last executing test programs:

31m57.244107188s ago: executing program 32 (id=167):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000001940)=[{0x0}, {0x0}, {&(0x7f0000000600)="33137441c88924315f4965dc979fa834e28ea8a16090f166281516ed19fa4b", 0x1f}, {&(0x7f0000000640)="3143a874331cda10c8ed8d6c95", 0xd}, {0x0}, {&(0x7f0000000780)="80284bba555cada67e7eaaf8194abe84f848cbd2574a19da0f980ac035d7d04e4dfabfceed3c1632710b6a270a53ddd114d3eb37183041a4222279924e8e85e73faac9b5a422edeb75c79570c2ea2656e2219a598f5dbc3d46b54ad0128ec3e1dce06a0f7d464090a85675241e4dc8375541ff61c13f58035cc540a965552e7b88a04381", 0x84}, {0x0}, {0x0}], 0x8, &(0x7f0000001a00)}}, {{&(0x7f0000001d80)={0xa, 0x4e23, 0xa, @empty, 0xfff}, 0x1c, &(0x7f0000002000)=[{&(0x7f0000001dc0)="5725b30b6c894052b8b1f3b0fee959f3726c7dba788bad2cdf", 0x19}, {&(0x7f0000001e40)="e486c2c2b7f69a376d3f1ab713", 0xd}], 0x2, &(0x7f0000002080)}}], 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000a40)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
ftruncate(0xffffffffffffffff, 0x2007ffc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = io_uring_setup(0x3ca9, 0x0)
io_uring_enter(r2, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

29m18.185917378s ago: executing program 33 (id=440):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setresgid(0xee00, 0x0, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
epoll_create1(0x80000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xe2c081, 0x0)
pselect6(0x40, &(0x7f00000003c0)={0x5, 0xfffffffffffffa0a, 0x9, 0x1, 0x6, 0x7, 0xfffffffeffffffff, 0xf6}, &(0x7f0000000400)={0x9, 0xa8c, 0x2, 0x1, 0x4, 0x7f, 0xfff, 0x4}, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x14000000, 0x7a, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x9, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xe, 0x6]})
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x34, 0x0, 0x1, 0x80000000})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = syz_open_procfs(r3, &(0x7f00000000c0)='io\x00')
pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x2)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="10100000200800001c0012800e00010069703665727370616e0000000800028004001200080003", @ANYRES32, @ANYBLOB='\b\x00:'], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000d0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000040), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)

27m6.245784756s ago: executing program 34 (id=721):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
mmap(&(0x7f000068e000/0x8000)=nil, 0x8000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

24m37.725568154s ago: executing program 7 (id=1085):
clock_adjtime(0x0, &(0x7f0000000000)={0x20000066b9, 0x200000000, 0x3, 0x6, 0x0, 0xffffffffffffffff, 0x78, 0x1000000000004, 0x0, 0x4, 0x0, 0x248a, 0x1, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x400000002, 0x2, 0x1000000000000000, 0x8000, 0x8})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
wait4(0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
pread64(r2, &(0x7f0000000080)=""/162, 0xa2, 0x9)
listen(0xffffffffffffffff, 0x39b3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8)
sched_getscheduler(0xffffffffffffffff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045515, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001d600)=ANY=[@ANYBLOB="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"], 0x77e4}, 0x1, 0x0, 0x0, 0x4004041}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000068000100430000000000008000000000000000002400020001"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x100440c0)

24m33.444416701s ago: executing program 7 (id=1091):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

24m33.008269653s ago: executing program 7 (id=1094):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8)

24m31.290836394s ago: executing program 7 (id=1097):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x4000, 0x13090, 0x2, 0x29}, 0x0, 0x0, &(0x7f0000000000))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xffffefff}, {0x6, 0x0, 0xff}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840)

24m14.619185996s ago: executing program 35 (id=1097):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x4000, 0x13090, 0x2, 0x29}, 0x0, 0x0, &(0x7f0000000000))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x4d, 0xffffefff}, {0x6, 0x0, 0xff}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840)

23m28.329026584s ago: executing program 3 (id=1224):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getpid()
mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x208010, 0x0)
setns(0xffffffffffffffff, 0x24020000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000206, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x1c, 0x2, 0x0, "11010100111400000100b64cd11e005c4b7c1500"})

23m27.182592158s ago: executing program 3 (id=1227):
socket$inet6(0xa, 0x80002, 0x0)
r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @raw32={[0x0, 0x0, 0x400000]}}], 0x1c)
r3 = io_uring_setup(0x7, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000003c0)={'wlan0\x00', {0x2, 0x4e24, @multicast2}})
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
recvmmsg$unix(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000003800)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)}}, {{0x0, 0x0, &(0x7f0000001dc0)}}, {{&(0x7f0000001e00)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x48}}], 0x5, 0xc28e3011ed15438f, &(0x7f0000002580))
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')

23m26.09350483s ago: executing program 3 (id=1229):
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0)
write$vhost_msg_v2(r2, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
write$vhost_msg_v2(r2, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000180)=""/123, 0x7b, 0x0, 0x1, 0x2}}, 0x48)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x9e)
r4 = syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/config\x00')
read$FUSE(r4, &(0x7f0000002240)={0x2020}, 0x2020)

23m19.616062682s ago: executing program 3 (id=1245):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x10b8}, 0x106)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000180), 0x65e, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
close(r0)
rt_sigpending(0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
mkdir(&(0x7f0000000040)='./file0\x00', 0xf9f778d492f23f3b)
r4 = socket(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c)
getsockopt$sock_buf(r4, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

23m17.773661406s ago: executing program 3 (id=1251):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r0, 0x5452, 0x0)
listen(r0, 0x28)
shutdown(r0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0)

23m15.776417935s ago: executing program 3 (id=1253):
r0 = dup(0xffffffffffffffff)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)="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", 0x1000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="984a807b9e9f3f6ba689efca3234871daadcf839ae213aa3cc585b406880a8e994e83532d52da85d755f52f5ea6ef2b8f0c62dbe599eb273ce4cd736b4255935bd2918e784c71ab3a888369633742d0d715f2324352271d60d8edc844880df2139ac1716a564bb2b9914a20fd0de80129b77b67eefa7d32091de9ecd77bf5811defbc9eabd6b75785ed5f3a8", 0x8c)
r3 = accept4(r2, 0x0, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000001c0)={0x0, 0xfffffc01})

22m59.097198868s ago: executing program 36 (id=1253):
r0 = dup(0xffffffffffffffff)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)="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", 0x1000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="984a807b9e9f3f6ba689efca3234871daadcf839ae213aa3cc585b406880a8e994e83532d52da85d755f52f5ea6ef2b8f0c62dbe599eb273ce4cd736b4255935bd2918e784c71ab3a888369633742d0d715f2324352271d60d8edc844880df2139ac1716a564bb2b9914a20fd0de80129b77b67eefa7d32091de9ecd77bf5811defbc9eabd6b75785ed5f3a8", 0x8c)
r3 = accept4(r2, 0x0, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000ac0)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000001c0)={0x0, 0xfffffc01})

19m40.931036573s ago: executing program 5 (id=1609):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
prlimit64(0x0, 0x3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x10, 0xa, 0x2, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x32314d4e})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000007640)={0x0, 0x0, <r1=>0x0}, &(0x7f0000007680)=0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007840)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, 0x0)
r3 = getegid()
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000007a80)={0x8000, 0x40, {0xffffffffffffffff}, {<r4=>0xee00}, 0x200, 0x7})
stat(&(0x7f0000007ac0)='./file0\x00', &(0x7f0000007b00)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000e40)="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", 0x2000, &(0x7f0000007cc0)={&(0x7f0000002e40)={0x50, 0xfffffffffffffff5, 0xfffffffffffffff7, {0x7, 0x2d, 0x1, 0x800, 0x8, 0x3, 0x3, 0x4, 0x0, 0x0, 0x8, 0x9}}, &(0x7f0000002ec0)={0x18, 0x2f, 0x5, {0x1}}, &(0x7f0000002f00)={0x18, 0x0, 0x9cf, {0x5da4}}, &(0x7f0000002f40)={0x18, 0xfffffffffffffffe, 0xa}, &(0x7f0000002f80)={0x18, 0x0, 0x3, {0x7}}, &(0x7f0000005000)={0x28, 0x0, 0xb6c, {{0x8, 0x8, 0x2}}}, &(0x7f0000005040)={0x60, 0x0, 0x9, {{0x2, 0x57c1, 0x8000, 0x26b3, 0x6, 0x1, 0x1, 0x6}}}, &(0x7f00000050c0)={0x18, 0xffffffffffffffda, 0x8, {0x5}}, &(0x7f0000005100)={0x12, 0xfffffffffffffffe, 0x1, {'\xff\xff'}}, &(0x7f0000005180)={0x20, 0x0, 0x2, {0x0, 0x2}}, &(0x7f0000005300)={0x78, 0x0, 0x5, {0x80000001, 0x607d, 0x0, {0x4, 0x1200, 0x0, 0x5, 0x10000, 0x8, 0x4a17, 0xfff, 0x9, 0x4000, 0x2, 0x0, 0x0, 0x7, 0x9}}}, &(0x7f00000053c0)={0x90, 0x0, 0x6, {0x1, 0x3, 0x100000000, 0x21, 0x2, 0x200, {0x6, 0xb, 0x9, 0x459cd843, 0x9, 0x6, 0x8cf, 0x87bb, 0x6, 0xc000, 0x9, 0x0, 0x0, 0xffffffff, 0x1ff}}}, &(0x7f0000005480)={0x90, 0x0, 0x2, [{0x0, 0x3, 0x1, 0x7, '\x00'}, {0x6, 0x3e6, 0x0, 0x5}, {0x3, 0x4, 0xf, 0x1, '/dev/cpu/#/msr\x00'}, {0x5, 0x9, 0x1, 0x7, '*'}]}, &(0x7f00000076c0)={0x150, 0xfffffffffffffff5, 0x7, [{{0x0, 0x1, 0xc, 0x4, 0x7, 0x5, {0x0, 0x6, 0x400, 0x5, 0xfffffffffffff57a, 0xffffffff, 0x2400, 0x6, 0x0, 0xc000, 0x4, 0x0, 0x0, 0x8}}, {0x6, 0x7, 0x0, 0x3f9b}}, {{0x4, 0x0, 0x7f, 0x1, 0x1, 0xf, {0x2, 0x9d, 0x100000001, 0x0, 0x2, 0x4, 0x7ff, 0xc, 0x7, 0xc000, 0x0, 0x0, r1, 0x6}}, {0x1, 0x3ff, 0xc, 0x14, '/dev/autofs\x00'}}]}, &(0x7f0000007980)={0xa0, 0xfffffffffffffffe, 0x1000, {{0x5, 0x2, 0x101, 0x3, 0x6, 0x6, {0x3, 0x7fffffffffffffff, 0x7, 0x8000, 0x2c, 0x4, 0x6, 0x915b, 0x4, 0x8000, 0xc, r2, r3, 0x90d, 0x1}}, {0x0, 0x14}}}, &(0x7f0000007a40)={0x20, 0x0, 0x9f5, {0x6b, 0x4, 0x6c7, 0x84d}}, &(0x7f0000007b80)={0x130, 0x0, 0x4, {0x6, 0x5, 0x0, '\x00', {0x0, 0x0, 0x0, 0x3, r4, r5, 0x8000, '\x00', 0x6, 0x8, 0x6, 0x8, {0x101, 0x1}, {0x3, 0x3}, {0x100, 0x6}, {0x3, 0x8001}, 0x786f, 0xffffffff, 0x7a0}}}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000025300)=""/102392, 0x18ff8)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r7, &(0x7f0000005140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x3}], 0x1, 0x2041, 0x0)
r8 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x3, 0x182})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
io_uring_register$IORING_REGISTER_FILES(r8, 0x20, &(0x7f0000000000)=[r8], 0x1)

19m40.186100515s ago: executing program 5 (id=1610):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0)

19m38.573741552s ago: executing program 5 (id=1612):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001"], 0x8)

19m35.098626525s ago: executing program 5 (id=1619):
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = socket(0x15, 0x80005, 0x0)
getsockopt(r5, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, 0x0)
getsockopt(r1, 0xfff, 0x8, &(0x7f0000000100)=""/134, &(0x7f00000001c0)=0x86)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0})
close_range(r4, 0xffffffffffffffff, 0x0)

19m30.257429308s ago: executing program 5 (id=1627):
getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000440)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdbA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97<cAZR\n w\xe6\x1c\xf0(\x96H\x88\x00\xd3\x1c\x16cj\x10\xd8\x92\xc9ad\xc0aR\x12\xd3\xc2J\xcb\x9a\xa5\xce#{e\xd3\x11\xc5]\xb4F1\xfb\xe6\xd4T\v\x87\x04\xcf\b.\xcaO\x04\x0f\x062\xcaL\x81\xa6\xbbp\xd3\xc6$4t (W\x92nr\xbe,\b\xdb\x7f[', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(0x0, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void}, 0x27)
socket(0x10, 0x80002, 0x0)
r4 = socket(0xf, 0x80000, 0xffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x8, 0x37, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x65, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}})
sendto$inet6(r4, &(0x7f0000000200)="71bd2465fb6fa8b959d842ffcc03e352d273f284c6be7b369b1d0e30911c4ca6f2f0d4b3fe866e7a06f97da79ea283b3ddd3b0f9c13e68fb10ac9c43d7f1c2a9c81219139e73d8b2ae57363eecda70543a3749338cf2a5408e4680621f0660dfd1fe1256fd4b42", 0x67, 0x200040c0, &(0x7f0000000280)={0xa, 0x4e22, 0x5, @empty, 0x6123}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)

19m26.322955864s ago: executing program 5 (id=1633):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0xe00}]}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x200000)

19m8.806917071s ago: executing program 37 (id=1633):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c)
io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0xe00}]}]}], {0x14, 0x10}}, 0xac}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x200000)

17m45.893719972s ago: executing program 6 (id=1779):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x1)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1ffff)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)

17m44.136891253s ago: executing program 6 (id=1783):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000340)="e31d8d7020c59c02093d6446c102a116c805430fef61156b7c0aca58264e4dd8f234442ca37a69bb2c4bbb98bd42dcfa53b65cb677e3051569a8d9f6f58c6d9b9fcf77a673ba83f6573f5b83808a641c2ffe293cc042c88df24f20c4b90c55253a148a4033b59bfa50017e12c81475076be4f480b2d262e13064555b747d479e08e98588a948041d", 0x88)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
fsmount(0xffffffffffffffff, 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000080)={0x8, 'vlan0\x00', {'vxcan1\x00'}, 0x7})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8, 0x0, 0x3, 0x1}})

17m42.22376616s ago: executing program 6 (id=1787):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x100000000000004)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8894}, 0x8040)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r4, 0x0, 0x20040891)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
read(r5, 0x0, 0x0)

17m36.994546015s ago: executing program 6 (id=1793):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x1)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1ffff)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)

17m32.946086814s ago: executing program 6 (id=1799):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
r2 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), 0x0, 0x2}, 0x20)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000540)={{0x0, 0x4, 0xbd23, 0x15, 0x6, 0x3, 0x80, 0x981a, 0x8, 0x6, 0x1ff, 0x7, 0xffffffffffffff5e, 0x80000000, 0x8}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r5, &(0x7f00000003c0), 0x0}, 0x20)
lseek(r4, 0x9, 0x0)

17m30.925516474s ago: executing program 6 (id=1801):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})

17m12.700626135s ago: executing program 38 (id=1801):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})

5m26.306396581s ago: executing program 8 (id=3119):
io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x345142, 0x0)
mq_open(0x0, 0x42, 0x197, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x804)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000040006c4e674bf45dcddf34dace96c748b21f55a81f5618c38b9e3cf1d22b9f207c0f07d29271f63e26517391369f118cb343132672ea3349fa216e171fafce26ec89840e642d3e576245fdf24bc947ef437cb2404106bb10902f33b23e139a236e1749e3bdf52fcd0f2f1644f5f3578d97fd169226cd721d2f0b0ed50b6f58"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x21800}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x20, 0x2, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40)
r4 = eventfd2(0xeffffffb, 0x80800)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001340)={0x8, 0x0, 0x0, r4, 0xa})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840)

5m23.244387465s ago: executing program 8 (id=3127):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000240)={{0xe05, 0x2, 0x7, 0x0, 0x8b}, &(0x7f0000000140)})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d7)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

5m19.367965403s ago: executing program 8 (id=3132):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m17.621686336s ago: executing program 8 (id=3137):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000680)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x801)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e21, @multicast1}}}, 0xa0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000500)={0x10, 0x30, 0xfa00, {0x0, 0x80002, {0xa, 0x4e22, 0x80, @rand_addr=' \x01\x00', 0x2}}}, 0x38)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffe96, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7)

5m17.223576638s ago: executing program 8 (id=3140):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4)
recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4)
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)

5m15.105140143s ago: executing program 8 (id=3144):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540))
r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r6, 0xffffffff}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r6}}, 0x18)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xec, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1b0, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@tmpl={0xc4, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x3, 0x3, 0xc, 0x204, 0x3, 0xe}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x6, 0x0}, 0x3501, 0x4, 0x3, 0x2, 0x1, 0x1, 0x8}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x3503, 0x0, 0x2, 0x78, 0xfffffff7, 0x8, 0xa}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x1260, &(0x7f0000003580)={@local, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, 'j~1', 0x122a, 0x6, 0xff, @rand_addr=' \x01\x00', @remote, {[@routing={0x8c, 0x2, 0x2, 0xe9, 0x0, [@remote]}, @dstopts={0x87, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1c}]}, @fragment={0x2f, 0x0, 0x8, 0x0, 0x0, 0x6, 0x65}, @hopopts={0x4, 0x223, '\x00', [@generic={0xff, 0xb8, "3e20e90c85bec0c2e662b93384c11c9f9217432476d0e2c5f8761f6a8900fc3afa2f215cf37b7adc45ee96f19a6007ecd40b3176b44dfad4d08583a20f20913909eabf0fbdd32112377e5cee8f8125f72e79e3d17a12f1aa3fa45e29f324a1152080deb0bee479ff7ba29fc8f293fddf866a8e5d34b9bd8b5b8310e2fa39dc83a6f651fa22629ba604f37709728fb1fa7f4c83d9e8b349d17e74f32460f588e7dd0cf049ea558b78475fa093ccaf5cc9f8f66319cf84b581"}, @calipso={0x7, 0x50, {0x1, 0x12, 0x46, 0x6, [0xb0, 0x7fffffffffffffff, 0x3, 0x9, 0x2, 0x5, 0x15, 0x4, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x7f}, @generic={0xd, 0xff6, "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"}]}, @routing={0xc, 0x2, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}, @hopopts={0x2f, 0xc, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x6, [0xecc]}}, @jumbo={0xc2, 0x4, 0x7}, @jumbo, @calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0x1, [0xcab, 0x43, 0xfff, 0x51]}}, @pad1, @jumbo={0xc2, 0x4, 0x3}]}, @routing={0x2f, 0x4, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_conn={{{0x22, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x2, 0xffff, 0x0, 0x3, 0xe, 0x1, 0x0, 0xfff7, 0x400, 0x3, 0x8, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c040000100001040000000000000000004800", @ANYRES32=r9, @ANYBLOB, @ANYRES16=r9], 0x40c}}, 0x0)

4m58.965298155s ago: executing program 39 (id=3144):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540))
r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r6, 0xffffffff}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r6}}, 0x18)
write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xec, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1b0, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@tmpl={0xc4, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x3, 0x3, 0xc, 0x204, 0x3, 0xe}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x6, 0x0}, 0x3501, 0x4, 0x3, 0x2, 0x1, 0x1, 0x8}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x3503, 0x0, 0x2, 0x78, 0xfffffff7, 0x8, 0xa}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x1260, &(0x7f0000003580)={@local, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, 'j~1', 0x122a, 0x6, 0xff, @rand_addr=' \x01\x00', @remote, {[@routing={0x8c, 0x2, 0x2, 0xe9, 0x0, [@remote]}, @dstopts={0x87, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1c}]}, @fragment={0x2f, 0x0, 0x8, 0x0, 0x0, 0x6, 0x65}, @hopopts={0x4, 0x223, '\x00', [@generic={0xff, 0xb8, "3e20e90c85bec0c2e662b93384c11c9f9217432476d0e2c5f8761f6a8900fc3afa2f215cf37b7adc45ee96f19a6007ecd40b3176b44dfad4d08583a20f20913909eabf0fbdd32112377e5cee8f8125f72e79e3d17a12f1aa3fa45e29f324a1152080deb0bee479ff7ba29fc8f293fddf866a8e5d34b9bd8b5b8310e2fa39dc83a6f651fa22629ba604f37709728fb1fa7f4c83d9e8b349d17e74f32460f588e7dd0cf049ea558b78475fa093ccaf5cc9f8f66319cf84b581"}, @calipso={0x7, 0x50, {0x1, 0x12, 0x46, 0x6, [0xb0, 0x7fffffffffffffff, 0x3, 0x9, 0x2, 0x5, 0x15, 0x4, 0x1]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x7f}, @generic={0xd, 0xff6, "63c081ea59ea45aaf69147fb7e58a0ae59f6782f6a50a94ba4fae52549173d579789b207da9b1f6ffc35d553dcf44cb637ee49cece4b122054a5a90b1223937ddf2585d3e5fb017711acc5edaec472c061d2a460497a43956fef9555f30135f5559e6cbd110fe29c27a033e264b20afe6d4184363f80cb959ea30ba87145a52879d3c305fdb313dac0af4e516b7e0bd0873f8232316a1251cac342c13e59afa74dd78067033c1c07d382dc6c31b5072ddf4664f760e24b2aae7351832ac2a92bcf1e88533fa9aaad0c8d3bf2ce7f075728fa84c0ac963c3ac11c0a527881c4d3cf8422d67b5363600e04aa6f625ad03df1d5fb5e4bce3dacf7bf512ca06218a787e704c85af4cb526f9b13a5a87493b9dfa314a8f09226c58e24298a252aa631d3fe01d600f47bd05dbd2981efd9d50e06e37035cf2adfb896ec2b5cd3e89a50c03f9828b931c29a788287dcfe30da1d361e466fe06ab9c13af80f7f2132858e60f3e9e884c04b265a6765b5bf7c01312f4fce8d1a058b5d786d8ecad3fe1312ea414db6adf4cdc56a6e298e4a8165366182be8215ba8734edf82eab40faff30c8b5b86603ab7d04fb0968a0eb317d51bd6e585e17c22196074e247c352448050d65b0f255959b08b609f7616625fc85af7614da4d620c45531181b3fc400fb852a74608999549860b3f90fd76d8774dbaac90132065a8efd856644b032e092c07eacb5f781a52f22e03049481ede4ef2db33fcd5c542d38ca4806605863fb5c1a162d60759a4087b1800c4470e0fc3f20e37936668b2ae783b3ed7025a4dddd812016b8559476467f030edc324b966e99efc253d0f0821ce18e198450ede63eddb7089f592515af5381f48dd8c2e1de85d92354382d0bef213f8dafccfdd498bbe157a829397487924ec16bbe20b54b0034101b02bf14226b137a3bb2ddfe455be655a47d163298e1b3e6dc6fb2bb60026d1602e14740ecf3915e5ba12026d3f0292b696efa5e49363a30882e3f22b546919cef72202a3aacc1b268a60b4d7559727c118d603dcdf5a262ed31071096f8d4d97773ace6144a4d01ce562680c4253b14944f3c6d7b71b5c295000b5ce9726be22c41c34400667f872f562a19b40db5077f7606023ac6063bd4e060ba23569fd6d9f7b2d401a3bbd384c635b3ccc443baf58ac9eb39ec2e234fcaf5e2cfb37c7f618692406e06d030af3e4bf21e559db71d489c42f1b7f533c2f9e4a6c5e1f260f93280eaa3d47c0c19b87ef3b4dd86b02448b4fe69ad4ac17d88a20bda7c2c1726d309f10a73beaa94535970768a985dca4dc55a8ca4f2ef796c8cfb3563a256350f37d86d91f033070ff5411c54ec559ac22c6d9b5459461ed8a2525622beb7456ef958d7b6c404048742520df7944849e340e694a9d550fcea0c41aef718f591cc15952ac5234ea2e83138d94cb13bdd23f0b0e21db2eded00d4773d337d9a2c5671d274ca9531f8ba4811694f225e38c1ddccfb0a5de0ed5453b0c82a218f54e1834b564b48b93715ef190ccb9da7706e4038e04134b8495c3e826e795556da5a32b9c48f517a267ed421e9ba7fdbf77bd9856e710a65b19d233a1fd1956a137275d50d39be558c25f540c1dc0e52d69372079c24e0c17cf9b5be139757bd16af739b821c9abae72166808dfb92e56cba4a4f710d819adde0eac70a654dec2ebacfe13b1bbe773f6652cbd9ec6b41af5b24e62bef857e0bcaf0d4c6f578418ec8ce1b8edbe109121bac3b0e387a67e07fe281ea25772fc3243d8d534208af4a09f86351a7231102dae8519d954dbc72a8feae76ddab00bd54a4923b4662b31c2564dca4737c0d8f0e27a767675ee60927b4ba08affb1e6038dcfe58faec12d158ec1778bcbcc687f9a1c8093ba7331db51e5041f8ae35eb3f268511e1a4151b1d5555832d43030f70dc02a7a98de9a616c8ae2a7a52e77b32dabe94559cab1dbabfd9ebedf83abcdcb6d748d5d914e11975b09c14759335ecdf199760b3e849886874aa58f76488b2ad818356514c48df9bac88b13fea85dc043533097bf36cfffab856423e30d928d2081da71d6b34cbfdc199304e8071240d18accb4c65743046c8baa7fb9e368abda4b14da59c8942c637c8d89d5e92b42787b83b4fa03ae971edf4a9d00c831c94b318eca0d2fd0f63840844979d7d8fd61db43feb83cba9806c3f6710b30fb296c0e7279bfc7548920030feba9ae632607eca251ea455027f8b71cdb4ffa6a28aeaf6ec4335f5113f81c14e0cb9b0933b50c0213038ff324a49166446501d1d77ffd2c21c82380bce3772361b3003e4e71a352444ba3f18e93d79c0ac4aa1c443430eb6b3d56dfa86bae448cee68f0f8c7f0269652df66465cbfce4ceaca82505ece4340823568ac148b6de1141c1c6341bfad8ad2ca77a99603bd92b66685afeedf0b2e5726f4585692960a8efcdfc63f2dab21230ddaaa10bfb5786dba56664cef5bb1e23f8e737e3ec9a697898ec48d13c090bbb4bfddd49546393847ff835b4834b20bc5b8439e2fb7643adec6de49e1966d8ce8ccdf19ea0c6bbd704d05aaf0a20819bdef090ac5bc4e51c7dff865db55f6829c5446421db1207ccb6926e6fb6448dff2338846ab1e8fd7823e330dd2cfe9c8d3eed749129e4600e9498e5d9e50ddea3e1fee1c027c16404a5c1afb245347539a79de873aaef43ab3f2a8b4f81940b4de1f4d2f2ec74df0c827ec29b3efac8842e5912ff77a00f55df30d795baa99c82e314b5a6c4aa1abaebceaa17ce894a2340abdf4476fae220b19ec9dcc588c254426f29c4da8ec0a699421893438d5e032c2f1e7056229b64cc84d4abc7b3c7f44a525b3d1f70ebbcc78580fb2fa8a468ab615ce23be4fff12a466dcc288e55539be6a966fa934d1961832e68befe3f8cbc553d8f2539a71dd6bf75014636d10d9a898e8acfee462cfb11e9077a5785f6cb25b84a5456631ca63ba438aa5bfbf26b8c7b2dfa78709a81dd1a26aa06e5c7e99525781382f58094b89748cacdd0999da2727cd5c082de9e6ab69a18d090a94c626a2028377574b73b8296d9e131eb813a9d1971658929dd9fa956759f386050618043bfa17385af0d68b9878130be966ddad34d835abfe91b8197b7eae29cb52d5ecb0b0bfa37d762ce7cd9eb0b832e0ee3527a922be50499b8ff010942016c2caca28586d8616adc862649f662cbfdb3ea03b925082a745804d6142ce1bd58b01e5722ee1d93e1cd72643037ccfaf26ca913c14c25c0b75f6268a4d6bafcce3447e53f25fab67360711e1ba471aed141bf66f0cd29751939b150b45867aeb83b958ae256c9ec9360e0dec3997a7edd0208a5e5bdcefc08ef0ce141b51747ef49d5cf908efcf092b6919d72cac3404c237720ef572fe2ed7957b0aea39b5d678e401242909886aff819c0bb9a6c6f99dd0ec5e50d54f2743d9838f6420bf62fe65b782b79313fbc4c0f5f9b029e5c98d4cb312cbc199769e0ea95b7230f6fac0afe03b8ae92ee58cff466a5958dc39a96ee858d700f9ff9861514b14f24b32016818e41be3d6a1090e839930c5724f63e1e991764935be02d77c421127b902410b261a4c87ae85b4ceebe7fb1afc4d20e57e2013ca809628ce440ed7a5a0ca6d2b1200da36dd65e803b28f0672afd6bf7f9217300cc93f98cf3b4ac79a79eddf0b216898c32f5f9ede479037b4db2011378b4fbcd129172135c0f87670125e03ae44489e4aff84375bb35709709b22e99afd063dea75e74c11f4f9cb1577f968ab39d59967406a2637a9de780b036e7f619100189bd939798ff9418419137955227621c4929fa2d19764293f1347782ab1356f19b13b31cd673b96680ca88f1bd4cdfb4223dae500029b56288bdac111e87d3c43a8c31590f690d37363fda2604b716bd02e5c6db7c1deef5e23aa6eebd2ff3f3cbe81b0ab9e75dd9cc6ca7857682de3a8bea436848e6ff4651d011feffe300e5fe886404dce4a5a9614d64f130d963edfc747f6c3009bd2bf9fe891b8a252cb239887270167f3c3232689729189a7ea84c6236707fb33cab0e44a551c7f36c3b92b6a64dfdc4f9a6e439a5621f6a9ba31861f45ee4788c475362f3928a4da691afa46657a5dd600b2b93d7e7757feff55e941bbee6e03af30d5f28c055f0a36a830b8e3f54b32ef64e2e69717c80fb66cb7651f47877c22d92bf6f3a9ef70d20eb4631ea3afab8f8aa3824c1587aa4e4ee8ca66aae74e58429c117ab69de3b37e4042b27a7b1d858fee5243b5231ca645cc03b2973d024a8a3a5d9b734ca9d2311f5590473b4133101d96a8c4a365a6d250aa5671a19825f7829057b51a8ae9b5422532353dd9d2355c07d1cfc039bae78ede033f843893b3725e8fbe0b567d3fc9c6e058145bb0c4fac1e9f9d1866eaf0a499035850134889575fd548b1b2e23ca74264e844d54f269f69b504289835b57a12f23bbc43aa55a90cb4ba026cd74b21c38142256507a16009c643aa5b49fe8502e793cecec73528ffcfe097f3efc2f18da8b19a8cb39bab3c19736b7a309c78057c23cdb7aa4301307cea317bc9795ce8655088ff2a2eb8a0a91fe281f1cfe489a7a56f6b4f025d67be7028de828c4c00688afd1196dba957a15e0637d2abeaa78fa24498580834cd1a5462335422f058d42907e86539db3b2bdf97e7e64d0c23727ab6470565785c15a0a028f681d8277cdbd37f032a001ac3c7315cd1d80373534d084026e002d19ba3d0c7d63ba947f09d067abf7b114becb3f77269b9c377ea236f3a9e47f69bdccf910b31d30cae53ebb529dfb530ddd55826ec3dcc7f0f8a4ae78a2620389d6899040e96bd1a7eeed7e165a5f8ba9b3c8e1def694cca8df48a00515f052a7c93eb6f5d94d271f51967d0000130cc52176a5e3f3f51f9610d5cee469bf840fd040cdfa60ce743c603401c749ce4e96350e785d4942a6ebbcddddccf528c224a2af6c5733095353c2f85067a96e2d944dc3e601e3c17a80ae648c4f11ef5046aac920271bbdd3a29fb43d13ae78772a5499a50c9feca74e4d04cec357a25a816d923ecb7d22d7ff65d6d33aff23e8a39b490448416832743d5f0c058a9c441ab84a1036840d6042b1a0525603e0b043d23cd6e35239677d3bac0c2ae1e6554c980b7501a845f12c7ea9f36a13c77b282e5122afe303c7874c86c6d15a108bbab2e7d07c141601fa36268e80ae0e69d549a6b35b386849e4e7731601d9ccae0b57bf2f5f1ec05bad00f39460da10b24ca19ab525a4d386b754e697a1889588fa29bc91c417ce7935d4a51313d6d3a61f6012da4145c87f93502bf84c7c945f09d1e52545d1fb5eeeffef343e470b295e98ed4510e72b6981dcffd54cdb0bfe2a92573314fe02ea550bc81d4788dc9321ddd180c320d33e3b64dc9fa7c7ee8b7ee907b161a435bb3d934594b166432c55135bba5de86b6b6279ccdd882b14fa549aadc6ec71163848fcdd3015634521be20a8bd9d5142a7d93cd5f9d7d6972d81e928600c25814ef4cfcc2a828e7faa180a9179e376890828542a0e63b06b4d3c722853a21800964f54f9cec713fa1237e7360dad89a44d373f06aa80eebe3b839f86b330bef30cc8eec7dac2099ae16cd6972655faaaf7ca4f37e74e45597a70099abb6842e5ae7be6003925aceb93564fac1b6590efbf61ea831dc575ea5d7ca90063b3bd17705e70ce42529bf84e02d2b3c42bda9ea43e27aff44a2ea9b2e28d4fe32e6e0e4acb1849ffd55fd7d11f91384b3"}]}, @routing={0xc, 0x2, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}, @hopopts={0x2f, 0xc, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x6, [0xecc]}}, @jumbo={0xc2, 0x4, 0x7}, @jumbo, @calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0x1, [0xcab, 0x43, 0xfff, 0x51]}}, @pad1, @jumbo={0xc2, 0x4, 0x3}]}, @routing={0x2f, 0x4, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_conn={{{0x22, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x2, 0xffff, 0x0, 0x3, 0xe, 0x1, 0x0, 0xfff7, 0x400, 0x3, 0x8, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c040000100001040000000000000000004800", @ANYRES32=r9, @ANYBLOB, @ANYRES16=r9], 0x40c}}, 0x0)

46.385595668s ago: executing program 4 (id=3594):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000002300)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14)
r1 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0xe0002005})
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019440)={{0x14}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x800}}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x900, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x9c}}, 0x0)
lseek(0xffffffffffffffff, 0xffffffff7effffff, 0x3)
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x20044041)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x1)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000180)={0x3, @win={{0x2}, 0x7, 0x0, 0x0, 0x0, 0x0}})

45.376127929s ago: executing program 4 (id=3597):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
setrlimit(0x7, &(0x7f00000000c0)={0x7fffffffffffffff, 0x3e4c42b9})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt(r7, 0x8, 0x6, &(0x7f0000000140)=""/243, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r8, 0xa)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)

42.991235972s ago: executing program 4 (id=3602):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x4e, "5c83276f6c020086200db0e102ea1d0d85d4bc6900000000000000fbffff325b"}})

42.593563923s ago: executing program 4 (id=3603):
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x80)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4881)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000080)='./file1\x00', 0xa18c14, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x81, 0x2a6, &(0x7f0000000180)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)

42.270069983s ago: executing program 4 (id=3606):
openat$kvm(0xffffffffffffff9c, 0x0, 0x3a1dc0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c74eb2fbb527d46b04f9365643a73797a20303030303030303030303030303030303031"], 0x2d, 0xfffffffffffffff9)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a000000009060500000000000000000002000005050001000700000008000940fffffffa1c0007801800148014000240ff02000000000000000000000000000114000780080009400000000730000880100007800c001b4000000000000000090c00078008001c4000000006100007800c001940ffffffffffffffff08000940000000050900020073797a3300"/160], 0xa0}, 0x1, 0x0, 0x0, 0x8054}, 0x804)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0x2, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x200000, 0x6e6fb5, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local, 0xfffffffd, 0x2, 0x0, 0xb7, 0x5, 0xffffff7e, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)

40.205420446s ago: executing program 4 (id=3614):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x410, &(0x7f0000000400)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230", @ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x105d6, &(0x7f0000010640)="$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")
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x48040, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0)

39.147182318s ago: executing program 40 (id=3614):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x410, &(0x7f0000000400)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230", @ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x105d6, &(0x7f0000010640)="$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")
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x48040, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0)

21.687283461s ago: executing program 0 (id=3649):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0')
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
syz_usb_connect$uac3(0x5, 0xf0, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x156, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x1, 0x50, 0x9, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x1ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x12, 0x3, 0x3, "4bc02197ee94"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x9, 0x2}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x5c, 0xee, "34f4", "7d9ef9"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x8, 0x9, "f1e6e6f8ed"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x1, 0x42, {0xa, 0x25, 0x25, 0xfffffffa, 0x9, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x6, 0x0, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x74, 0x3, 0x0, "033c950caf"}, @as_header={0x17, 0x24, 0x1, 0x0, 0x8, 0x5, 0x1002, 0x80, 0x83, 0x400, 0x6}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0x3, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0x2, 0x0, {0xa, 0x25, 0x25, 0x3, 0x79, 0x5}}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x8, 0x1, 0x7, 0x20, 0x4}, 0x8, &(0x7f0000000ac0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x6c, &(0x7f0000000b00)=@string={0x6c, 0x3, "5a588c3de96573064ff76f1a7bc16b6df0937543fc0694d9b7c55468ee130a628b1175515653d834bcd414a39d9fc320da154e0620d4fdf811a13e3a96dea3b38508512b6ec16cfff557000594dc74baf4055a973a990ff6ccaf8f79f6265e15b348cbc45fb2d2241e3a"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x41c}}, {0x25, &(0x7f0000000d40)=@string={0x25, 0x3, "5fd22e65cb7b157efb34b6939cb5ba47ece5a4bd11ea3d416508cb86c5c5f6c0b0ffb3"}}, {0x0, 0x0}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0xc0c}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, &(0x7f0000000480)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x1a, "ef68dff969b666ba09afe09f9ddc8fc9ecd072ef15f9c67b690a"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x2}})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000640)={{r1, &(0x7f00000004c0)='\x00', 0x80001, &(0x7f0000000500)={@align=0x8, {0x8001, 0x80, 0x10000, 0x8}}, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x1}, {[0x5, 0x3, 0xfffff3c9, 0x3]}, 0x0, 0x4c, &(0x7f00000005c0)=""/76})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3}, 0x94)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40)
syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000001940)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x110, 0x3, 0x1, 0xe, 0x40, 0x4}, 0x70, &(0x7f0000001640)={0x5, 0xf, 0x70, 0x6, [@generic={0x30, 0x10, 0x3, "23ec91c4cde5eadc73262259e7d4cce0c535e38229fb84e7ac771ff6da9be4bc487fb1a998fdf0d8ad5b59d58e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x10, 0xee, 0x2, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x6, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "cc77ca1b2219877354e8ade6dda34799"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x7f, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x54, 0x2f, 0xff, 0x3}]}, 0x5, [{0x9, &(0x7f00000016c0)=@string={0x9, 0x3, "e6e120e6e0cc2e"}}, {0x9a, &(0x7f0000001700)=@string={0x9a, 0x3, "23cd6d3fb520b590dff3641b2be8c432f3a0eaee55796ec4e0a1ad2521cdc5262ed65bf9769dcdccf337fb8fac9e41d7c38e9237c5986829de36dedae81b6a4ea662fe84c7450b61aa0dd1d459c0aeb7b541f6df0fa5e2ef74d2923650cf87490487d2073b6d8cf16bd77c1dc7f9cb1ce45406d2454e4ea5c81b449191035ef93220efaf3fecdad1297defbbee4c3aab6a3d68f96f326400"}}, {0xf2, &(0x7f00000017c0)=@string={0xf2, 0x3, "1f660499ab3913d3b06843b2d27c7ebfed710a2eed7078dfe2539c46014b61c6423bdb94ad2d4ef2f6c3ba23f207608dd72d703aa17775dafc06c52dc4ec23c7c334bdd5d30ab41ac4c8a4c0ab1e699a69a1f97b952f2627a3768cab42c405ad14fc2596f618a2a04e2984f325b0ed44abeda510cf5b42f06844288fc32fbe8d07aaaeab408ab9c26e5a7798bdb5ecd83b9596443ae22d75b9e0063511810763dd16e24c534b2f4d55d257af5b8e3ebad34f129fddfe842cb64afdb9e9943bdf6b5b144b616e94006a1653c33f4f7486a88bd6df97aa87690f77eadaef1843aab90fee087618d4b82f2ac1cbeb752b66"}}, {0x1e, &(0x7f00000018c0)=@string={0x1e, 0x3, "a218abc3d387494974ca57d308822b1be600f7600b125b23f3117a62"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x3001}}]})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

18.146730909s ago: executing program 0 (id=3655):
io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x345142, 0x0)
mq_open(0x0, 0x42, 0x197, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x804)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000040006c4e674bf45dcddf34dace96c748b21f55a81f5618c38b9e3cf1d22b9f207c0f07d29271f63e26517391369f118cb343132672ea3349fa216e171fafce26ec89840e642d3e576245fdf24bc947ef437cb2404106bb10902f33b23e139a236e1749e3bdf52fcd0f2f1644"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x21800}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x20, 0x2, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40)
r4 = eventfd2(0xeffffffb, 0x80800)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001340)={0x8, 0x0, 0x0, r4, 0xa})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840)

15.063518582s ago: executing program 0 (id=3664):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0')
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
syz_usb_connect$uac3(0x5, 0xf0, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x156, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x1, 0x50, 0x9, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x1ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x12, 0x3, 0x3, "4bc02197ee94"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x9, 0x2}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x5c, 0xee, "34f4", "7d9ef9"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x8, 0x9, "f1e6e6f8ed"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x1, 0x42, {0xa, 0x25, 0x25, 0xfffffffa, 0x9, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x6, 0x0, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x74, 0x3, 0x0, "033c950caf"}, @as_header={0x17, 0x24, 0x1, 0x0, 0x8, 0x5, 0x1002, 0x80, 0x83, 0x400, 0x6}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0x3, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0x2, 0x0, {0xa, 0x25, 0x25, 0x3, 0x79, 0x5}}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x8, 0x1, 0x7, 0x20, 0x4}, 0x8, &(0x7f0000000ac0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x6c, &(0x7f0000000b00)=@string={0x6c, 0x3, "5a588c3de96573064ff76f1a7bc16b6df0937543fc0694d9b7c55468ee130a628b1175515653d834bcd414a39d9fc320da154e0620d4fdf811a13e3a96dea3b38508512b6ec16cfff557000594dc74baf4055a973a990ff6ccaf8f79f6265e15b348cbc45fb2d2241e3a"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x41c}}, {0x25, &(0x7f0000000d40)=@string={0x25, 0x3, "5fd22e65cb7b157efb34b6939cb5ba47ece5a4bd11ea3d416508cb86c5c5f6c0b0ffb3"}}, {0x0, 0x0}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0xc0c}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, &(0x7f0000000480)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x1a, "ef68dff969b666ba09afe09f9ddc8fc9ecd072ef15f9c67b690a"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x2}})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000640)={{r1, &(0x7f00000004c0)='\x00', 0x80001, &(0x7f0000000500)={@align=0x8, {0x8001, 0x80, 0x10000, 0x8}}, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x1}, {[0x5, 0x3, 0xfffff3c9, 0x3]}, 0x0, 0x4c, &(0x7f00000005c0)=""/76})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3}, 0x94)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40)
syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000001940)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x110, 0x3, 0x1, 0xe, 0x40, 0x4}, 0x70, &(0x7f0000001640)={0x5, 0xf, 0x70, 0x6, [@generic={0x30, 0x10, 0x3, "23ec91c4cde5eadc73262259e7d4cce0c535e38229fb84e7ac771ff6da9be4bc487fb1a998fdf0d8ad5b59d58e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x10, 0xee, 0x2, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x6, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "cc77ca1b2219877354e8ade6dda34799"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x7f, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x54, 0x2f, 0xff, 0x3}]}, 0x5, [{0x9, &(0x7f00000016c0)=@string={0x9, 0x3, "e6e120e6e0cc2e"}}, {0x9a, &(0x7f0000001700)=@string={0x9a, 0x3, "23cd6d3fb520b590dff3641b2be8c432f3a0eaee55796ec4e0a1ad2521cdc5262ed65bf9769dcdccf337fb8fac9e41d7c38e9237c5986829de36dedae81b6a4ea662fe84c7450b61aa0dd1d459c0aeb7b541f6df0fa5e2ef74d2923650cf87490487d2073b6d8cf16bd77c1dc7f9cb1ce45406d2454e4ea5c81b449191035ef93220efaf3fecdad1297defbbee4c3aab6a3d68f96f326400"}}, {0xf2, &(0x7f00000017c0)=@string={0xf2, 0x3, "1f660499ab3913d3b06843b2d27c7ebfed710a2eed7078dfe2539c46014b61c6423bdb94ad2d4ef2f6c3ba23f207608dd72d703aa17775dafc06c52dc4ec23c7c334bdd5d30ab41ac4c8a4c0ab1e699a69a1f97b952f2627a3768cab42c405ad14fc2596f618a2a04e2984f325b0ed44abeda510cf5b42f06844288fc32fbe8d07aaaeab408ab9c26e5a7798bdb5ecd83b9596443ae22d75b9e0063511810763dd16e24c534b2f4d55d257af5b8e3ebad34f129fddfe842cb64afdb9e9943bdf6b5b144b616e94006a1653c33f4f7486a88bd6df97aa87690f77eadaef1843aab90fee087618d4b82f2ac1cbeb752b66"}}, {0x1e, &(0x7f00000018c0)=@string={0x1e, 0x3, "a218abc3d387494974ca57d308822b1be600f7600b125b23f3117a62"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x3001}}]})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

14.109100811s ago: executing program 2 (id=3667):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)

11.699567554s ago: executing program 2 (id=3672):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580))
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socket$inet_udp(0x2, 0x2, 0x0)
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

11.621449297s ago: executing program 0 (id=3673):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f)
fdatasync(r0)

10.482358342s ago: executing program 2 (id=3677):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
connect$pppl2tp(r3, 0x0, 0x0)
r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x404009c)
ptrace(0x10, r4)
ptrace$setsig(0x4203, r4, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd})
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0)
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)

7.694816796s ago: executing program 0 (id=3680):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000005c0108806800008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c0824000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300020000001400040002"], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)

5.809473034s ago: executing program 0 (id=3683):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x6, 0xea5d}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r2}, 0x38)

4.826918914s ago: executing program 7 (id=3617):
r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1)
close(r0)
socket$inet6(0xa, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
request_key(0x0, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)

4.669553769s ago: executing program 1 (id=3685):
socket$nl_xfrm(0x10, 0x3, 0x6)
inotify_init1(0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x1)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
socket$inet_udp(0x2, 0x2, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0)

4.549096683s ago: executing program 9 (id=3686):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001b80)={0x5, 0x0, [{0x9000, 0x5b, &(0x7f0000001800)=""/91}, {0x8080000, 0xc4, &(0x7f0000001880)=""/196}, {0x5000, 0xda, &(0x7f0000001980)=""/218}, {0xeeee8000, 0x29, &(0x7f0000001a80)=""/41}, {0x50000, 0x0, 0x0}]})

4.437098546s ago: executing program 2 (id=3687):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'wlan0\x00', {0x2, 0x4e21, @rand_addr=0x64010101}})

3.485517354s ago: executing program 9 (id=3688):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
mlock(&(0x7f0000747000/0x800000)=nil, 0x800000)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)

3.416511226s ago: executing program 2 (id=3689):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
mkdir(&(0x7f0000000040)='./file0\x00', 0x28)
listxattr(&(0x7f0000006440)='./file0\x00', 0x0, 0x0)

3.169629894s ago: executing program 1 (id=3690):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000000))

3.065478747s ago: executing program 9 (id=3691):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x8041)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00')
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockname(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x239f, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x1}])
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005"], 0x88}}, 0x0)

2.528190463s ago: executing program 1 (id=3692):
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd612, 0x10000006, 0x6, 0x0, 0x4000, 0x0, 0xee00, 0xee00, 0xd31, 0x1}}, {0x0, 0xa}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000100)=0x4, 0x80000000)

2.31395866s ago: executing program 7 (id=3693):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(0x0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0')
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
syz_usb_connect$uac3(0x5, 0xf0, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x156, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x1, 0x50, 0x9, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x1ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x12, 0x3, 0x3, "4bc02197ee94"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0x9, 0x2}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x4, 0x5c, 0xee, "34f4", "7d9ef9"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x8, 0x9, "f1e6e6f8ed"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x1, 0x42, {0xa, 0x25, 0x25, 0xfffffffa, 0x9, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x6, 0x0, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x6}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x74, 0x3, 0x0, "033c950caf"}, @as_header={0x17, 0x24, 0x1, 0x0, 0x8, 0x5, 0x1002, 0x80, 0x83, 0x400, 0x6}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0x3, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0x2, 0x0, {0xa, 0x25, 0x25, 0x3, 0x79, 0x5}}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x8, 0x1, 0x7, 0x20, 0x4}, 0x8, &(0x7f0000000ac0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0x6c, &(0x7f0000000b00)=@string={0x6c, 0x3, "5a588c3de96573064ff76f1a7bc16b6df0937543fc0694d9b7c55468ee130a628b1175515653d834bcd414a39d9fc320da154e0620d4fdf811a13e3a96dea3b38508512b6ec16cfff557000594dc74baf4055a973a990ff6ccaf8f79f6265e15b348cbc45fb2d2241e3a"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x41c}}, {0x25, &(0x7f0000000d40)=@string={0x25, 0x3, "5fd22e65cb7b157efb34b6939cb5ba47ece5a4bd11ea3d416508cb86c5c5f6c0b0ffb3"}}, {0x0, 0x0}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0xc0c}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, &(0x7f0000000480)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000400)={0x20, 0x1, 0x1a, "ef68dff969b666ba09afe09f9ddc8fc9ecd072ef15f9c67b690a"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x2}})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000640)={{r1, &(0x7f00000004c0)='\x00', 0x80001, &(0x7f0000000500)={@align=0x8, {0x8001, 0x80, 0x10000, 0x8}}, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x1}, {[0x5, 0x3, 0xfffff3c9, 0x3]}, 0x0, 0x4c, &(0x7f00000005c0)=""/76})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3}, 0x94)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40)
syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000001940)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x110, 0x3, 0x1, 0xe, 0x40, 0x4}, 0x70, &(0x7f0000001640)={0x5, 0xf, 0x70, 0x6, [@generic={0x30, 0x10, 0x3, "23ec91c4cde5eadc73262259e7d4cce0c535e38229fb84e7ac771ff6da9be4bc487fb1a998fdf0d8ad5b59d58e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x10, 0xee, 0x2, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x6, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "cc77ca1b2219877354e8ade6dda34799"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x7f, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x54, 0x2f, 0xff, 0x3}]}, 0x5, [{0x9, &(0x7f00000016c0)=@string={0x9, 0x3, "e6e120e6e0cc2e"}}, {0x9a, &(0x7f0000001700)=@string={0x9a, 0x3, "23cd6d3fb520b590dff3641b2be8c432f3a0eaee55796ec4e0a1ad2521cdc5262ed65bf9769dcdccf337fb8fac9e41d7c38e9237c5986829de36dedae81b6a4ea662fe84c7450b61aa0dd1d459c0aeb7b541f6df0fa5e2ef74d2923650cf87490487d2073b6d8cf16bd77c1dc7f9cb1ce45406d2454e4ea5c81b449191035ef93220efaf3fecdad1297defbbee4c3aab6a3d68f96f326400"}}, {0xf2, &(0x7f00000017c0)=@string={0xf2, 0x3, "1f660499ab3913d3b06843b2d27c7ebfed710a2eed7078dfe2539c46014b61c6423bdb94ad2d4ef2f6c3ba23f207608dd72d703aa17775dafc06c52dc4ec23c7c334bdd5d30ab41ac4c8a4c0ab1e699a69a1f97b952f2627a3768cab42c405ad14fc2596f618a2a04e2984f325b0ed44abeda510cf5b42f06844288fc32fbe8d07aaaeab408ab9c26e5a7798bdb5ecd83b9596443ae22d75b9e0063511810763dd16e24c534b2f4d55d257af5b8e3ebad34f129fddfe842cb64afdb9e9943bdf6b5b144b616e94006a1653c33f4f7486a88bd6df97aa87690f77eadaef1843aab90fee087618d4b82f2ac1cbeb752b66"}}, {0x1e, &(0x7f00000018c0)=@string={0x1e, 0x3, "a218abc3d387494974ca57d308822b1be600f7600b125b23f3117a62"}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x3001}}]})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.793453236s ago: executing program 9 (id=3694):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

1.508727104s ago: executing program 9 (id=3695):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "52ae5361a76c2a5f", "cdf29d73f79d26a8efd17ad67eba12660ea1d128fbe29eb38e24f48128ceae60", "7165ef6d", "05d30929b5d96201"}, 0x38)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
timer_create(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, 0x0, 0x40)
flock(0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x698402, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setgroups(0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, r1, r1, r1, r1, r5])
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020)

1.32165567s ago: executing program 1 (id=3696):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000002900)=0x1, &(0x7f0000002940)=0x4)

568.879503ms ago: executing program 9 (id=3697):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = dup2(r1, r1)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x2)
lsetxattr$system_posix_acl(0x0, &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0200000001000200000000000400020000000000100001000000000020"], 0x24, 0x3)
read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020)

437.393067ms ago: executing program 1 (id=3698):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f0000000d80)=""/4125, 0x101d}, {&(0x7f00000001c0)=""/111, 0x6f}, {&(0x7f0000000080)=""/143, 0x8f}, {&(0x7f0000001dc0)=""/4123, 0x101b}, {&(0x7f0000000bc0)=""/241, 0xf1}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/174, 0xae}], 0x8}, 0x0)

165.022745ms ago: executing program 1 (id=3699):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0x2a0, 0x100, 0xffffffff, 0x100, 0x1a8, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @port=0x4e22, @port=0x4e22}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)

0s ago: executing program 2 (id=3700):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)

kernel console output (not intermixed with test programs):

751][T15638] netlink: 'syz.2.2597': attribute type 6 has an invalid length.
[ 1490.961563][T15638] netlink: 'syz.2.2597': attribute type 7 has an invalid length.
[ 1490.969757][T15633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1491.002092][T15638] netlink: 'syz.2.2597': attribute type 8 has an invalid length.
[ 1491.033632][T15638] netlink: 'syz.2.2597': attribute type 15 has an invalid length.
[ 1491.510528][T15648] syz.8.2600 (15648): drop_caches: 2
[ 1493.448544][T15659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1493.524235][T15660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1493.738782][T15654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1494.301145][ T5800] wlan1: authenticate with 08:02:11:00:00:00
[ 1494.314393][ T5800] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1494.472825][ T8079] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1494.634330][   T56] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1494.761978][ T5271] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1498.603909][T15704] netlink: 'syz.8.2609': attribute type 21 has an invalid length.
[ 1498.611939][T15704] netlink: 'syz.8.2609': attribute type 6 has an invalid length.
[ 1498.619787][T15704] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2609'.
[ 1498.945348][T15703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1499.019483][T12397] Bluetooth: hci0: unexpected event for opcode 0x007f
[ 1499.244785][T15702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1499.338729][T15712] syz.2.2613 (15712): drop_caches: 2
[ 1502.607548][ T5800] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1503.045841][ T5800] usb 2-1: Using ep0 maxpacket: 32
[ 1503.543272][ T5800] usb 2-1: device descriptor read/all, error -71
[ 1505.489533][T15759] gfs2: not a GFS2 filesystem
[ 1508.373927][T15791] netlink: 'syz.1.2627': attribute type 21 has an invalid length.
[ 1508.382005][T15791] netlink: 'syz.1.2627': attribute type 6 has an invalid length.
[ 1508.389776][T15791] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2627'.
[ 1510.414848][T15801] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1510.611020][T15802] netlink: 'syz.9.2629': attribute type 21 has an invalid length.
[ 1510.776008][T15802] netlink: 'syz.9.2629': attribute type 6 has an invalid length.
[ 1510.892694][T15802] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2629'.
[ 1510.902622][ T4315] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1511.117410][ T4315] usb 3-1: Using ep0 maxpacket: 32
[ 1511.244297][ T4315] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 1511.375283][ T4315] usb 3-1: config 0 has no interface number 0
[ 1511.463633][ T4315] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1511.658262][ T4315] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1511.833001][ T4315] usb 3-1: config 0 interface 85 has no altsetting 0
[ 1511.888043][ T4315] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1511.950300][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.004894][ T4315] usb 3-1: Product: syz
[ 1512.018585][ T4315] usb 3-1: Manufacturer: syz
[ 1512.177210][ T4315] usb 3-1: SerialNumber: syz
[ 1512.198057][ T4315] usb 3-1: config 0 descriptor??
[ 1512.667973][ T4315] appletouch 3-1:0.85: Geyser mode initialized.
[ 1512.690927][ T4315] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input42
[ 1513.129276][ T4315] usb 3-1: USB disconnect, device number 17
[ 1513.234401][ T4315] appletouch 3-1:0.85: input: appletouch disconnected
[ 1513.545464][T15824] syz.1.2638 (15824): drop_caches: 2
[ 1518.787500][T15864] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2647'.
[ 1519.392331][T15872] netlink: 'syz.8.2645': attribute type 21 has an invalid length.
[ 1519.401183][T15872] netlink: 'syz.8.2645': attribute type 6 has an invalid length.
[ 1519.409094][T15872] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2645'.
[ 1520.095476][T13172] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1520.275153][T11982] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1520.299184][T13172] usb 5-1: Using ep0 maxpacket: 16
[ 1520.311543][T13172] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1520.431380][T13172] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1520.444644][T13172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1520.465796][T13172] usb 5-1: config 0 descriptor??
[ 1520.477427][T13172] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1520.523277][T11982] usb 10-1: Using ep0 maxpacket: 8
[ 1520.535709][T11982] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1520.815963][T11982] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1520.829074][T11982] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1520.838500][T11982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1520.856245][T11982] usb 10-1: config 0 descriptor??
[ 1520.862075][T15887] syz.1.2651 (15887): drop_caches: 2
[ 1520.869473][T11982] iowarrior 10-1:0.0: no interrupt-in endpoint found
[ 1523.472217][ T4395] usb 5-1: USB disconnect, device number 25
[ 1523.892547][T11982] usb 10-1: USB disconnect, device number 22
[ 1525.606705][T15942] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2660'.
[ 1526.466141][T15958] netlink: 'syz.4.2662': attribute type 21 has an invalid length.
[ 1526.474366][T15958] netlink: 'syz.4.2662': attribute type 6 has an invalid length.
[ 1526.482327][T15958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2662'.
[ 1528.278238][T15965] syz.8.2663 (15965): drop_caches: 2
[ 1529.335353][T15984] gfs2: not a GFS2 filesystem
[ 1530.433369][   T22] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1530.881177][   T22] usb 2-1: Using ep0 maxpacket: 8
[ 1530.993147][   T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1531.031180][   T22] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1532.018902][T15998] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2671'.
[ 1532.029580][   T22] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1532.094833][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1532.142947][    C1] net_ratelimit: 113 callbacks suppressed
[ 1532.143032][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[ 1532.158963][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[ 1532.168665][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[ 1532.178287][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[ 1532.188117][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[ 1532.197721][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[ 1532.207345][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[ 1532.216926][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[ 1532.226819][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[ 1532.236427][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0
[ 1532.273090][   T22] usb 2-1: config 0 descriptor??
[ 1532.298077][   T22] iowarrior 2-1:0.0: no interrupt-in endpoint found
[ 1532.457687][T12397] Bluetooth: hci1: unexpected event for opcode 0x007f
[ 1533.932509][T16020] syz.4.2677 (16020): drop_caches: 2
[ 1534.252459][ T3653] usb 2-1: USB disconnect, device number 28
[ 1537.433968][T16049] netlink: 'syz.2.2683': attribute type 21 has an invalid length.
[ 1537.442059][T16049] netlink: 'syz.2.2683': attribute type 6 has an invalid length.
[ 1537.450187][T16049] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2683'.
[ 1537.959790][T16059] gfs2: not a GFS2 filesystem
[ 1539.008863][T16064] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2686'.
[ 1540.800016][T16077] syz.1.2690 (16077): drop_caches: 2
[ 1541.303463][ T4351] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1541.976867][ T4351] usb 9-1: Using ep0 maxpacket: 8
[ 1541.984117][ T4351] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1542.040366][ T4351] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1542.336871][ T4351] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1542.561535][ T4351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.705045][ T4351] usb 9-1: config 0 descriptor??
[ 1542.743437][ T4351] iowarrior 9-1:0.0: no interrupt-in endpoint found
[ 1543.174431][ T4351] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1543.367965][T16105] gfs2: not a GFS2 filesystem
[ 1543.941653][T16102] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2697'.
[ 1544.221646][ T4351] usb 5-1: Using ep0 maxpacket: 16
[ 1544.228783][ T4351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1544.302190][ T4351] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1544.367240][ T4351] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1544.945427][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.983997][ T4351] usb 5-1: config 0 descriptor??
[ 1545.021084][ T4351] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1545.176969][ T3653] usb 9-1: USB disconnect, device number 29
[ 1546.540652][ T4395] usb 5-1: USB disconnect, device number 26
[ 1546.974050][T16138] syz.2.2703 (16138): drop_caches: 2
[ 1548.515903][ T3653] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1548.619993][T16158] gfs2: not a GFS2 filesystem
[ 1548.631970][T16155] netlink: 'syz.2.2707': attribute type 21 has an invalid length.
[ 1548.640097][T16155] netlink: 'syz.2.2707': attribute type 6 has an invalid length.
[ 1548.647941][T16155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2707'.
[ 1549.606928][ T3653] usb 5-1: Using ep0 maxpacket: 16
[ 1549.617540][ T3653] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1549.714027][ T3653] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1549.737735][ T3653] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1549.794406][ T3653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.842475][T16161] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2709'.
[ 1549.929184][ T3653] usb 5-1: config 0 descriptor??
[ 1550.472238][ T3653] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[ 1550.893069][T16146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1550.949367][T16146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1552.168088][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1552.174597][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1552.335088][ T4351] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1552.509653][T16184] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1552.522157][T16184] netlink: 'syz.9.2711': attribute type 21 has an invalid length.
[ 1552.530586][T16184] netlink: 'syz.9.2711': attribute type 6 has an invalid length.
[ 1552.538684][T16184] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2711'.
[ 1552.580880][ T4351] usb 9-1: Using ep0 maxpacket: 8
[ 1552.588573][ T4351] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1552.637905][ T4351] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1552.682013][ T4351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.943790][ T4351] usb 9-1: config 0 descriptor??
[ 1552.987545][   T14] usb 5-1: USB disconnect, device number 27
[ 1553.006049][ T4351] iowarrior 9-1:0.0: no interrupt-in endpoint found
[ 1554.227935][ T4898] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1554.513180][T16204] syz.9.2717 (16204): drop_caches: 2
[ 1554.602101][ T4898] usb 5-1: Using ep0 maxpacket: 16
[ 1554.623361][ T4898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1554.671469][ T4898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1554.810123][ T4898] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1554.886675][ T4898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1554.980804][ T4898] usb 5-1: config 0 descriptor??
[ 1555.046509][ T4898] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1555.471811][T16224] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2721'.
[ 1555.522656][T12271] usb 9-1: USB disconnect, device number 30
[ 1555.630816][T16228] gfs2: not a GFS2 filesystem
[ 1558.365162][T16249] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1558.383784][T16249] netlink: 'syz.2.2724': attribute type 21 has an invalid length.
[ 1558.391816][T16249] netlink: 'syz.2.2724': attribute type 6 has an invalid length.
[ 1558.399693][T16249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2724'.
[ 1558.533952][ T3653] usb 5-1: USB disconnect, device number 28
[ 1558.858017][T16256] netlink: 'syz.9.2725': attribute type 21 has an invalid length.
[ 1558.866603][T16256] netlink: 'syz.9.2725': attribute type 6 has an invalid length.
[ 1558.874442][T16256] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2725'.
[ 1561.122962][T16269] syz.8.2729 (16269): drop_caches: 2
[ 1562.925660][T16287] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2733'.
[ 1563.035674][ T3653] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1563.367148][ T3653] usb 10-1: Using ep0 maxpacket: 8
[ 1563.460643][T16297] gfs2: not a GFS2 filesystem
[ 1563.484661][ T3653] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1563.909649][ T3653] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1564.149573][ T3653] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1564.233182][ T3653] usb 10-1: config 0 descriptor??
[ 1564.263106][ T3653] iowarrior 10-1:0.0: no interrupt-in endpoint found
[ 1565.876067][T16318] netlink: 'syz.8.2738': attribute type 21 has an invalid length.
[ 1565.884679][T16318] netlink: 'syz.8.2738': attribute type 6 has an invalid length.
[ 1565.892550][T16318] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2738'.
[ 1566.596420][T10219] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1566.797824][T10219] usb 3-1: Using ep0 maxpacket: 16
[ 1566.805247][T10219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1566.960242][T10219] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1567.081725][T10219] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1567.127251][T10219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1567.159503][T12271] usb 10-1: USB disconnect, device number 23
[ 1567.461962][T10219] usb 3-1: config 0 descriptor??
[ 1567.654990][T10219] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1568.716594][T16328] syz.9.2741 (16328): drop_caches: 2
[ 1569.144032][T10219] usb 3-1: USB disconnect, device number 18
[ 1570.307712][T16340] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2745'.
[ 1570.539553][ T4898] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1570.764627][ T4898] usb 10-1: Using ep0 maxpacket: 16
[ 1570.785611][ T4898] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1570.838085][ T4898] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1570.900857][ T4898] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1570.932120][ T4898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1571.136986][ T4898] usb 10-1: config 0 descriptor??
[ 1572.594920][ T4898] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0
[ 1572.859846][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1572.934225][T12491] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1572.963025][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1573.254596][T12491] usb 5-1: Using ep0 maxpacket: 8
[ 1574.305207][T16380] syz.2.2754 (16380): drop_caches: 2
[ 1574.360230][T12491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1574.370261][T12491] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1574.379969][T12491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1574.416093][T12491] usb 5-1: config 0 descriptor??
[ 1574.457386][T12491] iowarrior 5-1:0.0: no interrupt-in endpoint found
[ 1574.827092][T10219] usb 10-1: USB disconnect, device number 24
[ 1575.771925][T16404] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2758'.
[ 1577.330155][ T4898] usb 5-1: USB disconnect, device number 29
[ 1578.658351][T16428] gfs2: not a GFS2 filesystem
[ 1581.620415][T16450] syz.2.2767 (16450): drop_caches: 2
[ 1581.804296][T16453] gfs2: not a GFS2 filesystem
[ 1583.533185][T16463] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1583.545225][T16463] netlink: 'syz.2.2768': attribute type 21 has an invalid length.
[ 1583.553266][T16463] netlink: 'syz.2.2768': attribute type 6 has an invalid length.
[ 1583.561424][T16463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2768'.
[ 1584.070007][T16466] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2770'.
[ 1585.370286][T16477] netlink: 'syz.1.2772': attribute type 6 has an invalid length.
[ 1585.448098][T16477] netlink: 'syz.1.2772': attribute type 7 has an invalid length.
[ 1585.554669][T16477] netlink: 'syz.1.2772': attribute type 8 has an invalid length.
[ 1585.624190][T16477] netlink: 'syz.1.2772': attribute type 15 has an invalid length.
[ 1586.071112][ T4319] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1586.197095][T16489] fuse: Unknown parameter '0x0000000000000003'
[ 1586.413353][ T4319] usb 10-1: Using ep0 maxpacket: 8
[ 1586.421139][ T4319] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1586.432633][ T4319] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1586.443380][ T4319] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1586.579917][T16497] gfs2: not a GFS2 filesystem
[ 1587.428747][ T4319] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1587.454088][ T4319] usb 10-1: config 0 descriptor??
[ 1588.074130][ T4319] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1588.260495][T16504] syz.1.2778 (16504): drop_caches: 2
[ 1588.341018][T16481] iowarrior 10-1:0.0: Error -90 while submitting URB
[ 1588.874562][ T9023] usb 10-1: USB disconnect, device number 25
[ 1589.141132][T16516] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2781'.
[ 1589.549607][T16528] fuse: Unknown parameter '0x0000000000000003'
[ 1591.163437][T16542] gfs2: not a GFS2 filesystem
[ 1591.996234][T16553] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1592.017650][T16553] netlink: 'syz.2.2790': attribute type 21 has an invalid length.
[ 1592.025844][T16553] netlink: 'syz.2.2790': attribute type 6 has an invalid length.
[ 1592.034035][T16553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2790'.
[ 1594.501308][T16574] syz.2.2795 (16574): drop_caches: 2
[ 1594.856067][T16580] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2797'.
[ 1595.573721][T16594] fuse: Unknown parameter '0x0000000000000003'
[ 1598.233552][T16634] syz.1.2806 (16634): drop_caches: 2
[ 1598.550595][T16639] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2808'.
[ 1599.977207][T16658] fuse: Unknown parameter '0x0000000000000003'
[ 1601.221769][T16673] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2819'.
[ 1601.300715][T16675] syz.4.2817 (16675): drop_caches: 2
[ 1603.286629][T16700] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1605.960857][T16725] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2832'.
[ 1608.178505][T16734] syz.9.2833 (16734): drop_caches: 2
[ 1610.308346][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1610.319471][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1610.339835][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1610.356844][ T7278] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1610.372795][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1610.390622][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1610.398413][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1610.470918][ T7278] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1610.472227][T16750] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1610.491372][ T7278] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1610.738004][T16745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1611.337771][T16745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1611.372316][ T7278] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1611.405271][ T7278] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1611.423289][ T7278] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1611.436947][T16744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1611.585163][ T7278] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1611.608241][ T7278] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1611.657915][ T7278] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1612.613192][T12397] Bluetooth: hci1: command 0x0409 tx timeout
[ 1612.816543][ T7278] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1612.827162][ T7278] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1612.837864][ T7278] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1613.313843][T16779] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2843'.
[ 1614.288056][T12397] Bluetooth: hci0: unexpected event for opcode 0x007f
[ 1614.685167][T16746] chnl_net:caif_netlink_parms(): no params data found
[ 1614.741348][T16781] syz.9.2844 (16781): drop_caches: 2
[ 1614.836724][T12397] Bluetooth: hci1: command 0x041b tx timeout
[ 1615.138720][T16746] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1615.167306][T16746] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1615.193183][T16746] device bridge_slave_0 entered promiscuous mode
[ 1616.054997][T16746] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1616.070201][T16746] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1616.106680][T16746] device bridge_slave_1 entered promiscuous mode
[ 1617.059796][T12397] Bluetooth: hci1: command 0x040f tx timeout
[ 1617.312195][T16746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1617.326787][T16746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1617.526256][T16746] team0: Port device team_slave_0 added
[ 1617.543544][T16746] team0: Port device team_slave_1 added
[ 1617.833108][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1617.839569][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1618.863613][T16746] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1618.874925][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1618.901176][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1619.225233][T16828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1619.283444][T12397] Bluetooth: hci1: command 0x0419 tx timeout
[ 1619.338864][T16829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1619.772194][T16824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1620.421788][T16746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1620.628229][T16834] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2856'.
[ 1621.600790][T16746] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1621.608836][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1621.635247][T16746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1622.623099][T16746] device hsr_slave_0 entered promiscuous mode
[ 1622.751443][T16746] device hsr_slave_1 entered promiscuous mode
[ 1622.784022][T16746] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1622.794558][T16746] Cannot create hsr debugfs directory
[ 1623.203249][T16846] device syzkaller0 entered promiscuous mode
[ 1623.642162][ T4391] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1623.859144][ T4391] usb 9-1: Using ep0 maxpacket: 16
[ 1623.876593][ T4391] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1623.888519][ T4391] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1624.071700][ T4391] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1624.085557][ T4391] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1624.094878][ T4391] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1624.141970][ T4391] usb 9-1: config 0 descriptor??
[ 1624.390422][T16857] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2861'.
[ 1624.651052][ T4391] usbhid 9-1:0.0: can't add hid device: -71
[ 1624.658280][ T4391] usbhid: probe of 9-1:0.0 failed with error -71
[ 1624.671590][ T9023] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1624.686604][ T4391] usb 9-1: USB disconnect, device number 31
[ 1624.884754][ T9023] usb 10-1: Using ep0 maxpacket: 8
[ 1624.894118][ T9023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1624.932969][ T9023] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1624.942390][ T9023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1624.955937][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1624.957038][ T9023] usb 10-1: config 0 descriptor??
[ 1625.254261][ T9023] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1627.176239][T13172] usb 10-1: USB disconnect, device number 26
[ 1627.678611][T16889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1627.810188][T16890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1628.317560][T16885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1629.988010][T16900] gfs2: not a GFS2 filesystem
[ 1633.393458][T14495] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1633.607203][T14495] usb 9-1: Using ep0 maxpacket: 16
[ 1633.614654][T14495] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1633.634919][T14495] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1633.645037][T14495] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1633.658957][T14495] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1633.671833][T14495] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1633.683476][T14495] usb 9-1: config 0 descriptor??
[ 1633.938098][T16918] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2874'.
[ 1634.189809][T14495] usbhid 9-1:0.0: can't add hid device: -71
[ 1634.210878][T14495] usbhid: probe of 9-1:0.0 failed with error -71
[ 1634.229449][T14495] usb 9-1: USB disconnect, device number 32
[ 1635.304198][T16924] serio: Serial port ptm0
[ 1636.063300][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2875'.
[ 1636.072695][T16925] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2875'.
[ 1636.086196][T16925] device geneve3 entered promiscuous mode
[ 1637.551916][ T5881] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1637.808483][ T5881] usb 10-1: Using ep0 maxpacket: 16
[ 1637.828268][ T5881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1637.843156][ T5881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1637.879264][ T5881] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1637.968285][ T5881] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1638.006965][ T5881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1638.072092][ T5881] usb 10-1: config 0 descriptor??
[ 1638.285291][ T7278] device hsr_slave_0 left promiscuous mode
[ 1638.476687][ T7278] device hsr_slave_1 left promiscuous mode
[ 1638.534331][ T7278] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1638.734766][ T7278] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1638.808750][ T5881] usbhid 10-1:0.0: can't add hid device: -71
[ 1638.816036][ T5881] usbhid: probe of 10-1:0.0 failed with error -71
[ 1638.861641][ T5881] usb 10-1: USB disconnect, device number 27
[ 1638.955137][ T7278] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1638.964261][ T7278] bridge0: port 3(team0) entered disabled state
[ 1638.973907][ T7278] device bridge_slave_1 left promiscuous mode
[ 1638.980551][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1639.059558][ T7278] device bridge_slave_0 left promiscuous mode
[ 1639.065974][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1640.064883][T16956] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2886'.
[ 1641.851157][T16962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1642.160545][ T4319] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1642.169401][T16967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1642.394047][ T4319] usb 9-1: Using ep0 maxpacket: 16
[ 1642.409908][ T4319] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1642.422776][T16958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1642.533455][ T4319] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1642.596633][ T4319] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1642.693901][ T4319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1642.996096][ T4319] usb 9-1: config 0 descriptor??
[ 1643.076233][ T7278] device bond_slave_0 left promiscuous mode
[ 1643.082396][ T7278] device bond_slave_1 left promiscuous mode
[ 1643.285535][ T4319] usbhid 9-1:0.0: can't add hid device: -71
[ 1643.303462][ T4319] usbhid: probe of 9-1:0.0 failed with error -71
[ 1643.371850][ T4319] usb 9-1: USB disconnect, device number 33
[ 1643.395327][ T7278] device veth1_macvtap left promiscuous mode
[ 1643.418651][ T7278] device veth0_macvtap left promiscuous mode
[ 1643.435601][ T7278] device veth1_vlan left promiscuous mode
[ 1643.441758][ T7278] device veth0_vlan left promiscuous mode
[ 1644.147879][T16983] syz.2.2882 (16983): drop_caches: 2
[ 1644.779487][ T7278] bond8 (unregistering): Released all slaves
[ 1645.317249][ T7278] bond7 (unregistering): Released all slaves
[ 1645.720201][T17001] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1645.963589][ T7278] bond6 (unregistering): Released all slaves
[ 1646.424921][ T7278] bond5 (unregistering): Released all slaves
[ 1646.625987][ T7278] bond4 (unregistering): Released all slaves
[ 1646.810130][ T7278] bond3 (unregistering): Released all slaves
[ 1646.834770][ T7278] bond2 (unregistering): (slave macvlan2): Removing an active aggregator
[ 1646.844150][ T7278] bond2 (unregistering): (slave macvlan2): Releasing backup interface
[ 1647.031511][ T7278] bond2 (unregistering): Released all slaves
[ 1647.059111][ T7278] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1647.251627][ T7278] bond1 (unregistering): Released all slaves
[ 1647.924799][ T7278] device team_slave_1 left promiscuous mode
[ 1647.937425][ T7278] team0 (unregistering): Port device team_slave_1 removed
[ 1648.005507][ T7278] device team_slave_0 left promiscuous mode
[ 1648.012638][ T7278] team0 (unregistering): Port device team_slave_0 removed
[ 1648.069856][ T7278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1648.131128][ T7278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1648.630306][ T7278] bond0 (unregistering): Released all slaves
[ 1648.883561][T16976] netlink: 'syz.9.2889': attribute type 21 has an invalid length.
[ 1648.891632][T16976] netlink: 'syz.9.2889': attribute type 6 has an invalid length.
[ 1648.899757][T16976] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2889'.
[ 1648.956445][T17001] netlink: 'syz.8.2894': attribute type 21 has an invalid length.
[ 1648.965258][T17001] netlink: 'syz.8.2894': attribute type 6 has an invalid length.
[ 1648.973243][T17001] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2894'.
[ 1649.499332][ T9023] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1649.833830][ T9023] usb 10-1: Using ep0 maxpacket: 16
[ 1649.868090][ T9023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1649.903234][ T9023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1649.977140][ T9023] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1650.237855][ T9023] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1650.247644][ T9023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1650.265943][ T9023] usb 10-1: config 0 descriptor??
[ 1650.722136][ T9023] usbhid 10-1:0.0: can't add hid device: -71
[ 1650.728306][ T9023] usbhid: probe of 10-1:0.0 failed with error -71
[ 1650.772372][ T9023] usb 10-1: USB disconnect, device number 28
[ 1650.806928][ T4351] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1650.916248][T16746] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1650.963536][T16746] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1651.002010][T16746] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1651.031022][ T4351] usb 9-1: Using ep0 maxpacket: 16
[ 1651.044881][T16746] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1651.053992][ T4351] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1651.072129][T17032] syz.1.2901 (17032): drop_caches: 2
[ 1651.106051][ T4351] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1651.112760][ T4351] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1651.195377][ T4351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1651.272661][ T4351] usb 9-1: config 0 descriptor??
[ 1651.295915][T16746] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1651.470570][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1651.511148][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1652.080460][T16746] 8021q: adding VLAN 0 to HW filter on device team0
[ 1652.143487][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1652.268132][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1652.352803][ T4351] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0
[ 1652.370760][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1652.378022][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1652.430741][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1652.571083][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1652.636167][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1652.661941][ T4655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1652.669227][ T4655] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1652.730870][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1652.741681][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1652.763731][T17023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1652.797016][T17023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1652.839025][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1652.862295][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1652.914868][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1652.956175][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1652.978016][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1653.011315][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1653.150185][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1653.243164][T17055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1653.357015][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1653.539946][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1653.567949][T16746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1653.692016][T17060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1653.912612][T17050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1654.454274][T12505] usb 9-1: USB disconnect, device number 34
[ 1655.217739][T17073] netlink: 'syz.9.2910': attribute type 6 has an invalid length.
[ 1655.226147][T17073] netlink: 'syz.9.2910': attribute type 7 has an invalid length.
[ 1655.234556][T17073] netlink: 'syz.9.2910': attribute type 8 has an invalid length.
[ 1655.242505][T17073] netlink: 'syz.9.2910': attribute type 15 has an invalid length.
[ 1656.755498][T17085] binder: 17083:17085 ioctl c0306201 0 returned -14
[ 1656.830856][T17086] syz.2.2913 (17086): drop_caches: 2
[ 1657.423482][T12397] Bluetooth: hci1: command 0x0411 tx timeout
[ 1657.996641][T17090] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2915'.
[ 1658.125053][T17101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.211775][T17102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.430832][T17098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1658.990289][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1659.037903][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1659.086098][T16746] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1659.454743][T17112] netlink: 'syz.8.2920': attribute type 21 has an invalid length.
[ 1659.529576][ T4319] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1659.691454][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:32'
[ 1659.701922][ T4898] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1659.709931][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1659.717535][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1659.727724][ T4286] Workqueue: hci2 hci_rx_work
[ 1659.732661][ T4286] Call Trace:
[ 1659.736053][ T4286]  <TASK>
[ 1659.739090][ T4286]  dump_stack_lvl+0x188/0x24e
[ 1659.744247][ T4286]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1659.750178][ T4286]  ? show_regs_print_info+0x12/0x12
[ 1659.755705][ T4286]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1659.761434][ T4286]  sysfs_create_dir_ns+0x26a/0x290
[ 1659.766719][ T4286]  ? sysfs_warn_dup+0xa0/0xa0
[ 1659.771537][ T4286]  ? preempt_schedule_thunk+0x16/0x18
[ 1659.777028][ T4286]  kobject_add_internal+0x61c/0xcc0
[ 1659.782343][ T4286]  kobject_add+0x160/0x230
[ 1659.786871][ T4286]  ? kobject_init+0x1d0/0x1d0
[ 1659.791617][ T4286]  ? klist_children_get+0x50/0x50
[ 1659.796776][ T4286]  ? get_device_parent+0x121/0x3f0
[ 1659.802033][ T4286]  device_add+0x483/0xfb0
[ 1659.806431][ T4286]  ? kmem_cache_free+0xf7/0x290
[ 1659.811434][ T4286]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1659.816595][ T4286]  le_conn_complete_evt+0x1062/0x1670
[ 1659.822050][ T4286]  ? le_conn_complete_evt+0xe9/0x1670
[ 1659.827501][ T4286]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1659.833889][ T4286]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1659.839579][ T4286]  ? lockdep_hardirqs_on+0x94/0x140
[ 1659.844881][ T4286]  ? skb_pull_data+0xf7/0x200
[ 1659.849713][ T4286]  hci_le_conn_complete_evt+0x183/0x440
[ 1659.855331][ T4286]  ? hci_remote_host_features_evt+0x270/0x270
[ 1659.861482][ T4286]  hci_event_packet+0x7b9/0x1280
[ 1659.866708][ T4286]  ? bis_list+0x280/0x280
[ 1659.871106][ T4286]  ? kcov_remote_start+0x27/0x7e0
[ 1659.876269][ T4286]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1659.881634][ T4286]  hci_rx_work+0x3eb/0xd40
[ 1659.886127][ T4286]  ? process_one_work+0x7b0/0x1160
[ 1659.891453][ T4286]  process_one_work+0x8a2/0x1160
[ 1659.896473][ T4286]  ? worker_detach_from_pool+0x240/0x240
[ 1659.902159][ T4286]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1659.907237][ T4286]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1659.912829][ T4286]  ? kthread_data+0x4b/0xc0
[ 1659.917399][ T4286]  worker_thread+0xaa2/0x1270
[ 1659.922182][ T4286]  kthread+0x29d/0x330
[ 1659.926366][ T4286]  ? worker_clr_flags+0x1a0/0x1a0
[ 1659.931530][ T4286]  ? kthread_blkcg+0xd0/0xd0
[ 1659.936165][ T4286]  ret_from_fork+0x1f/0x30
[ 1659.940651][ T4286]  </TASK>
[ 1660.317595][ T4286] kobject_add_internal failed for hci2:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1660.331146][ T4286] Bluetooth: hci2: failed to register connection device
[ 1660.576770][ T4319] usb 2-1: Using ep0 maxpacket: 32
[ 1660.584094][ T4319] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[ 1660.592339][ T4319] usb 2-1: config 0 has no interface number 0
[ 1660.599039][ T4319] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1660.610497][ T4319] usb 2-1: config 0 interface 85 has no altsetting 0
[ 1660.620601][ T4319] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1660.629937][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1660.638718][ T4319] usb 2-1: Product: syz
[ 1660.643417][ T4319] usb 2-1: Manufacturer: syz
[ 1660.648081][ T4319] usb 2-1: SerialNumber: syz
[ 1660.653032][ T4898] usb 10-1: Using ep0 maxpacket: 16
[ 1660.660502][ T4898] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1660.696176][ T4319] usb 2-1: config 0 descriptor??
[ 1660.707818][ T4898] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1660.714774][ T4898] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1660.724719][ T4898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1660.750535][ T4898] usb 10-1: config 0 descriptor??
[ 1660.923002][ T4319] appletouch 2-1:0.85: Failed to read mode from device.
[ 1660.933945][ T4319] appletouch: probe of 2-1:0.85 failed with error -5
[ 1661.013342][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1661.030101][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1661.072649][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1661.082849][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1661.093922][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1661.103567][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1661.117389][T16746] device veth0_vlan entered promiscuous mode
[ 1661.139988][T16746] device veth1_vlan entered promiscuous mode
[ 1661.175111][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1661.187958][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1661.197417][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1661.206711][ T8079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1661.221568][T16746] device veth0_macvtap entered promiscuous mode
[ 1661.231458][ T4898] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0
[ 1661.242157][T16746] device veth1_macvtap entered promiscuous mode
[ 1661.301275][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1661.312156][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.322778][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1661.334347][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.345195][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1661.356639][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.373683][ T4319] usb 2-1: USB disconnect, device number 29
[ 1661.379456][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1661.437750][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.482800][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1661.513013][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.552173][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1661.586557][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.617966][T16746] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1661.632451][T17109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1661.650098][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1661.661984][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1661.672611][T17109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1661.685447][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1661.701240][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1661.717375][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.750404][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.764608][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.778673][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.788952][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.800221][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.810694][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.821536][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.831481][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.842206][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.874154][T16746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1661.890667][T16746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1661.904516][T16746] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1661.913889][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1661.946269][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1661.971740][T16746] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1661.993295][T16746] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1662.019900][T16746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1662.028743][T16746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1662.555328][ T4286] Bluetooth: hci2: command 0x2016 tx timeout
[ 1663.132079][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1663.142810][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1663.155453][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1663.198964][   T14] usb 10-1: USB disconnect, device number 29
[ 1663.266986][ T4502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1663.275663][ T4502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1663.309684][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1663.810121][T17142] binder: BINDER_SET_CONTEXT_MGR already set
[ 1663.831751][T17146] syz.9.2927 (17146): drop_caches: 2
[ 1663.862489][T17142] binder: 17137:17142 ioctl 4018620d 200000004a80 returned -16
[ 1664.193825][T17142] binder: 17137:17142 ioctl c0306201 0 returned -14
[ 1665.350754][T17168] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2930'.
[ 1666.588933][   T26] kauditd_printk_skb: 35 callbacks suppressed
[ 1666.589044][   T26] audit: type=1326 audit(1779352807.431:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.2.2933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1666.684452][   T26] audit: type=1326 audit(1779352807.468:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.2.2933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1667.179465][   T26] audit: type=1326 audit(1779352807.468:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.2.2933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1667.203629][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1667.386518][   T26] audit: type=1326 audit(1779352807.468:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.2.2933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1667.511626][   T26] audit: type=1326 audit(1779352807.468:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.2.2933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1667.585086][   T26] audit: type=1326 audit(1779352807.468:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.2.2933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1667.649720][   T26] audit: type=1326 audit(1779352807.468:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.2.2933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1667.708467][   T26] audit: type=1326 audit(1779352807.468:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.2.2933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1668.038213][ T4314] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1668.749634][   T26] audit: type=1326 audit(1779352807.468:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.2.2933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1668.775063][   T26] audit: type=1326 audit(1779352807.468:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17176 comm="syz.2.2933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1668.914589][ T4314] usb 2-1: Using ep0 maxpacket: 16
[ 1668.931498][ T4314] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1668.972292][ T4314] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1669.002834][ T4314] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1669.053607][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1669.105762][ T4314] usb 2-1: config 0 descriptor??
[ 1669.599307][T17202] netlink: 'syz.9.2938': attribute type 21 has an invalid length.
[ 1669.607349][T17202] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1669.831868][T17204] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1669.852183][T17204] netlink: 'syz.2.2941': attribute type 21 has an invalid length.
[ 1669.861251][T17204] netlink: 'syz.2.2941': attribute type 6 has an invalid length.
[ 1669.869403][T17204] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2941'.
[ 1670.397602][ T4314] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[ 1670.903918][T17189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1670.957853][T17209] binder: 17207:17209 ioctl c0306201 0 returned -14
[ 1671.074446][T17189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1671.508181][    C0] hrtimer: interrupt took 36180 ns
[ 1671.790845][T12397] Bluetooth: hci3: command 0x2016 tx timeout
[ 1672.969169][T11832] usb 2-1: USB disconnect, device number 30
[ 1673.217299][T17208] fido_id[17208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1673.676912][T17238] gfs2: not a GFS2 filesystem
[ 1674.665377][T17247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2949'.
[ 1678.509048][T17274] gfs2: not a GFS2 filesystem
[ 1679.048578][T11832] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1679.369502][T11832] usb 2-1: Using ep0 maxpacket: 32
[ 1679.405120][T11832] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[ 1679.414220][T11832] usb 2-1: config 0 has no interface number 0
[ 1679.420717][T11832] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1679.432769][T11832] usb 2-1: config 0 interface 85 has no altsetting 0
[ 1679.508066][ T4319] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1679.538527][T11832] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1679.558473][T11832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1679.567919][T11832] usb 2-1: Product: syz
[ 1679.572573][T11832] usb 2-1: Manufacturer: syz
[ 1679.577259][T11832] usb 2-1: SerialNumber: syz
[ 1679.585646][T11832] usb 2-1: config 0 descriptor??
[ 1679.743583][ T4319] usb 10-1: Using ep0 maxpacket: 16
[ 1679.789587][ T4319] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1679.811119][ T4319] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1679.823582][ T4319] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1679.839386][ T4319] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1679.956244][ T4319] usb 10-1: config 0 descriptor??
[ 1680.203603][T11832] appletouch 2-1:0.85: Failed to read mode from device.
[ 1680.213722][T11832] appletouch: probe of 2-1:0.85 failed with error -5
[ 1680.752115][T11832] usb 2-1: USB disconnect, device number 31
[ 1680.765122][ T4319] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0
[ 1681.129320][T17281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1681.155863][T17281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1683.510277][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1683.517034][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1683.731323][ T4319] usb 10-1: USB disconnect, device number 30
[ 1687.585935][T17340] netlink: 'syz.2.2974': attribute type 21 has an invalid length.
[ 1690.406452][T12397] Bluetooth: hci5: command 0x2016 tx timeout
[ 1691.127395][ T5881] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1692.015001][ T5881] usb 5-1: Using ep0 maxpacket: 16
[ 1692.024611][ T5881] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1692.056978][ T5881] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1692.067076][T17358] binder: BINDER_SET_CONTEXT_MGR already set
[ 1692.073623][ T5881] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1692.084128][T17358] binder: 17357:17358 ioctl 4018620d 200000004a80 returned -16
[ 1692.101518][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.144412][ T5881] usb 5-1: config 0 descriptor??
[ 1692.611940][ T5881] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[ 1693.209207][T17355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1693.376097][T17355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1694.701983][T12597] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1694.913401][ T5881] usb 5-1: USB disconnect, device number 30
[ 1694.966536][T12597] usb 9-1: Using ep0 maxpacket: 16
[ 1695.353186][T12597] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1695.492304][T12597] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1695.517510][T12597] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1695.560053][T12597] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1695.569828][T12597] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1695.592190][T12597] usb 9-1: config 0 descriptor??
[ 1695.821748][T17391] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2989'.
[ 1695.967676][T17403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1696.040865][T17404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1696.667772][T17400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1697.293440][ T5800] wlan1: authenticate with 08:02:11:00:00:00
[ 1697.301193][ T5800] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1697.424360][ T6283] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1697.650652][T12597] usbhid 9-1:0.0: can't add hid device: -71
[ 1697.656695][T12597] usbhid: probe of 9-1:0.0 failed with error -71
[ 1697.787712][ T6546] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1698.257650][T12597] usb 9-1: USB disconnect, device number 35
[ 1698.654569][ T7139] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1700.421837][T17430] netlink: 'syz.1.2996': attribute type 21 has an invalid length.
[ 1700.430538][T17430] netlink: 'syz.1.2996': attribute type 6 has an invalid length.
[ 1700.438393][T17430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2996'.
[ 1701.635372][ T5800] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1701.838366][ T5800] usb 2-1: Using ep0 maxpacket: 16
[ 1701.850981][ T5800] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1701.868223][ T5800] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1701.879242][ T5800] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1701.894256][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1701.967510][ T5800] usb 2-1: config 0 descriptor??
[ 1702.496741][ T5800] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[ 1703.330081][T17434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1703.378508][T17434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1703.664585][T17461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1703.754255][T17462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1704.487202][T17459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1704.557670][T16727] wlan1: authenticate with 08:02:11:00:00:00
[ 1705.051563][T16727] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1705.248531][ T4522] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1705.313858][ T9023] usb 2-1: USB disconnect, device number 32
[ 1705.365936][ T6546] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1705.494416][ T6283] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1706.835541][T17475] gfs2: not a GFS2 filesystem
[ 1707.739150][T11832] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1708.032105][T17486] netlink: 'syz.4.3010': attribute type 21 has an invalid length.
[ 1708.040660][T17486] netlink: 'syz.4.3010': attribute type 6 has an invalid length.
[ 1708.048439][T17486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3010'.
[ 1708.341180][T11832] usb 10-1: Using ep0 maxpacket: 16
[ 1708.947076][T11832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1709.096721][T11832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1709.462790][T11832] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1709.516521][T17494] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1709.611757][T17495] netlink: 'syz.4.3012': attribute type 21 has an invalid length.
[ 1709.619713][T17495] netlink: 'syz.4.3012': attribute type 6 has an invalid length.
[ 1709.627556][T17495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3012'.
[ 1709.695239][T11832] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1711.352759][T11832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1711.378591][T11832] usb 10-1: config 0 descriptor??
[ 1711.546922][T11832] usb 10-1: can't set config #0, error -71
[ 1711.554605][T11832] usb 10-1: USB disconnect, device number 31
[ 1712.036412][T11832] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1712.517589][T11832] usb 10-1: Using ep0 maxpacket: 32
[ 1712.537855][T11832] usb 10-1: config 0 has an invalid interface number: 85 but max is 0
[ 1712.560845][T11832] usb 10-1: config 0 has no interface number 0
[ 1712.576358][T11832] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1712.597678][T11832] usb 10-1: config 0 interface 85 has no altsetting 0
[ 1712.645770][T11832] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1712.683778][T11832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1712.776180][T17514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1712.865912][T17515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1713.588315][T17512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1713.859209][T11832] usb 10-1: Product: syz
[ 1714.181616][T11832] usb 10-1: Manufacturer: syz
[ 1714.192461][T11832] usb 10-1: SerialNumber: syz
[ 1714.237240][T11832] usb 10-1: config 0 descriptor??
[ 1714.961575][T11832] appletouch 10-1:0.85: Failed to read mode from device.
[ 1714.996681][T11832] appletouch: probe of 10-1:0.85 failed with error -5
[ 1715.061382][T11832] usb 10-1: USB disconnect, device number 32
[ 1715.541907][T17530] gfs2: not a GFS2 filesystem
[ 1717.024041][T17537] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1717.965397][T17547] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1717.985351][T17547] netlink: 'syz.2.3025': attribute type 21 has an invalid length.
[ 1717.993801][T17547] netlink: 'syz.2.3025': attribute type 6 has an invalid length.
[ 1718.001717][T17547] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3025'.
[ 1721.025809][T17562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.102576][T17563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.787347][T17558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1722.380949][T14495] wlan1: authenticate with 08:02:11:00:00:00
[ 1722.395995][T14495] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1722.447874][ T4314] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1722.565546][ T8079] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1722.683817][ T4314] usb 9-1: Using ep0 maxpacket: 32
[ 1722.693819][ T8079] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1722.702628][ T4314] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[ 1722.737127][ T4314] usb 9-1: config 0 has no interface number 0
[ 1722.741479][T17570] netlink: 'syz.1.3032': attribute type 6 has an invalid length.
[ 1722.755997][ T4314] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1722.796178][ T4314] usb 9-1: config 0 interface 85 has no altsetting 0
[ 1722.812053][T17570] netlink: 'syz.1.3032': attribute type 7 has an invalid length.
[ 1722.822272][   T11] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1722.826933][ T4314] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1722.966003][T17570] netlink: 'syz.1.3032': attribute type 8 has an invalid length.
[ 1722.982251][ T4314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1722.992177][T17570] netlink: 'syz.1.3032': attribute type 15 has an invalid length.
[ 1723.001246][ T4314] usb 9-1: Product: syz
[ 1723.013705][ T4314] usb 9-1: Manufacturer: syz
[ 1723.020702][ T4314] usb 9-1: SerialNumber: syz
[ 1723.039696][ T4314] usb 9-1: config 0 descriptor??
[ 1724.241258][ T4314] appletouch 9-1:0.85: Geyser mode initialized.
[ 1724.303570][ T4314] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input46
[ 1724.682010][T12597] usb 9-1: USB disconnect, device number 36
[ 1724.682130][    C0] appletouch 9-1:0.85: atp_complete: usb_submit_urb failed with result -19
[ 1725.304923][T12597] appletouch 9-1:0.85: input: appletouch disconnected
[ 1725.574731][T17592] netlink: 'syz.1.3038': attribute type 21 has an invalid length.
[ 1725.583097][T17592] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1725.650325][T17593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1727.155114][T17589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1728.320831][ T4286] Bluetooth: hci0: command 0x2016 tx timeout
[ 1730.109625][T17619] gfs2: not a GFS2 filesystem
[ 1731.124055][T17617] netlink: 'syz.4.3046': attribute type 6 has an invalid length.
[ 1731.150633][T17617] netlink: 'syz.4.3046': attribute type 7 has an invalid length.
[ 1731.190107][T17617] netlink: 'syz.4.3046': attribute type 8 has an invalid length.
[ 1731.213240][T17617] netlink: 'syz.4.3046': attribute type 15 has an invalid length.
[ 1731.674447][T17637] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1731.694759][T17637] netlink: 'syz.9.3050': attribute type 21 has an invalid length.
[ 1731.703351][T17637] netlink: 'syz.9.3050': attribute type 6 has an invalid length.
[ 1731.711760][T17637] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3050'.
[ 1732.424736][ T5730] wlan1: authenticate with 08:02:11:00:00:00
[ 1732.453582][ T5730] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1732.585268][ T5523] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 1732.710399][ T8079] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 1733.191047][ T8079] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 1733.365407][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1734.015779][T17647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1737.395391][T17681] gfs2: not a GFS2 filesystem
[ 1737.509261][T17683] netlink: 'syz.4.3059': attribute type 21 has an invalid length.
[ 1737.517390][T17683] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1741.315174][ T4286] Bluetooth: hci1: command 0x2016 tx timeout
[ 1741.406607][T17697] netlink: 'syz.8.3063': attribute type 21 has an invalid length.
[ 1741.414855][T17697] netlink: 'syz.8.3063': attribute type 6 has an invalid length.
[ 1741.422811][T17697] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3063'.
[ 1744.607285][   T26] kauditd_printk_skb: 22 callbacks suppressed
[ 1744.607303][   T26] audit: type=1326 audit(1779352880.409:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.2.3070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1744.724356][   T26] audit: type=1326 audit(1779352880.418:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.2.3070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1744.750945][   T26] audit: type=1326 audit(1779352880.418:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.2.3070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1744.776629][   T26] audit: type=1326 audit(1779352880.418:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.2.3070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1744.812843][   T26] audit: type=1326 audit(1779352880.418:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.2.3070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1745.056220][ T4315] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1745.317387][T17732] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1745.337454][T17732] netlink: 'syz.9.3064': attribute type 21 has an invalid length.
[ 1745.345635][T17732] netlink: 'syz.9.3064': attribute type 6 has an invalid length.
[ 1745.353460][T17732] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3064'.
[ 1745.513692][ T4315] usb 9-1: Using ep0 maxpacket: 16
[ 1746.038079][ T4315] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1746.052175][   T26] audit: type=1326 audit(1779352880.418:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.2.3070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1746.076541][ T4315] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1746.097163][ T4315] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1746.328998][T17734] netlink: 'syz.4.3073': attribute type 21 has an invalid length.
[ 1746.342414][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:32'
[ 1746.353043][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1746.360682][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1746.370803][ T4286] Workqueue: hci1 hci_rx_work
[ 1746.375553][ T4286] Call Trace:
[ 1746.378875][ T4286]  <TASK>
[ 1746.381957][ T4286]  dump_stack_lvl+0x188/0x24e
[ 1746.386898][ T4286]  ? show_regs_print_info+0x12/0x12
[ 1746.392163][ T4286]  ? load_image+0x400/0x400
[ 1746.396784][ T4286]  sysfs_create_dir_ns+0x26a/0x290
[ 1746.401961][ T4286]  ? sysfs_warn_dup+0xa0/0xa0
[ 1746.406699][ T4286]  ? do_raw_spin_unlock+0x11d/0x230
[ 1746.411970][ T4286]  kobject_add_internal+0x61c/0xcc0
[ 1746.417236][ T4286]  kobject_add+0x160/0x230
[ 1746.421715][ T4286]  ? kobject_init+0x1d0/0x1d0
[ 1746.426477][ T4286]  ? klist_children_get+0x50/0x50
[ 1746.431569][ T4286]  ? get_device_parent+0x121/0x3f0
[ 1746.436738][ T4286]  device_add+0x483/0xfb0
[ 1746.441156][ T4286]  ? kmem_cache_free+0xf7/0x290
[ 1746.446078][ T4286]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1746.451091][ T4286]  le_conn_complete_evt+0x1062/0x1670
[ 1746.456528][ T4286]  ? le_conn_complete_evt+0xe9/0x1670
[ 1746.461965][ T4286]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1746.468324][ T4286]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1746.474151][ T4286]  ? skb_pull_data+0xf7/0x200
[ 1746.478894][ T4286]  hci_le_conn_complete_evt+0x183/0x440
[ 1746.484506][ T4286]  ? hci_remote_host_features_evt+0x270/0x270
[ 1746.490736][ T4286]  hci_event_packet+0x7b9/0x1280
[ 1746.495771][ T4286]  ? bis_list+0x280/0x280
[ 1746.500192][ T4286]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1746.506245][ T4286]  ? kcov_remote_start+0x4c7/0x7e0
[ 1746.511434][ T4286]  ? patch_conexant_auto+0x1260/0x1650
[ 1746.517046][ T4286]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1746.522402][ T4286]  hci_rx_work+0x3eb/0xd40
[ 1746.526878][ T4286]  ? _raw_spin_unlock+0x40/0x40
[ 1746.531797][ T4286]  ? process_one_work+0x7b0/0x1160
[ 1746.536967][ T4286]  process_one_work+0x8a2/0x1160
[ 1746.542070][ T4286]  ? worker_detach_from_pool+0x240/0x240
[ 1746.547781][ T4286]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1746.552858][ T4286]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1746.558457][ T4286]  ? kthread_data+0x4b/0xc0
[ 1746.563030][ T4286]  worker_thread+0xaa2/0x1270
[ 1746.567804][ T4286]  kthread+0x29d/0x330
[ 1746.571921][ T4286]  ? worker_clr_flags+0x1a0/0x1a0
[ 1746.577168][ T4286]  ? kthread_blkcg+0xd0/0xd0
[ 1746.581860][ T4286]  ret_from_fork+0x1f/0x30
[ 1746.586372][ T4286]  </TASK>
[ 1746.611308][ T4286] kobject_add_internal failed for hci1:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1746.626189][ T4286] Bluetooth: hci1: failed to register connection device
[ 1746.750477][   T26] audit: type=1326 audit(1779352880.465:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.2.3070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1746.774902][   T26] audit: type=1326 audit(1779352880.465:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.2.3070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1746.799117][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1746.800368][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1746.834140][ T4315] usb 9-1: config 0 descriptor??
[ 1746.837586][   T26] audit: type=1326 audit(1779352880.483:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.2.3070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1748.012004][   T26] audit: type=1326 audit(1779352880.483:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17720 comm="syz.2.3070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1748.165307][ T4315] usbhid 9-1:0.0: can't add hid device: -71
[ 1748.172952][ T4315] usbhid: probe of 9-1:0.0 failed with error -71
[ 1748.181924][ T4315] usb 9-1: USB disconnect, device number 37
[ 1749.091739][ T4286] Bluetooth: hci1: command 0x2016 tx timeout
[ 1749.185665][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1749.192258][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1751.769151][T14495] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1752.068443][T14495] usb 9-1: Using ep0 maxpacket: 16
[ 1752.076724][T14495] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1752.089834][T14495] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1752.096643][T14495] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1752.106174][T14495] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1752.125715][T14495] usb 9-1: config 0 descriptor??
[ 1752.333854][   T26] kauditd_printk_skb: 14 callbacks suppressed
[ 1752.333947][   T26] audit: type=1326 audit(1779352887.640:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.3090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1752.364510][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1752.387242][   T26] audit: type=1326 audit(1779352887.677:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.3090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1752.538097][   T26] audit: type=1326 audit(1779352887.677:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.3090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1752.596707][T14495] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0
[ 1752.704167][T17795] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3091'.
[ 1754.289808][   T26] audit: type=1326 audit(1779352887.677:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.3090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1754.446915][   T26] audit: type=1326 audit(1779352887.677:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.3090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1754.695163][   T26] audit: type=1326 audit(1779352887.677:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.3090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1754.818183][   T26] audit: type=1326 audit(1779352887.677:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.3090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1754.842487][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1754.892692][   T26] audit: type=1326 audit(1779352887.677:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.3090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1754.916867][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1755.008343][   T26] audit: type=1326 audit(1779352887.724:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.3090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1755.033755][   T26] audit: type=1326 audit(1779352887.724:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17790 comm="syz.2.3090" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1755.058339][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1756.470603][T12597] usb 9-1: USB disconnect, device number 38
[ 1757.720459][T17821] gfs2: not a GFS2 filesystem
[ 1757.838660][T17823] netlink: 'syz.8.3098': attribute type 21 has an invalid length.
[ 1759.618377][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:32'
[ 1759.628243][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1759.635847][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1759.646044][ T4286] Workqueue: hci2 hci_rx_work
[ 1759.650799][ T4286] Call Trace:
[ 1759.654147][ T4286]  <TASK>
[ 1759.657126][ T4286]  dump_stack_lvl+0x188/0x24e
[ 1759.661891][ T4286]  ? show_regs_print_info+0x12/0x12
[ 1759.667151][ T4286]  ? load_image+0x400/0x400
[ 1759.671732][ T4286]  sysfs_create_dir_ns+0x26a/0x290
[ 1759.676917][ T4286]  ? sysfs_warn_dup+0xa0/0xa0
[ 1759.681663][ T4286]  ? do_raw_spin_unlock+0x11d/0x230
[ 1759.686911][ T4286]  kobject_add_internal+0x61c/0xcc0
[ 1759.692211][ T4286]  kobject_add+0x160/0x230
[ 1759.696711][ T4286]  ? kobject_init+0x1d0/0x1d0
[ 1759.701472][ T4286]  ? klist_children_get+0x50/0x50
[ 1759.706562][ T4286]  ? get_device_parent+0x121/0x3f0
[ 1759.711830][ T4286]  device_add+0x483/0xfb0
[ 1759.716219][ T4286]  ? kmem_cache_free+0xf7/0x290
[ 1759.721132][ T4286]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1759.726133][ T4286]  le_conn_complete_evt+0x1062/0x1670
[ 1759.731575][ T4286]  ? le_conn_complete_evt+0xe9/0x1670
[ 1759.737012][ T4286]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1759.743419][ T4286]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1759.749150][ T4286]  ? skb_pull_data+0xf7/0x200
[ 1759.753896][ T4286]  hci_le_conn_complete_evt+0x183/0x440
[ 1759.759511][ T4286]  ? hci_remote_host_features_evt+0x270/0x270
[ 1759.765742][ T4286]  hci_event_packet+0x7b9/0x1280
[ 1759.771020][ T4286]  ? bis_list+0x280/0x280
[ 1759.775499][ T4286]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1759.781471][ T4286]  ? kcov_remote_start+0x4c7/0x7e0
[ 1759.786649][ T4286]  ? patch_conexant_auto+0x1260/0x1650
[ 1759.792222][ T4286]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1759.797484][ T4286]  hci_rx_work+0x3eb/0xd40
[ 1759.802025][ T4286]  ? _raw_spin_unlock+0x40/0x40
[ 1759.806940][ T4286]  ? process_one_work+0x7b0/0x1160
[ 1759.812106][ T4286]  process_one_work+0x8a2/0x1160
[ 1759.817219][ T4286]  ? worker_detach_from_pool+0x240/0x240
[ 1759.822917][ T4286]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1759.827990][ T4286]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1759.833607][ T4286]  ? kthread_data+0x4b/0xc0
[ 1759.838202][ T4286]  worker_thread+0xaa2/0x1270
[ 1759.842965][ T4286]  kthread+0x29d/0x330
[ 1759.847092][ T4286]  ? worker_clr_flags+0x1a0/0x1a0
[ 1759.852167][ T4286]  ? kthread_blkcg+0xd0/0xd0
[ 1759.856813][ T4286]  ret_from_fork+0x1f/0x30
[ 1759.861400][ T4286]  </TASK>
[ 1759.864475][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1759.901855][ T4286] kobject_add_internal failed for hci2:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1759.915316][ T4286] Bluetooth: hci2: failed to register connection device
[ 1760.416565][T17828] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1761.420791][T17841] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3103'.
[ 1762.095148][ T4286] Bluetooth: hci2: command 0x2016 tx timeout
[ 1762.109756][T12505] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1763.799969][T12505] usb 3-1: Using ep0 maxpacket: 32
[ 1764.677985][T12505] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1764.691322][T12505] usb 3-1: can't read configurations, error -71
[ 1764.875033][   T14] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1765.349932][T17865] gfs2: not a GFS2 filesystem
[ 1765.390342][T17866] trusted_key: encrypted_key: master key parameter 'defaultė/»R}F°O“ed:syz' is invalid
[ 1765.528279][   T26] kauditd_printk_skb: 11 callbacks suppressed
[ 1765.528296][   T26] audit: type=1326 audit(1779352899.988:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1766.555312][   T14] usb 2-1: Using ep0 maxpacket: 16
[ 1766.575209][   T14] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1766.608594][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1766.670558][   T14] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1766.736177][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1766.748233][   T26] audit: type=1326 audit(1779352900.016:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1766.811708][   T14] usb 2-1: config 0 descriptor??
[ 1766.895938][   T26] audit: type=1326 audit(1779352900.961:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1766.920293][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1767.142133][   T26] audit: type=1326 audit(1779352900.961:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1767.322536][   T14] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[ 1768.247388][T17934] netlink: 'syz.8.3114': attribute type 21 has an invalid length.
[ 1768.277945][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:32'
[ 1768.287621][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1768.295313][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1768.305412][ T4286] Workqueue: hci2 hci_rx_work
[ 1768.310153][ T4286] Call Trace:
[ 1768.313495][ T4286]  <TASK>
[ 1768.316472][ T4286]  dump_stack_lvl+0x188/0x24e
[ 1768.321226][ T4286]  ? show_regs_print_info+0x12/0x12
[ 1768.326500][ T4286]  ? load_image+0x400/0x400
[ 1768.331101][ T4286]  sysfs_create_dir_ns+0x26a/0x290
[ 1768.336335][ T4286]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[ 1768.342142][ T4286]  ? sysfs_warn_dup+0xa0/0xa0
[ 1768.346908][ T4286]  kobject_add_internal+0x61c/0xcc0
[ 1768.352189][ T4286]  kobject_add+0x160/0x230
[ 1768.356681][ T4286]  ? kobject_init+0x1d0/0x1d0
[ 1768.361425][ T4286]  ? klist_children_get+0x50/0x50
[ 1768.366499][ T4286]  ? get_device_parent+0x121/0x3f0
[ 1768.371666][ T4286]  device_add+0x483/0xfb0
[ 1768.376137][ T4286]  ? kmem_cache_free+0xf7/0x290
[ 1768.381048][ T4286]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1768.386039][ T4286]  le_conn_complete_evt+0x1062/0x1670
[ 1768.391637][ T4286]  ? le_conn_complete_evt+0xe9/0x1670
[ 1768.397289][ T4286]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1768.403593][ T4286]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1768.409419][ T4286]  ? skb_pull_data+0xf7/0x200
[ 1768.414151][ T4286]  hci_le_conn_complete_evt+0x183/0x440
[ 1768.419867][ T4286]  ? hci_remote_host_features_evt+0x270/0x270
[ 1768.425998][ T4286]  hci_event_packet+0x7b9/0x1280
[ 1768.431013][ T4286]  ? bis_list+0x280/0x280
[ 1768.435406][ T4286]  ? kcov_remote_start+0x27/0x7e0
[ 1768.440629][ T4286]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1768.445995][ T4286]  hci_rx_work+0x3eb/0xd40
[ 1768.450489][ T4286]  ? process_one_work+0x7b0/0x1160
[ 1768.455662][ T4286]  process_one_work+0x8a2/0x1160
[ 1768.460849][ T4286]  ? worker_detach_from_pool+0x240/0x240
[ 1768.466632][ T4286]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1768.471714][ T4286]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1768.477312][ T4286]  ? kthread_data+0x4b/0xc0
[ 1768.481880][ T4286]  worker_thread+0xaa2/0x1270
[ 1768.486638][ T4286]  kthread+0x29d/0x330
[ 1768.490750][ T4286]  ? worker_clr_flags+0x1a0/0x1a0
[ 1768.495871][ T4286]  ? kthread_blkcg+0xd0/0xd0
[ 1768.500534][ T4286]  ret_from_fork+0x1f/0x30
[ 1768.505209][ T4286]  </TASK>
[ 1768.508418][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1768.525631][ T4286] kobject_add_internal failed for hci2:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1768.539127][ T4286] Bluetooth: hci2: failed to register connection device
[ 1768.673568][   T26] audit: type=1326 audit(1779352900.971:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1769.406099][   T26] audit: type=1326 audit(1779352900.980:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1769.909552][T14495] usb 2-1: USB disconnect, device number 33
[ 1770.381406][   T26] audit: type=1326 audit(1779352900.980:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1770.732319][ T4286] Bluetooth: hci2: command 0x2016 tx timeout
[ 1771.162011][   T26] audit: type=1326 audit(1779352900.980:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1771.186756][   T26] audit: type=1326 audit(1779352900.980:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1771.256051][   T26] audit: type=1326 audit(1779352900.980:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1771.652905][   T26] audit: type=1326 audit(1779352900.980:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1772.090641][   T26] audit: type=1326 audit(1779352900.980:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1772.120846][   T26] audit: type=1326 audit(1779352900.980:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1772.679504][   T26] audit: type=1326 audit(1779352900.980:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1772.795587][   T26] audit: type=1326 audit(1779352900.980:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1772.869010][   T26] audit: type=1326 audit(1779352900.980:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1773.035754][T12505] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1773.062053][   T26] audit: type=1326 audit(1779352900.980:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17867 comm="syz.2.3112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1773.151278][T17978] gfs2: not a GFS2 filesystem
[ 1774.121051][T12505] usb 5-1: Using ep0 maxpacket: 32
[ 1774.129529][T12505] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[ 1774.148493][T12505] usb 5-1: config 0 has no interface number 0
[ 1774.155900][T12505] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1774.173525][T12505] usb 5-1: config 0 interface 85 has no altsetting 0
[ 1774.212555][T12505] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1774.227843][T12505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1774.236052][T12505] usb 5-1: Product: syz
[ 1774.241151][T12505] usb 5-1: Manufacturer: syz
[ 1774.245859][T12505] usb 5-1: SerialNumber: syz
[ 1774.446365][T17983] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1774.458319][T17983] netlink: 'syz.2.3126': attribute type 21 has an invalid length.
[ 1774.466808][T17983] netlink: 'syz.2.3126': attribute type 6 has an invalid length.
[ 1774.473897][   T14] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1774.474962][T17983] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3126'.
[ 1774.527404][T12505] usb 5-1: config 0 descriptor??
[ 1774.773684][   T14] usb 2-1: Using ep0 maxpacket: 8
[ 1774.782541][   T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1774.859977][   T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1774.877539][   T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[ 1774.889493][   T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1774.909080][   T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1774.927865][   T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1774.951573][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1774.979066][T12505] appletouch 5-1:0.85: Geyser mode initialized.
[ 1774.999015][T12505] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input47
[ 1775.466649][T12505] usb 5-1: USB disconnect, device number 31
[ 1775.466858][    C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19
[ 1775.601580][   T14] usb 2-1: GET_CAPABILITIES returned 0
[ 1775.612591][   T14] usbtmc 2-1:16.0: can't read capabilities
[ 1775.881674][T17999] netlink: 'syz.9.3129': attribute type 21 has an invalid length.
[ 1775.936791][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:32'
[ 1775.970377][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1775.978039][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1775.988149][ T4286] Workqueue: hci3 hci_rx_work
[ 1775.992979][ T4286] Call Trace:
[ 1775.996306][ T4286]  <TASK>
[ 1775.999287][ T4286]  dump_stack_lvl+0x188/0x24e
[ 1776.004037][ T4286]  ? show_regs_print_info+0x12/0x12
[ 1776.009300][ T4286]  ? load_image+0x400/0x400
[ 1776.013872][ T4286]  sysfs_create_dir_ns+0x26a/0x290
[ 1776.019057][ T4286]  ? sysfs_warn_dup+0xa0/0xa0
[ 1776.023878][ T4286]  ? do_raw_spin_unlock+0x11d/0x230
[ 1776.029305][ T4286]  kobject_add_internal+0x61c/0xcc0
[ 1776.034583][ T4286]  kobject_add+0x160/0x230
[ 1776.039087][ T4286]  ? kobject_init+0x1d0/0x1d0
[ 1776.043848][ T4286]  ? klist_children_get+0x50/0x50
[ 1776.048928][ T4286]  ? get_device_parent+0x121/0x3f0
[ 1776.054106][ T4286]  device_add+0x483/0xfb0
[ 1776.058482][ T4286]  ? kmem_cache_free+0xf7/0x290
[ 1776.063392][ T4286]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1776.068391][ T4286]  le_conn_complete_evt+0x1062/0x1670
[ 1776.073830][ T4286]  ? le_conn_complete_evt+0xe9/0x1670
[ 1776.079351][ T4286]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1776.085744][ T4286]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1776.091446][ T4286]  ? skb_pull_data+0xf7/0x200
[ 1776.096182][ T4286]  hci_le_conn_complete_evt+0x183/0x440
[ 1776.101796][ T4286]  ? hci_remote_host_features_evt+0x270/0x270
[ 1776.108022][ T4286]  hci_event_packet+0x7b9/0x1280
[ 1776.113044][ T4286]  ? bis_list+0x280/0x280
[ 1776.117526][ T4286]  ? kcov_remote_start+0x27/0x7e0
[ 1776.122604][ T4286]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1776.127871][ T4286]  hci_rx_work+0x3eb/0xd40
[ 1776.132616][ T4286]  ? process_one_work+0x7b0/0x1160
[ 1776.137794][ T4286]  process_one_work+0x8a2/0x1160
[ 1776.142807][ T4286]  ? worker_detach_from_pool+0x240/0x240
[ 1776.148498][ T4286]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1776.153572][ T4286]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1776.159168][ T4286]  ? kthread_data+0x4b/0xc0
[ 1776.163753][ T4286]  worker_thread+0xaa2/0x1270
[ 1776.168526][ T4286]  kthread+0x29d/0x330
[ 1776.172631][ T4286]  ? worker_clr_flags+0x1a0/0x1a0
[ 1776.177784][ T4286]  ? kthread_blkcg+0xd0/0xd0
[ 1776.182432][ T4286]  ret_from_fork+0x1f/0x30
[ 1776.186929][ T4286]  </TASK>
[ 1776.190147][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1776.487710][ T4286] kobject_add_internal failed for hci3:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1776.503041][ T4286] Bluetooth: hci3: failed to register connection device
[ 1776.668148][T12597] usb 2-1: USB disconnect, device number 34
[ 1776.695014][   T26] kauditd_printk_skb: 26 callbacks suppressed
[ 1776.695043][   T26] audit: type=1326 audit(1779352910.429:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17984 comm="syz.8.3127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd5b9ce59 code=0x7ffc0000
[ 1776.728571][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'.
[ 1776.762562][T12505] appletouch 5-1:0.85: input: appletouch disconnected
[ 1776.833560][   T26] audit: type=1326 audit(1779352910.475:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17984 comm="syz.8.3127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd5b9ce59 code=0x7ffc0000
[ 1778.332857][ T4319] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1778.598166][T18021] gfs2: not a GFS2 filesystem
[ 1779.277953][T12397] Bluetooth: hci3: command 0x2016 tx timeout
[ 1779.328178][ T4319] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1779.423055][ T4319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1779.434210][ T4319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1779.443768][ T4319] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1779.455114][ T4319] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1779.489771][ T4319] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1779.511376][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1779.525830][ T4319] usb 2-1: Product: syz
[ 1779.532370][ T4319] usb 2-1: Manufacturer: syz
[ 1779.560211][ T4319] cdc_wdm 2-1:1.0: skipping garbage
[ 1779.566538][ T4319] cdc_wdm 2-1:1.0: skipping garbage
[ 1779.576858][ T4319] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1779.582909][ T4319] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1779.802430][T18007] cdc_wdm 2-1:1.0: Error submitting int urb - -90
[ 1779.852098][T12597] usb 2-1: USB disconnect, device number 35
[ 1780.476166][T18037] gfs2: not a GFS2 filesystem
[ 1781.732281][ T4319] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1781.799725][   T26] audit: type=1326 audit(1779352915.209:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1781.897803][   T26] audit: type=1326 audit(1779352915.237:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1781.950598][ T4319] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x6C, skipping
[ 1782.003572][ T4319] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 1782.027373][   T26] audit: type=1326 audit(1779352915.237:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1782.066285][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1782.100015][ T4319] usb 5-1: config 0 descriptor??
[ 1782.141421][ T4319] smsusb:smsusb_probe: board id=8, interface number 0
[ 1782.148554][ T4319] smsusb:smsusb_probe: Device initialized with return code -19
[ 1782.192652][   T26] audit: type=1326 audit(1779352915.237:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1782.416475][   T26] audit: type=1326 audit(1779352915.237:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1782.467018][ T4319] usb 5-1: USB disconnect, device number 32
[ 1782.572057][   T26] audit: type=1326 audit(1779352915.237:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1782.979289][   T26] audit: type=1326 audit(1779352915.237:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1783.036343][   T26] audit: type=1326 audit(1779352915.237:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1783.254778][   T26] audit: type=1326 audit(1779352915.237:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1783.293620][T18057] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3144'.
[ 1783.323243][   T26] audit: type=1326 audit(1779352915.237:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1783.405974][T18060] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1783.418041][T18060] netlink: 'syz.2.3146': attribute type 21 has an invalid length.
[ 1783.426234][T18060] netlink: 'syz.2.3146': attribute type 6 has an invalid length.
[ 1783.434176][T18060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3146'.
[ 1783.754345][   T26] audit: type=1326 audit(1779352915.237:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1783.906707][   T26] audit: type=1326 audit(1779352915.237:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1784.430113][T18066] gfs2: not a GFS2 filesystem
[ 1784.778786][   T26] audit: type=1326 audit(1779352915.237:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.1.3143" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2c99ce59 code=0x7ffc0000
[ 1784.853556][T18057] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.3144'.
[ 1785.585752][T18074] netlink: 'syz.2.3148': attribute type 21 has an invalid length.
[ 1785.644548][T12397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:32'
[ 1785.656438][T12397] CPU: 1 PID: 12397 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1785.664156][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1785.674268][T12397] Workqueue: hci5 hci_rx_work
[ 1785.679122][T12397] Call Trace:
[ 1785.682472][T12397]  <TASK>
[ 1785.685456][T12397]  dump_stack_lvl+0x188/0x24e
[ 1785.690207][T12397]  ? show_regs_print_info+0x12/0x12
[ 1785.695438][T12397]  ? load_image+0x400/0x400
[ 1785.700045][T12397]  sysfs_create_dir_ns+0x26a/0x290
[ 1785.705245][T12397]  ? sysfs_warn_dup+0xa0/0xa0
[ 1785.710044][T12397]  ? do_raw_spin_unlock+0x11d/0x230
[ 1785.715411][T12397]  kobject_add_internal+0x61c/0xcc0
[ 1785.720676][T12397]  kobject_add+0x160/0x230
[ 1785.725160][T12397]  ? kobject_init+0x1d0/0x1d0
[ 1785.729907][T12397]  ? klist_children_get+0x50/0x50
[ 1785.734974][T12397]  ? get_device_parent+0x121/0x3f0
[ 1785.740122][T12397]  device_add+0x483/0xfb0
[ 1785.744484][T12397]  ? kmem_cache_free+0xf7/0x290
[ 1785.749381][T12397]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1785.754358][T12397]  le_conn_complete_evt+0x1062/0x1670
[ 1785.759771][T12397]  ? le_conn_complete_evt+0xe9/0x1670
[ 1785.765225][T12397]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1785.771599][T12397]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1785.777282][T12397]  ? skb_pull_data+0xf7/0x200
[ 1785.782028][T12397]  hci_le_conn_complete_evt+0x183/0x440
[ 1785.787617][T12397]  ? hci_remote_host_features_evt+0x270/0x270
[ 1785.793725][T12397]  hci_event_packet+0x7b9/0x1280
[ 1785.798709][T12397]  ? bis_list+0x280/0x280
[ 1785.803068][T12397]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1785.809086][T12397]  ? kcov_remote_start+0x4c7/0x7e0
[ 1785.814231][T12397]  ? patch_conexant_auto+0x1260/0x1650
[ 1785.819741][T12397]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1785.825023][T12397]  hci_rx_work+0x3eb/0xd40
[ 1785.829474][T12397]  ? _raw_spin_unlock+0x40/0x40
[ 1785.834359][T12397]  ? process_one_work+0x7b0/0x1160
[ 1785.839503][T12397]  process_one_work+0x8a2/0x1160
[ 1785.844485][T12397]  ? worker_detach_from_pool+0x240/0x240
[ 1785.850153][T12397]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1785.855299][T12397]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1785.860877][T12397]  ? kthread_data+0x4b/0xc0
[ 1785.865432][T12397]  worker_thread+0xaa2/0x1270
[ 1785.870148][T12397]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[ 1785.876081][T12397]  ? __kthread_parkme+0x162/0x1c0
[ 1785.881239][T12397]  kthread+0x29d/0x330
[ 1785.885333][T12397]  ? worker_clr_flags+0x1a0/0x1a0
[ 1785.890391][T12397]  ? kthread_blkcg+0xd0/0xd0
[ 1785.895044][T12397]  ret_from_fork+0x1f/0x30
[ 1785.899510][T12397]  </TASK>
[ 1785.909142][T12397] kobject_add_internal failed for hci5:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1785.922850][T12397] Bluetooth: hci5: failed to register connection device
[ 1787.028814][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3151'.
[ 1787.062884][T18078] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1787.070347][T18078] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1788.092888][T12397] Bluetooth: hci5: command 0x2016 tx timeout
[ 1788.730939][T18094] gfs2: not a GFS2 filesystem
[ 1789.239439][T18095] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[ 1789.248136][T18095] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[ 1789.256763][T18095] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[ 1789.770893][T12397] Bluetooth: hci0: unexpected event for opcode 0x007f
[ 1790.624799][T18114] syz.4.3157 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1790.760337][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3157'.
[ 1790.875921][T18114] ubi31: attaching mtd0
[ 1790.920644][T18114] ubi31: scanning is finished
[ 1791.095893][T18114] ubi31: empty MTD device detected
[ 1792.500145][T18116] gfs2: not a GFS2 filesystem
[ 1792.512010][T12397] Bluetooth: Frame is too long (len 12, expected len 4)
[ 1792.891279][T18114] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1793.052213][T12397] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1793.061273][T12397] Bluetooth: hci5: Injecting HCI hardware error event
[ 1793.071513][ T4286] Bluetooth: hci5: hardware error 0x00
[ 1793.665827][T18124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1794.256720][T18122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1795.457538][ T4286] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1797.414942][T18138] netlink: 'syz.9.3165': attribute type 21 has an invalid length.
[ 1797.532656][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:32'
[ 1797.542403][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1797.550005][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1797.560211][ T4286] Workqueue: hci3 hci_rx_work
[ 1797.564999][ T4286] Call Trace:
[ 1797.568328][ T4286]  <TASK>
[ 1797.571306][ T4286]  dump_stack_lvl+0x188/0x24e
[ 1797.576058][ T4286]  ? show_regs_print_info+0x12/0x12
[ 1797.581322][ T4286]  ? load_image+0x400/0x400
[ 1797.585900][ T4286]  sysfs_create_dir_ns+0x26a/0x290
[ 1797.591091][ T4286]  ? sysfs_warn_dup+0xa0/0xa0
[ 1797.595824][ T4286]  ? do_raw_spin_unlock+0x11d/0x230
[ 1797.601077][ T4286]  kobject_add_internal+0x61c/0xcc0
[ 1797.606347][ T4286]  kobject_add+0x160/0x230
[ 1797.610817][ T4286]  ? kobject_init+0x1d0/0x1d0
[ 1797.615815][ T4286]  ? klist_children_get+0x50/0x50
[ 1797.620895][ T4286]  ? get_device_parent+0x121/0x3f0
[ 1797.626064][ T4286]  device_add+0x483/0xfb0
[ 1797.630448][ T4286]  ? kmem_cache_free+0xf7/0x290
[ 1797.635376][ T4286]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1797.640388][ T4286]  le_conn_complete_evt+0x1062/0x1670
[ 1797.645828][ T4286]  ? le_conn_complete_evt+0xe9/0x1670
[ 1797.651262][ T4286]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1797.657745][ T4286]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1797.663451][ T4286]  ? skb_pull_data+0xf7/0x200
[ 1797.668205][ T4286]  hci_le_conn_complete_evt+0x183/0x440
[ 1797.673886][ T4286]  ? hci_remote_host_features_evt+0x270/0x270
[ 1797.680111][ T4286]  hci_event_packet+0x7b9/0x1280
[ 1797.685120][ T4286]  ? bis_list+0x280/0x280
[ 1797.689615][ T4286]  ? kcov_remote_start+0x27/0x7e0
[ 1797.694694][ T4286]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1797.699955][ T4286]  hci_rx_work+0x3eb/0xd40
[ 1797.704432][ T4286]  ? process_one_work+0x7b0/0x1160
[ 1797.709596][ T4286]  process_one_work+0x8a2/0x1160
[ 1797.714610][ T4286]  ? worker_detach_from_pool+0x240/0x240
[ 1797.720318][ T4286]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1797.725476][ T4286]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1797.731077][ T4286]  ? kthread_data+0x4b/0xc0
[ 1797.735643][ T4286]  worker_thread+0xaa2/0x1270
[ 1797.740400][ T4286]  kthread+0x29d/0x330
[ 1797.744508][ T4286]  ? worker_clr_flags+0x1a0/0x1a0
[ 1797.749578][ T4286]  ? kthread_blkcg+0xd0/0xd0
[ 1797.754210][ T4286]  ret_from_fork+0x1f/0x30
[ 1797.758882][ T4286]  </TASK>
[ 1798.274695][ T4286] kobject_add_internal failed for hci3:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1798.288241][ T4286] Bluetooth: hci3: failed to register connection device
[ 1798.610828][T12271] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1798.758744][T18147] gfs2: not a GFS2 filesystem
[ 1798.814126][T12271] usb 5-1: Using ep0 maxpacket: 16
[ 1798.848164][T12271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1799.473571][T18149] autofs4:pid:18149:autofs_fill_super: called with bogus options
[ 1799.490582][T12271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1799.509039][T12271] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1799.523718][T12271] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1799.542963][T12271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1799.555047][T12271] usb 5-1: config 0 descriptor??
[ 1800.164371][T12271] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max
[ 1800.246675][T12271] microsoft 0003:045E:07DA.0013: report_id 0 is invalid
[ 1800.253815][T12271] microsoft 0003:045E:07DA.0013: item 0 1 1 8 parsing failed
[ 1800.330157][T12271] microsoft 0003:045E:07DA.0013: parse failed
[ 1800.347141][T12271] microsoft: probe of 0003:045E:07DA.0013 failed with error -22
[ 1800.495180][ T4286] Bluetooth: hci3: command 0x2016 tx timeout
[ 1800.959601][T18165] batadv0 speed is unknown, defaulting to 1000
[ 1801.070366][T18165] batadv0 speed is unknown, defaulting to 1000
[ 1801.084449][   T26] kauditd_printk_skb: 11 callbacks suppressed
[ 1801.084466][   T26] audit: type=1326 audit(1779352933.245:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.2.3174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1801.375639][T18165] batadv0 speed is unknown, defaulting to 1000
[ 1801.499998][   T26] audit: type=1326 audit(1779352933.245:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.2.3174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1801.525118][T12397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1801.536110][T12397] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1801.545199][T12397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1801.555802][T12397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1801.587282][T12397] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1801.604544][T12397] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1801.632847][   T26] audit: type=1326 audit(1779352933.245:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.2.3174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1801.657509][   T26] audit: type=1326 audit(1779352933.245:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.2.3174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1801.682206][   T26] audit: type=1326 audit(1779352933.245:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.2.3174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1801.706573][   T26] audit: type=1326 audit(1779352933.245:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.2.3174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1801.734420][   T26] audit: type=1326 audit(1779352933.245:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.2.3174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1801.761872][   T26] audit: type=1326 audit(1779352933.245:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.2.3174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1801.975892][   T26] audit: type=1326 audit(1779352933.245:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.2.3174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1802.274156][   T26] audit: type=1326 audit(1779352933.245:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.2.3174" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1802.613777][ T4319] usb 5-1: USB disconnect, device number 33
[ 1802.616175][ T6283] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1802.875808][T18165] infiniband syz1: set active
[ 1802.881091][T18165] infiniband syz1: added batadv0
[ 1802.926302][T18165] rdma_rxe: unable to create cq
[ 1802.944906][T18165] infiniband syz1: Couldn't create ib_mad CQ
[ 1802.958140][T12597] batadv0 speed is unknown, defaulting to 1000
[ 1802.998641][T18165] infiniband syz1: Couldn't open port 1
[ 1803.134449][ T6283] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1803.196772][T18174] batadv0 speed is unknown, defaulting to 1000
[ 1803.566104][T18165] RDS/IB: syz1: added
[ 1803.598661][T18165] smc: adding ib device syz1 with port count 1
[ 1803.613798][T18165] smc:    ib device syz1 port 1 has pnetid 
[ 1803.628793][T12597] batadv0 speed is unknown, defaulting to 1000
[ 1803.725967][ T6283] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1803.828783][T12397] Bluetooth: hci2: command 0x0409 tx timeout
[ 1804.126139][T18195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.746562][T18192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.391392][ T6283] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1805.442639][T18165] batadv0 speed is unknown, defaulting to 1000
[ 1805.998051][T18174] chnl_net:caif_netlink_parms(): no params data found
[ 1806.093908][T12397] Bluetooth: hci2: command 0x041b tx timeout
[ 1806.222362][T18165] batadv0 speed is unknown, defaulting to 1000
[ 1806.279968][ T6283] tipc: Left network mode
[ 1806.382411][T18214] gfs2: not a GFS2 filesystem
[ 1806.913096][T18165] batadv0 speed is unknown, defaulting to 1000
[ 1806.915575][T18174] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1807.041467][T18174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1807.094788][T18174] device bridge_slave_0 entered promiscuous mode
[ 1807.679311][T18174] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1807.699200][T18174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1807.736627][T18174] device bridge_slave_1 entered promiscuous mode
[ 1807.933439][T18165] batadv0 speed is unknown, defaulting to 1000
[ 1807.950401][T18174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1807.986934][T18174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1808.274114][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[ 1808.676464][T18174] team0: Port device team_slave_0 added
[ 1808.713286][T18165] batadv0 speed is unknown, defaulting to 1000
[ 1808.781484][T18174] team0: Port device team_slave_1 added
[ 1809.095274][T18174] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1809.125417][T18174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1809.151464][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1809.244156][T18174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1809.288818][T18165] batadv0 speed is unknown, defaulting to 1000
[ 1809.643094][T18174] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1809.650452][T18174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1809.813590][T18174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1809.879899][T18165] batadv0 speed is unknown, defaulting to 1000
[ 1810.313220][T18174] device hsr_slave_0 entered promiscuous mode
[ 1810.391179][T18174] device hsr_slave_1 entered promiscuous mode
[ 1811.819163][T12397] Bluetooth: hci2: command 0x0419 tx timeout
[ 1811.861350][T18174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1811.869713][T18174] Cannot create hsr debugfs directory
[ 1813.347392][ T6283] device hsr_slave_0 left promiscuous mode
[ 1813.456541][ T6283] device hsr_slave_1 left promiscuous mode
[ 1813.467940][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1813.491530][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1813.545546][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1813.553104][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1813.609168][ T6283] device bridge_slave_1 left promiscuous mode
[ 1813.637258][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1813.652499][ T6283] device bridge_slave_0 left promiscuous mode
[ 1813.694865][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1813.853930][T12271] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1813.952518][ T6283] device veth1_macvtap left promiscuous mode
[ 1813.958675][ T6283] device veth0_macvtap left promiscuous mode
[ 1813.991683][ T6283] device veth1_vlan left promiscuous mode
[ 1814.013278][ T6283] device veth0_vlan left promiscuous mode
[ 1814.305069][T12271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1814.428848][T18270] fuse: Bad value for 'group_id'
[ 1814.464573][T12271] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1814.775360][T12271] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1814.818415][T12271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1814.826507][T12271] usb 2-1: Product: syz
[ 1814.863961][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1814.870647][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1814.931175][T12271] usb 2-1: Manufacturer: syz
[ 1814.963551][T12271] usb 2-1: SerialNumber: syz
[ 1815.009811][T12271] usb 2-1: config 0 descriptor??
[ 1815.286968][ T4286] Bluetooth: hci0: unknown advertising packet type: 0x17
[ 1815.301895][T11982] usb 2-1: USB disconnect, device number 36
[ 1815.391233][   T26] kauditd_printk_skb: 14 callbacks suppressed
[ 1815.391251][   T26] audit: type=1326 audit(1779352946.623:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095b9ce59 code=0x7ffc0000
[ 1815.487523][   T26] audit: type=1326 audit(1779352946.670:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095b9ce59 code=0x7ffc0000
[ 1815.511909][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1815.595060][ T6283] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1815.671559][   T26] audit: type=1326 audit(1779352946.670:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb095b9ce59 code=0x7ffc0000
[ 1815.829839][   T26] audit: type=1326 audit(1779352946.670:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095b9ce59 code=0x7ffc0000
[ 1815.853998][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1816.147776][   T26] audit: type=1326 audit(1779352946.670:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095b9ce59 code=0x7ffc0000
[ 1816.172210][   T26] audit: type=1326 audit(1779352946.670:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb095b9ce59 code=0x7ffc0000
[ 1816.220398][   T26] audit: type=1326 audit(1779352946.670:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095b9ce59 code=0x7ffc0000
[ 1816.244618][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1816.334159][   T26] audit: type=1326 audit(1779352946.670:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095b9ce59 code=0x7ffc0000
[ 1816.376727][   T26] audit: type=1326 audit(1779352946.670:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb095b9ce59 code=0x7ffc0000
[ 1816.489320][   T26] audit: type=1326 audit(1779352946.670:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18278 comm="syz.4.3188" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb095b9ce59 code=0x7ffc0000
[ 1816.513740][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1817.006201][ T6283] bond1 (unregistering): Released all slaves
[ 1817.519001][T18297] smc: removing ib device syz1
[ 1821.359276][T18310] overlayfs: failed to resolve './file0': -2
[ 1821.529257][ T6283] team0 (unregistering): Port device team_slave_1 removed
[ 1821.613946][ T4286] Bluetooth: hci0: unexpected event for opcode 0x007f
[ 1821.653227][ T6283] team0 (unregistering): Port device team_slave_0 removed
[ 1821.734313][ T6283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1821.809887][ T6283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1822.474202][ T6283] bond0 (unregistering): Released all slaves
[ 1822.731697][T18296] lo speed is unknown, defaulting to 1000
[ 1822.808903][T18296] lo speed is unknown, defaulting to 1000
[ 1822.842616][T18296] lo speed is unknown, defaulting to 1000
[ 1822.894093][T18296] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1822.972475][T18296] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1823.057035][T18323] binder_alloc: 18322: binder_alloc_buf, no vma
[ 1823.080656][T18296] lo speed is unknown, defaulting to 1000
[ 1823.087619][T18296] lo speed is unknown, defaulting to 1000
[ 1823.249391][   T26] kauditd_printk_skb: 14 callbacks suppressed
[ 1823.249408][   T26] audit: type=1326 audit(1779352953.976:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18325 comm="syz.2.3207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1823.396065][   T26] audit: type=1326 audit(1779352953.976:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18325 comm="syz.2.3207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1823.436101][T18174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1823.488581][   T26] audit: type=1326 audit(1779352954.013:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18325 comm="syz.2.3207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1823.516371][T18296] lo speed is unknown, defaulting to 1000
[ 1823.527297][T18296] lo speed is unknown, defaulting to 1000
[ 1823.550758][T18296] lo speed is unknown, defaulting to 1000
[ 1823.569692][T18296] lo speed is unknown, defaulting to 1000
[ 1823.591111][T18296] lo speed is unknown, defaulting to 1000
[ 1824.282939][   T26] audit: type=1326 audit(1779352954.013:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18325 comm="syz.2.3207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1824.363742][   T26] audit: type=1326 audit(1779352954.013:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18325 comm="syz.2.3207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1824.588401][   T26] audit: type=1326 audit(1779352954.013:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18325 comm="syz.2.3207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1824.596526][T18174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1824.694524][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'.
[ 1824.759760][T18346] ubi31: attaching mtd0
[ 1824.765414][T18346] ubi31: scanning is finished
[ 1825.784252][T18346] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1825.836981][   T26] audit: type=1326 audit(1779352954.013:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18325 comm="syz.2.3207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1826.220347][   T26] audit: type=1326 audit(1779352954.013:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18325 comm="syz.2.3207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1826.422152][T18356] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1826.590238][T18174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1826.611404][   T26] audit: type=1326 audit(1779352954.013:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18325 comm="syz.2.3207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1826.635483][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1826.755958][   T26] audit: type=1326 audit(1779352954.013:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18325 comm="syz.2.3207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2259ce59 code=0x7ffc0000
[ 1826.780533][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1827.186773][T18174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1827.300180][T18372] binder_alloc: 18369: binder_alloc_buf, no vma
[ 1827.759186][T18174] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1827.844146][T18174] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1827.876954][T18377] gfs2: not a GFS2 filesystem
[ 1827.885236][T18174] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1827.923448][T18174] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1828.209320][T18174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1828.273588][T18174] 8021q: adding VLAN 0 to HW filter on device team0
[ 1828.295357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1828.314440][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1828.341490][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1828.357728][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1828.379894][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1828.387138][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1828.420122][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1828.437829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1828.478456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1828.498206][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1828.505468][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1828.681974][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1828.696164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1828.743513][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1828.776805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1828.817349][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1829.741912][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1829.775482][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1830.014923][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1830.255206][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1830.384523][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1830.537945][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1830.702483][T18392] netlink: 'syz.9.3221': attribute type 1 has an invalid length.
[ 1830.820269][T18393] bond2: (slave geneve3): Error -99 calling set_mac_address
[ 1830.863499][T18174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1832.269577][T18416] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1834.129144][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1834.132800][T11832] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 1834.144712][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1834.169703][T18174] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1834.232180][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1834.242306][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1834.270364][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1834.280223][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1834.293326][T18174] device veth0_vlan entered promiscuous mode
[ 1834.301193][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1834.310149][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1834.404960][T18174] device veth1_vlan entered promiscuous mode
[ 1834.507486][T18432] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1834.519500][T18432] netlink: 'syz.1.3229': attribute type 21 has an invalid length.
[ 1834.527475][T18432] netlink: 'syz.1.3229': attribute type 6 has an invalid length.
[ 1834.535436][T18432] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3229'.
[ 1835.238169][ T6283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1835.243833][T11832] usb 10-1: Using ep0 maxpacket: 32
[ 1835.257394][T11832] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1835.267070][T11832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1835.284388][T11832] usb 10-1: config 0 descriptor??
[ 1835.291823][ T6283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1835.314305][T11832] as10x_usb: device has been detected
[ 1835.322149][T11832] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1835.358385][T11832] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 1835.406231][ T6283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1835.412197][T11832] as10x_usb: error during firmware upload part1
[ 1835.453548][ T6283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1835.460496][T11832] Registered device nBox DVB-T Dongle
[ 1835.493663][T14495] usb 10-1: USB disconnect, device number 33
[ 1835.515525][T18174] device veth0_macvtap entered promiscuous mode
[ 1835.567139][T18174] device veth1_macvtap entered promiscuous mode
[ 1835.614629][T14495] Unregistered device nBox DVB-T Dongle
[ 1835.622106][T14495] as10x_usb: device has been disconnected
[ 1835.731282][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1835.774843][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1835.829111][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1835.905279][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1835.971520][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1836.013519][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1836.067453][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1836.120260][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1836.164934][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1836.225744][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1836.266972][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1836.311448][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1836.352755][T18174] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1836.565586][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1836.608431][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1836.641867][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1836.662434][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1836.696434][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1836.741054][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1836.822953][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1836.864120][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1836.895284][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1836.937485][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1836.981307][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1837.016433][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1837.045283][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1837.080272][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1837.111336][T18174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1837.161438][T18174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1837.207131][T18174] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1837.263506][T18174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1837.315467][T18174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1837.346521][T18174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1837.366693][T18174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1838.787181][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'.
[ 1838.811203][T18453] bridge0: port 3(macvlan2) entered disabled state
[ 1838.818010][T18453] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1838.825447][T18453] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1838.859938][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1838.881295][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1839.721558][ T6283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1839.744300][ T6283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1839.818186][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1839.870489][ T6283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1839.893415][ T6283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1839.911812][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1840.504500][T18492] serio: Serial port ptm0
[ 1841.627433][T18503] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1842.678501][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3250'.
[ 1842.724151][T18522] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1842.731563][T18522] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1847.714373][T11832] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1847.916545][T18577] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1847.928766][T18577] netlink: 'syz.0.3253': attribute type 21 has an invalid length.
[ 1847.937120][T18577] netlink: 'syz.0.3253': attribute type 6 has an invalid length.
[ 1847.944980][T18577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3253'.
[ 1848.060844][T11832] usb 5-1: Using ep0 maxpacket: 16
[ 1848.699207][T11832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1848.743691][T11832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1848.777056][T11832] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1848.829318][T11832] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1848.848406][T18580] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only
[ 1848.866911][T11832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1849.024294][T11832] usb 5-1: config 0 descriptor??
[ 1849.273669][T18566] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3259'.
[ 1849.932932][T11832] usbhid 5-1:0.0: can't add hid device: -71
[ 1849.939026][T11832] usbhid: probe of 5-1:0.0 failed with error -71
[ 1850.001605][T11832] usb 5-1: USB disconnect, device number 34
[ 1851.719190][T18614] binder: BINDER_SET_CONTEXT_MGR already set
[ 1851.725265][T18614] binder: 18613:18614 ioctl 4018620d 200000000040 returned -16
[ 1852.355195][T18629] loop4: detected capacity change from 0 to 512
[ 1852.746400][T18629] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 1852.834136][T18629] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[ 1852.898789][T18629] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3275: Corrupt directory, running e2fsck is recommended
[ 1852.993549][T18629] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[ 1853.043256][T18629] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.3275: corrupted in-inode xattr
[ 1853.083854][T18629] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.3275: couldn't read orphan inode 15 (err -117)
[ 1853.128854][T18629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1853.186550][T18629] EXT4-fs (loop4): shut down requested (0)
[ 1854.713145][T18643] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 1854.752443][ T5881] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[ 1854.780692][T18643] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[ 1854.850819][T18643] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3275: Corrupt directory, running e2fsck is recommended
[ 1854.966088][ T5881] usb 10-1: Using ep0 maxpacket: 16
[ 1854.973582][ T5881] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1855.047953][ T5881] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1855.077304][ T5881] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1855.088835][T16746] EXT4-fs (loop4): unmounting filesystem.
[ 1855.109718][ T5881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1855.147611][ T5881] usb 10-1: Product: syz
[ 1855.151962][ T5881] usb 10-1: Manufacturer: syz
[ 1855.169819][ T5881] usb 10-1: SerialNumber: syz
[ 1855.433939][ T5881] usb 10-1: 0:2 : does not exist
[ 1855.477178][ T5881] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1855.553206][ T5881] usb 10-1: USB disconnect, device number 34
[ 1856.228649][T17005] udevd[17005]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1856.793848][T12271] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1857.044810][T12271] usb 5-1: Using ep0 maxpacket: 16
[ 1857.055641][T12271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1857.080452][T12271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1857.090900][T12271] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1857.109359][T12271] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1857.140475][T12271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1857.715782][T12271] usb 5-1: config 0 descriptor??
[ 1857.971184][T18660] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3281'.
[ 1857.996403][T18673] loop1: detected capacity change from 0 to 512
[ 1858.149286][T18676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1858.228403][T18676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1858.957990][T18674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1859.510853][T12271] usbhid 5-1:0.0: can't add hid device: -71
[ 1859.516957][T12271] usbhid: probe of 5-1:0.0 failed with error -71
[ 1859.547675][T18673] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 1859.609393][T12271] usb 5-1: USB disconnect, device number 35
[ 1859.972455][T18673] EXT4-fs (loop1): 1 orphan inode deleted
[ 1859.978299][T18673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1859.999610][ T7278] __quota_error: 11 callbacks suppressed
[ 1859.999629][ T7278] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1860.001314][ T7278] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:29: Failed to release dquot type 1
[ 1860.028317][T18673] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1860.346446][T12310] EXT4-fs (loop1): unmounting filesystem.
[ 1861.932345][T18685] tty tty4: ldisc open failed (-12), clearing slot 3
[ 1863.303832][T18706] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1863.311002][T18706] bridge0: port 2(bridge_slave_1) entered listening state
[ 1863.318412][T18706] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1863.325689][T18706] bridge0: port 1(bridge_slave_0) entered listening state
[ 1863.334839][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1863.342527][T18706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1863.387829][T18706] net_ratelimit: 109 callbacks suppressed
[ 1863.387838][T18706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1866.339635][ T4286] Bluetooth: hci1: command 0x0406 tx timeout
[ 1866.690882][T18751] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3301'.
[ 1867.924327][T18746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1869.669363][T18745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1869.676586][T18757] binder: BINDER_SET_CONTEXT_MGR already set
[ 1869.687877][T18757] binder: 18756:18757 ioctl 4018620d 200000000200 returned -16
[ 1870.293709][T18775] serio: Serial port ptm0
[ 1874.969994][T18824] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3315'.
[ 1876.968266][T18834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1877.686806][T18829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1878.884416][T18856] loop9: detected capacity change from 0 to 512
[ 1878.971533][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'.
[ 1878.983298][T18857] ubi31: attaching mtd0
[ 1878.989847][T18857] ubi31: scanning is finished
[ 1879.370260][T18856] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1879.879700][T18857] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1880.061467][T18856] EXT4-fs (loop9): 1 truncate cleaned up
[ 1880.118509][T18856] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1880.435831][T18872] netlink: 'syz.1.3326': attribute type 6 has an invalid length.
[ 1880.499358][T18872] netlink: 'syz.1.3326': attribute type 7 has an invalid length.
[ 1880.540778][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1880.557619][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1880.802994][T18872] netlink: 'syz.1.3326': attribute type 8 has an invalid length.
[ 1880.899142][T10646] EXT4-fs (loop9): unmounting filesystem.
[ 1881.737723][T18872] netlink: 'syz.1.3326': attribute type 15 has an invalid length.
[ 1882.163550][T18889] loop1: detected capacity change from 0 to 16
[ 1882.291713][T18889] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1882.542355][T18899] netlink: 'syz.2.3330': attribute type 21 has an invalid length.
[ 1883.302585][ T4286] Bluetooth: hci2: command 0x0411 tx timeout
[ 1883.366914][T18900] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3332'.
[ 1884.247428][T18903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1884.594336][T18893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1887.000447][T18921] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1887.320385][T18930] netlink: 'syz.9.3340': attribute type 6 has an invalid length.
[ 1887.350265][T18930] netlink: 'syz.9.3340': attribute type 7 has an invalid length.
[ 1887.931637][T18930] netlink: 'syz.9.3340': attribute type 8 has an invalid length.
[ 1887.969874][T18930] netlink: 'syz.9.3340': attribute type 15 has an invalid length.
[ 1890.375412][T18953] netlink: 260 bytes leftover after parsing attributes in process `syz.9.3345'.
[ 1891.977762][T18957] netlink: 'syz.1.3346': attribute type 21 has an invalid length.
[ 1892.742611][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:32'
[ 1892.756858][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1892.764580][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1892.774709][ T4286] Workqueue: hci0 hci_rx_work
[ 1892.779549][ T4286] Call Trace:
[ 1892.782854][ T4286]  <TASK>
[ 1892.785828][ T4286]  dump_stack_lvl+0x188/0x24e
[ 1892.790631][ T4286]  ? show_regs_print_info+0x12/0x12
[ 1892.795889][ T4286]  ? load_image+0x400/0x400
[ 1892.800471][ T4286]  sysfs_create_dir_ns+0x26a/0x290
[ 1892.805656][ T4286]  ? sysfs_warn_dup+0xa0/0xa0
[ 1892.810374][ T4286]  ? do_raw_spin_unlock+0x11d/0x230
[ 1892.815595][ T4286]  kobject_add_internal+0x61c/0xcc0
[ 1892.820838][ T4286]  kobject_add+0x160/0x230
[ 1892.825331][ T4286]  ? kobject_init+0x1d0/0x1d0
[ 1892.830125][ T4286]  ? klist_children_get+0x50/0x50
[ 1892.835196][ T4286]  ? get_device_parent+0x121/0x3f0
[ 1892.840351][ T4286]  device_add+0x483/0xfb0
[ 1892.844721][ T4286]  ? kmem_cache_free+0xf7/0x290
[ 1892.849658][ T4286]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1892.854736][ T4286]  le_conn_complete_evt+0x1062/0x1670
[ 1892.860156][ T4286]  ? le_conn_complete_evt+0xe9/0x1670
[ 1892.865567][ T4286]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1892.871840][ T4286]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1892.877532][ T4286]  ? skb_pull_data+0xf7/0x200
[ 1892.882245][ T4286]  hci_le_conn_complete_evt+0x183/0x440
[ 1892.887843][ T4286]  ? hci_remote_host_features_evt+0x270/0x270
[ 1892.893950][ T4286]  hci_event_packet+0x7b9/0x1280
[ 1892.898934][ T4286]  ? bis_list+0x280/0x280
[ 1892.903302][ T4286]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1892.909333][ T4286]  ? kcov_remote_start+0x4c7/0x7e0
[ 1892.914470][ T4286]  ? patch_conexant_auto+0x1260/0x1650
[ 1892.919960][ T4286]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1892.925189][ T4286]  hci_rx_work+0x3eb/0xd40
[ 1892.929631][ T4286]  ? _raw_spin_unlock+0x40/0x40
[ 1892.934510][ T4286]  ? process_one_work+0x7b0/0x1160
[ 1892.939650][ T4286]  process_one_work+0x8a2/0x1160
[ 1892.944624][ T4286]  ? worker_detach_from_pool+0x240/0x240
[ 1892.950322][ T4286]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1892.955403][ T4286]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1892.961007][ T4286]  ? kthread_data+0x4b/0xc0
[ 1892.965585][ T4286]  worker_thread+0xaa2/0x1270
[ 1892.970308][ T4286]  kthread+0x29d/0x330
[ 1892.974825][ T4286]  ? worker_clr_flags+0x1a0/0x1a0
[ 1892.979878][ T4286]  ? kthread_blkcg+0xd0/0xd0
[ 1892.984498][ T4286]  ret_from_fork+0x1f/0x30
[ 1892.988945][ T4286]  </TASK>
[ 1893.001520][ T4286] kobject_add_internal failed for hci0:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1893.014823][ T4286] Bluetooth: hci0: failed to register connection device
[ 1894.284849][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'.
[ 1894.296648][T18966] ubi31: attaching mtd0
[ 1894.363982][ T4286] Bluetooth: Frame is too long (len 12, expected len 4)
[ 1895.185260][T18966] ubi31: scanning is finished
[ 1895.209310][T18966] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1895.333712][ T4286] Bluetooth: hci0: command 0x2016 tx timeout
[ 1895.589073][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[ 1895.597790][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[ 1896.897221][T18989] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1897.042492][T18995] gfs2: not a GFS2 filesystem
[ 1899.297804][T19004] netlink: 'syz.4.3355': attribute type 6 has an invalid length.
[ 1899.378745][T19004] netlink: 'syz.4.3355': attribute type 7 has an invalid length.
[ 1899.408578][T19010] netlink: 260 bytes leftover after parsing attributes in process `syz.9.3358'.
[ 1899.445219][T14495] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1899.807683][T19004] netlink: 'syz.4.3355': attribute type 8 has an invalid length.
[ 1899.998260][T19004] netlink: 'syz.4.3355': attribute type 15 has an invalid length.
[ 1900.364767][T14495] usb 3-1: Using ep0 maxpacket: 16
[ 1900.407901][T14495] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1900.430048][T14495] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1900.436843][T14495] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1900.495202][T14495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1900.849426][T19024] trusted_key: encrypted_key: master key parameter 'defaultė/»R}F°O“ed:syz' is invalid
[ 1901.096678][T19030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1901.171493][T19030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1901.641921][T19022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1902.203256][T14495] usb 3-1: config 0 descriptor??
[ 1902.784871][T14495] usb 3-1: can't set config #0, error -71
[ 1902.842276][T14495] usb 3-1: USB disconnect, device number 21
[ 1904.348071][T19096] gfs2: not a GFS2 filesystem
[ 1904.808626][T19092] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1906.931643][T19117] netlink: 'syz.1.3359': attribute type 21 has an invalid length.
[ 1908.302557][T12397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:32'
[ 1908.312572][T12397] CPU: 1 PID: 12397 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1908.320269][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1908.330370][T12397] Workqueue: hci0 hci_rx_work
[ 1908.335113][T12397] Call Trace:
[ 1908.338440][T12397]  <TASK>
[ 1908.341410][T12397]  dump_stack_lvl+0x188/0x24e
[ 1908.346173][T12397]  ? show_regs_print_info+0x12/0x12
[ 1908.351628][T12397]  ? load_image+0x400/0x400
[ 1908.356198][T12397]  sysfs_create_dir_ns+0x26a/0x290
[ 1908.361378][T12397]  ? sysfs_warn_dup+0xa0/0xa0
[ 1908.366198][T12397]  ? do_raw_spin_unlock+0x11d/0x230
[ 1908.371457][T12397]  kobject_add_internal+0x61c/0xcc0
[ 1908.376731][T12397]  kobject_add+0x160/0x230
[ 1908.381220][T12397]  ? kobject_init+0x1d0/0x1d0
[ 1908.385962][T12397]  ? klist_children_get+0x50/0x50
[ 1908.391040][T12397]  ? get_device_parent+0x121/0x3f0
[ 1908.396214][T12397]  device_add+0x483/0xfb0
[ 1908.400592][T12397]  ? kmem_cache_free+0xf7/0x290
[ 1908.405631][T12397]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1908.410641][T12397]  le_conn_complete_evt+0x1062/0x1670
[ 1908.416171][T12397]  ? le_conn_complete_evt+0xe9/0x1670
[ 1908.421601][T12397]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1908.428013][T12397]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1908.433733][T12397]  ? skb_pull_data+0xf7/0x200
[ 1908.438472][T12397]  hci_le_conn_complete_evt+0x183/0x440
[ 1908.444081][T12397]  ? hci_remote_host_features_evt+0x270/0x270
[ 1908.450220][T12397]  hci_event_packet+0x7b9/0x1280
[ 1908.455328][T12397]  ? bis_list+0x280/0x280
[ 1908.459725][T12397]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1908.465700][T12397]  ? kcov_remote_start+0x4c7/0x7e0
[ 1908.470886][T12397]  ? patch_conexant_auto+0x1260/0x1650
[ 1908.476589][T12397]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1908.481851][T12397]  hci_rx_work+0x3eb/0xd40
[ 1908.486415][T12397]  ? _raw_spin_unlock+0x40/0x40
[ 1908.491433][T12397]  ? process_one_work+0x7b0/0x1160
[ 1908.496601][T12397]  process_one_work+0x8a2/0x1160
[ 1908.501622][T12397]  ? worker_detach_from_pool+0x240/0x240
[ 1908.507348][T12397]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1908.512421][T12397]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1908.518018][T12397]  ? kthread_data+0x4b/0xc0
[ 1908.522591][T12397]  worker_thread+0xaa2/0x1270
[ 1908.527334][T12397]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[ 1908.533282][T12397]  ? __kthread_parkme+0x162/0x1c0
[ 1908.538377][T12397]  kthread+0x29d/0x330
[ 1908.542490][T12397]  ? worker_clr_flags+0x1a0/0x1a0
[ 1908.547566][T12397]  ? kthread_blkcg+0xd0/0xd0
[ 1908.552211][T12397]  ret_from_fork+0x1f/0x30
[ 1908.556704][T12397]  </TASK>
[ 1908.573837][T12397] kobject_add_internal failed for hci0:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1908.588246][T12397] Bluetooth: hci0: failed to register connection device
[ 1910.214276][T19121] loop0: detected capacity change from 0 to 4096
[ 1910.321223][T19128] netlink: 'syz.1.3372': attribute type 6 has an invalid length.
[ 1910.364149][T19128] netlink: 'syz.1.3372': attribute type 7 has an invalid length.
[ 1910.426080][T19121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1910.436144][T19128] netlink: 'syz.1.3372': attribute type 8 has an invalid length.
[ 1910.452779][T19128] netlink: 'syz.1.3372': attribute type 15 has an invalid length.
[ 1910.706789][T11982] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 1910.808561][T12397] Bluetooth: hci0: command 0x2016 tx timeout
[ 1911.050492][T11982] usb 10-1: Using ep0 maxpacket: 16
[ 1911.139686][T11982] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1911.159039][   T26] audit: type=1800 audit(1779353036.215:268): pid=19121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3370" name="file0" dev="loop0" ino=13 res=0 errno=0
[ 1911.247356][T11982] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1911.254170][T11982] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1911.303782][T11982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1911.354092][T11982] usb 10-1: config 0 descriptor??
[ 1911.414852][T18174] EXT4-fs (loop0): unmounting filesystem.
[ 1911.588009][T19141] gfs2: not a GFS2 filesystem
[ 1912.088466][T11982] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0
[ 1912.224751][T19152] trusted_key: encrypted_key: master key parameter 'defaultė/»R}F°O“ed:syz' is invalid
[ 1912.465984][T19132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1912.754636][T19132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1914.705935][T11982] usb 10-1: USB disconnect, device number 35
[ 1914.780422][T19224] gfs2: not a GFS2 filesystem
[ 1918.630948][T19238] netlink: 'syz.2.3386': attribute type 6 has an invalid length.
[ 1919.002641][T19238] netlink: 'syz.2.3386': attribute type 7 has an invalid length.
[ 1919.095038][T19238] netlink: 'syz.2.3386': attribute type 8 has an invalid length.
[ 1919.301288][T19238] netlink: 'syz.2.3386': attribute type 15 has an invalid length.
[ 1922.608105][T19251] gfs2: not a GFS2 filesystem
[ 1924.631832][T19278] netlink: 'syz.0.3392': attribute type 21 has an invalid length.
[ 1924.639828][T19278] netlink: 'syz.0.3392': attribute type 6 has an invalid length.
[ 1924.647818][T19278] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3392'.
[ 1925.408310][T19282] gfs2: not a GFS2 filesystem
[ 1927.740613][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1927.747991][    C1] bridge0: topology change detected, propagating
[ 1927.755724][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1927.763069][    C1] bridge0: topology change detected, propagating
[ 1927.777377][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1928.658481][   T26] audit: type=1326 audit(1779353052.586:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.3399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf9ce59 code=0x7ffc0000
[ 1928.865310][   T26] audit: type=1326 audit(1779353052.633:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.3399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf9ce59 code=0x7ffc0000
[ 1929.142147][   T26] audit: type=1326 audit(1779353052.633:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.3399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f18cdf9ce59 code=0x7ffc0000
[ 1929.259201][   T26] audit: type=1326 audit(1779353052.633:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.3399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf9ce59 code=0x7ffc0000
[ 1929.397884][   T26] audit: type=1326 audit(1779353052.633:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.3399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf9ce59 code=0x7ffc0000
[ 1929.515831][   T26] audit: type=1326 audit(1779353052.651:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.3399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f18cdf9ce59 code=0x7ffc0000
[ 1929.619413][   T26] audit: type=1326 audit(1779353052.651:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.3399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf9ce59 code=0x7ffc0000
[ 1929.735541][   T26] audit: type=1326 audit(1779353052.651:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.3399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf9ce59 code=0x7ffc0000
[ 1929.856240][   T26] audit: type=1326 audit(1779353052.651:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.3399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f18cdf9ce59 code=0x7ffc0000
[ 1929.971784][   T26] audit: type=1326 audit(1779353052.651:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.0.3399" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18cdf9ce59 code=0x7ffc0000
[ 1930.963149][T19317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1934.382645][T19335] loop1: detected capacity change from 0 to 256
[ 1936.005539][T19335] loop1: detected capacity change from 0 to 512
[ 1936.012558][T19335] ext4: Bad value for 'mb_optimize_scan'
[ 1936.300552][T19344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1936.387649][T19344] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1936.985617][T19344] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1937.334010][T19356] netlink: 'syz.0.3408': attribute type 6 has an invalid length.
[ 1937.789628][T19356] netlink: 'syz.0.3408': attribute type 7 has an invalid length.
[ 1937.797461][T19356] netlink: 'syz.0.3408': attribute type 8 has an invalid length.
[ 1937.860793][T19356] netlink: 'syz.0.3408': attribute type 15 has an invalid length.
[ 1938.376025][T19367] trusted_key: encrypted_key: master key parameter 'defaultė/»R}F°O“ed:syz' is invalid
[ 1939.542623][T19400] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3413'.
[ 1942.436281][T19440] gfs2: not a GFS2 filesystem
[ 1946.229423][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1946.235950][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1946.420558][T19461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1947.121598][T19471] overlayfs: failed to resolve './file1': -2
[ 1949.285883][T19512] gfs2: not a GFS2 filesystem
[ 1951.925876][T12397] Bluetooth: hci0: unexpected event for opcode 0x007f
[ 1952.005837][T12271] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1952.209061][T12271] usb 1-1: Using ep0 maxpacket: 16
[ 1952.216434][T12271] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[ 1952.252544][T12271] usb 1-1: config 0 has no interface number 0
[ 1952.280272][T12271] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1952.326632][T12271] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1952.363119][T12271] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1952.414306][T12271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1952.422470][T12271] usb 1-1: Product: syz
[ 1952.470133][T12271] usb 1-1: Manufacturer: syz
[ 1952.474836][T12271] usb 1-1: SerialNumber: syz
[ 1952.502673][T12271] usb 1-1: config 0 descriptor??
[ 1952.519642][T19527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1952.527076][T19527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1952.806603][T19527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1952.849513][T19527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1953.308098][T12271] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 43
[ 1954.515217][T19552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1954.860860][T19547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1955.410382][T12271] usb 1-1: USB disconnect, device number 9
[ 1955.663847][T19556] overlayfs: failed to resolve './file1': -2
[ 1958.729296][T19576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1958.818118][T19577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1959.519097][T19574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1961.849855][T19599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1962.022408][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'.
[ 1962.041993][T19602] ubi31: attaching mtd0
[ 1962.052779][T19602] ubi31: scanning is finished
[ 1962.143160][T12397] Bluetooth: Frame is too long (len 12, expected len 4)
[ 1963.141093][T19594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1963.242701][T19602] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1963.250507][T19602] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1963.258020][T19602] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1963.265489][T19602] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1963.273114][T19602] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1963.280091][T19602] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1963.288517][T19602] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 524850934
[ 1963.298917][T19602] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1963.328279][T19604] ubi31: background thread "ubi_bgt31d" started, PID 19604
[ 1967.199617][T19634] loop4: detected capacity change from 0 to 256
[ 1967.763437][T19634] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1967.889719][T19639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1967.976931][T19640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1968.705030][T19637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1969.665006][ T4316] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[ 1970.648575][ T4316] usb 10-1: Using ep0 maxpacket: 32
[ 1970.661048][ T4316] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1970.714869][ T4316] usb 10-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[ 1970.750759][ T4316] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1970.816254][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3460'.
[ 1970.837361][ T4316] usb 10-1: Product: syz
[ 1970.859060][ T4316] usb 10-1: Manufacturer: syz
[ 1970.924976][ T4316] usb 10-1: SerialNumber: syz
[ 1971.685657][ T4316] usb 10-1: unit 0 not found!
[ 1971.901414][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'.
[ 1971.913427][T19664] ubi: mtd0 is already attached to ubi31
[ 1971.952909][T12397] Bluetooth: Frame is too long (len 12, expected len 4)
[ 1972.854502][ T4316] snd-usb-audio: probe of 10-1:1.0 failed with error -22
[ 1972.974202][ T4316] usb 10-1: unit 0 not found!
[ 1972.983447][ T4316] snd-usb-audio: probe of 10-1:1.1 failed with error -22
[ 1973.000222][ T4316] usb 10-1: unit 0 not found!
[ 1973.121371][T19667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1975.058442][T19665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1975.328182][ T4316] snd-usb-audio: probe of 10-1:1.2 failed with error -22
[ 1975.484884][ T4316] usb 10-1: USB disconnect, device number 36
[ 1975.900928][T19034] udevd[19034]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1976.131884][T19686] serio: Serial port ptm0
[ 1976.193095][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3466'.
[ 1976.202237][T19688] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3466'.
[ 1976.778256][T19688] device geneve2 entered promiscuous mode
[ 1977.597075][T19701] netlink: 'syz.1.3469': attribute type 21 has an invalid length.
[ 1977.659449][T12397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:32'
[ 1977.669597][T12397] CPU: 1 PID: 12397 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1977.677289][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1977.687415][T12397] Workqueue: hci0 hci_rx_work
[ 1977.692157][T12397] Call Trace:
[ 1977.695493][T12397]  <TASK>
[ 1977.698439][T12397]  dump_stack_lvl+0x188/0x24e
[ 1977.703174][T12397]  ? show_regs_print_info+0x12/0x12
[ 1977.708412][T12397]  ? load_image+0x400/0x400
[ 1977.712998][T12397]  sysfs_create_dir_ns+0x26a/0x290
[ 1977.718143][T12397]  ? sysfs_warn_dup+0xa0/0xa0
[ 1977.722853][T12397]  ? do_raw_spin_unlock+0x11d/0x230
[ 1977.728084][T12397]  kobject_add_internal+0x61c/0xcc0
[ 1977.733320][T12397]  kobject_add+0x160/0x230
[ 1977.737758][T12397]  ? kobject_init+0x1d0/0x1d0
[ 1977.742459][T12397]  ? klist_children_get+0x50/0x50
[ 1977.747591][T12397]  ? get_device_parent+0x121/0x3f0
[ 1977.752731][T12397]  device_add+0x483/0xfb0
[ 1977.757092][T12397]  ? kmem_cache_free+0xf7/0x290
[ 1977.761976][T12397]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1977.766973][T12397]  le_conn_complete_evt+0x1062/0x1670
[ 1977.772369][T12397]  ? le_conn_complete_evt+0xe9/0x1670
[ 1977.777766][T12397]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1977.784040][T12397]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1977.789716][T12397]  ? skb_pull_data+0xf7/0x200
[ 1977.794454][T12397]  hci_le_conn_complete_evt+0x183/0x440
[ 1977.800068][T12397]  ? hci_remote_host_features_evt+0x270/0x270
[ 1977.806217][T12397]  hci_event_packet+0x7b9/0x1280
[ 1977.811239][T12397]  ? bis_list+0x280/0x280
[ 1977.815620][T12397]  ? __hci_send_to_channel+0x241/0x280
[ 1977.821114][T12397]  ? hci_send_to_monitor+0x27/0x4a0
[ 1977.826372][T12397]  ? kasan_check_range+0x84/0x290
[ 1977.831511][T12397]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1977.836729][T12397]  hci_rx_work+0x3eb/0xd40
[ 1977.841184][T12397]  ? _raw_spin_unlock+0x40/0x40
[ 1977.846090][T12397]  ? process_one_work+0x7b0/0x1160
[ 1977.851236][T12397]  process_one_work+0x8a2/0x1160
[ 1977.856235][T12397]  ? worker_detach_from_pool+0x240/0x240
[ 1977.861904][T12397]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1977.867000][T12397]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1977.872580][T12397]  ? kthread_data+0x4b/0xc0
[ 1977.877174][T12397]  worker_thread+0xaa2/0x1270
[ 1977.881997][T12397]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[ 1977.887970][T12397]  ? __kthread_parkme+0x162/0x1c0
[ 1977.893053][T12397]  kthread+0x29d/0x330
[ 1977.897181][T12397]  ? worker_clr_flags+0x1a0/0x1a0
[ 1977.902249][T12397]  ? kthread_blkcg+0xd0/0xd0
[ 1977.906893][T12397]  ret_from_fork+0x1f/0x30
[ 1977.911402][T12397]  </TASK>
[ 1977.929043][T12397] kobject_add_internal failed for hci0:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1977.945030][T12397] Bluetooth: hci0: failed to register connection device
[ 1979.184691][T19714] loop0: detected capacity change from 0 to 128
[ 1979.862788][T19714] FAT-fs (loop0): bogus number of reserved sectors
[ 1979.870218][T19714] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[ 1979.879610][T19714] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 1981.620902][T12397] Bluetooth: hci0: command 0x2016 tx timeout
[ 1984.353301][T19742] gfs2: not a GFS2 filesystem
[ 1984.428988][T19743] loop2: detected capacity change from 0 to 512
[ 1984.649529][T19750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1984.705496][T19743] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1984.842504][T19743] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1985.533048][T19754] input: syz0 as /devices/virtual/input/input48
[ 1986.240408][T19745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1986.307151][T11467] EXT4-fs (loop2): unmounting filesystem.
[ 1989.076105][T19774] siw: device registration error -23
[ 1990.104580][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3486'.
[ 1991.546707][T12271] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1991.751126][T12271] usb 2-1: Using ep0 maxpacket: 16
[ 1991.805721][T12271] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1991.924147][T12271] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1992.032853][T12271] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1992.268552][T12271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1992.307697][T12271] usb 2-1: config 0 descriptor??
[ 1993.062159][T19791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1993.071682][T19791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1993.920835][T12271] usbhid 2-1:0.0: can't add hid device: -71
[ 1993.926935][T12271] usbhid: probe of 2-1:0.0 failed with error -71
[ 1993.954831][T12271] usb 2-1: USB disconnect, device number 37
[ 1994.359490][T19815] netlink: 'syz.4.3494': attribute type 21 has an invalid length.
[ 1994.372845][T12397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:32'
[ 1994.382511][T12397] CPU: 1 PID: 12397 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 1994.390197][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1994.400403][T12397] Workqueue: hci1 hci_rx_work
[ 1994.405164][T12397] Call Trace:
[ 1994.408492][T12397]  <TASK>
[ 1994.411566][T12397]  dump_stack_lvl+0x188/0x24e
[ 1994.416325][T12397]  ? show_regs_print_info+0x12/0x12
[ 1994.421609][T12397]  ? load_image+0x400/0x400
[ 1994.426289][T12397]  sysfs_create_dir_ns+0x26a/0x290
[ 1994.431486][T12397]  ? sysfs_warn_dup+0xa0/0xa0
[ 1994.436234][T12397]  ? do_raw_spin_unlock+0x11d/0x230
[ 1994.441595][T12397]  kobject_add_internal+0x61c/0xcc0
[ 1994.446924][T12397]  kobject_add+0x160/0x230
[ 1994.451409][T12397]  ? kobject_init+0x1d0/0x1d0
[ 1994.456145][T12397]  ? klist_children_get+0x50/0x50
[ 1994.461235][T12397]  ? get_device_parent+0x121/0x3f0
[ 1994.466529][T12397]  device_add+0x483/0xfb0
[ 1994.470923][T12397]  ? kmem_cache_free+0xf7/0x290
[ 1994.475847][T12397]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1994.480862][T12397]  le_conn_complete_evt+0x1062/0x1670
[ 1994.486432][T12397]  ? le_conn_complete_evt+0xe9/0x1670
[ 1994.491879][T12397]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 1994.498191][T12397]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1994.503882][T12397]  ? skb_pull_data+0xf7/0x200
[ 1994.508640][T12397]  hci_le_conn_complete_evt+0x183/0x440
[ 1994.514250][T12397]  ? hci_remote_host_features_evt+0x270/0x270
[ 1994.520375][T12397]  hci_event_packet+0x7b9/0x1280
[ 1994.525380][T12397]  ? bis_list+0x280/0x280
[ 1994.529778][T12397]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1994.535736][T12397]  ? kcov_remote_start+0x4c7/0x7e0
[ 1994.540896][T12397]  ? patch_conexant_auto+0x1260/0x1650
[ 1994.546403][T12397]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1994.551653][T12397]  hci_rx_work+0x3eb/0xd40
[ 1994.556116][T12397]  ? _raw_spin_unlock+0x40/0x40
[ 1994.561020][T12397]  ? process_one_work+0x7b0/0x1160
[ 1994.566173][T12397]  process_one_work+0x8a2/0x1160
[ 1994.571165][T12397]  ? worker_detach_from_pool+0x240/0x240
[ 1994.576846][T12397]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1994.581937][T12397]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1994.587525][T12397]  ? kthread_data+0x4b/0xc0
[ 1994.592073][T12397]  worker_thread+0xaa2/0x1270
[ 1994.596797][T12397]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[ 1994.602729][T12397]  ? __kthread_parkme+0x162/0x1c0
[ 1994.607805][T12397]  kthread+0x29d/0x330
[ 1994.611900][T12397]  ? worker_clr_flags+0x1a0/0x1a0
[ 1994.616958][T12397]  ? kthread_blkcg+0xd0/0xd0
[ 1994.621578][T12397]  ret_from_fork+0x1f/0x30
[ 1994.626044][T12397]  </TASK>
[ 1994.641826][T12397] kobject_add_internal failed for hci1:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1994.655339][T12397] Bluetooth: hci1: failed to register connection device
[ 1994.909268][T19821] syz.2.3496 (19821): /proc/19820/oom_adj is deprecated, please use /proc/19820/oom_score_adj instead.
[ 1996.355566][T19839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1996.570183][T19840] gfs2: not a GFS2 filesystem
[ 1996.886763][T12397] Bluetooth: hci1: command 0x2016 tx timeout
[ 1997.117596][T19842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1997.350300][T19833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1998.370236][T19849] netlink: 'syz.2.3503': attribute type 6 has an invalid length.
[ 1998.517178][T19849] netlink: 'syz.2.3503': attribute type 7 has an invalid length.
[ 1998.944409][T19849] netlink: 'syz.2.3503': attribute type 8 has an invalid length.
[ 1999.020880][T19849] netlink: 'syz.2.3503': attribute type 15 has an invalid length.
[ 2001.690348][T19866] futex_wake_op: syz.2.3508 tries to shift op by 32; fix this program
[ 2001.759388][T19867] loop2: detected capacity change from 0 to 128
[ 2004.061182][T19869] loop4: detected capacity change from 0 to 256
[ 2006.103125][T19886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2006.179790][T19887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2006.476088][ T5730] wlan1: authenticate with 08:02:11:00:00:00
[ 2006.757389][T19884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2007.358512][ T5730] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 2007.472355][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3517'.
[ 2007.484923][ T7139] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[ 2007.626312][ T7675] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[ 2007.762940][ T7139] wlan1: authentication with 08:02:11:00:00:00 timed out
[ 2008.218487][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'.
[ 2008.229772][T19901] ubi: mtd0 is already attached to ubi31
[ 2008.243348][T12397] Bluetooth: Frame is too long (len 12, expected len 4)
[ 2009.685401][T19911] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3520'.
[ 2011.166464][T19918] gfs2: not a GFS2 filesystem
[ 2011.900148][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2011.907559][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 2015.865757][T19965] loop2: detected capacity change from 0 to 512
[ 2019.278115][T19965] fscrypt: Error allocating hmac(sha512): -2
[ 2020.162093][T19986] loop1: detected capacity change from 0 to 1024
[ 2020.390832][T19986] EXT4-fs: Ignoring removed oldalloc option
[ 2020.626940][T19986] EXT4-fs: Ignoring removed oldalloc option
[ 2020.820394][T19986] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 2020.929856][T19986] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 2021.224843][T12310] EXT4-fs (loop1): unmounting filesystem.
[ 2023.091830][T20010] siw: device registration error -23
[ 2026.505632][T20027] loop1: detected capacity change from 0 to 512
[ 2026.727923][T20027] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 2026.757314][T20027] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2026.775949][T20029] gfs2: not a GFS2 filesystem
[ 2026.944462][T20038] loop2: detected capacity change from 0 to 256
[ 2027.662051][T12310] EXT4-fs (loop1): unmounting filesystem.
[ 2028.250805][T20048] loop0: detected capacity change from 0 to 512
[ 2028.290839][T20048] EXT4-fs: Ignoring removed nobh option
[ 2028.404076][T20050] lo speed is unknown, defaulting to 1000
[ 2028.661611][T20050] loop1: detected capacity change from 0 to 128
[ 2028.984944][T20048] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[ 2029.356492][T20048] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.3554: attempt to clear invalid blocks 1 len 1
[ 2029.463628][T20048] EXT4-fs (loop0): Remounting filesystem read-only
[ 2029.489741][T20048] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 2029.549586][T20048] EXT4-fs (loop0): Remounting filesystem read-only
[ 2029.556734][T20048] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3554: invalid indirect mapped block 1819239214 (level 0)
[ 2029.640394][T20048] EXT4-fs (loop0): Remounting filesystem read-only
[ 2029.654372][T20053] lo speed is unknown, defaulting to 1000
[ 2029.680342][T20048] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3554: invalid indirect mapped block 1819239214 (level 1)
[ 2029.744191][T20048] EXT4-fs (loop0): Remounting filesystem read-only
[ 2029.769834][T20048] EXT4-fs (loop0): 1 truncate cleaned up
[ 2029.798940][T20048] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 2030.029396][   T14] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 2030.190781][T18174] EXT4-fs (loop0): unmounting filesystem.
[ 2030.250130][   T14] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2030.293402][   T14] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2030.360926][   T14] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 2030.381159][   T14] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2030.400235][   T14] usb 10-1: SerialNumber: syz
[ 2030.520898][T14495] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 2030.668720][   T14] usb 10-1: 0:2 : does not exist
[ 2031.516138][   T14] usb 10-1: USB disconnect, device number 37
[ 2031.643233][T14495] usb 2-1: Using ep0 maxpacket: 16
[ 2031.677186][T14495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2031.696738][T14495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2031.729249][T14495] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2031.750158][T14495] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2031.772457][T19681] udevd[19681]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2031.839174][T20077] loop0: detected capacity change from 0 to 128
[ 2031.847022][T20077] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 2031.982469][T20077] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 2033.626594][T14495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2033.636681][T14495] usb 2-1: config 0 descriptor??
[ 2033.821740][T14495] usb 2-1: can't set config #0, error -71
[ 2033.846910][T14495] usb 2-1: USB disconnect, device number 38
[ 2033.970534][T20080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3563'.
[ 2036.072851][T20098] siw: device registration error -23
[ 2038.849299][T20108] loop4: detected capacity change from 0 to 256
[ 2038.974499][T20108] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 2039.071764][T20108] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[ 2039.159391][T20108] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 2039.628429][T11832] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 2039.743923][T20121] gfs2: not a GFS2 filesystem
[ 2039.831813][T11832] usb 1-1: Using ep0 maxpacket: 16
[ 2039.839871][T11832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2039.862138][T11832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2039.897236][T11832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2039.967301][T11832] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2039.979680][T11832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2039.997534][T11832] usb 1-1: config 0 descriptor??
[ 2040.229514][T20115] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3575'.
[ 2040.262478][T11832] usbhid 1-1:0.0: can't add hid device: -71
[ 2040.268577][T11832] usbhid: probe of 1-1:0.0 failed with error -71
[ 2040.299597][T11832] usb 1-1: USB disconnect, device number 10
[ 2040.355352][ T4391] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 2040.558435][ T4391] usb 5-1: Using ep0 maxpacket: 32
[ 2040.567530][ T4391] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2040.605974][ T4391] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[ 2040.647809][ T4391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2040.669093][ T4391] usb 5-1: Product: syz
[ 2040.697676][ T4391] usb 5-1: Manufacturer: syz
[ 2040.705830][ T4391] usb 5-1: SerialNumber: syz
[ 2041.089843][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'.
[ 2041.129622][T20131] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2041.136975][T20131] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2041.177170][ T4391] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[ 2041.390311][ T4391] snd-usb-audio: probe of 5-1:1.1 failed with error -22
[ 2041.493925][T20134] siw: device registration error -23
[ 2043.169755][ T4391] snd-usb-audio: probe of 5-1:1.2 failed with error -22
[ 2043.179135][ T4391] usb 5-1: USB disconnect, device number 36
[ 2043.774282][T19032] udevd[19032]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2045.233569][T20152] trusted_key: encrypted_key: master key parameter 'defaultė/»R}F°O“ed:syz' is invalid
[ 2046.003563][T20159] loop0: detected capacity change from 0 to 256
[ 2048.837615][T20174] netlink: 'syz.1.3591': attribute type 21 has an invalid length.
[ 2048.864782][T12397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:32'
[ 2048.875553][T12397] CPU: 1 PID: 12397 Comm: kworker/u5:1 Not tainted syzkaller #0
[ 2048.883251][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 2048.893358][T12397] Workqueue: hci0 hci_rx_work
[ 2048.898106][T12397] Call Trace:
[ 2048.901420][T12397]  <TASK>
[ 2048.904386][T12397]  dump_stack_lvl+0x188/0x24e
[ 2048.909129][T12397]  ? show_regs_print_info+0x12/0x12
[ 2048.914390][T12397]  ? load_image+0x400/0x400
[ 2048.918960][T12397]  sysfs_create_dir_ns+0x26a/0x290
[ 2048.924138][T12397]  ? sysfs_warn_dup+0xa0/0xa0
[ 2048.928872][T12397]  ? do_raw_spin_unlock+0x11d/0x230
[ 2048.934140][T12397]  kobject_add_internal+0x61c/0xcc0
[ 2048.939401][T12397]  kobject_add+0x160/0x230
[ 2048.943865][T12397]  ? kobject_init+0x1d0/0x1d0
[ 2048.948606][T12397]  ? klist_children_get+0x50/0x50
[ 2048.953685][T12397]  ? get_device_parent+0x121/0x3f0
[ 2048.958845][T12397]  device_add+0x483/0xfb0
[ 2048.963227][T12397]  ? kmem_cache_free+0xf7/0x290
[ 2048.968133][T12397]  hci_conn_add_sysfs+0xd1/0x1e0
[ 2048.973128][T12397]  le_conn_complete_evt+0x1062/0x1670
[ 2048.978551][T12397]  ? le_conn_complete_evt+0xe9/0x1670
[ 2048.983994][T12397]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[ 2048.990299][T12397]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 2048.995993][T12397]  ? skb_pull_data+0xf7/0x200
[ 2049.000727][T12397]  hci_le_conn_complete_evt+0x183/0x440
[ 2049.006325][T12397]  ? hci_remote_host_features_evt+0x270/0x270
[ 2049.012621][T12397]  hci_event_packet+0x7b9/0x1280
[ 2049.017622][T12397]  ? bis_list+0x280/0x280
[ 2049.022178][T12397]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 2049.028119][T12397]  ? kcov_remote_start+0x4c7/0x7e0
[ 2049.033278][T12397]  ? patch_conexant_auto+0x1260/0x1650
[ 2049.038832][T12397]  ? hci_send_to_monitor+0x9c/0x4a0
[ 2049.044088][T12397]  hci_rx_work+0x3eb/0xd40
[ 2049.048551][T12397]  ? _raw_spin_unlock+0x40/0x40
[ 2049.053555][T12397]  ? process_one_work+0x7b0/0x1160
[ 2049.058800][T12397]  process_one_work+0x8a2/0x1160
[ 2049.063805][T12397]  ? worker_detach_from_pool+0x240/0x240
[ 2049.069490][T12397]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 2049.074573][T12397]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 2049.080164][T12397]  ? kthread_data+0x4b/0xc0
[ 2049.084827][T12397]  worker_thread+0xaa2/0x1270
[ 2049.089568][T12397]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[ 2049.095514][T12397]  ? __kthread_parkme+0x162/0x1c0
[ 2049.100610][T12397]  kthread+0x29d/0x330
[ 2049.104718][T12397]  ? worker_clr_flags+0x1a0/0x1a0
[ 2049.109792][T12397]  ? kthread_blkcg+0xd0/0xd0
[ 2049.114449][T12397]  ret_from_fork+0x1f/0x30
[ 2049.118939][T12397]  </TASK>
[ 2049.270091][T12397] kobject_add_internal failed for hci0:32 with -EEXIST, don't try to register things with the same name in the same directory.
[ 2049.286115][T12397] Bluetooth: hci0: failed to register connection device
[ 2049.346711][T20171] gfs2: not a GFS2 filesystem
[ 2051.483779][T12397] Bluetooth: hci0: command 0x2016 tx timeout
[ 2054.290193][T20221] loop9: detected capacity change from 0 to 512
[ 2054.414541][T20221] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 2054.433738][T20221] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2054.461155][   T26] kauditd_printk_skb: 8 callbacks suppressed
[ 2054.461191][   T26] audit: type=1326 audit(1779353170.280:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.9.3600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174dd9ce59 code=0x7ffc0000
[ 2054.492140][   T26] audit: type=1326 audit(1779353170.280:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.9.3600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174dd9ce59 code=0x7ffc0000
[ 2054.536542][   T26] audit: type=1326 audit(1779353170.336:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.9.3600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f174dd9ce59 code=0x7ffc0000
[ 2054.594387][   T26] audit: type=1326 audit(1779353170.411:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.9.3600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174dd9ce59 code=0x7ffc0000
[ 2054.636649][   T26] audit: type=1326 audit(1779353170.411:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.9.3600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174dd9ce59 code=0x7ffc0000
[ 2054.774775][T10646] EXT4-fs (loop9): unmounting filesystem.
[ 2054.812506][T20229] loop4: detected capacity change from 0 to 256
[ 2055.061450][T20235] loop0: detected capacity change from 0 to 128
[ 2055.270383][T16746] FAT-fs (loop4): error, corrupted directory (invalid entries)
[ 2055.284226][T16746] FAT-fs (loop4): Filesystem has been set read-only
[ 2055.311575][T16746] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[ 2058.139125][ T4655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2058.310646][T20269] gfs2: not a GFS2 filesystem
[ 2058.859752][ T4655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2059.043599][ T4655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2059.123081][T20278] fuse: Bad value for 'fd'
[ 2059.221814][ T4655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2059.645806][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2059.661898][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2059.672943][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2059.941877][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2059.957486][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2059.968869][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2061.433663][T20281] lo speed is unknown, defaulting to 1000
[ 2061.587347][T20297] trusted_key: encrypted_key: master key parameter 'defaultė/»R}F°O“ed:syz' is invalid
[ 2062.236981][ T4287] Bluetooth: hci1: command 0x0409 tx timeout
[ 2063.531237][T20358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2064.313489][T20364] netlink: 'syz.9.3626': attribute type 6 has an invalid length.
[ 2064.336060][T20364] netlink: 'syz.9.3626': attribute type 7 has an invalid length.
[ 2064.384551][T20352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2064.396545][T12397] Bluetooth: hci1: command 0x041b tx timeout
[ 2064.425902][T20364] netlink: 'syz.9.3626': attribute type 8 has an invalid length.
[ 2064.458197][T20364] netlink: 'syz.9.3626': attribute type 15 has an invalid length.
[ 2064.680987][T20281] chnl_net:caif_netlink_parms(): no params data found
[ 2065.060050][T20376] gfs2: not a GFS2 filesystem
[ 2065.459218][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3631'.
[ 2065.585544][T20281] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2065.625170][T20281] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2065.643186][T20391] loop0: detected capacity change from 0 to 512
[ 2065.674944][T20281] device bridge_slave_0 entered promiscuous mode
[ 2065.769803][T20391] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 2065.780241][T20391] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2065.850338][   T14] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 2065.896794][T20281] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2065.929920][T20281] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2065.966718][T20281] device bridge_slave_1 entered promiscuous mode
[ 2066.028570][   T14] usb 3-1: device descriptor read/64, error -71
[ 2066.068058][T20398] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3636'.
[ 2066.724988][T12397] Bluetooth: hci1: command 0x040f tx timeout
[ 2066.826812][T18174] EXT4-fs (loop0): unmounting filesystem.
[ 2066.983304][   T14] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 2066.993222][T20281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2067.115482][T20409] capability: warning: `syz.0.3638' uses deprecated v2 capabilities in a way that may be insecure
[ 2067.130019][T20409] loop0: detected capacity change from 0 to 128
[ 2067.139339][T20409] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 2067.160835][T20409] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 2068.207151][T20281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2068.233884][   T14] usb 3-1: device descriptor read/64, error -71
[ 2068.571931][T20281] team0: Port device team_slave_0 added
[ 2068.928625][ T4287] Bluetooth: hci1: command 0x0419 tx timeout
[ 2069.228220][   T14] usb usb3-port1: attempt power cycle
[ 2069.267469][T20281] team0: Port device team_slave_1 added
[ 2069.540870][ T6754] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 2069.973355][T20416] netlink: 'syz.2.3640': attribute type 6 has an invalid length.
[ 2069.990936][T20416] netlink: 'syz.2.3640': attribute type 7 has an invalid length.
[ 2070.030478][T20416] netlink: 'syz.2.3640': attribute type 8 has an invalid length.
[ 2070.076863][T20416] netlink: 'syz.2.3640': attribute type 15 has an invalid length.
[ 2070.098917][T20281] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2070.121092][T20281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2070.278443][T20281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2070.291820][T20281] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2070.299062][T20281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2070.325552][T20281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2070.437216][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3642'.
[ 2070.446199][T20432] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3642'.
[ 2070.459827][T20432] device geneve3 entered promiscuous mode
[ 2070.541361][ T4655] device hsr_slave_0 left promiscuous mode
[ 2070.584526][ T4655] device hsr_slave_1 left promiscuous mode
[ 2070.668882][ T4655] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2070.769903][ T4655] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2070.870890][T20438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2070.997101][ T4655] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2071.497648][T20433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2071.515035][ T4287] Bluetooth: hci1: command 0x0411 tx timeout
[ 2071.677155][ T4655] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2071.830275][ T4655] device bridge_slave_1 left promiscuous mode
[ 2071.925785][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2072.084695][ T4655] device bridge_slave_0 left promiscuous mode
[ 2072.091200][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2072.192873][ T4655] device veth1_macvtap left promiscuous mode
[ 2072.199128][ T4655] device veth0_macvtap left promiscuous mode
[ 2072.205448][ T4655] device veth1_vlan left promiscuous mode
[ 2072.211438][ T4655] device veth0_vlan left promiscuous mode
[ 2074.119070][ T4655] team0 (unregistering): Port device team_slave_1 removed
[ 2074.200747][ T4655] team0 (unregistering): Port device team_slave_0 removed
[ 2074.275760][ T4655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2074.370462][ T4655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2075.211635][ T4655] bond0 (unregistering): Released all slaves
[ 2075.427255][T20281] device hsr_slave_0 entered promiscuous mode
[ 2075.435194][T20281] device hsr_slave_1 entered promiscuous mode
[ 2075.460601][T20281] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2075.468521][T20281] Cannot create hsr debugfs directory
[ 2075.474951][T20445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'.
[ 2075.494018][T12271] lo speed is unknown, defaulting to 1000
[ 2076.247709][T20469] gfs2: not a GFS2 filesystem
[ 2076.837654][ T4898] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 2077.010085][ T4898] usb 1-1: device descriptor read/64, error -71
[ 2077.373400][ T4898] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 2077.574766][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2077.582786][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 2078.207164][ T4898] usb 1-1: device descriptor read/64, error -71
[ 2078.344633][ T4898] usb usb1-port1: attempt power cycle
[ 2078.993840][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'.
[ 2079.002953][T20492] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3653'.
[ 2079.305766][ T4898] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 2079.383127][ T4315] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[ 2079.546302][ T4898] usb 1-1: device not accepting address 13, error -71
[ 2079.620233][ T4315] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 2079.645348][ T4315] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 2079.746693][ T4315] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 2079.755836][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2080.431260][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3658'.
[ 2080.687912][ T4315] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[ 2080.714471][ T4315] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input51
[ 2080.742284][T20281] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2080.764488][ T4315] input: failed to attach handler kbd to device input51, error: -5
[ 2080.805415][T20281] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2080.835956][ T4315] usb 3-1: USB disconnect, device number 25
[ 2080.844233][T20281] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2080.885707][T20281] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2081.246792][T20281] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2081.329507][T20281] 8021q: adding VLAN 0 to HW filter on device team0
[ 2081.437188][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2081.500302][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2081.521000][ T4315] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[ 2081.673294][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2082.216648][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2082.302350][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2082.309551][ T4394] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2082.341475][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2082.363694][T17917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2082.387017][ T4315] usb 10-1: Using ep0 maxpacket: 16
[ 2082.394397][ T4315] usb 10-1: config 0 has an invalid interface number: 105 but max is 0
[ 2082.419857][ T4315] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2082.434319][ T4315] usb 10-1: config 0 has no interface number 0
[ 2082.436743][T17917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2082.468440][T17917] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2082.475685][T17917] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2082.516028][T20528] lo speed is unknown, defaulting to 1000
[ 2082.521946][T20528] lo speed is unknown, defaulting to 1000
[ 2082.530360][T20528] lo speed is unknown, defaulting to 1000
[ 2082.541657][T20528] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 2082.575928][ T4315] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 2082.586295][T17917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2082.594540][ T4315] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2082.602962][ T4315] usb 10-1: Product: syz
[ 2082.607278][ T4315] usb 10-1: Manufacturer: syz
[ 2082.614473][ T4315] usb 10-1: SerialNumber: syz
[ 2082.624486][T17917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2082.628045][ T4315] usb 10-1: config 0 descriptor??
[ 2082.648686][T20528] lo speed is unknown, defaulting to 1000
[ 2082.655617][T20528] lo speed is unknown, defaulting to 1000
[ 2082.662166][T20528] lo speed is unknown, defaulting to 1000
[ 2082.668739][T20528] lo speed is unknown, defaulting to 1000
[ 2082.675358][T20528] lo speed is unknown, defaulting to 1000
[ 2082.681971][T20528] lo speed is unknown, defaulting to 1000
[ 2082.688832][T20528] lo speed is unknown, defaulting to 1000
[ 2082.727493][ T4315] usb 10-1: Found UVC 0.00 device syz (046d:08f3)
[ 2082.736700][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2082.751594][ T4315] usb 10-1: No valid video chain found.
[ 2082.793356][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2082.851133][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2082.871680][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2082.879812][ T4898] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 2082.891127][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2082.907774][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2082.917811][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2082.945067][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2082.977239][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2082.997320][T20281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2083.198621][ T4898] usb 1-1: device descriptor read/64, error -71
[ 2083.332727][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3665'.
[ 2083.341945][T20545] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3665'.
[ 2083.809698][ T4898] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 2083.917691][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2083.928668][ T6156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2083.946126][T20281] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2084.063981][ T4898] usb 1-1: device descriptor read/64, error -71
[ 2084.194690][ T4898] usb usb1-port1: attempt power cycle
[ 2084.548482][ T4395] usb 10-1: USB disconnect, device number 38
[ 2084.681279][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3669'.
[ 2084.729108][ T4287] Bluetooth: Frame is too long (len 12, expected len 4)
[ 2085.457425][ T4898] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 2085.498885][ T4898] usb 1-1: device descriptor read/8, error -71
[ 2085.815459][T20589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3674'.
[ 2086.981631][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2087.024951][ T9911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2087.206881][T20587] loop0: detected capacity change from 0 to 128
[ 2087.299673][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2087.623674][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2088.348930][   T26] audit: type=1800 audit(1779353201.975:292): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3673" name="bus" dev="loop0" ino=1048663 res=0 errno=0
[ 2088.416455][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2088.471997][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2088.481846][T20281] device veth0_vlan entered promiscuous mode
[ 2088.568850][T20281] device veth1_vlan entered promiscuous mode
[ 2088.707483][T20281] device veth0_macvtap entered promiscuous mode
[ 2089.129668][T20281] device veth1_macvtap entered promiscuous mode
[ 2089.578307][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2089.615214][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2089.633448][T18174] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 2089.643183][T18174] FAT-fs (loop0): Filesystem has been set read-only
[ 2089.648773][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2089.665950][T20621] trusted_key: encrypted_key: master key parameter 'defaultė/»R}F°O“ed:syz' is invalid
[ 2089.680154][T20623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3678'.
[ 2089.689111][T20623] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3678'.
[ 2089.700633][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2089.713198][T18174] Trying to write to read-only block-device loop0
[ 2089.770455][T18174] Trying to write to read-only block-device loop0
[ 2089.777447][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2089.778306][T18174] Trying to write to read-only block-device loop0
[ 2089.795346][T18174] Trying to write to read-only block-device loop0
[ 2089.810335][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2089.851104][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2089.931536][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2090.070000][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2090.288439][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2090.298360][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2090.398347][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2090.608431][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2090.768823][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2090.883388][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2091.085242][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2091.231159][T20281] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2091.258198][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2091.298812][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2091.359150][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2091.394462][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2091.459265][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2091.473210][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2091.515456][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2091.568253][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2091.646334][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2091.701706][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2091.733169][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2091.758357][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2091.800184][T20281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2091.834085][T20281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2091.870285][T20281] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2091.911311][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2091.928501][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2091.963169][T20281] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2091.999143][T20281] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.007928][T20281] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.041881][T20281] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2092.252929][ T4522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2092.273271][ T4522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2092.297693][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2092.329218][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2092.345672][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2092.404526][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2094.695382][T20718] serio: Serial port ptm0
[ 2094.749592][T20719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3691'.
[ 2094.759132][T20719] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3691'.
[ 2094.774064][T20719] device geneve3 entered promiscuous mode
[ 2095.420720][ T4351] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 2095.634596][ T4351] usb 8-1: Using ep0 maxpacket: 16
[ 2095.647181][ T4351] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2095.689354][ T4351] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2095.723739][ T4351] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2095.752116][ T4351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2095.801597][ T4351] usb 8-1: config 0 descriptor??
[ 2095.819841][T20714] loop2: detected capacity change from 0 to 40427
[ 2095.906342][T20714] F2FS-fs (loop2): Invalid SB checksum offset: 0
[ 2095.926296][T20714] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[ 2095.986592][T20714] F2FS-fs (loop2): invalid crc value
[ 2096.157562][T20714] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 2096.851285][T20745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2096.892060][T20745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2096.967632][T20714] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[ 2096.991146][T20714] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 2097.377303][T11467] syz-executor: attempt to access beyond end of device
[ 2097.377303][T11467] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 2098.222628][T20767] binder: 20766:20767 unknown command 0
[ 2098.244624][T20767] binder: 20766:20767 ioctl c0306201 2000000001c0 returned -22
[ 2098.672573][T12271] usb 8-1: USB disconnect, device number 4
[ 2098.975175][T20781] lo speed is unknown, defaulting to 1000
[ 2099.471369][T20781] loop2: detected capacity change from 0 to 512
[ 2099.484563][T20781] EXT4-fs: Ignoring removed i_version option
[ 2099.727550][T20777] netlink: 'syz.9.3704': attribute type 6 has an invalid length.
[ 2099.871308][T20781] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 2099.881006][T20781] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2100.344586][T20777] netlink: 'syz.9.3704': attribute type 7 has an invalid length.
[ 2100.382472][T20777] netlink: 'syz.9.3704': attribute type 8 has an invalid length.
[ 2100.390383][T20777] netlink: 'syz.9.3704': attribute type 15 has an invalid length.
[ 2101.362372][T11467] EXT4-fs (loop2): unmounting filesystem.
[ 2103.539382][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3709'.
[ 2103.570900][ T4287] Bluetooth: Frame is too long (len 12, expected len 4)
[ 2134.531850][T12397] Bluetooth: hci2: command 0x0406 tx timeout
[ 2143.261121][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2143.267538][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 2208.956463][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2208.963332][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 2233.079990][T12397] Bluetooth: hci1: command 0x0406 tx timeout
[ 2274.642614][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2274.649236][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 2340.345567][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 2340.352139][ T1277] ieee802154 phy1 wpan1: encryption failed: -22