last executing test programs:

15m30.786760597s ago: executing program 32 (id=191):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./bus\x00', 0xa00000, &(0x7f0000000680)={[{@rootdir={'rootdir', 0x3d, 0x3}}, {@undelete}, {@undelete}, {@uid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@longad}, {@shortad}, {@uid_forget}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc49, &(0x7f0000001d40)="$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")
truncate(0x0, 0x7fff)
r5 = openat(0xffffffffffffff9c, &(0x7f000009de80)='./file1\x00', 0x42, 0x1ff)
write(r5, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0)
syz_emit_ethernet(0x92, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff00000000000088a800008100000086dd6066104000542f00fc0000000000000000000000008000fcff0200000000000000000000000000016c0000000000010000010004010e0000242081000000000200000800000086dd08000000010000fdff00000008fc21eb1e00000200000000000000000010000000000000"], 0x0)

8m42.676197176s ago: executing program 3 (id=921):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010)

8m42.49635707s ago: executing program 3 (id=925):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)="92", 0x1d}, 0x1, 0x0, 0x0, 0x40000}, 0x240488c4)

8m42.298380874s ago: executing program 3 (id=929):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="015300000000000000fe01", @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x2044)

8m42.064169908s ago: executing program 3 (id=933):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x10001, 0x28d, {{0x18, 0x4, 0x3, 0x8, 0x60, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xf, 0x1, 0xd, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffffe}, {@remote, 0x7ff}, {@empty, 0x45d}, {@loopback, 0x1}, {@loopback, 0x8}, {@broadcast, 0x9}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)

8m41.881548912s ago: executing program 3 (id=937):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)

8m40.914696231s ago: executing program 3 (id=949):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x34, 0x8}}, './file0\x00'})

8m25.868176656s ago: executing program 33 (id=949):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x34, 0x8}}, './file0\x00'})

1m1.523241816s ago: executing program 2 (id=3007):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r2, &(0x7f0000000400)=[{&(0x7f0000000300)=""/235, 0xeb}], 0x1)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x592e, 0x81})
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r3, 0xffffffffffffffff, 0x0)

58.344134658s ago: executing program 2 (id=3017):
socket$kcm(0xa, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_setup(0x68e, &(0x7f0000000740)={0x0, 0x67d9, 0x10100, 0x80, 0x3d7, 0x0, r1}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
readv(r4, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1)

57.18291574s ago: executing program 2 (id=3019):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/134, 0x86)

56.100359701s ago: executing program 2 (id=3021):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)

55.563282911s ago: executing program 2 (id=3022):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffbe, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

53.955980553s ago: executing program 2 (id=3025):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xcc, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xb8, 0x1, [@m_ipt={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x71, 0x6, "3761c432104fce91295ff77fc04a5fed68808c5c67896d9c88f6378eb7cbc418219e6bb804443e5f69ca77570195ef826d9f22c7ea1bc6d878e708429470357aeee6224ffd3f9eaabd65d06f8b1ae98fee1aa89b5b72b9202f0beeb000f98f020ce8d1031fc655c6c1d07f88c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x110}}, 0x4000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

52.651291128s ago: executing program 34 (id=3025):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xcc, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xb8, 0x1, [@m_ipt={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x71, 0x6, "3761c432104fce91295ff77fc04a5fed68808c5c67896d9c88f6378eb7cbc418219e6bb804443e5f69ca77570195ef826d9f22c7ea1bc6d878e708429470357aeee6224ffd3f9eaabd65d06f8b1ae98fee1aa89b5b72b9202f0beeb000f98f020ce8d1031fc655c6c1d07f88c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x110}}, 0x4000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

41.096674692s ago: executing program 5 (id=3050):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

38.719295188s ago: executing program 5 (id=3053):
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x8, 0xc9}}}, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0xd1e3)

38.472076283s ago: executing program 5 (id=3054):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000440))

36.419349613s ago: executing program 1 (id=3058):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b98}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x3, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x400, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fdf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x47ffa5a1, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x3, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x8, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x4, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x0, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)={0x14, 0x0, 0x405, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x811)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e0525"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d00070000000000000000000300050000000000020000000000080012110000"], 0x80}}, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

36.06436244s ago: executing program 5 (id=3059):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)

35.740406636s ago: executing program 5 (id=3060):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

35.00471069s ago: executing program 1 (id=3061):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8805)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

33.276275754s ago: executing program 5 (id=3063):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

32.828028893s ago: executing program 35 (id=3063):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

32.811670543s ago: executing program 1 (id=3066):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
tee(r2, r1, 0x5b09, 0x5)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x8)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001300)=""/102392, 0x18ff8)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0)
r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
close(r1)
syz_open_dev$tty1(0xc, 0x4, 0x1)

31.871471201s ago: executing program 1 (id=3068):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)

31.561269107s ago: executing program 1 (id=3069):
syz_emit_vhci(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0xd1e3)

31.044186227s ago: executing program 1 (id=3070):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

30.658698434s ago: executing program 36 (id=3070):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0)

30.652947625s ago: executing program 4 (id=3072):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffbe, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

30.180305474s ago: executing program 4 (id=3073):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)

29.956315758s ago: executing program 4 (id=3074):
socket$kcm(0xa, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
readv(r2, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1)

28.811910641s ago: executing program 4 (id=3076):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)

28.547262086s ago: executing program 4 (id=3077):
syz_emit_vhci(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0xd1e3)

28.085978895s ago: executing program 4 (id=3078):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b98}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x3, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x400, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fdf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x47ffa5a1, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x3, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x8, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x4, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x0, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)={0x14, 0x0, 0x405, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x811)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e0525"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d0007000000000000000000030005000000000002000000000008001211000004"], 0x80}}, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

27.726266632s ago: executing program 37 (id=3078):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b98}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x3, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x400, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fdf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x47ffa5a1, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x3, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x8, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x4, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x0, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)={0x14, 0x0, 0x405, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x811)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e0525"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d0007000000000000000000030005000000000002000000000008001211000004"], 0x80}}, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

27.716802662s ago: executing program 6 (id=3080):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffbe, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

27.229730251s ago: executing program 6 (id=3081):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

26.253344401s ago: executing program 6 (id=3082):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

24.399649096s ago: executing program 6 (id=3083):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)

24.230770199s ago: executing program 6 (id=3084):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x592e, 0x81})
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r3, 0xffffffffffffffff, 0x0)

23.68000718s ago: executing program 6 (id=3085):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000000)=0xd3, 0x4)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x20)
write$UHID_INPUT(r2, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006)

23.153959331s ago: executing program 38 (id=3085):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000000)=0xd3, 0x4)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x20)
write$UHID_INPUT(r2, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006)

10.511679866s ago: executing program 7 (id=3064):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00')
pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)

10.097644384s ago: executing program 7 (id=3087):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
tee(r2, r1, 0x5b09, 0x5)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x8)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001300)=""/102392, 0x18ff8)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0)
r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
close(r1)
syz_open_dev$tty1(0xc, 0x4, 0x1)

9.201831621s ago: executing program 7 (id=3088):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000180)="f7", 0x1, 0x200980)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x6)

8.974328286s ago: executing program 8 (id=3089):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

8.161958111s ago: executing program 7 (id=3090):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r2, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x592e, 0x81})
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r3, 0xffffffffffffffff, 0x0)

8.118813272s ago: executing program 9 (id=3079):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000440))

7.094271722s ago: executing program 8 (id=3091):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x7, 0x4200, 0x0, 0x0}], 0x1})

6.888528786s ago: executing program 9 (id=3092):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0)
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x64)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7)

5.13033135s ago: executing program 9 (id=3093):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$key(0xf, 0x3, 0x2)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
getsockname$tipc(r6, &(0x7f0000000040), 0x0)

5.011364922s ago: executing program 8 (id=3094):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
fcntl$setlease(r3, 0x400, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000)

4.701301958s ago: executing program 0 (id=3095):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r3, 0x0, 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000})
fchown(r6, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x2, 0x7fffffff], 0x80a0000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022)

3.696199708s ago: executing program 7 (id=3096):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r2, r1, 0x0, r1}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000100)='./file0\x00', 0x1)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)

3.694574588s ago: executing program 8 (id=3097):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

2.418078883s ago: executing program 7 (id=3098):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a)
flock(r3, 0x5)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r5, 0x2)

2.003480371s ago: executing program 0 (id=3099):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})

1.719761207s ago: executing program 0 (id=3100):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffbe, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.682448977s ago: executing program 8 (id=3101):
r0 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$kcm(0x10, 0x3, 0x0)
close(0x3)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r2, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")

1.172253157s ago: executing program 0 (id=3102):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f00000001c0))

1.01274405s ago: executing program 0 (id=3103):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
tee(r2, r1, 0x5b09, 0x5)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, 0x8)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001300)=""/102392, 0x18ff8)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0)
r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
close(r1)
syz_open_dev$tty1(0xc, 0x4, 0x1)

321.736854ms ago: executing program 8 (id=3104):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r2, &(0x7f0000000400), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x592e, 0x81})
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(r3, 0xffffffffffffffff, 0x0)

311.551224ms ago: executing program 0 (id=3105):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x7f)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c)

0s ago: executing program 9 (id=3106):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r4=>0x0})
fsmount(0xffffffffffffffff, 0x1, 0x80)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4})
close_range(r2, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

9 code=0x0
[  850.096754][  T966] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  850.142772][  T966] usb 3-1: USB disconnect, device number 21
[  850.173396][  T966] usblp0: removed
[  854.217660][T14795] overlayfs: failed to clone upperpath
[  855.849551][ T5157] udevd[5157]: worker [7282] /devices/virtual/block/nbd1 is taking a long time
[  856.025094][T14815] ptrace attach of "./syz-executor exec"[5779] was attempted by "./syz-executor exec"[14815]
[  857.547131][T14838] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2320'.
[  858.899825][T14832] delete_channel: no stack
[  859.446638][T14868] fuse: Unknown parameter '0x0000000000000003'
[  861.438740][T14892] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.446257][T14892] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.458935][T14892] bridge0: entered allmulticast mode
[  861.543813][T14896] bridge_slave_1: left allmulticast mode
[  861.570158][T14896] bridge_slave_1: left promiscuous mode
[  861.579906][T14896] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.614912][T14896] bridge_slave_0: left allmulticast mode
[  861.630484][T14896] bridge_slave_0: left promiscuous mode
[  861.636862][T14896] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.652302][T14901] fuse: Unknown parameter '0x0000000000000003'
[  865.379452][T14968] fuse: Unknown parameter 'fd0x0000000000000003'
[  866.991863][T14999] fuse: Unknown parameter 'fd0x0000000000000003'
[  867.261868][T15003] capability: warning: `syz.5.2366' uses 32-bit capabilities (legacy support in use)
[  869.963290][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  869.972229][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  870.731123][T15057] usb usb8: usbfs: process 15057 (syz.5.2378) did not claim interface 0 before use
[  872.689825][   T10] block nbd1: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 150 seconds
[  873.400719][T15081] 9pnet_fd: Insufficient options for proto=fd
[  873.924706][T15094] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[  873.934213][T15094] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  876.762526][T15144] bridge0: entered allmulticast mode
[  878.916431][   T23] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  879.129327][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.369215][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  879.379160][   T23] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  879.388301][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.401759][   T23] usb 2-1: config 0 descriptor??
[  880.266664][  T966] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  880.297560][   T23] usb 2-1: language id specifier not provided by device, defaulting to English
[  880.552066][   T23] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71
[  880.591190][   T23] uclogic 0003:256C:006D.0006: failed probing parameters: -71
[  880.633870][  T966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  880.646418][   T23] uclogic: probe of 0003:256C:006D.0006 failed with error -71
[  880.678670][   T23] usb 2-1: USB disconnect, device number 28
[  880.691027][  T966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.730102][  T966] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  880.751953][  T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.786611][  T966] usb 6-1: config 0 descriptor??
[  881.060219][T15218] random: crng reseeded on system resumption
[  881.218353][  T966] usbhid 6-1:0.0: can't add hid device: -71
[  881.235521][  T966] usbhid: probe of 6-1:0.0 failed with error -71
[  881.255701][  T966] usb 6-1: USB disconnect, device number 20
[  881.949029][T10994] Bluetooth: hci3: link tx timeout
[  882.629911][T10994] Bluetooth: hci3: link tx timeout
[  882.992841][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'.
[  883.624823][T15263] random: crng reseeded on system resumption
[  884.786402][T10885] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  885.653951][T10885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  885.675171][T10885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  885.685862][T10885] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  885.695511][T10885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.705755][T10885] usb 6-1: config 0 descriptor??
[  886.151192][T10885] usbhid 6-1:0.0: can't add hid device: -71
[  886.162792][T10885] usbhid: probe of 6-1:0.0 failed with error -71
[  886.172520][T10885] usb 6-1: USB disconnect, device number 21
[  890.106467][ T7884] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  890.347701][ T7884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  890.390628][ T7884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  890.440600][ T7884] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  890.484310][ T7884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.519681][ T7884] usb 3-1: config 0 descriptor??
[  891.141875][ T7884] usbhid 3-1:0.0: can't add hid device: -71
[  891.186382][ T7884] usbhid: probe of 3-1:0.0 failed with error -71
[  891.216764][ T7884] usb 3-1: USB disconnect, device number 22
[  894.257371][T10994] Bluetooth: hci3: link tx timeout
[  894.536503][   T23] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  894.846168][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  894.857696][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.886633][   T23] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  894.914201][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.968075][   T23] usb 2-1: config 0 descriptor??
[  895.407525][   T23] usbhid 2-1:0.0: can't add hid device: -71
[  895.414691][   T23] usbhid: probe of 2-1:0.0 failed with error -71
[  895.437060][   T23] usb 2-1: USB disconnect, device number 29
[  899.060802][T15460] syz_tun: entered promiscuous mode
[  899.082716][T15460] batadv_slave_0: entered promiscuous mode
[  899.100428][T15460] hsr1: entered allmulticast mode
[  903.292959][   T10] block nbd1: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 180 seconds
[  903.304435][   T55] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  903.688857][   T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.756528][   T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  904.633959][   T55] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  905.116287][   T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.201867][   T55] usb 3-1: config 0 descriptor??
[  907.548352][   T55] usb 3-1: language id specifier not provided by device, defaulting to English
[  907.590223][   T55] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71
[  907.618593][   T55] uclogic 0003:256C:006D.0007: failed probing parameters: -71
[  907.672143][   T55] uclogic: probe of 0003:256C:006D.0007 failed with error -71
[  907.723159][   T55] usb 3-1: USB disconnect, device number 23
[  907.958002][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  907.969707][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  908.000112][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  908.013931][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  908.021976][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  908.029406][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  910.121635][ T5788] Bluetooth: hci4: command tx timeout
[  911.196506][T15548] chnl_net:caif_netlink_parms(): no params data found
[  912.686286][ T5788] Bluetooth: hci4: command tx timeout
[  914.788984][ T5788] Bluetooth: hci4: command tx timeout
[  914.903286][T15548] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.916417][T15548] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.923863][T15548] bridge_slave_0: entered allmulticast mode
[  914.939850][T15548] bridge_slave_0: entered promiscuous mode
[  915.183187][T15548] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.209860][T15548] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.231975][T15548] bridge_slave_1: entered allmulticast mode
[  915.256373][T12772] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  915.265730][T15548] bridge_slave_1: entered promiscuous mode
[  915.461292][T15548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  915.475765][T15548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  915.496341][T12772] usb 5-1: Using ep0 maxpacket: 8
[  915.526917][T12772] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  915.548372][T12772] usb 5-1: config 179 has no interface number 0
[  915.554712][T12772] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  915.568693][T12772] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  915.589928][T15548] team0: Port device team_slave_0 added
[  915.595976][T12772] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  915.610914][T15548] team0: Port device team_slave_1 added
[  915.626449][T12772] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  915.654932][T12772] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  915.675831][T12772] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  915.694258][T12772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  915.735837][T15597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  915.831119][T15548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  915.875369][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  915.910288][T15548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  915.928080][T15548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  915.935977][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  916.006512][T15548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  916.278896][   T55] usb 5-1: USB disconnect, device number 27
[  916.278974][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  916.293569][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  916.312072][T15548] hsr_slave_0: entered promiscuous mode
[  916.346869][T15548] hsr_slave_1: entered promiscuous mode
[  916.364797][T15548] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  916.379222][T15548] Cannot create hsr debugfs directory
[  916.840472][ T5788] Bluetooth: hci4: command tx timeout
[  917.438168][T15548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.869824][T15548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.635090][T15548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.917872][T15548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.248969][T15548] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  920.276826][T15548] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  920.300090][T15548] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  920.314294][T15548] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  920.469305][T15548] 8021q: adding VLAN 0 to HW filter on device bond0
[  920.512512][T15548] 8021q: adding VLAN 0 to HW filter on device team0
[  920.534872][ T6633] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.542140][ T6633] bridge0: port 1(bridge_slave_0) entered forwarding state
[  920.589062][T15060] bridge0: port 2(bridge_slave_1) entered blocking state
[  920.596402][T15060] bridge0: port 2(bridge_slave_1) entered forwarding state
[  921.973263][T15662] dlm: no local IP address has been set
[  921.979039][T15662] dlm: cannot start dlm midcomms -107
[  922.984898][T15548] 8021q: adding VLAN 0 to HW filter on device batadv0
[  923.745247][T15548] veth0_vlan: entered promiscuous mode
[  923.779548][T15548] veth1_vlan: entered promiscuous mode
[  923.864672][T15548] veth0_macvtap: entered promiscuous mode
[  923.930769][T15548] veth1_macvtap: entered promiscuous mode
[  923.974209][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  923.985669][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  923.997290][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  924.008282][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  924.019813][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  924.040165][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  924.086437][T12772] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  924.150595][T15548] batman_adv: batadv0: Interface activated: batadv_slave_0
[  924.181869][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  924.214042][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  924.256485][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  924.293605][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  924.301840][T12772] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  924.303764][T15548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  924.322729][T12772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.361328][T12772] usb 6-1: Product: syz
[  924.365800][T12772] usb 6-1: Manufacturer: syz
[  924.464468][T12772] usb 6-1: SerialNumber: syz
[  924.593656][T15548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.058754][T15548] batman_adv: batadv0: Interface activated: batadv_slave_1
[  925.068090][T12772] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  925.081927][T12772] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  925.094592][T12772] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  925.118344][T12772] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  925.133727][T12772] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  925.160303][T12772] lan78xx: probe of 6-1:1.0 failed with error -71
[  925.209797][T15548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  925.223050][T12772] usb 6-1: USB disconnect, device number 22
[  925.229778][T15548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  925.242572][T15548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  925.306229][T15548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  925.509222][T15060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  925.543330][T15060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  925.588070][ T6640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  925.595898][ T6640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  928.266314][ T5789] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  928.483508][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  928.514980][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  928.544578][ T5789] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  928.567237][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.595725][ T5789] usb 2-1: config 0 descriptor??
[  928.809080][T15741] ceph: No source
[  929.607978][ T5789] usb 2-1: string descriptor 0 read error: -71
[  929.626373][ T5789] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71
[  929.635263][ T5789] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71
[  929.666016][ T5789] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71
[  929.686372][ T5789] uclogic 0003:256C:006D.0008: failed probing parameters: -71
[  929.698816][ T5789] uclogic: probe of 0003:256C:006D.0008 failed with error -71
[  929.736984][ T5789] usb 2-1: USB disconnect, device number 30
[  929.781224][   T55] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  929.870806][   T55] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  930.946297][ T5789] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  931.167531][ T5789] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  931.186558][ T5789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  931.206349][ T5789] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  931.218543][ T5789] usb 2-1: config 1 has no interface number 1
[  931.234972][ T5789] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  931.277147][ T5789] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  931.306252][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.314332][ T5789] usb 2-1: Product: syz
[  931.326260][ T5789] usb 2-1: Manufacturer: syz
[  931.330968][ T5789] usb 2-1: SerialNumber: syz
[  931.400876][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  931.416830][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  931.588837][ T5789] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  931.612402][ T5789] usb 2-1: MIDIStreaming interface descriptor not found
[  931.740087][ T5789] usb 2-1: USB disconnect, device number 31
[  931.912061][T15791] udevd[15791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  933.450201][T10994] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  933.469756][T10994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  933.486368][T10994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  933.496729][T10994] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  933.504549][T10994] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  933.512240][T10994] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  933.958222][   T10] block nbd1: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 210 seconds
[  934.905435][T15827] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.912980][T15827] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.965513][T15827] bridge0: entered allmulticast mode
[  935.018398][T15819] chnl_net:caif_netlink_parms(): no params data found
[  935.132808][ T6640] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.293761][ T6640] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.424671][ T6640] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.466636][T15819] bridge0: port 1(bridge_slave_0) entered blocking state
[  935.491434][T15819] bridge0: port 1(bridge_slave_0) entered disabled state
[  935.522528][T15819] bridge_slave_0: entered allmulticast mode
[  935.540212][T15819] bridge_slave_0: entered promiscuous mode
[  935.565140][T10994] Bluetooth: hci2: command tx timeout
[  935.673902][ T6640] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.690624][T15819] bridge0: port 2(bridge_slave_1) entered blocking state
[  935.699933][T15819] bridge0: port 2(bridge_slave_1) entered disabled state
[  935.707402][T15819] bridge_slave_1: entered allmulticast mode
[  935.715121][T15819] bridge_slave_1: entered promiscuous mode
[  935.799733][T15819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  935.837854][T15819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  935.998448][T15819] team0: Port device team_slave_0 added
[  936.077414][T15819] team0: Port device team_slave_1 added
[  936.201033][T15819] batman_adv: batadv0: Adding interface: batadv_slave_0
[  936.224642][T15819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  936.276304][T15819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  936.305199][T15819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  936.326278][ T5827] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  936.334289][T15819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  936.445339][T15819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  936.566468][ T5827] usb 2-1: Using ep0 maxpacket: 16
[  936.628465][ T5827] usb 2-1: config index 0 descriptor too short (expected 40342, got 159)
[  936.789406][ T5827] usb 2-1: config 244 has too many interfaces: 92, using maximum allowed: 32
[  937.001398][ T5827] usb 2-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[  937.135492][ T5827] usb 2-1: config 244 has 0 interfaces, different from the descriptor's value: 92
[  937.246893][ T5827] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  937.300916][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.346676][ T5827] usb 2-1: Product: syz
[  937.378591][ T5827] usb 2-1: Manufacturer: syz
[  937.383245][ T5827] usb 2-1: SerialNumber: syz
[  937.487931][T15819] hsr_slave_0: entered promiscuous mode
[  937.556943][T15819] hsr_slave_1: entered promiscuous mode
[  937.576506][T15819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  937.584150][T15819] Cannot create hsr debugfs directory
[  937.636410][T10994] Bluetooth: hci2: command tx timeout
[  937.850291][ T5827] usb 2-1: USB disconnect, device number 32
[  939.719372][T10994] Bluetooth: hci2: command tx timeout
[  941.265090][ T6640] dvmrp6 (unregistering): left allmulticast mode
[  941.800439][T10994] Bluetooth: hci2: command tx timeout
[  942.207745][ T6640] hsr_slave_0: left promiscuous mode
[  942.216712][ T6640] hsr_slave_1: left promiscuous mode
[  942.223725][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  942.251002][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_0
[  942.267286][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  942.274752][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_1
[  942.324240][ T6640] veth1_macvtap: left promiscuous mode
[  942.330265][ T6640] veth0_macvtap: left promiscuous mode
[  942.335956][ T6640] veth1_vlan: left promiscuous mode
[  945.250102][ T6640] team0 (unregistering): Port device team_slave_1 removed
[  946.147928][ T6640] team0 (unregistering): Port device team_slave_0 removed
[  947.776978][ T6640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  948.085597][ T6640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  949.543234][ T6640] bond0 (unregistering): Released all slaves
[  951.056661][T15819] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  951.129287][T15819] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  951.199707][T15819] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  951.243049][T15819] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  951.376465][   T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  951.567929][   T23] usb 3-1: device descriptor read/64, error -71
[  951.613073][T15819] 8021q: adding VLAN 0 to HW filter on device bond0
[  951.732336][ T6640] IPVS: stop unused estimator thread 0...
[  951.757452][T15819] 8021q: adding VLAN 0 to HW filter on device team0
[  951.946621][   T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  952.156992][   T23] usb 3-1: device descriptor read/64, error -71
[  952.294165][   T23] usb usb3-port1: attempt power cycle
[  952.878061][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state
[  952.885319][ T6644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  952.963316][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state
[  952.970619][ T6644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  954.040548][T15819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  954.096368][   T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  954.195927][   T23] usb 3-1: device descriptor read/8, error -71
[  954.742801][T15819] veth0_vlan: entered promiscuous mode
[  954.777362][T15819] veth1_vlan: entered promiscuous mode
[  954.802891][T16038] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.810670][T16038] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.825091][T16038] bridge0: entered allmulticast mode
[  954.912524][T15819] veth0_macvtap: entered promiscuous mode
[  954.944022][T15819] veth1_macvtap: entered promiscuous mode
[  955.038929][T15819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  955.066127][T15819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  955.096341][T15819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  955.126703][T15819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  955.146364][T15819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  955.176272][T15819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  955.195454][T15819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  955.224460][T15819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  955.239439][T15819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  955.254261][T15819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  955.271622][T15819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  955.282012][T15819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  955.298923][T15819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  955.329455][T15819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  955.406811][T15819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  955.421709][T15819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  955.433513][T15819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  955.433594][   T55] IPVS: starting estimator thread 0...
[  955.458568][T15819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  955.557822][T16049] IPVS: using max 18 ests per chain, 43200 per kthread
[  955.670828][ T6644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  955.686661][ T6644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  955.728837][ T6633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  955.743681][ T6633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  956.185430][   T23] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  956.481988][   T23] usb 2-1: device descriptor read/64, error -71
[  956.886564][   T23] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  956.935851][T16070] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.943654][T16070] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.964660][T16070] bridge0: entered allmulticast mode
[  957.066597][   T23] usb 2-1: device descriptor read/64, error -71
[  957.197817][   T23] usb usb2-port1: attempt power cycle
[  957.617832][   T23] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  957.687007][   T23] usb 2-1: device descriptor read/8, error -71
[  957.996487][   T23] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  958.350566][   T23] usb 2-1: device descriptor read/8, error -71
[  958.496683][   T23] usb usb2-port1: unable to enumerate USB device
[  959.926352][ T5865] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  960.016332][   T23] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  960.126690][ T5865] usb 3-1: Using ep0 maxpacket: 32
[  960.191179][ T5865] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  960.202441][ T5865] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  960.215764][   T23] usb 6-1: Using ep0 maxpacket: 8
[  960.222210][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  960.232941][ T5865] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  960.244655][ T5865] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  960.255508][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.289991][   T23] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  960.312597][ T5865] usb 3-1: config 0 descriptor??
[  960.319790][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.336784][   T23] usb 6-1: Product: syz
[  960.350354][   T23] usb 6-1: Manufacturer: syz
[  960.355128][   T23] usb 6-1: SerialNumber: syz
[  960.385232][   T23] usb 6-1: config 0 descriptor??
[  960.798600][    T9] usb 3-1: USB disconnect, device number 28
[  960.891330][   T23] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  961.607357][   T23] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  961.684415][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  961.872178][   T23] usb 6-1: USB disconnect, device number 23
[  962.346315][    T9] usb 3-1: Using ep0 maxpacket: 32
[  962.366539][    T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  962.404836][    T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  962.439654][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  962.475075][    T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  962.509732][    T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  962.539743][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.596827][    T9] usb 3-1: config 0 descriptor??
[  962.776587][    T9] usb 3-1: USB disconnect, device number 29
[  963.037926][T16162] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2689'.
[  964.042284][   T10] block nbd1: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 240 seconds
[  964.924975][T16190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2700'.
[  965.681452][   T23] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  965.897210][   T23] usb 6-1: Using ep0 maxpacket: 32
[  965.917572][   T23] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  965.942373][   T23] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  965.957144][   T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  965.974291][   T23] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  965.990116][   T23] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  966.010772][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.028456][   T23] usb 6-1: config 0 descriptor??
[  966.146313][   T55] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  966.259475][   T23] usb 6-1: USB disconnect, device number 24
[  966.405560][T16050] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  966.466722][   T55] usb 3-1: Using ep0 maxpacket: 8
[  966.610801][   T55] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  966.703850][   T55] usb 3-1: config 179 has no interface number 0
[  966.779448][   T55] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  966.828420][   T55] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  966.846484][T16050] usb 5-1: Using ep0 maxpacket: 16
[  966.868559][   T55] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  966.881695][T16050] usb 5-1: config index 0 descriptor too short (expected 40342, got 159)
[  966.890747][T16050] usb 5-1: config 244 has too many interfaces: 92, using maximum allowed: 32
[  966.900071][   T55] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  966.911853][T16050] usb 5-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[  966.922838][   T55] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  966.943459][T16050] usb 5-1: config 244 has 0 interfaces, different from the descriptor's value: 92
[  966.960506][   T55] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  966.969933][   T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.980657][T16050] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  966.995502][T16050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.003905][T16050] usb 5-1: Product: syz
[  967.006606][T16196] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  967.008205][ T5827] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  967.027325][T16050] usb 5-1: Manufacturer: syz
[  967.032046][T16050] usb 5-1: SerialNumber: syz
[  967.226501][ T5827] usb 6-1: Using ep0 maxpacket: 32
[  967.235785][ T5827] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  967.252747][ T5827] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  967.292868][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  967.318026][T16050] usb 5-1: USB disconnect, device number 28
[  967.341255][ T5827] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  967.352553][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input20
[  967.378639][ T5827] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  967.391328][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.407901][ T5827] usb 6-1: config 0 descriptor??
[  967.552110][T16050] usb 3-1: USB disconnect, device number 30
[  967.558207][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  967.558264][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  967.575841][T16050] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  967.638442][   T23] usb 6-1: USB disconnect, device number 25
[  971.363896][ T5157] udevd[5157]: worker [7282] /devices/virtual/block/nbd1 timeout; kill it
[  971.446390][ T5157] udevd[5157]: seq 14853 '/devices/virtual/block/nbd1' killed
[  971.806393][ T5827] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  971.996365][ T5827] usb 2-1: Using ep0 maxpacket: 32
[  972.012968][ T5827] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  972.037003][ T5827] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  972.055807][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  972.086989][ T5827] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  972.110445][ T5827] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  972.123373][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.155108][ T5827] usb 2-1: config 0 descriptor??
[  972.401242][T12772] usb 2-1: USB disconnect, device number 37
[  973.399467][T16253] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2723'.
[  974.146248][T12772] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  974.356729][T12772] usb 2-1: Using ep0 maxpacket: 32
[  974.847857][T12772] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  974.873125][T12772] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  974.891838][T12772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  975.255414][T12772] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  975.277078][T12772] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  975.310949][T12772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.340026][T12772] usb 2-1: config 0 descriptor??
[  975.359258][T12772] usb 2-1: can't set config #0, error -71
[  975.386496][T12772] usb 2-1: USB disconnect, device number 38
[  978.326915][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  978.629049][    T9] usb 3-1: Using ep0 maxpacket: 32
[  978.773848][    T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  978.921826][    T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  978.972886][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  979.019126][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  979.065087][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  979.116653][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  979.150396][    T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  979.170876][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.191050][    T9] usb 3-1: config 0 descriptor??
[  979.448155][   T23] usb 3-1: USB disconnect, device number 31
[  979.475251][   T55] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  979.676353][   T55] usb 2-1: Using ep0 maxpacket: 8
[  979.706643][   T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  979.742539][   T55] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  979.772991][   T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.813445][   T55] usb 2-1: config 0 descriptor??
[  980.046508][   T23] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  980.107075][   T55] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  980.361156][   T23] usb 3-1: Using ep0 maxpacket: 32
[  980.412655][   T23] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  980.433426][   T23] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  980.448840][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  980.504465][   T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  980.520091][    T9] usb 2-1: USB disconnect, device number 39
[  980.526317][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  980.538867][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  980.566551][   T23] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  980.606395][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.647878][   T23] usb 3-1: config 0 descriptor??
[  980.891703][T16314] fuse: Bad value for 'fd'
[  981.239760][   T27] audit: type=1326 audit(1757334737.999:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.2.2737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c9bb8ebe9 code=0x0
[  982.481392][   T23] usb 3-1: USB disconnect, device number 32
[  983.543941][T16348] fuse: Bad value for 'fd'
[  984.036675][   T23] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  984.256315][   T23] usb 6-1: Using ep0 maxpacket: 16
[  984.274558][   T23] usb 6-1: config index 0 descriptor too short (expected 40342, got 159)
[  984.295203][   T23] usb 6-1: config 244 has too many interfaces: 92, using maximum allowed: 32
[  984.334564][   T23] usb 6-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[  984.356711][   T23] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 92
[  984.374830][   T23] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  984.404102][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.420504][   T23] usb 6-1: Product: syz
[  984.425124][   T23] usb 6-1: Manufacturer: syz
[  984.429905][   T23] usb 6-1: SerialNumber: syz
[  984.657217][   T23] usb 6-1: USB disconnect, device number 26
[  984.896370][   T55] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  985.096555][   T55] usb 5-1: Using ep0 maxpacket: 32
[  985.117492][   T55] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  985.131772][   T55] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  985.141240][   T55] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  985.152647][   T55] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  985.171172][   T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  985.184890][   T55] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  985.205416][   T55] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  985.215513][   T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.245349][   T55] usb 5-1: config 0 descriptor??
[  985.361038][T16372] fuse: Bad value for 'fd'
[  985.487247][   T23] usb 5-1: USB disconnect, device number 29
[  985.798238][T10994] Bluetooth: hci2: link tx timeout
[  985.804004][T10994] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  985.986362][   T23] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  986.176537][   T23] usb 5-1: Using ep0 maxpacket: 32
[  986.198772][   T23] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  986.208186][   T23] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  986.217001][   T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  986.227804][   T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  986.239578][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  986.251299][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  986.266407][   T23] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  986.276781][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.313425][   T23] usb 5-1: config 0 descriptor??
[  986.914117][   T27] audit: type=1326 audit(1757334743.669:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16363 comm="syz.4.2760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76eef8ebe9 code=0x0
[  987.879454][T10994] Bluetooth: hci2: command 0x0406 tx timeout
[  988.034480][   T23] usb 5-1: USB disconnect, device number 30
[  990.368737][T16429] bridge0: port 2(bridge_slave_1) entered disabled state
[  990.376192][T16429] bridge0: port 1(bridge_slave_0) entered disabled state
[  990.416673][T16429] bridge0: entered allmulticast mode
[  991.506573][   T23] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  991.746399][   T23] usb 5-1: Using ep0 maxpacket: 32
[  991.767156][   T23] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  991.775560][   T23] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  991.791138][   T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  991.810052][   T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  991.954025][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  991.969454][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  991.987595][   T23] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  992.005688][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.201071][   T23] usb 5-1: config 0 descriptor??
[  992.550896][   T55] usb 5-1: USB disconnect, device number 31
[  992.621340][T16478] capability: warning: `syz.2.2784' uses deprecated v2 capabilities in a way that may be insecure
[  992.635171][T16478] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[  992.647060][T16478] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  992.843650][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  992.850390][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  994.164857][   T10] block nbd1: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 270 seconds
[  994.193074][T16489] trusted_key: syz.5.2783 sent an empty control message without MSG_MORE.
[  994.218222][   T55] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  994.627432][ T5827] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  994.886188][ T5827] usb 2-1: Using ep0 maxpacket: 16
[  995.119371][ T5827] usb 2-1: config index 0 descriptor too short (expected 40342, got 159)
[  995.231186][ T5827] usb 2-1: config 244 has too many interfaces: 92, using maximum allowed: 32
[  995.373595][ T5827] usb 2-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[  995.529443][ T5827] usb 2-1: config 244 has 0 interfaces, different from the descriptor's value: 92
[  995.809410][ T5827] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  995.898465][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.978607][ T5827] usb 2-1: Product: syz
[  996.015159][ T5827] usb 2-1: Manufacturer: syz
[  996.061658][ T5827] usb 2-1: SerialNumber: syz
[  996.733888][ T5827] usb 2-1: USB disconnect, device number 40
[ 1000.678846][T16535] overlayfs: failed to clone upperpath
[ 1000.731797][ T5865] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1000.770982][ T5865] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1000.918455][ T5827] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1001.142097][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1001.175200][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1001.196603][ T5827] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1001.205789][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.228001][T15873] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1001.237527][ T5827] usb 3-1: config 0 descriptor??
[ 1001.446569][T15873] usb 6-1: Using ep0 maxpacket: 16
[ 1001.462547][T15873] usb 6-1: config index 0 descriptor too short (expected 40342, got 159)
[ 1001.474190][T15873] usb 6-1: config 244 has too many interfaces: 92, using maximum allowed: 32
[ 1001.484077][T15873] usb 6-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[ 1001.495722][T15873] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 92
[ 1001.512995][T15873] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1001.523105][T15873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.532131][T15873] usb 6-1: Product: syz
[ 1001.537302][T15873] usb 6-1: Manufacturer: syz
[ 1001.542034][T15873] usb 6-1: SerialNumber: syz
[ 1001.687308][ T5827] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[ 1001.705291][ T5827] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[ 1001.731330][ T5827] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000B/input/input21
[ 1001.779468][ T5827] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[ 1001.837968][T15873] usb 6-1: USB disconnect, device number 27
[ 1002.122478][T15873] usb 3-1: USB disconnect, device number 33
[ 1002.541209][T16549] fido_id[16549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 1003.295091][T16574] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2812'.
[ 1004.786710][ T5789] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1004.846683][ T5827] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1005.007169][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1005.020936][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1005.036956][ T5789] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1005.046844][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.077246][ T5789] usb 5-1: config 0 descriptor??
[ 1005.116468][ T5827] usb 6-1: Using ep0 maxpacket: 16
[ 1005.211089][ T5827] usb 6-1: config index 0 descriptor too short (expected 40342, got 159)
[ 1005.268705][ T5827] usb 6-1: config 244 has too many interfaces: 92, using maximum allowed: 32
[ 1005.437881][ T5827] usb 6-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[ 1005.470429][ T5827] usb 6-1: config 244 has 0 interfaces, different from the descriptor's value: 92
[ 1005.502572][ T5827] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1005.534499][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.616251][ T5827] usb 6-1: Product: syz
[ 1005.620470][ T5827] usb 6-1: Manufacturer: syz
[ 1005.648775][ T5827] usb 6-1: SerialNumber: syz
[ 1005.662037][ T5789] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0
[ 1005.694322][ T5789] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0
[ 1005.724284][ T5789] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000C/input/input22
[ 1005.798155][ T5789] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[ 1005.930045][ T5827] usb 6-1: USB disconnect, device number 28
[ 1005.939545][ T5789] usb 5-1: USB disconnect, device number 33
[ 1006.034483][T16601] fido_id[16601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[ 1006.060101][T16605] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2823'.
[ 1006.326336][   T23] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1006.518700][   T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11
[ 1006.551786][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1006.573440][   T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[ 1006.588607][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.733574][   T23] usb 2-1: config 0 descriptor??
[ 1007.739440][ T5827] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1007.835099][   T23] logitech 0003:046D:C294.000D: unknown main item tag 0x0
[ 1007.842622][   T23] logitech 0003:046D:C294.000D: unknown main item tag 0x0
[ 1007.853810][   T23] logitech 0003:046D:C294.000D: hidraw0: USB HID v0.04 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0
[ 1007.865360][   T23] logitech 0003:046D:C294.000D: no inputs found
[ 1007.946341][T15873] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1007.958678][ T5827] usb 6-1: Using ep0 maxpacket: 8
[ 1007.969090][ T5827] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1007.984162][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.992354][ T5827] usb 6-1: Product: syz
[ 1007.996809][ T5827] usb 6-1: Manufacturer: syz
[ 1008.001402][ T5827] usb 6-1: SerialNumber: syz
[ 1008.012981][ T5827] usb 6-1: config 0 descriptor??
[ 1008.076381][ T5789] usb 2-1: USB disconnect, device number 41
[ 1008.140445][T15873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1008.157322][T15873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1008.170095][T15873] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1008.180294][T15873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1008.225041][ T5827] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1008.272573][T15873] usb 3-1: config 0 descriptor??
[ 1008.654420][ T5827] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[ 1008.691923][ T5827] usb 6-1: USB disconnect, device number 29
[ 1008.721340][T15873] usbhid 3-1:0.0: can't add hid device: -71
[ 1008.741083][T15873] usbhid: probe of 3-1:0.0 failed with error -71
[ 1008.778892][T15873] usb 3-1: USB disconnect, device number 34
[ 1009.553164][T16636] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2833'.
[ 1009.996298][   T23] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1010.196582][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1010.234024][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1010.255099][   T23] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1010.264955][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.277638][   T23] usb 5-1: config 0 descriptor??
[ 1010.581071][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2838'.
[ 1011.101178][   T23] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0
[ 1011.311128][   T23] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0
[ 1011.322749][   T23] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000E/input/input23
[ 1011.476954][   T23] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[ 1011.520863][   T23] usb 5-1: USB disconnect, device number 34
[ 1011.565297][T16667] fido_id[16667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[ 1012.006252][ T5789] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1012.229490][ T5789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1012.276530][ T5789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1012.297146][ T5789] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1012.306959][ T5789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.332910][ T5789] usb 3-1: config 0 descriptor??
[ 1012.835202][ T5789] usbhid 3-1:0.0: can't add hid device: -71
[ 1012.841646][ T5789] usbhid: probe of 3-1:0.0 failed with error -71
[ 1012.852533][ T5789] usb 3-1: USB disconnect, device number 35
[ 1015.376346][T16703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2849'.
[ 1016.677871][   T23] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1016.867789][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1017.366243][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1017.377831][   T23] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1017.387404][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1017.408507][   T23] usb 6-1: config 0 descriptor??
[ 1017.829659][   T23] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0
[ 1017.988054][   T23] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0
[ 1017.998647][   T23] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000F/input/input24
[ 1018.026673][   T23] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[ 1018.160981][T15873] usb 6-1: USB disconnect, device number 30
[ 1021.576457][T15873] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1021.769041][T16781] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2873'.
[ 1022.504313][T16783] overlayfs: failed to resolve './file4': -2
[ 1022.508961][T15873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1022.536278][T15873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1022.557634][T15873] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1022.576418][T15873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1022.640156][T15873] usb 6-1: config 0 descriptor??
[ 1024.358098][   T10] block nbd1: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 300 seconds
[ 1024.502050][T15873] usbhid 6-1:0.0: can't add hid device: -71
[ 1024.515419][T15873] usbhid: probe of 6-1:0.0 failed with error -71
[ 1024.543451][T15873] usb 6-1: USB disconnect, device number 31
[ 1025.909536][T16817] overlayfs: failed to resolve './file4': -2
[ 1031.045827][ T5788] Bluetooth: hci4: command 0x0406 tx timeout
[ 1031.636333][T15873] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1031.834093][T15873] usb 6-1: Using ep0 maxpacket: 32
[ 1031.889790][T15873] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1032.005539][T15873] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1032.161536][T15873] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1032.191610][T15873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1032.387877][T15873] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1032.413010][T15873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1032.424584][T15873] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1032.463843][T15873] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1032.625969][T15873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.636932][T15873] usb 6-1: config 0 descriptor??
[ 1032.947883][T15873] usb 6-1: USB disconnect, device number 32
[ 1034.276926][T15873] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1034.566666][T12772] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1034.613413][T12772] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1034.746237][T15873] usb 6-1: device not accepting address 33, error -71
[ 1035.146527][T15873] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1035.396472][T15873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1035.426442][T15873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1035.446685][T15873] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1035.458866][T15873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1035.477969][T15873] usb 6-1: config 0 descriptor??
[ 1035.912958][T15873] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0
[ 1035.934569][T15873] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0
[ 1035.953269][T15873] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0011/input/input25
[ 1036.003004][T15873] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[ 1036.124842][T15873] usb 6-1: USB disconnect, device number 34
[ 1036.262254][T16913] fido_id[16913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1039.036371][ T5789] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1039.238901][ T5789] usb 2-1: Using ep0 maxpacket: 32
[ 1039.256017][ T5789] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1039.279876][ T5789] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1039.299062][ T5789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1039.322212][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1039.355068][ T5789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1039.385432][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1039.408846][T15685] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1039.467811][ T5789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1039.487771][T15685] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1039.506881][ T5789] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1039.619307][ T5789] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1039.656500][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.702598][ T5789] usb 2-1: config 0 descriptor??
[ 1039.955452][ T5789] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1039.988818][ T5789] usb 2-1: USB disconnect, device number 42
[ 1040.011185][ T5789] usblp0: removed
[ 1040.589441][ T5789] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1040.906600][ T5789] usb 2-1: Using ep0 maxpacket: 32
[ 1040.946635][ T5789] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1041.040802][ T5789] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1041.171997][ T5789] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1041.251137][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1041.335790][ T5789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1041.352160][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1041.372096][ T5789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1041.384134][ T5789] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1041.415939][ T5789] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1041.425323][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1041.453805][ T5789] usb 2-1: config 0 descriptor??
[ 1042.342481][ T5789] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1042.402075][ T5789] usb 2-1: USB disconnect, device number 43
[ 1042.423903][ T5789] usblp0: removed
[ 1043.161791][    T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1043.422795][    T9] usb 3-1: Using ep0 maxpacket: 8
[ 1043.827417][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1043.837413][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1043.845839][    T9] usb 3-1: Product: syz
[ 1043.851535][    T9] usb 3-1: Manufacturer: syz
[ 1043.876398][    T9] usb 3-1: SerialNumber: syz
[ 1043.917289][    T9] usb 3-1: config 0 descriptor??
[ 1044.346365][    T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1045.485172][    T9] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[ 1045.497074][    T9] usb 3-1: USB disconnect, device number 36
[ 1045.570642][T15873] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[ 1045.877787][T15873] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1051.465642][T17071] overlayfs: statfs failed on './file0'
[ 1051.517410][T17078] mmap: syz.1.2951 (17078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1054.283908][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.290465][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.998449][   T10] block nbd1: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 330 seconds
[ 1055.290544][T15873] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[ 1055.333184][T15873] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1056.466732][T12772] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1056.543006][T17110] fido_id[17110]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1056.737939][T12772] usb 5-1: Using ep0 maxpacket: 16
[ 1056.765114][T12772] usb 5-1: config index 0 descriptor too short (expected 40342, got 159)
[ 1056.776558][T12772] usb 5-1: config 244 has too many interfaces: 92, using maximum allowed: 32
[ 1056.785571][T12772] usb 5-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.807937][T12772] usb 5-1: config 244 has 0 interfaces, different from the descriptor's value: 92
[ 1056.840516][T12772] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1056.854534][T12772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.865865][T12772] usb 5-1: Product: syz
[ 1056.873136][T12772] usb 5-1: Manufacturer: syz
[ 1056.891030][T12772] usb 5-1: SerialNumber: syz
[ 1057.138356][T12772] usb 5-1: USB disconnect, device number 35
[ 1057.243644][T17128] atomic_op ffff88807d35d198 conn xmit_atomic 0000000000000000
[ 1061.476858][ T5788] Bluetooth: hci3: command 0x0406 tx timeout
[ 1061.769343][T12772] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[ 1061.826673][T12772] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1062.744283][T17178] fido_id[17178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1064.976353][   T23] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 1065.036252][  T966] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1065.156194][   T23] usb 5-1: Using ep0 maxpacket: 16
[ 1065.169168][   T23] usb 5-1: config index 0 descriptor too short (expected 40342, got 159)
[ 1065.177776][   T23] usb 5-1: config 244 has too many interfaces: 92, using maximum allowed: 32
[ 1065.188169][   T23] usb 5-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.201305][   T23] usb 5-1: config 244 has 0 interfaces, different from the descriptor's value: 92
[ 1065.215105][   T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1065.231854][  T966] usb 2-1: Using ep0 maxpacket: 32
[ 1065.237836][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.255646][  T966] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1065.264380][  T966] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1065.273272][   T23] usb 5-1: Product: syz
[ 1065.278511][   T23] usb 5-1: Manufacturer: syz
[ 1065.283139][   T23] usb 5-1: SerialNumber: syz
[ 1065.294151][  T966] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1065.312226][  T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1065.331434][  T966] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1065.342114][  T966] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1065.355282][ T5865] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1065.363606][  T966] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1065.374492][  T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.394559][  T966] usb 2-1: config 0 descriptor??
[ 1065.546315][ T5865] usb 3-1: Using ep0 maxpacket: 8
[ 1065.563354][   T23] usb 5-1: USB disconnect, device number 36
[ 1065.581012][ T5865] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1065.612269][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.630861][  T966] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1065.644190][ T5865] usb 3-1: Product: syz
[ 1065.656321][ T5865] usb 3-1: Manufacturer: syz
[ 1065.666283][ T5865] usb 3-1: SerialNumber: syz
[ 1065.686919][ T5865] usb 3-1: config 0 descriptor??
[ 1065.692003][  T966] usb 2-1: USB disconnect, device number 44
[ 1065.707562][  T966] usblp0: removed
[ 1065.833477][   T27] audit: type=1326 audit(1757334822.589:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.1.2988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb32378ebe9 code=0x0
[ 1065.902235][ T5865] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1066.167303][T17226] overlayfs: failed to resolve './file4': -2
[ 1066.316587][ T5865] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[ 1066.340482][ T5865] usb 3-1: USB disconnect, device number 37
[ 1068.836519][T16050] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1069.846826][T16050] usb 5-1: Using ep0 maxpacket: 16
[ 1069.881752][T16050] usb 5-1: config index 0 descriptor too short (expected 40342, got 159)
[ 1069.929049][T16050] usb 5-1: config 244 has too many interfaces: 92, using maximum allowed: 32
[ 1069.955166][T16050] usb 5-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.984275][T16050] usb 5-1: config 244 has 0 interfaces, different from the descriptor's value: 92
[ 1070.024393][T16050] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1070.033809][T16050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.044292][T16050] usb 5-1: Product: syz
[ 1070.048905][T16050] usb 5-1: Manufacturer: syz
[ 1070.056920][T16050] usb 5-1: SerialNumber: syz
[ 1070.308154][ T5865] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1070.310237][T16050] usb 5-1: USB disconnect, device number 37
[ 1070.633571][ T5865] usb 2-1: Using ep0 maxpacket: 8
[ 1070.641904][ T5865] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1070.652252][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.660408][ T5865] usb 2-1: Product: syz
[ 1070.664581][ T5865] usb 2-1: Manufacturer: syz
[ 1070.674025][ T5865] usb 2-1: SerialNumber: syz
[ 1070.680855][ T5865] usb 2-1: config 0 descriptor??
[ 1070.893075][ T5865] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1071.142158][ T5865] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[ 1071.480381][T15873] usb 2-1: USB disconnect, device number 45
[ 1071.916355][ T5865] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1072.113314][ T5865] usb 3-1: Using ep0 maxpacket: 32
[ 1072.139903][ T5865] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1072.169681][ T5865] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1072.192031][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1072.203620][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1072.213864][ T5865] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1072.224979][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1072.238638][ T5865] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1072.248124][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.311420][ T5865] usb 3-1: config 0 descriptor??
[ 1072.560118][ T5865] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1072.607713][ T5865] usb 3-1: USB disconnect, device number 38
[ 1072.623729][ T5865] usblp0: removed
[ 1072.809918][   T27] audit: type=1326 audit(1757334829.569:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17278 comm="syz.2.3007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c9bb8ebe9 code=0x0
[ 1075.357570][T17320] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3018'.
[ 1076.926459][  T966] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1077.216298][  T966] usb 6-1: Using ep0 maxpacket: 8
[ 1077.259338][  T966] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1077.306569][  T966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.346567][  T966] usb 6-1: Product: syz
[ 1077.350810][  T966] usb 6-1: Manufacturer: syz
[ 1077.355436][  T966] usb 6-1: SerialNumber: syz
[ 1077.433699][  T966] usb 6-1: config 0 descriptor??
[ 1077.723438][  T966] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1077.906351][  T966] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32
[ 1077.933641][T17327] syz_tun (unregistering): left promiscuous mode
[ 1078.624705][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3024'.
[ 1079.229733][  T966] usb 6-1: USB disconnect, device number 35
[ 1079.437449][ T6640] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1080.855643][T17354] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3028'.
[ 1081.549915][ T6640] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1081.887576][ T6640] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1082.238965][ T6640] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1082.379297][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1082.394028][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1082.403062][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1082.413818][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1082.422900][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1082.432478][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1084.273937][T17367] chnl_net:caif_netlink_parms(): no params data found
[ 1084.517962][T10994] Bluetooth: hci0: command tx timeout
[ 1085.672448][   T10] block nbd1: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 360 seconds
[ 1085.905101][T17367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.914395][T17367] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.921798][T17367] bridge_slave_0: entered allmulticast mode
[ 1085.930338][T17367] bridge_slave_0: entered promiscuous mode
[ 1085.940058][T17367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1085.947362][T17367] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.954611][T17367] bridge_slave_1: entered allmulticast mode
[ 1085.963671][T17367] bridge_slave_1: entered promiscuous mode
[ 1086.599762][T10994] Bluetooth: hci0: command tx timeout
[ 1086.790957][T17367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1086.820734][T17367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1087.288266][T17367] team0: Port device team_slave_0 added
[ 1087.323633][T17367] team0: Port device team_slave_1 added
[ 1088.424547][T17367] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1088.450552][T17367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1088.526158][T17367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1088.568730][T17367] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1088.596532][T17367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1088.682309][T10994] Bluetooth: hci0: command tx timeout
[ 1088.683250][T17367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1088.772342][ T6640] batadv_slave_0: left promiscuous mode
[ 1088.833044][ T6640] hsr_slave_0: left promiscuous mode
[ 1088.876380][ T6640] hsr_slave_1: left promiscuous mode
[ 1088.935198][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1088.952279][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1088.973087][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1088.990831][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1089.055170][ T6640] bridge_slave_1: left allmulticast mode
[ 1089.071362][ T6640] bridge_slave_1: left promiscuous mode
[ 1089.108186][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.149314][ T6640] bridge_slave_0: left allmulticast mode
[ 1089.155179][ T6640] bridge_slave_0: left promiscuous mode
[ 1089.172238][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1089.310613][ T6640] veth1_macvtap: left promiscuous mode
[ 1089.336893][ T6640] veth0_macvtap: left promiscuous mode
[ 1089.363543][ T6640] veth1_vlan: left promiscuous mode
[ 1089.373582][ T6640] veth0_vlan: left promiscuous mode
[ 1090.846170][T10994] Bluetooth: hci0: command tx timeout
[ 1092.496392][T16050] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1092.595935][ T5865] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1092.709917][T16050] usb 5-1: Using ep0 maxpacket: 8
[ 1092.731050][T16050] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1092.741837][T16050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.752019][T16050] usb 5-1: Product: syz
[ 1092.756535][T16050] usb 5-1: Manufacturer: syz
[ 1092.761168][T16050] usb 5-1: SerialNumber: syz
[ 1092.786053][T16050] usb 5-1: config 0 descriptor??
[ 1092.807797][ T5865] usb 2-1: Using ep0 maxpacket: 16
[ 1092.841638][ T5865] usb 2-1: config index 0 descriptor too short (expected 40342, got 159)
[ 1092.851807][ T5865] usb 2-1: config 244 has too many interfaces: 92, using maximum allowed: 32
[ 1092.874769][ T5865] usb 2-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[ 1092.897838][ T5865] usb 2-1: config 244 has 0 interfaces, different from the descriptor's value: 92
[ 1092.953947][ T5865] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1092.963692][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.980644][ T5865] usb 2-1: Product: syz
[ 1092.984899][ T5865] usb 2-1: Manufacturer: syz
[ 1092.990754][ T5865] usb 2-1: SerialNumber: syz
[ 1092.991016][ T6640] team0 (unregistering): Port device team_slave_1 removed
[ 1093.006931][T16050] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1093.078864][ T6640] team0 (unregistering): Port device team_slave_0 removed
[ 1093.155090][ T6640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1093.242789][T16050] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[ 1093.257651][ T6640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1093.341681][ T5865] usb 2-1: USB disconnect, device number 46
[ 1093.980019][ T6640] bond0 (unregistering): Released all slaves
[ 1094.463654][T17367] hsr_slave_0: entered promiscuous mode
[ 1094.497464][T17367] hsr_slave_1: entered promiscuous mode
[ 1094.504430][T17367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1094.542817][T17367] Cannot create hsr debugfs directory
[ 1094.668592][   T55] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[ 1094.705899][   T55] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1095.005994][ T6640] IPVS: stop unused estimator thread 0...
[ 1095.113269][   T23] usb 5-1: USB disconnect, device number 38
[ 1096.002832][T17367] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1096.492436][T17367] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1096.663209][T17367] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1096.737911][T17367] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1097.093967][T17367] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1097.184456][T17367] 8021q: adding VLAN 0 to HW filter on device team0
[ 1097.255903][T16456] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1097.263235][T16456] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1097.361192][T16456] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1097.368518][T16456] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1098.210898][T17367] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1099.712779][T17367] veth0_vlan: entered promiscuous mode
[ 1099.818038][T17367] veth1_vlan: entered promiscuous mode
[ 1099.953116][T17367] veth0_macvtap: entered promiscuous mode
[ 1099.997399][T17367] veth1_macvtap: entered promiscuous mode
[ 1100.060527][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1100.106144][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.136352][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1100.155709][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.165952][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1100.182999][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.197684][T17367] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1100.241882][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1100.261836][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.275274][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1100.291964][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.304721][T17367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1100.339166][T17367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.361328][T17367] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1100.409348][T17367] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.433178][T17367] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.451831][T17367] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.466305][T17367] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1101.101033][   T55] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[ 1101.178894][T15595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1101.191121][   T55] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1101.226217][T15595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1101.373175][ T6633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1101.406339][ T6633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1101.946493][   T55] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1101.960929][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1101.977286][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1101.987113][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1101.996897][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1102.008596][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1102.015964][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1102.168222][   T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1102.192442][T15595] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.203953][   T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1102.226205][   T55] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1102.252012][   T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.287491][   T55] usb 7-1: config 0 descriptor??
[ 1102.470495][T15595] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.695354][T15595] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.898919][T15595] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.943504][   T55] usb 7-1: string descriptor 0 read error: -71
[ 1102.974576][   T55] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71
[ 1102.993968][   T55] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71
[ 1103.014605][   T55] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71
[ 1103.055741][   T55] uclogic 0003:256C:006D.0018: failed probing parameters: -71
[ 1103.076070][   T55] uclogic: probe of 0003:256C:006D.0018 failed with error -71
[ 1103.117099][   T55] usb 7-1: USB disconnect, device number 2
[ 1103.520338][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1103.541633][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1103.550749][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1103.561095][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1103.579057][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1103.586724][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1104.120082][T10994] Bluetooth: hci1: command tx timeout
[ 1104.644044][T17594] chnl_net:caif_netlink_parms(): no params data found
[ 1105.307165][T17594] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.314364][T17594] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1105.348873][T17594] bridge_slave_0: entered allmulticast mode
[ 1105.367307][T17594] bridge_slave_0: entered promiscuous mode
[ 1105.389400][T17594] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.416407][T17594] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.423706][T17594] bridge_slave_1: entered allmulticast mode
[ 1105.456410][T17594] bridge_slave_1: entered promiscuous mode
[ 1105.637499][T10994] Bluetooth: hci3: command tx timeout
[ 1105.777797][T17594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1105.817078][T17594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1106.074177][T17594] team0: Port device team_slave_0 added
[ 1106.197146][T10994] Bluetooth: hci1: command tx timeout
[ 1106.210081][T17594] team0: Port device team_slave_1 added
[ 1106.270207][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1106.295208][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1106.306927][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1106.341346][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1106.359604][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1106.381078][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1106.517719][T17594] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1106.539775][T17594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1106.578470][T17594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1106.595417][T17617] chnl_net:caif_netlink_parms(): no params data found
[ 1106.613738][T15595] hsr_slave_0: left promiscuous mode
[ 1106.621644][T15595] hsr_slave_1: left promiscuous mode
[ 1106.627539][T15595] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1106.634938][T15595] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1106.643075][T15595] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1106.650755][T15595] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1106.658890][T15595] bridge_slave_1: left allmulticast mode
[ 1106.664619][T15595] bridge_slave_1: left promiscuous mode
[ 1106.670868][T15595] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1106.679142][T15595] bridge_slave_0: left allmulticast mode
[ 1106.684832][T15595] bridge_slave_0: left promiscuous mode
[ 1106.690835][T15595] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.719145][T15595] veth1_macvtap: left promiscuous mode
[ 1106.724707][T15595] veth0_macvtap: left promiscuous mode
[ 1106.730687][T15595] veth1_vlan: left promiscuous mode
[ 1106.740417][T15595] veth0_vlan: left promiscuous mode
[ 1107.173832][ T5865] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1107.371188][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1107.389609][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1107.403273][ T5865] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1107.426231][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.454687][ T5865] usb 7-1: config 0 descriptor??
[ 1107.561470][T15595] team0 (unregistering): Port device team_slave_1 removed
[ 1107.635053][T15595] team0 (unregistering): Port device team_slave_0 removed
[ 1107.707560][T15595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1107.717913][T10994] Bluetooth: hci3: command tx timeout
[ 1107.788043][T15595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1108.107440][ T5865] usb 7-1: string descriptor 0 read error: -71
[ 1108.123532][ T5865] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71
[ 1108.133525][ T5865] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71
[ 1108.150628][ T5865] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71
[ 1108.161684][ T5865] uclogic 0003:256C:006D.0019: failed probing parameters: -71
[ 1108.169973][ T5865] uclogic: probe of 0003:256C:006D.0019 failed with error -71
[ 1108.191265][ T5865] usb 7-1: USB disconnect, device number 3
[ 1108.282968][T10994] Bluetooth: hci1: command tx timeout
[ 1108.528977][T10994] Bluetooth: hci2: command tx timeout
[ 1108.573249][T15595] bond0 (unregistering): Released all slaves
[ 1108.667110][T17594] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1108.676382][T17594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1108.719854][T17594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1109.027889][T17594] hsr_slave_0: entered promiscuous mode
[ 1109.037783][T17594] hsr_slave_1: entered promiscuous mode
[ 1109.056297][T17594] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1109.077637][T17594] Cannot create hsr debugfs directory
[ 1109.298095][T17617] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1109.305286][T17617] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1109.326386][T17617] bridge_slave_0: entered allmulticast mode
[ 1109.333937][T17617] bridge_slave_0: entered promiscuous mode
[ 1109.402653][T17617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1109.412046][T15595] IPVS: stop unused estimator thread 0...
[ 1109.419799][T17617] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1109.427692][T17617] bridge_slave_1: entered allmulticast mode
[ 1109.435132][T17617] bridge_slave_1: entered promiscuous mode
[ 1109.515704][T17617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1109.611774][T17617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1109.749685][T17617] team0: Port device team_slave_0 added
[ 1109.806484][T10994] Bluetooth: hci3: command tx timeout
[ 1109.882587][T15595] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.988001][T17617] team0: Port device team_slave_1 added
[ 1110.132858][T15595] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.312909][T15595] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.333755][T17617] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1110.340872][T17617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1110.367362][T17617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1110.378140][T10994] Bluetooth: hci1: command tx timeout
[ 1110.428396][T15595] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.463647][T17617] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1110.474789][T17617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1110.510259][T17617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1110.540709][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1110.566667][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1110.575668][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1110.593671][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1110.601507][ T5788] Bluetooth: hci2: command tx timeout
[ 1110.609444][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1110.620141][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1110.684617][T17594] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1110.700233][T17594] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1110.721880][T17617] hsr_slave_0: entered promiscuous mode
[ 1110.730510][T17617] hsr_slave_1: entered promiscuous mode
[ 1110.736774][T17617] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1110.744404][T17617] Cannot create hsr debugfs directory
[ 1110.778897][T17594] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1110.800568][T17594] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1110.904529][T17663] chnl_net:caif_netlink_parms(): no params data found
[ 1111.164209][T17663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1111.174472][T17663] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1111.182129][T17663] bridge_slave_0: entered allmulticast mode
[ 1111.191062][T17663] bridge_slave_0: entered promiscuous mode
[ 1111.227880][T17663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1111.234953][T17663] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1111.243796][T17663] bridge_slave_1: entered allmulticast mode
[ 1111.251627][T17663] bridge_slave_1: entered promiscuous mode
[ 1111.345743][T17663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1111.368363][T17663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1111.513551][T17663] team0: Port device team_slave_0 added
[ 1111.584723][T17663] team0: Port device team_slave_1 added
[ 1111.700527][T17663] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1111.717577][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1111.753739][T17663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1111.771952][T17617] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1111.793017][T17617] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1111.840099][T17663] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1111.855861][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1111.885933][ T5788] Bluetooth: hci3: command tx timeout
[ 1111.913695][T17663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1111.951439][T17617] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1111.972704][T17594] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1111.988628][T17617] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1112.050285][T17663] hsr_slave_0: entered promiscuous mode
[ 1112.056721][T17663] hsr_slave_1: entered promiscuous mode
[ 1112.062727][T17663] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1112.072025][T17663] Cannot create hsr debugfs directory
[ 1112.234934][T17594] 8021q: adding VLAN 0 to HW filter on device team0
[ 1112.307708][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.314865][ T6656] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1112.337211][T17694] chnl_net:caif_netlink_parms(): no params data found
[ 1112.416787][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1112.423943][ T6656] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1112.689573][ T5788] Bluetooth: hci0: command tx timeout
[ 1112.695829][ T5788] Bluetooth: hci2: command tx timeout
[ 1112.759277][T17694] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.776797][T17694] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1112.784119][T17694] bridge_slave_0: entered allmulticast mode
[ 1112.814834][T17694] bridge_slave_0: entered promiscuous mode
[ 1112.827211][T17694] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1112.834400][T17694] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1112.862592][T17694] bridge_slave_1: entered allmulticast mode
[ 1112.878037][T17694] bridge_slave_1: entered promiscuous mode
[ 1113.023244][T17694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1113.042014][T17694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1113.066645][T17663] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1113.080119][T17594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1113.118973][T17694] team0: Port device team_slave_0 added
[ 1113.135849][T17663] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1113.193391][T17694] team0: Port device team_slave_1 added
[ 1113.239640][T17663] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1113.258219][T17663] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1113.325271][T17617] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1113.433330][T15595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1113.462034][T17694] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1113.469584][T17694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1113.496624][T17694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1113.512037][T17694] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1113.523892][T17694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1113.550078][T17694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1113.589282][T15595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1113.705052][T15595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1113.725909][T17617] 8021q: adding VLAN 0 to HW filter on device team0
[ 1113.744125][T17694] hsr_slave_0: entered promiscuous mode
[ 1113.751588][T17694] hsr_slave_1: entered promiscuous mode
[ 1113.760590][T17694] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1113.770092][T17694] Cannot create hsr debugfs directory
[ 1113.799989][T15595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1113.834008][T17594] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1113.960641][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1113.967905][ T6636] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1113.997594][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1114.004857][ T6636] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1114.460687][T17663] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1114.627364][T17663] 8021q: adding VLAN 0 to HW filter on device team0
[ 1114.757096][ T5788] Bluetooth: hci2: command tx timeout
[ 1114.762577][T10994] Bluetooth: hci0: command tx timeout
[ 1115.118370][T16456] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1115.125530][T16456] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1115.243419][ T6640] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1115.250657][ T6640] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1115.530482][T17617] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1115.645865][T17594] veth0_vlan: entered promiscuous mode
[ 1115.724428][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.733671][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.746794][   T10] block nbd1: Possible stuck request ffff888021b60000: control (read@0,1024B). Runtime 390 seconds
[ 1115.806051][T17594] veth1_vlan: entered promiscuous mode
[ 1115.963860][T17663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1116.121752][T17594] veth0_macvtap: entered promiscuous mode
[ 1116.294207][T17594] veth1_macvtap: entered promiscuous mode
[ 1116.472760][T17594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1116.491152][T17594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.502360][T17594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1116.514761][T17594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.527190][T17594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1116.538175][T17594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.549972][T17594] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1116.563250][T17594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1116.573746][T17594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.585684][T17594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1116.597696][T17594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.610746][T17594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1116.621475][T17594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.633378][T17594] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1116.646563][T17594] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.655375][T17594] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.664240][T17594] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.673103][T17594] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.840912][T10994] Bluetooth: hci0: command tx timeout
[ 1116.879464][T17617] veth0_vlan: entered promiscuous mode
[ 1116.945171][T17663] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1117.165353][T17617] veth1_vlan: entered promiscuous mode
[ 1117.521392][T17617] veth0_macvtap: entered promiscuous mode
[ 1117.579553][T17617] veth1_macvtap: entered promiscuous mode
[ 1117.620188][T16456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1117.673312][T16456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1117.682511][T17617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.736652][T17617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.766838][T17617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.804507][T17617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.815562][T17617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.858668][T17617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.876694][T17617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1117.905367][T17617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1117.928982][T17617] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1118.070782][T17617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.106198][T17617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.126610][T17617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.154990][T17617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.170228][T17617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.181416][T17617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.206300][T17617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1118.227331][T17617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1118.247965][T17617] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1118.328144][T15595] hsr_slave_0: left promiscuous mode
[ 1118.334365][T15595] hsr_slave_1: left promiscuous mode
[ 1118.351240][T15595] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1118.366046][T15595] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1118.377562][T15595] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1118.385680][T15595] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1118.394089][T15595] bridge_slave_1: left allmulticast mode
[ 1118.399959][T15595] bridge_slave_1: left promiscuous mode
[ 1118.405621][T15595] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1118.417476][T15595] bridge_slave_0: left allmulticast mode
[ 1118.423134][T15595] bridge_slave_0: left promiscuous mode
[ 1118.429710][T15595] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1118.446457][T15595] hsr_slave_0: left promiscuous mode
[ 1118.452269][T15595] hsr_slave_1: left promiscuous mode
[ 1118.459788][T15595] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1118.467361][T15595] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1118.475077][T15595] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1118.483617][T15595] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1118.491591][T15595] bridge_slave_1: left allmulticast mode
[ 1118.497657][T15595] bridge_slave_1: left promiscuous mode
[ 1118.503315][T15595] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1118.511989][T15595] bridge_slave_0: left allmulticast mode
[ 1118.518545][T15595] bridge_slave_0: left promiscuous mode
[ 1118.524307][T15595] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1118.572953][T15595] veth1_macvtap: left promiscuous mode
[ 1118.578810][T15595] veth0_macvtap: left promiscuous mode
[ 1118.584454][T15595] veth1_vlan: left promiscuous mode
[ 1118.591199][T15595] veth0_vlan: left promiscuous mode
[ 1118.598948][T15595] veth1_macvtap: left promiscuous mode
[ 1118.604464][T15595] veth0_macvtap: left promiscuous mode
[ 1118.610478][T15595] veth1_vlan: left promiscuous mode
[ 1118.615742][T15595] veth0_vlan: left promiscuous mode
[ 1118.916807][T10994] Bluetooth: hci0: command tx timeout
[ 1119.363986][T15595] team0 (unregistering): Port device team_slave_1 removed
[ 1119.420773][T15595] team0 (unregistering): Port device team_slave_0 removed
[ 1119.476949][T15595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1119.527700][T15595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1120.186595][T15595] bond0 (unregistering): Released all slaves
[ 1120.821267][T15595] team0 (unregistering): Port device team_slave_1 removed
[ 1121.017276][T15595] team0 (unregistering): Port device team_slave_0 removed
[ 1121.168539][T15595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1121.297759][T15595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1122.024327][T15595] bond0 (unregistering): Released all slaves
[ 1122.131683][T17617] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1122.144518][T17617] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1122.153361][T17617] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1122.162971][T17617] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1122.324507][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1122.375361][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1122.547550][T17694] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1122.576049][T17694] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1122.673857][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1122.692600][T17663] veth0_vlan: entered promiscuous mode
[ 1122.697755][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1122.713100][T17694] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1122.753832][T17694] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1122.826612][T17663] veth1_vlan: entered promiscuous mode
[ 1122.949675][ T6640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1122.996138][ T6640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1123.115206][T17663] veth0_macvtap: entered promiscuous mode
[ 1123.163739][T17663] veth1_macvtap: entered promiscuous mode
[ 1123.891615][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1123.926649][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1123.948924][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1123.978871][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1123.994569][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1124.020781][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1124.062236][T17663] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1124.131268][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1124.165876][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1124.218829][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1124.235548][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1124.254108][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1124.264685][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1124.286794][T17663] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1124.332822][T17663] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.356753][T17663] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.365490][T17663] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.396190][T17663] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.459023][ T5865] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1124.561993][T17694] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1124.597212][T16456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1124.605084][T16456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1124.624243][T17694] 8021q: adding VLAN 0 to HW filter on device team0
[ 1124.671874][ T6640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1124.694421][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1124.700084][ T6640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1124.708480][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1124.719817][ T6656] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1124.729836][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1124.741574][ T5865] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1124.763594][T16456] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1124.770807][T16456] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1124.778375][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1124.797071][ T5865] usb 9-1: config 0 descriptor??
[ 1125.170224][  T966] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[ 1125.242360][  T966] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1125.406946][T15873] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1125.448567][ T5865] usb 9-1: string descriptor 0 read error: -71
[ 1125.487115][ T5865] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #200: -71
[ 1125.496009][ T5865] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71
[ 1125.554422][ T5865] uclogic 0003:256C:006D.001B: failed probing pen v2 parameters: -71
[ 1125.580599][ T5865] uclogic 0003:256C:006D.001B: failed probing parameters: -71
[ 1125.596459][ T5865] uclogic: probe of 0003:256C:006D.001B failed with error -71
[ 1125.618533][ T5865] usb 9-1: USB disconnect, device number 2
[ 1125.627818][T15873] usb 8-1: Using ep0 maxpacket: 32
[ 1125.634640][T17694] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1125.659521][T15873] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1125.687638][T15873] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1125.713980][T15873] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1125.736767][T15873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1125.770591][T15873] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1125.810381][T17694] veth0_vlan: entered promiscuous mode
[ 1125.819885][T15873] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1125.833714][T17694] veth1_vlan: entered promiscuous mode
[ 1125.834284][T15873] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1125.850755][T15873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.870916][T15873] usb 8-1: config 0 descriptor??
[ 1125.919006][T17694] veth0_macvtap: entered promiscuous mode
[ 1125.931313][T17694] veth1_macvtap: entered promiscuous mode
[ 1125.963864][T17694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1125.995189][T17694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.045760][T17694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.066146][T17694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.076021][T17694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.106521][T15873] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1126.108808][T17694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.140616][T15873] usb 8-1: USB disconnect, device number 2
[ 1126.169954][T15873] usblp0: removed
[ 1126.176673][T17694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1126.189518][T17694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.218235][T17694] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1126.240513][T17694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1126.260173][T17694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.283188][T17694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1126.304727][T17694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.322913][T17694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1126.336223][T17694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.346878][T17694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1126.360237][T17694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1126.373330][T17694] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1126.394065][ T5865] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[ 1126.405542][T17694] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1126.417327][T17694] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1126.428552][T17694] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1126.439517][T17694] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1126.607590][ T5865] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1126.633977][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1126.645512][ T5865] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1126.662898][ T5865] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1126.663573][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1126.673689][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.681640][T15873] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1126.711084][ T5865] usb 9-1: config 0 descriptor??
[ 1126.743909][ T5865] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1126.763582][ T5865] dvb-usb: bulk message failed: -22 (3/0)
[ 1126.807086][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1126.829283][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1126.862893][ T5865] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1126.889993][ T5865] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1126.896552][T15873] usb 8-1: Using ep0 maxpacket: 32
[ 1126.911956][ T5865] usb 9-1: media controller created
[ 1126.937005][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1126.966979][T15873] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1126.994598][T15873] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1126.994722][T17868] dvb-usb: bulk message failed: -22 (2/0)
[ 1127.028317][T15873] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1127.075710][ T5865] dvb-usb: bulk message failed: -22 (6/0)
[ 1127.077501][T15873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1127.107159][T15873] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1127.136529][ T5865] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1127.146035][T15873] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1127.195766][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input26
[ 1127.218078][T15873] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1127.249780][T15873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.270386][ T5865] dvb-usb: schedule remote query interval to 150 msecs.
[ 1127.302512][T15873] usb 8-1: config 0 descriptor??
[ 1127.316722][ T5865] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1127.386830][ T5865] usb 9-1: USB disconnect, device number 3
[ 1127.493188][ T5865] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1127.555992][T15873] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1127.806681][   T27] audit: type=1326 audit(1757334884.539:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17859 comm="syz.7.3090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff63f8ebe9 code=0x0
[ 1127.844090][T15873] usb 8-1: USB disconnect, device number 3
[ 1127.865451][T15873] usblp0: removed
[ 1130.140551][   T27] audit: type=1800 audit(1757334886.899:34): pid=17904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3096" name="bus" dev="overlay" ino=47 res=0 errno=0
[ 1133.176239][  T966] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1133.467150][  T966] usb 9-1: Using ep0 maxpacket: 32
[ 1133.592027][  T966] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1133.601591][  T966] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1133.669414][  T966] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1133.738985][  T966] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1133.750896][  T966] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1133.786199][  T966] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1133.836500][  T966] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1133.901888][  T966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1133.965391][  T966] usb 9-1: config 0 descriptor??
[ 1134.277713][   T29] INFO: task udevd:7282 blocked for more than 144 seconds.
[ 1134.291650][   T29]       Not tainted syzkaller #0
[ 1134.316376][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1134.358034][   T29] task:udevd           state:D stack:23144 pid:7282  ppid:5157   flags:0x00004006
[ 1134.534931][  T966] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1134.550216][  T966] usb 9-1: USB disconnect, device number 4
[ 1134.607904][  T966] usblp0: removed
[ 1134.614908][   T29] Call Trace:
[ 1134.618884][   T29]  <TASK>
[ 1134.621881][   T29]  __schedule+0x14d2/0x44d0
[ 1134.633948][   T29]  ? asan.module_dtor+0x20/0x20
[ 1134.646158][   T29]  ? mark_lock+0x94/0x320
[ 1134.650574][   T29]  ? lock_chain_count+0x20/0x20
[ 1134.686295][   T29]  ? _raw_spin_lock_irq+0xaf/0xe0
[ 1134.691433][   T29]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 1134.711976][   T29]  schedule+0xbd/0x170
[ 1134.722824][   T29]  io_schedule+0x80/0xd0
[ 1134.727240][   T29]  folio_wait_bit_common+0x6eb/0xf70
[ 1134.732598][   T29]  ? folio_wait_bit+0x30/0x30
[ 1134.737570][   T29]  ? _compound_head+0x120/0x120
[ 1134.742491][   T29]  ? filemap_add_folio+0x192/0x3c0
[ 1134.755520][   T29]  ? __filemap_get_folio+0x70a/0xbc0
[ 1134.774741][   T29]  ? blkdev_writepage+0x30/0x30
[ 1134.782364][   T29]  do_read_cache_folio+0x1c0/0x7e0
[ 1134.794851][   T29]  ? blkdev_writepage+0x30/0x30
[ 1134.801829][   T29]  read_part_sector+0xd2/0x350
[ 1134.860281][   T29]  adfspart_check_POWERTEC+0x8d/0xf00
[ 1134.865754][   T29]  ? adfspart_check_ADFS+0x660/0x660
[ 1134.937268][   T29]  ? put_partition+0x350/0x350
[ 1134.942147][   T29]  ? alloc_pages+0x4dc/0x740
[ 1134.966944][   T29]  bdev_disk_changed+0x73a/0x1410
[ 1134.972067][   T29]  ? bdev_resize_partition+0xf0/0xf0
[ 1135.005921][   T29]  ? iput+0x347/0x920
[ 1135.010259][  T966] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1135.024555][   T29]  blkdev_get_whole+0x30d/0x390
[ 1135.029800][   T29]  blkdev_get_by_dev+0x279/0x600
[ 1135.034895][   T29]  blkdev_open+0x152/0x360
[ 1135.039470][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[ 1135.044176][   T29]  do_dentry_open+0x8c6/0x1500
[ 1135.049131][   T29]  path_openat+0x274b/0x3190
[ 1135.053911][   T29]  ? __kasan_slab_alloc+0x6c/0x80
[ 1135.059255][   T29]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1135.066546][   T29]  ? verify_lock_unused+0x140/0x140
[ 1135.071833][   T29]  ? do_filp_open+0x3d0/0x3d0
[ 1135.077372][   T29]  ? __virt_addr_valid+0x18c/0x540
[ 1135.082999][   T29]  do_filp_open+0x1c5/0x3d0
[ 1135.106184][   T29]  ? vfs_tmpfile+0x490/0x490
[ 1135.110939][   T29]  ? _raw_spin_unlock+0x28/0x40
[ 1135.129968][   T29]  ? alloc_fd+0x58f/0x630
[ 1135.134452][   T29]  do_sys_openat2+0x12c/0x1c0
[ 1135.140300][   T29]  ? do_sys_open+0xe0/0xe0
[ 1135.144840][   T29]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 1135.150967][   T29]  ? lock_chain_count+0x20/0x20
[ 1135.155889][   T29]  __x64_sys_openat+0x139/0x160
[ 1135.161014][   T29]  do_syscall_64+0x55/0xb0
[ 1135.166444][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1135.171201][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1135.175943][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1135.185270][   T29] RIP: 0033:0x7f1f0f0a7407
[ 1135.190114][   T29] RSP: 002b:00007ffe6d7ec490 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1135.198847][   T29] RAX: ffffffffffffffda RBX: 00007f1f0f766880 RCX: 00007f1f0f0a7407
[ 1135.206967][   T29] RDX: 00000000000a0800 RSI: 00005585cc886280 RDI: ffffffffffffff9c
[ 1135.215012][   T29] RBP: 00005585cc885910 R08: 0000000000000000 R09: 0000000000000000
[ 1135.223485][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005585cc8a2f10
[ 1135.231704][   T29] R13: 00005585cc89d410 R14: 0000000000000000 R15: 00005585cc8a2f10
[ 1135.256309][   T29]  </TASK>
[ 1135.276417][   T29] 
[ 1135.276417][   T29] Showing all locks held in the system:
[ 1135.284237][   T29] 1 lock held by khungtaskd/29:
[ 1135.303335][   T29]  #0: ffffffff8cd2fc20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1135.338595][   T29] 5 locks held by kworker/1:2/966:
[ 1135.343817][   T29]  #0: ffff88814767ed38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 1135.366196][   T29]  #1: ffffc90004647d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 1135.396124][   T29]  #2: ffff888024d67190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x49c0
[ 1135.405207][   T29]  #3: ffff88805f04c508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x21ab/0x49c0
[ 1135.436194][   T29]  #4: ffff888024cf6d68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x21d3/0x49c0
[ 1135.456228][   T29] 2 locks held by getty/5547:
[ 1135.461022][   T29]  #0: ffff88814ca920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1135.486140][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380
[ 1135.526919][   T29] 1 lock held by udevd/7282:
[ 1135.531583][   T29]  #0: ffff888021a6a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[ 1135.584992][   T29] 2 locks held by dhcpcd/7345:
[ 1135.590102][   T29]  #0: ffff88805e153220 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x9b/0x230
[ 1135.616120][   T29]  #1: ffffffff8cd35bf8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830
[ 1135.646194][   T29] 2 locks held by kworker/0:3/10885:
[ 1135.651572][   T29]  #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 1135.665429][   T29]  #1: ffffc90003c1fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 1135.696182][   T29] 4 locks held by syz-executor/17663:
[ 1135.701620][   T29]  #0: ffff888022620e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x510
[ 1135.716715][   T29]  #1: ffff8880226200b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0
[ 1135.737064][   T29]  #2: ffffffff8e129c08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220
[ 1135.753774][   T29]  #3: ffff888079ffbb38 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660
[ 1135.763561][   T29] 3 locks held by syz-executor/17694:
[ 1135.776234][   T29]  #0: ffff88807df9ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x510
[ 1135.802362][   T29]  #1: ffff88807df9c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0
[ 1135.816283][   T29]  #2: ffffffff8e129c08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220
[ 1135.833578][   T29] 2 locks held by kworker/1:7/17856:
[ 1135.844632][   T29]  #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 1135.863934][   T29]  #1: ffffc90003747d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 1135.874838][   T29] 1 lock held by syz.9.3106/17949:
[ 1135.893396][   T29]  #0: ffffffff8cd35bf8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830
[ 1135.915749][   T29] 1 lock held by cmp/17971:
[ 1135.966292][   T29] 
[ 1135.968690][   T29] =============================================
[ 1135.968690][   T29] 
[ 1136.034395][   T29] NMI backtrace for cpu 0
[ 1136.038802][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1136.046023][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1136.056111][   T29] Call Trace:
[ 1136.059412][   T29]  <TASK>
[ 1136.062369][   T29]  dump_stack_lvl+0x16c/0x230
[ 1136.067088][   T29]  ? show_regs_print_info+0x20/0x20
[ 1136.072316][   T29]  ? load_image+0x3b0/0x3b0
[ 1136.076863][   T29]  nmi_cpu_backtrace+0x39b/0x3d0
[ 1136.081833][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1136.088022][   T29]  ? _printk+0xd0/0x110
[ 1136.092203][   T29]  ? load_image+0x3b0/0x3b0
[ 1136.096736][   T29]  ? load_image+0x3b0/0x3b0
[ 1136.101270][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1136.107386][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1136.113415][   T29]  watchdog+0xf41/0xf80
[ 1136.117606][   T29]  ? watchdog+0x1e1/0xf80
[ 1136.121949][   T29]  kthread+0x2fa/0x390
[ 1136.126026][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1136.131059][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1136.135664][   T29]  ret_from_fork+0x48/0x80
[ 1136.140095][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1136.144696][   T29]  ret_from_fork_asm+0x11/0x20
[ 1136.149774][   T29]  </TASK>
[ 1136.154609][   T29] Sending NMI from CPU 0 to CPUs 1:
[ 1136.160064][    C1] NMI backtrace for cpu 1
[ 1136.160076][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 1136.160091][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1136.160099][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1136.160126][    C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 27 3a 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
[ 1136.160139][    C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6
[ 1136.160153][    C1] RAX: 2cfbb4cd63fac000 RBX: ffffffff8161923b RCX: 2cfbb4cd63fac000
[ 1136.160166][    C1] RDX: 0000000000000001 RSI: ffffffff8aaabaa0 RDI: ffffffff8afc70c0
[ 1136.160176][    C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9
[ 1136.160187][    C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a9128
[ 1136.160198][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780
[ 1136.160208][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1136.160221][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1136.160232][    C1] CR2: 00005638371d3950 CR3: 0000000063fde000 CR4: 00000000003506e0
[ 1136.160247][    C1] Call Trace:
[ 1136.160253][    C1]  <TASK>
[ 1136.160259][    C1]  default_idle+0x13/0x20
[ 1136.160273][    C1]  default_idle_call+0x6c/0xa0
[ 1136.160287][    C1]  do_idle+0x1eb/0x510
[ 1136.160307][    C1]  ? idle_inject_timer_fn+0x60/0x60
[ 1136.160322][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 1136.160342][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1136.160364][    C1]  cpu_startup_entry+0x43/0x60
[ 1136.160381][    C1]  start_secondary+0xee/0xf0
[ 1136.160396][    C1]  secondary_startup_64_no_verify+0x179/0x17b
[ 1136.160423][    C1]  </TASK>
[ 1136.461864][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1136.468878][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1136.476108][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1136.486203][   T29] Call Trace:
[ 1136.489507][   T29]  <TASK>
[ 1136.492460][   T29]  dump_stack_lvl+0x16c/0x230
[ 1136.497450][   T29]  ? show_regs_print_info+0x20/0x20
[ 1136.502702][   T29]  ? load_image+0x3b0/0x3b0
[ 1136.507263][   T29]  panic+0x2c0/0x710
[ 1136.511217][   T29]  ? schedule_preempt_disabled+0x20/0x20
[ 1136.516888][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1136.521424][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1136.526999][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1136.533172][   T29]  watchdog+0xf80/0xf80
[ 1136.537342][   T29]  ? watchdog+0x1e1/0xf80
[ 1136.541681][   T29]  kthread+0x2fa/0x390
[ 1136.545757][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1136.550807][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1136.555491][   T29]  ret_from_fork+0x48/0x80
[ 1136.559912][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1136.564508][   T29]  ret_from_fork_asm+0x11/0x20
[ 1136.569312][   T29]  </TASK>
[ 1136.572570][   T29] Kernel Offset: disabled
[ 1136.576904][   T29] Rebooting in 86400 seconds..