last executing test programs:

8m32.667227053s ago: executing program 2 (id=194):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r1, &(0x7f0000002240)={0x2020}, 0x2020)

8m31.040657488s ago: executing program 2 (id=196):
r0 = socket(0x40000000015, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, 0x0, 0x303, 0x70bd28, 0x0, {0xa}}, 0x14}}, 0x0)
write(r4, 0x0, 0x0)
socketpair(0x1d, 0x800, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4)
connect$l2tp6(r0, 0x0, 0x0)

8m29.756189904s ago: executing program 2 (id=201):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18690000010000000002000003000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x4, 0x200, 0x8, 0x4f, 0x81, 0x7, 0xc0, 0x1, 0x7f, 0x6, 0x5f, 0x4, 0x3}, {0x8, 0xaff3, 0x0, 0x8, 0x8, 0xff, 0x8, 0x3, 0xfd, 0x53, 0x10, 0x6, 0xffffffffffffffff}, {0x0, 0x7, 0x0, 0x0, 0x25, 0xf, 0x0, 0xfb, 0x0, 0x15, 0x9a, 0x1, 0x40000000000002}], 0x9})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x7fc, 0x800, 0x3, 0x3, 0xffffffffffffffff, 0x4002004c0, 0x1000, 0x3, 0xffd, 0x10, 0x3, 0x0, 0x1, 0x4, 0x800000001], 0xffff1000, 0x4010})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m27.335657154s ago: executing program 2 (id=207):
syz_open_dev$sndctrl(0x0, 0x0, 0x800)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x4, 0x8001, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@generic={0x86, 0x10, "11026d34c3279adc3f6e49160ed8"}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xd7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8808c)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mq_open(&(0x7f00000001c0)='nl80211\x00', 0x8c0, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0)
mremap(&(0x7f000096f000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2)
write(r6, &(0x7f0000000280), 0x0)

8m24.801224073s ago: executing program 2 (id=213):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, 0x0, &(0x7f0000000040))
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7fffffff, 0x1008004, 0x71a7, 0xfffb, 0x3800, 0x1d, 0x0, 0x0, 0x4, 0xfc21}}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4004041}, 0x20000000)
r6 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)

8m23.447026307s ago: executing program 2 (id=215):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r2=>0x0]}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x9e0, @empty, 0x1}}, 0x7dd3, 0x0, 0x400, 0x7, 0x3b0, 0x81, 0x6}, 0x9c)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r2, 0x1000}, 0x8)
r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
epoll_create1(0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}, 0x0)
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffdb5, &(0x7f0000000200)=0x400000bce)
r7 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r7, &(0x7f0000000680)=""/102392, 0x18ff8)
tkill(r5, 0xb)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil)

8m6.882792446s ago: executing program 32 (id=215):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [<r2=>0x0]}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x9e0, @empty, 0x1}}, 0x7dd3, 0x0, 0x400, 0x7, 0x3b0, 0x81, 0x6}, 0x9c)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r2, 0x1000}, 0x8)
r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
epoll_create1(0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r5 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}, 0x0)
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffdb5, &(0x7f0000000200)=0x400000bce)
r7 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r7, &(0x7f0000000680)=""/102392, 0x18ff8)
tkill(r5, 0xb)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil)

6m56.783924611s ago: executing program 0 (id=377):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)={0x6, [0x8, 0x3, 0x4, 0x5, 0x57a, 0xd747]})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r4, 0x2, 0x13, r3, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m56.379198578s ago: executing program 0 (id=379):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x80000001, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
socket(0x2, 0x805, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

6m54.104894114s ago: executing program 0 (id=381):
syz_usb_connect(0x0, 0x59, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec13b2106d04d308170b0102030109024700010000000009046900000e0100000824020102"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

6m48.587498471s ago: executing program 0 (id=391):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = eventfd2(0x0, 0x0)
read$eventfd(r0, &(0x7f0000000000), 0x8)
io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}])

6m47.919144249s ago: executing program 3 (id=394):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r1, &(0x7f0000002240)={0x2020}, 0x2020)

6m47.004609164s ago: executing program 0 (id=397):
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(0x0, 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'})

6m46.48993531s ago: executing program 0 (id=398):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x80000001, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
socket(0x2, 0x805, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r5, &(0x7f0000000400)=""/4096, 0xc00)

6m44.378695106s ago: executing program 3 (id=404):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x80, 0x4)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x4000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0)
r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000200)=0x3)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, 0x0)

6m42.09352366s ago: executing program 3 (id=406):
socket$kcm(0x21, 0x2, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x2}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, 0x0, 0x0)
recvfrom(r3, 0x0, 0x0, 0x20, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0})

6m40.831672621s ago: executing program 3 (id=408):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000080)="09000300010007", 0x7)

6m40.720245351s ago: executing program 3 (id=409):
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(0x0, 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'})

6m40.594833428s ago: executing program 3 (id=411):
syz_usb_connect(0x0, 0x59, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec13b2106d04d308170b0102030109024700010000000009046900000e0100000824020102"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioprio_set$uid(0x3, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7e)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10820, 0x400}}, 0x20}}, 0x4084)

6m31.107441923s ago: executing program 33 (id=398):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x80000001, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
socket(0x2, 0x805, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r5, &(0x7f0000000400)=""/4096, 0xc00)

6m25.36849995s ago: executing program 34 (id=411):
syz_usb_connect(0x0, 0x59, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec13b2106d04d308170b0102030109024700010000000009046900000e0100000824020102"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioprio_set$uid(0x3, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7e)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10820, 0x400}}, 0x20}}, 0x4084)

5m21.131633557s ago: executing program 7 (id=568):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="50010000", @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c0007800800050100000000080000"], 0x150}}, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)

5m20.012007718s ago: executing program 7 (id=569):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, &(0x7f0000000040))
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054)
recvmsg(r5, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)

5m12.064502691s ago: executing program 7 (id=583):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000009c0)=0x80000)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@null, 0x3, 'veth0_virt_wifi\x00'})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0xb0000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
write$uinput_user_dev(r2, 0x0, 0x0)
getpid()
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$radio(0x0, 0x3, 0x2)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000380)={{@host}, 0x59, 0x2800000000000000, 0x1, 0xfffffffa})

5m4.289606845s ago: executing program 7 (id=601):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0)
pread64(r0, 0x0, 0x20, 0x78f2a36b)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0xdd, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}})

5m3.151365963s ago: executing program 7 (id=604):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, &(0x7f0000000040))
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054)
recvmsg(r5, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)

5m1.714156866s ago: executing program 7 (id=607):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r4 = socket$kcm(0x2b, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x9}, 0x10)

4m46.424233324s ago: executing program 35 (id=607):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil)
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r4 = socket$kcm(0x2b, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x9}, 0x10)

2m46.696963723s ago: executing program 8 (id=902):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000009c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10005}, @any, 0x0, 0x1, 0xa, 0xfffffffffffffffd, 0x0, 0x8, 0x1})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000380)={{@host, 0x60ff}, 0x59, 0x2800000000000000, 0x1, 0xfffffffa})

2m46.311711191s ago: executing program 8 (id=907):
r0 = io_uring_setup(0x79bf, &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x35)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000200)='/dev/fuse\x00', 0x0, r0)

2m45.991878192s ago: executing program 8 (id=910):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, &(0x7f0000000040))
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7fffffff, 0x1008004, 0x71a7, 0xfffb, 0x3800, 0x1d, 0x0, 0x0, 0x4, 0xfc21}}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054)
recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)

2m44.016378985s ago: executing program 8 (id=916):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
get_robust_list(0x0, 0x0, 0x0)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
dup3(0xffffffffffffffff, r0, 0x80000)
keyctl$read(0xb, r1, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000)
shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil)
socket(0xa, 0x1, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
readv(r2, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

2m40.258647996s ago: executing program 8 (id=923):
syz_open_dev$media(&(0x7f0000000000), 0x2, 0x28102)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000540)="a6d4ecba03a16f7f173652e1fb717e1f9dd33fce37f49ddcfdd347bc7b264a29e27948a1d2c55c0d3f932391ca1cbf17e2b4a4f914f393137c2e44da10d621b56f21094ed2d55cd0b16da50d2295dadf129637a706970e0f5fac854621eac5ce8cd5c3df484cea813bfd2547d55d1931910c52594af069b448891d21c1614aba0863fddb2176bb05a4ddb044103934b9cd2a1da042d933c6a1ad9c0c62ac314f8de7394e3ede95230e55555fee6c32a2344505013adcddb3668fc2a6222cc658f64a04d4b0026d683ca35e806b70aae7d62cbdf6da", &(0x7f0000000640)=""/255, 0x4}, 0x20)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980))
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0x20000000, 0x5}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)

2m39.63688248s ago: executing program 8 (id=926):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, &(0x7f0000000040))
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7fffffff, 0x1008004, 0x71a7, 0xfffb, 0x3800, 0x1d, 0x0, 0x0, 0x4, 0xfc21}}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054)
recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)

2m24.473873791s ago: executing program 36 (id=926):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, &(0x7f0000000040))
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7fffffff, 0x1008004, 0x71a7, 0xfffb, 0x3800, 0x1d, 0x0, 0x0, 0x4, 0xfc21}}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054)
recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)

41.162888533s ago: executing program 9 (id=1192):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
chmod(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x57eeb83c9526c7ac)
truncate(0x0, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
lseek(r0, 0x7fffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
writev(r0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x1e, 0x301, 0x70bd25, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000))
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)

38.777275239s ago: executing program 4 (id=1198):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, r0, 0x200000000000000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000002dc0)=ANY=[@ANYBLOB="1c00000000bfa8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c00000000000000010000000100", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000003400000000000000010000000100", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000280000000000000001000000010000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000", @ANYRES32=0x0, @ANYBLOB], 0x150, 0x4040000}}, {{&(0x7f00000048c0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000004a80), 0x0, &(0x7f0000004b40), 0x0, 0x4000810}}], 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(0x0, 0xbfffffffdfffffff, 0x80c00)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xf}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0xec21, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x1, 0xbf, 0x101}, 0x10, 0x22dfb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff1e}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x4c}}, 0x8011)

38.720819479s ago: executing program 9 (id=1199):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0))
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080))
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, 0x0, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r6, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000)
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1})
capget(&(0x7f0000000080)={0x19980330}, &(0x7f00000003c0)={0x9, 0x3, 0x6, 0x4, 0xfffffffd, 0x7fff})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001a00010026bd7000000cd50202002000", @ANYRES32=0x0, @ANYBLOB="00000000080002000c00000014000100fc0200"/32], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200008, 0x0)

35.411666623s ago: executing program 6 (id=1207):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffa, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x4000}}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

33.781878121s ago: executing program 6 (id=1209):
socket$vsock_stream(0x28, 0x1, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000)
kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0)

32.763765091s ago: executing program 4 (id=1211):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000280)=0x1179, 0x4)

32.352597825s ago: executing program 9 (id=1212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e, 0x0, 0x10}, 0x24040010)

31.861596634s ago: executing program 5 (id=1213):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c004}, 0x0)

31.716495607s ago: executing program 6 (id=1214):
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4054)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x5}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000)

31.591846843s ago: executing program 4 (id=1215):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000)

31.341746787s ago: executing program 5 (id=1217):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x10)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
write$binfmt_format(r2, &(0x7f0000000140)='1\x00', 0x2)
io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0x55f5, r2, 0x0, 0x0, 0xf}])
dup3(r2, r0, 0x80000)

30.649301708s ago: executing program 9 (id=1218):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3, r4}, 0xc)
fstat(r2, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
statx(r3, &(0x7f0000002ac0)='.\x00', 0x2000, 0x8, &(0x7f0000002b00))
fstat(r4, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002c80)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0)
lstat(&(0x7f0000003100)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
read$FUSE(r8, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, 0x0, 0x0, 0x0)
lstat(&(0x7f00000032c0)='./file0\x00', &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
syz_fuse_handle_req(r3, &(0x7f0000000280)="ccdaec9a5514afe2f40995f878f1c2e79284890826b519dde70ee28289aa25ed02f7561be5ae5ed8f8851dfa775df1adf3df84658c43d4196cdc8bb841dc18a80a4debd8cfb780a56cd3490684098a3e3eb9878b8f43eebd050088527cbba84ef21152747a27c07c504cc91d98c95c2edf6c4a411f5869774e9b4abceed06c8d7b67ed2bac72e6a841620f93e00a8092c2297a806aaec89ffad958ad0ef9195ca50e02e588e7fdd8b70d4a9dc7369b68d863ca51fc80eb8eaae3ff663b66ce72088963c46328808158c1e7dfe2eec087914802c2863cf0b372027f4bdccd637e90b689a7329386ba5ebd70997c543165542c7d5571b08ea7e8d938028b3b06250748aa9ce1e6c93a3fe1889647e892c43ddde005a853c7ccfb93d420021c54f0cc2befbb87a3e15045aec680452844f0f7c2608ef676dbee7a1f58976b484303f8d01090383397beb2b27540245e2497b6d7c9da9b8293f80c358173df0de5d627ca491c43b5d6687e5a280faba9560c03d38ee418c0a6f0d6b695d356097a0860f5f58d016f1b595c39ad75ff0bcba76db1cc35cf7550037fe12ed14401c6472da66a764127aa99847968f17c6cd5e607b3658d74823faa7dbb9afd33054b2d27739942a2cfef25f93a4f9d1c72bb68003cea25eddd3845605c1edfdf033c2077c30f6d8c223c4e1192888ccfb1eab64cbcd5cebeea1d21a89b0b8274eb6933f85ccdfa1f88ac6574877808229c890e1ac3297656379d00851f506fe881141405cce1be0f1328e2e225b841ed55991395ba43f5fef7821b20863d9aad77f3671997353825ea57bc867ac855630eae985494bf459cc6a556591108cd5ef4c8f172a3721fee4b658701a12df964a2f4785bb1d26fd15d93be7760ddb2b9d09759045aef749276999f76f3b10c3048b76ee8e55b81d1d6898736e7f1ef5118b3d6f558899bec501abcd7c9e7b3dbce3f0400b432fab930e5b0990dcbe4ad24bbc7f85927e0b534ff8ff746d933c790342a9a71b4b89a0b463ec144f73d6d89ff36d0ed689797d48679a86ff0feea5f95fe4af1437a1c54c137276a3f9686e80e90c54ea25eb5bbc2d52ef339d3b80f534196c3aeca7b0a16574974eeb36ff00e92977e888d9fd6b8f6c26cfe325da908a55c088f68fa00c79ae56171940f50d429ca1e62758984b1e0d89020baefdfdd479397eda6e9b3913f96bf7c54906a34b6e1fe30a02c6500e538e2a850b6f0b806cf52a81b73b617611bd6c23016b993c1a34a6c5a12b2aed86c3de023dafec18e1b65e8e5eb6d6513bece8a1c55734bb03ef97694b568943b3aac28164d76af6aaebf33251e7f4827f2583cc7c0c1a567ce49d176b09098640ac11c768e0431be9b873d3fa05c24d5458d1a2f3c419895208fffb528b565a3776fb9f64939316de89c23380ce7d8065bd74134ffb0a6c3a5b56785a2c6ee46b08f5cbc035bcf16432bdc16e0f4664090c9f06dd8033d7ab52f05509a6a30109298110a262a590fce82a3756ad71c1952e04cdd3699ca7f696c761b8b364ed82d6dee4146f90720e6a0ed2060a7a65a7ce41294a55812d5a361910c2e951806c70fc89ff01a784f7a0b7587d8c9668604885291d2ca04bed2b010b82e9b99f986d318af86b0cc287be63f6a5194cece5fa9d88e9acd65db26509d0dd0422aec8e8724ee2a030ca044fe3e135a5abeee4d4379860a1568220d20df227183074ac92052a06ab5390018a1b9a2d3434e10c4e874d547255d36188afbd0b539fb9bc8f69a4a77f3b0807b7b11d08bb13d9c8b695e0b0efc0f27c572380f8927a4afcf438a1c033fb5a778d8af21b6887687537c740ae0be23c86f6a0b924adf845d8669fcb8fd0d2ed8ec69e8a05ce1a9f25489d57f9326612afd371a3b4af151c48843de373dcc981470ace792704c6e76436c03742a5589cd6f88fea2dc237cd54db5b7caa4f89aa898512b0d1744ed617ab5c23890ffac10cd0298145d91c028f302bbb03ada7061c661190ab8f6357e5bf86827005ad99647dd5cc9ef0375a65e7f64c76d7814f97214f687c16182c1ab0bdbb4595ebaee9e759e6b785b40f7d1f5932f76c21c3774b63b52d888e522208b50685afd76dc4a84fbcb55811cba4ea50b4ed408b4799b0170e73e1b4dba695312efbec2a3ef79f10fc73820ec7848b37fac81be67bde6f998568fd14e96070b0b4bdda8a683f1494e5fb14fec81496ff2020e117dbe4fada9abee6fb5c9eaa09938f995a24e68eb1f1056c28420610e7f1eb8c5934ac62070272322f8ac9bc978dee8e38f3ec9d8328a585e931f069f2806d0f96bccf84c9fde9742630d9e3e2290cee2734fd89ea1c677485580fa8cc0e963ea0e7b93717803ec79aa12093fe0f14a055ad9ce3d7ca44106cf63eb4939ae21087bc03734febc70955df28b701409207f4db85a0421251dd96849d074aacbced1ad34f914fc7734dfe14480238666fa7a81eee8856e6aed72826bf6393bd7182625f2c38aef4d60234f7b642633a61c39e3dbca390f40296807dc418d413cf2cb62e8edb8046a21f70f3abbc13989c2eae075dec51b09da971b18b65aac750016a9be25aaeb22a3005fb169bd4539276b4896494b7e5fe5ea0a7dc085eb102caa161eca79bcaac1945e0f89c0198e1bc7ec59bcfe30f94ec7d1c7f026e67b1e9d8b081679f9e813cfe5e69b7aa909c5f3c2db3703dee9be1ba0e9779af61f9dfcba60b8c03efea7213aaa09cf0b540fc5140bb3adadc2f43d3e3356e7771dbee21acb85b5cfecf1af7d12d0efbe6304abd6eb4835d7dadfec6aaba7423ab902ba28e6098611396a0a3be2ff93ac3bcb7be27b3691295a08f408d4473bd4c1406adb4750018f276023f0de645e603c31f2bd6dcf1f53de50d5caadfbc8eea01e313256efc0c0d0a2ac29b2e71c429a9badba015d8b237dc561eee02f4ff1af4cde21552c1a18f492bfba3ca407c3067277f3f343207641a4bfbaad56740c1942dce5e397b932bc7a32a473d0d374aad3d099900fda40f4cbae0ca6c3096c9b4c8385d2525455bfcb9d5ed9d3fb71c424c4217d5165d8ab3700502e568e7cb81b42b11189e0afcd5874e58b8a10d3f0b5404b224cd8d094c02b419cb889eec419a30fdb2c23d4d0e4eceadafdcec560014d20e3a3b840284a84ce83b1f9f68e5d6f78ce37e8146f1d42fa08e9cad2089b76090084ab4c8981bf8a356ebf7c0f25daf675ecaf9415d3b3071114272d1ec79b43aa84cca6d12d2f86dc279d0d8244adb2f5a2cedbc373adc7551e10d10e206ce98d5b11e6ddaa0af6f92791e8116c48e1b3165903585da7a66f04b6b5ec2acdcd0ada9a840666142bb075dfdedc2d9869b67e326dd665f33b1fd48a1a285326b7af1ca6fa5c24810ee5011210677535b88648144462ecdae8c768fc932f852df863986d5d2f57e6b51533807072dacd8346283d877cab96b1b9ec9bc8a42363d8fa5d073f95b762f1a5107621009bcb5e159c088392291f3bcb5cd217098c05fccbda5c1d2397b6b4da00e349e3fe8d55375c9da053f7306b6afd5b02bb811f4bafd215d1d38bbd2c72a3e0ea700556d6c2c1c3aaf3aabb6994057a138cd539e5a9239a71895312e65df88c45eb01e166c95f54b99781ab4257cce600112d1a98fb2a7aa8bab0dd586f9759c9d4c94852f3146d4a50e8e5edf58cd3cdb38c4fc3184540b30b4d657cedaad878f65706151d0c6ac1e52a57f38f0ed61c10ceeb0639d5d110beac2fa136e8c22b385a857ca76fdd769d084e34f60144adab14303715126c920ac4dbba18165aacdf0da782247db162efef1123591cf786e3e9cec1c6679e7e2b3c6644082ef8b50a80084770b48fc4bac85bd6c2788420f4d1345c6eefddfd4e4035c5ffd5c96d648c11d84f202f1be8c0f69088d572a76da81f0aa79c3548d853485fc1f87a131dfe3230d48f82e22a477049b68377d09fb05079229a92576a1fec58221ef33e2c2fe41411cdf86a56763dece42cbeec463921c40a81a07c041b502ef450c2745d81a5e9cfe33ee9c6fdabe642396a61654ad249d69e60f7cb0f721b5cb409e3f28d83c4b0c7da5587bf54769015d8f73f919ab09ae9b23cef15b0341a2c1c5860bd81e0a807b195846c7384bf47bad14ba44313d8b856ba20a8fe485b88ea551af3f6e34d6f15c4efb16b4abfcecb46d7acdab15dbf02b7c8041ac19839fbd3b47b53843ff9d574e31f778518924821083037b86317aeece93cd641d8d589eb962a89bba4823340e92829fc2efc68f8f291857571bd7e5e72cf760bc30846e4823b2c6632e423b2f36f05024b5dc01e3781d72d8edccf17998d3916592ca4776b6b0f65152a1d2481895bb8b4f436fdca312cb0ee6deb1b020c2a17edc875a2ead38f5921a722f3743487ba2c4f527ef57dcc54bce5b5117483291d892224da67bb20950a994854a187790720d6c795b82c732ce84a3964a899a6b26e1c5ac4f820f86410eea349bd9a570700002d2d857b567d0a22b06c4661c4e31c18108e9a94f737274502a6a20695f4d52f559de169b70e298d222112542e58f59847c29ddec2f7bdc781e8e120f7aad06e550ba19f818c5a1009932113c1ae6ddabd817b8eaddf28408d4cf43770cd431c823400c6619fce11153e05c4e3411388a847069a14aaf3221f6d4e84f2d028bb8f29ce50fcf3ced1634fee5ab30d304312cb9f40c848e11da08adff563fc8fde4d9948a0c77d55f3276b65b64f5a8d7e619a89dc0a7bd01e89d3dcf89cb2ed5f70e34b0ade36f557effa47bd9448b3a663707d28aea1e43ec7df59e5cddfa000f3c48bb734422f9df1b3748edf9b251415f3c59d4185fae0b48fdae5868ade2d09a0fd1ae502e6b06ba8650ec94c58c3758bae2b652660490c7669f148071d877a75d86ddeced6883ccdb51522f1a8de13472a642e68d604e3a9e166cabe6dcd8f8653388e5ce16f0371fe925412d6ecc7b6c923802a940ca68dff959880f528ac0926bfa185977efbaef4f380cc552d719c28f6aaaf0ee3d604f0700fa310dfcf80f4e14b7169f6d9e87268468b0a238e43a521d53beca345476e65dfcba079641bfcd7f82c5f900989c6b6373cd118cae4c3d25b6c00893410948eb37e56f676542c0f517b384f7dfca2530360bb3344f31e7770101b190ae36a4dc0dfa674c59bf155563c7db456616c92fc260c45785e2f9a1d4a6d4cc1723dcf47948f5b11e025f14d30f2e5fcb79c05fd735354d0f3748c7307a908a4e0ddecc8f59caa416b087b80210b165b81fa920fd1294162e231f802e9681fdcde542f1c43c86f74cb749e9116b20f688c43871939dbc89187a74c9d9f4a85b9c10b569a5413041a4c3220a08b4c4578ecefc478b59905b6479d1df6c8ca99249eb589e755fbaacb5305df04d43d3005e8581ec9043b57a16c5eb6d90939ebdebb08691216f9602f30e327ae304cf537675a2f144da65dfbe0a9a9b6206deddcfec137837a58534dcaaa2571297e15c739d578cfc606ff3d7dee40b9459d58bccb8095242c1b4a5d12441b6a3ee17e68f83d1d5af023b93f65dcba9d37591e3e3557d08e8c055adec1fff718733d94b826298d29d512f1f69bbc2f6c1e4e7cb9d9af39b8ead3c3381bfd52c3685e9903eb9e71357c9bff1bbf94b61c6460d3f5b466c772afd21c05ee9a653b328659d2506c34ca4257de633969b5238bf7679f4372c912f867e4688fa28c4e834fb62d1ecfd4a2f218888fc877974600d459bce1dd37cb953c147b8eb57beccc500766dab3d87b90330ef2f5b73348dbd821dae64f23dc37d2cbdef5a5ed13ba793d5cdc4d5d7ce903c016f8536351423cf28336fcf2b009755266229f4a2f4d9e689bd0f24103d9a8caf075c055d5800d5419b7aae41be0a6d57f325e39b2233b77402e33c6202e4faa8d0334195656e127c6d75e1de8fa6a88d43c3cd4e6fcc863a805ec8e0c5fa5cf3ea2935a6418fc71a54db5dc0b80cb884522aa0eaaa56dcb795b2db39a731e18b657936d63de82687d6d385e50dbf0619b0d14eaf29a19b734624663ee7ef54b7b3589b7b0a87f47cc1020b4c85a9d69be882ab7e51671f31e3c486f3d654d37d7dd1b1593f88cf3960a0b98ca3e9d5af49843f7b951162fdab673ec09f5d79ff7ad87b86554eb2de5bb09d01b44ffa8da6694494afaeb41ae1e6e695db8ff64538541428c5e4032fe6832e7b28fed1d0d4919f3ee9e87b4de73fb74a84a0f2c9a04409613fae6c306515ada96ff83731df655c52a13b1133c72d573e957384842dee93743eb0e1a32499846dd1a8e7eda702ae24aa24c198e2006726b8f5866687de6f3f553e9a462693c6f0965b3f29ae9c70584e22dc3ab7bc585a3117f09053363635348fd2a96f9f151dfb6bd7b2bfb72fdac445dea61ba8a934f74942fc677c7b1224cb858ec8c32d5f0f3d9d40c7a2da12bee3d386ef69d4989da4b94047ab797d633922acdce75005a11298653d52fdf7ef2918fdf357b4014663db819884e605c1a240ce4417ee59cdc12dd8d9113c3eaebaebe7e52efd312732262e1441bb7d541628a8520e88061c59c68f3f51190c6db146d50ce3dd4daca187de685e15ff4c3f74395bbaac60ae45f8bbb4f802c6364014d9dba29d66aca0e7669d52a9da103348cfa8b96b2aabc22163de8cbfcf2bc286af67fa71430e1daa5772dd47c258794d04f8a13b77ce1e1be8807c8154094bc857554ab4048b22fa4685b3e9d859237467b555fe06549e7ff3b636d15878fbf3e59cac0117f2e604a7e5f15c8548e6c23c2c0d8738eb9fc696c034badadeab0605dd91b3e3595c317769fd591b9275fe28523d2a8ca556391b6ae89623d44fe0b86fa811074782ae0dde64392bd005b0ffd1793cc1c04c7d9c52d7241fa76d1596e2aa46c6491278e131649c36b69337ace9e06b82eb0dce0eb0cfb00cd463581c6cd9026e6affd74450f0aa58852cfab785c66071377240c152a7d9ab10bf2d1fa09a8b4bce28456384207e5804f92e609a68b451a6973e9dcfd1e74988c44e3aa68f5f36ba920769b7f2a575a32ee27d3296759a41effe8ee9021c31bac3b73434affbb028b0d7cc3c89edc0f2757c3d6d02e423fcc254d9abd2169b037a573b950c849379d912add249bb00095a9f188f2119e2b0ead3bbba9415f6ba1a7fb44c8334303e62064e652f64101978f12ca994825a4e8885e013ea45a74e6ea0b5d4aa976ba495e68c51912dcab3a6e9505774b61c631f355db50e4efd71aebbdca88abe240b1348e508cde958eb2cebee6a10094603d65330940b774b1a9a2a2706ce890927944e15ba3a4d1346071024f3cceeb370f35504975ee89971ae2aee0f49c7b6d512f3d94648adab5d517d61378ef4490cebf11e74b06f1d12e0d1038f97a9db83dcc552df8b5f3b6fa16c90392e856b90711136bad10f0326fa03ff510fe4124bc9be66dcfef158612f0d12fee1109a06116c8cb43f401401175f57d00a6990d4e428f22c55ac26ce5c39fff4f0373055ab4cf12a8218d6d29009f712f07418006b32468902566e60071f7865780af25e4a5a86caf6737d5bd1c056775d991d7d38df0b940db2aecab2d6561bd2b0ec0a24999cc332f996b6a79c860c689cb90277c72b4f019397d443ead7da2fc399c3c1aa0919b3a8c7f3f132b9701df352a2455dcd3ded2709b118b27c64315b2e5f50bfb8fe405e115336cf8fdd14c426361ef13378d07ac89f32adfc673c1b880342af46b07a68550872f8601b7e553d6b85cd228310e715b04a9dcae3fb1a94e941eb76128f9823aeb7cdd9794b8ce06b67c572276529943011a199b5c1711b948c9b010eb6aa12078e4ebdbd7a2ceec24b74f0bd2287450d3f77e9c0845c10380371f8c4139f34eb0c86d08f4436f1d25d0504f3c007cc05b50d3c9d989ab607feea2b5895340132273b5428513823b326068700a8b775e2d80f3d596b7195efd2027addba98c61921fe6b62a0763ac52cc26be68e32f2f145c02ba7165b4da3d62381bf64f84da253f8276b0e6ff1fbca101f287dd3b230f52ddc4e026831eb283561a78394657861ce9726fb9cffc435ed015a2c1b01c84c971704932127457b7ca631c7cdfc674b0f46771550269b4c27a81499c34371e451527024c46913cec6613e0a5bf1bfda71a4896cf44239375795a05fa2ee3aceecb19667ff0dd3c06c6cc11ffeab425b0fb0d37d78462e8865d159bc51f76384ff764ca1c339dac369f9a11c4faa35ee3307716a6fdfecfd565184235f0ee657accfff04bfc762f393cfe5f2d33eb609a45e3c71aad68fb655c71a59fd95304f4a3a3538fb4e351fb2cab650ccc88d422fef47c2fc467a18c43ec089d157224321f35ba9d0cbd6121decfe0f6515830b4ce31c1b3e5ba8e62cbc8405d36854c1cc6d9f65f0be3c4640db05abeb3f84015b9529e72fe57aba33c97f6a326f284eb7da69d7d7a7145dd2b03443c2d1b954c2938f914c239f0c96bba7c55fa2404212d9663aaf13f84555416bbd61c734a49dd160737776be718bf44e55140d1a6256d5d5d49b5392e8e055e60e70f614fa4ec9d65a8e351cd4f3e53d4bd89ddde04766fcef057b98cddf165bb2015a6a6bf51af491ef3ebfa7e5fd0a98320fe4c3a926f29c0f5921c87378d11c46fdb6a421261b7bf52b2f3865cb351f97035067936a1fbd9d3f531ac7647dc46c05238efcf7a45227bd99ba106fed4da5c9f8052be06393d32449fc1198426fbecc63b923a147929ba328eb1711bd05cb6aca8037ea7ba6d1364a93017551b817158f8015e4bed789a3e442cd5183bd21de07833ea5009b8d0fb78d35017408304b9126ba2a7ad002acc3e6c9c94e7746c417897079b9daeef009c29e4620a01301f648797dd7d62caaee08548dbf3f6f92bc6280ebd3d8b552aee3e32387e2ca8c6ed8f97dc172d45f998fea3a81f1103932ac01535cf781d3a0898b35ad0b484fe8dd26ce7c5d05a0c7c065e3b01ef5834ecbbe653fc90af2fd760923f76689e1ea66683293f6de3880896e23c8740a71cca365b78e0a79d8eb9ba536db33bad96e501876e78803cbc7b8fc1110cfcbdf8a230539a9778bf27103b3b17c3ce7dbb83b1cad5ad373c021a04d95bb916e9514008912b6076a0e96bcaafd14803471747eee745c267d50fca05a2bdf4f4d4754d9ba4b2dba15cec3971d83a24085af10376276780ce207288bbc059b555f529eb32a15c45babe8bed1c3c7c8a38cc9cf646c9c84f83687d6267f125bf40867d3c2a608e3d89468f12ee35a39aa6ef3a40807aad303ce201cd2bd529dba41f2db26b36355a919f8ad6c401e7e54c2d99e054f90e4a92b20d0374532fb0cbd8891fbb69cf92b710de62d01d1a111d63a37ec9d2ee8b73fc964797a57890b739454313c4e072f4a711160ef4432397a1f7c0b6d3c121c3f96adef70d272b3c198b9a5b71565ed039c8996df47d3222a363b7f3df9db88a64b9a66f0ce49be3cdcaf51620f395a3ca59895192eb2029f25493536949eab228946fc87d01cab9384e917d90e31f965d07bc404c7e03b4470d651c16ead4577af88d406fad1581a8db44c27d61a5b313bf33a240e755a11b31bb26471a86ffec4c3d5f370cd840e475a074ed843662e812ad7abc0da730997f7e9a764e07d7c88bbbe7067175b887686d2bd0846500375ad51e4315ace05d32985513e436845eddf77359e85b518ea531e7ef96bc39934e36e8d65d30e0eb3c10b798e6325c65f064aaab10110b492acb8d871079e19debd57ad023a4387e27d4dbf0dc0eb7ed400fbab71454272bccb7d5eca3393efe02029152dedbaf3aa75e07433627b9dcb5cff8a8f66d8b568f1f9e47dc2e67b93c1a39ae824d39017330783f6060782bd3f06b8e1a2bc845bd8aefcb4af08741e24ec236303c77501e5018eb08635b52d9967e52597ac0ade93db8b6ad62947f8a33c957337b923c2b8c0f982b99e1b52dc40dfef9fd3ff25c394d51a79026e85817ed30801020582c6488bab0eb0b72b2175037b0027ba6e61a234c51ef63c401fc94222b7ad0aa8adf959350528573c0169577f96ba20a496539b1589ef4104bf933efe32128ed85ebfaaf3e1925b6f6b5280e969eb75d27667145d67078eb77de9a4d46b7004589aa453ab74c5ce26a17aaa3abc8c46630930b104a6ead42c40411a29c6082c00b20b1e43636ec4c027755c102a9b4395a62c7d6d5ed37983e86ec13b913d02ed459f28cd24f2afe01d4bfb13e39877e4587f559b255088a42e2e5afb2b1cdbf06735db0ed0deaf21fda5cea616d5603eb7ac16e4ad99d24ec468bfb847b1d2465dd1d566f38c74d25fa40aef316495c3242ad032dce633b3f7f57f81e23f09386afa2963b5ab9ba582195eefa3a496ee9a9f46bda4648132ef264ce3b6549880b03310d21a86a5c52416c4137ad22abee4d5cf738046545a662567ccd9a87d3c66fac5338588b414dab3140c824059e8df9d97ee5a1013864707235b5c63836dcc2dcbf4dae3804a75fe50bc3fe3e68b3b57ac9a0b884b7b7895ac0508c25f6fe85a6ef46cfcc8a39375df9feedef27f1f20f47a16fc93a83ea4db3f2e294f04911fbae09325227fce932fd24c45cfbfa61e00205b3ed16d37ca4e25677b8ae532077d16769434899fd99f903d9dd9977dc5f01ea2b0cedf5b12c3ac611a7fd61f2bdf79503b652f3e5ee81680fd2ad430324f984d6f103685fa8c2fb2c17bd8daa810e64a6fa372bab0d7224e768ad1e757bec87c39c9b091b57c62b718a67be0195fdce359922a9ac45bd49fc1232c6c4badf70b527f58f1b999fbdcae94e38fee588901aba930ab361507a0d8de30c13c054e45f41e4583bdbb150e87c320215b4896af114b44fb4a82337316c1f51000f2eafb0723a003c81118593a8c9474848cb1c262b45cd4d00542bf2966e5b3737ff8d3be018846c27411b26da7413eca24e61c726bff0abf8e452a940bc57bb57d11f811eca06963778b4240ae6a5409c984e6296582d7e1f4faa1adde8425e31c13f15ab074dab9f355a869ae8b928c19637d6780e644b722ee47a4b026029c993e4cd9cf5d9e0f8a895393ea6073590f649afd5f3d72710e7fc82aa5d44820433636c313d19115abf23f1a66f217c2668fa72b6bc766506b933817475e17f70dfd66b59856835a7c93967207710e31a291737034defd0c98cb507271c90e6011357f355f91262ac7f736ba11393afa9fcaf9d1a9a05ee29d5eb995665dbf7808ecfb30442a7b483e48881ba7822820d30d61a0cc47c6d7eb9bea83f9716a43f81cf816cd2a824caceeeb2c55cde088b7057197c2ec3b5adef6520c5686eec6a88ef63ff8b3062e1aeaa8adf1d7e337aa47f5785c629eca2fa77f38dbd9c1f093d50d3194ee1883e70dbd011dc6ee84e78910ba0e53faba59d2349ad8bdac87062060011fbf8b2fe6411796a94135cd7d2c637f598de0bdd1d6df2343808e83896aa36c5a96f7b09665fb431fe7dbc536c9da6b4cb3ab20a5e99018a1e4b817d1094065fab6da2a0cccbdb7fd6679f77", 0x2000, &(0x7f00000034c0)={&(0x7f0000002280)={0x50, 0x0, 0x5, {0x7, 0x2d, 0x5, 0x431, 0xc, 0x3, 0x7f, 0x8, 0x0, 0x0, 0x1, 0x3285}}, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x3360d601}}, &(0x7f0000002300)={0x18, 0x0, 0x4, {0xf7100000}}, &(0x7f0000002340)={0x18, 0x0, 0x0, {0x4}}, 0x0, 0x0, &(0x7f0000002400)={0x60, 0x0, 0x8000000000000000, {{0xe, 0x8, 0x0, 0x80000001, 0x800, 0x0, 0x2, 0x8000}}}, 0x0, &(0x7f00000024c0)=ANY=[], 0x0, &(0x7f00000026c0)={0x78, 0x0, 0x1, {0x5, 0x8, 0x0, {0x4, 0x9, 0x200, 0x5, 0x9, 0x6, 0x7f, 0x8, 0x81, 0x4000, 0xfffffff7, 0x0, 0x0, 0x9, 0x8001}}}, &(0x7f0000002800)={0x90, 0xfffffffffffffffe, 0x9, {0x0, 0x0, 0x2, 0x1, 0xa, 0x0, {0x4, 0x7, 0x0, 0x5, 0x8, 0xfff, 0x7fffffff, 0xea, 0xffffffff, 0xc000, 0x2044, 0x0, 0x0, 0x401}}}, &(0x7f0000002540)=ANY=[], &(0x7f0000002dc0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0b0000000900000000000000030000000000000006000000000000000000000003000000020000000000000000000000000000001d0000000000000003000000000000007b0000000300000003000000000000000700000000000000ffffff7f000000000900000000000000d50000000000000003000000000000001600000003000000e807000000a00000ff7f0000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="ff030000feffffff00000000010000000000000006000000000000000a000000060000002f6465762f7a65726f0000000000000002000000000000000300000000000000c377da79000000000000000000000000080000000900000006000000000000000000000004000000000000000000000005000000000000000400000000000000060000000000000006000000fbffffff0600000000200000ffffff7f", @ANYRES32=r6, @ANYBLOB="0400000008000000000000000500000000000000ca0d0000000000000100000008000000f00000000000000000000000000000000100000000000000070000000000000006000000000000008100000008000000060000000000000005000000000000000500000000000000030000000000000001000000000000000000000000000e0029", @ANYRES32=0xee00, @ANYBLOB="0100000006000000000000000100000000000000018000000700"], &(0x7f00000031c0)={0xa0, 0x0, 0x2, {{0x4, 0x0, 0x9, 0x8000, 0x20, 0x3ff, {0x2, 0xfffffffffffeffff, 0x5, 0x1, 0x10000, 0x12000000000, 0x8, 0xffffffff, 0x580349ad, 0x4000, 0x80000001, r7, 0xee01, 0x3, 0x191}}}}, 0x0, &(0x7f0000003380)={0x130, 0x0, 0x89e, {0x1, 0x7f, 0x0, '\x00', {0x8000, 0xbfd, 0x8, 0x6, 0x0, r9, 0x6000, '\x00', 0x65, 0xb76, 0x101, 0x0, {0xba29, 0x8000}, {0xf, 0x19cf}, {0x8, 0x8}, {0x1, 0xa}, 0x5, 0x80, 0x7c5a, 0x380000}}}})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, 0x0, 0x1000000)
syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)

30.559755632s ago: executing program 5 (id=1219):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)})

30.559428422s ago: executing program 4 (id=1220):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r1, 0x1000006)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000})
r2 = timerfd_create(0x0, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000200)={{}, {0x77359400}}, 0x0)
ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000000)=0x10001)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0)

28.758673947s ago: executing program 6 (id=1222):
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e"], 0xec)
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000340)={0xffffff80, 0x1, "9e2ae6fb200c976a3b82c85b4cf1a4a47b390f9521b1add9abb4c78d079ea7fe", 0xff, 0x5, 0x0, 0xc, 0x200})
fcntl$setstatus(r1, 0x4, 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
fsopen(&(0x7f0000000040)='cifs\x00', 0x1)
socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x20, 0x0, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

28.638541804s ago: executing program 5 (id=1223):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000180)=0xf751)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r0 = socket(0x840000000002, 0x3, 0xff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001309010127bd7000fcdbdf250000000a080022007f00000108005900ac1414aa4e167f01ddfeedac789074f3ddd634aa836cc4f376fb7aeb1e3d617f23e9a1786dd13bf7b50cb6475308ee9d52d31a8ca16f808f6a7b7af1e7d35f9fa4f5c4d3cc8309495f75494ed3787dd5bec511297b62deeb8671b650302f83fcf7b85325ce9798b0616af5"], 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000)
socket(0xa, 0x5, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = memfd_secret(0x80000)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000100)={r2}, 0x1)
ftruncate(r3, 0x51a9497)
r4 = userfaultfd(0x80001)
set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1})
readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/215, 0xd7}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x200480d5)
sched_setscheduler(0x0, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x18, 0x31, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

26.332083125s ago: executing program 4 (id=1225):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
lchown(&(0x7f0000000180)='./file0\x00', r2, 0xffffffffffffffff)

25.673965393s ago: executing program 1 (id=1226):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$ax25_int(r0, 0x101, 0x5, 0x0, 0x0)

25.565959783s ago: executing program 6 (id=1227):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, &(0x7f0000000040))
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000002940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}], 0x492492492492515, 0x4054)
recvmsg(r5, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20f2)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)

25.500168521s ago: executing program 4 (id=1228):
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e"], 0xec)
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000340)={0xffffff80, 0x1, "9e2ae6fb200c976a3b82c85b4cf1a4a47b390f9521b1add9abb4c78d079ea7fe", 0xff, 0x5, 0x0, 0xc, 0x200})
fcntl$setstatus(r1, 0x4, 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
fsopen(&(0x7f0000000040)='cifs\x00', 0x1)
socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x20, r6, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$uac3(0x6, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="0578c93f85d7002eaafc8d02000010"], 0x2, [{0xe8, &(0x7f0000000340)=ANY=[@ANYBLOB="e8032cea1e2fe8fd72e3cb9903ab0286953f4de221402aa8652ed92f1248534e274379ba3d78e118fe57f72a3fb02c956a75a7df5e12dbb5c73fcb07a6147a5c81b97444af852f7f7feac3283be951e616d903e7d8ed4891313f46996c09046e781ac08e2d9f85f0b61d1f19991f016e9bd8ade1ee35e93a1ff9ca057cfbfda93254c83121b8e4590a0b7216c6b029b906824be45467f129"]}, {0x0, 0x0}]})

25.372769547s ago: executing program 5 (id=1229):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x10)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
write$binfmt_format(r2, &(0x7f0000000140)='1\x00', 0x2)
io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0x55f5, r2, 0x0, 0x0, 0xf}])
dup3(r2, r0, 0x80000)

25.255722375s ago: executing program 1 (id=1230):
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x1f, 0x0, 0x0)
mkdir(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x15)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e, 0x0, 0x10}, 0x24040010)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)

25.255447935s ago: executing program 9 (id=1231):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0})

24.040324659s ago: executing program 1 (id=1232):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)

23.959858684s ago: executing program 6 (id=1233):
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4054)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x5}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000)

23.047656295s ago: executing program 9 (id=1234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

23.047130845s ago: executing program 1 (id=1235):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x2180, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0)
add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd)
prlimit64(0x0, 0x5, &(0x7f0000000140)={0xe, 0x8c}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$isdn(0x22, 0x2, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, <r6=>r4})
r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1ff, 0x141941)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0)
socket$isdn(0x22, 0x2, 0x2)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r3, 0x7})
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xe000003, 0xf, &(0x7f00000000c0)=[0x1, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0x4, 0xfffffff7, 0x9, 0xf5, 0x7, 0x2, 0x0, 0x4, 0x9], 0x0, 0x4})

23.046921454s ago: executing program 5 (id=1236):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0)
epoll_create(0x89a)

17.444933033s ago: executing program 1 (id=1237):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
chmod(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x57eeb83c9526c7ac)
truncate(0x0, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
lseek(r0, 0x7fffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
writev(r0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x1e, 0x301, 0x70bd25, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000))
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)

15.855778308s ago: executing program 1 (id=1238):
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e"], 0xec)
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000340)={0xffffff80, 0x1, "9e2ae6fb200c976a3b82c85b4cf1a4a47b390f9521b1add9abb4c78d079ea7fe", 0xff, 0x5, 0x0, 0xc, 0x200})
fcntl$setstatus(r1, 0x4, 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
fsopen(&(0x7f0000000040)='cifs\x00', 0x1)
socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x20, 0x0, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

9.570562129s ago: executing program 37 (id=1228):
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e"], 0xec)
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000340)={0xffffff80, 0x1, "9e2ae6fb200c976a3b82c85b4cf1a4a47b390f9521b1add9abb4c78d079ea7fe", 0xff, 0x5, 0x0, 0xc, 0x200})
fcntl$setstatus(r1, 0x4, 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
fsopen(&(0x7f0000000040)='cifs\x00', 0x1)
socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x20, r6, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$uac3(0x6, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="0578c93f85d7002eaafc8d02000010"], 0x2, [{0xe8, &(0x7f0000000340)=ANY=[@ANYBLOB="e8032cea1e2fe8fd72e3cb9903ab0286953f4de221402aa8652ed92f1248534e274379ba3d78e118fe57f72a3fb02c956a75a7df5e12dbb5c73fcb07a6147a5c81b97444af852f7f7feac3283be951e616d903e7d8ed4891313f46996c09046e781ac08e2d9f85f0b61d1f19991f016e9bd8ade1ee35e93a1ff9ca057cfbfda93254c83121b8e4590a0b7216c6b029b906824be45467f129"]}, {0x0, 0x0}]})

8.06680975s ago: executing program 38 (id=1233):
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4054)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x2, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x5}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000)

7.068676764s ago: executing program 39 (id=1236):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0)
epoll_create(0x89a)

6.904001513s ago: executing program 40 (id=1234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

0s ago: executing program 41 (id=1238):
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e"], 0xec)
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000340)={0xffffff80, 0x1, "9e2ae6fb200c976a3b82c85b4cf1a4a47b390f9521b1add9abb4c78d079ea7fe", 0xff, 0x5, 0x0, 0xc, 0x200})
fcntl$setstatus(r1, 0x4, 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
fsopen(&(0x7f0000000040)='cifs\x00', 0x1)
socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x20, 0x0, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

kernel console output (not intermixed with test programs):

dge_slave_0) entered blocking state
[  198.985593][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.017777][ T5359] device bridge_slave_0 entered promiscuous mode
[  199.037843][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.045116][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.056783][ T5359] device bridge_slave_1 entered promiscuous mode
[  199.085658][   T22] usb 5-1: Using ep0 maxpacket: 16
[  199.092226][   T22] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  199.118607][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.138329][   T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.153539][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.282571][   T48] Bluetooth: hci5: command 0x040f tx timeout
[  200.390050][   T22] usb 5-1: config 0 has no interface number 0
[  200.459876][   T22] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  200.481956][ T5359] team0: Port device team_slave_0 added
[  200.518723][ T5359] team0: Port device team_slave_1 added
[  200.548668][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.581039][   T22] usb 5-1: Product: syz
[  200.611211][   T22] usb 5-1: Manufacturer: syz
[  200.633923][   T22] usb 5-1: SerialNumber: syz
[  200.662636][   T22] usb 5-1: config 0 descriptor??
[  200.668627][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.712237][   T22] usb 5-1: Found UVC 0.00 device syz (046d:08d3)
[  200.754932][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.787017][   T22] usb 5-1: No valid video chain found.
[  200.881490][   T14] usb 5-1: USB disconnect, device number 4
[  201.060541][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.146433][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.153417][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.444823][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.315651][ T4276] Bluetooth: hci5: command 0x0419 tx timeout
[  202.403092][ T5359] device hsr_slave_0 entered promiscuous mode
[  202.421763][ T5359] device hsr_slave_1 entered promiscuous mode
[  202.541840][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.558827][ T5359] Cannot create hsr debugfs directory
[  204.381838][ T5413] netlink: 'syz.0.256': attribute type 4 has an invalid length.
[  204.391403][ T5413] netlink: 152 bytes leftover after parsing attributes in process `syz.0.256'.
[  204.513772][ T5413] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  204.705573][ T4346] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  205.755547][ T4346] usb 4-1: Using ep0 maxpacket: 16
[  205.765222][ T4346] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  205.785230][ T4346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.821144][ T4346] usb 4-1: config 0 has no interface number 0
[  205.986127][ T4346] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  205.995688][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.011037][ T4346] usb 4-1: Product: syz
[  206.015219][ T4346] usb 4-1: Manufacturer: syz
[  206.020169][ T4346] usb 4-1: SerialNumber: syz
[  206.046398][ T4346] usb 4-1: config 0 descriptor??
[  206.069079][ T4346] usb 4-1: Found UVC 0.00 device syz (046d:08d3)
[  206.097843][ T5359] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  206.107103][ T4346] usb 4-1: No valid video chain found.
[  206.123250][ T5359] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  206.177890][ T5359] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  206.205718][ T5359] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  206.469802][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.682988][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  206.745771][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  206.906994][ T5359] 8021q: adding VLAN 0 to HW filter on device team0
[  207.023434][   T41] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  207.032877][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  207.045154][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  207.054848][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.062056][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.204440][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  207.266401][   T41] usb 1-1: Using ep0 maxpacket: 16
[  207.285333][   T41] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  207.294010][   T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.337420][ T5441] misc userio: No port type given on /dev/userio
[  207.685514][   T41] usb 1-1: config 0 has no interface number 0
[  207.693535][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  207.703306][   T41] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  207.712896][   T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.721579][   T41] usb 1-1: Product: syz
[  207.743245][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  207.748200][   T41] usb 1-1: Manufacturer: syz
[  207.752305][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.763077][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.777677][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  207.809609][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  207.820315][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  208.275433][   T41] usb 1-1: SerialNumber: syz
[  209.156544][   T14] usb 4-1: USB disconnect, device number 6
[  209.200133][   T41] usb 1-1: config 0 descriptor??
[  209.225491][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  209.267056][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  209.277015][   T41] usb 1-1: can't set config #0, error -71
[  209.305627][   T41] usb 1-1: USB disconnect, device number 4
[  209.316182][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  209.348766][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  209.386334][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  209.434986][ T5359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  209.573439][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  210.498699][ T4314] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  210.662562][ T5452] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.766266][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  210.774566][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  210.804178][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  210.895006][ T4314] usb 4-1: config index 0 descriptor too short (expected 8089, got 27)
[  211.595864][ T4314] usb 4-1: config 159 has too many interfaces: 93, using maximum allowed: 32
[  211.604778][ T4314] usb 4-1: config 159 has an invalid descriptor of length 234, skipping remainder of the config
[  211.724678][ T4314] usb 4-1: config 159 has 0 interfaces, different from the descriptor's value: 93
[  211.786548][ T4314] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  211.821330][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  211.838443][ T4314] usb 4-1: Product: syz
[  211.851841][ T4314] usb 4-1: Manufacturer: syz
[  211.860595][ T4314] usb 4-1: SerialNumber: syz
[  212.032446][ T5452] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.358130][ T5452] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.602865][ T5452] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.170483][ T5452] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.217192][ T5452] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.258734][ T5452] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.761860][ T5496] netlink: 256 bytes leftover after parsing attributes in process `syz.4.273'.
[  214.775173][ T5496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'.
[  215.443204][ T5452] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.580852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  215.595875][ T4343] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  215.602422][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  215.603471][ T4346] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  215.626390][ T4314] usb 4-1: USB disconnect, device number 7
[  215.646507][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.815602][ T4343] usb 2-1: Using ep0 maxpacket: 16
[  215.822504][ T4343] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  215.855674][ T4346] usb 1-1: Using ep0 maxpacket: 16
[  215.863556][ T4346] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  215.892325][ T4343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.908908][ T4346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.036310][ T4343] usb 2-1: config 0 has no interface number 0
[  216.765892][ T4346] usb 1-1: config 0 has no interface number 0
[  216.780404][ T4343] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  216.797464][ T4346] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  216.815449][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.832750][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.845443][ T4343] usb 2-1: Product: syz
[  216.849710][ T4343] usb 2-1: Manufacturer: syz
[  216.874844][ T4346] usb 1-1: Product: syz
[  216.879514][ T4343] usb 2-1: SerialNumber: syz
[  216.895110][ T4346] usb 1-1: Manufacturer: syz
[  216.912792][ T4343] usb 2-1: config 0 descriptor??
[  216.935987][ T4346] usb 1-1: SerialNumber: syz
[  216.959238][ T4343] usb 2-1: Found UVC 0.00 device syz (046d:08d3)
[  216.976374][ T4346] usb 1-1: config 0 descriptor??
[  217.017837][ T4346] usb 1-1: Found UVC 0.00 device syz (046d:08d3)
[  217.026004][ T4343] usb 2-1: No valid video chain found.
[  217.046378][ T4346] usb 1-1: No valid video chain found.
[  217.280358][ T4346] usb 1-1: USB disconnect, device number 5
[  218.754457][ T5516] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  219.107605][ T4572] usb 2-1: USB disconnect, device number 2
[  221.849455][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  221.858986][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  221.906228][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  221.914638][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  221.976844][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  222.002834][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  222.036216][ T5359] device veth0_vlan entered promiscuous mode
[  223.060628][ T5359] device veth1_vlan entered promiscuous mode
[  223.354988][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  223.373083][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  223.386460][ T5359] device veth0_macvtap entered promiscuous mode
[  223.399096][ T5359] device veth1_macvtap entered promiscuous mode
[  223.952633][ T5565] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  224.617381][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  224.648063][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  224.660279][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.791529][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.946244][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.985094][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.025688][ T4343] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  226.067823][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.115543][ T4343] usb 5-1: Using ep0 maxpacket: 16
[  226.123185][ T4343] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  226.135509][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.159628][ T4343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.171599][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.211661][ T4343] usb 5-1: config 0 has no interface number 0
[  226.229300][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  226.271170][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  226.465900][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.496280][ T4343] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  226.505324][ T4343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.534210][ T4343] usb 5-1: Product: syz
[  226.538639][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.540984][ T4343] usb 5-1: Manufacturer: syz
[  226.593738][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.601261][ T4343] usb 5-1: SerialNumber: syz
[  226.626563][ T4343] usb 5-1: config 0 descriptor??
[  226.651655][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  226.662647][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  226.677318][ T4343] usb 5-1: Found UVC 0.00 device syz (046d:08d3)
[  226.690847][ T4343] usb 5-1: No valid video chain found.
[  227.007531][ T5359] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.045300][ T5359] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.074429][ T5359] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.104831][ T5359] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.202691][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.224288][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.244316][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  228.322054][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.335079][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.345637][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  228.701852][ T5605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'.
[  228.835401][    C0] hrtimer: interrupt took 46438 ns
[  228.986141][   T14] usb 5-1: USB disconnect, device number 5
[  230.485107][ T4394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.081983][ T4394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.288669][ T4394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.534200][ T4394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.645617][ T4318] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  232.845557][ T4318] usb 2-1: Using ep0 maxpacket: 16
[  232.861658][ T4318] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  232.918876][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.949079][ T4318] usb 2-1: config 0 has no interface number 0
[  232.975041][ T4318] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  233.014477][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.033985][ T4318] usb 2-1: Product: syz
[  233.054221][ T4318] usb 2-1: Manufacturer: syz
[  233.094000][ T4318] usb 2-1: SerialNumber: syz
[  233.127925][ T4318] usb 2-1: config 0 descriptor??
[  233.219524][ T4318] usb 2-1: Found UVC 0.00 device syz (046d:08d3)
[  233.251248][ T4318] usb 2-1: No valid video chain found.
[  235.496374][ T4314] usb 2-1: USB disconnect, device number 3
[  239.265500][ T4314] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  239.504473][ T4314] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  239.532915][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.069999][ T4314] usb 5-1: config 0 descriptor??
[  241.117616][ T5716] program syz.1.327 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  241.819829][ T4314] ath6kl: Failed to submit usb control message: -71
[  241.826647][ T4314] ath6kl: unable to send the bmi data to the device: -71
[  241.833714][ T4314] ath6kl: Unable to send get target info: -71
[  242.015568][ T4314] ath6kl: Failed to init ath6kl core: -71
[  242.906654][ T5736] autofs4:pid:5736:autofs_fill_super: called with bogus options
[  242.944884][ T4314] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[  243.003758][ T4314] usb 5-1: USB disconnect, device number 6
[  243.035521][ T4343] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  243.225517][ T4343] usb 4-1: Using ep0 maxpacket: 16
[  244.012856][ T4343] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  244.025646][ T4343] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.035909][ T4343] usb 4-1: config 0 has no interface number 0
[  244.055659][ T4343] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  244.074531][ T4343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.082799][ T4343] usb 4-1: Product: syz
[  244.087054][ T4343] usb 4-1: Manufacturer: syz
[  244.091777][ T4343] usb 4-1: SerialNumber: syz
[  244.154446][ T4343] usb 4-1: config 0 descriptor??
[  244.300203][ T4343] usb 4-1: Found UVC 0.00 device syz (046d:08d3)
[  245.444264][ T4343] usb 4-1: No valid video chain found.
[  245.463812][ T4343] usb 4-1: USB disconnect, device number 8
[  248.869845][ T4394] device hsr_slave_0 left promiscuous mode
[  248.895101][ T4394] device hsr_slave_1 left promiscuous mode
[  248.917140][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.950230][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.994516][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.009016][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.056792][ T4394] device bridge_slave_1 left promiscuous mode
[  249.068092][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.152900][ T4394] device bridge_slave_0 left promiscuous mode
[  249.162763][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.330560][ T4394] device veth1_macvtap left promiscuous mode
[  249.352610][ T4394] device veth0_macvtap left promiscuous mode
[  249.384575][ T4394] device veth1_vlan left promiscuous mode
[  249.407587][ T4394] device veth0_vlan left promiscuous mode
[  250.694798][ T5800] binder: 5799:5800 ioctl 4018620d 0 returned -22
[  253.081750][ T5819] netlink: 256 bytes leftover after parsing attributes in process `syz.3.353'.
[  253.095535][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'.
[  255.449401][  T127] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  255.523687][ T4394] team0 (unregistering): Port device team_slave_1 removed
[  255.597650][ T4394] team0 (unregistering): Port device team_slave_0 removed
[  255.644199][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.668725][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  255.675199][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  255.708484][  T127] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  255.737502][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.738860][  T127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.802845][  T127] usb 1-1: config 0 has no interfaces?
[  255.837404][  T127] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  255.861119][  T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.909488][  T127] usb 1-1: config 0 descriptor??
[  256.510776][ T4394] bond0 (unregistering): Released all slaves
[  257.036033][ T5863] netlink: 256 bytes leftover after parsing attributes in process `syz.1.368'.
[  257.165926][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'.
[  258.615657][ T3598] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  259.180396][ T5885] overlayfs: overlapping lowerdir path
[  259.242173][ T5887] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  259.251030][ T5887] overlayfs: overlapping lowerdir path
[  259.835663][ T3598] usb 2-1: Using ep0 maxpacket: 8
[  259.844882][ T3598] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  259.960443][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.011653][ T3598] usb 2-1: Product: syz
[  260.035525][ T3598] usb 2-1: Manufacturer: syz
[  260.040290][ T3598] usb 2-1: SerialNumber: syz
[  260.114315][ T3598] usb 2-1: config 0 descriptor??
[  260.128024][ T4346] usb 1-1: USB disconnect, device number 6
[  260.333283][ T3598] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  261.667836][ T3598] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  262.435921][ T5910] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  262.801108][ T4343] usb 2-1: USB disconnect, device number 4
[  264.785047][ T4343] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  265.015680][ T4343] usb 1-1: Using ep0 maxpacket: 16
[  265.031334][ T4343] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  265.048936][ T4343] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.073059][ T4343] usb 1-1: config 0 has no interface number 0
[  265.112804][ T4343] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  265.130668][ T4343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.150442][ T4343] usb 1-1: Product: syz
[  265.161311][ T4343] usb 1-1: Manufacturer: syz
[  265.172841][ T4343] usb 1-1: SerialNumber: syz
[  265.213934][ T4343] usb 1-1: config 0 descriptor??
[  265.332408][ T4343] usb 1-1: Found UVC 0.00 device syz (046d:08d3)
[  265.385642][ T4343] usb 1-1: No valid video chain found.
[  268.270858][ T4314] usb 1-1: USB disconnect, device number 7
[  272.355617][  T127] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  274.167182][  T127] usb 5-1: Using ep0 maxpacket: 16
[  274.205743][  T127] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  274.301220][  T127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.332437][  T127] usb 5-1: config 0 has no interface number 0
[  274.451195][  T127] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  274.541907][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.584543][  T127] usb 5-1: Product: syz
[  274.607789][  T127] usb 5-1: Manufacturer: syz
[  274.630974][  T127] usb 5-1: SerialNumber: syz
[  274.688007][  T127] usb 5-1: config 0 descriptor??
[  274.709797][  T127] usb 5-1: Found UVC 0.00 device syz (046d:08d3)
[  274.738591][  T127] usb 5-1: No valid video chain found.
[  276.103446][ T6043] Bluetooth: MGMT ver 1.22
[  276.671659][  T127] usb 5-1: USB disconnect, device number 7
[  280.502337][ T6099] input: syz1 as /devices/virtual/input/input6
[  284.525458][ T4314] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  284.738973][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.746309][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.855571][ T4314] usb 2-1: Using ep0 maxpacket: 8
[  284.871446][ T4314] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  284.889849][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.901505][ T4314] usb 2-1: Product: syz
[  284.907697][ T4314] usb 2-1: Manufacturer: syz
[  284.912408][ T4314] usb 2-1: SerialNumber: syz
[  284.930520][ T4314] usb 2-1: config 0 descriptor??
[  285.104538][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.140234][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.151882][ T4314] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  285.476106][ T6112] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.520777][ T6112] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.529872][ T6112] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.539613][ T6112] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.613742][ T4314] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  286.634958][ T4314] usb 2-1: USB disconnect, device number 5
[  286.984983][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  286.994541][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  287.003916][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  287.013401][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  287.021282][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  287.035721][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  287.208504][   T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.269611][ T6165] lo speed is unknown, defaulting to 1000
[  287.537779][   T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.029205][   T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.303443][   T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.601001][ T6182] netlink: 256 bytes leftover after parsing attributes in process `syz.4.439'.
[  288.611253][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'.
[  289.471573][ T4276] Bluetooth: hci0: command 0x0409 tx timeout
[  291.380967][ T6165] chnl_net:caif_netlink_parms(): no params data found
[  291.506198][ T4276] Bluetooth: hci0: command 0x041b tx timeout
[  292.072836][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.112953][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.136199][ T6165] device bridge_slave_0 entered promiscuous mode
[  292.454520][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.467294][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.527400][ T6165] device bridge_slave_1 entered promiscuous mode
[  293.059894][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  293.073516][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  293.083680][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  293.099493][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  293.111350][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  293.120362][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  293.585760][ T4276] Bluetooth: hci0: command 0x040f tx timeout
[  293.817450][ T6165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.938646][ T6165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.956581][ T6225] lo speed is unknown, defaulting to 1000
[  294.106137][ T6165] team0: Port device team_slave_0 added
[  294.114105][ T6165] team0: Port device team_slave_1 added
[  294.257683][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.278880][ T6239] netlink: 'syz.4.449': attribute type 1 has an invalid length.
[  294.286712][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.331781][ T6239] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  294.351257][ T6165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.399731][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.418015][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.450955][ T6165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.932688][ T6215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  295.191244][ T4276] Bluetooth: hci2: command 0x0409 tx timeout
[  295.210076][ T6165] device hsr_slave_0 entered promiscuous mode
[  295.362548][ T6165] device hsr_slave_1 entered promiscuous mode
[  295.375579][ T6165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.397377][ T6165] Cannot create hsr debugfs directory
[  296.411890][ T4276] Bluetooth: hci0: command 0x0419 tx timeout
[  297.001983][   T46] device hsr_slave_0 left promiscuous mode
[  297.177199][   T46] device hsr_slave_1 left promiscuous mode
[  297.218471][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.226416][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.265574][ T4276] Bluetooth: hci2: command 0x041b tx timeout
[  297.265869][   T46] device bridge_slave_1 left promiscuous mode
[  297.310293][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.359890][   T46] device bridge_slave_0 left promiscuous mode
[  297.389971][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.552210][   T46] device veth1_macvtap left promiscuous mode
[  297.575504][   T46] device veth0_macvtap left promiscuous mode
[  297.591606][   T46] device veth1_vlan left promiscuous mode
[  297.605840][   T46] device veth0_vlan left promiscuous mode
[  299.896989][ T4276] Bluetooth: hci2: command 0x040f tx timeout
[  300.248599][   T46] team0 (unregistering): Port device team_slave_1 removed
[  300.286545][   T46] team0 (unregistering): Port device team_slave_0 removed
[  300.324484][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.371072][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.648814][   T46] bond0 (unregistering): Released all slaves
[  300.854668][ T6225] chnl_net:caif_netlink_parms(): no params data found
[  301.905581][ T4276] Bluetooth: hci2: command 0x0419 tx timeout
[  301.926446][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.942965][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.957604][ T6225] device bridge_slave_0 entered promiscuous mode
[  301.973648][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.017661][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.147600][ T6225] device bridge_slave_1 entered promiscuous mode
[  302.274444][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.307945][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.383993][ T6165] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  302.442969][ T6165] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  302.471367][ T6225] team0: Port device team_slave_0 added
[  302.486895][ T6165] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  302.504577][ T6165] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  302.549013][ T6225] team0: Port device team_slave_1 added
[  302.734186][ T4346] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  302.761715][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  302.768971][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.794939][    C1] vkms_vblank_simulate: vblank timer overrun
[  302.817201][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  302.863105][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  302.864577][ T6328] netlink: 'syz.5.466': attribute type 1 has an invalid length.
[  302.881271][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.900675][ T6328] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  302.907215][    C1] vkms_vblank_simulate: vblank timer overrun
[  302.931101][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  302.958809][ T4346] usb 2-1: config index 0 descriptor too short (expected 64776, got 68)
[  302.979662][   T46] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.999074][ T4346] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  303.021356][ T4346] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  303.076605][ T4346] usb 2-1: config index 1 descriptor too short (expected 64776, got 68)
[  303.100947][ T4346] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  303.130258][ T4346] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  303.158185][   T46] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.382847][ T6225] device hsr_slave_0 entered promiscuous mode
[  303.405968][ T4346] usb 2-1: string descriptor 0 read error: -71
[  303.422150][ T4346] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  303.725901][ T4346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.865562][ T6225] device hsr_slave_1 entered promiscuous mode
[  303.873335][ T4346] usb 2-1: can't set config #1, error -71
[  303.880780][ T4346] usb 2-1: USB disconnect, device number 6
[  304.076633][   T46] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.143614][ T6165] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.198009][   T46] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.289982][ T6165] 8021q: adding VLAN 0 to HW filter on device team0
[  304.319691][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  304.338837][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  304.454523][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  304.469445][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  304.509562][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.516753][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.579928][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  304.610399][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  305.757285][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.764427][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.871932][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  305.892303][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  306.045104][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  306.064337][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  306.097135][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  306.158354][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  306.192413][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  306.236260][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  306.426137][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  306.448464][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  306.486251][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  306.515193][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  306.540786][ T6165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  306.882182][ T6225] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  306.904469][ T6225] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  306.956867][ T6225] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  307.097566][ T6225] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  307.474755][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.520319][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  307.539099][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  307.561253][ T6225] 8021q: adding VLAN 0 to HW filter on device team0
[  307.809581][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  307.847884][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  308.744692][ T6165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.774471][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  308.869789][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  308.897017][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.904131][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.950197][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  308.973295][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  308.991924][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  309.160911][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.168084][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.342079][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  310.051340][ T6413] tmpfs: Unknown parameter 'usrquota'
[  310.089386][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  310.333511][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  310.973200][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  311.143383][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  311.202414][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  311.271768][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  311.313173][   T46] device hsr_slave_0 left promiscuous mode
[  311.476058][   T46] device hsr_slave_1 left promiscuous mode
[  311.698940][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.744768][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.772669][   T46] device bridge_slave_1 left promiscuous mode
[  311.779893][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.801567][   T46] device bridge_slave_0 left promiscuous mode
[  311.923955][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.393063][   T46] device veth1_macvtap left promiscuous mode
[  312.399361][   T46] device veth0_macvtap left promiscuous mode
[  312.407520][   T46] device veth1_vlan left promiscuous mode
[  312.407658][   T46] device veth0_vlan left promiscuous mode
[  314.333728][ T6448] netlink: 'syz.1.484': attribute type 1 has an invalid length.
[  314.391800][ T6448] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.062174][   T46] team0 (unregistering): Port device team_slave_1 removed
[  315.248548][   T46] team0 (unregistering): Port device team_slave_0 removed
[  315.431441][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.569091][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.049723][   T46] bond0 (unregistering): Released all slaves
[  316.166327][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  316.177353][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  316.286898][ T4572] lo speed is unknown, defaulting to 1000
[  316.305158][ T6225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  317.525861][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  317.532170][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  317.541893][ T6225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  317.572510][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  317.617163][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  317.815587][ T4913] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  317.951501][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  317.970738][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  318.005529][ T4913] usb 6-1: Using ep0 maxpacket: 16
[  318.014446][ T4913] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  318.052356][ T4913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  318.092917][ T4913] usb 6-1: config 0 has no interface number 0
[  318.127957][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  318.156446][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  318.164874][ T4913] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  318.165088][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  318.182247][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  318.226297][ T4913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.239098][ T4913] usb 6-1: Product: syz
[  318.252993][ T4913] usb 6-1: Manufacturer: syz
[  318.262567][ T6165] device veth0_vlan entered promiscuous mode
[  318.281645][ T4913] usb 6-1: SerialNumber: syz
[  318.294642][ T4913] usb 6-1: config 0 descriptor??
[  318.312223][ T4913] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[  318.327371][ T4913] usb 6-1: No valid video chain found.
[  318.351293][ T6165] device veth1_vlan entered promiscuous mode
[  318.530422][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  318.574450][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  318.681860][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  318.690949][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  318.708590][ T6165] device veth0_macvtap entered promiscuous mode
[  318.760943][ T6165] device veth1_macvtap entered promiscuous mode
[  319.425229][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.469403][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  319.483606][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  319.506377][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.528640][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  319.545284][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  319.576420][ T6165] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.590519][ T6165] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.599764][   T48] Bluetooth: hci5: command 0x0406 tx timeout
[  319.627089][ T6165] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.646368][ T6165] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.668887][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  319.828006][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  319.921321][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.254645][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.277437][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.299735][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  320.389598][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.401489][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.411936][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  320.626061][ T4314] usb 6-1: USB disconnect, device number 2
[  321.267788][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  321.282203][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  321.328030][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  321.352697][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  321.481138][ T6225] device veth0_vlan entered promiscuous mode
[  321.494872][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  321.518044][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  321.844902][ T6225] device veth1_vlan entered promiscuous mode
[  322.404735][ T6533] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  322.519112][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  323.211383][ T6225] device veth0_macvtap entered promiscuous mode
[  323.262860][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  323.286903][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  323.297113][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  323.347816][ T6225] device veth1_macvtap entered promiscuous mode
[  323.428065][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.480666][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.526525][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.534292][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  323.546274][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  323.611514][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  323.659889][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.877112][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.961965][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.036605][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  324.242085][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  324.557650][ T6225] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.605587][ T6225] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.635645][ T6225] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.653416][ T6225] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.773638][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.795978][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.803598][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  324.903004][ T4542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.911869][ T4542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.952452][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  325.723073][ T4316] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  327.175577][ T4316] usb 2-1: Using ep0 maxpacket: 16
[  327.609811][ T4316] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  327.742536][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.780408][ T4316] usb 2-1: config 0 has no interface number 0
[  327.800644][ T4316] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  327.822563][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.837313][ T4316] usb 2-1: Product: syz
[  327.841755][ T4316] usb 2-1: Manufacturer: syz
[  327.846859][ T4316] usb 2-1: SerialNumber: syz
[  327.868070][ T4316] usb 2-1: config 0 descriptor??
[  327.890891][ T4316] usb 2-1: Found UVC 0.00 device syz (046d:08d3)
[  327.897509][ T4316] usb 2-1: No valid video chain found.
[  328.184688][ T4316] usb 2-1: USB disconnect, device number 7
[  333.041874][ T6629] netlink: 256 bytes leftover after parsing attributes in process `syz.5.522'.
[  333.051590][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.522'.
[  340.145663][ T6695] netlink: 256 bytes leftover after parsing attributes in process `syz.7.535'.
[  340.154815][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.7.535'.
[  344.611711][ T4913] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  344.835651][ T4913] usb 2-1: Using ep0 maxpacket: 16
[  344.854246][ T4913] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  344.863097][ T4913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  344.876088][ T4913] usb 2-1: config 0 has no interface number 0
[  344.898245][ T4913] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  344.907787][ T4913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.918864][ T4913] usb 2-1: Product: syz
[  344.923189][ T4913] usb 2-1: Manufacturer: syz
[  344.930450][ T4913] usb 2-1: SerialNumber: syz
[  344.954386][ T4913] usb 2-1: config 0 descriptor??
[  344.992570][ T4913] usb 2-1: Found UVC 0.00 device syz (046d:08d3)
[  344.999201][ T4913] usb 2-1: No valid video chain found.
[  348.030475][ T4573] usb 2-1: USB disconnect, device number 8
[  349.068721][ T6769] overlayfs: failed to resolve './file1': -2
[  351.205820][ T4315] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  351.519922][ T4315] usb 6-1: Using ep0 maxpacket: 16
[  351.527995][ T4315] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  351.855620][ T4315] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.865916][ T4315] usb 6-1: config 0 has no interface number 0
[  351.876320][ T4315] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  351.885652][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.893784][ T4315] usb 6-1: Product: syz
[  351.904457][ T4315] usb 6-1: Manufacturer: syz
[  351.926154][ T4315] usb 6-1: SerialNumber: syz
[  351.959111][ T4315] usb 6-1: config 0 descriptor??
[  351.998119][ T4315] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[  352.027361][ T4315] usb 6-1: No valid video chain found.
[  352.266189][ T4913] usb 6-1: USB disconnect, device number 3
[  354.695114][ T6845] overlayfs: failed to resolve './file0': -2
[  356.810239][ T4276] Bluetooth: hci4: command 0x1003 tx timeout
[  356.819871][   T48] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  357.058282][ T6864] fuse: Bad value for 'fd'
[  360.209419][ T6894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.575'.
[  361.203773][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.211105][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.432002][ T6909] overlayfs: failed to resolve './file0': -2
[  364.328500][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.362627][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.632557][ T6874] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.648734][ T6874] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.659461][ T6874] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  364.675082][ T6874] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  365.959745][ T6943] netlink: 'syz.6.586': attribute type 1 has an invalid length.
[  366.000572][ T6943] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  366.305873][ T4276] Bluetooth: hci4: command 0x1003 tx timeout
[  366.312191][   T48] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  367.005621][ T4315] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  367.195621][ T4315] usb 2-1: Using ep0 maxpacket: 16
[  367.203049][ T4315] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  367.221816][ T4315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  367.289251][ T4315] usb 2-1: config 0 has no interface number 0
[  367.320714][ T4315] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  367.349769][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.374142][ T4315] usb 2-1: Product: syz
[  367.390880][ T4315] usb 2-1: Manufacturer: syz
[  367.405155][ T4315] usb 2-1: SerialNumber: syz
[  367.440140][ T4315] usb 2-1: config 0 descriptor??
[  367.479298][ T4315] usb 2-1: Found UVC 0.00 device syz (046d:08d3)
[  367.509539][ T4315] usb 2-1: No valid video chain found.
[  367.684517][ T4315] usb 2-1: USB disconnect, device number 9
[  373.197071][   T41] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  373.426006][   T41] usb 5-1: Using ep0 maxpacket: 16
[  373.447527][   T41] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  373.508676][   T41] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.590557][   T41] usb 5-1: config 0 has no interface number 0
[  373.631204][   T41] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  373.701707][   T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.721467][   T41] usb 5-1: Product: syz
[  373.730349][   T41] usb 5-1: Manufacturer: syz
[  373.750625][   T41] usb 5-1: SerialNumber: syz
[  373.774776][   T41] usb 5-1: config 0 descriptor??
[  373.821991][   T41] usb 5-1: Found UVC 0.00 device syz (046d:08d3)
[  373.986952][   T41] usb 5-1: No valid video chain found.
[  375.172111][ T4315] usb 5-1: USB disconnect, device number 8
[  375.796212][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.605'.
[  378.552564][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  378.560358][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  386.325521][ T3598] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  387.548110][ T7116] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  387.796174][ T3598] usb 2-1: Using ep0 maxpacket: 16
[  388.244800][ T3598] usb 2-1: device descriptor read/all, error -71
[  392.325873][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  392.338338][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  392.347260][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  392.356142][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  392.365222][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  392.373483][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  394.467544][ T4276] Bluetooth: hci4: command 0x0409 tx timeout
[  394.529615][   T33] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.591895][ T7168] chnl_net:caif_netlink_parms(): no params data found
[  394.835869][   T33] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.880321][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.5.635'.
[  395.485225][   T33] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.655696][ T4319] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  395.702142][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.745788][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.855501][ T4319] usb 7-1: Using ep0 maxpacket: 16
[  396.204972][ T4319] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  396.545443][ T4276] Bluetooth: hci4: command 0x041b tx timeout
[  397.080788][ T7168] device bridge_slave_0 entered promiscuous mode
[  397.101914][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.109948][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.126577][ T7168] device bridge_slave_1 entered promiscuous mode
[  397.135771][ T4319] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  397.183017][ T4319] usb 7-1: config 0 has no interface number 0
[  397.230774][ T4319] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  397.239383][   T33] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.272718][ T4319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.320042][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.329326][ T4319] usb 7-1: Product: syz
[  397.333528][ T4319] usb 7-1: Manufacturer: syz
[  397.340816][ T4319] usb 7-1: SerialNumber: syz
[  397.346450][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.366157][ T4319] usb 7-1: config 0 descriptor??
[  397.392335][ T4319] usb 7-1: Found UVC 0.00 device syz (046d:08d3)
[  397.416696][ T4319] usb 7-1: No valid video chain found.
[  397.459976][ T7168] team0: Port device team_slave_0 added
[  398.625451][ T4276] Bluetooth: hci4: command 0x040f tx timeout
[  398.809790][ T4571] usb 7-1: USB disconnect, device number 2
[  398.896556][ T7168] team0: Port device team_slave_1 added
[  398.982265][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.989483][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.065438][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.107071][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.114143][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.206608][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  400.716272][ T4276] Bluetooth: hci4: command 0x0419 tx timeout
[  400.848340][ T7168] device hsr_slave_0 entered promiscuous mode
[  400.989518][ T7168] device hsr_slave_1 entered promiscuous mode
[  401.003184][ T7168] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  401.075966][ T7168] Cannot create hsr debugfs directory
[  402.174584][ T7244] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  404.895108][ T7168] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  405.007422][ T7168] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  405.042086][ T7168] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  405.173345][ T7168] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  409.487060][   T33] device hsr_slave_0 left promiscuous mode
[  409.504762][   T33] device hsr_slave_1 left promiscuous mode
[  409.532105][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.562688][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.590419][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.612584][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  409.650971][   T33] device bridge_slave_1 left promiscuous mode
[  409.674236][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.704165][   T33] device bridge_slave_0 left promiscuous mode
[  409.725053][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.705999][   T33] device veth1_macvtap left promiscuous mode
[  410.867862][   T33] device veth0_macvtap left promiscuous mode
[  411.128951][   T33] device veth1_vlan left promiscuous mode
[  411.235499][   T33] device veth0_vlan left promiscuous mode
[  411.349675][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  414.605622][ T4315] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  414.805557][ T4315] usb 6-1: Using ep0 maxpacket: 16
[  414.909617][ T4315] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  415.685850][ T4315] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  415.793128][ T4315] usb 6-1: config 0 has no interface number 0
[  415.831371][ T4315] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  415.850143][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.863458][ T4315] usb 6-1: Product: syz
[  415.873904][ T4315] usb 6-1: Manufacturer: syz
[  415.882085][ T4315] usb 6-1: SerialNumber: syz
[  415.893580][ T4315] usb 6-1: config 0 descriptor??
[  415.912771][ T4315] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[  415.937787][ T4315] usb 6-1: No valid video chain found.
[  416.120463][ T4343] usb 6-1: USB disconnect, device number 4
[  416.318366][   T33] team0 (unregistering): Port device team_slave_1 removed
[  416.362145][   T33] team0 (unregistering): Port device team_slave_0 removed
[  416.406100][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  416.451845][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  417.367412][   T33] bond0 (unregistering): Released all slaves
[  417.596826][ T7386] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[  417.631203][ T7386] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  418.084981][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.171634][ T7168] 8021q: adding VLAN 0 to HW filter on device team0
[  418.219338][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  418.233583][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  418.288246][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  418.310529][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  418.326316][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.333598][ T4394] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.386604][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  418.429059][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  418.486094][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  418.494628][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.501830][ T4394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.565822][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  418.736738][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  418.756302][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  419.103450][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  419.156621][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  419.167408][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  419.187468][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  419.227064][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  419.242258][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  419.258776][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  419.287683][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  419.319639][ T7168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  419.693702][ T7417] overlayfs: missing 'lowerdir'
[  420.900795][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  420.924444][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  420.932886][ T3598] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  420.998040][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.117506][ T3598] usb 6-1: Using ep0 maxpacket: 16
[  421.124107][ T3598] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  421.164102][ T3598] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  421.197206][ T3598] usb 6-1: config 0 has no interface number 0
[  421.218121][ T3598] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  421.265734][ T3598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.323679][ T3598] usb 6-1: Product: syz
[  421.333771][ T3598] usb 6-1: Manufacturer: syz
[  421.349062][ T3598] usb 6-1: SerialNumber: syz
[  421.377133][ T3598] usb 6-1: config 0 descriptor??
[  421.641503][ T3598] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[  421.736249][ T3598] usb 6-1: No valid video chain found.
[  421.841974][ T3598] usb 6-1: USB disconnect, device number 5
[  422.771787][ T7473] overlayfs: missing 'lowerdir'
[  422.806414][ T3598] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  422.871032][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  422.891855][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  422.931196][ T7168] device veth0_vlan entered promiscuous mode
[  422.951541][ T7168] device veth1_vlan entered promiscuous mode
[  422.991978][ T7168] device veth0_macvtap entered promiscuous mode
[  423.024295][ T7168] device veth1_macvtap entered promiscuous mode
[  423.062441][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  423.071334][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  423.081261][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  423.089687][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  423.098361][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  423.107837][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  423.273553][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  423.395016][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  423.561260][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  423.746303][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  423.793473][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.828597][ T3598] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024
[  423.831486][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  423.848160][ T3598] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  423.858779][ T3598] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  423.886302][ T3598] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  423.905597][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  423.913869][ T3598] usb 5-1: Product: syz
[  423.927738][ T3598] usb 5-1: Manufacturer: syz
[  423.942619][ T3598] usb 5-1: SerialNumber: syz
[  423.950911][ T7466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  423.992641][ T7489] IPVS: lc: FWM 3 0x00000003 - no destination available
[  424.142293][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  424.211915][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.370222][ T3598] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  424.382284][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  424.442732][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  425.353105][ T7168] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.602908][    C0] usblp0: nonzero write bulk status received: -71
[  425.657776][ T7168] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.857518][ T7168] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.935485][ T7168] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.157256][ T4571] usb 5-1: USB disconnect, device number 9
[  426.212116][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.245972][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.256788][ T4571] usblp0: removed
[  426.271669][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.284921][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  426.359872][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.519813][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  430.415516][ T4315] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  430.444789][ T7547] mmap: syz.1.711 (7547) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  430.607477][ T4315] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.796368][ T4315] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  430.805858][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.820629][ T4315] usb 9-1: config 0 descriptor??
[  431.286260][ T7542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.325888][ T7542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.368581][ T4315] usbhid 9-1:0.0: can't add hid device: -71
[  431.374584][ T4315] usbhid: probe of 9-1:0.0 failed with error -71
[  431.398341][ T4315] usb 9-1: USB disconnect, device number 2
[  432.508024][ T7567] device syzkaller0 entered promiscuous mode
[  432.581732][ T4315] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  433.088402][ T4315] usb 9-1: config 0 has an invalid interface number: 52 but max is 0
[  434.325420][ T4315] usb 9-1: config 0 has no interface number 0
[  434.375026][ T4315] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  434.479412][ T4315] usb 9-1: config 0 interface 52 has no altsetting 0
[  434.536916][ T4315] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  435.063290][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.540117][ T4315] usb 9-1: config 0 descriptor??
[  435.634919][ T4315] usb 9-1: can't set config #0, error -71
[  435.665038][ T4315] usb 9-1: USB disconnect, device number 3
[  439.987425][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  439.993715][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  442.053190][ T7641] overlayfs: missing 'lowerdir'
[  445.301168][ T7688] overlayfs: missing 'lowerdir'
[  445.562670][ T7693] zonefs (nullb0) ERROR: Not a zoned block device
[  450.235511][ T4319] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  450.595495][ T4319] usb 5-1: Using ep0 maxpacket: 16
[  450.602507][ T4319] usb 5-1: config 0 has an invalid descriptor of length 212, skipping remainder of the config
[  450.786246][ T7742] netlink: 256 bytes leftover after parsing attributes in process `syz.6.759'.
[  450.795228][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.759'.
[  451.420961][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  451.482637][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 16384, setting to 1024
[  451.514185][ T4319] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  451.575564][ T4319] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  451.606317][ T4319] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  451.630528][ T4319] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  451.660865][ T4319] usb 5-1: Manufacturer: syz
[  451.697031][ T4319] usb 5-1: config 0 descriptor??
[  452.515760][ T4319] rc_core: IR keymap rc-hauppauge not found
[  452.521719][ T4319] Registered IR keymap rc-empty
[  452.570328][ T7760] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  452.570760][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  452.639413][ T7760] bond1: (slave lo): Enslaving as an active interface with an up link
[  452.697735][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  452.826815][ T7760] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  453.163930][ T4319] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  453.190901][ T4319] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8
[  453.224143][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  453.266974][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  453.326205][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  453.355997][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  453.395000][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  453.506310][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  453.546712][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  453.602543][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  453.675658][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  453.717989][ T4319] mceusb 5-1:0.0: Error: mce write urb status = -71
[  453.817564][ T4319] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  453.827925][ T4319] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  454.276927][ T4319] usb 5-1: USB disconnect, device number 10
[  456.097099][ T7804] netlink: 256 bytes leftover after parsing attributes in process `syz.1.771'.
[  456.106110][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'.
[  457.797085][ T4315] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  458.225487][ T4315] usb 6-1: Using ep0 maxpacket: 16
[  458.232635][ T4315] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  458.299164][ T4315] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  458.962558][ T4315] usb 6-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  458.974972][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.997856][ T4315] usb 6-1: config 0 descriptor??
[  459.015661][ T4315] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  459.296305][ T4314] usb 6-1: USB disconnect, device number 6
[  466.965122][ T7887] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  467.313779][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.8.793'.
[  474.180515][ T7963] netlink: 20 bytes leftover after parsing attributes in process `syz.8.808'.
[  477.194974][ T7992] netlink: 'syz.4.816': attribute type 1 has an invalid length.
[  477.329992][ T7992] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  480.250092][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.257422][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.551282][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.827'.
[  482.687236][ T8000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  482.880408][ T8000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  483.112612][ T8050] overlayfs: missing 'lowerdir'
[  485.246757][ T8000] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.256059][ T8000] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.264983][ T8000] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.273887][ T8000] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  485.285676][ T4573] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  485.497440][ T4573] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  485.532789][ T4573] usb 2-1: config 0 has no interface number 0
[  485.588013][ T4573] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  485.603731][ T4573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.654112][ T4573] usb 2-1: Product: syz
[  485.674890][ T4573] usb 2-1: Manufacturer: syz
[  485.984151][ T4573] usb 2-1: SerialNumber: syz
[  486.171414][ T4573] usb 2-1: config 0 descriptor??
[  486.525453][ T4573] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  486.595205][ T4573] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  487.324473][ T4573] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  487.333287][ T4573] usb 2-1: media controller created
[  487.390749][ T4573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  487.394958][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'.
[  487.615313][ T8101] netlink: 20 bytes leftover after parsing attributes in process `syz.5.839'.
[  487.740396][ T4573] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  488.151444][ T4573] usb 2-1: USB disconnect, device number 12
[  490.228953][ T4571] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  490.636583][ T4571] usb 6-1: Using ep0 maxpacket: 16
[  490.643754][ T4571] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  490.724160][ T4571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  490.792170][ T4571] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  490.838771][ T4571] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  490.855637][ T4314] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  490.892004][ T4571] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  490.924628][ T4571] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  490.942945][ T4571] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  490.960043][ T4571] usb 6-1: Manufacturer: syz
[  490.971464][ T4571] usb 6-1: config 0 descriptor??
[  491.099050][ T8147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.853'.
[  491.247329][ T4314] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  491.275440][ T4314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.301815][ T4314] usb 7-1: config 0 descriptor??
[  491.536074][ T4314] ath6kl: Failed to submit usb control message: -71
[  491.553574][ T4314] ath6kl: unable to send the bmi data to the device: -71
[  491.565450][ T4571] rc_core: IR keymap rc-hauppauge not found
[  491.573622][ T4571] Registered IR keymap rc-empty
[  491.594330][ T4314] ath6kl: Unable to send get target info: -71
[  491.594677][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  491.640936][ T4314] ath6kl: Failed to init ath6kl core: -71
[  491.765483][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  491.825887][ T4571] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  491.909870][ T4314] ath6kl_usb: probe of 7-1:0.0 failed with error -71
[  491.935013][ T4571] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10
[  491.976611][ T4314] usb 7-1: USB disconnect, device number 3
[  492.041979][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  492.135563][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  492.185558][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  492.412757][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  492.455799][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  492.513202][ T8173] syz.6.856 uses obsolete (PF_INET,SOCK_PACKET)
[  492.519817][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  492.556866][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  492.645496][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  492.717120][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  492.805538][ T4571] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  493.380166][ T4571] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  493.412890][ T4571] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  493.482582][ T4571] usb 6-1: USB disconnect, device number 7
[  494.739458][ T8202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'.
[  495.027323][ T8208] program syz.1.865 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  497.295645][ T4314] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  497.487486][ T4314] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  497.589119][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.621571][ T4314] usb 2-1: config 0 descriptor??
[  498.121547][ T4314] ath6kl: Failed to submit usb control message: -71
[  498.128324][ T4314] ath6kl: unable to send the bmi data to the device: -71
[  498.195473][ T4314] ath6kl: Unable to send get target info: -71
[  498.196664][ T8234] fuse: Unknown parameter 'grou00000000000000000000'
[  498.283367][ T4314] ath6kl: Failed to init ath6kl core: -71
[  498.761712][ T4314] ath6kl_usb: probe of 2-1:0.0 failed with error -71
[  498.816356][ T4314] usb 2-1: USB disconnect, device number 13
[  499.515814][ T8242] netlink: 'syz.4.875': attribute type 6 has an invalid length.
[  501.865602][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  501.872381][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  504.154987][ T8289] fuse: Unknown parameter 'grou00000000000000000000'
[  510.184397][ T4571] libceph: connect (1)[c::]:6789 error -101
[  510.204017][ T4571] libceph: mon0 (1)[c::]:6789 connect error
[  510.223063][ T8342] fuse: Unknown parameter 'grou00000000000000000000'
[  510.545848][ T4571] libceph: connect (1)[c::]:6789 error -101
[  510.551882][ T4571] libceph: mon0 (1)[c::]:6789 connect error
[  510.569180][ T8328] ceph: No mds server is up or the cluster is laggy
[  514.036782][ T8398] input: syz1 as /devices/virtual/input/input13
[  514.667351][ T8406] fuse: Unknown parameter 'group_i00000000000000000000'
[  517.776701][ T8452] fuse: Unknown parameter 'group_i00000000000000000000'
[  520.398745][ T8473] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  520.410399][ T8473] exFAT-fs (loop1): unable to read boot sector
[  520.417047][ T8473] exFAT-fs (loop1): failed to read boot sector
[  520.423387][ T8473] exFAT-fs (loop1): failed to recognize exfat type
[  521.374413][    T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  521.945563][    T7] usb 5-1: Using ep0 maxpacket: 16
[  521.991554][    T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  522.042072][    T7] usb 5-1: config 0 has no interfaces?
[  522.119659][    T7] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  522.245481][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.292908][    T7] usb 5-1: Product: syz
[  522.324299][    T7] usb 5-1: Manufacturer: syz
[  522.401937][    T7] usb 5-1: SerialNumber: syz
[  522.420005][    T7] usb 5-1: config 0 descriptor??
[  522.975225][    T7] usb 5-1: USB disconnect, device number 11
[  523.953001][ T8532] fuse: Unknown parameter 'group_i00000000000000000000'
[  524.440067][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.6.941'.
[  527.743423][ T8568] netlink: 'syz.5.949': attribute type 1 has an invalid length.
[  527.855724][ T8572] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  528.795776][ T4314] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  529.377193][ T4314] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  529.485518][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.636573][ T4314] usb 5-1: config 0 descriptor??
[  529.815877][ T8603] netlink: 20 bytes leftover after parsing attributes in process `syz.5.954'.
[  529.869341][ T4314] ath6kl: Failed to submit usb control message: -71
[  529.883282][ T4314] ath6kl: unable to send the bmi data to the device: -71
[  530.390077][ T4314] ath6kl: Unable to send get target info: -71
[  530.451759][ T4314] ath6kl: Failed to init ath6kl core: -71
[  530.900661][ T4314] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[  530.980296][ T4314] usb 5-1: USB disconnect, device number 12
[  536.134514][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  536.149396][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  536.158202][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  536.167408][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  536.174821][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  536.206244][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  537.379857][ T8685] netlink: 256 bytes leftover after parsing attributes in process `syz.6.968'.
[  537.389100][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.968'.
[  537.931907][ T8650] chnl_net:caif_netlink_parms(): no params data found
[  538.108157][ T4571] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  538.226443][ T4276] Bluetooth: hci2: command 0x0409 tx timeout
[  538.264503][ T8650] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.308286][ T4571] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  538.323084][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.400468][ T8702] netlink: 20 bytes leftover after parsing attributes in process `syz.6.971'.
[  538.422786][ T4571] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  538.449240][ T8650] device bridge_slave_0 entered promiscuous mode
[  538.484651][ T4571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.540197][ T4571] usb 5-1: Product: syz
[  538.570093][ T4571] usb 5-1: Manufacturer: syz
[  538.593451][ T4571] usb 5-1: SerialNumber: syz
[  538.649881][ T4571] usb 5-1: config 0 descriptor??
[  538.708873][ T4571] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  538.798598][ T4571] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  538.846449][ T4571] garmin_gps: probe of ttyUSB0 failed with error -22
[  538.960502][ T4571] usb 5-1: USB disconnect, device number 13
[  539.013524][ T4571] garmin_gps 5-1:0.0: device disconnected
[  539.150455][ T8650] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.168066][ T8650] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.215766][ T8650] device bridge_slave_1 entered promiscuous mode
[  539.624997][ T8650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  540.305571][ T4276] Bluetooth: hci2: command 0x041b tx timeout
[  541.591613][ T8650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.022430][ T8650] team0: Port device team_slave_0 added
[  542.098696][ T8650] team0: Port device team_slave_1 added
[  542.308102][ T8650] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.315065][ T8650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.480414][ T4276] Bluetooth: hci2: command 0x040f tx timeout
[  542.534178][ T8740] netlink: 256 bytes leftover after parsing attributes in process `syz.5.980'.
[  542.543865][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.980'.
[  542.935325][ T8650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.999898][ T8650] batman_adv: batadv0: Adding interface: batadv_slave_1
[  543.012577][ T8650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  543.261572][ T8650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.806762][ T8650] device hsr_slave_0 entered promiscuous mode
[  543.831379][ T8650] device hsr_slave_1 entered promiscuous mode
[  544.303068][   T33] device hsr_slave_0 left promiscuous mode
[  544.463024][   T33] device hsr_slave_1 left promiscuous mode
[  544.518322][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  544.548459][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  544.555486][   T48] Bluetooth: hci2: command 0x0419 tx timeout
[  544.623663][   T33] device bridge_slave_1 left promiscuous mode
[  544.686929][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.840237][   T33] device bridge_slave_0 left promiscuous mode
[  544.884258][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.903602][ T8765] fuse: Bad value for 'user_id'
[  547.785502][ T4313] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  547.811359][ T8798] fuse: Bad value for 'user_id'
[  547.995535][ T4313] usb 7-1: Using ep0 maxpacket: 16
[  548.002390][ T4313] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  548.021875][ T4313] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.038480][ T4313] usb 7-1: config 0 has no interface number 0
[  548.069841][ T4313] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  548.084866][ T4313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.095065][ T4313] usb 7-1: Product: syz
[  548.101758][ T4313] usb 7-1: Manufacturer: syz
[  548.109498][ T4313] usb 7-1: SerialNumber: syz
[  548.138420][ T4313] usb 7-1: config 0 descriptor??
[  548.188786][ T4313] usb 7-1: Found UVC 0.00 device syz (046d:08d3)
[  548.207792][ T4313] usb 7-1: No valid video chain found.
[  549.112557][   T33] team0 (unregistering): Port device team_slave_1 removed
[  549.390625][   T33] team0 (unregistering): Port device team_slave_0 removed
[  550.027191][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  550.093148][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  550.579916][ T4313] usb 7-1: USB disconnect, device number 4
[  551.260462][   T33] bond0 (unregistering): Released all slaves
[  551.997941][ T8650] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  552.108454][ T8650] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  552.216862][ T8650] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  552.300842][ T8650] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  552.708766][ T8650] 8021q: adding VLAN 0 to HW filter on device bond0
[  552.792950][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  552.811513][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  552.885951][ T8650] 8021q: adding VLAN 0 to HW filter on device team0
[  552.967466][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  553.001144][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  553.049770][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.056888][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.126553][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  553.182116][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  553.245691][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  553.294493][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.301680][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state
[  553.375185][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  553.396004][ T3598] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  553.430251][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  554.252632][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  554.305678][ T3598] usb 7-1: Using ep0 maxpacket: 16
[  554.312685][ T3598] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  554.317014][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  554.331446][ T3598] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  554.342206][ T3598] usb 7-1: config 0 has no interface number 0
[  554.351182][ T3598] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  554.360499][ T3598] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.368647][ T3598] usb 7-1: Product: syz
[  554.373051][ T3598] usb 7-1: Manufacturer: syz
[  554.378033][ T3598] usb 7-1: SerialNumber: syz
[  554.385043][ T3598] usb 7-1: config 0 descriptor??
[  554.406481][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  554.411218][ T3598] usb 7-1: Found UVC 0.00 device syz (046d:08d3)
[  554.442571][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  554.463839][ T3598] usb 7-1: No valid video chain found.
[  554.488892][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  554.551445][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  554.606145][ T8650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  554.651873][ T8650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  554.686898][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  554.706482][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  554.740040][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  556.329986][ T4571] usb 7-1: USB disconnect, device number 5
[  557.008418][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  557.028526][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  557.199689][ T8650] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.159850][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  561.188709][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  561.271319][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  561.307684][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  561.350554][ T8650] device veth0_vlan entered promiscuous mode
[  561.373391][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  561.402031][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  561.451796][ T8650] device veth1_vlan entered promiscuous mode
[  561.573857][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  561.593183][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  561.644971][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  561.645450][ T4313] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  561.681655][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  561.741420][ T8650] device veth0_macvtap entered promiscuous mode
[  561.774787][ T8650] device veth1_macvtap entered promiscuous mode
[  561.849204][ T8650] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.876730][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  561.896313][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  561.923924][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  561.945551][ T4313] usb 7-1: Using ep0 maxpacket: 16
[  561.952681][ T4313] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  561.976713][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  561.991904][ T4313] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  562.001749][ T8650] batman_adv: batadv0: Interface activated: batadv_slave_1
[  562.037074][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  562.062507][ T4313] usb 7-1: config 0 has no interface number 0
[  562.076245][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  562.106375][ T4313] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  562.114637][ T8650] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.131851][ T8650] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.145139][ T8650] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.151811][ T4313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.154766][ T8650] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.228557][ T4313] usb 7-1: Product: syz
[  562.232766][ T4313] usb 7-1: Manufacturer: syz
[  562.296895][ T4313] usb 7-1: SerialNumber: syz
[  562.354491][ T4313] usb 7-1: config 0 descriptor??
[  562.378861][ T5445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.413117][ T4313] usb 7-1: Found UVC 0.00 device syz (046d:08d3)
[  562.419636][ T5445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.437980][ T4313] usb 7-1: No valid video chain found.
[  562.503874][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  562.956097][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  562.962704][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  563.347598][ T5445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.376010][ T5445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.419947][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  564.956009][ T8978] netlink: 'syz.4.1032': attribute type 16 has an invalid length.
[  564.964008][ T8978] netlink: 'syz.4.1032': attribute type 17 has an invalid length.
[  564.994678][ T8978] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  565.002286][ T8978] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  565.011425][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0
[  565.019472][ T8978] 8021q: adding VLAN 0 to HW filter on device team0
[  565.059789][   T41] usb 7-1: USB disconnect, device number 6
[  565.232791][ T8978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  570.111089][ T4319] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  571.095442][ T4319] usb 5-1: Using ep0 maxpacket: 16
[  571.105197][ T4319] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  571.285109][ T4319] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.422219][ T4319] usb 5-1: config 0 has no interface number 0
[  571.485485][ T4319] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  571.541573][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.593154][ T4319] usb 5-1: Product: syz
[  571.597669][ T4319] usb 5-1: Manufacturer: syz
[  571.602290][ T4319] usb 5-1: SerialNumber: syz
[  571.636139][ T4319] usb 5-1: config 0 descriptor??
[  571.654402][ T4319] usb 5-1: Found UVC 0.00 device syz (046d:08d3)
[  571.688642][ T4319] usb 5-1: No valid video chain found.
[  571.826032][ T9066] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  572.975312][ T4319] usb 5-1: USB disconnect, device number 14
[  573.340215][ T9079] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer.
[  575.853511][ T4314] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  577.097509][ T4314] usb 6-1: Using ep0 maxpacket: 16
[  577.123403][ T4314] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  577.216085][ T4314] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  577.298563][ T4314] usb 6-1: config 0 has no interface number 0
[  577.349178][ T4314] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  577.381071][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.401603][ T4314] usb 6-1: Product: syz
[  577.410942][ T4314] usb 6-1: Manufacturer: syz
[  577.419327][ T4314] usb 6-1: SerialNumber: syz
[  577.449870][ T4314] usb 6-1: config 0 descriptor??
[  577.477305][ T4314] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[  577.483938][ T4314] usb 6-1: No valid video chain found.
[  577.615635][  T127] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  577.672329][ T4314] usb 6-1: USB disconnect, device number 8
[  577.805584][  T127] usb 5-1: Using ep0 maxpacket: 16
[  577.813845][  T127] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  577.875278][  T127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  577.892781][  T127] usb 5-1: config 0 has no interface number 0
[  577.921794][  T127] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  577.951480][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.059213][  T127] usb 5-1: Product: syz
[  578.063423][  T127] usb 5-1: Manufacturer: syz
[  578.088509][  T127] usb 5-1: SerialNumber: syz
[  578.890154][  T127] usb 5-1: config 0 descriptor??
[  578.950991][  T127] usb 5-1: Found UVC 0.00 device syz (046d:08d3)
[  578.968247][  T127] usb 5-1: No valid video chain found.
[  580.825454][ T9138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  581.164801][ T4313] usb 5-1: USB disconnect, device number 15
[  584.191696][ T9179] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  585.127076][   T22] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  585.325591][   T22] usb 10-1: Using ep0 maxpacket: 16
[  585.333764][   T22] usb 10-1: config 0 has an invalid interface number: 105 but max is 0
[  586.276047][   T22] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  586.326114][   T22] usb 10-1: config 0 has no interface number 0
[  586.365261][   T22] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  586.380512][   T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.425607][   T22] usb 10-1: Product: syz
[  586.429987][   T22] usb 10-1: Manufacturer: syz
[  586.475306][   T22] usb 10-1: SerialNumber: syz
[  586.509649][   T22] usb 10-1: config 0 descriptor??
[  586.534028][   T22] usb 10-1: Found UVC 0.00 device syz (046d:08d3)
[  586.594053][   T22] usb 10-1: No valid video chain found.
[  586.735321][   T22] usb 10-1: USB disconnect, device number 2
[  588.299777][  T127] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  588.815767][  T127] usb 7-1: Using ep0 maxpacket: 16
[  588.827069][  T127] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  588.842209][  T127] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  589.070740][  T127] usb 7-1: config 0 has no interface number 0
[  589.093112][  T127] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  589.395619][  T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.395646][  T127] usb 7-1: Product: syz
[  589.395660][  T127] usb 7-1: Manufacturer: syz
[  589.395675][  T127] usb 7-1: SerialNumber: syz
[  589.422044][  T127] usb 7-1: config 0 descriptor??
[  589.430836][  T127] usb 7-1: Found UVC 0.00 device syz (046d:08d3)
[  589.430871][  T127] usb 7-1: No valid video chain found.
[  590.670956][ T9257] netlink: 'syz.1.1087': attribute type 1 has an invalid length.
[  590.703392][ T9257] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  591.522785][ T4346] usb 7-1: USB disconnect, device number 7
[  592.355990][  T127] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  592.548634][  T127] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  592.581114][  T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.612308][  T127] usb 6-1: config 0 descriptor??
[  592.905948][  T127] ath6kl: Failed to submit usb control message: -71
[  592.939731][  T127] ath6kl: unable to send the bmi data to the device: -71
[  593.558618][  T127] ath6kl: Unable to send get target info: -71
[  593.573234][  T127] ath6kl: Failed to init ath6kl core: -71
[  593.699004][  T127] ath6kl_usb: probe of 6-1:0.0 failed with error -71
[  593.729152][  T127] usb 6-1: USB disconnect, device number 9
[  594.855509][  T127] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  595.671296][  T127] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  595.716615][  T127] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  595.775597][  T127] usb 6-1: config 220 has no interface number 2
[  595.784280][  T127] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  595.885596][  T127] usb 6-1: config 220 interface 0 has no altsetting 0
[  595.902745][  T127] usb 6-1: config 220 interface 76 has no altsetting 0
[  595.920189][  T127] usb 6-1: config 220 interface 1 has no altsetting 0
[  595.958076][  T127] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  596.086662][ T9316] fuse: Invalid rootmode
[  596.097939][  T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.119469][  T127] usb 6-1: Product: syz
[  596.218680][  T127] usb 6-1: Manufacturer: syz
[  596.417068][  T127] usb 6-1: SerialNumber: syz
[  597.400799][ T9327] binder: 9321:9327 ioctl c00c620f 0 returned -14
[  597.815459][   T22] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  598.277646][  T127] usb 6-1: selecting invalid altsetting 0
[  598.665074][  T127] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  598.770265][  T127] usb 6-1: No valid video chain found.
[  598.835592][   T22] usb 7-1: Using ep0 maxpacket: 16
[  598.837824][  T127] usb 6-1: selecting invalid altsetting 0
[  598.842838][   T22] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  598.853889][  T127] usbtest: probe of 6-1:220.1 failed with error -22
[  598.968975][   T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  598.979318][   T22] usb 7-1: config 0 has no interface number 0
[  599.000837][   T22] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  599.028337][   T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.034194][  T127] usb 6-1: USB disconnect, device number 10
[  599.093191][   T22] usb 7-1: Product: syz
[  599.105738][   T22] usb 7-1: Manufacturer: syz
[  599.132137][   T22] usb 7-1: SerialNumber: syz
[  599.250279][   T22] usb 7-1: config 0 descriptor??
[  599.282085][   T22] usb 7-1: Found UVC 0.00 device syz (046d:08d3)
[  599.282436][ T9350] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1104'.
[  599.295925][   T22] usb 7-1: No valid video chain found.
[  599.302846][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1104'.
[  601.055463][    T7] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  601.249301][    T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  601.265592][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.276503][    T7] usb 5-1: config 0 descriptor??
[  601.489258][    T7] ath6kl: Failed to submit usb control message: -71
[  601.549840][    T7] ath6kl: unable to send the bmi data to the device: -71
[  601.558797][    T7] ath6kl: Unable to send get target info: -71
[  601.566346][  T127] usb 7-1: USB disconnect, device number 8
[  601.572277][    T7] ath6kl: Failed to init ath6kl core: -71
[  601.600210][    T7] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[  601.614009][    T7] usb 5-1: USB disconnect, device number 16
[  601.984287][ T9378] netlink: 'syz.6.1109': attribute type 1 has an invalid length.
[  602.389369][ T9388] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  603.313959][ T9395] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready
[  603.622960][ T9400] tmpfs: Bad value for 'mpol'
[  604.903618][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'.
[  612.423737][ T9483] netlink: 'syz.9.1131': attribute type 1 has an invalid length.
[  612.864915][ T9496] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1134'.
[  612.875165][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1134'.
[  615.415520][ T4319] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  615.625534][ T4319] usb 5-1: Using ep0 maxpacket: 16
[  615.702550][ T4319] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  615.722574][ T4319] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  615.763333][ T4319] usb 5-1: config 0 has no interface number 0
[  615.829119][ T4319] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  615.858987][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.899441][ T4319] usb 5-1: Product: syz
[  615.919705][ T4319] usb 5-1: Manufacturer: syz
[  615.947611][ T4319] usb 5-1: SerialNumber: syz
[  616.017750][ T4319] usb 5-1: config 0 descriptor??
[  616.039146][ T4319] usb 5-1: Found UVC 0.00 device syz (046d:08d3)
[  616.076983][ T4319] usb 5-1: No valid video chain found.
[  616.166357][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1144'.
[  616.288206][ T4319] usb 5-1: USB disconnect, device number 17
[  616.335523][ T4313] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  616.525545][ T4313] usb 6-1: Using ep0 maxpacket: 16
[  616.586446][ T4313] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  616.630915][ T4313] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  616.669889][ T4313] usb 6-1: config 0 has no interface number 0
[  616.707218][ T4313] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  616.735457][ T4313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.764017][ T4313] usb 6-1: Product: syz
[  616.777718][ T4313] usb 6-1: Manufacturer: syz
[  616.782415][ T4313] usb 6-1: SerialNumber: syz
[  618.509135][ T4313] usb 6-1: config 0 descriptor??
[  618.609537][ T4313] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[  618.836518][ T4313] usb 6-1: No valid video chain found.
[  620.231369][ T9561] fuse: Bad value for 'fd'
[  621.073543][   T22] usb 6-1: USB disconnect, device number 11
[  622.912151][ T9587] fuse: Bad value for 'fd'
[  623.535226][ T9588] netlink: 'syz.1.1150': attribute type 1 has an invalid length.
[  623.596585][ T9581] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  624.181701][ T4571] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  624.308527][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  624.314900][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  624.409818][ T4571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  624.436535][ T4571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  624.459465][ T4571] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  624.505596][ T4571] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  624.525575][ T4571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.569927][ T4571] usb 5-1: config 0 descriptor??
[  625.917653][ T4571] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  626.032638][ T4571] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  626.347843][ T4571] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  626.963934][   T22] usb 5-1: USB disconnect, device number 18
[  627.068196][ T4571] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  627.128447][ T4571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.202301][ T9636] fido_id[9636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  627.246959][ T4571] usb 6-1: config 0 descriptor??
[  627.487148][ T4571] ath6kl: Failed to submit usb control message: -71
[  627.498176][ T4571] ath6kl: unable to send the bmi data to the device: -71
[  627.509448][ T4571] ath6kl: Unable to send get target info: -71
[  627.527488][ T4571] ath6kl: Failed to init ath6kl core: -71
[  627.711266][ T4571] ath6kl_usb: probe of 6-1:0.0 failed with error -71
[  627.734209][ T4571] usb 6-1: USB disconnect, device number 12
[  631.741738][ T9724] fuse: Unknown parameter 'use00000000000000000000'
[  633.055642][ T6928] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  633.483336][ T6928] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  633.516569][ T6928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.596697][ T6928] usb 7-1: config 0 descriptor??
[  634.688667][ T9754] input: syz1 as /devices/virtual/input/input21
[  634.961030][ T6928] ath6kl: Failed to submit usb control message: -110
[  635.357208][ T6928] ath6kl: unable to send the bmi data to the device: -110
[  635.364430][ T6928] ath6kl: Unable to send get target info: -110
[  635.419374][ T6928] ath6kl: Failed to init ath6kl core: -110
[  635.581819][ T6928] ath6kl_usb: probe of 7-1:0.0 failed with error -110
[  635.647982][ T6928] usb 7-1: USB disconnect, device number 9
[  638.061219][ T9784] netlink: 'syz.6.1196': attribute type 6 has an invalid length.
[  638.686311][ T9806] input: syz1 as /devices/virtual/input/input23
[  640.448880][ T9814] netlink: 'syz.9.1199': attribute type 1 has an invalid length.
[  645.317309][ T9864] netlink: 'syz.9.1212': attribute type 6 has an invalid length.
[  647.715541][  T127] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  648.096999][  T127] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  648.145493][  T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.222491][  T127] usb 5-1: config 0 descriptor??
[  651.852685][ T9922] misc userio: No port type given on /dev/userio
[  652.306221][ T9930] netlink: 'syz.1.1230': attribute type 6 has an invalid length.
[  654.217479][ T9952] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1234'.
[  656.115738][ T9941] delete_channel: no stack
[  668.336113][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  668.344681][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  668.352955][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  668.362163][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  668.371137][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  668.379681][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  669.234977][   T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  669.254518][   T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  669.264159][   T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  669.279062][   T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  669.291585][   T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  669.318599][   T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  670.465542][ T4276] Bluetooth: hci4: command 0x0409 tx timeout
[  670.530324][ T4273] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  670.545324][ T4273] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  670.557663][ T4273] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  670.567834][ T4273] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  670.577774][ T4273] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  670.585931][ T4273] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  670.593594][ T4273] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  670.626526][ T9978] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  670.634971][ T9978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  670.653118][ T9975] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  670.660956][ T9975] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  670.669204][ T9978] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  671.345610][ T4276] Bluetooth: hci6: command 0x0409 tx timeout
[  672.545538][ T4276] Bluetooth: hci4: command 0x041b tx timeout
[  672.625594][ T4276] Bluetooth: hci8: command 0x0409 tx timeout
[  672.705624][ T4276] Bluetooth: hci7: command 0x0409 tx timeout
[  673.435549][ T4276] Bluetooth: hci6: command 0x041b tx timeout
[  674.625475][ T4276] Bluetooth: hci4: command 0x040f tx timeout
[  674.705545][ T4276] Bluetooth: hci8: command 0x041b tx timeout
[  674.795560][ T4276] Bluetooth: hci7: command 0x041b tx timeout
[  675.507303][ T4276] Bluetooth: hci6: command 0x040f tx timeout
[  676.715557][ T4276] Bluetooth: hci4: command 0x0419 tx timeout
[  676.795706][ T9978] Bluetooth: hci8: command 0x040f tx timeout
[  676.865613][ T9978] Bluetooth: hci7: command 0x040f tx timeout
[  677.585445][ T9978] Bluetooth: hci6: command 0x0419 tx timeout
[  678.347532][ T9978] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  678.363028][ T9978] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  678.372459][ T9978] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  678.387037][ T9978] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  678.394888][ T9978] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  678.402963][ T9978] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  678.865535][ T4276] Bluetooth: hci8: command 0x0419 tx timeout
[  678.945583][ T9978] Bluetooth: hci7: command 0x0419 tx timeout
[  680.466419][ T4276] Bluetooth: hci9: command 0x0409 tx timeout
[  682.545474][ T4276] Bluetooth: hci9: command 0x041b tx timeout
[  684.635536][ T4276] Bluetooth: hci9: command 0x040f tx timeout
[  685.746894][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  685.753325][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  686.705583][ T4276] Bluetooth: hci9: command 0x0419 tx timeout
[  709.090900][ T3638] udevd[3638]: worker [4258] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time
[  733.079227][ T9978] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  733.092008][ T9978] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  733.101155][ T9978] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  733.110713][ T9978] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  733.119917][ T9978] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  733.129021][ T9978] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  733.385795][ T4276] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  733.397294][ T4276] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  733.410170][ T4276] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  733.437003][ T4276] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  733.450771][ T4276] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  733.459743][ T4276] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  733.602864][ T9978] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  733.613249][ T9978] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  733.624906][ T9978] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  733.633034][ T9975] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  733.642052][ T9978] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  733.649751][ T9978] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  733.725151][ T4276] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  733.734433][ T4276] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  733.744618][ T4276] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  733.754311][ T4276] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  733.762201][ T4276] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  733.769911][ T4276] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  735.185537][ T4276] Bluetooth: hci10: command 0x0409 tx timeout
[  735.505615][ T4276] Bluetooth: hci11: command 0x0409 tx timeout
[  735.747782][ T4276] Bluetooth: hci12: command 0x0409 tx timeout
[  735.825548][ T4276] Bluetooth: hci13: command 0x0409 tx timeout
[  737.275526][ T4276] Bluetooth: hci10: command 0x041b tx timeout
[  737.592156][ T4276] Bluetooth: hci11: command 0x041b tx timeout
[  737.845232][ T4276] Bluetooth: hci12: command 0x041b tx timeout
[  737.905577][ T4276] Bluetooth: hci13: command 0x041b tx timeout
[  738.406964][ T9978] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  738.426039][ T9978] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  738.438706][ T9978] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  738.447589][ T9978] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  738.459264][ T9978] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  738.467559][ T9978] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  739.345585][ T9978] Bluetooth: hci10: command 0x040f tx timeout
[  739.665465][ T9978] Bluetooth: hci11: command 0x040f tx timeout
[  739.905650][ T9978] Bluetooth: hci12: command 0x040f tx timeout
[  739.985561][ T9978] Bluetooth: hci13: command 0x040f tx timeout
[  740.555615][ T9978] Bluetooth: hci14: command 0x0409 tx timeout
[  741.425816][ T9978] Bluetooth: hci10: command 0x0419 tx timeout
[  741.745518][ T9978] Bluetooth: hci11: command 0x0419 tx timeout
[  741.985805][ T9978] Bluetooth: hci12: command 0x0419 tx timeout
[  742.075473][ T9978] Bluetooth: hci13: command 0x0419 tx timeout
[  742.625534][ T9978] Bluetooth: hci14: command 0x041b tx timeout
[  744.705544][ T9978] Bluetooth: hci14: command 0x040f tx timeout
[  746.785493][ T9978] Bluetooth: hci14: command 0x0419 tx timeout
[  747.189718][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  747.196247][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  774.875537][ T4276] Bluetooth: hci2: command 0x0406 tx timeout
[  794.396768][ T4276] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  794.417980][ T4276] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  794.432395][ T4276] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  794.441687][ T4276] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  794.449680][ T4276] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  794.457493][ T4276] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  794.678458][ T9978] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  794.689636][ T9978] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  794.700147][ T9978] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  794.710335][ T9978] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  794.718298][ T9978] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  794.726780][ T9978] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  794.915740][ T4276] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  794.926154][ T4276] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  794.935152][ T4276] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  794.955733][ T4276] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  794.966347][ T4276] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  794.974850][ T4276] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  795.052981][ T9978] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  795.065124][ T9978] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  795.073884][ T9978] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  795.084798][ T9978] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  795.093038][ T9978] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  795.101318][ T9978] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  795.195556][   T27] INFO: task kworker/u4:2:33 blocked for more than 143 seconds.
[  795.203383][   T27]       Not tainted syzkaller #0
[  795.213527][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  795.222386][   T27] task:kworker/u4:2    state:D stack:22480 pid:33    ppid:2      flags:0x00004000
[  795.236865][   T27] Workqueue: events_unbound fsnotify_connector_destroy_workfn
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  795.245061][   T27] Call Trace:
[  795.271793][   T27]  <TASK>
[  795.274821][   T27]  __schedule+0x11d1/0x40e0
[  795.337221][   T27]  ? __sched_text_start+0x8/0x8
[  795.355625][ T9978] Bluetooth: hci4: command 0x0406 tx timeout
[  795.355639][ T4276] Bluetooth: hci6: command 0x0406 tx timeout
[  795.361721][ T9978] Bluetooth: hci8: command 0x0406 tx timeout
[  795.367744][ T4276] Bluetooth: hci7: command 0x0406 tx timeout
[  795.400535][   T27]  ? kthread_data+0x4b/0xc0
[  795.405083][   T27]  ? wq_worker_sleeping+0x60/0x280
[  795.445978][   T27]  schedule+0xb9/0x180
[  795.450175][   T27]  schedule_timeout+0xbd/0x2d0
[  795.454957][   T27]  ? console_conditional_schedule+0x40/0x40
[  795.495742][   T27]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  795.501803][   T27]  ? lock_chain_count+0x20/0x20
[  795.525441][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  795.530690][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  795.548034][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  795.553382][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  795.565517][   T27]  ? wait_for_completion+0x276/0x5a0
[  795.570934][   T27]  wait_for_completion+0x2c7/0x5a0
[  795.582229][   T27]  ? io_schedule+0xd0/0xd0
[  795.589527][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  795.600550][   T27]  ? debug_object_active_state+0x6a/0x380
[  795.609403][   T27]  __synchronize_srcu+0x2b9/0x350
[  795.614549][   T27]  ? synchronize_srcu_expedited+0x20/0x20
[  795.628206][   T27]  ? rcu_read_lock_any_held+0x130/0x130
[  795.633890][   T27]  ? __rwlock_init+0x140/0x140
[  795.643036][   T27]  ? ktime_get_mono_fast_ns+0x199/0x1b0
[  795.653233][   T27]  ? synchronize_srcu+0x192/0x1b0
[  795.663191][   T27]  ? process_one_work+0x7b0/0x1160
[  795.672322][   T27]  fsnotify_connector_destroy_workfn+0x40/0xa0
[  795.682142][   T27]  ? process_one_work+0x7b0/0x1160
[  795.691290][   T27]  process_one_work+0x8a2/0x1160
[  795.699143][   T27]  ? worker_detach_from_pool+0x240/0x240
[  795.704915][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  795.714931][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  795.725002][   T27]  ? kthread_data+0x4b/0xc0
[  795.733876][   T27]  worker_thread+0xaa2/0x1270
[  795.742319][   T27]  kthread+0x29d/0x330
[  795.749818][   T27]  ? worker_clr_flags+0x1a0/0x1a0
[  795.756915][   T27]  ? kthread_blkcg+0xd0/0xd0
[  795.761622][   T27]  ret_from_fork+0x1f/0x30
[  795.774166][   T27]  </TASK>
[  795.779596][   T27] INFO: task udevd:4258 blocked for more than 143 seconds.
[  795.793551][   T27]       Not tainted syzkaller #0
[  795.799461][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  795.815696][   T27] task:udevd           state:D stack:22928 pid:4258  ppid:3638   flags:0x00004002
[  795.825155][   T27] Call Trace:
[  795.837171][   T27]  <TASK>
[  795.840191][   T27]  __schedule+0x11d1/0x40e0
[  795.844794][   T27]  ? __sched_text_start+0x8/0x8
[  795.855646][   T27]  ? __mutex_trylock_common+0x86/0x260
[  795.861243][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  795.873472][   T27]  schedule+0xb9/0x180
[  795.882074][   T27]  schedule_preempt_disabled+0xf/0x20
[  795.892682][   T27]  __mutex_lock+0x562/0xaf0
[  795.899120][   T27]  ? __mutex_lock+0x3b2/0xaf0
[  795.903898][   T27]  ? uevent_show+0x16c/0x320
[  795.915128][   T27]  ? mutex_lock_nested+0x10/0x10
[  795.922053][   T27]  uevent_show+0x16c/0x320
[  795.931694][   T27]  dev_attr_show+0x50/0xb0
[  795.939246][   T27]  sysfs_kf_seq_show+0x349/0x4b0
[  795.944313][   T27]  ? device_get_ownership+0xa0/0xa0
[  795.956563][   T27]  seq_read_iter+0x49b/0xd50
[  795.961292][   T27]  ? common_file_perm+0x171/0x1c0
[  795.972630][   T27]  vfs_read+0x4a7/0xa00
[  795.979445][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  795.984756][   T27]  ? kernel_read+0x1e0/0x1e0
[  795.998693][   T27]  ? __x64_sys_newfstat+0x19a/0x220
[  796.004127][   T27]  ? __fdget_pos+0x2b5/0x360
[  796.012206][   T27]  ksys_read+0x14c/0x250
[  796.020757][   T27]  ? vfs_write+0xa30/0xa30
[  796.025315][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  796.032248][   T27]  do_syscall_64+0x4c/0xa0
[  796.042842][   T27]  ? clear_bhb_loop+0x60/0xb0
[  796.049722][   T27]  ? clear_bhb_loop+0x60/0xb0
[  796.054533][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  796.072116][   T27] RIP: 0033:0x7fd8cbea7407
[  796.082322][   T27] RSP: 002b:00007fff3e259190 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  796.093718][   T27] RAX: ffffffffffffffda RBX: 00007fd8cc560880 RCX: 00007fd8cbea7407
[  796.110271][   T27] RDX: 0000000000001000 RSI: 0000557c0ee81550 RDI: 0000000000000008
[  796.122433][   T27] RBP: 00007fd8cbfefff0 R08: 0000000000000000 R09: 0000000000000000
[  796.137450][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[  796.152344][   T27] R13: 00007fd8cbfefea0 R14: 0000000000000000 R15: 0000557c0ee737a0
[  796.165185][   T27]  </TASK>
[  796.172473][   T27] INFO: task syz-executor:4277 blocked for more than 144 seconds.
[  796.184198][   T27]       Not tainted syzkaller #0
[  796.193568][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  796.205998][   T27] task:syz-executor    state:D stack:22320 pid:4277  ppid:1      flags:0x00004004
[  796.222548][   T27] Call Trace:
[  796.228786][   T27]  <TASK>
[  796.231793][   T27]  __schedule+0x11d1/0x40e0
[  796.241658][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  796.250996][   T27]  ? queue_work_on+0x196/0x1f0
[  796.261206][   T27]  ? __sched_text_start+0x8/0x8
[  796.269944][   T27]  ? wq_worker_last_func+0x40/0x40
[  796.275183][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  796.286622][   T27]  ? prepare_to_wait_event+0x430/0x470
[  796.292224][   T27]  schedule+0xb9/0x180
[  796.301757][   T27]  synchronize_rcu_expedited+0x6e6/0x890
[  796.310696][   T27]  ? synchronize_rcu+0x3f0/0x3f0
[  796.320546][   T27]  ? sync_rcu_exp_done_unlocked+0x140/0x140
[  796.331447][   T27]  ? namespace_unlock+0x1d7/0x430
[  796.340531][   T27]  ? __lock_acquire+0x7d10/0x7d10
[  796.348465][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  796.353782][   T27]  ? wake_bit_function+0x200/0x200
[  796.363151][   T27]  ? shrink_dentry_list+0x688/0x6a0
[  796.371844][   T27]  ? up_write+0x1bb/0x420
[  796.381159][   T27]  namespace_unlock+0x23f/0x430
[  796.389143][   T27]  ? __lock_acquire+0x7d10/0x7d10
[  796.394291][   T27]  ? umount_tree+0xe20/0xe20
[  796.403695][   T27]  ? umount_mnt+0x2c0/0x2c0
[  796.411485][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  796.420787][   T27]  path_umount+0xf19/0xf90
[  796.425325][   T27]  ? __x64_sys_umount+0x12d/0x170
[  796.431236][   T27]  ? may_mount+0x90/0x90
[  796.445947][   T27]  ? kmem_cache_free+0xf7/0x290
[  796.450949][   T27]  __x64_sys_umount+0x12d/0x170
[  796.461178][   T27]  ? path_umount+0xf90/0xf90
[  796.467037][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  796.472913][   T27]  do_syscall_64+0x4c/0xa0
[  796.483762][   T27]  ? clear_bhb_loop+0x60/0xb0
[  796.491331][   T27]  ? clear_bhb_loop+0x60/0xb0
[  796.501542][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  796.509256][   T27] RIP: 0033:0x7fef94d9d9d7
[  796.513772][   T27] RSP: 002b:00007ffd909010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  796.529461][   T27] RAX: ffffffffffffffda RBX: 00007fef94e31f90 RCX: 00007fef94d9d9d7
[  796.540011][   T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd909011a0
[  796.548405][ T4276] Bluetooth: hci15: command 0x0409 tx timeout
[  796.554917][   T27] RBP: 00007ffd909011a0 R08: 00007ffd909021a0 R09: 00000000ffffffff
[  796.564379][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd90902230
[  796.578791][   T27] R13: 00007fef94e31f90 R14: 000000000009ef0d R15: 00007ffd90902270
[  796.590744][   T27]  </TASK>
[  796.593918][   T27] INFO: task kworker/u4:10:4377 blocked for more than 144 seconds.
[  796.610296][   T27]       Not tainted syzkaller #0
[  796.617668][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  796.635639][   T27] task:kworker/u4:10   state:D stack:22704 pid:4377  ppid:2      flags:0x00004000
[  796.645044][   T27] Workqueue: events_unbound fsnotify_mark_destroy_workfn
[  796.662233][   T27] Call Trace:
[  796.666492][   T27]  <TASK>
[  796.669508][   T27]  __schedule+0x11d1/0x40e0
[  796.674676][   T27]  ? __sched_text_start+0x8/0x8
[  796.686908][   T27]  ? kthread_data+0x4b/0xc0
[  796.691551][   T27]  ? wq_worker_sleeping+0x60/0x280
[  796.702570][   T27]  schedule+0xb9/0x180
[  796.709779][   T27]  schedule_timeout+0xbd/0x2d0
[  796.714659][   T27]  ? console_conditional_schedule+0x40/0x40
[  796.728905][   T27]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  796.735025][   T27]  ? lock_chain_count+0x20/0x20
[  796.744890][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  796.754440][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  796.762631][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  796.774708][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  796.782526][   T27]  ? wait_for_completion+0x276/0x5a0
[  796.788756][ T9978] Bluetooth: hci16: command 0x0409 tx timeout
[  796.803906][   T27]  wait_for_completion+0x2c7/0x5a0
[  796.810042][   T27]  ? io_schedule+0xd0/0xd0
[  796.814593][   T27]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  796.827729][   T27]  ? debug_object_active_state+0x6a/0x380
[  796.833607][   T27]  __synchronize_srcu+0x2b9/0x350
[  796.843739][   T27]  ? synchronize_srcu_expedited+0x20/0x20
[  796.854761][   T27]  ? rcu_read_lock_any_held+0x130/0x130
[  796.863530][   T27]  ? __rwlock_init+0x140/0x140
[  796.872488][   T27]  ? synchronize_srcu+0x192/0x1b0
[  796.883352][   T27]  ? process_one_work+0x7b0/0x1160
[  796.894318][   T27]  fsnotify_mark_destroy_workfn+0x106/0x2f0
[  796.903631][   T27]  ? fsnotify_connector_destroy_workfn+0xa0/0xa0
[  796.914922][   T27]  ? preempt_schedule_thunk+0x16/0x18
[  796.923755][   T27]  ? process_one_work+0x7b0/0x1160
[  796.933112][   T27]  process_one_work+0x8a2/0x1160
[  796.941175][   T27]  ? worker_detach_from_pool+0x240/0x240
[  796.953497][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  796.962810][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  796.972526][   T27]  ? kthread_data+0x4b/0xc0
[  796.980723][   T27]  worker_thread+0xaa2/0x1270
[  796.991615][   T27]  kthread+0x29d/0x330
[  796.999613][   T27]  ? worker_clr_flags+0x1a0/0x1a0
[  797.004766][   T27]  ? kthread_blkcg+0xd0/0xd0
[  797.014396][   T27]  ret_from_fork+0x1f/0x30
[  797.021866][   T27]  </TASK>
[  797.025071][   T27] 
[  797.025071][   T27] Showing all locks held in the system:
[  797.037948][ T9978] Bluetooth: hci17: command 0x0409 tx timeout
[  797.045407][   T27] 1 lock held by rcu_tasks_kthre/12:
[  797.050803][   T27]  #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  797.075670][   T27] 1 lock held by rcu_tasks_trace/13:
[  797.080970][   T27]  #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  797.125542][   T27] 1 lock held by khungtaskd/27:
[  797.130450][   T27]  #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  797.175461][   T27] 2 locks held by kworker/u4:2/33:
[  797.180587][   T27]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  797.195513][ T4276] Bluetooth: hci18: command 0x0409 tx timeout
[  797.205443][   T27]  #1: ffffc90000aa7d00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  797.224685][   T27] 6 locks held by kworker/0:2/127:
[  797.233066][   T27] 1 lock held by dhcpcd/3933:
[  797.243988][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.261182][   T27] 2 locks held by getty/4028:
[  797.266803][   T27]  #0: ffff888030277098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  797.283680][   T27]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390
[  797.297649][   T27] 4 locks held by udevd/4258:
[  797.302448][   T27]  #0: ffff8880608d0c30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50
[  797.318362][   T27]  #1: ffff88802d955888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x410
[  797.334109][   T27]  #2: ffff88802f0b8e88 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0xae/0x410
[  797.349377][   T27]  #3: ffff888078013190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320
[  797.361556][   T27] 1 lock held by syz-executor/4277:
[  797.371802][   T27]  #0: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890
[  797.386651][   T27] 3 locks held by kworker/1:4/4313:
[  797.392512][   T27]  #0: ffff88814d201538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  797.411924][   T27]  #1: ffffc90004477d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  797.427883][   T27]  #2: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30
[  797.446228][   T27] 2 locks held by kworker/u4:10/4377:
[  797.451730][   T27]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  797.470662][   T27]  #1: ffffc90004a47d00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  797.482906][   T27] 1 lock held by syz.6.1233/9940:
[  797.493616][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0
[  797.505455][   T27] 2 locks held by syz.9.1234/9952:
[  797.510679][   T27]  #0: ffff88807573feb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100
[  797.531474][   T27]  #1: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[  797.544941][   T27] 2 locks held by syz.5.1236/9945:
[  797.558143][   T27]  #0: ffff888073f6fa10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  797.573777][   T27]  #1: ffff888057d85130 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1c9/0x860
[  797.588239][   T27] 1 lock held by syz.1.1238/9962:
[  797.593382][   T27]  #0: ffff88805346be10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  797.612381][   T27] 1 lock held by syz-executor/9966:
[  797.618577][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.635108][   T27] 1 lock held by syz-executor/9969:
[  797.642277][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.659118][   T27] 1 lock held by syz-executor/9973:
[  797.664868][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.680012][   T27] 1 lock held by syz-executor/9974:
[  797.691170][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.704206][   T27] 1 lock held by syz-executor/9980:
[  797.714686][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.727622][   T27] 1 lock held by syz-executor/9986:
[  797.732939][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.749438][   T27] 1 lock held by syz-executor/9988:
[  797.754751][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.770368][   T27] 1 lock held by syz-executor/9990:
[  797.780945][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.794766][   T27] 1 lock held by syz-executor/9992:
[  797.806981][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.821445][   T27] 1 lock held by syz-executor/9995:
[  797.829864][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.844659][   T27] 1 lock held by syz-executor/10001:
[  797.853161][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.867863][   T27] 1 lock held by syz-executor/10003:
[  797.873362][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.889871][   T27] 1 lock held by syz-executor/10005:
[  797.895285][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.913454][   T27] 1 lock held by syz-executor/10007:
[  797.925239][   T27]  #0: ffffffff8dd469e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[  797.937951][   T27] 
[  797.940363][   T27] =============================================
[  797.940363][   T27] 
[  797.953934][   T27] NMI backtrace for cpu 1
[  797.958299][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  797.965505][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  797.975567][   T27] Call Trace:
[  797.978853][   T27]  <TASK>
[  797.981789][   T27]  dump_stack_lvl+0x188/0x24e
[  797.986485][   T27]  ? irq_work_queue+0xb8/0x140
[  797.991262][   T27]  ? show_regs_print_info+0x12/0x12
[  797.996471][   T27]  ? load_image+0x400/0x400
[  798.000994][   T27]  ? vprintk_emit+0x59f/0x6a0
[  798.005705][   T27]  ? printk_sprint+0x460/0x460
[  798.010502][   T27]  nmi_cpu_backtrace+0x3e6/0x460
[  798.015464][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  798.021633][   T27]  ? _printk+0xda/0x130
[  798.025798][   T27]  ? load_image+0x400/0x400
[  798.030318][   T27]  ? load_image+0x400/0x400
[  798.034846][   T27]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  798.040933][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  798.047015][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  798.053029][   T27]  watchdog+0xeee/0xf30
[  798.057212][   T27]  ? watchdog+0x1ed/0xf30
[  798.061559][   T27]  kthread+0x29d/0x330
[  798.065643][   T27]  ? hungtask_pm_notify+0x40/0x40
[  798.070770][   T27]  ? kthread_blkcg+0xd0/0xd0
[  798.075387][   T27]  ret_from_fork+0x1f/0x30
[  798.079836][   T27]  </TASK>
[  798.085118][   T27] Sending NMI from CPU 1 to CPUs 0:
[  798.090534][    C0] NMI backtrace for cpu 0
[  798.090544][    C0] CPU: 0 PID: 127 Comm: kworker/0:2 Not tainted syzkaller #0
[  798.090559][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  798.090568][    C0] Workqueue: usb_hub_wq hub_event
[  798.090590][    C0] RIP: 0010:unwind_next_frame+0xb93/0x20b0
[  798.090609][    C0] Code: 28 84 c0 4c 8b 74 24 10 0f 85 4b 12 00 00 41 c6 07 00 ba 10 00 00 00 4c 89 f7 31 f6 e8 f6 3a 9a 00 4c 8b 64 24 20 48 8b 3c 24 <e9> 53 05 00 00 4c 89 7c 24 40 4c 89 74 24 70 4c 89 64 24 20 4c 8d
[  798.090621][    C0] RSP: 0018:ffffc90000007310 EFLAGS: 00000002
[  798.090632][    C0] RAX: ffffc90000007438 RBX: ffffc900000073e8 RCX: 0000000000000000
[  798.090643][    C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90002dc7308
[  798.090652][    C0] RBP: ffffffff8ee0e174 R08: ffffc90000007447 R09: ffffc90000007438
[  798.090663][    C0] R10: dffffc0000000000 R11: fffff52000000e89 R12: ffffffff8ee0e170
[  798.090674][    C0] R13: dffffc0000000000 R14: ffffc90000007438 R15: ffffc9000000741d
[  798.090685][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  798.090697][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  798.090708][    C0] CR2: 0000561b46bc0000 CR3: 000000007e4bb000 CR4: 00000000003506f0
[  798.090720][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  798.090729][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  798.090738][    C0] Call Trace:
[  798.090742][    C0]  <IRQ>
[  798.090752][    C0]  ? device_add+0xa00/0xfb0
[  798.090774][    C0]  ? stack_trace_save+0xf0/0xf0
[  798.090791][    C0]  arch_stack_walk+0x10c/0x140
[  798.090810][    C0]  ? usb_set_configuration+0x1991/0x1fd0
[  798.090827][    C0]  stack_trace_save+0xa6/0xf0
[  798.090842][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  798.090862][    C0]  kasan_set_track+0x4b/0x70
[  798.090879][    C0]  ? kasan_set_track+0x4b/0x70
[  798.090893][    C0]  ? kasan_save_free_info+0x2d/0x50
[  798.090906][    C0]  ? ____kasan_slab_free+0x126/0x1e0
[  798.090921][    C0]  ? slab_free_freelist_hook+0x131/0x1a0
[  798.090936][    C0]  ? __kmem_cache_free+0xb6/0x1f0
[  798.090950][    C0]  ? skb_release_data+0x5db/0x7c0
[  798.090968][    C0]  ? consume_skb+0xa2/0x100
[  798.090984][    C0]  ? ath6kl_usb_recv_complete+0x1d2/0x4d0
[  798.091001][    C0]  ? __usb_hcd_giveback_urb+0x35f/0x520
[  798.091018][    C0]  ? dummy_timer+0xbf6/0x3090
[  798.091031][    C0]  ? __hrtimer_run_queues+0x54a/0xd50
[  798.091045][    C0]  ? hrtimer_run_softirq+0x183/0x2a0
[  798.091059][    C0]  ? handle_softirqs+0x2a1/0x930
[  798.091071][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  798.091083][    C0]  ? irq_exit_rcu+0x5/0x20
[  798.091096][    C0]  ? sysvec_apic_timer_interrupt+0xa0/0xc0
[  798.091110][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  798.091186][    C0]  ? memset_erms+0x9/0x10
[  798.091203][    C0]  ? slab_post_alloc_hook+0x67/0x480
[  798.091217][    C0]  ? __kmem_cache_alloc_node+0x140/0x260
[  798.091230][    C0]  ? __kmalloc_node_track_caller+0x9e/0x230
[  798.091249][    C0]  ? __alloc_skb+0x22a/0x7e0
[  798.091265][    C0]  ? __netdev_alloc_skb+0x114/0x4f0
[  798.091281][    C0]  ? ath6kl_usb_post_recv_transfers+0x207/0x6f0
[  798.091296][    C0]  ? ath6kl_usb_power_on+0x66/0x280
[  798.091310][    C0]  ? ath6kl_core_init+0x1d6/0x1090
[  798.091324][    C0]  ? ath6kl_usb_probe+0x144a/0x1540
[  798.091337][    C0]  ? usb_probe_interface+0x5c5/0xb20
[  798.091351][    C0]  ? really_probe+0x2aa/0xc70
[  798.091366][    C0]  ? __driver_probe_device+0x18c/0x330
[  798.091381][    C0]  ? driver_probe_device+0x4f/0x420
[  798.091396][    C0]  ? __device_attach_driver+0x2c6/0x510
[  798.091411][    C0]  ? bus_for_each_drv+0x184/0x210
[  798.091425][    C0]  ? __device_attach+0x2a8/0x480
[  798.091439][    C0]  ? bus_probe_device+0xbc/0x1e0
[  798.091453][    C0]  ? device_add+0xa00/0xfb0
[  798.091480][    C0]  ? __kmem_cache_free+0xb6/0x1f0
[  798.091493][    C0]  kasan_save_free_info+0x2d/0x50
[  798.091506][    C0]  ____kasan_slab_free+0x126/0x1e0
[  798.091524][    C0]  slab_free_freelist_hook+0x131/0x1a0
[  798.091541][    C0]  ? skb_release_data+0x5db/0x7c0
[  798.091558][    C0]  __kmem_cache_free+0xb6/0x1f0
[  798.091573][    C0]  skb_release_data+0x5db/0x7c0
[  798.091597][    C0]  consume_skb+0xa2/0x100
[  798.091614][    C0]  ath6kl_usb_recv_complete+0x1d2/0x4d0
[  798.091632][    C0]  __usb_hcd_giveback_urb+0x35f/0x520
[  798.091652][    C0]  dummy_timer+0xbf6/0x3090
[  798.091676][    C0]  ? mark_lock+0x94/0x320
[  798.091697][    C0]  ? lock_chain_count+0x20/0x20
[  798.091719][    C0]  ? dummy_free_streams+0x530/0x530
[  798.091737][    C0]  __hrtimer_run_queues+0x54a/0xd50
[  798.091754][    C0]  ? dummy_free_streams+0x530/0x530
[  798.091771][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  798.091785][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  798.091805][    C0]  hrtimer_run_softirq+0x183/0x2a0
[  798.091821][    C0]  handle_softirqs+0x2a1/0x930
[  798.091837][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  798.091852][    C0]  ? do_softirq+0x210/0x210
[  798.091869][    C0]  __irq_exit_rcu+0x13b/0x230
[  798.091882][    C0]  ? irq_exit_rcu+0x20/0x20
[  798.091899][    C0]  irq_exit_rcu+0x5/0x20
[  798.091911][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  798.091925][    C0]  </IRQ>
[  798.091929][    C0]  <TASK>
[  798.091934][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  798.091950][    C0] RIP: 0010:memset_erms+0x9/0x10
[  798.091967][    C0] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 <f3> aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01
[  798.091977][    C0] RSP: 0018:ffffc90002dc6a20 EFLAGS: 00010246
[  798.091989][    C0] RAX: ffff8880aff3c000 RBX: 0000000000000000 RCX: 0000000000000fc0
[  798.091999][    C0] RDX: 0000000000002000 RSI: 0000000000000000 RDI: ffff8880aff3d040
[  798.092008][    C0] RBP: 0000000000000001 R08: ffffc90002dc6a98 R09: ffff8880aff3c000
[  798.092018][    C0] R10: 0000000042566c05 R11: fffff520005b8ce5 R12: 0000000000000001
[  798.092028][    C0] R13: ffff888017442280 R14: 00000000000a2a20 R15: ffffc90002dc6a98
[  798.092045][    C0]  slab_post_alloc_hook+0x67/0x480
[  798.092059][    C0]  ? slab_pre_alloc_hook+0x59/0x310
[  798.092072][    C0]  ? __kasan_slab_alloc+0x6b/0x80
[  798.092090][    C0]  ? __netdev_alloc_skb+0x114/0x4f0
[  798.092108][    C0]  __kmem_cache_alloc_node+0x140/0x260
[  798.092129][    C0]  ? __netdev_alloc_skb+0x114/0x4f0
[  798.092145][    C0]  __kmalloc_node_track_caller+0x9e/0x230
[  798.092164][    C0]  ? __netdev_alloc_skb+0x114/0x4f0
[  798.092180][    C0]  __alloc_skb+0x22a/0x7e0
[  798.092198][    C0]  __netdev_alloc_skb+0x114/0x4f0
[  798.092215][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  798.092229][    C0]  ? __alloc_skb+0x7e0/0x7e0
[  798.092244][    C0]  ? usb_hcd_submit_urb+0x32c/0x19c0
[  798.092266][    C0]  ath6kl_usb_post_recv_transfers+0x207/0x6f0
[  798.092288][    C0]  ath6kl_usb_power_on+0x66/0x280
[  798.092303][    C0]  ath6kl_core_init+0x1d6/0x1090
[  798.092316][    C0]  ? free_zapped_rcu+0x1f0/0x1f0
[  798.092337][    C0]  ? ath6kl_core_rx_complete+0x70/0x70
[  798.092350][    C0]  ? ath6kl_core_create+0x7d6/0x980
[  798.092364][    C0]  ? memcpy+0x3c/0x60
[  798.092377][    C0]  ? ath6kl_core_create+0x7d6/0x980
[  798.092392][    C0]  ath6kl_usb_probe+0x144a/0x1540
[  798.092413][    C0]  usb_probe_interface+0x5c5/0xb20
[  798.092433][    C0]  ? usb_register_driver+0x3d0/0x3d0
[  798.092446][    C0]  really_probe+0x2aa/0xc70
[  798.092463][    C0]  ? pm_runtime_barrier+0x147/0x1c0
[  798.092480][    C0]  __driver_probe_device+0x18c/0x330
[  798.092498][    C0]  driver_probe_device+0x4f/0x420
[  798.092515][    C0]  __device_attach_driver+0x2c6/0x510
[  798.092530][    C0]  ? coredump_store+0x90/0x90
[  798.092546][    C0]  bus_for_each_drv+0x184/0x210
[  798.092561][    C0]  ? coredump_store+0x90/0x90
[  798.092576][    C0]  ? subsys_find_device_by_id+0x360/0x360
[  798.092595][    C0]  __device_attach+0x2a8/0x480
[  798.092611][    C0]  ? device_attach+0x20/0x20
[  798.092628][    C0]  ? kobject_uevent_env+0x35f/0x8a0
[  798.092644][    C0]  bus_probe_device+0xbc/0x1e0
[  798.092658][    C0]  ? device_add+0x97c/0xfb0
[  798.092676][    C0]  device_add+0xa00/0xfb0
[  798.092698][    C0]  usb_set_configuration+0x1991/0x1fd0
[  798.092723][    C0]  usb_generic_driver_probe+0x89/0x150
[  798.092739][    C0]  usb_probe_device+0x139/0x270
[  798.092754][    C0]  ? usb_register_device_driver+0x230/0x230
[  798.092769][    C0]  really_probe+0x2aa/0xc70
[  798.092785][    C0]  ? pm_runtime_barrier+0x147/0x1c0
[  798.092801][    C0]  __driver_probe_device+0x18c/0x330
[  798.092817][    C0]  driver_probe_device+0x4f/0x420
[  798.092835][    C0]  __device_attach_driver+0x2c6/0x510
[  798.092851][    C0]  ? coredump_store+0x90/0x90
[  798.092866][    C0]  bus_for_each_drv+0x184/0x210
[  798.092881][    C0]  ? coredump_store+0x90/0x90
[  798.092896][    C0]  ? subsys_find_device_by_id+0x360/0x360
[  798.092915][    C0]  __device_attach+0x2a8/0x480
[  798.092932][    C0]  ? device_attach+0x20/0x20
[  798.092946][    C0]  ? __kmem_cache_free+0xb6/0x1f0
[  798.092962][    C0]  ? kobject_uevent_env+0x35f/0x8a0
[  798.092977][    C0]  bus_probe_device+0xbc/0x1e0
[  798.092991][    C0]  ? device_add+0x97c/0xfb0
[  798.093009][    C0]  device_add+0xa00/0xfb0
[  798.093030][    C0]  usb_new_device+0xd66/0x1650
[  798.093050][    C0]  ? lock_chain_count+0x20/0x20
[  798.093066][    C0]  ? usb_disconnect+0x8a0/0x8a0
[  798.093083][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  798.093097][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  798.093117][    C0]  hub_event+0x2dcf/0x5560
[  798.093154][    C0]  ? hub_post_resume+0x120/0x120
[  798.093171][    C0]  ? read_lock_is_recursive+0x10/0x10
[  798.093186][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  798.093201][    C0]  ? _raw_spin_unlock+0x40/0x40
[  798.093215][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  798.093230][    C0]  ? process_one_work+0x7b0/0x1160
[  798.093245][    C0]  process_one_work+0x8a2/0x1160
[  798.093266][    C0]  ? worker_detach_from_pool+0x240/0x240
[  798.093283][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[  798.093296][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[  798.093310][    C0]  ? kthread_data+0x4b/0xc0
[  798.093329][    C0]  worker_thread+0xaa2/0x1270
[  798.093355][    C0]  kthread+0x29d/0x330
[  798.093366][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[  798.093378][    C0]  ? kthread_blkcg+0xd0/0xd0
[  798.093390][    C0]  ret_from_fork+0x1f/0x30
[  798.093413][    C0]  </TASK>
[  799.085595][ T4276] Bluetooth: hci15: command 0x041b tx timeout
[  799.091744][ T4276] Bluetooth: hci16: command 0x041b tx timeout
[  799.105419][ T9978] Bluetooth: hci17: command 0x041b tx timeout
[  799.132832][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  799.139717][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  799.146927][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  799.156996][   T27] Call Trace:
[  799.160345][   T27]  <TASK>
[  799.163283][   T27]  dump_stack_lvl+0x188/0x24e
[  799.167992][   T27]  ? memcpy+0x3c/0x60
[  799.171990][   T27]  ? show_regs_print_info+0x12/0x12
[  799.177208][   T27]  ? load_image+0x400/0x400
[  799.181731][   T27]  panic+0x2e5/0x730
[  799.185632][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  799.191281][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  799.195794][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  799.201355][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  799.207522][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  799.213724][   T27]  watchdog+0xf2d/0xf30
[  799.217901][   T27]  ? watchdog+0x1ed/0xf30
[  799.222252][   T27]  kthread+0x29d/0x330
[  799.226327][   T27]  ? hungtask_pm_notify+0x40/0x40
[  799.231359][   T27]  ? kthread_blkcg+0xd0/0xd0
[  799.235956][   T27]  ret_from_fork+0x1f/0x30
[  799.240390][   T27]  </TASK>
[  799.243737][   T27] Kernel Offset: disabled
[  799.248054][   T27] Rebooting in 86400 seconds..