last executing test programs:

5m21.215244823s ago: executing program 32 (id=600):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xa9, 0x6, 0xfffffffa, 0x59455247, [0x4, 0x9], [0x5, 0x1000], 0x13a}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)

4m27.103023339s ago: executing program 33 (id=2052):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x80, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "17da54adc1ff3123"}, 0x10}, 0x1, 0x0, 0x0, 0x4048011}, 0x11)

4m18.443027955s ago: executing program 34 (id=2217):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000009f80)="c674015814a875ec92e8793fce1d", 0x0, 0x130000b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x27)

2m1.527307614s ago: executing program 5 (id=4600):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a3000000000240004802000018007000100637400001400028008000140000000170800024000000002050007401400000014000000110001"], 0x80}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01010000000000000000020000000c0003"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

2m1.479289973s ago: executing program 5 (id=4601):
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x8d, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x5, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
read$FUSE(r0, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)

2m1.397421584s ago: executing program 5 (id=4604):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040))
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a25d70e26103e294b7894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}], 0x1)
close(r0)

2m1.363302583s ago: executing program 5 (id=4606):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

2m1.305467016s ago: executing program 5 (id=4608):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000700)={0x2710, 0x3, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000640)={0x1fe, 0x1, 0x1000, 0x1000, &(0x7f0000d67000/0x1000)=nil, 0x8b2})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x3, 0xb000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})

2m1.096271676s ago: executing program 5 (id=4615):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'})

2m1.035217906s ago: executing program 35 (id=4615):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'})

1m40.475651182s ago: executing program 2 (id=4818):
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)

1m40.475381028s ago: executing program 2 (id=4819):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0)

1m40.427479783s ago: executing program 2 (id=4821):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
read$msr(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)

1m40.186795645s ago: executing program 2 (id=4826):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, 0x28e3291, 0x0)

1m40.117136236s ago: executing program 2 (id=4827):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
fchdir(r0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)

1m39.767703019s ago: executing program 2 (id=4831):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

1m39.747958371s ago: executing program 36 (id=4831):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

1m29.10507898s ago: executing program 1 (id=4982):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2})
syz_io_uring_setup(0x1e0c, &(0x7f00000005c0)={0x0, 0x4ec1, 0x800, 0x400000, 0x3d9}, &(0x7f0000ffe000), 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

1m29.064426103s ago: executing program 1 (id=4984):
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c6012c", 0x20}, {&(0x7f0000000280)="9e91d91a92dc7c8f33658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88)

1m29.00166486s ago: executing program 1 (id=4986):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m28.898599477s ago: executing program 1 (id=4990):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

1m28.826567991s ago: executing program 1 (id=4992):
r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x133d, 0x0, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1)

1m26.332452473s ago: executing program 1 (id=5022):
socket(0x28, 0x801, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
readv(r0, &(0x7f0000002700)=[{&(0x7f0000002000)=""/23, 0x17}], 0x1)

1m26.258358583s ago: executing program 37 (id=5022):
socket(0x28, 0x801, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
readv(r0, &(0x7f0000002700)=[{&(0x7f0000002000)=""/23, 0x17}], 0x1)

53.95178313s ago: executing program 9 (id=5652):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={<r3=>r2, 0x200, 0x7, 0x6}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r3, 0x1, 0x80}, 0x8)

53.908490364s ago: executing program 9 (id=5645):
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)={0xad, "0a0ddf9b6737dfb7752a2b4454049c68ce1df316f9f90924c1e60af38615d3aff57b9eef43c51c46eee200008f20e212b1b3a25c679e66c1833bc54e7ce76411d08ec138f706871dcd77914581757e5a3e52efd19fc860d5c274ea1f2121b9cf3c6dbb7918ee8c858d6fefc3399a00880c62df3d25ed2887d9cad2f4da1e8fd447054ba6b0a3e737f090d8a9a7ebd18f62b7a15f213599d89854cd429251cb2ac05862873fb9f2267238c338cf"})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

53.817230196s ago: executing program 9 (id=5648):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="fc010000000000000000000000000001000000006c000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000800"/106], 0x180}}, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000180))

53.817076748s ago: executing program 9 (id=5649):
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x44)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1)

53.737419906s ago: executing program 9 (id=5654):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cc, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

53.628883595s ago: executing program 9 (id=5659):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000"], 0x340a)

53.527806574s ago: executing program 38 (id=5659):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000"], 0x340a)

47.905172809s ago: executing program 7 (id=5744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000000a0a0101"], 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)

47.836643658s ago: executing program 7 (id=5746):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

47.836480268s ago: executing program 7 (id=5747):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084)

47.803661157s ago: executing program 7 (id=5748):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00')

47.734834131s ago: executing program 7 (id=5758):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0)

47.467480465s ago: executing program 7 (id=5757):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x9, 0x0, 0x0, 0x5, 0x8b, 0x6, 0x5505, 0x8, 0x3, 0x80, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

47.437493996s ago: executing program 39 (id=5757):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x9, 0x0, 0x0, 0x5, 0x8b, 0x6, 0x5505, 0x8, 0x3, 0x80, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

37.483522701s ago: executing program 4 (id=5915):
r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0)
ftruncate(r0, 0x800799c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendfile(r1, r0, 0x0, 0xfeff)

37.397498045s ago: executing program 4 (id=5916):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]})

37.387487699s ago: executing program 4 (id=5917):
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, 0x0, 0x0)

37.31512351s ago: executing program 4 (id=5918):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
unlinkat(r1, &(0x7f00000011c0)='./file0\x00', 0x0)

37.314860937s ago: executing program 4 (id=5919):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0xfffffffe)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)

37.026837555s ago: executing program 4 (id=5922):
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = epoll_create(0x80)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x40000004})

36.941929607s ago: executing program 40 (id=5922):
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = epoll_create(0x80)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x40000004})

3.275354963s ago: executing program 3 (id=6619):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf255c00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)

3.27360232s ago: executing program 3 (id=6621):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', <r1=>0x0})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
sendmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0x8, 0x0, 0x4, 0x0, "00000000000003ff"}, 0x10}, 0x1, 0x0, 0x0, 0x20041895}, 0x0)

3.250237944s ago: executing program 3 (id=6622):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a44000010203010902"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.832919652s ago: executing program 6 (id=6647):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000002980)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="9f", 0x1}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0xc0)

1.595616472s ago: executing program 6 (id=6652):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000300)="189a55d9", 0x4}], 0x1}}], 0x2, 0x20040040)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x3}, 0x8)
close(r0)

1.546232446s ago: executing program 6 (id=6654):
r0 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r1})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1})

1.545913975s ago: executing program 6 (id=6656):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000070020000200000004"], 0x50)
close(0x3)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.456821148s ago: executing program 6 (id=6657):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x5793, &(0x7f0000000040)={0x0, 0xca21, 0x10000, 0x1, 0x212}, &(0x7f0000000180), &(0x7f0000ff4000))
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000de3000/0x4000)=nil, &(0x7f0000ea5000/0x3000)=nil, 0x4000, 0x2})

586.873505ms ago: executing program 6 (id=6666):
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800)
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
r2 = gettid()
rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0))

444.480358ms ago: executing program 8 (id=6669):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)

376.374377ms ago: executing program 8 (id=6671):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
close(0x3)

370.211366ms ago: executing program 8 (id=6675):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="4789d3aefc1a4d0334", 0x9}, {&(0x7f0000002600)="782ee097da", 0x5}], 0x23, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080)

328.568744ms ago: executing program 8 (id=6677):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@arm64={0x48, 0xe, 0x8, '\x00', 0x9})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x80002, 0x0, {[0x800, 0x8, 0x2, 0x9, 0x9, 0xfffffffffffffff3, 0x200, 0x81]}})

248.035033ms ago: executing program 0 (id=6679):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x0)

246.114258ms ago: executing program 0 (id=6680):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x5, 0x5, 0xfffffe3f, 0x0, 0x0, "57ea000000000000000000c20000ffff00", 0x0, 0xb6})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40))
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000780)={0x3, 0x6, 0x8, 0x2, 0x9, "1d0dc5678a464bad2354c71e3585b76e4d7dc8"})
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1)

181.671812ms ago: executing program 0 (id=6681):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0xeaa}]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x490, 0xec000000, 0xffffffffffffffff}]})

175.291874ms ago: executing program 8 (id=6682):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xfec00000, 0x600000, 0x8})

175.021631ms ago: executing program 3 (id=6683):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x14)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)

73.488451ms ago: executing program 3 (id=6684):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x48001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010141, 0x0, 0xb36}]})

72.32446ms ago: executing program 0 (id=6685):
r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
read(r1, 0x0, 0x0)

2.331308ms ago: executing program 0 (id=6686):
r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x3)
r2 = openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x44)
fchown(r2, 0x0, 0x0)

2.123149ms ago: executing program 8 (id=6687):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x80006}], 0x1, 0x10003, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2.0051ms ago: executing program 0 (id=6688):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x2)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x124)
r2 = fanotify_init(0x4, 0x1000)
fanotify_mark(r2, 0x141, 0x40001029, r1, 0x0)

0s ago: executing program 3 (id=6689):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
close(r0)

kernel console output (not intermixed with test programs):

0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  330.306576][   T40] audit: type=1326 audit(1773608049.612:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.7.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  330.315768][   T40] audit: type=1326 audit(1773608049.612:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.7.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  330.327635][   T40] audit: type=1326 audit(1773608049.612:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.7.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  330.335604][   T40] audit: type=1326 audit(1773608049.612:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.7.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  330.346210][   T40] audit: type=1326 audit(1773608049.612:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.7.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  330.357443][   T40] audit: type=1326 audit(1773608049.612:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.7.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  330.366143][   T40] audit: type=1326 audit(1773608049.612:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.7.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  330.382959][   T40] audit: type=1326 audit(1773608049.612:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.7.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  330.390675][   T40] audit: type=1326 audit(1773608049.612:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.7.4891" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  330.449974][T17672] netlink: 'syz.1.4894': attribute type 1 has an invalid length.
[  330.470310][   T34] tipc: Node number set to 2886997039
[  330.556288][T17681] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  330.558861][T17681] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  330.561413][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.567210][T17681] vhci_hcd vhci_hcd.0: Device attached
[  330.794947][T17575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.800473][   T24] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  330.820225][   T34] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  330.881899][ T1185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.885668][ T1185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.982879][   T34] usb 6-1: config 0 has no interfaces?
[  330.985305][   T34] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  330.989348][   T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.995802][   T34] usb 6-1: config 0 descriptor??
[  331.200001][T17682] usb 39-1: recv xbuf, 0
[  331.201394][ T5945] usb 6-1: USB disconnect, device number 37
[  331.201753][   T92] vhci_hcd vhci_hcd.1: stop threads
[  331.206039][   T92] vhci_hcd vhci_hcd.1: release socket
[  331.208504][   T92] vhci_hcd vhci_hcd.1: disconnect device
[  331.270386][   T24] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  331.350446][ T5948] Bluetooth: hci2: command tx timeout
[  331.792097][T17713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4914'.
[  331.830466][ T5948] Bluetooth: hci3: command tx timeout
[  331.830987][ T1332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.836107][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.890605][T17009] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  331.910560][   T34] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  331.941850][T17722] netlink: 'syz.8.4917': attribute type 12 has an invalid length.
[  331.945516][T17722] netlink: 'syz.8.4917': attribute type 9 has an invalid length.
[  331.948549][T17722] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4917'.
[  332.080710][   T34] usb 12-1: Using ep0 maxpacket: 8
[  332.084074][   T34] usb 12-1: config index 0 descriptor too short (expected 301, got 45)
[  332.087278][   T34] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  332.090823][   T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  332.094009][   T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  332.097380][   T34] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  332.102082][   T34] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  332.105105][   T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.327365][   T34] usb 12-1: usb_control_msg returned -32
[  332.329480][   T34] usbtmc 12-1:16.0: can't read capabilities
[  332.790555][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.871555][T17575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.311564][T17777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4943'.
[  333.315298][T17777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4943'.
[  333.352321][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.359023][ T1332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.430218][ T5949] Bluetooth: hci2: command tx timeout
[  333.910730][ T5949] Bluetooth: hci3: command tx timeout
[  334.030236][T17009] usb 11-1: new full-speed USB device number 14 using dummy_hcd
[  334.182149][T17009] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  334.186558][T17009] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  334.191178][T17009] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  334.194650][T17009] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.256828][T17788] 9pnet_fd: p9_fd_create_tcp (17788): problem connecting socket to 127.0.0.1
[  334.409758][T17009] usb 11-1: usb_control_msg returned -32
[  334.412835][T17009] usbtmc 11-1:16.0: can't read capabilities
[  334.682750][   T29] usb 12-1: USB disconnect, device number 5
[  335.155878][T17890] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  335.259881][T17893] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4971'.
[  335.308118][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4972'.
[  335.750507][   T34] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[  335.821880][T17933] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4989'.
[  335.920484][   T34] usb 13-1: Using ep0 maxpacket: 16
[  335.931844][   T34] usb 13-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  335.935122][   T34] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.938602][   T34] usb 13-1: Product: syz
[  335.950190][   T34] usb 13-1: Manufacturer: syz
[  335.952313][   T34] usb 13-1: SerialNumber: syz
[  335.961074][   T34] usb 13-1: config 0 descriptor??
[  335.970563][   T34] as10x_usb: device has been detected
[  335.974048][   T34] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  335.984942][   T34] usb 13-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  335.999086][   T34] as10x_usb: error during firmware upload part1
[  336.000248][ T5949] Bluetooth: hci3: command 0x0419 tx timeout
[  336.002917][   T34] Registered device Sky IT Digital Key (green led)
[  336.004643][   T54] net_ratelimit: 4 callbacks suppressed
[  336.004657][   T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.174039][T17910] random: crng reseeded on system resumption
[  336.188729][ T1332] usb 13-1: USB disconnect, device number 2
[  336.216405][ T1332] Unregistered device Sky IT Digital Key (green led)
[  336.232487][ T1332] as10x_usb: device has been disconnected
[  336.811870][   T24] usb 11-1: USB disconnect, device number 14
[  337.030548][   T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.120463][T17009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.310233][   T34] usb 11-1: new high-speed USB device number 15 using dummy_hcd
[  337.472225][   T34] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  337.477021][   T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.482130][   T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.485774][   T34] usb 11-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  337.488701][   T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.492755][   T34] usb 11-1: config 0 descriptor??
[  337.908076][   T34] wacom 0003:056A:0010.0018: Unknown device_type for 'HID 056a:0010'. Assuming pen.
[  337.924469][   T34] wacom 0003:056A:0010.0018: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.6-1/input0
[  337.932973][   T34] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:056A:0010.0018/input/input46
[  338.071940][   T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.381588][  T298] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.474709][  T298] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.551997][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  338.554017][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5027'.
[  338.557925][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  338.563606][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  338.570188][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  338.574525][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.588983][  T298] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.704386][  T298] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.860057][  T298] bridge_slave_1: left allmulticast mode
[  338.862096][  T298] bridge_slave_1: left promiscuous mode
[  338.864168][  T298] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.869659][  T298] bridge_slave_0: left allmulticast mode
[  338.872236][  T298] bridge_slave_0: left promiscuous mode
[  338.874153][  T298] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.073496][  T298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.078079][  T298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.082117][  T298] bond0 (unregistering): Released all slaves
[  339.086870][T18030] chnl_net:caif_netlink_parms(): no params data found
[  339.103536][T18052] bridge1: entered promiscuous mode
[  339.106423][T18052] bridge1: entered allmulticast mode
[  339.111922][T18052] team0: Port device bridge1 added
[  339.117048][T18055] bridge0: port 3(team0) entered blocking state
[  339.119936][T18055] bridge0: port 3(team0) entered disabled state
[  339.122631][T18055] team0: entered allmulticast mode
[  339.125033][T18055] team_slave_0: entered allmulticast mode
[  339.127819][T18055] team_slave_1: entered allmulticast mode
[  339.132891][T18055] team0: entered promiscuous mode
[  339.135165][T18055] team_slave_0: entered promiscuous mode
[  339.137729][T18055] team_slave_1: entered promiscuous mode
[  339.233513][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  339.233528][   T40] audit: type=1326 audit(1773608058.552:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18061 comm="syz.7.5036" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x0
[  339.298646][T18030] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.303190][T18030] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.306264][T18030] bridge_slave_0: entered allmulticast mode
[  339.309710][T18030] bridge_slave_0: entered promiscuous mode
[  339.314934][T18030] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.318363][T18030] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.322124][T18030] bridge_slave_1: entered allmulticast mode
[  339.325438][T18030] bridge_slave_1: entered promiscuous mode
[  339.346594][T18030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.356971][  T298] hsr_slave_0: left promiscuous mode
[  339.359855][  T298] hsr_slave_1: left promiscuous mode
[  339.362977][  T298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.366593][  T298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  339.370532][  T298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  339.373173][  T298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  339.381829][  T298] veth1_macvtap: left promiscuous mode
[  339.384402][  T298] veth0_macvtap: left promiscuous mode
[  339.387438][  T298] veth1_vlan: left promiscuous mode
[  339.389673][  T298] veth0_vlan: left promiscuous mode
[  339.550267][   T54] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[  339.557920][  T298] team0 (unregistering): Port device team_slave_1 removed
[  339.567584][  T298] team0 (unregistering): Port device team_slave_0 removed
[  339.664704][T18030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.685267][T18030] team0: Port device team_slave_0 added
[  339.688444][T18030] team0: Port device team_slave_1 added
[  339.708683][T18030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.712124][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.720162][   T54] usb 13-1: Using ep0 maxpacket: 8
[  339.721677][T18030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.724731][   T54] usb 13-1: config index 0 descriptor too short (expected 301, got 45)
[  339.729639][T18030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.732016][   T54] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  339.732988][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.736054][   T54] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  339.747130][T18030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.748783][   T54] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  339.756371][   T54] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  339.761916][   T54] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  339.764858][   T54] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.808531][T18030] hsr_slave_0: entered promiscuous mode
[  339.811980][T18030] hsr_slave_1: entered promiscuous mode
[  339.815163][T18030] debugfs: 'hsr0' already exists in 'hsr'
[  339.817149][T18030] Cannot create hsr debugfs directory
[  339.985269][   T54] usb 13-1: usb_control_msg returned -32
[  339.987295][   T54] usbtmc 13-1:16.0: can't read capabilities
[  339.996607][T18030] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  340.004849][T18030] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  340.011233][T18030] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  340.017943][T18030] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  340.077867][T18030] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.085147][ T5629] usb 11-1: USB disconnect, device number 15
[  340.095555][T18030] 8021q: adding VLAN 0 to HW filter on device team0
[  340.101276][  T298] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.103615][  T298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.114048][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.116546][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.299130][T18030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.342596][T18118] usbtmc 13-1:16.0: stb usb_control_msg returned -32
[  340.346618][ T5629] usb 13-1: USB disconnect, device number 3
[  340.460493][ T5985] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  340.502248][T18030] veth0_vlan: entered promiscuous mode
[  340.511661][T18030] veth1_vlan: entered promiscuous mode
[  340.548340][T18030] veth0_macvtap: entered promiscuous mode
[  340.556206][T18030] veth1_macvtap: entered promiscuous mode
[  340.566035][T18030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.574568][T18030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.585923][   T92] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.589815][   T92] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.595132][   T92] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.598536][   T92] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.610220][ T5985] usb 12-1: Using ep0 maxpacket: 8
[  340.613144][ T5985] usb 12-1: config 0 has an invalid interface number: 55 but max is 0
[  340.616754][ T5985] usb 12-1: config 0 has no interface number 0
[  340.619103][ T5985] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  340.625584][ T5985] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  340.629465][ T5985] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  340.634192][ T5985] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  340.639335][ T5985] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  340.640183][ T5949] Bluetooth: hci3: command tx timeout
[  340.643217][ T5985] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.649561][ T5985] usb 12-1: config 0 descriptor??
[  340.661166][ T5985] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  340.669655][   T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.676036][   T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.693849][   T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.698534][   T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.900811][T17009] usb 12-1: USB disconnect, device number 6
[  340.911221][T17009] ldusb 12-1:0.55: LD USB Device #0 now disconnected
[  340.956830][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5055'.
[  340.962978][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5055'.
[  341.185287][T18178] kvm: user requested TSC rate below hardware speed
[  341.319476][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5070'.
[  341.659440][T18226] input input49: cannot allocate more than FF_MAX_EFFECTS effects
[  341.985652][T18242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.197878][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5104'.
[  342.201412][T18260] hsr_slave_0: left promiscuous mode
[  342.204095][T18260] hsr_slave_1: left promiscuous mode
[  342.494284][T18273] loop2: detected capacity change from 0 to 7
[  342.501289][T17110] Dev loop2: unable to read RDB block 7
[  342.503187][T17110]  loop2: AHDI p1 p2
[  342.504498][T17110] loop2: partition table partially beyond EOD, truncated
[  342.507298][T17110] loop2: p1 start 1818582900 is beyond EOD, truncated
[  342.525347][T18273] Dev loop2: unable to read RDB block 7
[  342.528122][T18273]  loop2: AHDI p1 p2
[  342.529914][T18273] loop2: partition table partially beyond EOD, truncated
[  342.534248][T18273] loop2: p1 start 1818582900 is beyond EOD, truncated
[  342.558649][T17110] udevd[17110]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  342.575979][T17110] udevd[17110]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  342.605808][T18235] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  342.710239][ T5949] Bluetooth: hci3: command tx timeout
[  343.680752][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5147'.
[  343.823224][   T40] audit: type=1326 audit(1773608319.136:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18372 comm="syz.6.5153" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707ef6c code=0x0
[  343.840236][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout
[  344.739341][T18396] syz.7.5162 (18396): drop_caches: 2
[  344.790222][ T5949] Bluetooth: hci3: command tx timeout
[  345.000350][T18413] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  345.002503][T18413] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  345.004465][T18413] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  345.012396][T18413] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  345.016966][T18413] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  345.018910][T18413] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  345.023180][T18413] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  345.026145][T18413] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  345.028066][T18413] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  345.032735][T18413] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  345.070314][  T841] usb 11-1: new high-speed USB device number 16 using dummy_hcd
[  345.230415][  T841] usb 11-1: Using ep0 maxpacket: 8
[  345.235335][  T841] usb 11-1: config 0 has an invalid interface number: 55 but max is 0
[  345.238944][  T841] usb 11-1: config 0 has no interface number 0
[  345.242113][  T841] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  345.246877][  T841] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  345.252135][  T841] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  345.256997][  T841] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  345.262848][  T841] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  345.266833][  T841] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.272971][  T841] usb 11-1: config 0 descriptor??
[  345.280570][  T841] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  345.400217][   T29] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  345.538919][T17574] usb 11-1: USB disconnect, device number 16
[  345.543158][T17574] ldusb 11-1:0.55: LD USB Device #0 now disconnected
[  345.573523][   T29] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  345.577112][   T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.580981][   T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.584263][   T29] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  345.589321][   T29] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  345.593042][   T29] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  345.595739][   T29] usb 12-1: Manufacturer: syz
[  345.599344][   T29] usb 12-1: config 0 descriptor??
[  346.011148][   T29] appleir 0003:05AC:8243.0019: unknown main item tag 0x0
[  346.016320][   T29] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  346.427008][   T40] audit: type=1326 audit(1773608321.736:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.6.5177" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef88 code=0x7ffc0000
[  346.442044][   T40] audit: type=1326 audit(1773608321.736:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.6.5177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000
[  346.454493][   T40] audit: type=1326 audit(1773608321.736:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.6.5177" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef88 code=0x7ffc0000
[  346.464244][   T40] audit: type=1326 audit(1773608321.736:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.6.5177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000
[  346.474123][   T40] audit: type=1326 audit(1773608321.736:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.6.5177" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef88 code=0x7ffc0000
[  346.485550][   T40] audit: type=1326 audit(1773608321.736:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.6.5177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000
[  346.497431][   T40] audit: type=1326 audit(1773608321.746:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.6.5177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000
[  346.508887][   T40] audit: type=1326 audit(1773608321.746:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.6.5177" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef88 code=0x7ffc0000
[  346.522917][   T40] audit: type=1326 audit(1773608321.746:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.6.5177" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707ef88 code=0x7ffc0000
[  346.533062][   T40] audit: type=1326 audit(1773608321.746:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18433 comm="syz.6.5177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000
[  346.958042][T18463] input: syz0 as /devices/virtual/input/input50
[  347.030221][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout
[  347.030303][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout
[  347.032366][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout
[  347.035835][ T5949] Bluetooth: hci3: command 0x0c1a tx timeout
[  348.026842][ T5629] usb 12-1: USB disconnect, device number 7
[  348.436526][T18544] syzkaller1: entered promiscuous mode
[  348.438345][T18544] syzkaller1: entered allmulticast mode
[  348.589730][T18549] serio: Serial port ptm0
[  349.110590][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout
[  349.120306][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout
[  349.120380][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout
[  350.202077][T18618] syzkaller1: entered promiscuous mode
[  350.203965][T18618] syzkaller1: entered allmulticast mode
[  351.190225][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout
[  351.200999][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout
[  351.201027][ T5949] Bluetooth: hci1: command 0x0c1a tx timeout
[  351.344067][T18650] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.5266'.
[  351.689496][T18674] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5277'.
[  351.770149][T18681] input: syz1 as /devices/virtual/input/input51
[  351.806237][ T5949] block nbd7: Receive control failed (result -32)
[  351.825849][T18675] block nbd7: shutting down sockets
[  351.848255][T17613] udevd[17613]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  351.858291][T17110] udevd[17110]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  351.861005][T18686] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5280'.
[  352.147123][   T40] kauditd_printk_skb: 587 callbacks suppressed
[  352.147139][   T40] audit: type=1326 audit(1773608327.456:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18703 comm="syz.7.5288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  352.172431][   T40] audit: type=1326 audit(1773608327.456:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18703 comm="syz.7.5288" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  352.185009][   T40] audit: type=1326 audit(1773608327.456:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18703 comm="syz.7.5288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  352.210339][   T40] audit: type=1326 audit(1773608327.456:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18703 comm="syz.7.5288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  352.227638][   T40] audit: type=1326 audit(1773608327.456:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18703 comm="syz.7.5288" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fa7f6c code=0x7ffc0000
[  352.237316][   T40] audit: type=1326 audit(1773608327.466:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18703 comm="syz.7.5288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa7f88 code=0x7ffc0000
[  352.259942][   T40] audit: type=1326 audit(1773608327.466:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18703 comm="syz.7.5288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa7f88 code=0x7ffc0000
[  352.275012][   T40] audit: type=1326 audit(1773608327.466:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18703 comm="syz.7.5288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa7f88 code=0x7ffc0000
[  352.285322][   T40] audit: type=1326 audit(1773608327.466:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18703 comm="syz.7.5288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa7f88 code=0x7ffc0000
[  352.295621][   T40] audit: type=1326 audit(1773608327.466:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18703 comm="syz.7.5288" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fa7f88 code=0x7ffc0000
[  353.313118][T18762] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.316500][T18762] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.377040][T18762] bridge_slave_0: left allmulticast mode
[  353.379397][T18762] bridge_slave_0: left promiscuous mode
[  353.383661][T18762] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.395947][T18762] bridge_slave_1: left allmulticast mode
[  353.398981][T18762] bridge_slave_1: left promiscuous mode
[  353.401499][T18762] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.407716][T18762] bond0: (slave bond_slave_0): Releasing backup interface
[  353.414769][T18762] bond0: (slave bond_slave_1): Releasing backup interface
[  353.420939][T18762] team0: Port device team_slave_0 removed
[  353.426159][T18762] team0: Port device team_slave_1 removed
[  353.432035][T18762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.437935][T18762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.446421][T18762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.451787][T18762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.458278][T18762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  353.468367][T18775] tap0: tun_chr_ioctl cmd 1074025681
[  353.479254][T18773] tap0: tun_chr_ioctl cmd 1074025681
[  353.674453][T18787] kvm: apic: phys broadcast and lowest prio
[  354.500162][ T5945] usb 13-1: new high-speed USB device number 4 using dummy_hcd
[  354.662884][ T5945] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  354.666560][ T5945] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  354.670044][ T5945] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  354.673129][ T5945] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.677520][T18831] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  354.682374][ T5945] usb 13-1: Quirk or no altset; falling back to MIDI 1.0
[  354.885748][   T29] usb 13-1: USB disconnect, device number 4
[  355.573326][T18877] netlink: 212336 bytes leftover after parsing attributes in process `syz.8.5361'.
[  355.698913][T18888] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5366'.
[  355.802642][T18896] loop2: detected capacity change from 0 to 7
[  355.806851][T18896]  loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  355.809445][T18896] loop2: partition table partially beyond EOD, truncated
[  355.813205][T18896] loop2: p1 size 2574515542 extends beyond EOD, truncated
[  355.818065][T18896] loop2: p2 start 445263249 is beyond EOD, truncated
[  355.874053][T17110] udevd[17110]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  356.271683][   T29] usb 12-1: new high-speed USB device number 8 using dummy_hcd
[  356.332830][T17110] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  356.431841][   T29] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  356.435776][   T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  356.439395][   T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  356.443197][   T29] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  356.447386][   T29] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  356.450461][   T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.457647][   T29] usb 12-1: config 0 descriptor??
[  356.500988][T17110] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  356.866023][   T29] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  356.868571][   T29] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  356.871580][   T29] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  356.876975][   T29] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  356.879427][   T29] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  356.881950][   T29] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  356.884374][   T29] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  356.886830][   T29] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  356.890556][   T29] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  356.894029][   T29] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0
[  356.905869][   T29] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  357.055943][T18955] dummy0: entered promiscuous mode
[  357.059436][T18955] bond0: entered promiscuous mode
[  357.067344][T18955] debugfs: 'hsr1' already exists in 'hsr'
[  357.070023][T18955] Cannot create hsr debugfs directory
[  357.072319][T18955] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  357.075441][T18955] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  357.079643][T18955] hsr1: entered allmulticast mode
[  357.082044][T18955] dummy0: entered allmulticast mode
[  357.084290][T18955] bond0: entered allmulticast mode
[  357.121757][T18627] usb 12-1: USB disconnect, device number 8
[  357.279159][T18972] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.5401'.
[  357.309453][T18975] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5403'.
[  357.425375][T18982] dvmrp0: entered allmulticast mode
[  357.619821][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5412'.
[  357.674186][T19000] overlayfs: statfs failed on './file0'
[  358.190193][T18627] usb 12-1: new full-speed USB device number 9 using dummy_hcd
[  358.343704][T18627] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  358.347232][T18627] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  358.351623][T18627] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  358.354583][T18627] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.569533][T18627] usb 12-1: usb_control_msg returned -32
[  358.572671][T18627] usbtmc 12-1:16.0: can't read capabilities
[  358.806600][T19028] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  358.911285][  T960] usb 14-1: new high-speed USB device number 2 using dummy_hcd
[  359.060276][  T960] usb 14-1: Using ep0 maxpacket: 8
[  359.066784][  T960] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  359.071531][  T960] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  359.076074][  T960] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  359.080285][  T960] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  359.085672][  T960] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  359.089475][  T960] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.130665][T17622] usb 12-1: USB disconnect, device number 9
[  359.297706][  T960] usb 14-1: GET_CAPABILITIES returned 0
[  359.299553][  T960] usbtmc 14-1:16.0: can't read capabilities
[  359.504026][    C0] usbtmc 14-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  359.509702][T17622] usb 14-1: USB disconnect, device number 2
[  359.544700][T19056] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5448'.
[  359.692090][T17110] udevd[17110]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  359.834766][T19071] syzkaller1: entered promiscuous mode
[  359.837076][T19071] syzkaller1: entered allmulticast mode
[  360.203407][T19081] 9pnet: p9_errstr2errno: server reported unknown error 0x000
[  360.319613][T19095] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5457'.
[  360.509847][T17613] udevd[17613]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  360.518239][T17110] udevd[17110]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  360.567782][T19111] input: syz1 as /devices/virtual/input/input52
[  360.640468][T19114] syzkaller1: entered promiscuous mode
[  360.642904][T19114] syzkaller1: entered allmulticast mode
[  360.648178][T19114] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 43
[  360.960183][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout
[  361.071782][T19137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  361.347441][T19143] netlink: 'syz.8.5476': attribute type 5 has an invalid length.
[  361.355918][T19143] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.5476'.
[  361.381860][ T6021] usb 12-1: new high-speed USB device number 10 using dummy_hcd
[  361.528174][T19157] Bluetooth: MGMT ver 1.23
[  361.551034][ T6021] usb 12-1: Using ep0 maxpacket: 8
[  361.554836][ T6021] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  361.558658][ T6021] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  361.563473][ T6021] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  361.567309][ T6021] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  361.572548][ T6021] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  361.576135][ T6021] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.690231][ T5945] usb 13-1: new high-speed USB device number 5 using dummy_hcd
[  361.786940][ T6021] usb 12-1: GET_CAPABILITIES returned 0
[  361.789491][ T6021] usbtmc 12-1:16.0: can't read capabilities
[  361.842616][ T5945] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.851589][ T5945] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.857301][ T5945] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  361.867944][ T5945] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  361.873166][ T5945] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.898857][ T5945] usb 13-1: config 0 descriptor??
[  361.988579][   T29] usb 12-1: USB disconnect, device number 10
[  362.312712][ T5945] hid_parser_main: 5 callbacks suppressed
[  362.312724][ T5945] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  362.317209][ T5945] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  362.320179][ T5945] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  362.322657][ T5945] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  362.325103][ T5945] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  362.327601][ T5945] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  362.330043][ T5945] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  362.332634][ T5945] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  362.335580][ T5945] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  362.338176][ T5945] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  362.345514][ T5945] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  362.402803][   T29] usb 11-1: new high-speed USB device number 17 using dummy_hcd
[  362.561515][   T29] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  362.566105][   T29] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.571121][   T29] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.575226][   T29] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  362.582324][   T29] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  362.582644][ T5945] usb 13-1: USB disconnect, device number 5
[  362.586179][   T29] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  362.586200][   T29] usb 11-1: Manufacturer: syz
[  362.600933][   T29] usb 11-1: config 0 descriptor??
[  362.674729][T19179] netlink: 'syz.7.5493': attribute type 1 has an invalid length.
[  362.677469][T19179] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5493'.
[  362.681184][T19179] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5493'.
[  362.684162][T19179] netlink: 'syz.7.5493': attribute type 1 has an invalid length.
[  362.686696][T19179] netlink: 634 bytes leftover after parsing attributes in process `syz.7.5493'.
[  363.020284][   T29] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[  363.030338][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout
[  363.089577][T19194] Invalid argument reading file caps for ./file0
[  363.246953][T19210] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  363.255261][T19210] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  363.273545][T17574] usb 11-1: USB disconnect, device number 17
[  363.648386][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5520'.
[  363.989077][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5528'.
[  364.121826][   T40] kauditd_printk_skb: 1282 callbacks suppressed
[  364.121842][   T40] audit: type=1326 audit(1773608339.436:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.9.5531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  364.135239][   T40] audit: type=1326 audit(1773608339.436:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.9.5531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  364.145008][   T40] audit: type=1326 audit(1773608339.436:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.9.5531" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  364.154655][   T40] audit: type=1326 audit(1773608339.436:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.9.5531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  364.164481][   T40] audit: type=1326 audit(1773608339.436:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.9.5531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  364.177454][   T40] audit: type=1326 audit(1773608339.436:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.9.5531" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  364.185292][   T40] audit: type=1326 audit(1773608339.436:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.9.5531" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88f88 code=0x7ffc0000
[  364.192753][   T40] audit: type=1326 audit(1773608339.436:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.9.5531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  364.200664][   T40] audit: type=1326 audit(1773608339.436:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.9.5531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  364.207862][   T40] audit: type=1326 audit(1773608339.436:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.9.5531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  364.286851][T19274] netlink: 'syz.6.5534': attribute type 11 has an invalid length.
[  364.610300][ T6021] usb 11-1: new high-speed USB device number 18 using dummy_hcd
[  364.668211][T19293] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  364.670617][T19293] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  364.673892][T19293] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  364.677196][T19293] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  364.761432][ T6021] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  364.765296][ T6021] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.779930][ T6021] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.783235][ T6021] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  364.788283][ T6021] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  364.792473][ T6021] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  364.802383][ T6021] usb 11-1: Manufacturer: syz
[  364.809032][ T6021] usb 11-1: config 0 descriptor??
[  365.093873][T19316] ������: renamed from vlan0
[  365.148385][T19319] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  365.233974][ T6021] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[  365.859399][T19325] input: syz0 as /devices/virtual/input/input53
[  365.943163][T19327] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  365.945466][T19327] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  365.948149][T19327] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  365.950438][T19327] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  366.168488][ T5948] Bluetooth: hci2: unexpected event for opcode 0x0000
[  366.710192][T18627] usb 13-1: new high-speed USB device number 6 using dummy_hcd
[  366.860672][T18627] usb 13-1: Using ep0 maxpacket: 8
[  366.863723][T18627] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.867717][T18627] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  366.871323][T18627] usb 13-1: config 0 interface 0 has no altsetting 0
[  366.873648][T18627] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  366.876729][T18627] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.881108][T18627] usb 13-1: config 0 descriptor??
[  366.950344][   T50] usb 12-1: new high-speed USB device number 11 using dummy_hcd
[  366.969704][T19390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5586'.
[  367.102979][   T50] usb 12-1: too many configurations: 9, using maximum allowed: 8
[  367.107022][   T50] usb 12-1: config 64 has 1 interface, different from the descriptor's value: 9
[  367.119394][   T50] usb 12-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  367.124212][   T50] usb 12-1: config 64 interface 0 has no altsetting 0
[  367.128372][   T50] usb 12-1: config 64 has 1 interface, different from the descriptor's value: 9
[  367.133057][   T50] usb 12-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  367.137705][   T50] usb 12-1: config 64 interface 0 has no altsetting 0
[  367.141983][   T50] usb 12-1: config 64 has 1 interface, different from the descriptor's value: 9
[  367.145713][   T50] usb 12-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  367.151150][   T50] usb 12-1: config 64 interface 0 has no altsetting 0
[  367.155029][   T50] usb 12-1: config 64 has 1 interface, different from the descriptor's value: 9
[  367.158924][   T50] usb 12-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  367.165124][   T50] usb 12-1: config 64 interface 0 has no altsetting 0
[  367.168829][   T50] usb 12-1: config 64 has 1 interface, different from the descriptor's value: 9
[  367.172785][   T50] usb 12-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  367.177090][   T50] usb 12-1: config 64 interface 0 has no altsetting 0
[  367.181447][   T50] usb 12-1: config 64 has 1 interface, different from the descriptor's value: 9
[  367.186345][   T50] usb 12-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  367.194201][   T50] usb 12-1: config 64 interface 0 has no altsetting 0
[  367.198128][   T50] usb 12-1: config 64 has 1 interface, different from the descriptor's value: 9
[  367.202191][   T50] usb 12-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  367.206399][   T50] usb 12-1: config 64 interface 0 has no altsetting 0
[  367.210223][   T50] usb 12-1: config 64 has 1 interface, different from the descriptor's value: 9
[  367.213710][   T50] usb 12-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  367.218294][   T50] usb 12-1: config 64 interface 0 has no altsetting 0
[  367.223519][   T50] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  367.228100][   T50] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  367.231711][   T50] usb 12-1: Product: syz
[  367.233341][   T50] usb 12-1: Manufacturer: syz
[  367.234909][   T50] usb 12-1: SerialNumber: syz
[  367.253427][   T50] yurex 12-1:64.0: USB YUREX device now attached to Yurex #1
[  367.290601][T18627] mcp2221 0003:04D8:00DD.001E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[  367.311255][T17574] usb 11-1: USB disconnect, device number 18
[  367.376762][T19404] input: syz1 as /devices/virtual/input/input54
[  367.391226][T19406] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5593'.
[  367.446021][ T6021] usb 12-1: USB disconnect, device number 11
[  367.449977][ T6021] yurex 12-1:64.0: USB YUREX #1 now disconnected
[  367.492818][T18627] usb 13-1: USB disconnect, device number 6
[  367.660744][   T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  367.984481][T19418] siw: device registration error -23
[  367.990623][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout
[  367.990668][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout
[  367.991013][T19419] Bluetooth: hci0: command 0x0c1a tx timeout
[  368.043526][T19422] syzkaller1: entered promiscuous mode
[  368.045316][T19422] syzkaller1: entered allmulticast mode
[  368.132810][ T5947] block nbd8: Receive control failed (result -32)
[  368.141975][T19421] block nbd8: shutting down sockets
[  368.786484][T19445] siw: device registration error -23
[  368.847607][T19454] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5614'.
[  368.985083][T19463] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  369.318177][T19488] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.320879][T19488] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.391330][T19488] bridge_slave_0: left allmulticast mode
[  369.393482][T19488] bridge_slave_0: left promiscuous mode
[  369.396041][T19488] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.408398][T19488] bridge_slave_1: left allmulticast mode
[  369.411061][T19488] bridge_slave_1: left promiscuous mode
[  369.413493][T19488] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.423473][T19488] bond0: (slave bond_slave_0): Releasing backup interface
[  369.440487][T19488] bond0: (slave bond_slave_1): Releasing backup interface
[  369.456930][T19488] team0: Port device team_slave_0 removed
[  369.467782][T19488] team0: Port device team_slave_1 removed
[  369.472750][T19488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.481717][T19488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.492806][T19488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  369.500258][   T50] usb 12-1: new high-speed USB device number 12 using dummy_hcd
[  369.660380][   T40] kauditd_printk_skb: 119 callbacks suppressed
[  369.660398][   T40] audit: type=1326 audit(1773608344.976:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5637" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88f88 code=0x7ffc0000
[  369.675717][   T40] audit: type=1326 audit(1773608344.976:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5637" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88f88 code=0x7ffc0000
[  369.683308][   T50] usb 12-1: config index 0 descriptor too short (expected 45, got 36)
[  369.685985][   T50] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.687614][   T40] audit: type=1326 audit(1773608344.976:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5637" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88f88 code=0x7ffc0000
[  369.694526][   T50] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.700507][   T40] audit: type=1326 audit(1773608344.976:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  369.710906][   T50] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  369.712525][   T40] audit: type=1326 audit(1773608344.976:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5637" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88f88 code=0x7ffc0000
[  369.717732][   T50] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  369.717757][   T50] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.739247][   T50] usb 12-1: config 0 descriptor??
[  369.740896][   T40] audit: type=1326 audit(1773608344.976:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5637" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88f88 code=0x7ffc0000
[  369.748181][   T40] audit: type=1326 audit(1773608344.976:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  369.755246][   T40] audit: type=1326 audit(1773608344.976:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  369.762435][   T40] audit: type=1326 audit(1773608344.976:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5637" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f88f88 code=0x7ffc0000
[  369.769345][   T40] audit: type=1326 audit(1773608344.976:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19506 comm="syz.9.5637" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f6c code=0x7ffc0000
[  369.856421][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5643'.
[  370.070451][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout
[  370.152558][   T50] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd
[  370.167479][   T50] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  370.242176][ T5948] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  370.245094][ T5948] Bluetooth: hci2: Injecting HCI hardware error event
[  370.412475][T18627] usb 12-1: USB disconnect, device number 12
[  370.829745][T19532] syzkaller1: entered promiscuous mode
[  370.840130][T19532] syzkaller1: entered allmulticast mode
[  371.051468][T19546] overlayfs: failed lookup in lower (newroot/237, name='file0', err=-40): overlapping layers
[  371.124601][ T1185] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.227483][ T1185] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.273708][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.285741][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.289822][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.295634][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.301116][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.343216][ T1185] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.461688][ T1185] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.470919][T19566] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5663'.
[  371.530687][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5665'.
[  371.546199][T19556] chnl_net:caif_netlink_parms(): no params data found
[  371.816060][ T1185] bond0 (unregistering): left promiscuous mode
[  371.819249][ T1185] bond0 (unregistering): Released all slaves
[  371.820283][   T50] usb 13-1: new high-speed USB device number 7 using dummy_hcd
[  371.827164][ T1185] bond1 (unregistering): Released all slaves
[  371.840790][T19556] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.843234][T19556] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.845611][T19556] bridge_slave_0: entered allmulticast mode
[  371.851655][T19556] bridge_slave_0: entered promiscuous mode
[  371.861121][T19556] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.863571][T19556] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.866101][T19556] bridge_slave_1: entered allmulticast mode
[  371.868889][T19556] bridge_slave_1: entered promiscuous mode
[  371.886905][T19556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.892528][T19556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.914842][T19556] team0: Port device team_slave_0 added
[  371.918177][T19556] team0: Port device team_slave_1 added
[  371.939003][T19556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.946579][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.960773][T19556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.980660][T19556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.981517][   T50] usb 13-1: Using ep0 maxpacket: 32
[  371.982873][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.986693][   T50] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  371.987660][T19588] serio: Serial port ptm0
[  371.995909][T19556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.003893][   T50] usb 13-1: config 155 has 0 interfaces, different from the descriptor's value: 1
[  372.009030][   T50] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  372.012252][   T50] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.015507][   T50] usb 13-1: Product: syz
[  372.017503][   T50] usb 13-1: Manufacturer: syz
[  372.019520][   T50] usb 13-1: SerialNumber: syz
[  372.037723][T19556] hsr_slave_0: entered promiscuous mode
[  372.040318][T19556] hsr_slave_1: entered promiscuous mode
[  372.043265][T19556] debugfs: 'hsr0' already exists in 'hsr'
[  372.046036][T19556] Cannot create hsr debugfs directory
[  372.088994][T19598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5672'.
[  372.136956][ T1185] dummy0: left promiscuous mode
[  372.146991][ T1185] hsr_slave_0: left promiscuous mode
[  372.149698][ T1185] hsr_slave_1: left promiscuous mode
[  372.154864][ T1185] veth1_macvtap: left promiscuous mode
[  372.156570][ T1185] veth0_macvtap: left promiscuous mode
[  372.158248][ T1185] veth1_vlan: left promiscuous mode
[  372.159979][ T1185] veth0_vlan: left promiscuous mode
[  372.261138][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5674'.
[  372.262119][T17622] usb 13-1: USB disconnect, device number 7
[  372.936878][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5693'.
[  372.963422][ T5949] Bluetooth: hci2: hardware error 0x00
[  372.976947][T19663] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5694'.
[  373.085660][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5697'.
[  373.330924][T18627] usb 13-1: new high-speed USB device number 8 using dummy_hcd
[  373.353069][ T5947] Bluetooth: hci3: command tx timeout
[  373.480186][T18627] usb 13-1: Using ep0 maxpacket: 8
[  373.483550][T18627] usb 13-1: config index 0 descriptor too short (expected 301, got 45)
[  373.486531][T18627] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  373.489944][T18627] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  373.494962][T18627] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  373.498587][T18627] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  373.503412][T18627] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  373.506542][T18627] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.527260][   T54] kernel read not supported for file /input/event0 (pid: 54 comm: kworker/1:1)
[  373.717932][T18627] usb 13-1: usb_control_msg returned -32
[  373.720265][T18627] usbtmc 13-1:16.0: can't read capabilities
[  374.378420][T19556] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  374.394937][T19556] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  374.401549][T19556] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  374.408831][T19556] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  374.461891][T19556] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.483578][T19556] 8021q: adding VLAN 0 to HW filter on device team0
[  374.490768][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.493881][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.502399][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.504706][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.618841][T19556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.642672][T19556] veth0_vlan: entered promiscuous mode
[  374.647602][T19556] veth1_vlan: entered promiscuous mode
[  374.664423][T19556] veth0_macvtap: entered promiscuous mode
[  374.671805][T19556] veth1_macvtap: entered promiscuous mode
[  374.682829][T19556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.688917][T19556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.694604][   T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.697442][   T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.708525][ T1142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.713475][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.755633][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.759015][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.776660][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.779745][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.821299][T19756] loop2: detected capacity change from 0 to 7
[  374.827248][T19756] Dev loop2: unable to read RDB block 7
[  374.829105][T19756]  loop2: unable to read partition table
[  374.831154][T19756] loop2: partition table beyond EOD, truncated
[  374.833326][T19756] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  374.959703][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5706'.
[  375.030217][ T5949] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  375.430272][ T5949] Bluetooth: hci3: command tx timeout
[  376.094675][ T5945] usb 13-1: USB disconnect, device number 8
[  376.763763][T19857] input: syz1 as /devices/virtual/input/input56
[  376.766397][T19857] input: failed to attach handler leds to device input56, error: -6
[  376.951719][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5750'.
[  377.040289][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout
[  377.419442][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  377.425501][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  377.431716][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  377.435028][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  377.438295][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  377.510374][ T5948] Bluetooth: hci3: command tx timeout
[  377.609869][T19892] chnl_net:caif_netlink_parms(): no params data found
[  377.666004][   T12] bridge_slave_1: left allmulticast mode
[  377.668327][   T12] bridge_slave_1: left promiscuous mode
[  377.670995][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.675222][   T12] bridge_slave_0: left allmulticast mode
[  377.677319][   T12] bridge_slave_0: left promiscuous mode
[  377.679797][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.726842][   T12] gretap0 (unregistering): left promiscuous mode
[  377.807262][   T12] bond0 (unregistering): left promiscuous mode
[  377.809947][   T12] bond_slave_0: left promiscuous mode
[  377.812847][   T12] bond_slave_1: left promiscuous mode
[  377.820355][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.824108][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.827507][   T12] bond0 (unregistering): Released all slaves
[  377.832922][   T12] bond1 (unregistering): Released all slaves
[  377.883243][T19892] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.886515][T19892] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.889700][T19892] bridge_slave_0: entered allmulticast mode
[  377.895273][T19892] bridge_slave_0: entered promiscuous mode
[  377.899228][T19892] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.903502][T19892] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.906592][T19892] bridge_slave_1: entered allmulticast mode
[  377.909853][T19892] bridge_slave_1: entered promiscuous mode
[  377.931493][T19892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.936010][T19892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.954731][T19892] team0: Port device team_slave_0 added
[  377.958016][T19892] team0: Port device team_slave_1 added
[  377.972719][T19892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.975031][T19892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.983571][T19892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.001277][T19892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.003666][T19892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.012850][T19892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.038924][T19892] hsr_slave_0: entered promiscuous mode
[  378.047423][T19892] hsr_slave_1: entered promiscuous mode
[  378.051541][T19892] debugfs: 'hsr0' already exists in 'hsr'
[  378.053473][T19892] Cannot create hsr debugfs directory
[  378.193246][   T12] hsr_slave_0: left promiscuous mode
[  378.198423][   T12] hsr_slave_1: left promiscuous mode
[  378.200972][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.203866][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.321954][   T12] team0 (unregistering): Port device team_slave_1 removed
[  378.328791][   T12] team0 (unregistering): Port device team_slave_0 removed
[  379.510303][ T5949] Bluetooth: hci1: command tx timeout
[  379.590468][ T5949] Bluetooth: hci3: command tx timeout
[  380.013712][T19892] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  380.018771][T19892] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  380.024054][T19892] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  380.028734][T19892] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  380.081894][T19892] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.092668][T19892] 8021q: adding VLAN 0 to HW filter on device team0
[  380.098708][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.102043][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.113383][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.116118][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.142028][T19892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  380.241712][T19892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.372569][T19892] veth0_vlan: entered promiscuous mode
[  380.377765][T19892] veth1_vlan: entered promiscuous mode
[  380.392789][T19892] veth0_macvtap: entered promiscuous mode
[  380.397639][T19892] veth1_macvtap: entered promiscuous mode
[  380.408284][T19892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.415166][T19892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.423546][ T1185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.426420][ T1185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.431522][ T1185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.435226][ T1185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.494046][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.500323][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.515657][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.518731][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.685131][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5761'.
[  380.847447][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5775'.
[  380.865845][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5775'.
[  380.930892][T20045] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5776'.
[  380.972300][T20049] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5777'.
[  381.061324][T20057] netlink: 'syz.6.5780': attribute type 1 has an invalid length.
[  381.088387][T20057] bond2: entered promiscuous mode
[  381.092406][T20057] 8021q: adding VLAN 0 to HW filter on device bond2
[  381.117148][T20057] 8021q: adding VLAN 0 to HW filter on device bond2
[  381.119791][T20057] bond2: (slave gre1): The slave device specified does not support setting the MAC address
[  381.125159][T20057] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  381.133739][T20057] bond2: (slave gre1): making interface the new active one
[  381.136690][T20057] gre1: entered promiscuous mode
[  381.139160][T20057] bond2: (slave gre1): Enslaving as an active interface with an up link
[  381.480326][T18627] usb 11-1: new high-speed USB device number 19 using dummy_hcd
[  381.488378][T20079] netlink: 264 bytes leftover after parsing attributes in process `syz.8.5790'.
[  381.491683][T20079] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5790'.
[  381.494627][T20079] netlink: 264 bytes leftover after parsing attributes in process `syz.8.5790'.
[  381.590507][ T5949] Bluetooth: hci1: command tx timeout
[  381.591460][T20083] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  381.640619][T18627] usb 11-1: Using ep0 maxpacket: 8
[  381.645127][T18627] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  381.649244][T18627] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  381.654133][T18627] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  381.658495][T18627] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  381.665262][T18627] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  381.669273][T18627] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.885833][T18627] usb 11-1: GET_CAPABILITIES returned 0
[  381.887756][T18627] usbtmc 11-1:16.0: can't read capabilities
[  382.091679][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.094858][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.097800][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.100887][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.103906][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.106832][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.110049][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.113093][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.118237][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.121146][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.124148][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.127243][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.130217][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.133305][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.136489][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.139978][    C3] usbtmc 11-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  382.145341][T18627] usb 11-1: USB disconnect, device number 19
[  383.282549][ T1416] ieee802154 phy0 wpan0: encryption failed: -22
[  383.284933][ T1416] ieee802154 phy1 wpan1: encryption failed: -22
[  383.590143][T17574] usb 13-1: new high-speed USB device number 9 using dummy_hcd
[  383.671951][ T5949] Bluetooth: hci1: command tx timeout
[  383.760284][T17574] usb 13-1: Using ep0 maxpacket: 8
[  383.763377][T17574] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  383.766808][T17574] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  383.769979][T17574] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  383.773555][T17574] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  383.778286][T17574] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  383.783645][T17574] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.003480][T17574] usb 13-1: GET_CAPABILITIES returned 0
[  384.005369][T17574] usbtmc 13-1:16.0: can't read capabilities
[  384.773671][T17581] usb 13-1: USB disconnect, device number 9
[  384.881420][T20258] syzkaller1: entered promiscuous mode
[  384.883201][T20258] syzkaller1: entered allmulticast mode
[  385.010164][   T40] kauditd_printk_skb: 566 callbacks suppressed
[  385.010182][   T40] audit: type=1800 audit(1773608360.316:3889): pid=20266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5866" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  385.096888][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5870'.
[  385.290183][T17581] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  385.294785][T20291] syzkaller1: entered promiscuous mode
[  385.296950][T20291] syzkaller1: entered allmulticast mode
[  385.450157][T17581] usb 9-1: Using ep0 maxpacket: 8
[  385.454670][T17581] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  385.459518][T17581] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  385.466639][T17581] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  385.466790][T20300] loop7: detected capacity change from 0 to 7
[  385.470661][T17581] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  385.475247][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  385.478728][T17581] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  385.483220][    C2] buffer_io_error: 10 callbacks suppressed
[  385.483235][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[  385.486793][T17581] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.489503][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  385.499163][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  385.502809][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  385.507597][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[  385.512497][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  385.516691][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  385.520483][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  385.525456][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[  385.532193][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  385.538530][    C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  385.542967][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  385.546643][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  385.550830][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[  385.554931][T17110] ldm_validate_partition_table(): Disk read failed.
[  385.558079][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  385.561848][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[  385.566181][    C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  385.570963][    C2] Buffer I/O error on dev loop7, logical block 0, async page read
[  385.574602][    C3] Buffer I/O error on dev loop7, logical block 0, async page read
[  385.578719][T17110] Dev loop7: unable to read RDB block 0
[  385.583345][T17110]  loop7: unable to read partition table
[  385.585502][T17110] loop7: partition table beyond EOD, truncated
[  385.588966][T20300] ldm_validate_partition_table(): Disk read failed.
[  385.596318][T20300] Dev loop7: unable to read RDB block 0
[  385.599328][T20300]  loop7: unable to read partition table
[  385.602168][T20300] loop7: partition table beyond EOD, truncated
[  385.612622][T20300] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  385.712450][T17581] usb 9-1: GET_CAPABILITIES returned 0
[  385.714302][T17581] usbtmc 9-1:16.0: can't read capabilities
[  385.760200][ T5949] Bluetooth: hci1: command tx timeout
[  385.883212][T20324] syz.0.5887 (20324) used greatest stack depth: 19088 bytes left
[  385.920599][    C0] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  385.928809][ T6021] usb 9-1: USB disconnect, device number 6
[  386.471648][T20347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5899'.
[  386.476252][T20347] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5899'.
[  386.516534][T20353] netlink: 'syz.8.5901': attribute type 3 has an invalid length.
[  386.519054][T20353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5901'.
[  386.773479][T20374] batadv_slave_1: entered promiscuous mode
[  386.777003][T20374] batadv_slave_1: left promiscuous mode
[  386.990848][   T24] usb 11-1: new high-speed USB device number 20 using dummy_hcd
[  387.150222][   T24] usb 11-1: Using ep0 maxpacket: 8
[  387.161301][   T24] usb 11-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  387.164833][   T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.167484][   T24] usb 11-1: Product: syz
[  387.168879][   T24] usb 11-1: Manufacturer: syz
[  387.170595][   T24] usb 11-1: SerialNumber: syz
[  387.173744][   T24] usb 11-1: config 0 descriptor??
[  387.301655][T20388] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  387.384203][   T24] usb 11-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  387.389981][   T24] dvb_usb_rtl28xxu 11-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  387.394446][   T24] usb 11-1: USB disconnect, device number 20
[  387.686225][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.768380][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.838575][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  387.847774][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  387.858625][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  387.859649][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.866956][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  387.869902][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  387.926547][T20410] syzkaller1: entered promiscuous mode
[  387.928937][T20410] syzkaller1: entered allmulticast mode
[  387.969327][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.053083][T20403] chnl_net:caif_netlink_parms(): no params data found
[  388.109327][T20403] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.111942][T20403] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.114302][T20403] bridge_slave_0: entered allmulticast mode
[  388.117047][T20403] bridge_slave_0: entered promiscuous mode
[  388.122146][T20403] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.124564][T20403] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.126985][T20403] bridge_slave_1: entered allmulticast mode
[  388.129783][T20403] bridge_slave_1: entered promiscuous mode
[  388.149051][T20403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.175636][T20403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.213693][T20403] team0: Port device team_slave_0 added
[  388.217738][T20403] team0: Port device team_slave_1 added
[  388.225542][   T13] bridge_slave_1: left allmulticast mode
[  388.227492][   T13] bridge_slave_1: left promiscuous mode
[  388.229379][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.236231][   T13] bridge_slave_0: left allmulticast mode
[  388.238741][   T13] bridge_slave_0: left promiscuous mode
[  388.241527][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.352040][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5938'.
[  388.415191][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.419534][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.425391][   T13] bond0 (unregistering): Released all slaves
[  388.455465][T20403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.457899][T20403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.469393][T20403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  388.476655][T20403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  388.479967][T20403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.491546][T20403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.521365][T20403] hsr_slave_0: entered promiscuous mode
[  388.524069][T20403] hsr_slave_1: entered promiscuous mode
[  388.526352][T20403] debugfs: 'hsr0' already exists in 'hsr'
[  388.528443][T20403] Cannot create hsr debugfs directory
[  388.850147][ T5945] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  388.850347][T20465] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5945'.
[  388.930997][   T13] hsr_slave_0: left promiscuous mode
[  388.934036][   T13] hsr_slave_1: left promiscuous mode
[  388.936998][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.943505][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  388.947895][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  388.951690][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  388.969398][   T13] veth1_macvtap: left promiscuous mode
[  388.971473][   T13] veth0_macvtap: left promiscuous mode
[  388.973467][   T13] veth1_vlan: left promiscuous mode
[  388.975324][   T13] veth0_vlan: left promiscuous mode
[  389.000224][ T5945] usb 5-1: Using ep0 maxpacket: 8
[  389.003637][ T5945] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  389.008280][ T5945] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  389.020152][ T5945] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  389.029013][ T5945] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  389.033657][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.047526][ T5945] usbtmc 5-1:16.0: bulk endpoints not found
[  389.130258][T18627] usb 11-1: new high-speed USB device number 21 using dummy_hcd
[  389.172385][   T13] team0 (unregistering): Port device team_slave_1 removed
[  389.181112][   T13] team0 (unregistering): Port device team_slave_0 removed
[  389.314719][T18627] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  389.320004][T18627] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  389.326512][T18627] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  389.341009][T18627] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.345758][T20470] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  389.352241][T18627] usb 11-1: Quirk or no altset; falling back to MIDI 1.0
[  389.375277][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5950'.
[  389.379334][T20480] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5950'.
[  389.567188][T11476] usb 11-1: USB disconnect, device number 21
[  389.772486][ T6021] usb 13-1: new high-speed USB device number 10 using dummy_hcd
[  389.920265][ T5948] Bluetooth: hci1: command tx timeout
[  389.940599][ T6021] usb 13-1: Using ep0 maxpacket: 8
[  389.944670][ T6021] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.948992][ T6021] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.953159][ T6021] usb 13-1: config 0 interface 0 has no altsetting 0
[  389.955460][ T6021] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  389.959822][ T6021] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.965543][ T6021] usb 13-1: config 0 descriptor??
[  390.329300][T20403] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  390.342715][T20403] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  390.347820][T20403] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  390.352865][T20403] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  390.376052][ T6021] hid_parser_main: 12 callbacks suppressed
[  390.376065][ T6021] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0
[  390.384281][ T6021] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0
[  390.386700][ T6021] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0
[  390.389043][ T6021] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0
[  390.391727][ T6021] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0
[  390.394627][ T6021] mcp2221 0003:04D8:00DD.0020: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[  390.433411][T20403] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.443702][T20403] 8021q: adding VLAN 0 to HW filter on device team0
[  390.448953][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.451356][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.458259][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.461737][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.489977][T20403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  390.493563][T20403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  390.577507][   T29] usb 13-1: USB disconnect, device number 10
[  390.609671][T20403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.641508][T20403] veth0_vlan: entered promiscuous mode
[  390.647585][T20403] veth1_vlan: entered promiscuous mode
[  390.667215][T20403] veth0_macvtap: entered promiscuous mode
[  390.676547][T20403] veth1_macvtap: entered promiscuous mode
[  390.686899][T20403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.690564][T20568] input: syz0 as /devices/virtual/input/input58
[  390.696445][T20403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.705688][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.709458][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.717844][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.725361][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.779344][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.783120][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.803848][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.806419][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.871663][T20581] pim6reg: entered allmulticast mode
[  390.884331][T20581] pim6reg: left allmulticast mode
[  391.114116][T20598] netlink: 'syz.6.5967': attribute type 2 has an invalid length.
[  391.223274][T20618] pim6reg1: entered promiscuous mode
[  391.225678][T20618] pim6reg1: entered allmulticast mode
[  391.463520][T20641] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  391.620667][   T29] usb 5-1: USB disconnect, device number 3
[  391.706143][ T5949] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  391.711363][ T5949] CPU: 2 UID: 0 PID: 5949 Comm: kworker/u33:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  391.711394][ T5949] Tainted: [L]=SOFTLOCKUP
[  391.711401][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  391.711414][ T5949] Workqueue: hci3 hci_rx_work
[  391.711441][ T5949] Call Trace:
[  391.711447][ T5949]  <TASK>
[  391.711454][ T5949]  dump_stack_lvl+0x100/0x190
[  391.711485][ T5949]  sysfs_warn_dup.cold+0x1c/0x28
[  391.711512][ T5949]  sysfs_create_dir_ns+0x24b/0x2b0
[  391.711539][ T5949]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  391.711581][ T5949]  ? find_held_lock+0x2b/0x80
[  391.711601][ T5949]  ? kobject_add_internal+0x25f/0x930
[  391.711631][ T5949]  ? kobject_add_internal+0x25f/0x930
[  391.711664][ T5949]  ? do_raw_spin_unlock+0x145/0x1e0
[  391.711694][ T5949]  kobject_add_internal+0x2c8/0x930
[  391.711729][ T5949]  kobject_add+0x16a/0x1e0
[  391.711747][ T5949]  ? __pfx_kobject_add+0x10/0x10
[  391.711763][ T5949]  ? class_to_subsys+0x10f/0x150
[  391.711790][ T5949]  ? kobject_put+0xb9/0x640
[  391.711816][ T5949]  ? _raw_spin_unlock+0x28/0x50
[  391.711845][ T5949]  device_add+0x294/0x1950
[  391.711874][ T5949]  ? __pfx_dev_set_name+0x10/0x10
[  391.711900][ T5949]  ? __pfx_device_add+0x10/0x10
[  391.711922][ T5949]  ? mgmt_send_event_skb+0x2fb/0x460
[  391.711954][ T5949]  hci_conn_add_sysfs+0x1a3/0x260
[  391.711984][ T5949]  le_conn_complete_evt+0x11cb/0x1f40
[  391.712013][ T5949]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  391.712043][ T5949]  hci_le_conn_complete_evt+0x23c/0x3a0
[  391.712068][ T5949]  ? skb_pull_data+0x15f/0x1e0
[  391.712092][ T5949]  hci_le_meta_evt+0x34a/0x5f0
[  391.712116][ T5949]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  391.712143][ T5949]  hci_event_packet+0x682/0x11c0
[  391.712166][ T5949]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  391.712191][ T5949]  ? __pfx_hci_event_packet+0x10/0x10
[  391.712217][ T5949]  ? kcov_remote_start+0x374/0x660
[  391.712236][ T5949]  ? lockdep_hardirqs_on+0x78/0x100
[  391.712268][ T5949]  hci_rx_work+0x451/0xfc0
[  391.712296][ T5949]  process_one_work+0xa23/0x19a0
[  391.712334][ T5949]  ? __pfx_process_one_work+0x10/0x10
[  391.712368][ T5949]  ? __pfx_hci_rx_work+0x10/0x10
[  391.712393][ T5949]  worker_thread+0x5ef/0xe50
[  391.712430][ T5949]  ? kthread+0x13a/0x450
[  391.712454][ T5949]  ? __pfx_worker_thread+0x10/0x10
[  391.712477][ T5949]  kthread+0x370/0x450
[  391.712499][ T5949]  ? __pfx_kthread+0x10/0x10
[  391.712524][ T5949]  ret_from_fork+0x754/0xd80
[  391.712552][ T5949]  ? __pfx_ret_from_fork+0x10/0x10
[  391.712582][ T5949]  ? __switch_to+0x7b4/0x1120
[  391.712603][ T5949]  ? __pfx_kthread+0x10/0x10
[  391.712628][ T5949]  ret_from_fork_asm+0x1a/0x30
[  391.712662][ T5949]  </TASK>
[  391.712736][ T5949] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  391.820137][ T5949] Bluetooth: hci3: failed to register connection device
[  391.901246][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5987'.
[  391.910195][T20669] serio: Serial port ptm0
[  391.990161][ T5949] Bluetooth: hci1: command tx timeout
[  392.620729][T20692] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5994'.
[  392.651737][T20695] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5996'.
[  393.190264][ T5949] Bluetooth: hci0: command 0x0c1a tx timeout
[  393.190416][ T5948] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  394.070225][ T5948] Bluetooth: hci1: command tx timeout
[  394.356388][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6006'.
[  394.360799][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6006'.
[  394.454539][T20729] loop2: detected capacity change from 0 to 7
[  394.460960][T17110] Dev loop2: unable to read RDB block 7
[  394.462856][T17110]  loop2: unable to read partition table
[  394.464790][T17110] loop2: partition table beyond EOD, truncated
[  394.469658][T20729] Dev loop2: unable to read RDB block 7
[  394.471897][T20729]  loop2: unable to read partition table
[  394.476769][T20729] loop2: partition table beyond EOD, truncated
[  394.484082][T20729] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  394.715128][T20752] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  395.129892][T20791] Invalid argument reading file caps for ./file0
[  396.077946][T20848] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6062'.
[  396.150227][ T5949] Bluetooth: hci1: command tx timeout
[  396.420253][ T5985] usb 11-1: new high-speed USB device number 22 using dummy_hcd
[  396.580442][ T5985] usb 11-1: Using ep0 maxpacket: 32
[  396.583510][ T5985] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  396.586996][ T5985] usb 11-1: config 155 has 0 interfaces, different from the descriptor's value: 1
[  396.593045][ T5985] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  396.596312][ T5985] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.598924][ T5985] usb 11-1: Product: syz
[  396.600896][ T5985] usb 11-1: Manufacturer: syz
[  396.602586][ T5985] usb 11-1: SerialNumber: syz
[  396.813039][ T5985] usb 11-1: USB disconnect, device number 22
[  397.378629][T20918] input: syz1 as /devices/virtual/input/input59
[  397.681192][T20926] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  397.969651][   T50] kernel write not supported for file /vbi7 (pid: 50 comm: kworker/2:1)
[  397.992838][ T5949] Bluetooth: hci3: command 0x0406 tx timeout
[  398.405170][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6116'.
[  398.414301][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6116'.
[  398.674095][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6121'.
[  398.688205][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6121'.
[  398.770259][  T828] usb 11-1: new high-speed USB device number 23 using dummy_hcd
[  398.948178][  T828] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  398.952202][  T828] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  398.955858][  T828] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  398.963020][  T828] usb 11-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  398.966392][  T828] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.969011][  T828] usb 11-1: Product: syz
[  398.970718][  T828] usb 11-1: Manufacturer: syz
[  398.972289][  T828] usb 11-1: SerialNumber: syz
[  398.976139][  T828] usb 11-1: config 0 descriptor??
[  399.040768][T20995] netlink: 264 bytes leftover after parsing attributes in process `syz.0.6126'.
[  399.044743][T20995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6126'.
[  399.048494][T20995] netlink: 264 bytes leftover after parsing attributes in process `syz.0.6126'.
[  399.184681][  T828] adutux 11-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  399.195187][T21001] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6128'.
[  401.422675][ T5985] libceph: connect (1)[c::]:6789 error -101
[  401.425264][ T5985] libceph: mon0 (1)[c::]:6789 connect error
[  401.443314][ T5985] usb 11-1: USB disconnect, device number 23
[  401.525839][T21084] ceph: No mds server is up or the cluster is laggy
[  402.631720][T21152] loop7: detected capacity change from 0 to 7
[  402.644506][    C1] blk_print_req_error: 26 callbacks suppressed
[  402.644525][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.650334][    C1] buffer_io_error: 25 callbacks suppressed
[  402.650345][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.657775][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.661690][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.665711][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.670047][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.674089][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.678390][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.682323][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.685945][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.688933][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.693336][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.698083][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.703177][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.706969][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.709897][T17110] ldm_validate_partition_table(): Disk read failed.
[  402.713491][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.717402][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.721242][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.724523][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.727513][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.730409][T17110] Dev loop7: unable to read RDB block 0
[  402.732965][T17110]  loop7: unable to read partition table
[  402.734933][T17110] loop7: partition table beyond EOD, truncated
[  402.755162][T21152] ldm_validate_partition_table(): Disk read failed.
[  402.763067][T21152] Dev loop7: unable to read RDB block 0
[  402.765541][T21152]  loop7: unable to read partition table
[  402.767628][T21152] loop7: partition table beyond EOD, truncated
[  402.769780][T21152] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  403.949984][T21251] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  404.840270][  T960] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  404.990454][  T960] usb 5-1: Using ep0 maxpacket: 16
[  404.994236][  T960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  404.998455][  T960] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  405.004170][  T960] usb 5-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7
[  405.008125][  T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.011654][  T960] usb 5-1: Product: syz
[  405.013468][  T960] usb 5-1: Manufacturer: syz
[  405.015504][  T960] usb 5-1: SerialNumber: syz
[  405.019416][  T960] usb 5-1: config 0 descriptor??
[  405.129918][T21298] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6246'.
[  405.430578][T21284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.434055][T21284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.442628][  T960] usb 5-1: USB disconnect, device number 4
[  405.480263][T17575] usb 13-1: new high-speed USB device number 11 using dummy_hcd
[  405.632309][T17575] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  405.637243][T17575] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  405.641655][T17575] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  405.645764][T17575] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.652607][T21304] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  405.658578][T17575] usb 13-1: Quirk or no altset; falling back to MIDI 1.0
[  405.865833][  T841] usb 13-1: USB disconnect, device number 11
[  406.310683][  T960] usb 11-1: new high-speed USB device number 24 using dummy_hcd
[  406.340726][T21334] hugetlbfs: syz.3.6264 (21334): Using mlock ulimits for SHM_HUGETLB is obsolete
[  406.466534][  T960] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  406.471889][  T960] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  406.476761][  T960] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  406.481522][  T960] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  406.487939][  T960] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  406.492334][  T960] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.501168][  T960] usb 11-1: config 0 descriptor??
[  406.504057][T21316] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  406.918630][  T960] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  406.923935][  T960] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  406.926693][  T960] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  406.929467][  T960] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  406.935173][  T960] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  406.938462][  T960] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  406.941962][  T960] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  406.944804][  T960] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  406.947430][  T960] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  406.950060][  T960] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  406.961355][  T960] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  406.966402][T21373] netlink: 'syz.8.6283': attribute type 1 has an invalid length.
[  406.970011][T21373] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6283'.
[  407.002115][T21375] syzkaller1: entered promiscuous mode
[  407.006764][T21375] syzkaller1: entered allmulticast mode
[  407.140890][T21380] syzkaller1: entered promiscuous mode
[  407.143120][T21380] syzkaller1: entered allmulticast mode
[  407.182194][T11476] usb 11-1: USB disconnect, device number 24
[  407.670338][  T841] usb 13-1: new high-speed USB device number 12 using dummy_hcd
[  407.718711][T21396] netlink: 51 bytes leftover after parsing attributes in process `syz.6.6293'.
[  407.831395][  T841] usb 13-1: Using ep0 maxpacket: 16
[  407.835352][  T841] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.839395][  T841] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.843442][  T841] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  407.848952][  T841] usb 13-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  407.853182][  T841] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.863415][  T841] usb 13-1: config 0 descriptor??
[  408.090637][   T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  408.095982][T21413] syzkaller1: entered promiscuous mode
[  408.098257][T21413] syzkaller1: entered allmulticast mode
[  408.275112][  T841] input: HID 05ac:8241 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:05AC:8241.0022/input/input60
[  408.283082][T21421] macvtap0: entered promiscuous mode
[  408.286415][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6304'.
[  408.294341][T21421] veth0_macvtap: left promiscuous mode
[  408.347706][T21421] macvtap0 (unregistering): left promiscuous mode
[  408.377270][  T841] appleir 0003:05AC:8241.0022: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0
[  408.482790][   T34] usb 13-1: USB disconnect, device number 12
[  409.456333][T21459] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6321'.
[  409.461074][T21459] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6321'.
[  410.055515][T21514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6345'.
[  410.365080][T21541] 9pnet: p9_errstr2errno: server reported unknown error 
[  411.928650][   T92] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2
[  411.942875][   T92] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  411.970281][   T13] Bluetooth: hci4: Frame reassembly failed (-84)
[  412.306419][T21638] syzkaller1: entered promiscuous mode
[  412.308928][T21638] syzkaller1: entered allmulticast mode
[  412.446559][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6409'.
[  412.461570][T21658] ipvlan2: entered promiscuous mode
[  412.463211][T21658] ipvlan2: entered allmulticast mode
[  412.465078][T21658] macvlan0: entered allmulticast mode
[  412.467513][T21658] veth1_vlan: entered allmulticast mode
[  412.482315][T21658] ipvlan3: entered promiscuous mode
[  412.484018][T21658] ipvlan3: entered allmulticast mode
[  412.535362][T21667] tipc: Started in network mode
[  412.537656][T21667] tipc: Node identity ac14140f, cluster identity 4711
[  412.541278][T21667] tipc: New replicast peer: 255.255.255.255
[  412.544117][T21667] tipc: Enabled bearer <udp:syz2>, priority 10
[  412.717016][T21684] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  412.721950][T21684] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  412.726104][T21684] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  412.775333][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6423'.
[  412.780491][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6423'.
[  412.784511][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6423'.
[  413.359332][T21736] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  413.508975][T21747] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  413.660243][  T960] tipc: Node number set to 2886997007
[  413.735876][T21764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6459'.
[  413.739700][T21764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6459'.
[  413.993040][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  414.140327][   T50] usb 11-1: new high-speed USB device number 25 using dummy_hcd
[  414.190967][T21787] Bluetooth: hci0: load_link_keys: too big key_count value 53767
[  414.313368][   T50] usb 11-1: Using ep0 maxpacket: 8
[  414.317354][   T50] usb 11-1: config index 0 descriptor too short (expected 74, got 45)
[  414.321811][   T50] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  414.326329][   T50] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  414.330823][   T50] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  414.336305][   T50] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  414.339918][   T50] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  414.345318][   T50] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  414.348924][   T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.561211][   T50] usb 11-1: usb_control_msg returned -32
[  414.563825][   T50] usbtmc 11-1:16.0: can't read capabilities
[  414.920869][T21794] usbtmc 11-1:16.0: stb usb_control_msg returned -32
[  414.925249][  T960] usb 11-1: USB disconnect, device number 25
[  415.170273][T17622] usb 13-1: new high-speed USB device number 13 using dummy_hcd
[  415.254826][T21804] input: syz0 as /devices/virtual/input/input62
[  415.320657][T17622] usb 13-1: Using ep0 maxpacket: 8
[  415.323914][T17622] usb 13-1: config 0 has an invalid interface number: 55 but max is 0
[  415.326880][T17622] usb 13-1: config 0 has no interface number 0
[  415.329655][T17622] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  415.335581][T17622] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  415.340944][T17622] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  415.345795][T17622] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  415.351956][T17622] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  415.356081][T17622] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.361872][T17622] usb 13-1: config 0 descriptor??
[  415.375901][T17622] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  415.570497][T17622] usb 13-1: USB disconnect, device number 13
[  415.575841][T17622] ldusb 13-1:0.55: LD USB Device #0 now disconnected
[  415.589790][T21817] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6482'.
[  415.624023][T21821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6484'.
[  415.627694][T21821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6484'.
[  415.692404][T21827] sch_tbf: peakrate 4371928080232180342 is lower than or equals to rate 17839573476630410903 !
[  415.825663][T21835] vivid-003: disconnect
[  415.828447][T21834] vivid-003: reconnect
[  415.868689][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6492'.
[  415.875235][T21840] netlink: 'syz.6.6492': attribute type 1 has an invalid length.
[  416.233934][T21865] syzkaller1: entered promiscuous mode
[  416.235941][T21865] syzkaller1: entered allmulticast mode
[  416.287831][   T40] audit: type=1800 audit(1773608391.596:3890): pid=21868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6504" name="nullb0" dev="devtmpfs" ino=4538 res=0 errno=0
[  417.082301][T21921] netlink: 'syz.3.6525': attribute type 1 has an invalid length.
[  417.092941][T21921] netlink: 'syz.3.6525': attribute type 2 has an invalid length.
[  418.299452][   T40] audit: type=1800 audit(1773608393.606:3891): pid=22010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6564" name="nullb0" dev="devtmpfs" ino=4538 res=0 errno=0
[  418.347926][T22014] input: syz0 as /devices/virtual/input/input63
[  418.594390][   T40] audit: type=1326 audit(1773608393.906:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22035 comm="syz.0.6573" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x0
[  419.904694][T17009] Process accounting resumed
[  419.927088][T22097] Process accounting resumed
[  420.000240][ T5948] Bluetooth: hci1: command tx timeout
[  420.320176][T18627] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  420.454260][T22133] can0: slcan on ttyS3.
[  420.490153][T18627] usb 5-1: Using ep0 maxpacket: 32
[  420.493596][T18627] usb 5-1: config 0 has no interfaces?
[  420.497168][T18627] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  420.500344][T18627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.502875][T18627] usb 5-1: Product: syz
[  420.504205][T18627] usb 5-1: Manufacturer: syz
[  420.505906][T18627] usb 5-1: SerialNumber: syz
[  420.511786][T18627] usb 5-1: config 0 descriptor??
[  420.530534][T22133] can0 (unregistered): slcan off ttyS3.
[  420.550324][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout
[  420.553106][T17622] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  420.555990][T17622] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  420.719764][T18627] usb 5-1: USB disconnect, device number 5
[  421.230256][   T54] usb 11-1: new high-speed USB device number 26 using dummy_hcd
[  421.381927][   T54] usb 11-1: Using ep0 maxpacket: 8
[  421.386152][   T54] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  421.391511][   T54] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  421.396320][   T54] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  421.400766][   T54] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  421.406348][   T54] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  421.412014][   T54] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.496350][   T39] kernel read not supported for file /swradio0 (pid: 39 comm: kworker/3:1)
[  421.540254][T18627] usb 13-1: new high-speed USB device number 14 using dummy_hcd
[  421.633098][   T54] usb 11-1: GET_CAPABILITIES returned 0
[  421.634978][   T54] usbtmc 11-1:16.0: can't read capabilities
[  421.730203][T18627] usb 13-1: Using ep0 maxpacket: 8
[  421.741787][T18627] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.745620][T18627] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.749045][T18627] usb 13-1: config 0 interface 0 has no altsetting 0
[  421.751462][T18627] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  421.754537][T18627] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.762292][T18627] usb 13-1: config 0 descriptor??
[  421.839271][   T39] usb 11-1: USB disconnect, device number 26
[  422.174489][T18627] hid_parser_main: 5 callbacks suppressed
[  422.174503][T18627] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0
[  422.181580][T18627] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0
[  422.183919][T18627] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0
[  422.186225][T18627] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0
[  422.189436][T18627] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0
[  422.192241][T18627] mcp2221 0003:04D8:00DD.0023: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0
[  422.381169][T22154] i2c i2c-2: unsupported multi-msg i2c transaction
[  422.387207][T11476] usb 13-1: USB disconnect, device number 14
[  422.630217][ T5948] Bluetooth: hci3: command 0x0406 tx timeout
[  422.632347][T17622] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  422.634843][T17622] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  422.644678][T22210] __nla_validate_parse: 2 callbacks suppressed
[  422.644690][T22210] netlink: 41 bytes leftover after parsing attributes in process `syz.6.6641'.
[  422.650053][T22210] netlink: 140 bytes leftover after parsing attributes in process `syz.6.6641'.
[  422.653133][T22210] netlink: 41 bytes leftover after parsing attributes in process `syz.6.6641'.
[  423.082024][T22231] binder: 22229:22231 ioctl c0306201 80000040 returned -14
[  423.384971][   T40] audit: type=1326 audit(1773608398.696:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.6658" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7f88 code=0x7ffc0000
[  423.394382][   T40] audit: type=1326 audit(1773608398.696:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.6658" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7f88 code=0x7ffc0000
[  423.406725][   T40] audit: type=1326 audit(1773608398.696:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.6658" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000
[  423.417172][   T40] audit: type=1326 audit(1773608398.696:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.6658" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7f88 code=0x7ffc0000
[  423.426891][   T40] audit: type=1326 audit(1773608398.696:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.6658" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7f88 code=0x7ffc0000
[  423.437006][   T40] audit: type=1326 audit(1773608398.696:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.6658" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7f88 code=0x7ffc0000
[  423.447214][   T40] audit: type=1326 audit(1773608398.696:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.6658" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000
[  423.456716][   T40] audit: type=1326 audit(1773608398.696:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.6658" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7f88 code=0x7ffc0000
[  423.468004][   T40] audit: type=1326 audit(1773608398.696:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.6658" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7f88 code=0x7ffc0000
[  423.477387][   T40] audit: type=1326 audit(1773608398.696:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.6658" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff7f88 code=0x7ffc0000
[  423.539051][T22251] erspan0: entered promiscuous mode
[  423.544859][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6659'.
[  424.207453][T18627] Process accounting resumed
[  424.218293][T22271] Process accounting resumed
[  424.633807][T18627] kernel read not supported for file /swradio0 (pid: 18627 comm: kworker/3:6)
[  424.710300][T17622] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  424.713381][T17622] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  424.720160][    C3] ------------[ cut here ]------------
[  424.722527][    C3] workqueue: cannot queue hci_cmd_timeout on wq hci1
[  424.725376][    C3] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#3: syz.0.6688/22312
[  424.729186][    C3] Modules linked in:
[  424.731291][    C3] CPU: 3 UID: 0 PID: 22312 Comm: syz.0.6688 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  424.735603][    C3] Tainted: [L]=SOFTLOCKUP
[  424.737236][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  424.741588][    C3] RIP: 0010:__queue_work+0xd0c/0x1150
[  424.743492][    C3] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d e8 65 0d 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 05 c0 38 00 90 0f 0b 90 e9 b2 f5
[  424.751074][    C3] RSP: 0018:ffffc900005e8be8 EFLAGS: 00010046
[  424.753670][    C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100e9fd951
[  424.756855][    C3] RDX: ffff888076e32978 RSI: ffffffff8a811250 RDI: ffffffff90dcbe30
[  424.760046][    C3] RBP: ffff888074feca70 R08: 0000000000000005 R09: 0000000000000000
[  424.763399][    C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888076e32800
[  424.766733][    C3] R13: 1ffff920000bd18f R14: ffffffff81cf6960 R15: 0000000000000001
[  424.770072][    C3] FS:  0000000000000000(0000) GS:ffff88809744a000(0063) knlGS:0000000056954480
[  424.773948][    C3] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  424.776770][    C3] CR2: 000000003321dff8 CR3: 0000000053fd2000 CR4: 0000000000352ef0
[  424.779768][    C3] Call Trace:
[  424.781204][    C3]  <IRQ>
[  424.782261][    C3]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  424.784706][    C3]  call_timer_fn+0x19a/0x670
[  424.786774][    C3]  ? __pfx_call_timer_fn+0x10/0x10
[  424.788982][    C3]  ? debug_object_activate+0x331/0x490
[  424.791322][    C3]  ? __run_timers+0x560/0xb30
[  424.793216][    C3]  ? __run_timers+0x560/0xb30
[  424.795048][    C3]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  424.797563][    C3]  __run_timers+0x570/0xb30
[  424.799545][    C3]  ? __pfx___run_timers+0x10/0x10
[  424.801434][    C3]  ? _raw_spin_lock_irq+0x45/0x50
[  424.803737][    C3]  run_timer_base+0x114/0x190
[  424.805778][    C3]  ? __pfx_run_timer_base+0x10/0x10
[  424.808004][    C3]  run_timer_softirq+0x1a/0x50
[  424.809570][    C3]  handle_softirqs+0x1eb/0x9e0
[  424.811718][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  424.814052][    C3]  __irq_exit_rcu+0xef/0x150
[  424.816066][    C3]  irq_exit_rcu+0x9/0x30
[  424.817855][    C3]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  424.820332][    C3]  </IRQ>
[  424.821615][    C3]  <TASK>
[  424.822904][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  424.825469][    C3] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  424.827958][    C3] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 21 54 f6 48 89 df e8 62 71 54 f6 e8 0d d7 7f f6 fb bf 01 00 00 00 <e8> a2 95 44 f6 65 8b 05 cb 1e 7d 08 85 c0 74 06 5b c3 cc cc cc cc
[  424.836049][    C3] RSP: 0018:ffffc90003ef7e98 EFLAGS: 00000202
[  424.838652][    C3] RAX: 0000000000000497 RBX: ffff8880226d8940 RCX: 0000000000000000
[  424.842011][    C3] RDX: 0000000000000000 RSI: ffffffff8de7f663 RDI: 0000000000000001
[  424.844973][    C3] RBP: ffff8880256c9d00 R08: 0000000000000001 R09: 0000000000000000
[  424.848324][    C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880256c9da0
[  424.851724][    C3] R13: ffff888024c824c0 R14: 0000000000000000 R15: ffff8880226d8940
[  424.855057][    C3]  ? _raw_spin_unlock_irq+0x23/0x50
[  424.857276][    C3]  do_group_exit+0x1bd/0x2a0
[  424.859287][    C3]  __ia32_sys_exit_group+0x3e/0x50
[  424.861740][    C3]  ia32_sys_call+0x19ea/0x19f0
[  424.863882][    C3]  __do_fast_syscall_32+0xe3/0x8c0
[  424.866022][    C3]  do_fast_syscall_32+0x32/0x70
[  424.868136][    C3]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  424.870844][    C3] RIP: 0023:0xf7ff7f6c
[  424.872618][    C3] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  424.880512][    C3] RSP: 002b:00000000ff87b47c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc
[  424.883683][    C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  424.887060][    C3] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f7226d99
[  424.890415][    C3] RBP: 00000000f7482ff4 R08: 0000000000000000 R09: 0000000000000000
[  424.893738][    C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  424.896848][    C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  424.900115][    C3]  </TASK>
[  424.901520][    C3] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  424.904138][    C3] CPU: 3 UID: 0 PID: 22312 Comm: syz.0.6688 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  424.908476][    C3] Tainted: [L]=SOFTLOCKUP
[  424.910338][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  424.914218][    C3] Call Trace:
[  424.915663][    C3]  <IRQ>
[  424.916915][    C3]  dump_stack_lvl+0x100/0x190
[  424.918897][    C3]  vpanic+0x552/0x970
[  424.920232][    C3]  ? __pfx_vpanic+0x10/0x10
[  424.921743][    C3]  panic+0xd1/0xe0
[  424.922994][    C3]  ? __pfx_panic+0x10/0x10
[  424.924515][    C3]  ? check_panic_on_warn+0x1f/0x90
[  424.926389][    C3]  check_panic_on_warn.cold+0x19/0x34
[  424.928261][    C3]  ? __queue_work+0xd08/0x1150
[  424.929831][    C3]  __warn.cold+0x191/0x348
[  424.931309][    C3]  __report_bug+0x296/0x3d0
[  424.932794][    C3]  ? __queue_work+0xd08/0x1150
[  424.934357][    C3]  ? __pfx___report_bug+0x10/0x10
[  424.935988][    C3]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  424.937702][    C3]  ? look_up_lock_class+0x55/0x120
[  424.939340][    C3]  ? __lock_acquire+0x4a5/0x2630
[  424.940898][    C3]  report_bug_entry+0xe1/0x290
[  424.942439][    C3]  ? __queue_work+0xd0c/0x1150
[  424.943991][    C3]  handle_bug+0x1cd/0x2a0
[  424.945365][    C3]  exc_invalid_op+0x17/0x50
[  424.946830][    C3]  asm_exc_invalid_op+0x1a/0x20
[  424.948377][    C3] RIP: 0010:__queue_work+0xd0c/0x1150
[  424.950082][    C3] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d e8 65 0d 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 05 c0 38 00 90 0f 0b 90 e9 b2 f5
[  424.956125][    C3] RSP: 0018:ffffc900005e8be8 EFLAGS: 00010046
[  424.958047][    C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100e9fd951
[  424.960636][    C3] RDX: ffff888076e32978 RSI: ffffffff8a811250 RDI: ffffffff90dcbe30
[  424.963179][    C3] RBP: ffff888074feca70 R08: 0000000000000005 R09: 0000000000000000
[  424.965735][    C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888076e32800
[  424.968739][    C3] R13: 1ffff920000bd18f R14: ffffffff81cf6960 R15: 0000000000000001
[  424.971513][    C3]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  424.973400][    C3]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  424.975201][    C3]  ? __queue_work+0xcda/0x1150
[  424.977034][    C3]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  424.978950][    C3]  call_timer_fn+0x19a/0x670
[  424.980468][    C3]  ? __pfx_call_timer_fn+0x10/0x10
[  424.982135][    C3]  ? debug_object_activate+0x331/0x490
[  424.983939][    C3]  ? __run_timers+0x560/0xb30
[  424.985471][    C3]  ? __run_timers+0x560/0xb30
[  424.987295][    C3]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  424.989352][    C3]  __run_timers+0x570/0xb30
[  424.990972][    C3]  ? __pfx___run_timers+0x10/0x10
[  424.992650][    C3]  ? _raw_spin_lock_irq+0x45/0x50
[  424.994356][    C3]  run_timer_base+0x114/0x190
[  424.996002][    C3]  ? __pfx_run_timer_base+0x10/0x10
[  424.997913][    C3]  run_timer_softirq+0x1a/0x50
[  424.999520][    C3]  handle_softirqs+0x1eb/0x9e0
[  425.001115][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  425.002862][    C3]  __irq_exit_rcu+0xef/0x150
[  425.004415][    C3]  irq_exit_rcu+0x9/0x30
[  425.005886][    C3]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  425.007746][    C3]  </IRQ>
[  425.008724][    C3]  <TASK>
[  425.009703][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  425.011695][    C3] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  425.013800][    C3] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 21 54 f6 48 89 df e8 62 71 54 f6 e8 0d d7 7f f6 fb bf 01 00 00 00 <e8> a2 95 44 f6 65 8b 05 cb 1e 7d 08 85 c0 74 06 5b c3 cc cc cc cc
[  425.020145][    C3] RSP: 0018:ffffc90003ef7e98 EFLAGS: 00000202
[  425.022204][    C3] RAX: 0000000000000497 RBX: ffff8880226d8940 RCX: 0000000000000000
[  425.024794][    C3] RDX: 0000000000000000 RSI: ffffffff8de7f663 RDI: 0000000000000001
[  425.027357][    C3] RBP: ffff8880256c9d00 R08: 0000000000000001 R09: 0000000000000000
[  425.029914][    C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880256c9da0
[  425.032493][    C3] R13: ffff888024c824c0 R14: 0000000000000000 R15: ffff8880226d8940
[  425.035080][    C3]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.037152][    C3]  do_group_exit+0x1bd/0x2a0
[  425.038943][    C3]  __ia32_sys_exit_group+0x3e/0x50
[  425.040654][    C3]  ia32_sys_call+0x19ea/0x19f0
[  425.042241][    C3]  __do_fast_syscall_32+0xe3/0x8c0
[  425.043939][    C3]  do_fast_syscall_32+0x32/0x70
[  425.045546][    C3]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  425.047654][    C3] RIP: 0023:0xf7ff7f6c
[  425.048998][    C3] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[  425.055253][    C3] RSP: 002b:00000000ff87b47c EFLAGS: 00000282 ORIG_RAX: 00000000000000fc
[  425.058103][    C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
[  425.060688][    C3] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f7226d99
[  425.063576][    C3] RBP: 00000000f7482ff4 R08: 0000000000000000 R09: 0000000000000000
[  425.066432][    C3] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  425.069018][    C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  425.071581][    C3]  </TASK>
[  425.073381][    C3] Kernel Offset: disabled
[  425.074894][    C3] Rebooting in 86400 seconds..