {0x1, 0x5d01}, {0x1, 0x7fffffff}, {0x7a2, 0xfffffffffffffff8}, {0x3, 0x5}, {0xfffffffffffffeff, 0x3d27}, {0x3, 0xec}, {0x27}, {0x8, 0xffffffff}, {0x4, 0xfffffffffffffffd}, {0xc, 0x4}, {0x5, 0xfffffffffffffff8}, {0x10001, 0x40}, {0x7fff, 0x2}, {0x6, 0xe8c1}, {0x6, 0x2}, {0x3, 0x3f}, {0x5e, 0xfffffffffffffeff}, {0x5, 0x8000000000000000}, {0x6, 0x6}, {0x7}, {0x7fffffffffffffff, 0x5}, {0x8001, 0x40}, {0x3, 0x920}, {0x1, 0x8ad}, {0x45b568c2, 0x7}, {0x1, 0x80}, {0xffffffffffffff15, 0x800}, {0xffffffffffffff00, 0x100000000000}, {0x2, 0x7}, {0xec, 0xffffffffffffffff}, {0x0, 0xc3}, {0x9, 0x9140}, {0x4, 0xffffffffffffffc0}, {0x180000000000000}, {0x8, 0x100000000}, {0x6353, 0xffffffffffffffff}, {0x8, 0xdd30}, {0x8000000000000001, 0x7}, {0x6, 0x8}, {0x4, 0x8}, {0x4, 0x8}, {0xfffffffffffff1a3, 0x5}, {0xb, 0xff}, {0x80, 0x9}, {0x7, 0x4}, {0x4f6d, 0x3}, {0x8, 0x1}, {0x9, 0x3}, {0x389, 0xa2}, {0x0, 0xffffffffffffffe8}, {0x5, 0xfff}, {0x3860000000000, 0x7fffffffffffffff}, {0x7, 0x2}, {0xffffffff, 0x9}, {0x0, 0x438000000000000}, {0x0, 0xfffffffeffffffff}, {0x8, 0x6}, {0x3, 0x100}, {0x1, 0x9}, {0x200, 0xfffffffffffffff8}, {0x3}, {0x0, 0x6}, {0x8000000000000001, 0x4d9}, {0x7, 0x994}, {0x9}, {0x0, 0xf9}, {0xd8, 0x8}, {0x7fffffff, 0x1}, {0xba, 0x101}, {0xd, 0x3}, {0x2, 0x3}, {0x4, 0x36a}, {0x5, 0xfcc8}, {0x6, 0x8f}, {0x2, 0xc}, {0x2, 0x3642}, {0x71, 0x8}, {0x9, 0x8}, {0x8, 0x100000001}, {0xe92, 0x7fff}, {0xfffffffffffffe01}, {0xab0, 0x7}, {0x8, 0xa61f}, {0x9, 0x6}, {0x81, 0x75}, {0x5, 0xffff}, {0x2206, 0x7}, {0x2, 0x7}, {0xffffffffffffff80, 0x2}, {0x1, 0x100000000}, {0x3332, 0x3}, {0x8, 0x7}, {0x100000001, 0x9431}, {0x1, 0x3}, {0x8, 0x2}, {0xb5, 0x101}, {0x8, 0x6}, {0xffffffffffffffff, 0x3f}, {0x100000000, 0x9}, {0xb, 0x4}, {0x4, 0x1000}, {0x1, 0x5}, {0x6, 0x7}, {0x101, 0x5}, {0x3, 0x4}, {0x8, 0x6}, {0x5, 0x8001}, {0x9}, {0x1, 0x2d4}, {0x0, 0x2}, {0x0, 0x3}, {0x1000, 0x1}, {0x4, 0xafeb}, {0x6, 0x1}, {0x0, 0x1}, {0x0, 0xfff}, {0x61, 0xafa6}, {0x6, 0x71}, {0x4, 0x1}, {0x5, 0xfffffffffffff76e}, {0x9, 0x7fc9b1fa}, {0x278f, 0x4}, {0x6, 0x9}, {0x8, 0x8001}, {0x4, 0xc1}, {0xa2, 0x2}, {0xffffffff, 0x372d816c}, {0x80, 0x5}, {0x5, 0x8000000000000000}, {0x63ea6bb4, 0x8}, {0x7, 0x2}, {0x10001, 0x100000000}]}, &(0x7f000000d440)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x6}, &(0x7f000000d580)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xa}, &(0x7f000000d6c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f000000d700)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x1ff}, {0x8, 0x6}, {0x4, 0xe2bd}, {0xd9, 0x2}, {0x7, 0xfffffffffffffffc}, {0x4}, {0x7, 0xf}, {0x3, 0x2c7}, {0x5}, {0x9, 0xc}, {0x8, 0x7}, {0xfffffffffffffffd, 0xa7c0}, {0x4, 0x1}, {0x6, 0x2}, {0x401, 0x400}, {0x8, 0x6}, {0x2, 0xff3c}, {0x5, 0x1}, {0xbb, 0x5}, {0x2, 0x7}, {0x5, 0x8}, {0x7, 0xdf}, {0xffffffffffffffff, 0xffffffffffffffff}, {0x7, 0x8000000000000001}, {0x9, 0x98}, {0xcf, 0x2}, {0x4617}, {0x83, 0x2}, {0x1}, {0x18, 0x2}, {0x4, 0x9}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x80000000}, {0x5, 0x3}, {0x1094561a, 0x3}, {0x5, 0x9}, {0x100000001, 0x4}, {0x5829, 0x9}, {0x80000000, 0x8001}, {0x6, 0x9}, {0x3}, {0x6, 0xec}, {0xb, 0x9}, {0x1, 0x2}, {0x8001}, {0x2, 0xff}, {0x7, 0x9}, {0x100000001, 0x79}, {0x7, 0xc}, {0x3, 0x4}, {0x1, 0x5}, {0x6, 0xbd}, {0xc, 0x8}, {0x7, 0x6}, {0x7, 0x8001}, {0x7, 0x2}, {0x0, 0x49068970}, {0x7, 0x8001}, {0xec60, 0x3}, {0xffffffffffffffff, 0x6}, {0x7e, 0x2}, {0xa5, 0x7fff}, {0x8000000000000000, 0x9}, {0x5562, 0x868}, {0x0, 0x7}, {0xffffffff80000001, 0x1}, {0x6, 0xb319}, {0x5, 0x1}, {0x4, 0x7}, {0x1, 0x5}, {0xa82, 0x2800000000}, {0x9, 0x8000}, {0x6}, {0x3, 0x6}, {0x36, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x6, 0xfffffffffffffff8}, {0x1, 0xffff}, {0x5, 0x4}, {0x2af, 0xffff}, {0x7, 0x5}, {0xc7d1}, {0x4}, {0xd, 0x70c}, {0x5d38, 0x2}, {0x8, 0x187360000}, {0x8000}, {0x6, 0x81}, {0x81, 0x7}, {0x131c0afc, 0x3}, {0x1, 0xfffffffffffffff7}, {0xb4a, 0x200000000}, {0xe7, 0x40}, {0x4c626e34, 0xcef8}, {0x21, 0x3ff}, {0x4, 0xfffffffffffffffb}, {0xff, 0x100000000}, {0x6, 0x101}, {0x100000000, 0x9}, {0x8, 0x3}, {0x1, 0x2}, {0x400, 0x7}, {0xec5, 0x6}, {0x1000, 0x2}, {0x2, 0x240000000000}, {0x2, 0x8000000000000001}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x2}, {0x2, 0x8}, {0x5, 0x920}, {0x200, 0xa7b}, {0xff, 0xcc9}, {0x2, 0xffffffffffffffff}, {0x1, 0x10000}, {0x9, 0x3c9}, {0xab, 0x8}, {0x7, 0x1}, {0x0, 0xd6ec}, {0x3, 0x7}, {0x1560, 0x76b}, {0x7ff, 0xc}, {0x9, 0x7fff}, {0xffffffff, 0x6}, {0x2, 0x5}, {0x8000, 0x6}, {0x400}, {0x9, 0x9}, {0x6, 0xffffffffffffffff}, {0xf051, 0x1}, {0x8, 0xc8}, {0x8, 0x3}, {0xffffffffffffffff, 0x4}, {0xc6, 0x6}, {0x7, 0x9}, {0x4, 0x3}, {0x4f7f, 0xffffffffffff4ded}, {0x1000, 0x1}, {0x1b4a2000000000, 0x3}, {0x51964c52, 0x7}, {0x2, 0x6}, {0x40, 0x80000001}, {0x7, 0x5}, {0x0, 0x5}, {0x9, 0x7b9}, {0x8000000000000000, 0x8546}, {0x6, 0x97b7}, {0x6, 0x3}, {0x8, 0x40}, {0x1, 0x63}, {0x8, 0x2}, {0x5, 0x6}, {0x3, 0x3}, {0xfffffffffffffffd}, {0x81, 0x3ff}, {0x8000, 0xd}, {0xa296, 0xffffffffffffffff}, {0x3, 0x100000001}, {0x80000001, 0x7f}, {0x7fffffff, 0xfffffffffffffff2}, {0xffffffffffffffc0, 0x80000000}, {0x5a, 0x24000000}, {0x4a, 0x66}, {0xe2, 0x3}, {0x401, 0x951b}, {0xc, 0x5}, {0x3, 0x7}, {0x81, 0xd}, {0xfffffffffffffffc, 0x1}, {0x8, 0x5}, {0x36, 0x785}, {0x3, 0x4}, {0x7, 0x261}, {0x7, 0x3}, {0xfffffffffffffff7, 0x2}, {0x26, 0x804f}, {0x7, 0x9}, {0xcce2, 0xb}, {0xff, 0x1}, {0x8, 0x400}, {0xfff, 0xffffffff00000000}, {0x2}, {0xfff, 0x2}, {0x7fffffff, 0x20}, {0x6, 0x2fabf0a9}, {0x0, 0x8ff}, {0x7, 0x7ec}, {0x3, 0x9}, {0x421f, 0x4}, {0x3b, 0x695}, {0x8, 0x1}, {0x0, 0x40}, {0xc, 0x9}, {0x5, 0x3}, {0x7a0a, 0x80}, {0x7fff, 0x3}, {0xfffffffffffffff8, 0x1}, {0x81, 0x6}, {0x3, 0x6}, {0xc3, 0x8}, {0x7, 0x7}, {0x7fffffffffffffff, 0x4}, {0xfffffffffffffff1, 0x8}, {0x3, 0x6}, {0x2, 0x5}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0xffffffffffffffff}, {0x6, 0xe}, {0xfffffffffffffff7, 0x2}, {0x9, 0xffffffffffffff81}, {0x5, 0x8000000000000001}, {0x4}, {0xcbf, 0x7}, {0x2, 0x8001}, {0x8, 0x5b36}, {0x1, 0x6}, {0x7, 0x401}, {0xfddf, 0x7fffffff}, {0x7fffffffffffffff, 0xf}, {0x3, 0x9}, {0x4a, 0xffffffffffffffff}, {0x23d, 0x100}, {0x6, 0x3c7}, {0x8, 0x8c}, {0x5, 0x3}, {0x7, 0x7}, {0x6b3d, 0x2}, {0x4, 0xfc}, {0x5, 0x6}, {0x0, 0x1}, {0x4, 0x10000}, {0x3, 0xffffffffffffff54}, {0x3, 0x3}, {0x2, 0x81}, {0x4, 0x3c9}, {0x5, 0x1}, {0x1000000000, 0x4f6}, {0x100, 0x7}, {0x2, 0x7}, {0x8000, 0x4}, {0x4, 0x4}, {0xfff, 0x8}, {0x6, 0xffffffffffffffff}, {0x3, 0x5}, {0x2, 0x4}, {0x9, 0x9}, {0xcbe8, 0x5}, {0x4, 0x7}, {0x61, 0x8}, {0x1, 0xfe}, {0x6, 0xfffffffffffffff9}, {0xfff, 0x6}]}, &(0x7f000000e740)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f000000e780)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f000000e800)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x9}, &(0x7f000000e940)=@uuid={{0x4f32494e, 0x5, 0x10, 0xa111f76937ec11f4}}, &(0x7f000000e980)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f000000e9c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f000000ea00)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f000000ea40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f000000ea80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f000000eac0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f000000eb00)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f000000eb80)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f000000ec00)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000002}}, &(0x7f000000ec40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f000000ec80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000001}, [{0x3, 0x2}, {0x20000000000, 0x5}, {0x8, 0xfff}, {0x8, 0x1}, {0x1, 0x9}, {0x2, 0x10001}, {0x5, 0x6}, {0x4, 0x5}, {0x4, 0x73e}, {0x7, 0xc5}, {0x5d62, 0x5}, {0x8, 0x9}, {0x35d7, 0x5}, {0x0, 0x4}, {0x9, 0x4}, {0xf6af, 0xdf}, {0x3, 0x9}, {0x9, 0x1}, {0xfc5b}, {0x5, 0x7}, {0x3, 0xd32}, {0x5, 0x342}, {0x5, 0x3a}, {0x6, 0x89a}, {0x6, 0x4}, {0x9, 0x6}, {0x3ff, 0x229e}, {0x0, 0xe581}, {0xeb9, 0xfffffffffffffffc}, {0x5, 0x5}, {0x9, 0x6}, {0x6, 0x3}, {0x3, 0x80}, {0x80, 0x1}, {0x9, 0x2}, {0x80, 0x8}, {0x1, 0xffffffffffff26d1}, {0x0, 0x7}, {0x5, 0x100}, {0x7, 0x80}, {0x2, 0x9}, {0x7, 0x5}, {0x4, 0x4}, {0x7fffffffffffffff, 0x7fffffffffffffff}, {0xc2d8, 0x8139}, {0xfffffffffffffcc7, 0x1010000000}, {0xffffffffffffffff, 0x9}, {0x1, 0xfffffffffffff950}, {0x8000000000000001, 0x6}, {0x401, 0x2f5}, {0x5, 0xffffffffffffffff}, {0x1, 0x8}, {0x21, 0xb8}, {0x8, 0x8cfd}, {0x2, 0x5}, {0x5, 0x40}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0xee}, {0x6, 0xffffffff}, {0x3, 0x99}, {0xe8, 0xc}, {0x2, 0x6}, {0x1, 0x3}, {0x9, 0x95e3}, {0x8, 0x2}, {0x7fff, 0x397d7053}, {0x0, 0x4}, {0x3, 0x81}, {0x9, 0x1ff}, {0xfffffffffffffff7, 0x1}, {0x9688, 0x7}, {0xd3, 0x8}, {0x8, 0xf}, {0x1, 0x4}, {0x1, 0x20080}, {0x200, 0x4}, {0xfaa, 0x5}, {0x9, 0x278}, {0xad29, 0x6d7}, {0x8, 0x9}, {0xfffffffffffffff4, 0x3}, {0x9, 0x281}, {0x7a8, 0x200}, {0x1000, 0x3ad}, {0x7, 0x8000000000000000}, {0x3, 0x8d}, {0x1ff, 0x1}, {0x8, 0x81}, {0x6, 0x7fffffffffffffff}, {0x7, 0x3}, {0x80000001, 0x48fb}, {0x2}, {0x80000001, 0x8}, {0x1, 0x2}, {0x7, 0x3}, {0x4, 0xfd}, {0x9, 0xdecc}, {0x9, 0x9}, {0x43}, {0x625, 0x7ff}, {0x9, 0x2}, {0xab3, 0xe56}, {0x1, 0x9}, {0x2, 0x1}, {0xffff, 0x3}, {0x9, 0x401}, {0x800, 0x7}, {0xa16, 0x1}, {0x6, 0x7}, {0x100000000, 0x6}, {0xd, 0x1}, {0xd, 0x3e}, {0x6, 0x6}, {0x3, 0x5}, {0x664, 0x10000}, {0x9}, {0x7, 0x7fff}, {0x2, 0x8}, {0x72de, 0xb}, {0x5, 0x100000001}, {0x3, 0xfff}, {0xd4, 0x6}, {0x0, 0x8}, {0x6, 0x4}, {0x6, 0x2}, {0xffffffffffff8001, 0x4}, {0xff, 0xfffffffffffffff7}, {0x8000000000000000, 0x2}, {0x3, 0x79008256}, {0x5, 0x5}, {0x5, 0xffffffff}, {0x1, 0x2}, {0x9, 0x81}, {0x3, 0x3}, {0xfff0000000000000, 0x400}, {0x4, 0x1}, {0xbe, 0x6}, {0xab, 0x5}, {0x5, 0xa9d1}, {0x2, 0x8}, {0x3e3, 0x2}, {0x8, 0x1d}, {0x7, 0x52b}, {0x7fffffffffffffff, 0x6}, {0xffffffff, 0x3}, {0x9d7, 0x6}, {0x5, 0x5}, {0x2, 0xe}, {0x0, 0x5}, {0x1, 0x7}, {0x35c6, 0x4}, {0xffffffffffffff7f, 0x7fff}, {0xe, 0x200}, {0x3, 0x1}, {0x8, 0x6}, {0x0, 0x3}, {0x8000000000000000, 0x3}, {0x3, 0x3}, {0x7, 0x2}, {}, {0x6, 0x1}, {0x9, 0x81}, {0x0, 0x1}, {0x9, 0xcb6}, {0x7f, 0x7}, {0x9, 0x7f}, {0x800}, {0x4, 0x1}, {0x4, 0x9c}, {0xb32, 0x7fffffff}, {0x5, 0x179}, {0x7, 0x1}, {0x10, 0x1}, {0x6, 0x80000001}, {0x1, 0x47b4726f}, {0x5, 0x3}, {0x6f1, 0x4}, {0x2, 0x6}, {0x4b, 0xfffffffffffffff7}, {0x1, 0xb9}, {0x9, 0x401}, {0x600000000000, 0x7fff}, {0x0, 0x7fffffff}, {0x8000000000000001, 0x2}, {0x8000000000000000, 0x1}, {0x0, 0x800}, {0x81, 0x8}, {0xcc}, {0x0, 0xb973}, {0x3, 0x8}, {0x32, 0x5}, {0x1, 0x4}, {0x5, 0x6}, {0x8, 0x3}, {0x7, 0x80000000}, {0x81, 0x1000}, {0xfffffffffffffffb, 0x7}, {0x80000000, 0x3}, {0x5787, 0x3}, {0x8, 0x3}, {0x9, 0x5}, {0x8000000000000001, 0x2b}, {0x0, 0x7}, {0x7ff, 0x8}, {0x3, 0xa25}, {0x3, 0xffffffff}, {0x4, 0xff}, {0x1ad, 0x64}, {0x80000001}, {0x200, 0x80000000}, {0x8000000000000000, 0x101}, {0xfffffffffffffffa, 0x80}, {0x6, 0x1400000000000}, {0xd24a, 0x3}, {0xf1e7, 0xffffffff}, {0x8, 0x3}, {0x401, 0xd5}, {0x5, 0x3}, {0x9}, {0xed, 0x5}, {0x7, 0x7}, {0x6, 0x9}, {0x7, 0x6}, {0x401, 0x3f93}, {0x2, 0x6}, {0x85}, {0x8, 0x5}, {0x2eb}, {0x4, 0x4}, {0x1, 0x1}, {0x20, 0x7}, {0x100000000, 0x5}, {0x4, 0x4}, {0x80000000, 0x1}, {0x40, 0xa}, {0x0, 0xfe9}, {0x5, 0x3}, {0xd8, 0x6}, {0x1c, 0xfffffffffffff555}, {0x800, 0x5}, {0x6, 0x736}, {0xe0, 0x12}, {0x2, 0x8001}, {0x2}, {0x6, 0xe9}, {0x4, 0x6}, {0xe255, 0x1}, {0x9, 0x1}, {0x7, 0x3}, {0x6, 0x6}, {0xe, 0xeb5}, {0x1}, {0x8001, 0x1}, {0x457, 0x4}]}, &(0x7f000000fcc0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f000000fd00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f000000fd40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x140000000}, {}, 0x1}, &(0x7f000000fe80)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f000000fec0)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f000000ff00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f000000ff40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f000000ff80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f000000ffc0)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x2}, &(0x7f0000010100)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000010140)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x4}, &(0x7f0000010280)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f00000102c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000010300)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000010340)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000010380)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f00000103c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000010400)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x8}, &(0x7f0000010540)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f00000105c0)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000010640)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}], 0x32})
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r5, 0x40786e88, &(0x7f0000010bc0)={{&(0x7f0000010880)=[{0x0, 0xfffffffffffffffa, 0x8, {0x6, 0xadac106}, 0x2, 0x100000000, 0x4}, {0x800, 0x8, 0x6, {0x0, 0x3}, 0x0, 0x8, 0x100}, {0x2, 0xc, 0x293, {0x3, 0x1}, 0x9, 0x8, 0xffffffff}, {0x0, 0x8c718e3, 0x4dc7, {0x7}, 0x1, 0x3ff, 0x101}, {0x4, 0x8000000000000000, 0x7, {0x7, 0x9}, 0x203, 0x81, 0xa}, {0x9604, 0x8, 0x100, {0xaa52, 0x9}, 0x3d9a6ad9, 0xebcf, 0x1}, {0x1, 0xd, 0x1, {0x5, 0x9}, 0x4, 0x5, 0xd}], 0x7, 0x40, 0x8, 0x5}, {&(0x7f0000010a40)=[{0x2, 0x8000000000000000}], 0x1, 0x10, 0x74c, 0x337b}, {&(0x7f0000010a80)=[0x3], 0x1, 0x8, 0xb, 0x8}, {&(0x7f0000010ac0)=[{0x2, 0x9, 0x9ff, 0x1, 0xef}, {0x0, 0x7740, 0x7, 0x1c6, 0x101}, {0x3, 0x6, 0x4, 0x0, 0x4}, {0x9, 0x8, 0x4, 0x6, 0x9}], 0x4, 0x28, 0x5f, 0x6}, {&(0x7f0000010b80)=[0x1, 0x6, 0x6, 0x8001], 0x4, 0x8, 0x2, 0x9fa4}})
writev(r0, &(0x7f0000010c80)=[{&(0x7f0000010c40)}], 0x1)
ppoll(&(0x7f0000010cc0)=[{r5}, {0xffffffffffffffff, 0x80}, {r5, 0x8000}, {r1, 0x60}, {r6, 0x502e}, {r6, 0x400}, {r0, 0x1346}, {r5, 0x149}, {r0, 0x600}], 0x9, &(0x7f0000010d40)={0x77359400}, &(0x7f0000010d80)={[0x800]}, 0x8)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000010dc0)={0x5, 0xaf7, 0xffff})
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000010e00), 0x410e81, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000010f40)={&(0x7f0000010e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000010f00)={&(0x7f0000010e80)={0x70, 0x1405, 0x200, 0x70bd2d, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000}, 0x44)
ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000010f80)={0x3, 0x9b6, 0x2, 0x2641, 0x5, 0x2})
r9 = syz_open_dev$mouse(&(0x7f0000010fc0), 0x80, 0x400000)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000011000)=0x9, 0x4)

6.960283906s ago: executing program 2 (id=34):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2)
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r2 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="34000000020901010000000000000000000000000900010073797a300000270729ba32e7c18089620123f700000c0004800800014000000003080003400000000c"], 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x84)
mount$overlay(0x0, &(0x7f0000000180)='./bus/file0\x00', 0x0, 0x4, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(r2, &(0x7f0000000340)='./file0\x00', 0x73)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
socket$inet6(0xa, 0x802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00')
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000000c0)={0x1000, 0x1})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x2)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"})
rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.541035539s ago: executing program 1 (id=45):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl(r3, 0xc4c85513, &(0x7f0000000200))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd70000000000004000000080018000bac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4)

6.478312396s ago: executing program 0 (id=47):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x13, r0, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x7b}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket(0x10, 0xa, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 32)
connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r6, &(0x7f0000000500)={'#! ', './file0'}, 0xb) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) (async)
writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000100)="f2", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64)
close_range(r5, r6, 0x0) (rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064e96d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x8000)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) (async)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x201, @mcast1, 0x5}, 0x1c)

5.50069642s ago: executing program 0 (id=51):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0x3)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0x9, 0x401, 0x1, 0x3, 0x3, 0xd49, 0xa7}, 0x1c)
r3 = socket$inet6(0xa, 0x4, 0x80000000)
r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x5, 0x44101)
ioctl$DVB_DVR_DMX_REQBUFS(r4, 0xc0086f3c, &(0x7f0000000180)={0xf6fd, 0x4})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macsec0\x00'})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000200)={0x43, 0xfffffffffffffffe, 0x648, 0x9, 0x0, 0x1, "f7097536d25156563e2e62b947e776fb", 0x23, 0x4, 0x6, 0x5, 0xc, 0x88, 0x4})
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000240)={"81a20d90", 0xda, 0x10, 0x6, 0x4, 0x0, "50b0ff1bff5b6730dea39d922755a5", "128f10cc", "a8d4ce53", "cdf8675e", ["5c6bc42f460f846846dd43d9", "6b903399cb572d884b099dc7", "9ed603adf87bf78330022a7a", "87ca9a90c39d0a90358f5726"]})
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1fc, r5, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x2}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x2, 0x8000}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x39}]}, @NL80211_ATTR_IE={0xcf, 0x2a, [@tim={0x5, 0x91, {0x2b, 0xf1, 0x9, "da0a5f09b1588839f5ceb1dec69010f847b116a86a290251d0e393b38efbdf197546b674f512dbeebd17d468c485c8efe9308f898ad5b49e8b124a8c5808215270aac5d0c3cce86a882e0b75660f9f1413d8361f7624f21a00ea05419e1671040df216d965213db1b53cc46e7d2009ef19f7bf24ec59125975374a4f9b5b3a9b64e2faabbb518b0b998e54aff0a7"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mic={0x8c, 0x18, {0xae4, "c41b6293e0c0", @long="ed437911787256460ff9475395651f99"}}, @peer_mgmt={0x75, 0x14, {0x1, 0x4, @void, @void, @val="f18546311b2aef46aec5d7b49fc0ca73"}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x427}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xaf, 0x2a, [@dsss={0x3, 0x1, 0xad}, @random_vendor={0xdd, 0xa6, "8c00583971370a515af23853954a4279b99b421f8d02df3746ce210b1615d600cb23a200703516bc1d51c7da3c643d24308fc350f4bb751ba9c561b9f4a00bc98df109fb6ad39d1a151805cd533a73a7b25bb4efbbff883e83144275d5650bce14883adc9c29e71e92234e8231c8a9df313dc6a9bc61d9ebf4310a339d486d424c7330ba16c5b88b4b151a1ba293b514cba24a20cd29d8ee9511beca051e8848bcfe82df6d3b"}]}, @NL80211_ATTR_IE={0x13, 0x2a, [@supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x0, 0x1}, {0x9}, {0x9}, {0x1b}, {0x5, 0x1}, {0x1, 0x1}]}, @chsw_timing={0x68, 0x4, {0xb, 0x6}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1fc}}, 0x4004050)
bind$netlink(0xffffffffffffffff, &(0x7f0000000600)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc)
getsockopt$netlink(r4, 0x10e, 0x6, &(0x7f0000000640)=""/62, &(0x7f0000000680)=0x3e)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/custom1\x00', 0xc02, 0x0)
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x6a, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x72, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001f00)={0x9, 0x0, [{0xeeee8000, 0xed, &(0x7f0000000a40)=""/237}, {0x2, 0x12, &(0x7f0000000b40)=""/18}, {0xeeef0000, 0xdc, &(0x7f0000000b80)=""/220}, {0xffffffff, 0x1000, &(0x7f0000000c80)=""/4096}, {0xb000, 0x56, &(0x7f0000001c80)=""/86}, {0xfffbe000, 0x4f, &(0x7f0000001d00)=""/79}, {0x0, 0x6e, &(0x7f0000001d80)=""/110}, {0x2, 0x73, &(0x7f0000001e00)=""/115}, {0x41000, 0x60, &(0x7f0000001e80)=""/96}]})
r8 = timerfd_create(0x8, 0x0)
ioctl$XFS_IOC_DIOINFO(r8, 0x800c581e, &(0x7f0000002040))
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
connect$can_bcm(r8, &(0x7f0000002080), 0x10)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ppoll(&(0x7f00000020c0)=[{r1, 0x8407}, {r1, 0x4}, {r0, 0x60}, {r0, 0x103}, {r1, 0x430}, {r9}, {0xffffffffffffffff, 0x1004}, {r0, 0x1}], 0x8, &(0x7f0000002100), &(0x7f0000002140), 0x8)
userfaultfd(0x0)

5.500095131s ago: executing program 0 (id=52):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@delchain={0x49c, 0x65, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xe}, {0xe, 0x8}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x464, 0x2, [@TCA_CGROUP_POLICE={0x460, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x3, 0x0, 0x1, {0x4e, 0x2, 0x6, 0x80, 0x6, 0x1}, {0x8, 0x2, 0xfa, 0xd6a7, 0x9, 0x401}, 0xfff, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x1, 0x2, 0x5, 0xffff, 0x8, 0x7ff, 0x2, 0x0, 0x3ff, 0xe2, 0x7, 0x2, 0x0, 0x8, 0x1, 0x0, 0x6, 0xda, 0xc5, 0xf, 0x10000, 0xffff, 0x6, 0x3, 0x4, 0x7, 0x10000, 0x9, 0x1, 0x7, 0x5, 0xb, 0x3a, 0x400, 0x5, 0x4, 0x0, 0x7, 0x8, 0x7fff, 0x0, 0x8000, 0x0, 0x2, 0x1, 0x8, 0x6, 0x7, 0x2, 0x7, 0x7, 0xffff159e, 0x2, 0x7, 0x200, 0x0, 0x1, 0x9, 0x81, 0x5, 0x7fff, 0x200, 0x1000006, 0x3652, 0x1, 0x5, 0xffff, 0xc33, 0x1f0, 0x7, 0x7fff, 0x81, 0x8, 0x6, 0x4, 0x5, 0x5, 0x2, 0x183, 0x6, 0x4, 0x6, 0x5, 0x1, 0x7ff, 0x9, 0x7fffffff, 0x25, 0x4, 0x7ff, 0x7, 0x3, 0x8, 0x6, 0x3, 0x10000, 0xb5d0, 0x10001, 0x4, 0x1, 0x42, 0x403, 0x314, 0x1800000, 0x7, 0x48, 0xffffffa8, 0xfffffff0, 0x2, 0x5, 0x9, 0x0, 0x7fff, 0x1c0, 0x5, 0x7, 0x0, 0x3, 0x1, 0x10001, 0x2, 0x644, 0x6, 0xfffffffe, 0x3ff, 0x7, 0xffffffff, 0xfff, 0xb, 0x101, 0xfffff000, 0x155, 0x0, 0xfffffffe, 0x8, 0xc1, 0xfffffffd, 0x1, 0x401, 0x2b89, 0xea, 0x100, 0x1000, 0x9, 0x0, 0x400, 0x3, 0xa, 0x7, 0x5, 0xa, 0x2, 0x1, 0xff, 0x2, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x2, 0xb89, 0x10, 0x70cf, 0xf, 0x9, 0x4, 0x2, 0x40, 0x0, 0x533, 0x1ef, 0x4, 0xef, 0xee, 0x2, 0x9, 0x1, 0xfffffffe, 0x5, 0x3, 0x0, 0x9, 0x1, 0x4, 0x22, 0xff, 0x80000000, 0x9, 0x8, 0x2, 0x3, 0x5, 0x7, 0x6, 0x1cfc8, 0x80000001, 0x1fc3, 0x387d, 0x2, 0x0, 0x9, 0x5, 0x5f, 0x10001, 0x4, 0x1000, 0x400, 0xe, 0x6, 0xd6, 0xd, 0x6, 0x4, 0x80000005, 0x9, 0x100, 0xe, 0x0, 0x80000000, 0x1, 0x100005, 0x3ff, 0x23, 0x6, 0xfffffffa, 0x40, 0x6, 0x6, 0x4, 0x1, 0x7, 0x80000001, 0x3, 0x9, 0x17, 0x4, 0xb, 0x9, 0x1, 0x40, 0x3, 0x4, 0x1, 0xa, 0x70, 0x5, 0x1000, 0x80000001, 0xd3, 0x4a98, 0x6, 0x4, 0x4]}]}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x100040, 0x0)
ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f00000000c0))
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
r4 = socket(0xa, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e08091b0c"], 0xb)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000001640)=@svm={0x10b, 0x1, 0x1080, {0xd000, 0x3}, {"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"}})
fallocate(r5, 0x0, 0x0, 0x1000f4)
sendfile(r5, r5, 0x0, 0x40000000800)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
write(r7, &(0x7f00000001c0)='0', 0x1)
sendmsg$inet_sctp(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)='1', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r6], 0x18, 0x40810}, 0x40448c1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setns(0xc9, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]})
close_range(r8, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043e060c00c90001"], 0x9)

5.499625006s ago: executing program 2 (id=53):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
splice(r1, 0x0, r2, 0x0, 0x40000004, 0xb)
sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
r4 = syz_open_procfs(0x0, &(0x7f0000001380))
getdents(r4, &(0x7f0000002000)=""/4096, 0x1000)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020))
r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x11)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl(r6, 0x8914, &(0x7f0000000100)="63616e3000000000000000000000000001")

5.128507429s ago: executing program 2 (id=56):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) (async)
r4 = accept$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e)
recvfrom$unix(r4, &(0x7f0000000440)=""/207, 0xcf, 0x0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
write(r1, &(0x7f0000000040)="995109a6b059eaf8ba998fd02686680d49c24376f548457c77", 0x19) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0)

5.103845206s ago: executing program 32 (id=56):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) (async)
r4 = accept$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e)
recvfrom$unix(r4, &(0x7f0000000440)=""/207, 0xcf, 0x0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
write(r1, &(0x7f0000000040)="995109a6b059eaf8ba998fd02686680d49c24376f548457c77", 0x19) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0)

4.809608806s ago: executing program 3 (id=61):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x7, 0x0) (async)
r1 = io_uring_setup(0x7, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1203, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
r3 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f00000007c0)={0x1, 0x1, 0x0, &(0x7f0000000740)=[{0x0}], 0x0}, 0x20) (async)
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f00000007c0)={0x1, 0x1, 0x0, &(0x7f0000000740)=[{0x0}], 0x0}, 0x20)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u16=&(0x7f0000000080)=0xa65}})
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000740)={{}, "a4f6deb18ec7355455378cc0190fc6685dd381633d85a0b28968958e3239764ccb43f739f9948bcbb7faeec63223ff24d82e58b7c568a410afde9585a669d8f4a0d0ae9cd8df4f2ef4336742f7cf16fb6133832b1edf80c5884b418ee8e03bed48a1a92f327a93ed00eac17547138461bfc64158ffb70b61803af40045d43a6398cd819524d7b7498888abbcc0be81cf2a973b426895daf4c42c9b26e21490038bbbe6d466d6e42bf26dc24aadb0e9721ce5e2ba280a414ea554e92cc99427f54ee651a877ddc66bbe1b7d86b6a88e0eed113fabb9113f37d26c307e77f2ab02c912e962df2d0633f8aaebbca48af23232224df531323aa340fc0fde9afece954b16942c946b5a3c5dc0b52799db6e69af6b4ea1e7e7ff63fd793d7b1fca18e424d3dc1f23ee1da3748d1a1bcb892292287a088ea13baddd3942db4c94beea7196cbce513fbcc44d8a3af002c7d8ae334a08cc1b9bd4caa6a5355910809fd4d5187953090f1c2db98fb531421aa2d4952d08c07b038f19ab6115bd7b7be9fccfe46d330768d0bb6d3348051f8bdb7ac1be3243f3b47a0ca4a85f71a6e855d27900a36689244104cf60b2da5ae6bb8416f684ae07b2e9a810e779e72441549aefc4a5ed7439903c081ec39bb8d9678a8f94a9d49e76b79c6620a412ea48de18c0e3367d1b1df160e7a4410c1da525a3eff59a0e5cef4523acc7c91819b7378f77416740caf13234a85393bc9282127aa8de3fd4af49932d3690efaf77fa73cb8b93ab559a8035368a113f8966fe12661b3021b428eb2a8e9fe3138a48e48310a1153edf898f2c0c41f15e67a3637ba1a33a905b2c1e2c0a625eea5a055b7cdf522928ba5be2d1281fdd31f67320470832a89add918eafceb7212443637b91eea0d82441ba108e5ad0a550dcef9e7b0dd4fd3d24f9700ce06b4cc9cdac8864cf1a916dce1cd304a901d80fa26975fe5034ac83cf8468a5068c1ba141c23b21a9cdb79fb3e18246d6a8faa8ee2e37c6b559b506fded2b45f2bd4213c3e08d14ca225d153ff9752e0125efcc60d3a9caae42571e79e6b1f8e624143f67ef3136282fabdb6f7532d471161a8a13c5c9a0aaab5c232268d53280d9fd3cbf8627aa07c98f2fe74c8c0ffeec520e7665208981b99dd2570facbf6c09f742be0059aa14302d19849355f15e864acfd02fd2d6b642c3633410bcc9cf4d3e013c02a23110edb9cfbdef97796867221311f3e0c9e68ebe78caa142e23525991bad163d382b2c0585ba017fab5242443b3f0eed9e24171ae0b3e3f5bd6c9413809d70ad89eda49fcc8f63b5345a6ba63dcb948436971a235e886af19daa4e37312023094ad369ae008cdea1955f96414de45b650fb6d6d5771bb6709bf238beb8246a1834959ac6e90d65bde7b3260548324fbc07d58954a109f47382d3aa84607248287b43aee6bda79d27b5c747d7ee994daab64c1fb35ae2215edae5589001ae551963906e514a985bf9113b9e9c98f599edb13a9c7363ce5d0329761f9165f8bf44384a64f01aee74010ca7104a035f6425fc9909cb3c7574d8799e255062e88766614df8aa032d2642f07222e0fa93bf151cd9ef2c8e7e0683c5b0f957d28b0c66ac54793914124ad7786c47652282ac28a4545b4ebaada52c0e4b3556ce842492fd3f3a56f96a420f02ff5df27a2400eb4f2c2734fbf8ad90c097b855004227116489c142deb96b3c19bd88802da5416a117c7c038b911b8d6f4c80bb85b05fed54af8ffb17312c45cb6c98889aa7c3e5250893d7ebe37d729d52fff0d2f4bbb38c2267f623bddcf81c83abb926cae74779b0f032b54210432e42e3e818b1d56f548303bf673b65683583df017f30e61bcfbd46754f37c3a1ecce7eb1607983adb8d397b2b25c448b054e65ebf238a289f27aa18369009f6ce731bb50b2f2919a4e2b45e53ab1a7494a90b8af6328b128100daa1bcc6c0259c3ca6f5fa081ba691de5681f13da0b1682b20207ce37ab96e866f24b9023bf0a438264892322db563cd48175d24d03978b95960427fd56fa4940039d8a0a260cdf4f3d5e2e7dc631fc3ce6f7f1eb9027f828b9cc67f423f0f7f248390d80fb4d713f56a32e44e279963e8201be8d11c7e0b291bcfb939dfe116cc970aefb27e9b15f7f18250a554cd3c9a85f674f98b2cd08f83dbc6778f24ba646c57f8eaf7aa36bbbdcda49d3311be25ef0bf94e3a5a2c48430cd7417e4262a597bda1dac005a6d429725e9481ab169833082b5f4ab5413d3c6e4b0358a82412838bba6d0c65eafd2c65e3a601ecda1615f2b072855342e09aaea009d47e76ddf9fc85c10822ea220ba5eb94115b87f5ff4b42866149462670754396e6ba4b958cced71de348ca14367008d7ce3e14d570c3a0524ccb154cd67e98748d8f0469fbdea47267d35b0e5f8edae64b84741ea07cab04d177e023038f2ee92e20bec687476f86e55d7f2808b57745bcf45702c5c4c585774bab9a47925da6c87cdf28c3caf63ba1f12150960401f259b3e4bc2c3daf00b29e90f52fa3d25f6a479fbfea45814df5949855ef980e378dd7c0ce9247febcac8372bebe8811bb4e5ae97e6e981da2253f2238009e12d616b94b52571ad0663776df2f6dc3fe8cf6e2244416f13002892fd5403a6ba9f63c1adea384bf6989fec4a0a69f9904582d9cebdd416a13b4b56981817225cbf6ff2cbeb2c46db2dc446060da3a0ea44d511d3fef4ae2b78c953e21313c780d8e7263f3b6b0b2932fde382f18d359fa2176f5e83d0c10dd9720bfd6da47f5a7b219704352bda6f9290700dee6049219ed675c6f15db774cd0910e2ed61d0b9ad57afc8740b7b4f810ef107d9f94ec3020b433637bcbd7f0b629af71e42c79b0131a95c4f675f8ab2fa45b5a81a305e97196fdb42e84cce01fdea79276d81770357f3e15ff2f08fe83cd7810352c6eda3d470cfc445f6a47a393c078ece1a2c64954b233199a47793a2020584df7b9d7f2b73d75e25d36cd5f014d7ec0b1ce79435a238cba4a8beabb3f59bf691bf0e3392af68f4afb8d9a513425705e6434364779dbc2cae93ab85e1ed1b1c49e49773a3961c24670764882e1fb348a5c989335e867a572e77631f231e66b6d9f877b6626a67677427b1f9f85c9255b7eb7000c0e410bfe2fcc8352fa73a07178e80f8c20905e3d5f3368015be132ea8be0263b48ff425e511dfdbe19e7249f5b60a2719fb692140f8ed2db69a934b41fadc3fe6ec908d44f7c2a3d714efc4862c4ee4d921effc0d52a6b12f30f59aa107dec25061b0c649b3fc1b197becaa5f5f6f0ae663df49d469e8fe3e14c9028fa93a487219e1fc20914ffceff3f5ac07f4f599ec633daf6d480731b2b5180fe4209ac31a69be992100c477ffda2329e74842de39ae9d366ffcbd9d05fd7bf9f012a386100ebb51182ea3a36e4b6d43ee685ff8492635a216306ecdd8d4119b262a11f9df374b4195150ec7009b11aa25e4b259a181cbbbc641788cb221726a5d9498db781054a0b36bc050e64366fb4f4831f2da8ea2e5d68438148cc7bf512a734ef0ea8df4322ab121fbc61bccb7ce9303d874878de9d41189a92ec4b18611768ef14e5837d52c6a2bea11398c2080e09df3ae446f614e52d034afd5819344e0a7707bdd571bd67ce436223d1e56e3c3a6b53716520e7dbe80062cfb694e7b180cc6baafd7ebc523eaf7ef45edc35052ac458ca9519eb99f9cb196e6123774a3f5264248b2a50ff8fb0276675e333f42b7b432f6aba6e6f002c162790191aa5f4c99d21b0d9027fee5f9748601cdbfddb577f7e0d20048bda9dcdf76d93c5e1bcdf4436d57cf468dc311d0de58f017c4a93d6cb696711502eafedcd7881dc60d79e7fbd94c6f6384ed2b814d1804296bc72a8ae00403588d11d3933e494d3f93ada99096bb5078820a1902a7e40836c1e7f18607b25b398e394f1a7a64718058c6615eeedebb613830acc7947a8a7f882cf15bb6c0acfdde632446a48f440cf0e05dd8bf04525d1788ffdbeadc9822c4d96a7a80c12d0f0dfdfaf5356cc715e6265b442c3c38205d9962a49f445e05864025c224d017e4b251a19182902ebd2d9293321c3696957b4373c686aa9864c387ce483244bff7b5a92b326c02003a1e050715e3bcf559e20b1b3d4f2360f1196933fcb164e1f910fd230d3e899077fa262890d8dcf39297b999d0d422e13053b5b957811dc4174ebf76c6e9ed3d10b187c4a72a50b772da7ae9d900006f6508ebb3959910bc6c2021f229fc470816ccf2d83946321d32fb317f1e008138b59e8bf7cfc539d180e750e2ee13430a3348bbc629d2484870475639ea2c24895532b168e329a9a5fdd9c4e3ce3afed71f1764a502af567317bd2f4a67aca0de8d3ee3baec7aa4dbd7952b14c69b3b070c70b4c4f86fb2ebde3008c315c1ed3b5b18be9ae2d215114aa906c726552555d493778f7efaf9fc820f9d63da1ea3110f5a2041d8a27e84e866b0f349471aef790c3303aca04d1a3cdcebcb6951c3e6c3e1d43d1e68f13ab4dae93817a69e9f79fee024e2d49d2a05e407ec69fb01d9e32440b3d1e27696932f49507fe20c9684257af70209262cbd135036de241c2c80c865baba52d136a8749bdc62da92abceb1a2bdcea32937bb521996792ac907e6cb43e9b90c477adbdcd810f6f83ce0538392cf6426947f5f44f920c047035acfdd85277dbf445e4a5b4633107249eb96ce1aad422f990d29ea054530e63e2843e642ef8506b3ae002890c288b1fadf723ae77351a7cb1d5de1af2ebcaaa372c9f3623bcbaacbec7a177f223e79326d94217a1d89c18e76497b56cd5ca1e0a4de0185d3453ea6f7dae533e3076a62af02efb8f901dcf4dc9c70658cdd26df3cb35376ae846ecd5c273ad6e001d519d8cde93c18695ba111974e3c8dd75c04a325b924a349b2eb81dd5685996ffa2abf0676b772d007780b12d7a30fd72a7b71590cf4c22946c91de1663e83a2e024564b85d07a9d77482b19b390d92c863a83c438e49f6f32852348b87527d502ba41010df4d4c195ffda129575a8e518d96d33083dea5082ebacce1ebabf09ad84140c56a12c52cd77b638c545203311e2aef48281af4752eb062d4bdd2e4278ee55f535bf7b36b724e6aa31a8afc20ae9af7dfe31b7398a794c05adc39d4100b5d7ba84ba8c0d14f33c34d1516a4f630388a0468a5d4733668b500d5e24075a79ffbc43a687839bb2beb409309b90a748efeee5aaa574a6b7cb72c8852c27192decad68176f1d375aab8d30fdeca2ee1074f18c841fea7f6cebbb9d1562e3fcb2d9379c48a29d42af6e907ab960b7120b391a27b78f144e8c6171c2caec56f119f57d8d10a062776106facd32a7d566c7e7371fc2eee38fb1fd0502eba87fca25b381a55cc7730c5d8a074fa5df22d7dc9e6541c0c5b7372c93095be6f58bf2af5e92ae003ff476aea9c01f5498e325da04dc72115c7f23041f2bd4a2a7fac6bcb06096405053718aa65847e156590c7fd521391e78877d32ffc382429ea8ffea3d3310cd96dece0ad890fecd84e5455a84b43fab374c51723e977b0461dd984e9a57baf3cc8ce040907656538f0b4683bce6fe332b8e374ab3e645cbb84c8a86bb29d659fb4d3fc415ad21f641d7cb8cf6e010a4e219e824d4c30d533c66d55ca5966ba90ee179f6b666126a7203c3a191dabc708ee1443a8954c45ec1ca19c20e29d220b96c092a28d2d74fa812362ecd48f43c940f2fd48940d0ae337dee3e94d1"})
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x46, 0x0, <r5=>r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x401, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x95a, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x88}}}, &(0x7f00000001c0))
ioctl$UBLK_U_CMD_GET_PARAMS(r5, 0x80207509, &(0x7f0000000280)={0x0, 0xffff, 0x70, &(0x7f0000000200)={0x70}}) (async)
ioctl$UBLK_U_CMD_GET_PARAMS(r5, 0x80207509, &(0x7f0000000280)={0x0, 0xffff, 0x70, &(0x7f0000000200)={0x70}})

4.809437735s ago: executing program 0 (id=62):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a80000000000150101000000000085000000560000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x5, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, 0x0, 0x0, 0x1, 0x1}}, {0x20000000000000, 0x537, 0x2b, 0x8000, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2)
ioctl(r0, 0x40104d05, &(0x7f0000000a00))

4.750638053s ago: executing program 0 (id=64):
syz_usb_connect$uac2(0x4, 0xf4, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x4d, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xff, 0x42, 0xc}, [@sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x6, [0x1]}, @extension_unit={0x8, 0x24, 0x9, 0x1, 0x7ff, 0x9, ')'}, @source_unit={0x8, 0x24, 0xa, 0x7f, 0x0, 0x0, 0x4, 0x1}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x403, 0x3, 0xa0, 0x8, 0x4, 0xb1, 0x9, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x1, [0x0]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x1, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xfa, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x89, 0x8, "9b"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xb2, 0x3, 0x1, 0x5, 0x6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x49, 0x9, 0x56, 0x3, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x82dc, 0x0, 0xef}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x2, "02", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x81, 0x3f, 0xc, 0x8}}}}}}}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/231)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0)
syz_usb_ep_read(r1, 0xf, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009a"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_ep_write(r3, 0x81, 0x0, 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x66, {0x66, 0x23, "d3e0f66aaffc8ba163d5f0e509686fc45740646cc96b5c2274748afb12fe8fcce501d4cf347763485a5ad0d4fde60759abe481764b51b08e037f0d6b209e31790f3bd65c16e9ab08e6ec505699e4c1ea98062dacb385170e1d7a6007c8b76c708dfe3025"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f0000000440)={0x44, &(0x7f00000008c0)={0x0, 0xb, 0x71, "109418f2c529fba0fd95551906c3f11ed17a6cddcef9e4ff2d3f414dff9c93c45c5447633d45cbe3cd8f308945a7e059957571c3a388db37fda15052622bf272d090ef5ba7d48974fd7f3f83d8b1a0014f2ab210ff6657a2443699ebc80db2f36d07eba1a2890d696cb4c082ee4f32ad23"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)=ANY=[@ANYBLOB="2058be5b5b320e"], &(0x7f0000000340)={0x20, 0x82, 0x3, "973ee4"}, &(0x7f0000000380)={0x20, 0x83, 0x2, "bf95"}, &(0x7f00000003c0)={0x20, 0x84, 0x4, "8d73fcf5"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "6ac4e5"}})
syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x2, "0c8a"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000640)={0x14, &(0x7f0000000540)={0x40, 0xe, 0x2, {0x2, 0x6}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0xb0, "8d9df2f9775b2a5ef47d80adc7e1770513ea167cce7dcfee1772ef73b84c5fc78e9e24fe8e18ac2df5ad913fe50cc887c3f9c1e6e78e312757245f9c8eb264b101878056140a3cd7edbe0e7a20ebffc348ea988e860ea35b9526b7e5451c577529be5359fe07cc2220ae41cfc70e043a6e63d1fa5ff66f70a1258122b3106eba6e18f8384dd8b2c61de8f5a7bd9158aa5637f7fde4bb0d1c2402625d83bf5714aed6d9bf862678cd3023c7b5dadb9df0"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}})
syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="3613040000009f158067eba01ef3afed5bd31834793f272f2b1f9c4094488734a8df64446f27bdfc2ab202ae1fffe7cee91e8a478691b9ab1853003f1297cf827bb1d28b302f4534aaf9d3717b2882138b38b95795c1d823b616c3b8134d2a8b03aa46a9fde6593e669fb5e07230549766ac9b2a"], 0x0, 0x0, 0x0, 0x0})

4.750498882s ago: executing program 1 (id=65):
syz_usb_connect(0x2, 0x24, &(0x7f0000001000)={{0x12, 0x1, 0x300, 0x47, 0x71, 0xe3, 0x40, 0xb48, 0x300a, 0xcbdd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xcb, 0x80, 0x7, "", [{{0x9, 0x4, 0xde, 0x5, 0x0, 0x85, 0x9, 0x48, 0x6}}]}}]}}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0})

4.660300194s ago: executing program 3 (id=66):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000500)={[{0x3d, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e2635a3c595eeeb8450ccff5e79a548b591d2724d899c1b59af65"}]})
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)

3.550457839s ago: executing program 1 (id=67):
syz_usb_connect(0x0, 0x24, &(0x7f0000001380)={{0x12, 0x1, 0x0, 0x83, 0x1b, 0xfe, 0x8, 0x4e2, 0x1412, 0x122a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x1, 0x50, 0x3, "", [{{0x9, 0x4, 0x11, 0xfd, 0x0, 0x2, 0x2, 0xff, 0x2}}]}}]}}, 0x0)

3.298347833s ago: executing program 4 (id=63):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x27, {0x27, 0x1, "687fa10a8d7ef50bc2ca17932662db51ce0786519a79145e4bcd38a22ef37debd53ccea602"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f00000000c0)={0x0, 0xf, 0x12d, {0x5, 0xf, 0x12d, 0x5, [@generic={0xff, 0x10, 0x3, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x3, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "b5ffe71bdeb0d846ef52ba7451dbe9d6"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0x75, 0x3, 0x46}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x0, 0x1, "fdd72c54", "41bbf9b8"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x2, 0x9, 0x1, 0x9, 0x4}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000580)={0x20, 0x0, 0x67, "61746910936abed428483b436b1c03fcb5e5bd74f56d37b6aa67480e3854bdb3707782824da1f3d90c64f1123b546cb87d252832764f0ee6e66e9002decc6f56bde10ce281907fd9b76af9b32abb25c00f48f4199fb88220b793502f766d489d86f5338c049a26"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x945e8b055f3127fe}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x1e0, 0x90, [0xfff0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x6d}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "9022"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "e2ca"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x1b5}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000c80)={0x40, 0x21, 0x1}})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0xa4db4c2b5c09f488}, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0)
syz_usb_connect$uac1(0x2, 0xb1, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x64, 0xa0, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x59b, 0x1b}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x404, 0x1, 0x8, 0x8, 0x6, 0xb5}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x35, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0xa24, 0x3e, 0x6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0x80, "4e1f", "8407"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x9, 0x1001}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x2, 0x2, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x80, 0x9, 0x38, {0x7, 0x25, 0x1, 0x4, 0x3, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x7, 0x7f, 0x2, {0x7, 0x25, 0x1, 0x8, 0x3, 0x8}}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x0, 0x8, 0xe, 0xff, 0x40}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1801}}]})
syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x2, "21b2"}, 0x0})

2.561003227s ago: executing program 0 (id=68):
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
write$char_usb(r1, 0x0, 0x0)
write$char_usb(r1, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x1c0000000000)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b19", @ANYRESHEX=r2, @ANYBLOB="c9a2a12b13f2caa8a1224ab4fc49b4cf4fcdc77fa806f99137665352f8771d458f7dc975b9ae36b6096c1654edd583d61fc68a476e5c81a13b88e88af9065bd02b46d1a68a43431f0a6a124954fb87e1670aa4804e048a80300d14924da10b785dbef28b5feca99e1ad7f537cb71"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d77e17208680630b326a010203010902240001000410000904"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)

2.390367219s ago: executing program 1 (id=69):
syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x10, 0x70, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x3}}}}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0})

2.330945591s ago: executing program 3 (id=70):
read$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00"], 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110014d07df40cc05507d4a0102030109022400027f1c210ffaf9c8070000000000000069f7e323eb176e2400000000a50722505ec2e8016a0800040935"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

1.26083708s ago: executing program 1 (id=71):
syz_usb_connect(0x0, 0x34, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"})
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x1c, 0x2, 0xeffe, 0x9, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"})
ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x800, 0x4, 0xb, 0xb4e3, 0x10000, 0xa4})
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x3e, 0x208604)
syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)

1.170719412s ago: executing program 3 (id=72):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x21, 0x57, 0xd1, 0x10, 0x547, 0x6801, 0xf370, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x24, 0x60, 0x8, "", [{{0x9, 0x4, 0x16, 0xef, 0x0, 0x92, 0xa2, 0xa3, 0x5}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfad, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xa, 0x7, 0x3, {0x7, 0x25, 0x1, 0xc, 0x7, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x2, 0x2, {0x7, 0x25, 0x1, 0x4, 0x7, 0x3df}}}}}}}}]}}, 0x0)

520.723814ms ago: executing program 1 (id=73):
syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41)
syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001300)=ANY=[@ANYBLOB="0007ebffffff"], 0x0, 0x0, 0x0, 0x0, 0x0})

59.727358ms ago: executing program 4 (id=74):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r2, &(0x7f0000000580)='7', 0x1)
read$char_usb(r2, &(0x7f0000000040)=""/134, 0x86)
syz_usb_control_io$uac3(r1, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

946.285µs ago: executing program 3 (id=75):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x20000000, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4010, r0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=76):
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg/0:0:0:0\x00', 0x101000, 0x0)
ioctl$BSG_IO(r3, 0x2285, &(0x7f00000002c0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0xb679, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, &(0x7f00000000c0)="f5f8fee3", 0x0, 0x7, 0x0, 0x0, 0x80000001})
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0x5}, @const={0x7ff, {0xfbfe, 0x8, 0x5, 0x81}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0)
close(r1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14346' (ED25519) to the list of known hosts.
[   30.677967][   T43] audit: type=1400 audit(1790166672.356:116): avc:  denied  { name_bind } for  pid=5645 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   31.995299][   T43] kauditd_printk_skb: 2 callbacks suppressed
[   31.995318][   T43] audit: type=1400 audit(1790166673.666:119): avc:  denied  { write } for  pid=5647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.033837][   T43] audit: type=1400 audit(1790166673.706:120): avc:  denied  { write } for  pid=5650 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.521868][   T43] audit: type=1400 audit(1790166674.196:121): avc:  denied  { write } for  pid=5653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.560944][   T43] audit: type=1400 audit(1790166674.236:122): avc:  denied  { write } for  pid=5656 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.710167][   T43] audit: type=1400 audit(1790166674.386:123): avc:  denied  { write } for  pid=5659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.747809][   T43] audit: type=1400 audit(1790166674.426:124): avc:  denied  { write } for  pid=5662 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.821654][   T43] audit: type=1400 audit(1790166674.496:125): avc:  denied  { write } for  pid=5665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.858876][   T43] audit: type=1400 audit(1790166674.536:126): avc:  denied  { write } for  pid=5668 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   32.897880][   T43] audit: type=1400 audit(1790166674.576:127): avc:  denied  { mounton } for  pid=5646 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   32.900052][   T43] audit: type=1400 audit(1790166674.576:128): avc:  denied  { mount } for  pid=5646 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   32.903663][ T5646] cgroup: Unknown subsys name 'net'
[   33.068953][ T5646] cgroup: Unknown subsys name 'cpuset'
[   33.071579][ T5646] cgroup: Unknown subsys name 'rlimit'
[   33.288124][ T5689] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   34.011234][ T5646] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.272910][   T43] kauditd_printk_skb: 32 callbacks suppressed
[   37.272922][   T43] audit: type=1400 audit(1790166678.946:161): avc:  denied  { execmem } for  pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   37.450022][   T43] audit: type=1400 audit(1790166679.126:162): avc:  denied  { create } for  pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.452285][   T43] audit: type=1400 audit(1790166679.126:163): avc:  denied  { read write } for  pid=5728 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.452324][   T43] audit: type=1400 audit(1790166679.126:164): avc:  denied  { open } for  pid=5728 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   37.456015][   T43] audit: type=1400 audit(1790166679.136:165): avc:  denied  { ioctl } for  pid=5728 comm="syz-executor" path="socket:[3520]" dev="sockfs" ino=3520 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   37.494875][ T5731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.495087][ T5731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.502046][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.502207][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.503873][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.504114][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.505960][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.506042][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.506718][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.507439][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.507670][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.515470][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.516701][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.517051][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.517611][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.517832][   T43] audit: type=1400 audit(1790166679.196:166): avc:  denied  { read } for  pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.518099][   T43] audit: type=1400 audit(1790166679.196:167): avc:  denied  { open } for  pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   37.518539][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.519270][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.520006][   T43] audit: type=1400 audit(1790166679.196:168): avc:  denied  { mounton } for  pid=5734 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   37.520387][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.522185][ T5731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.524232][ T5731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.524924][   T43] audit: type=1400 audit(1790166679.196:169): avc:  denied  { module_request } for  pid=5734 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   37.556161][   T43] audit: type=1400 audit(1790166679.236:170): avc:  denied  { sys_module } for  pid=5734 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   38.251432][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.251571][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.251670][ T5732] bridge_slave_0: entered allmulticast mode
[   38.253183][ T5732] bridge_slave_0: entered promiscuous mode
[   38.259291][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.259420][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.259516][ T5732] bridge_slave_1: entered allmulticast mode
[   38.261018][ T5732] bridge_slave_1: entered promiscuous mode
[   38.277977][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.278062][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.278349][ T5735] bridge_slave_0: entered allmulticast mode
[   38.279823][ T5735] bridge_slave_0: entered promiscuous mode
[   38.309346][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.309417][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.309494][ T5735] bridge_slave_1: entered allmulticast mode
[   38.310880][ T5735] bridge_slave_1: entered promiscuous mode
[   38.338442][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.338524][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.338772][ T5734] bridge_slave_0: entered allmulticast mode
[   38.340045][ T5734] bridge_slave_0: entered promiscuous mode
[   38.363373][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.363617][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.363744][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.363853][ T5734] bridge_slave_1: entered allmulticast mode
[   38.364870][ T5734] bridge_slave_1: entered promiscuous mode
[   38.369296][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.401682][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.410917][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.417438][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.419867][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.464403][ T5732] team0: Port device team_slave_0 added
[   38.488285][ T5734] team0: Port device team_slave_0 added
[   38.500546][ T5732] team0: Port device team_slave_1 added
[   38.511866][ T5734] team0: Port device team_slave_1 added
[   38.519487][ T5735] team0: Port device team_slave_0 added
[   38.520017][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.520026][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.520038][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.541788][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.541804][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.541824][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.551001][ T5735] team0: Port device team_slave_1 added
[   38.551400][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.551413][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.551433][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.551840][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.551879][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.551938][ T5728] bridge_slave_0: entered allmulticast mode
[   38.552660][ T5728] bridge_slave_0: entered promiscuous mode
[   38.559805][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.559820][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.559839][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.574643][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.574686][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.574741][ T5728] bridge_slave_1: entered allmulticast mode
[   38.575527][ T5728] bridge_slave_1: entered promiscuous mode
[   38.588363][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.588378][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.588399][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.610285][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.610296][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.610308][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.619433][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.621487][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.636967][ T5732] hsr_slave_0: entered promiscuous mode
[   38.637797][ T5732] hsr_slave_1: entered promiscuous mode
[   38.641425][ T5734] hsr_slave_0: entered promiscuous mode
[   38.642142][ T5734] hsr_slave_1: entered promiscuous mode
[   38.642457][ T5734] debugfs: 'hsr0' already exists in 'hsr'
[   38.642508][ T5734] Cannot create hsr debugfs directory
[   38.672202][ T5735] hsr_slave_0: entered promiscuous mode
[   38.672639][ T5735] hsr_slave_1: entered promiscuous mode
[   38.672930][ T5735] debugfs: 'hsr0' already exists in 'hsr'
[   38.672942][ T5735] Cannot create hsr debugfs directory
[   38.712458][ T5728] team0: Port device team_slave_0 added
[   38.724934][ T5728] team0: Port device team_slave_1 added
[   38.786878][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.786889][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.786900][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.787900][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.787909][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.787921][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.932933][ T5728] hsr_slave_0: entered promiscuous mode
[   38.933480][ T5728] hsr_slave_1: entered promiscuous mode
[   38.933802][ T5728] debugfs: 'hsr0' already exists in 'hsr'
[   38.933812][ T5728] Cannot create hsr debugfs directory
[   39.011790][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.017210][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.025231][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.029872][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.045481][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.051918][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.058699][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.061985][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.095700][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.099969][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.100524][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.104459][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.110227][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.114155][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.114821][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.121596][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.181253][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.184182][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.185177][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.187538][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.191256][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.198060][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.198511][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.201278][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.269703][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.271521][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.271924][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.273862][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.274270][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.279516][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.286811][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.287088][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.290710][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.323228][ T5732] 8021q: adding VLAN 0 to HW filter on device team0
[   39.332548][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.332627][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.351227][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.351405][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.378186][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.398108][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.421024][ T5734] 8021q: adding VLAN 0 to HW filter on device team0
[   39.423871][ T5735] 8021q: adding VLAN 0 to HW filter on device team0
[   39.437096][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.437185][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.439633][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.439714][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.445523][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.446199][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.456196][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.456302][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.461886][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.493604][ T5728] 8021q: adding VLAN 0 to HW filter on device team0
[   39.513229][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.513275][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.532681][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.532726][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.546892][ T5731] Bluetooth: hci1: command tx timeout
[   39.546897][ T5737] Bluetooth: hci3: command tx timeout
[   39.547318][ T5731] Bluetooth: hci2: command tx timeout
[   39.547452][ T5092] Bluetooth: hci0: command tx timeout
[   39.692342][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.720498][ T5732] veth0_vlan: entered promiscuous mode
[   39.729264][ T5732] veth1_vlan: entered promiscuous mode
[   39.745262][ T5732] veth0_macvtap: entered promiscuous mode
[   39.749562][ T5732] veth1_macvtap: entered promiscuous mode
[   39.759545][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.764753][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.768581][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.814772][ T5734] veth0_vlan: entered promiscuous mode
[   39.844670][ T5734] veth1_vlan: entered promiscuous mode
[   39.849589][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.855122][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.876414][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.878645][  T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.878657][  T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.906723][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.906736][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.910537][ T5734] veth0_macvtap: entered promiscuous mode
[   39.922338][ T5734] veth1_macvtap: entered promiscuous mode
[   39.930921][ T5735] veth0_vlan: entered promiscuous mode
[   39.949871][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.954850][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.955503][ T5728] veth0_vlan: entered promiscuous mode
[   39.958411][ T5735] veth1_vlan: entered promiscuous mode
[   39.958934][ T5732] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.965770][ T5728] veth1_vlan: entered promiscuous mode
[   39.988709][ T5807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.988748][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.008536][ T5735] veth0_macvtap: entered promiscuous mode
[   40.016248][ T5807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.016274][ T5807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.016293][ T5807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.016311][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.017391][ T5728] veth0_macvtap: entered promiscuous mode
[   40.023058][ T5728] veth1_macvtap: entered promiscuous mode
[   40.032767][ T5735] veth1_macvtap: entered promiscuous mode
[   40.047602][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.049733][  T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.049745][  T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.072521][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.075400][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.075418][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.083410][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.091465][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.116368][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.116398][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.116416][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.116434][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.153032][ T5880] SELinux: syz.1.5 (5880) wrote to user. This is no longer supported.
[   40.155759][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.155785][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.155804][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.155821][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.155839][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.211133][  T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.211147][  T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.232266][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.232279][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.261225][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.261241][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.262674][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.262688][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.324232][ T5893] =======================================================
[   40.324232][ T5893] WARNING: The mand mount option has been deprecated and
[   40.324232][ T5893]          and is ignored by this kernel. Remove the mand
[   40.324232][ T5893]          option from the mount to silence this warning.
[   40.324232][ T5893] =======================================================
[   40.416466][ T5905] kAFS: unable to lookup cell '(,c¾Ì'
[   40.422995][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'.
[   40.426808][ T1075] IPVS: starting estimator thread 0...
[   40.517773][ T5908] IPVS: using max 44 ests per chain, 105600 per kthread
[   40.613217][ T5923] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   40.613339][ T5923] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare
[   40.621971][ T5923] CIFS: VFS: Error connecting to socket. Aborting operation.
[   40.622014][ T5923] CIFS: VFS: cifs_mount failed w/return code = -111
[   40.745844][ T5929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   40.793074][ T5934] random: crng reseeded on system resumption
[   40.806198][ T5934] Restarting kernel threads ...
[   40.806722][ T5934] Done restarting kernel threads.
[   40.820257][ T5937] kAFS: unable to lookup cell '(,c¾Ì'
[   40.823081][   T75] IPVS: starting estimator thread 0...
[   40.905807][ T5938] IPVS: using max 43 ests per chain, 103200 per kthread
[   41.104332][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[   41.109025][ T5962] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   41.112153][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'.
[   41.112214][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'.
[   41.113133][ T5963] netlink: 112 bytes leftover after parsing attributes in process `syz.1.24'.
[   41.113145][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'.
[   41.446466][ T5986] netlink: 'syz.3.26': attribute type 9 has an invalid length.
[   41.488958][ T5990] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   41.489493][ T5991] capability: warning: `syz.3.27' uses deprecated v2 capabilities in a way that may be insecure
[   41.492220][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27'.
[   41.625994][ T5092] Bluetooth: hci2: command tx timeout
[   41.626026][ T5092] Bluetooth: hci0: command tx timeout
[   41.627533][ T5731] Bluetooth: hci3: command tx timeout
[   41.670722][ T5731] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1
[   42.211487][ T6011] kAFS: unable to lookup cell '(,c¾Ì'
[   42.214541][ T1075] IPVS: starting estimator thread 0...
[   42.306165][ T6012] IPVS: using max 44 ests per chain, 105600 per kthread
[   42.306218][ T5731] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[   42.306232][ T5731] CPU: 1 UID: 0 PID: 5731 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) 
[   42.306246][ T5731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   42.306253][ T5731] Workqueue: hci3 hci_rx_work
[   42.306270][ T5731] Call Trace:
[   42.306275][ T5731]  <TASK>
[   42.306280][ T5731]  dump_stack_lvl+0x100/0x190
[   42.306299][ T5731]  sysfs_warn_dup.cold+0x1c/0x28
[   42.306315][ T5731]  sysfs_create_dir_ns+0x24b/0x2b0
[   42.306331][ T5731]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   42.306346][ T5731]  ? find_held_lock+0x2b/0x80
[   42.306364][ T5731]  ? kobject_add_internal+0x25f/0x930
[   42.306377][ T5731]  ? kobject_add_internal+0x25f/0x930
[   42.306391][ T5731]  ? do_raw_spin_unlock+0x145/0x1e0
[   42.306406][ T5731]  kobject_add_internal+0x2c8/0x930
[   42.306420][ T5731]  kobject_add+0x16a/0x1e0
[   42.306432][ T5731]  ? __pfx_kobject_add+0x10/0x10
[   42.306444][ T5731]  ? class_to_subsys+0x10f/0x150
[   42.306462][ T5731]  ? kobject_put+0xb9/0x640
[   42.306473][ T5731]  ? _raw_spin_unlock+0x28/0x50
[   42.306491][ T5731]  device_add+0x294/0x1970
[   42.306506][ T5731]  ? __pfx_dev_set_name+0x10/0x10
[   42.306517][ T5731]  ? __pfx_device_add+0x10/0x10
[   42.306532][ T5731]  ? mgmt_send_event_skb+0x2fb/0x460
[   42.306550][ T5731]  hci_conn_add_sysfs+0x1a3/0x260
[   42.306567][ T5731]  le_conn_complete_evt+0x122f/0x2130
[   42.306585][ T5731]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   42.306598][ T5731]  ? hci_event_packet+0x186/0xcd0
[   42.306611][ T5731]  ? hci_event_packet+0x186/0xcd0
[   42.306627][ T5731]  hci_le_enh_conn_complete_evt+0x23d/0x3b0
[   42.306642][ T5731]  ? skb_pull_data+0x15f/0x1e0
[   42.306661][ T5731]  hci_le_meta_evt+0x34a/0x5f0
[   42.306676][ T5731]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[   42.306692][ T5731]  hci_event_packet+0x51c/0xcd0
[   42.306705][ T5731]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   42.306720][ T5731]  ? __pfx_hci_event_packet+0x10/0x10
[   42.306736][ T5731]  ? lockdep_hardirqs_on+0x7d/0x110
[   42.306754][ T5731]  hci_rx_work+0x451/0xfc0
[   42.306770][ T5731]  process_one_work+0xac7/0x1b10
[   42.306792][ T5731]  ? __pfx_process_one_work+0x10/0x10
[   42.306810][ T5731]  ? lock_acquire+0x1d1/0x380
[   42.306824][ T5731]  ? __pfx_hci_rx_work+0x10/0x10
[   42.306838][ T5731]  worker_thread+0x5ef/0xe50
[   42.306891][ T5731]  ? kthread+0x13a/0x450
[   42.306907][ T5731]  ? __pfx_worker_thread+0x10/0x10
[   42.306924][ T5731]  kthread+0x373/0x450
[   42.306939][ T5731]  ? __pfx_kthread+0x10/0x10
[   42.306956][ T5731]  ret_from_fork+0x730/0xd60
[   42.306970][ T5731]  ? __pfx_ret_from_fork+0x10/0x10
[   42.306983][ T5731]  ? __switch_to+0x800/0x10f0
[   42.306998][ T5731]  ? __pfx_kthread+0x10/0x10
[   42.307014][ T5731]  ret_from_fork_asm+0x1a/0x30
[   42.307032][ T5731]  </TASK>
[   42.307047][ T5731] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   42.307066][ T5731] Bluetooth: hci3: failed to register connection device
[   42.307120][   T43] kauditd_printk_skb: 107 callbacks suppressed
[   42.307131][   T43] audit: type=1400 audit(1790166683.986:278): avc:  denied  { read append } for  pid=6016 comm="syz.0.32" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   42.370880][   T43] audit: type=1400 audit(1790166684.046:279): avc:  denied  { ioctl } for  pid=6019 comm="syz.2.33" path="socket:[10181]" dev="sockfs" ino=10181 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   42.372586][   T43] audit: type=1400 audit(1790166684.046:280): avc:  denied  { bind } for  pid=6019 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   42.373808][   T43] audit: type=1400 audit(1790166684.046:281): avc:  denied  { write } for  pid=6019 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   42.377756][ T6017] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   42.377796][ T6017] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   42.384455][ T6015] Zero length message leads to an empty skb
[   42.384528][ T6017] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   42.391855][ T6017] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   42.392038][ T6017] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   42.399085][ T6017] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   42.404364][   T43] audit: type=1400 audit(1790166684.076:282): avc:  denied  { sys_module } for  pid=6019 comm="syz.2.33" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   42.410038][ T6017] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   42.411430][ T6017] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   42.415874][ T6017] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   42.422504][ T6017] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   42.422535][ T6017] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   42.436147][ T6017] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   42.458308][ T6017] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   42.520373][ T6028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2306 sclass=netlink_tcpdiag_socket pid=6028 comm=syz.2.34
[   42.548933][ T6028] kvm: user requested TSC rate below hardware speed
[   42.551690][   T43] audit: type=1400 audit(1790166684.226:283): avc:  denied  { mount } for  pid=6027 comm="syz.2.34" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   42.557843][ T6030] netlink: 'syz.1.35': attribute type 1 has an invalid length.
[   42.559773][   T43] audit: type=1400 audit(1790166684.236:284): avc:  denied  { create } for  pid=6029 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   42.559809][   T43] audit: type=1400 audit(1790166684.236:285): avc:  denied  { ioctl } for  pid=6029 comm="syz.1.35" path="socket:[10333]" dev="sockfs" ino=10333 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   42.683290][   T43] audit: type=1400 audit(1790166684.356:286): avc:  denied  { read } for  pid=6033 comm="syz.3.40" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   42.683552][   T43] audit: type=1400 audit(1790166684.356:287): avc:  denied  { open } for  pid=6033 comm="syz.3.40" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   42.783504][ T6040] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   42.805779][ T5835] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   42.862715][ T6044] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   42.873807][ T6044] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   42.957862][ T5835] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   42.959566][ T5835] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   42.959584][ T5835] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   42.959595][ T5835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   42.959608][ T5835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   42.959624][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.964502][ T6028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   42.964692][ T6028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   42.969910][ T5835] pl2303 7-1:1.0: pl2303 converter detected
[   42.976395][ T5835] usb 7-1: pl2303 converter now attached to ttyUSB0
[   43.014793][ T6053] netlink: 'syz.3.46': attribute type 63 has an invalid length.
[   43.014805][ T6053] netlink: 5 bytes leftover after parsing attributes in process `syz.3.46'.
[   43.119462][ T6057] netlink: 'syz.0.47': attribute type 1 has an invalid length.
[   43.132231][ T6057] bond1: option mode: invalid value (7)
[   43.133490][ T6057] bond1 (unregistering): Released all slaves
[   43.175765][   T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   43.210427][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'.
[   43.211973][ T6055] netlink: 'syz.0.47': attribute type 10 has an invalid length.
[   43.211985][ T6055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.47'.
[   43.212049][ T6055] dummy0: entered promiscuous mode
[   43.277033][ T6028] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[   43.277649][ T6028] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[   43.277966][ T6028] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[   43.279290][ T6028] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[   43.279343][ T6028] pl2303 ttyUSB0: failed to submit interrupt urb: -90
[   43.280415][ T6067] kvm [6027]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   43.280982][ T6067] kvm [6027]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   43.326866][   T62] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[   43.328284][   T62] usb 6-1: config 1 has an invalid interface number: 3 but max is 0
[   43.328305][   T62] usb 6-1: config 1 has no interface number 0
[   43.330885][   T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.330898][   T62] usb 6-1: Product: syz
[   43.330905][   T62] usb 6-1: Manufacturer: syz
[   43.330912][   T62] usb 6-1: SerialNumber: syz
[   43.339052][   T62] usb 6-1: 3:1 : does not exist
[   43.339065][   T62] usb 6-1: 3:2 : does not exist
[   43.408238][ T5835] usb 7-1: USB disconnect, device number 2
[   43.420087][ T5835] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   43.421876][ T5835] pl2303 7-1:1.0: device disconnected
[   44.067526][ T5731] Bluetooth: hci3: unexpected event for opcode 0x0c1b
[   44.099719][ T5835] usb 6-1: USB disconnect, device number 2
[   44.310450][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.357891][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.409174][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.425951][   T65] Bluetooth: hci1: command 0x0419 tx timeout
[   44.426009][ T5731] Bluetooth: hci2: command 0x0419 tx timeout
[   44.446995][ T6094] netlink: 'syz.3.58': attribute type 4 has an invalid length.
[   44.452688][ T6094] .`: renamed from bond0 (while UP)
[   44.458467][   T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.460366][   T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.460866][   T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.462713][   T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.462949][   T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.471727][ T6094] bond0: option downdelay: invalid value (18446744073709551615)
[   44.471740][ T6094] bond0: option downdelay: allowed values 0 - 2147483647
[   44.474511][ T6094] bond0 (unregistering): Released all slaves
[   44.491290][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.613872][   T13] bridge_slave_1: left allmulticast mode
[   44.613903][   T13] bridge_slave_1: left promiscuous mode
[   44.614589][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.624597][   T13] bridge_slave_0: left allmulticast mode
[   44.624612][   T13] bridge_slave_0: left promiscuous mode
[   44.624802][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.758072][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   44.768248][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   44.769318][   T13] bond0 (unregistering): Released all slaves
[   44.956001][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2
[   44.976520][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   44.991936][  T851] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   44.994716][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.994837][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.994931][ T6100] bridge_slave_0: entered allmulticast mode
[   44.996385][ T6100] bridge_slave_0: entered promiscuous mode
[   44.999083][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.999195][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.999284][ T6100] bridge_slave_1: entered allmulticast mode
[   45.000616][ T6100] bridge_slave_1: entered promiscuous mode
[   45.025124][ T6100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.032650][   T13] hsr_slave_0: left promiscuous mode
[   45.034030][   T13] hsr_slave_1: left promiscuous mode
[   45.034542][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.034561][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.035370][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.035384][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.043038][   T13] veth1_macvtap: left promiscuous mode
[   45.043089][   T13] veth0_macvtap: left promiscuous mode
[   45.043229][   T13] veth1_vlan: left promiscuous mode
[   45.043293][   T13] veth0_vlan: left promiscuous mode
[   45.066260][   T70] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   45.146264][   T10] usb 5-1: Using ep0 maxpacket: 8
[   45.147040][   T10] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[   45.150546][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   45.150583][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[   45.150605][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   45.150628][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[   45.150652][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   45.150674][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   45.153543][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.153564][   T10] usb 5-1: Product: syz
[   45.153578][   T10] usb 5-1: Manufacturer: syz
[   45.153592][   T10] usb 5-1: SerialNumber: syz
[   45.160014][   T10] usb 5-1: config 0 descriptor??
[   45.160745][ T6124] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   45.169921][  T851] usb 6-1: unable to get BOS descriptor or descriptor too short
[   45.170453][  T851] usb 6-1: not running at top speed; connect to a high speed hub
[   45.170477][  T851] usb 6-1: New USB device found, idVendor=0b48, idProduct=300a, bcdDevice=cb.dd
[   45.171492][  T851] usb 6-1: config 5 has an invalid interface number: 222 but max is 0
[   45.171510][  T851] usb 6-1: config 5 has no interface number 0
[   45.171531][  T851] usb 6-1: config 5 interface 222 has no altsetting 0
[   45.174140][  T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.174159][  T851] usb 6-1: Product: syz
[   45.174171][  T851] usb 6-1: Manufacturer: syz
[   45.174182][  T851] usb 6-1: SerialNumber: syz
[   45.234358][   T13] team0 (unregistering): Port device team_slave_1 removed
[   45.238623][   T70] usb 8-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00
[   45.239406][   T70] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.239429][   T70] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   45.239448][   T70] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.241974][   T13] team0 (unregistering): Port device team_slave_0 removed
[   45.313402][ T6100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.315046][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3
[   45.331600][ T6100] team0: Port device team_slave_0 added
[   45.333793][ T6100] team0: Port device team_slave_1 added
[   45.364002][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.364013][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   45.364025][ T6100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.367597][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.367606][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   45.367618][ T6100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.394593][ T6100] hsr_slave_0: entered promiscuous mode
[   45.395191][ T6100] hsr_slave_1: entered promiscuous mode
[   45.395574][ T6100] debugfs: 'hsr0' already exists in 'hsr'
[   45.395585][ T6100] Cannot create hsr debugfs directory
[   45.398955][  T851] dvb-usb: found a 'Technotrend TT Connect S2-3650-CI' in warm state.
[   45.398981][  T851] pctv452e: pctv452e_power_ctrl: 1
[   45.398981][  T851] 
[   45.399007][  T851] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[   45.399007][  T851] 
[   45.399191][  T851] dvb-usb: bulk message failed: -22 (5/0)
[   45.411995][  T851] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   45.432980][  T851] dvb-usb: Technotrend TT Connect S2-3650-CI error while loading driver (-19)
[   45.440240][  T851] usb 6-1: USB disconnect, device number 3
[   45.539178][ T6100] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   45.544824][ T6100] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   45.547628][ T6100] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   45.551204][ T6100] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   45.552809][ T6100] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   45.556232][ T6100] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   45.556784][ T6100] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   45.561200][ T6100] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   45.582032][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4
[   45.611058][   T13] IPVS: stop unused estimator thread 0...
[   45.611089][ T6100] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.624077][ T6100] 8021q: adding VLAN 0 to HW filter on device team0
[   45.636432][  T234] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.636815][  T234] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.642599][  T234] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.642643][  T234] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.796308][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5
[   45.874623][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.968597][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.968854][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.035739][ T6100] veth0_vlan: entered promiscuous mode
[   46.040670][ T6100] veth1_vlan: entered promiscuous mode
[   46.062306][ T6100] veth0_macvtap: entered promiscuous mode
[   46.065086][ T6100] veth1_macvtap: entered promiscuous mode
[   46.078162][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.083968][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.141106][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.141120][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.165731][  T851] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   46.168511][  T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.168524][  T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.175796][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.205751][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.205791][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.205821][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.326142][  T851] usb 6-1: Using ep0 maxpacket: 8
[   46.326626][  T851] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=12.2a
[   46.327514][  T851] usb 6-1: config 128 has an invalid interface number: 17 but max is 0
[   46.327527][  T851] usb 6-1: config 128 has no interface number 0
[   46.327540][  T851] usb 6-1: config 128 interface 17 has no altsetting 0
[   46.329050][  T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.329061][  T851] usb 6-1: Product: syz
[   46.329068][  T851] usb 6-1: Manufacturer: syz
[   46.329075][  T851] usb 6-1: SerialNumber: syz
[   46.372223][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.372716][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.455715][   T57] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   46.476084][   T10] rc_core: IR keymap rc-snapstream-firefly not found
[   46.476102][   T10] Registered IR keymap rc-empty
[   46.477483][   T10] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0
[   46.479580][   T10] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input5
[   46.488483][   T10] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input6
[   46.499605][    C0] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[   46.500567][   T10] usb 5-1: USB disconnect, device number 2
[   46.506483][   T65] Bluetooth: hci2: command 0x0419 tx timeout
[   46.506503][   T65] Bluetooth: hci1: command 0x0419 tx timeout
[   46.506633][   T65] Bluetooth: hci0: command tx timeout
[   46.531229][ T5128] ati_remote 5-1:0.0: ati_remote_open: usb_submit_urb failed!
[   46.553148][  T851] rndis_host 6-1:128.17: rndis: master #0/0000000000000000 slave #1/0000000000000000
[   46.562256][  T851] usb 6-1: USB disconnect, device number 4
[   46.606430][   T70] rtsx_usb 8-1:1.0: probe with driver rtsx_usb failed with error -71
[   46.607037][   T57] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   46.610689][   T70] usb 8-1: USB disconnect, device number 2
[   46.611168][   T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   46.611185][   T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   46.611202][   T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.618550][   T57] usb 9-1: config 0 descriptor??
[   46.828266][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.828472][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.833670][   T57] usbhid 9-1:0.0: can't add hid device: -71
[   46.833755][   T57] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[   46.835761][   T57] usb 9-1: USB disconnect, device number 2
[   47.155727][  T851] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   47.275829][   T57] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   47.305850][ T5834] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   47.325715][  T851] usb 5-1: Using ep0 maxpacket: 8
[   47.326180][  T851] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   47.327049][  T851] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.327068][  T851] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   47.327104][  T851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   47.327127][  T851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   47.327160][  T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.331273][  T851] hub 5-1:1.0: bad descriptor, ignoring hub
[   47.331286][  T851] hub 5-1:1.0: probe with driver hub failed with error -5
[   47.331729][  T851] cdc_wdm 5-1:1.0: skipping garbage
[   47.331737][  T851] cdc_wdm 5-1:1.0: skipping garbage
[   47.336034][  T851] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   47.336046][  T851] cdc_wdm 5-1:1.0: Unknown control protocol
[   47.385808][   T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   47.446513][   T57] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   47.447689][   T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.447711][   T57] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.447738][   T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.450852][   T57] usb 9-1: config 0 descriptor??
[   47.469786][ T5834] usb 6-1: unable to get BOS descriptor or descriptor too short
[   47.469811][ T5834] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[   47.472603][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.472617][ T5834] usb 6-1: Product: syz
[   47.472624][ T5834] usb 6-1: Manufacturer: syz
[   47.472631][ T5834] usb 6-1: SerialNumber: syz
[   47.531744][   T43] kauditd_printk_skb: 53 callbacks suppressed
[   47.531759][   T43] audit: type=1400 audit(1790166689.206:341): avc:  denied  { read write } for  pid=6197 comm="syz.0.68" name="cdc-wdm0" dev="devtmpfs" ino=2886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   47.531943][   T43] audit: type=1400 audit(1790166689.206:342): avc:  denied  { open } for  pid=6197 comm="syz.0.68" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[   47.535894][   T10] usb 8-1: Using ep0 maxpacket: 32
[   47.536621][   T10] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   47.538009][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   47.539905][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.539917][   T10] usb 8-1: Product: syz
[   47.539924][   T10] usb 8-1: Manufacturer: syz
[   47.539931][   T10] usb 8-1: SerialNumber: syz
[   47.541732][   T10] usb 8-1: config 0 descriptor??
[   47.544126][   T10] usb 8-1: No union descriptors
[   47.544740][   T10] usb 8-1: unsupported MDLM descriptors
[   47.683553][ T5834] usb 6-1: Fast Track Pro switching to config #2
[   47.686671][ T5834] usb 6-1: USB disconnect, device number 5
[   47.746194][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.746516][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.747527][   T43] audit: type=1400 audit(1790166689.426:343): avc:  denied  { write } for  pid=6201 comm="syz.3.70" name="event2" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   47.749761][  T851] usb 8-1: USB disconnect, device number 3
[   47.856823][   T57] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   47.856849][   T57] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   47.856861][   T57] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   47.856872][   T57] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   47.856883][   T57] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   47.856894][   T57] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   47.856906][   T57] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[   47.861463][   T57] cp2112 0003:10C4:EA90.0002: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[   47.937416][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   47.937518][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   47.937654][ T5841] usb 5-1: USB disconnect, device number 3
[   47.938337][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   47.938347][ T6204] cdc_wdm 5-1:1.0: Tx URB error: -19
[   47.938349][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   47.938358][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   48.056549][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.056896][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.057638][   T57] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00
[   48.467982][ T5841] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   48.555758][  T851] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   48.595805][ T5731] Bluetooth: hci0: command tx timeout
[   48.595831][ T5731] Bluetooth: hci1: command 0x0419 tx timeout
[   48.595847][ T5731] Bluetooth: hci2: command 0x0419 tx timeout
[   48.645730][ T5841] usb 5-1: Using ep0 maxpacket: 8
[   48.646670][ T5841] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   48.648109][ T5841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.648128][ T5841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   48.648165][ T5841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   48.648247][ T5841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   48.648280][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.658800][ T5841] hub 5-1:1.0: bad descriptor, ignoring hub
[   48.658816][ T5841] hub 5-1:1.0: probe with driver hub failed with error -5
[   48.659179][ T5841] cdc_wdm 5-1:1.0: skipping garbage
[   48.659187][ T5841] cdc_wdm 5-1:1.0: skipping garbage
[   48.663429][ T5841] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   48.663441][ T5841] cdc_wdm 5-1:1.0: Unknown control protocol
[   48.725731][  T851] usb 8-1: Using ep0 maxpacket: 16
[   48.726272][  T851] usb 8-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=f3.70
[   48.727257][  T851] usb 8-1: config 1 has an invalid interface number: 22 but max is 0
[   48.727271][  T851] usb 8-1: config 1 has no interface number 0
[   48.727283][  T851] usb 8-1: config 1 interface 22 has no altsetting 0
[   48.728994][  T851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.729005][  T851] usb 8-1: Product: syz
[   48.729012][  T851] usb 8-1: Manufacturer: syz
[   48.729019][  T851] usb 8-1: SerialNumber: syz
[   48.866638][ T5841] usb 9-1: USB disconnect, device number 3
[   48.939483][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.939993][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.946166][  T851] gspca_main: touptek-2.14.0 probing 0547:6801
[   48.956233][  T851] usb 8-1: USB disconnect, device number 4
[   48.968379][ T5806] usb 5-1: USB disconnect, device number 4
[   49.205715][ T5883] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   49.305887][ T5806] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   49.375772][ T5883] usb 6-1: Using ep0 maxpacket: 32
[   49.379338][ T5883] usb 6-1: unable to get BOS descriptor or descriptor too short
[   49.379363][ T5883] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0
[   49.380468][ T5883] usb 6-1: config 3 has an invalid interface number: 223 but max is 1
[   49.380480][ T5883] usb 6-1: config 3 has an invalid interface number: 25 but max is 1
[   49.380489][ T5883] usb 6-1: config 3 has an invalid interface number: 223 but max is 1
[   49.380499][ T5883] usb 6-1: config 3 has no interface number 0
[   49.380506][ T5883] usb 6-1: config 3 has no interface number 1
[   49.380526][ T5883] usb 6-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[   49.380536][ T5883] usb 6-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   49.380549][ T5883] usb 6-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30
[   49.380567][ T5883] usb 6-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64
[   49.380580][ T5883] usb 6-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64
[   49.381451][ T5883] usb 6-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82
[   49.381473][ T5883] usb 6-1: config 3 interface 223 has no altsetting 1
[   49.381487][ T5883] usb 6-1: config 3 interface 25 has no altsetting 0
[   49.383628][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.383639][ T5883] usb 6-1: Product: syz
[   49.383646][ T5883] usb 6-1: Manufacturer: syz
[   49.383653][ T5883] usb 6-1: SerialNumber: syz
[   49.469112][   T43] audit: type=1400 audit(1790166691.146:344): avc:  denied  { open } for  pid=6217 comm="syz.3.75" path="/dev/ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   49.474494][   T43] audit: type=1400 audit(1790166691.146:345): avc:  denied  { ioctl } for  pid=6217 comm="syz.3.75" path="/dev/ptyqb" dev="devtmpfs" ino=138 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   49.474836][   T43] audit: type=1400 audit(1790166691.146:346): avc:  denied  { map } for  pid=6217 comm="syz.3.75" path="/dev/ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   49.507895][   T43] audit: type=1400 audit(1790166691.186:347): avc:  denied  { create } for  pid=6219 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   49.515868][ T5806] usb 5-1: Using ep0 maxpacket: 8
[   49.516819][ T5806] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   49.518085][ T5806] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   49.518103][ T5806] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   49.518135][ T5806] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   49.518160][ T5806] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   49.518190][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.519100][   T43] audit: type=1400 audit(1790166691.196:348): avc:  denied  { bind } for  pid=6219 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   49.522584][ T5806] hub 5-1:1.0: bad descriptor, ignoring hub
[   49.522597][ T5806] hub 5-1:1.0: probe with driver hub failed with error -5
[   49.522822][ T5806] cdc_wdm 5-1:1.0: skipping garbage
[   49.522829][ T5806] cdc_wdm 5-1:1.0: skipping garbage
[   49.524692][ T5806] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   49.524707][ T5806] cdc_wdm 5-1:1.0: Unknown control protocol
[   49.570742][ T6224] __nla_validate_parse: 1 callbacks suppressed
[   49.570754][ T6224] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.76'.
[   49.570762][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'.
[   49.591115][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.594567][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.595942][   T43] audit: type=1400 audit(1790166691.266:349): avc:  denied  { read } for  pid=6212 comm="syz.1.73" name="event2" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   49.596386][   T43] audit: type=1400 audit(1790166691.276:350): avc:  denied  { open } for  pid=6212 comm="syz.1.73" path="/dev/input/event2" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   49.597816][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.598473][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.635812][ T5834] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   49.786507][ T5834] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   49.787816][ T5834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   49.787851][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.790120][ T5834] usb 9-1: config 0 descriptor??
[   49.802130][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.802625][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.844658][ T5883] usbtv 6-1:3.223: Fushicai USBTV007 Audio-Video Grabber
[   49.846220][   T62] usb 5-1: USB disconnect, device number 5
[   49.855703][ T5883] usb 6-1: USB disconnect, device number 6
[   49.901131][ T5883] 
[   49.901925][ T5883] =========================
[   49.903322][ T5883] WARNING: held lock freed!
[   49.904683][ T5883] syzkaller #0 Not tainted
[   49.906116][ T5883] -------------------------
[   49.907520][ T5883] kworker/1:4/5883 is freeing memory ffff888028f54000-ffff888028f547ff, with a lock still held there!
[   49.910716][ T5883] ffff888028f541a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[   49.913666][ T5883] locks held by kworker/1:4/5883: 5, last CPU#1:
[   49.915560][ T5883]  #0: ffff88801c70a540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[   49.918696][ T5883]  #1: ffffc900043efd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[   49.922004][ T5883]  #2: ffff88802abae1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420
[   49.925412][ T5883]  #3: ffff888028f521d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0
[   49.929003][ T5883]  #4: ffff888028f541a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[   49.932374][ T5883] 
[   49.932374][ T5883] stack backtrace:
[   49.934180][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
[   49.936959][ T5883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   49.940077][ T5883] Workqueue: usb_hub_wq hub_event
[   49.941628][ T5883] Call Trace:
[   49.942675][ T5883]  <TASK>
[   49.943599][ T5883]  dump_stack_lvl+0x100/0x190
[   49.945031][ T5883]  debug_check_no_locks_freed+0x115/0x120
[   49.946878][ T5883]  ? device_release+0xd0/0x270
[   49.948333][ T5883]  ? device_release+0xd2/0x270
[   49.949789][ T5883]  kfree+0x180/0x6d0
[   49.951006][ T5883]  ? put_device+0x24/0x30
[   49.952311][ T5883]  ? __pfx_usb_release_interface+0x10/0x10
[   49.954063][ T5883]  device_release+0xd2/0x270
[   49.955471][ T5883]  kobject_put+0x1f7/0x640
[   49.956848][ T5883]  put_device+0x1f/0x30
[   49.958105][ T5883]  v4l2_device_disconnect+0x60/0xc0
[   49.959666][ T5883]  usbtv_video_free+0x25/0x30
[   49.961116][ T5883]  usbtv_disconnect+0x58/0xa0
[   49.962540][ T5883]  usb_unbind_interface+0x1dd/0x9e0
[   49.964103][ T5883]  ? __pfx_usb_unbind_interface+0x10/0x10
[   49.965806][ T5883]  device_remove+0x12a/0x180
[   49.967216][ T5883]  device_release_driver_internal+0x44e/0x620
[   49.969122][ T5883]  bus_remove_device+0x2bc/0x560
[   49.970606][ T5883]  ? __pfx_bus_remove_device+0x10/0x10
[   49.972255][ T5883]  ? __pfx_device_remove_attrs+0x10/0x10
[   49.973939][ T5883]  device_del+0x376/0x9b0
[   49.975255][ T5883]  ? __pfx_device_del+0x10/0x10
[   49.976750][ T5883]  ? __pfx___pm_runtime_barrier+0x10/0x10
[   49.978449][ T5883]  ? lock_acquire+0x1d1/0x380
[   49.979885][ T5883]  usb_disable_device+0x367/0x810
[   49.981400][ T5883]  ? mark_held_locks+0x40/0x70
[   49.982849][ T5883]  usb_disconnect+0x2e2/0x9a0
[   49.984307][ T5883]  hub_event+0x1bb1/0x4420
[   49.985681][ T5883]  ? __lock_acquire+0x5c0/0x1f40
[   49.987225][ T5883]  ? __pfx_hub_event+0x10/0x10
[   49.988675][ T5883]  ? lockdep_count_forward_deps+0x180/0x200
[   49.990415][ T5883]  ? lock_acquire+0x1d1/0x380
[   49.991964][ T5883]  ? process_one_work+0xa2c/0x1b10
[   49.993609][ T5883]  ? process_one_work+0x906/0x1b10
[   49.995138][ T5883]  ? process_one_work+0x906/0x1b10
[   49.996716][ T5883]  process_one_work+0xac7/0x1b10
[   49.998214][ T5883]  ? __pfx_process_one_work+0x10/0x10
[   49.999852][ T5883]  ? lock_acquire+0x1d1/0x380
[   50.001255][ T5883]  ? __pfx_hub_event+0x10/0x10
[   50.002680][ T5883]  worker_thread+0x5ef/0xe50
[   50.004079][ T5883]  ? __pfx_worker_thread+0x10/0x10
[   50.005609][ T5883]  ? kthread+0x13a/0x450
[   50.006932][ T5883]  ? __pfx_worker_thread+0x10/0x10
[   50.008485][ T5883]  kthread+0x373/0x450
[   50.009713][ T5883]  ? __pfx_kthread+0x10/0x10
[   50.011119][ T5883]  ret_from_fork+0x730/0xd60
[   50.012526][ T5883]  ? __pfx_ret_from_fork+0x10/0x10
[   50.014061][ T5883]  ? __switch_to+0x800/0x10f0
[   50.015482][ T5883]  ? __pfx_kthread+0x10/0x10
[   50.016906][ T5883]  ret_from_fork_asm+0x1a/0x30
[   50.018365][ T5883]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   50.023166][ T5883] ==================================================================
[   50.023174][ T5883] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x935/0x9e0
[   50.023194][ T5883] Read of size 8 at addr ffff888028f54008 by task kworker/1:4/5883
[   50.023202][ T5883] 
[   50.023208][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
[   50.023220][ T5883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   50.023227][ T5883] Workqueue: usb_hub_wq hub_event
[   50.023243][ T5883] Call Trace:
[   50.023247][ T5883]  <TASK>
[   50.023251][ T5883]  dump_stack_lvl+0x100/0x190
[   50.023267][ T5883]  print_report+0x13d/0x4b0
[   50.023301][ T5883]  ? __virt_addr_valid+0x239/0x430
[   50.023314][ T5883]  ? usb_unbind_interface+0x935/0x9e0
[   50.023330][ T5883]  kasan_report+0xdf/0x1c0
[   50.023344][ T5883]  ? usb_unbind_interface+0x935/0x9e0
[   50.023362][ T5883]  usb_unbind_interface+0x935/0x9e0
[   50.023379][ T5883]  ? __pfx_usb_unbind_interface+0x10/0x10
[   50.023396][ T5883]  device_remove+0x12a/0x180
[   50.023408][ T5883]  device_release_driver_internal+0x44e/0x620
[   50.023423][ T5883]  bus_remove_device+0x2bc/0x560
[   50.023434][ T5883]  ? __pfx_bus_remove_device+0x10/0x10
[   50.023445][ T5883]  ? __pfx_device_remove_attrs+0x10/0x10
[   50.023458][ T5883]  device_del+0x376/0x9b0
[   50.023470][ T5883]  ? __pfx_device_del+0x10/0x10
[   50.023481][ T5883]  ? __pfx___pm_runtime_barrier+0x10/0x10
[   50.023494][ T5883]  ? lock_acquire+0x1d1/0x380
[   50.023506][ T5883]  usb_disable_device+0x367/0x810
[   50.023520][ T5883]  ? mark_held_locks+0x40/0x70
[   50.023532][ T5883]  usb_disconnect+0x2e2/0x9a0
[   50.023547][ T5883]  hub_event+0x1bb1/0x4420
[   50.023564][ T5883]  ? __lock_acquire+0x5c0/0x1f40
[   50.023576][ T5883]  ? __pfx_hub_event+0x10/0x10
[   50.023590][ T5883]  ? lockdep_count_forward_deps+0x180/0x200
[   50.023602][ T5883]  ? lock_acquire+0x1d1/0x380
[   50.023612][ T5883]  ? process_one_work+0xa2c/0x1b10
[   50.023628][ T5883]  ? process_one_work+0x906/0x1b10
[   50.023644][ T5883]  ? process_one_work+0x906/0x1b10
[   50.023661][ T5883]  process_one_work+0xac7/0x1b10
[   50.023679][ T5883]  ? __pfx_process_one_work+0x10/0x10
[   50.023696][ T5883]  ? lock_acquire+0x1d1/0x380
[   50.023708][ T5883]  ? __pfx_hub_event+0x10/0x10
[   50.023723][ T5883]  worker_thread+0x5ef/0xe50
[   50.023740][ T5883]  ? __pfx_worker_thread+0x10/0x10
[   50.023757][ T5883]  ? kthread+0x13a/0x450
[   50.023771][ T5883]  ? __pfx_worker_thread+0x10/0x10
[   50.023787][ T5883]  kthread+0x373/0x450
[   50.023801][ T5883]  ? __pfx_kthread+0x10/0x10
[   50.023816][ T5883]  ret_from_fork+0x730/0xd60
[   50.023828][ T5883]  ? __pfx_ret_from_fork+0x10/0x10
[   50.023840][ T5883]  ? __switch_to+0x800/0x10f0
[   50.023859][ T5883]  ? __pfx_kthread+0x10/0x10
[   50.023874][ T5883]  ret_from_fork_asm+0x1a/0x30
[   50.023887][ T5883]  </TASK>
[   50.023890][ T5883] 
[   50.023893][ T5883] Allocated by task 5883:
[   50.023897][ T5883]  kasan_save_stack+0x30/0x50
[   50.023909][ T5883]  kasan_save_track+0x14/0x30
[   50.023920][ T5883]  __kasan_kmalloc+0xaa/0xb0
[   50.023930][ T5883]  __kmalloc_cache_noprof+0x2f8/0x6d0
[   50.023945][ T5883]  usb_set_configuration+0x10cb/0x1c60
[   50.023959][ T5883]  usb_generic_driver_probe+0xa1/0xe0
[   50.023971][ T5883]  usb_probe_device+0xef/0x400
[   50.023984][ T5883]  really_probe+0x241/0xa60
[   50.023995][ T5883]  __driver_probe_device+0x210/0x460
[   50.024007][ T5883]  driver_probe_device+0x4a/0x140
[   50.024018][ T5883]  __device_attach_driver+0x1df/0x320
[   50.024030][ T5883]  bus_for_each_drv+0x159/0x1e0
[   50.024038][ T5883]  __device_attach+0x1e4/0x4d0
[   50.024049][ T5883]  device_initial_probe+0xaf/0xd0
[   50.024061][ T5883]  bus_probe_device+0x64/0x160
[   50.024071][ T5883]  device_add+0x121d/0x1970
[   50.024083][ T5883]  usb_new_device.part.0+0xcc2/0x1686
[   50.024098][ T5883]  hub_event.cold+0x1e3/0xe90
[   50.024112][ T5883]  process_one_work+0xac7/0x1b10
[   50.024127][ T5883]  worker_thread+0x5ef/0xe50
[   50.024142][ T5883]  kthread+0x373/0x450
[   50.024155][ T5883]  ret_from_fork+0x730/0xd60
[   50.024165][ T5883]  ret_from_fork_asm+0x1a/0x30
[   50.024175][ T5883] 
[   50.024177][ T5883] Freed by task 5883:
[   50.024181][ T5883]  kasan_save_stack+0x30/0x50
[   50.024192][ T5883]  kasan_save_track+0x14/0x30
[   50.024202][ T5883]  kasan_save_free_info+0x3b/0x70
[   50.024218][ T5883]  __kasan_slab_free+0x5f/0x80
[   50.024229][ T5883]  kfree+0x22b/0x6d0
[   50.024242][ T5883]  device_release+0xd2/0x270
[   50.024257][ T5883]  kobject_put+0x1f7/0x640
[   50.024268][ T5883]  put_device+0x1f/0x30
[   50.024275][ T5883]  v4l2_device_disconnect+0x60/0xc0
[   50.024290][ T5883]  usbtv_video_free+0x25/0x30
[   50.024305][ T5883]  usbtv_disconnect+0x58/0xa0
[   50.024318][ T5883]  usb_unbind_interface+0x1dd/0x9e0
[   50.024333][ T5883]  device_remove+0x12a/0x180
[   50.024343][ T5883]  device_release_driver_internal+0x44e/0x620
[   50.024356][ T5883]  bus_remove_device+0x2bc/0x560
[   50.024366][ T5883]  device_del+0x376/0x9b0
[   50.024376][ T5883]  usb_disable_device+0x367/0x810
[   50.024389][ T5883]  usb_disconnect+0x2e2/0x9a0
[   50.024401][ T5883]  hub_event+0x1bb1/0x4420
[   50.024414][ T5883]  process_one_work+0xac7/0x1b10
[   50.024429][ T5883]  worker_thread+0x5ef/0xe50
[   50.024444][ T5883]  kthread+0x373/0x450
[   50.024458][ T5883]  ret_from_fork+0x730/0xd60
[   50.024468][ T5883]  ret_from_fork_asm+0x1a/0x30
[   50.024478][ T5883] 
[   50.024480][ T5883] The buggy address belongs to the object at ffff888028f54000
[   50.024480][ T5883]  which belongs to the cache kmalloc-2k of size 2048
[   50.024487][ T5883] The buggy address is located 8 bytes inside of
[   50.024487][ T5883]  freed 2048-byte region [ffff888028f54000, ffff888028f54800)
[   50.024496][ T5883] 
[   50.024499][ T5883] The buggy address belongs to the physical page:
[   50.024503][ T5883] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28f50
[   50.024512][ T5883] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   50.024520][ T5883] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   50.024529][ T5883] page_type: f5(slab)
[   50.024538][ T5883] raw: 00fff00000000040 ffff88801c042f00 dead000000000100 dead000000000122
[   50.024547][ T5883] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[   50.024556][ T5883] head: 00fff00000000040 ffff88801c042f00 dead000000000100 dead000000000122
[   50.024564][ T5883] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[   50.024572][ T5883] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[   50.024581][ T5883] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   50.024586][ T5883] page dumped because: kasan: bad access detected
[   50.024591][ T5883] page_owner tracks the page as allocated
[   50.024594][ T5883] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5735, tgid 5735 (syz-executor), ts 39372650543
[   50.024610][ T5883]  post_alloc_hook+0xfd/0x120
[   50.024624][ T5883]  get_page_from_freelist+0x110d/0x35d0
[   50.024633][ T5883]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[   50.024643][ T5883]  new_slab+0xa9/0x6e0
[   50.024650][ T5883]  refill_objects+0xe3/0x410
[   50.024658][ T5883]  __pcs_replace_empty_main+0x35e/0x650
[   50.024673][ T5883]  __kmalloc_node_noprof+0x6ad/0x880
[   50.024683][ T5883]  qdisc_alloc+0xbb/0xb30
[   50.024697][ T5883]  qdisc_create_dflt+0x93/0x490
[   50.024712][ T5883]  mq_init_common+0x1f4/0x490
[   50.024721][ T5883]  mq_init+0x26/0x60
[   50.024729][ T5883]  qdisc_create_dflt+0x124/0x490
[   50.024744][ T5883]  dev_activate+0xaa9/0xce0
[   50.024758][ T5883]  __dev_open+0x490/0x8f0
[   50.024773][ T5883]  __dev_change_flags+0x596/0x850
[   50.024785][ T5883]  netif_change_flags+0x8d/0x160
[   50.024796][ T5883] page last free pid 5086 tgid 5086 ts 39366026780 stack trace:
[   50.024802][ T5883]  __free_frozen_pages+0x79f/0x10f0
[   50.024815][ T5883]  __folio_put+0x3b4/0x5f0
[   50.024828][ T5883]  skb_release_data+0x649/0x8e0
[   50.024841][ T5883]  napi_consume_skb+0x2c0/0x320
[   50.024850][ T5883]  skb_defer_free_flush+0x1f1/0x290
[   50.024866][ T5883]  net_rx_action+0x3ca/0xf20
[   50.024877][ T5883]  handle_softirqs+0x1e6/0x9d0
[   50.024886][ T5883]  do_softirq+0xaf/0xf0
[   50.024896][ T5883]  __local_bh_enable_ip+0xff/0x120
[   50.024906][ T5883]  __dev_queue_xmit+0xa27/0x4970
[   50.024915][ T5883]  neigh_resolve_output+0x51f/0x8f0
[   50.024930][ T5883]  ip6_finish_output2+0xb0e/0x1d50
[   50.024943][ T5883]  __ip6_finish_output+0x357/0xdf0
[   50.024955][ T5883]  ip6_output+0x2aa/0xa60
[   50.024966][ T5883]  NF_HOOK.constprop.0+0x115/0x5a0
[   50.024980][ T5883]  mld_sendpack+0x8f7/0xec0
[   50.024993][ T5883] 
[   50.024995][ T5883] Memory state around the buggy address:
[   50.025000][ T5883]  ffff888028f53f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   50.025006][ T5883]  ffff888028f53f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   50.025013][ T5883] >ffff888028f54000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.025018][ T5883]                       ^
[   50.025023][ T5883]  ffff888028f54080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.025029][ T5883]  ffff888028f54100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   50.025034][ T5883] ==================================================================
[   50.025040][ T5883] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   50.348950][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
[   50.352830][ T5883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   50.357021][ T5883] Workqueue: usb_hub_wq hub_event
[   50.359164][ T5883] Call Trace:
[   50.360596][ T5883]  <TASK>
[   50.361819][ T5883]  dump_stack_lvl+0x100/0x190
[   50.363836][ T5883]  vpanic+0x553/0x970
[   50.365538][ T5883]  ? __pfx_vpanic+0x10/0x10
[   50.367544][ T5883]  ? __pfx_vprintk_emit+0x10/0x10
[   50.369668][ T5883]  ? usb_unbind_interface+0x935/0x9e0
[   50.371957][ T5883]  panic+0xd1/0xe0
[   50.373562][ T5883]  ? __pfx_panic+0x10/0x10
[   50.375465][ T5883]  ? end_report.part.0+0x23/0x90
[   50.377559][ T5883]  ? rcu_is_watching+0x13/0xc0
[   50.379611][ T5883]  check_panic_on_warn.cold+0x19/0x34
[   50.381838][ T5883]  end_report.part.0+0x3a/0x90
[   50.383877][ T5883]  kasan_report.cold+0xe/0x18
[   50.385882][ T5883]  ? usb_unbind_interface+0x935/0x9e0
[   50.388217][ T5883]  usb_unbind_interface+0x935/0x9e0
[   50.390410][ T5883]  ? __pfx_usb_unbind_interface+0x10/0x10
[   50.392832][ T5883]  device_remove+0x12a/0x180
[   50.394803][ T5883]  device_release_driver_internal+0x44e/0x620
[   50.397314][ T5883]  bus_remove_device+0x2bc/0x560
[   50.399423][ T5883]  ? __pfx_bus_remove_device+0x10/0x10
[   50.401715][ T5883]  ? __pfx_device_remove_attrs+0x10/0x10
[   50.404024][ T5883]  device_del+0x376/0x9b0
[   50.405829][ T5883]  ? __pfx_device_del+0x10/0x10
[   50.407870][ T5883]  ? __pfx___pm_runtime_barrier+0x10/0x10
[   50.410197][ T5883]  ? lock_acquire+0x1d1/0x380
[   50.412138][ T5883]  usb_disable_device+0x367/0x810
[   50.414226][ T5883]  ? mark_held_locks+0x40/0x70
[   50.416182][ T5883]  usb_disconnect+0x2e2/0x9a0
[   50.418151][ T5883]  hub_event+0x1bb1/0x4420
[   50.420027][ T5883]  ? __lock_acquire+0x5c0/0x1f40
[   50.422083][ T5883]  ? __pfx_hub_event+0x10/0x10
[   50.424140][ T5883]  ? lockdep_count_forward_deps+0x180/0x200
[   50.426625][ T5883]  ? lock_acquire+0x1d1/0x380
[   50.428650][ T5883]  ? process_one_work+0xa2c/0x1b10
[   50.430822][ T5883]  ? process_one_work+0x906/0x1b10
[   50.432945][ T5883]  ? process_one_work+0x906/0x1b10
[   50.435048][ T5883]  process_one_work+0xac7/0x1b10
[   50.437121][ T5883]  ? __pfx_process_one_work+0x10/0x10
[   50.439336][ T5883]  ? lock_acquire+0x1d1/0x380
[   50.441240][ T5883]  ? __pfx_hub_event+0x10/0x10
[   50.443227][ T5883]  worker_thread+0x5ef/0xe50
[   50.445174][ T5883]  ? __pfx_worker_thread+0x10/0x10
[   50.447332][ T5883]  ? kthread+0x13a/0x450
[   50.449144][ T5883]  ? __pfx_worker_thread+0x10/0x10
[   50.451329][ T5883]  kthread+0x373/0x450
[   50.453079][ T5883]  ? __pfx_kthread+0x10/0x10
[   50.455031][ T5883]  ret_from_fork+0x730/0xd60
[   50.457025][ T5883]  ? __pfx_ret_from_fork+0x10/0x10
[   50.459191][ T5883]  ? __switch_to+0x800/0x10f0
[   50.461209][ T5883]  ? __pfx_kthread+0x10/0x10
[   50.463119][ T5883]  ret_from_fork_asm+0x1a/0x30
[   50.465108][ T5883]  </TASK>
[   50.467042][ T5883] Kernel Offset: disabled
[   50.468654][ T5883] Rebooting in 86400 seconds..