last executing test programs:

2m55.596978832s ago: executing program 2 (id=311):
r0 = socket(0x18, 0x6, 0x200000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x410)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = accept4(r1, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0)
read$msr(r1, &(0x7f00000016c0)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x41)
mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0400050000000000080005", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="10000400000000002000010000000000"], 0x3c, 0x1)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$kcm(0x10, 0x2, 0x0)

2m54.47207487s ago: executing program 2 (id=315):
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00')
lseek(r0, 0x8, 0x0)
r1 = dup(0xffffffffffffffff)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$dri(0x0, 0x8, 0x2c2080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f00000000c0))
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=':syt 00N004093'], 0x2a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r3, 0x0, 0x0)
keyctl$read(0xb, r3, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1485544, &(0x7f0000000080))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100e4b6c8437a68e0831d6e92525d482100000000000000000000000a1c000000000a0102000000"], 0x64}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c000167970001801400030000000000000000000000000000000000140604000000ffffac1414000c00028005000100000000003c0002802c0001801400030000000000000000000000ffffe000000214000400fc0200000000000000000000000000000c000280050001"], 0xb0}, 0x1, 0xfffff000}, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))
fsopen(&(0x7f0000000200)='ufs\x00', 0x1)
syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0})

2m51.95067662s ago: executing program 2 (id=321):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_usb_connect(0x3, 0x664, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xee, 0xce, 0x10, 0x9022, 0xd630, 0x97a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x652, 0x4, 0x6, 0x0, 0xc0, 0xc, [{{0x9, 0x4, 0x1c, 0x0, 0x6, 0x35, 0xc2, 0x69, 0x63, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc023, 0x6, 0xa0}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x3}]}, @generic={0xa2, 0xe, "a6e0c681e2bd48ae3570ecb50c35ce2ab4aa725178620c5f1fd5585aab6b36057de3b4390b0bdcddf156a60b66351f38515f727b4e8bab6b2777d73bc5c583afffc684f75f4edf92372389c58b3344e528ab51b3f38a71004b9c779be9d16c0ef65f6b6865236fe976e264f06245de006ca85968cd5399573b0e1b4125dc7335caf225bbd0c703502da0f4af943e50eda75cca641236138d923f6cb429e46c8c"}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x10, 0xec, 0x3, [@generic={0x92, 0x21, "c7eb06d07b34fd13ec1fd90497fae21be7cf1d9b7a3eb7ae400a5b3cb1a683b262f98d0bd54405b35dde8b03aa5f5ab3ee13f3f5bffa90420da408bba71dad2d25264c83ea250b780666dfe8bda405d09922e30f28cee0efe8be542d2f11e04ae534475eae5920be0ba9f723892aa8154fbbd16ce82ee776def83ef09efac7a379b032bf4f873fa3d004ae48abbf630f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x3, 0x3, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x1, 0x7, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x10, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x6, 0x6, [@generic={0xf5, 0x23, "bae690d72f3c6488768865ba63c31a3899b8d8e0c13622063faeed6816d437249ee42ad10b28a6e4e3e754dd142f055a9dcdc28c3a6f4ff46c50b0ba14d575582dedd7d79047ad72a5bfb7b57fe85a803219b24868c1c35bd8acbb0e11a63b554f1189f504054ca283e7a81540ed7f6e6892034bdfb3c203991c58691cd8df1d9b49519ea4b10e58e58396869006f36e9880a2b85a90b98fa0cb659487a91f336d0333aac92b374e723456fe5ef723d95869c7b47a042d51ba4d0837cfd2a274e26fa4ba6ba0b717588ede1df2cc7e58404c1686318ecdce29585a246a366573adea3f76f3b70c82bcfe824db7f7c040dfdfee"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x628, 0x9, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0x4, 0x5, 0x1, 0x84, 0xa0, 0x9a, 0x6, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "79ca75"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xb73, 0x3ff, 0x7}, [@dmm={0x7, 0x24, 0x14, 0xf5fc, 0x80}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0xd, 0x7}, @mdlm_detail={0x5f, 0x24, 0x13, 0x8, "c4988a6a19a24b9158224cf65a1c2b798888a03828133b349da8eba330b38cf8d5c99946ee93a26409f2e05ae75c3d27c9b1308d0e439a72719679efc26c67a1373f85934dfc0800773dac5d2481516f93b35fd46189f3bde48515"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x9, 0x7}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x19, 0x4, 0xa4}}]}}, {{0x9, 0x4, 0x56, 0x9, 0xa, 0xff, 0x96, 0x46, 0xf8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "e6b8"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5cae, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@dmm={0x7, 0x24, 0x14, 0xa5, 0x6}, @obex={0x5, 0x24, 0x15, 0x2}, @dmm={0x7, 0x24, 0x14, 0x5, 0x8d}, @dmm={0x7, 0x24, 0x14, 0x400, 0x8}, @dmm={0x7, 0x24, 0x14, 0x7}]}], [{{0x9, 0x5, 0x5, 0x2, 0x440, 0x6, 0x40, 0x9, [@generic={0x16, 0x23, "6689eaf6943f05ae1bc3619df05b8f68c5a60fd9"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x9, 0x7, 0x27}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x4, 0x8, [@generic={0xfc, 0xd, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}, @generic={0xb9, 0x3, "883cc6f6d4c4918c1872d889b6039339738e118cc3c2dcb97dba1d85b4760abb43914c32f14d34e4c1152265c5b9785fe2863dd781a1bd28d2e40df4c576ae3c302d32aaa3b84883e76d275b0f2e10bbe02b93443bc232758fa0adfb01e80f93b28adf3bd2b44f5b3d3df619526aa1ee1d6da1a183ee57410e07e9a25266ae4f824ae8dc43a08d289f2a411f2c8e4cdce1d58f56102afe5aff46f90390d5767a452f6ba724d7a9f7c33f9f211abda94007ef43d34dd59a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0xff, 0x7, 0x69}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0xe, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x1, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x80, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x28, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x4, 0x86, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x70, 0x1}]}}]}}, {{0x9, 0x4, 0xbf, 0x7, 0x2, 0xe0, 0xaa, 0x5e, 0xfb, [@generic={0x2, 0x24}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x3, "241e9158494c5a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0x2, "9d58cc"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0xa, 0x3, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0xf, 0xe, [@generic={0x36, 0xe, "a2abdde1729358e3b3ebeddf97f74295e373f958589f3fff2bb4084aa9c341b279eeea145be0f0c53c401b83551e9320ce1d283a"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa2, 0x1, 0x9, 0xff, 0xbe}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x480a}}]})

2m46.707307813s ago: executing program 2 (id=328):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @initr0]}, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1})
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m44.032649415s ago: executing program 2 (id=333):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4096)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x40c89}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x32}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xc334}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2m41.888121379s ago: executing program 2 (id=338):
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x169802, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000000)={0x20, 0x37, 0x1, {0x0, 0x8, 0x1c, r0, 0x2, ']\x00'}}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m26.805534098s ago: executing program 32 (id=338):
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x169802, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000000)={0x20, 0x37, 0x1, {0x0, 0x8, 0x1c, r0, 0x2, ']\x00'}}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

17.549028792s ago: executing program 4 (id=608):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, 0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200008d1}, 0xd0)
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

14.976276553s ago: executing program 0 (id=617):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x48}}, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0})
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)

14.740016876s ago: executing program 0 (id=618):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000000)="3b000000010006", 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))

14.034533218s ago: executing program 0 (id=619):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = open(0x0, 0x80ff, 0x36)
lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
ustat(0x801, &(0x7f0000000300))
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

12.677784549s ago: executing program 5 (id=620):
userfaultfd(0x80001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000010c0)=""/223, 0xdf}, {&(0x7f0000000a80)=""/21, 0x15}], 0x6}, 0x100}], 0x2, 0x40001023, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)

12.448999513s ago: executing program 4 (id=622):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1})

11.919102671s ago: executing program 4 (id=623):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000004000008000000080ff951f8d2c1ba870c50d384ba7d4d9000000", @ANYRES32=r3, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/27], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x4})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00')
read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f000001c380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000070a010100000000000000000300000324000580080001400000001a080001400000005e08000140000000000800024000325b5300000208000b40000000040900"], 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r6 = open(&(0x7f0000000840)='./file1\x00', 0x2800, 0x71)
mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
r7 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, 0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)

11.804055413s ago: executing program 1 (id=624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @initr0]}, 0x0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1})
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

11.128846923s ago: executing program 4 (id=625):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448cc, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffcb2)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC=r1], 0x7c}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28)
sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

10.932165257s ago: executing program 1 (id=626):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4}, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

9.639796377s ago: executing program 1 (id=628):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x800)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, r5)
getsockname$packet(r5, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)

9.365607681s ago: executing program 4 (id=629):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000000)="3b000000010006", 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))

8.402558737s ago: executing program 3 (id=630):
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
fsopen(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

8.342657907s ago: executing program 0 (id=631):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
listen(r0, 0x90004)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0))
r1 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36)
lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
ustat(0x801, &(0x7f0000000300))
accept4(r0, 0x0, 0x0, 0x0)

8.297283828s ago: executing program 1 (id=632):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
setpgid(0x0, r3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
fspick(r5, &(0x7f0000000240)='./file0\x00', 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c001600421bff9d727dc600fedbdf250500000007fff70005b578516d171e9ff3598a3fe6824d27119527c0143da4a8ebad19600293e09e11b940217c9ee230701b8e8788ee3baea35fe1ca6ffbe99dff53eb7895003ef638fe394d023f117a39566e2398a0c0a39d891f1a4277d69aa0eae233116ad74fe7d4c13880560c19b7559b", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094)

8.273613979s ago: executing program 5 (id=633):
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

6.89924595s ago: executing program 3 (id=634):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x10, 0xb, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd8", 0x32}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000980)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8", 0xab}], 0x1}}], 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

6.25993054s ago: executing program 5 (id=635):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000004000008000000080ff951f8d2c1ba870c50d384ba7d4d9000000", @ANYRES32=r3, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/27], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x4})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00')
read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f000001c380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000070a010100000000000000000300000324000580080001400000001a080001400000005e08000140000000000800024000325b5300000208000b40000000040900"], 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r6 = open(&(0x7f0000000840)='./file1\x00', 0x2800, 0x71)
mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
r7 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, 0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)

5.67727833s ago: executing program 3 (id=636):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10)
setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=<r3=>0x0)
ptrace(0x11, r3)
accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0)

5.03425226s ago: executing program 1 (id=637):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1})
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

4.963210261s ago: executing program 5 (id=638):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = dup(r2)
bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x7}, 0xe)
listen(r2, 0x9)
accept4$vsock_stream(r3, 0x0, 0x58, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004340)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0x2020)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x8000, 0x40024e}, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)

4.39521022s ago: executing program 1 (id=639):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = dup(0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r4, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}})
syz_io_uring_setup(0x318b, &(0x7f00000003c0)={0x0, 0xfec9, 0x8, 0x3}, &(0x7f0000000280), &(0x7f0000000380))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

4.38802087s ago: executing program 3 (id=640):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448cc, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffcb2)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC=r1], 0x7c}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28)
sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

2.697822487s ago: executing program 3 (id=641):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4}, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2.661500917s ago: executing program 4 (id=642):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = open(0x0, 0x80ff, 0x36)
lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
ustat(0x801, &(0x7f0000000300))
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

2.279863834s ago: executing program 5 (id=643):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "184194", 0x44, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x7, 0x0, 0x3, 0x9, 0x3, 0x1, 0x3, 0x9, 0x3, 0x4e20, 0x4e20}, 0x3, 0x4}, 0x2}, 0x4}}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x15}, 0x4001)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@jmp={0x5, 0x0, 0xd, 0x1, 0x90a3abbff9043444, 0x0, 0xffffffffffffffff}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfd}]}, 0x1c}}, 0x240048c5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c)
migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00')
write$USERIO_CMD_REGISTER(r6, 0x0, 0x0)

1.312034669s ago: executing program 3 (id=644):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='(\x00', &(0x7f0000000440)='\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1)
close(r3)
getpid()
r4 = syz_usb_connect$hid(0x5, 0x62, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "be181d82"}]}}, 0x0}, 0x0)

299.100905ms ago: executing program 0 (id=645):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x48}}, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0})
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200, 0x0)
mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)

145.322467ms ago: executing program 0 (id=646):
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x11}, 0x2, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setfsuid(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_usbip_server_init(0x3)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff})
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
splice(r2, 0x0, r3, 0x0, 0x25a5, 0xa)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, 0x0, 0x303, 0x0, 0x25dfdbfd, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000000)

0s ago: executing program 5 (id=647):
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0)
mlockall(0x2)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x6000)
shmctl$SHM_UNLOCK(0x0, 0xc)

kernel console output (not intermixed with test programs):

e_0) entered blocking state
[   73.839892][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.848732][ T4277] device bridge_slave_0 entered promiscuous mode
[   73.856762][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.863889][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.872492][ T4266] device bridge_slave_0 entered promiscuous mode
[   73.880272][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.887626][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.896323][ T4267] device bridge_slave_1 entered promiscuous mode
[   73.920805][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.928322][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.936610][ T4277] device bridge_slave_1 entered promiscuous mode
[   73.952484][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.959672][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.968386][ T4266] device bridge_slave_1 entered promiscuous mode
[   74.028605][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.039151][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.047073][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.057405][ T4276] device bridge_slave_0 entered promiscuous mode
[   74.066761][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.089622][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.099006][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.106372][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.114678][ T4276] device bridge_slave_1 entered promiscuous mode
[   74.123286][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.134702][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.181483][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.233716][ T4277] team0: Port device team_slave_0 added
[   74.242255][ T4277] team0: Port device team_slave_1 added
[   74.248796][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.256249][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.264359][ T4268] device bridge_slave_0 entered promiscuous mode
[   74.275750][ T4267] team0: Port device team_slave_0 added
[   74.283129][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.290296][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.298591][ T4268] device bridge_slave_1 entered promiscuous mode
[   74.307686][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.333685][ T4267] team0: Port device team_slave_1 added
[   74.365255][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.377310][ T4266] team0: Port device team_slave_0 added
[   74.400684][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.420144][ T4266] team0: Port device team_slave_1 added
[   74.426831][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.433811][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.460067][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.473114][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.480203][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.506349][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.520197][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.554781][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.561774][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.588256][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.600445][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.607665][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.639051][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.660818][ T4276] team0: Port device team_slave_0 added
[   74.692521][ T4276] team0: Port device team_slave_1 added
[   74.710517][ T4268] team0: Port device team_slave_0 added
[   74.720381][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.727534][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.753544][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.786211][ T4268] team0: Port device team_slave_1 added
[   74.792475][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.800014][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.826193][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.837778][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.844889][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.871003][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.905468][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.912451][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.939225][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.966166][ T4277] device hsr_slave_0 entered promiscuous mode
[   74.973198][ T4277] device hsr_slave_1 entered promiscuous mode
[   75.010003][ T4267] device hsr_slave_0 entered promiscuous mode
[   75.016978][ T4267] device hsr_slave_1 entered promiscuous mode
[   75.023575][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.031868][ T4267] Cannot create hsr debugfs directory
[   75.047932][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.055025][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.081332][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.104967][ T4282] Bluetooth: hci0: command 0x0409 tx timeout
[   75.111615][ T4282] Bluetooth: hci4: command 0x0409 tx timeout
[   75.115966][ T4274] Bluetooth: hci2: command 0x0409 tx timeout
[   75.118571][ T4272] Bluetooth: hci1: command 0x0409 tx timeout
[   75.130456][ T4280] Bluetooth: hci3: command 0x0409 tx timeout
[   75.154400][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.161389][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.187658][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.211378][ T4276] device hsr_slave_0 entered promiscuous mode
[   75.218207][ T4276] device hsr_slave_1 entered promiscuous mode
[   75.225366][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.232952][ T4276] Cannot create hsr debugfs directory
[   75.261771][ T4266] device hsr_slave_0 entered promiscuous mode
[   75.269182][ T4266] device hsr_slave_1 entered promiscuous mode
[   75.276124][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.283698][ T4266] Cannot create hsr debugfs directory
[   75.371873][ T4268] device hsr_slave_0 entered promiscuous mode
[   75.378915][ T4268] device hsr_slave_1 entered promiscuous mode
[   75.386123][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.393717][ T4268] Cannot create hsr debugfs directory
[   75.696696][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.714256][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.729920][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.742972][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.769472][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.790956][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.801066][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.845780][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.896810][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.913498][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.935020][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.948966][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.000110][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   76.022087][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.034790][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   76.073989][ T4267] 8021q: adding VLAN 0 to HW filter on device team0
[   76.081702][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   76.100115][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   76.118587][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.129539][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.138895][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.148067][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.157641][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.165017][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.175678][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.213657][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.222979][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.232334][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.239510][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.271405][ T4268] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   76.282587][ T4268] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   76.295390][ T4268] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   76.308924][ T4268] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   76.329826][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   76.363636][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.387706][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.398354][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.418858][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.436752][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.455317][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.468130][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.480721][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.502453][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.511429][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.521258][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.530368][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.542112][ T4276] 8021q: adding VLAN 0 to HW filter on device team0
[   76.564857][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.572909][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.582146][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.592342][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.630207][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.639618][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.649734][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.657005][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.665649][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.674818][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.683273][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.690453][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.700436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.711479][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   76.749648][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   76.761667][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.772813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.781862][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.789042][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.798688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.807754][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.816703][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.823836][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.832573][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   76.882855][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.898951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.909733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.922522][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.935883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.945935][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.954916][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.975195][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.986536][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.997664][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.007106][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.021133][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.030728][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.071153][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.079921][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.095042][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.103958][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   77.119220][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.129130][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.142172][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.152318][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.161990][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.172909][ T4266] 8021q: adding VLAN 0 to HW filter on device team0
[   77.184666][ T4280] Bluetooth: hci3: command 0x041b tx timeout
[   77.184683][ T4272] Bluetooth: hci2: command 0x041b tx timeout
[   77.184715][ T4272] Bluetooth: hci0: command 0x041b tx timeout
[   77.190706][ T4280] Bluetooth: hci4: command 0x041b tx timeout
[   77.201363][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.203601][ T4280] Bluetooth: hci1: command 0x041b tx timeout
[   77.236966][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.247290][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.257360][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   77.266611][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.276298][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   77.285914][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   77.305114][ T4268] 8021q: adding VLAN 0 to HW filter on device team0
[   77.322203][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.345584][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.353140][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.390320][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.410140][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.417349][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.432127][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   77.442135][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.457223][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.464416][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.492219][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.513483][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.528250][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.541579][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.554364][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.563086][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.570286][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.581331][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.591015][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.600005][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.607180][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.615473][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.627219][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.643064][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.683616][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.706662][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.726012][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.754787][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.795451][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.810914][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.826741][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.838098][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.852397][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.868030][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.883109][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.902424][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.913585][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.927831][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.936884][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.946805][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.955651][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.988199][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   78.000738][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.009910][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.020610][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.029071][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.037493][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   78.046222][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.059738][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   78.076593][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.130697][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.142277][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.161816][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.201760][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.209832][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.245515][ T4267] device veth0_vlan entered promiscuous mode
[   78.253048][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.269650][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.302735][ T4267] device veth1_vlan entered promiscuous mode
[   78.350769][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   78.371645][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.381961][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.397614][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.407551][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.462616][ T4277] device veth0_vlan entered promiscuous mode
[   78.489858][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   78.508893][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.537325][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.566493][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.590871][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.601323][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.616753][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.631502][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.649194][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.659357][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.670408][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.679372][ T4267] device veth0_macvtap entered promiscuous mode
[   78.690453][ T4276] device veth0_vlan entered promiscuous mode
[   78.713752][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.723917][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.738164][ T4277] device veth1_vlan entered promiscuous mode
[   78.757505][ T4267] device veth1_macvtap entered promiscuous mode
[   78.771864][ T4276] device veth1_vlan entered promiscuous mode
[   78.798581][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.809577][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.819986][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.841921][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.857569][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.877603][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.892372][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.921518][ T4277] device veth0_macvtap entered promiscuous mode
[   78.936030][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.950032][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.959976][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.969528][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.981817][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.993676][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.018519][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.033975][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.053259][ T4277] device veth1_macvtap entered promiscuous mode
[   79.062774][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.071993][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.081592][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.090899][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.119952][ T4276] device veth0_macvtap entered promiscuous mode
[   79.149800][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.161928][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.172856][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   79.188349][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.207315][ T4276] device veth1_macvtap entered promiscuous mode
[   79.223603][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.244742][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.257857][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.264788][ T4280] Bluetooth: hci1: command 0x040f tx timeout
[   79.267076][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[   79.271194][ T4280] Bluetooth: hci4: command 0x040f tx timeout
[   79.278201][ T4272] Bluetooth: hci3: command 0x040f tx timeout
[   79.283850][ T4280] Bluetooth: hci2: command 0x040f tx timeout
[   79.362102][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.380596][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.389589][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.407855][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.419413][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.429829][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.440410][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.451881][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.463004][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.473659][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.488731][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.500431][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.511067][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.520158][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.529606][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.539883][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.554460][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.564848][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.581592][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.593253][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.604234][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.620356][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.636361][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.654672][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.663439][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.673225][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.685549][ T4266] device veth0_vlan entered promiscuous mode
[   79.698287][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.706841][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.715223][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.723884][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.737717][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.748011][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.757355][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.766343][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.792525][ T4266] device veth1_vlan entered promiscuous mode
[   79.841965][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.858531][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.907313][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.922700][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.932406][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.976225][ T4266] device veth0_macvtap entered promiscuous mode
[   79.993004][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   80.012530][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.021950][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.050674][ T4266] device veth1_macvtap entered promiscuous mode
[   80.084012][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.092610][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.094309][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.133497][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   80.142050][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.142808][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.160048][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   80.171187][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   80.181390][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.190383][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   80.198538][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   80.209296][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.209368][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.227959][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.236210][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.246986][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.257660][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.268145][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.278892][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.291083][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.311145][ T4268] device veth0_vlan entered promiscuous mode
[   80.328772][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.339199][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.349876][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.369195][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.380577][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.391520][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.406651][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.416772][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.427591][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.439043][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.476830][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.491398][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.503733][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.520114][ T4268] device veth1_vlan entered promiscuous mode
[   80.527514][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.551456][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.565352][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   80.583379][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   80.593892][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.607369][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.615862][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.635215][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.643983][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.661704][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.671920][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.767074][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   80.795844][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   80.852575][ T4268] device veth0_macvtap entered promiscuous mode
[   80.924495][ T4268] device veth1_macvtap entered promiscuous mode
[   81.196308][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.215280][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.226438][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.237532][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.264454][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   81.274089][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   81.282420][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   81.291239][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.299655][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.307956][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.316343][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.324645][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.333024][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.341329][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.403826][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.414591][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.440554][ T4283] Bluetooth: hci2: command 0x0419 tx timeout
[   81.440895][ T4272] Bluetooth: hci3: command 0x0419 tx timeout
[   81.446684][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[   81.452647][ T4272] Bluetooth: hci4: command 0x0419 tx timeout
[   81.466451][ T4272] Bluetooth: hci1: command 0x0419 tx timeout
[   81.490119][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.564810][ T4396] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   82.171689][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.523609][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.548143][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.556000][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.607507][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   82.615109][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.680301][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.775024][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.014447][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.236807][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.330168][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.400961][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.573890][ T4407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6'.
[   83.586247][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.586298][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.586316][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.586326][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.586339][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.588239][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.940520][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.972707][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.024569][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.071925][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.137140][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.204158][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.276932][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.315775][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.449403][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.752922][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.780947][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.818661][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.858914][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.409676][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.470495][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.807740][  T129] cfg80211: failed to load regulatory.db
[   88.374889][ T4447] netlink: 'syz.1.15': attribute type 21 has an invalid length.
[   88.383027][ T4447] netlink: 'syz.1.15': attribute type 6 has an invalid length.
[   88.392026][ T4447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15'.
[   89.269600][ T4456] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16'.
[   89.576955][ T4461] process 'syz.2.10' launched '/dev/fd/3' with NULL argv: empty string added
[   90.154296][   T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   90.194582][ T4463] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17'.
[   92.708521][ T4335] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   92.905399][ T4335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.944096][ T4495] Zero length message leads to an empty skb
[   93.124245][ T4335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.213852][ T4495] netlink: 830 bytes leftover after parsing attributes in process `syz.4.23'.
[   93.516759][ T4492] Bluetooth: MGMT ver 1.22
[   93.679432][ T4335] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   94.156878][ T4335] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[   94.182595][ T4504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26'.
[   94.393204][ T4335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.591913][ T4335] usb 1-1: config 0 descriptor??
[   94.916193][ T4508] netlink: 'syz.2.28': attribute type 21 has an invalid length.
[   94.924560][ T4508] netlink: 'syz.2.28': attribute type 6 has an invalid length.
[   94.932302][ T4508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28'.
[   95.027688][ T4335] usbhid 1-1:0.0: can't add hid device: -71
[   95.033893][ T4335] usbhid: probe of 1-1:0.0 failed with error -71
[   95.681710][ T4335] usb 1-1: USB disconnect, device number 2
[   95.892680][ T4515] netlink: 'syz.0.29': attribute type 20 has an invalid length.
[   95.977270][ T4515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.29'.
[   97.149763][ T4521] netlink: 80 bytes leftover after parsing attributes in process `syz.1.31'.
[  100.207814][ T4546] syz.1.37 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  100.805525][ T4549] netlink: 830 bytes leftover after parsing attributes in process `syz.0.38'.
[  101.517431][ T4554] netlink: 68 bytes leftover after parsing attributes in process `syz.1.40'.
[  104.054320][ T4321] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  104.262052][ T4321] usb 1-1: Using ep0 maxpacket: 16
[  104.343682][ T4321] usb 1-1: config 6 has an invalid interface number: 28 but max is 3
[  104.362315][ T4321] usb 1-1: config 6 has an invalid interface number: 4 but max is 3
[  104.374155][ T4321] usb 1-1: config 6 has an invalid interface number: 86 but max is 3
[  104.382922][ T4321] usb 1-1: config 6 has an invalid interface number: 191 but max is 3
[  104.524195][ T4321] usb 1-1: config 6 has no interface number 0
[  104.530442][ T4321] usb 1-1: config 6 has no interface number 1
[  104.594207][ T4321] usb 1-1: config 6 has no interface number 2
[  104.600518][ T4321] usb 1-1: config 6 has no interface number 3
[  104.611112][ T4321] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  104.626416][ T4321] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  104.638461][ T4321] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  104.649910][ T4321] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  104.661211][ T4321] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  104.672494][ T4321] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  104.714198][ T4321] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  104.725923][ T4321] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  104.736453][ T4321] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  104.904546][ T4321] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  104.915026][ T4321] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  104.926222][ T4321] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  104.937709][ T4321] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  104.949815][ T4321] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  105.067245][ T4321] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  105.078279][ T4321] usb 1-1: config 6 interface 4 has no altsetting 0
[  105.085909][ T4321] usb 1-1: config 6 interface 86 has no altsetting 0
[  105.095812][ T4321] usb 1-1: config 6 interface 191 has no altsetting 0
[  105.447339][ T4567] netlink: 830 bytes leftover after parsing attributes in process `syz.4.43'.
[  105.823166][ T4321] usb 1-1: string descriptor 0 read error: -71
[  105.829585][ T4321] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  105.859280][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.907934][ T4321] usb 1-1: can't set config #6, error -71
[  105.975608][ T4321] usb 1-1: USB disconnect, device number 3
[  106.303014][ T4582] netlink: 'syz.3.47': attribute type 20 has an invalid length.
[  106.546105][ T4582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.47'.
[  107.181898][ T4587] netlink: 'syz.4.46': attribute type 21 has an invalid length.
[  107.238415][ T4587] netlink: 'syz.4.46': attribute type 6 has an invalid length.
[  107.379313][ T4587] netlink: 132 bytes leftover after parsing attributes in process `syz.4.46'.
[  107.475287][ T4596] fuse: Bad value for 'fd'
[  107.718434][ T4594] batman_adv: batadv0: Adding interface: dummy0
[  107.750450][ T4594] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.802419][ T4594] batman_adv: batadv0: Interface activated: dummy0
[  108.088871][ T4609] netlink: 68 bytes leftover after parsing attributes in process `syz.3.52'.
[  109.780126][ T4620] syz.0.55 sent an empty control message without MSG_MORE.
[  110.712142][ T4621] netlink: 830 bytes leftover after parsing attributes in process `syz.3.54'.
[  111.694351][ T4630] netlink: 830 bytes leftover after parsing attributes in process `syz.1.56'.
[  114.011786][ T4642] netlink: 'syz.3.62': attribute type 21 has an invalid length.
[  114.019529][ T4642] netlink: 'syz.3.62': attribute type 6 has an invalid length.
[  114.027265][ T4642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.62'.
[  115.069310][ T4657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.63'.
[  115.576162][ T4662] netlink: 68 bytes leftover after parsing attributes in process `syz.3.64'.
[  119.717336][ T4688] netlink: 830 bytes leftover after parsing attributes in process `syz.4.72'.
[  120.394366][   T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  120.574353][   T22] usb 3-1: device descriptor read/64, error -71
[  121.048473][   T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  121.049708][ T4702] netlink: 'syz.3.75': attribute type 21 has an invalid length.
[  121.066016][ T4702] netlink: 'syz.3.75': attribute type 6 has an invalid length.
[  121.073710][ T4702] netlink: 132 bytes leftover after parsing attributes in process `syz.3.75'.
[  121.214330][   T22] usb 3-1: device descriptor read/64, error -71
[  121.345492][   T22] usb usb3-port1: attempt power cycle
[  121.722195][ T4703] netlink: 'syz.4.76': attribute type 21 has an invalid length.
[  121.744806][ T4703] netlink: 'syz.4.76': attribute type 6 has an invalid length.
[  121.756233][ T4703] netlink: 132 bytes leftover after parsing attributes in process `syz.4.76'.
[  121.874122][   T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  121.916615][   T22] usb 3-1: device descriptor read/8, error -71
[  122.354788][   T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  122.508396][   T22] usb 3-1: device descriptor read/8, error -71
[  122.764129][   T22] usb usb3-port1: unable to enumerate USB device
[  127.494128][ T4761] netlink: 'syz.1.89': attribute type 21 has an invalid length.
[  127.502936][ T4761] netlink: 'syz.1.89': attribute type 6 has an invalid length.
[  127.511402][ T4761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.89'.
[  128.344226][ T4768] netlink: 48 bytes leftover after parsing attributes in process `syz.3.90'.
[  128.520652][ T4768] netlink: 48 bytes leftover after parsing attributes in process `syz.3.90'.
[  129.074130][ T4778] netlink: 'syz.0.92': attribute type 21 has an invalid length.
[  129.082198][ T4778] netlink: 'syz.0.92': attribute type 6 has an invalid length.
[  129.089973][ T4778] netlink: 132 bytes leftover after parsing attributes in process `syz.0.92'.
[  131.834153][ T4417] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  132.787737][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.794333][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.464351][ T4417] usb 1-1: device descriptor read/64, error -71
[  133.764794][ T4417] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  134.364104][ T4417] usb 1-1: device descriptor read/64, error -71
[  134.517366][ T4417] usb usb1-port1: attempt power cycle
[  136.016058][ T4827] netlink: 'syz.1.102': attribute type 21 has an invalid length.
[  136.024332][ T4827] netlink: 'syz.1.102': attribute type 6 has an invalid length.
[  136.032112][ T4827] netlink: 132 bytes leftover after parsing attributes in process `syz.1.102'.
[  136.748980][ T4832] netlink: 68 bytes leftover after parsing attributes in process `syz.3.103'.
[  137.185485][ T4832] syz.3.103 (4832) used greatest stack depth: 20296 bytes left
[  138.302125][ T4842] netlink: 'syz.1.106': attribute type 21 has an invalid length.
[  138.310378][ T4842] netlink: 'syz.1.106': attribute type 6 has an invalid length.
[  138.318207][ T4842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.106'.
[  140.184090][ T4866] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  140.237736][ T4866] netlink: 830 bytes leftover after parsing attributes in process `syz.1.110'.
[  143.966154][ T4890] netlink: 'syz.1.117': attribute type 21 has an invalid length.
[  143.974449][ T4890] netlink: 'syz.1.117': attribute type 6 has an invalid length.
[  143.982238][ T4890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.117'.
[  144.874432][  T126] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  144.945684][    C1] Illegal XDP return value 16128 on prog  (id 35) dev bond_slave_0, expect packet loss!
[  145.110841][  T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.934097][  T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.023825][  T126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  147.044161][  T126] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  147.058168][  T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.092037][  T126] usb 1-1: config 0 descriptor??
[  147.525705][ T4901] netlink: 'syz.4.120': attribute type 21 has an invalid length.
[  147.533817][ T4901] netlink: 'syz.4.120': attribute type 6 has an invalid length.
[  147.542155][ T4901] netlink: 132 bytes leftover after parsing attributes in process `syz.4.120'.
[  147.742886][  T126] ryos 0003:1E7D:3232.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0
[  148.788384][   T22] usb 1-1: USB disconnect, device number 7
[  150.432236][ T4925] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  150.488864][ T4925] netlink: 830 bytes leftover after parsing attributes in process `syz.1.125'.
[  151.370213][ T4932] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  151.400940][ T4932] netlink: 830 bytes leftover after parsing attributes in process `syz.1.127'.
[  152.796875][ T4942] netlink: 32 bytes leftover after parsing attributes in process `syz.2.129'.
[  154.017930][ T4947] netlink: 'syz.3.132': attribute type 21 has an invalid length.
[  154.029696][ T4947] netlink: 'syz.3.132': attribute type 6 has an invalid length.
[  154.038129][ T4947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.132'.
[  154.830919][ T4953] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.840671][ T4953] F2FS-fs (loop3): Unable to read 1th superblock
[  154.852166][ T4953] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.865024][ T4953] F2FS-fs (loop3): Unable to read 2th superblock
[  156.421587][ T4977] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  156.458054][ T4977] netlink: 830 bytes leftover after parsing attributes in process `syz.3.139'.
[  157.114947][ T4318] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  157.334288][ T4318] usb 3-1: Using ep0 maxpacket: 16
[  157.365917][ T4318] usb 3-1: config 6 has an invalid interface number: 28 but max is 3
[  157.584128][ T4318] usb 3-1: config 6 has an invalid interface number: 4 but max is 3
[  157.592320][ T4318] usb 3-1: config 6 has an invalid interface number: 86 but max is 3
[  157.603128][ T4318] usb 3-1: config 6 has an invalid interface number: 191 but max is 3
[  157.611811][ T4318] usb 3-1: config 6 has no interface number 0
[  157.624117][ T4318] usb 3-1: config 6 has no interface number 1
[  157.634226][ T4318] usb 3-1: config 6 has no interface number 2
[  157.640452][ T4318] usb 3-1: config 6 has no interface number 3
[  157.647311][ T4318] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  157.658493][ T4318] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  157.669553][ T4318] usb 3-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  157.681875][ T4318] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  157.709564][ T4318] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  157.725540][ T4318] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  157.744747][ T4318] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  157.756315][ T4318] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  157.803085][ T4985] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  157.809995][ T4985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  157.820767][ T4985] vhci_hcd vhci_hcd.0: Device attached
[  157.827732][ T4988] vhci_hcd: connection closed
[  158.004773][ T4466] vhci_hcd: stop threads
[  158.550197][ T4318] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  158.561014][ T4318] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  158.570855][ T4318] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  158.581625][ T4318] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  158.592658][ T4318] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  158.603785][ T4318] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  158.614678][ T4318] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  158.628078][ T4318] usb 3-1: config 6 interface 4 has no altsetting 0
[  158.667861][ T4318] usb 3-1: config 6 interface 86 has no altsetting 0
[  158.677741][ T4466] vhci_hcd: release socket
[  158.677757][ T4318] usb 3-1: config 6 interface 191 has no altsetting 0
[  158.699403][ T4466] vhci_hcd: disconnect device
[  162.359945][ T5020] netlink: 'syz.3.146': attribute type 21 has an invalid length.
[  162.368364][ T5020] netlink: 'syz.3.146': attribute type 6 has an invalid length.
[  162.378644][ T5020] netlink: 132 bytes leftover after parsing attributes in process `syz.3.146'.
[  162.534528][ T5025] netlink: 830 bytes leftover after parsing attributes in process `syz.0.147'.
[  162.911632][ T4318] usb 3-1: string descriptor 0 read error: -71
[  162.931959][ T4318] usb 3-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  162.967665][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.016588][ T4318] usb 3-1: can't set config #6, error -71
[  163.059986][ T4318] usb 3-1: USB disconnect, device number 7
[  163.128625][ T5031] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  163.138092][ T5031] F2FS-fs (loop1): Unable to read 1th superblock
[  163.145158][ T5031] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  163.154460][ T5031] F2FS-fs (loop1): Unable to read 2th superblock
[  169.609693][ T5083] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  169.641464][ T5083] netlink: 830 bytes leftover after parsing attributes in process `syz.0.158'.
[  170.589373][ T5093] netlink: 'syz.3.160': attribute type 21 has an invalid length.
[  170.600078][ T5093] netlink: 'syz.3.160': attribute type 6 has an invalid length.
[  170.608026][ T5093] netlink: 132 bytes leftover after parsing attributes in process `syz.3.160'.
[  173.537396][ T5112] netlink: 830 bytes leftover after parsing attributes in process `syz.3.166'.
[  174.236388][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'.
[  174.303259][ T5113] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.312335][ T5113] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.321353][ T5113] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.330233][ T5113] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.495476][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'.
[  175.968877][ T4417] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  176.046560][ T5130] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  176.097610][ T5130] netlink: 830 bytes leftover after parsing attributes in process `syz.4.172'.
[  176.476246][ T4417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.521861][ T4417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.579690][ T4417] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.673941][ T4417] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  176.717725][ T4417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.764829][ T4417] usb 4-1: config 0 descriptor??
[  177.030736][ T5135] netlink: 48 bytes leftover after parsing attributes in process `syz.4.173'.
[  177.070903][ T5135] netlink: 48 bytes leftover after parsing attributes in process `syz.4.173'.
[  177.197836][ T4417] ryos 0003:1E7D:3232.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.3-1/input0
[  178.503961][ T4347] usb 4-1: USB disconnect, device number 2
[  178.577163][ T5147] netlink: 68 bytes leftover after parsing attributes in process `syz.1.175'.
[  179.081858][ T5149] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  179.091808][ T5149] F2FS-fs (loop5): Unable to read 1th superblock
[  179.099426][ T5149] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  179.109083][ T5149] F2FS-fs (loop5): Unable to read 2th superblock
[  181.205167][ T5164] netlink: 32 bytes leftover after parsing attributes in process `syz.3.181'.
[  181.642869][ T5169] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  181.686053][ T5169] netlink: 830 bytes leftover after parsing attributes in process `syz.4.183'.
[  182.775029][ T5175] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  182.781680][ T5175] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  182.789579][ T5175] vhci_hcd vhci_hcd.0: Device attached
[  182.813886][ T5181] vhci_hcd: connection closed
[  182.829708][ T4462] vhci_hcd: stop threads
[  182.839030][ T4462] vhci_hcd: release socket
[  182.843586][ T4462] vhci_hcd: disconnect device
[  183.889061][ T5190] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.900757][ T5190] F2FS-fs (loop9): Unable to read 1th superblock
[  183.908333][ T5190] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  183.917863][ T5190] F2FS-fs (loop9): Unable to read 2th superblock
[  184.522205][ T5195] batman_adv: batadv0: Adding interface: dummy0
[  184.528820][ T5195] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.554403][ T5195] batman_adv: batadv0: Interface activated: dummy0
[  186.098752][ T5210] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  186.138406][ T5210] netlink: 830 bytes leftover after parsing attributes in process `syz.3.195'.
[  186.279847][ T4363] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  186.728339][ T4363] usb 5-1: config index 0 descriptor too short (expected 146, got 18)
[  186.760895][ T4363] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.840105][ T4363] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  186.864335][ T4363] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  186.890568][ T4363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.909245][ T4363] usb 5-1: Product: syz
[  186.913481][ T4363] usb 5-1: Manufacturer: syz
[  186.933864][ T4363] usb 5-1: SerialNumber: syz
[  187.009368][ T4363] usb 5-1: config 0 descriptor??
[  187.306952][ T4417] usb 5-1: USB disconnect, device number 2
[  187.387422][ T5216] netlink: 32 bytes leftover after parsing attributes in process `syz.3.196'.
[  189.808827][ T5234] netlink: 68 bytes leftover after parsing attributes in process `syz.2.202'.
[  190.661834][ T5241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'.
[  192.078031][ T5264] netlink: 'syz.3.211': attribute type 20 has an invalid length.
[  192.203382][ T5264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.211'.
[  192.622930][ T5268] netlink: 84 bytes leftover after parsing attributes in process `syz.1.212'.
[  194.230774][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.237177][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  196.304164][ T4272] Bluetooth: hci4: command 0x0406 tx timeout
[  196.304624][ T4283] Bluetooth: hci1: command 0x0406 tx timeout
[  196.310227][ T4272] Bluetooth: hci3: command 0x0406 tx timeout
[  196.310260][ T4272] Bluetooth: hci2: command 0x0406 tx timeout
[  196.310289][ T4272] Bluetooth: hci0: command 0x0406 tx timeout
[  197.655562][ T5302] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  197.664846][ T5302] F2FS-fs (loop3): Unable to read 1th superblock
[  197.671301][ T5302] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  197.680543][ T5302] F2FS-fs (loop3): Unable to read 2th superblock
[  198.534656][ T5310] tipc: Started in network mode
[  198.671507][ T5310] tipc: Node identity ae93457a6b4d, cluster identity 4711
[  198.700806][ T5310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.713250][ T5314] device syzkaller0 entered promiscuous mode
[  198.830523][ T5310] tipc: Resetting bearer <eth:syzkaller0>
[  198.877706][ T5309] tipc: Resetting bearer <eth:syzkaller0>
[  198.967107][ T5309] tipc: Disabling bearer <eth:syzkaller0>
[  199.284281][ T5321] netlink: 'syz.0.228': attribute type 21 has an invalid length.
[  199.292323][ T5321] netlink: 'syz.0.228': attribute type 6 has an invalid length.
[  199.300294][ T5321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.228'.
[  200.822953][ T5336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.231'.
[  203.089332][ T5354] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  203.098604][ T5354] F2FS-fs (loop5): Unable to read 1th superblock
[  203.105176][ T5354] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  203.114428][ T5354] F2FS-fs (loop5): Unable to read 2th superblock
[  203.881549][ T5360] netlink: 'syz.2.240': attribute type 21 has an invalid length.
[  203.900246][ T5360] netlink: 'syz.2.240': attribute type 6 has an invalid length.
[  203.910656][ T5360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.240'.
[  204.894626][ T5367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.238'.
[  207.785323][ T5386] netlink: 830 bytes leftover after parsing attributes in process `syz.0.246'.
[  209.348730][ T4363] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  209.464260][ T5397] tmpfs: Unknown parameter 'quota'
[  209.518086][ T5397] netlink: 830 bytes leftover after parsing attributes in process `syz.0.249'.
[  209.946910][ T4363] usb 5-1: unable to get BOS descriptor or descriptor too short
[  209.975426][ T4363] usb 5-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  210.177758][ T4363] usb 5-1: config 1 interface 0 has no altsetting 0
[  210.206060][ T4363] usb 5-1: language id specifier not provided by device, defaulting to English
[  210.339021][ T4363] usb 5-1: New USB device found, idVendor=1130, idProduct=3101, bcdDevice= 0.40
[  210.494101][ T4363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.502174][ T4363] usb 5-1: Manufacturer: 㬋ﮬ뜞䆌ᙳᾴ⢓䁪ᜃ램닆芚פֿᥘ掎묗䷄㪭毦祒ꂄ⪕㇗ሑ땃㢽꺗ꪒ悓䒬簾叼딶되羔⊽㍣︮疊㭶笠睪闣韩仔齄撎랙椱ᩊ๿匼娝疂䄨蛽홺嘬㶱〡糒솜琬嫳⒍鐌滃帔蚚幾캧㝢았깽╜틻㳃뜧ࠩ鏪躉렉옶辵钝芓徂㞝
[  210.670140][ T5389] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  211.029077][ T4363] usbhid 5-1:1.0: can't add hid device: -71
[  211.036791][ T4363] usbhid: probe of 5-1:1.0 failed with error -71
[  211.046822][ T4363] usb 5-1: USB disconnect, device number 3
[  213.010694][ T5420] netlink: 'syz.2.257': attribute type 21 has an invalid length.
[  213.019002][ T5420] netlink: 'syz.2.257': attribute type 6 has an invalid length.
[  213.029669][ T5420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.257'.
[  215.024083][ T5431] netlink: 830 bytes leftover after parsing attributes in process `syz.3.260'.
[  215.525066][ T5440] tmpfs: Unknown parameter 'quota'
[  215.629526][ T5440] netlink: 830 bytes leftover after parsing attributes in process `syz.4.263'.
[  218.610444][  T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  220.385438][ T5473] tmpfs: Bad value for 'mpol'
[  220.436126][  T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.655340][  T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.840989][ T5475] tipc: Started in network mode
[  220.848751][  T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.872474][ T5475] tipc: Node identity 4aa142c7778, cluster identity 4711
[  221.018032][ T5475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.025135][  T126] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  221.037765][ T5478] device syzkaller0 entered promiscuous mode
[  221.046120][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.111229][  T126] usb 3-1: config 0 descriptor??
[  221.120231][  T126] usb 3-1: can't set config #0, error -71
[  221.181920][  T126] usb 3-1: USB disconnect, device number 8
[  221.271173][ T5479] tipc: Resetting bearer <eth:syzkaller0>
[  221.298518][ T5474] tipc: Resetting bearer <eth:syzkaller0>
[  221.525151][ T5474] tipc: Disabling bearer <eth:syzkaller0>
[  221.694987][ T5489] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  221.722576][ T5482] netlink: 'syz.2.273': attribute type 21 has an invalid length.
[  222.258450][ T5482] netlink: 'syz.2.273': attribute type 6 has an invalid length.
[  222.294165][ T5482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.273'.
[  222.446009][ T5491] netlink: 830 bytes leftover after parsing attributes in process `syz.3.274'.
[  222.455685][ T5488] netlink: 'syz.4.276': attribute type 20 has an invalid length.
[  222.578786][ T5488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.276'.
[  223.340391][ T5506] fuse: Bad value for 'fd'
[  224.318584][ T5511] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  224.327900][ T5511] F2FS-fs (loop1): Unable to read 1th superblock
[  224.334398][ T5511] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  224.344134][ T5511] F2FS-fs (loop1): Unable to read 2th superblock
[  225.993436][ T5522] tmpfs: Unknown parameter 'quota'
[  226.025010][ T5522] netlink: 830 bytes leftover after parsing attributes in process `syz.1.284'.
[  226.782941][ T5531] netlink: 'syz.0.285': attribute type 21 has an invalid length.
[  226.791354][ T5531] netlink: 'syz.0.285': attribute type 6 has an invalid length.
[  226.801222][ T5531] netlink: 132 bytes leftover after parsing attributes in process `syz.0.285'.
[  228.528445][ T5540] tipc: Started in network mode
[  228.553003][ T5540] tipc: Node identity 7266ef994c89, cluster identity 4711
[  228.591343][ T5540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.635110][ T5541] device syzkaller0 entered promiscuous mode
[  228.737524][ T5540] tipc: Resetting bearer <eth:syzkaller0>
[  228.794738][ T5539] tipc: Resetting bearer <eth:syzkaller0>
[  228.879745][ T5539] tipc: Disabling bearer <eth:syzkaller0>
[  231.291441][ T5565] netlink: 84 bytes leftover after parsing attributes in process `syz.3.295'.
[  231.507374][ T5571] tmpfs: Unknown parameter 'quota'
[  231.575212][ T5571] netlink: 830 bytes leftover after parsing attributes in process `syz.0.297'.
[  233.898942][ T5578] netlink: 'syz.2.299': attribute type 21 has an invalid length.
[  233.911882][ T5578] netlink: 'syz.2.299': attribute type 6 has an invalid length.
[  233.923892][ T5578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.299'.
[  236.704280][  T129] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  237.206137][  T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.823266][  T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.834109][  T129] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  238.847535][  T129] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  238.857973][  T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.883810][  T129] usb 1-1: config 0 descriptor??
[  239.828982][  T129] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0
[  239.880914][ T5618] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  241.127698][ T4684] usb 1-1: USB disconnect, device number 8
[  241.184711][ T4283] Bluetooth: hci4: command 0x0405 tx timeout
[  241.343559][ T5631] netlink: 'syz.2.311': attribute type 21 has an invalid length.
[  241.351793][ T5631] netlink: 'syz.2.311': attribute type 6 has an invalid length.
[  241.359659][ T5631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.311'.
[  241.815272][ T5635] netlink: 'syz.0.312': attribute type 20 has an invalid length.
[  241.888707][ T5636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.312'.
[  242.296580][ T5644] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[  242.399606][ T5644] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[  242.896106][ T5640] netlink: 'syz.2.315': attribute type 3 has an invalid length.
[  242.903830][ T5640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.315'.
[  243.494248][ T4684] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  244.277585][ T4684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.320770][ T4684] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  244.384314][ T4684] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  244.393431][ T4684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.483765][ T4684] usb 5-1: config 0 descriptor??
[  244.582696][ T5669] device hsr0 entered promiscuous mode
[  244.642312][   T26] audit: type=1326 audit(1753240346.028:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59e3d8e9a9 code=0x0
[  244.741725][ T5669] device hsr0 left promiscuous mode
[  245.359544][ T5678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.381881][ T5678] device syzkaller0 entered promiscuous mode
[  245.894183][ T4684] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  246.197724][ T5652] syz.4.317 (5652) used greatest stack depth: 16992 bytes left
[  246.245225][ T5676] tipc: Resetting bearer <eth:syzkaller0>
[  246.375281][ T5676] tipc: Disabling bearer <eth:syzkaller0>
[  246.446128][ T5470] tipc: Node number set to 3319678330
[  246.514230][ T4684] usb 3-1: Using ep0 maxpacket: 16
[  246.534741][ T4684] usb 3-1: config 6 has an invalid interface number: 28 but max is 3
[  246.895884][ T5470] usb 5-1: USB disconnect, device number 4
[  246.954610][ T4684] usb 3-1: config 6 has an invalid interface number: 4 but max is 3
[  246.985629][ T4684] usb 3-1: config 6 has an invalid interface number: 86 but max is 3
[  247.034596][ T4684] usb 3-1: config 6 has an invalid interface number: 191 but max is 3
[  247.084147][ T4684] usb 3-1: config 6 has no interface number 0
[  247.154077][ T4684] usb 3-1: config 6 has no interface number 1
[  247.160235][ T4684] usb 3-1: config 6 has no interface number 2
[  247.261776][ T4684] usb 3-1: config 6 has no interface number 3
[  247.419102][ T4684] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  247.439352][ T4684] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  248.681384][ T4684] usb 3-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  248.696699][ T4684] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  248.709683][ T4684] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  248.721274][ T4684] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  248.732309][ T4684] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  248.746752][ T4684] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  248.759031][ T4684] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  248.835598][ T4684] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  248.892188][ T4684] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  249.051442][ T4684] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  249.596563][ T4684] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  249.786393][ T4684] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  249.797638][ T4684] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  249.808706][ T4684] usb 3-1: config 6 interface 4 has no altsetting 0
[  249.815759][ T4684] usb 3-1: config 6 interface 86 has no altsetting 0
[  249.822495][ T4684] usb 3-1: config 6 interface 191 has no altsetting 0
[  249.861578][ T4684] usb 3-1: string descriptor 0 read error: -71
[  249.917661][ T4684] usb 3-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  249.945280][ T4684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.983927][ T4684] usb 3-1: can't set config #6, error -71
[  250.002497][ T4684] usb 3-1: USB disconnect, device number 9
[  251.380636][ T5729] netlink: 6 bytes leftover after parsing attributes in process `syz.1.331'.
[  251.471040][ T5728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.330'.
[  251.918078][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  252.307197][ T5729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  252.787061][ T5736] fuse: Bad value for 'fd'
[  252.936790][ T5735] batman_adv: batadv0: Adding interface: dummy0
[  252.984198][ T5735] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.034075][ T5735] batman_adv: batadv0: Interface activated: dummy0
[  253.090030][ T5739] tipc: Started in network mode
[  253.138399][ T5739] tipc: Node identity 3edfd3c4dfdf, cluster identity 4711
[  253.160704][ T5739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.371992][ T5739] tipc: Resetting bearer <eth:syzkaller0>
[  253.421037][ T5745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'.
[  253.944433][ T5743] device syzkaller0 entered promiscuous mode
[  253.953388][ T5743] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  254.095742][ T5738] tipc: Resetting bearer <eth:syzkaller0>
[  254.304499][  T126] tipc: Node number set to 3774927812
[  254.388041][ T5738] tipc: Disabling bearer <eth:syzkaller0>
[  254.744841][ T5748] netlink: 830 bytes leftover after parsing attributes in process `syz.1.335'.
[  255.684514][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.690864][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.711274][ T4467] sl0: compressed packet ignored
[  255.820027][ T5770] vivid-001: =================  START STATUS  =================
[  255.828360][ T5770] vivid-001: Radio HW Seek Mode: Bounded
[  255.836034][ T5770] vivid-001: Radio Programmable HW Seek: false
[  255.842356][ T5770] vivid-001: RDS Rx I/O Mode: Block I/O
[  255.848088][ T5770] vivid-001: Generate RBDS Instead of RDS: false
[  255.854669][ T5770] vivid-001: RDS Reception: true
[  255.859740][ T5770] vivid-001: RDS Program Type: 0 inactive
[  255.865732][ T5770] vivid-001: RDS PS Name:  inactive
[  255.891917][ T5770] vivid-001: RDS Radio Text:  inactive
[  255.897779][ T5770] vivid-001: RDS Traffic Announcement: false inactive
[  255.905091][ T5770] vivid-001: RDS Traffic Program: false inactive
[  255.912020][ T5770] vivid-001: RDS Music: false inactive
[  255.917931][ T5770] vivid-001: ==================  END STATUS  ==================
[  256.888074][ T5779] netlink: 'syz.1.340': attribute type 20 has an invalid length.
[  257.592585][ T5775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'.
[  257.725108][ T5784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.342'.
[  258.464290][ T4311] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  258.486053][ T5792] fuse: Bad value for 'fd'
[  258.505727][ T5792] batman_adv: batadv0: Adding interface: dummy0
[  258.512117][ T5792] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.537746][ T5792] batman_adv: batadv0: Interface activated: dummy0
[  258.984235][ T4311] usb 1-1: Using ep0 maxpacket: 16
[  260.048052][ T4311] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  260.170575][ T4311] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  260.760815][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.779650][ T4311] usb 1-1: Product: syz
[  260.784181][ T4311] usb 1-1: Manufacturer: syz
[  260.794131][ T4311] usb 1-1: SerialNumber: syz
[  260.813444][ T4311] usb 1-1: config 0 descriptor??
[  260.840417][ T4311] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  260.860428][ T4311] usb 1-1: Detected FT232R
[  261.236347][ T4311] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  261.273435][ T4311] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  261.304358][ T4311] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  261.343803][ T4311] usb 1-1: USB disconnect, device number 9
[  261.424427][ T5800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'.
[  261.506579][ T4311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  261.519393][ T4311] ftdi_sio 1-1:0.0: device disconnected
[  266.664124][ T4310] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  266.824090][ T4321] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  266.874201][ T4310] usb 2-1: Using ep0 maxpacket: 16
[  266.881303][ T4310] usb 2-1: config 6 has an invalid interface number: 28 but max is 3
[  266.889716][ T4310] usb 2-1: config 6 has an invalid interface number: 4 but max is 3
[  266.897874][ T4310] usb 2-1: config 6 has an invalid interface number: 86 but max is 3
[  266.906135][ T4310] usb 2-1: config 6 has an invalid interface number: 191 but max is 3
[  266.915473][ T4310] usb 2-1: config 6 has no interface number 0
[  266.921913][ T4310] usb 2-1: config 6 has no interface number 1
[  266.928182][ T4310] usb 2-1: config 6 has no interface number 2
[  266.935827][ T4310] usb 2-1: config 6 has no interface number 3
[  266.944823][ T4310] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  266.955889][ T4310] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  266.967978][ T4310] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  266.973770][ T5822] netlink: 84 bytes leftover after parsing attributes in process `syz.0.354'.
[  266.993640][ T4310] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  267.004498][ T4310] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  267.015308][ T4310] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  267.025280][ T4321] usb 5-1: not running at top speed; connect to a high speed hub
[  267.044696][ T4310] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  267.065700][ T4310] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  267.075704][ T4310] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  267.092977][ T4310] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  267.095703][ T4321] usb 5-1: config index 0 descriptor too short (expected 2322, got 18)
[  267.122017][ T4310] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  267.135727][ T4310] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  267.162597][ T4310] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  267.182770][ T4310] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  267.193932][ T4310] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  267.212301][ T4321] usb 5-1: config 95 has an invalid interface number: 1 but max is 0
[  267.218730][ T4310] usb 2-1: config 6 interface 4 has no altsetting 0
[  267.243688][ T4321] usb 5-1: config 95 has no interface number 0
[  267.250433][ T4310] usb 2-1: config 6 interface 86 has no altsetting 0
[  267.257307][ T4310] usb 2-1: config 6 interface 191 has no altsetting 0
[  267.273250][ T4310] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  267.282329][ T4321] usb 5-1: config 95 interface 1 has no altsetting 0
[  267.290352][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.291765][ T4321] usb 5-1: language id specifier not provided by device, defaulting to English
[  267.298611][ T4310] usb 2-1: Product: syz
[  267.298630][ T4310] usb 2-1: Manufacturer: syz
[  267.317940][ T4310] usb 2-1: SerialNumber: syz
[  267.420713][ T4321] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[  267.481040][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.533747][ T4321] usb 5-1: Product: syz
[  267.560369][ T4321] usb 5-1: Manufacturer: syz
[  267.586861][ T4321] usb 5-1: SerialNumber: syz
[  267.730364][ T4310] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  267.745789][ T4310] usb 2-1: Direct firmware load for dvb-usb-s630.fw failed with error -2
[  267.754361][ T4310] usb 2-1: Falling back to sysfs fallback for: dvb-usb-s630.fw
[  268.088179][ T5827] netlink: 'syz.1.355': attribute type 21 has an invalid length.
[  268.096329][ T5827] netlink: 'syz.1.355': attribute type 6 has an invalid length.
[  268.105057][ T5827] netlink: 132 bytes leftover after parsing attributes in process `syz.1.355'.
[  268.244754][ T4321] usb 5-1: USB disconnect, device number 5
[  270.475125][ T5840] fuse: Bad value for 'fd'
[  270.499005][ T4569] udevd[4569]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  275.144876][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.154378][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  275.164953][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  275.172835][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  275.180540][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  275.189306][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.383445][ T4487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.732089][ T4487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.117979][ T5470] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  276.143991][    C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20450 ms
[  276.152413][    C1] sl0: transmit timed out, driver error?
[  276.724238][ T5470] usb 1-1: Using ep0 maxpacket: 16
[  276.739437][ T5470] usb 1-1: config 6 has an invalid interface number: 28 but max is 3
[  276.756305][ T5470] usb 1-1: config 6 has an invalid interface number: 4 but max is 3
[  276.768226][ T5470] usb 1-1: config 6 has an invalid interface number: 86 but max is 3
[  276.784480][ T5470] usb 1-1: config 6 has an invalid interface number: 191 but max is 3
[  276.792869][ T5470] usb 1-1: config 6 has no interface number 0
[  276.799457][ T5470] usb 1-1: config 6 has no interface number 1
[  276.805836][ T5470] usb 1-1: config 6 has no interface number 2
[  276.814107][ T5470] usb 1-1: config 6 has no interface number 3
[  276.820500][ T5470] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  276.832556][ T5470] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  276.843456][ T5470] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  276.854412][ T5470] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  276.865341][ T5470] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  276.876840][ T5470] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  276.887626][ T5470] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  276.899057][ T5470] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  276.908915][ T5470] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  276.919769][ T5470] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  277.014193][ T5470] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  277.064753][ T5470] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  277.104602][ T5470] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  277.151957][ T5470] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  277.294221][ T4272] Bluetooth: hci4: command 0x0409 tx timeout
[  277.320152][ T5470] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  277.331346][ T5470] usb 1-1: config 6 interface 4 has no altsetting 0
[  277.338459][ T5470] usb 1-1: config 6 interface 86 has no altsetting 0
[  277.346376][ T5470] usb 1-1: config 6 interface 191 has no altsetting 0
[  277.372248][ T4487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.411508][ T5470] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  277.431282][ T5470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.467470][ T5470] usb 1-1: Product: syz
[  277.488577][ T5470] usb 1-1: Manufacturer: syz
[  277.513940][ T5470] usb 1-1: SerialNumber: syz
[  278.155175][ T4487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.340456][ T5861] chnl_net:caif_netlink_parms(): no params data found
[  279.295793][ T5470] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  279.351386][ T4272] Bluetooth: hci4: command 0x041b tx timeout
[  279.449616][ T5887] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.459828][ T5887] F2FS-fs (loop9): Unable to read 1th superblock
[  279.468190][ T5887] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.477737][ T5887] F2FS-fs (loop9): Unable to read 2th superblock
[  279.886638][ T4487] tipc: Left network mode
[  279.896370][ T5886] netlink: 'syz.3.369': attribute type 21 has an invalid length.
[  279.909965][ T5886] netlink: 'syz.3.369': attribute type 6 has an invalid length.
[  279.917837][ T5886] netlink: 132 bytes leftover after parsing attributes in process `syz.3.369'.
[  280.246970][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.268977][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.294647][ T5861] device bridge_slave_0 entered promiscuous mode
[  280.476404][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.485936][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.497127][ T5861] device bridge_slave_1 entered promiscuous mode
[  280.691024][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.424031][ T4272] Bluetooth: hci4: command 0x040f tx timeout
[  281.525115][ T5906] netlink: 84 bytes leftover after parsing attributes in process `syz.3.374'.
[  281.656113][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.981168][ T5861] team0: Port device team_slave_0 added
[  282.012704][ T5861] team0: Port device team_slave_1 added
[  282.203779][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.215434][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.250280][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.366636][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.379784][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.472988][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.690494][ T5861] device hsr_slave_0 entered promiscuous mode
[  282.747706][ T5861] device hsr_slave_1 entered promiscuous mode
[  282.769270][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  282.802055][ T5861] Cannot create hsr debugfs directory
[  283.574156][ T4272] Bluetooth: hci4: command 0x0419 tx timeout
[  285.346851][ T5954] Device name cannot be null; rc = [-22]
[  286.115810][ T4487] device hsr_slave_0 left promiscuous mode
[  286.143643][ T4487] device hsr_slave_1 left promiscuous mode
[  286.195716][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.227122][ T5959] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  286.282185][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.381336][ T5959] F2FS-fs (loop3): Unable to read 1th superblock
[  286.469172][ T5959] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  286.484749][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.492254][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.847382][ T5959] F2FS-fs (loop3): Unable to read 2th superblock
[  286.901217][ T4487] device bridge_slave_1 left promiscuous mode
[  286.961437][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.992889][ T4487] device bridge_slave_0 left promiscuous mode
[  287.024559][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.127445][ T4487] device veth1_macvtap left promiscuous mode
[  287.157450][ T4487] device veth0_macvtap left promiscuous mode
[  287.197927][ T4487] device veth1_vlan left promiscuous mode
[  287.228574][ T4487] device veth0_vlan left promiscuous mode
[  288.809400][ T5979] fuse: Bad value for 'fd'
[  291.360292][ T4487] team0 (unregistering): Port device team_slave_1 removed
[  291.423551][ T4487] team0 (unregistering): Port device team_slave_0 removed
[  291.476720][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.521927][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.064313][ T4487] bond0 (unregistering): Released all slaves
[  293.019355][ T5999] netlink: 84 bytes leftover after parsing attributes in process `syz.3.392'.
[  293.262994][ T6002] netlink: 6 bytes leftover after parsing attributes in process `syz.0.394'.
[  293.373373][ T6002] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  293.431530][ T6002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  293.483212][ T5861] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  293.528991][ T5861] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  293.566855][ T5861] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  293.679734][ T5861] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  294.311003][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.377372][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  294.438420][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  294.475572][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[  294.661587][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  294.696765][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  294.727358][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.735433][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.767709][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  294.792084][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  294.828041][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  294.850544][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.857719][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.912452][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  294.985098][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  295.016167][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  295.050963][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  295.180024][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  295.621624][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  295.631174][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  295.641288][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  295.671960][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  295.710300][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  295.754976][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  296.039412][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  296.309030][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'.
[  296.511981][ T6045] fuse: Bad value for 'fd'
[  297.511256][ T6041] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  297.520135][ T6041] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  297.529011][ T6041] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  297.537852][ T6041] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  299.281971][ T6052] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.292840][ T6052] F2FS-fs (loop1): Unable to read 1th superblock
[  299.303487][ T6052] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  299.317184][ T6052] F2FS-fs (loop1): Unable to read 2th superblock
[  299.477141][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  299.493552][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  299.549159][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.329530][ T6073] netlink: 'syz.3.407': attribute type 21 has an invalid length.
[  300.337575][ T6073] netlink: 'syz.3.407': attribute type 6 has an invalid length.
[  300.345492][ T6073] netlink: 132 bytes leftover after parsing attributes in process `syz.3.407'.
[  300.372188][ T6053] comedi comedi3: reset error (fatal)
[  302.468493][ T6109] fuse: Bad value for 'fd'
[  304.057098][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  304.066043][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  304.403218][ T5861] device veth0_vlan entered promiscuous mode
[  304.442936][ T5861] device veth1_vlan entered promiscuous mode
[  304.554102][ T5861] device veth0_macvtap entered promiscuous mode
[  304.578626][ T5861] device veth1_macvtap entered promiscuous mode
[  305.067207][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  305.077081][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  305.093154][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  305.105298][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  305.121230][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  306.771262][ T6118] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  306.777849][ T6118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  306.786477][ T6118] vhci_hcd vhci_hcd.0: Device attached
[  306.792115][ T6119] vhci_hcd: connection closed
[  306.798789][ T4523] vhci_hcd: stop threads
[  306.832400][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  306.901377][ T4523] vhci_hcd: release socket
[  306.975182][ T4523] vhci_hcd: disconnect device
[  307.014361][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  307.140638][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  307.224489][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  307.574106][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  307.713269][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'.
[  307.784371][ T6127] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  307.793126][ T6127] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  307.802312][ T6127] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  307.811217][ T6127] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  308.060441][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.112143][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.169531][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.254168][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.264515][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.386071][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.469474][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  308.520501][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.564776][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.772049][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  308.844383][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  308.964731][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.002511][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.021338][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.149448][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.233511][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.319294][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.347355][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  309.365125][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  309.583666][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.614341][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  309.645467][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  309.863974][ T5861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.686561][ T5861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.696173][ T6156] netlink: 32 bytes leftover after parsing attributes in process `syz.1.421'.
[  310.735743][ T5861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.774086][ T5861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.529606][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.586161][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.613584][ T4487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.661983][ T4487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.672866][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  312.776915][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  313.486587][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'.
[  314.251293][ T6196] =======================================================
[  314.251293][ T6196] WARNING: The mand mount option has been deprecated and
[  314.251293][ T6196]          and is ignored by this kernel. Remove the mand
[  314.251293][ T6196]          option from the mount to silence this warning.
[  314.251293][ T6196] =======================================================
[  317.105655][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.112021][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.126638][ T4467] sl0: compressed packet ignored
[  318.014600][ T6243] netlink: 'syz.1.438': attribute type 21 has an invalid length.
[  318.022587][ T6243] netlink: 'syz.1.438': attribute type 6 has an invalid length.
[  318.030399][ T6243] netlink: 132 bytes leftover after parsing attributes in process `syz.1.438'.
[  318.951406][ T6251] netlink: 'syz.4.439': attribute type 21 has an invalid length.
[  318.965724][ T6251] netlink: 'syz.4.439': attribute type 6 has an invalid length.
[  318.974033][ T6251] netlink: 132 bytes leftover after parsing attributes in process `syz.4.439'.
[  320.264131][ T4257] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  320.520528][ T4257] usb 5-1: config index 0 descriptor too short (expected 146, got 18)
[  320.544071][ T4257] usb 5-1: config 0 has an invalid interface number: 153 but max is 0
[  320.599679][ T4257] usb 5-1: config 0 has no interface number 0
[  320.854671][ T4257] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  320.864101][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.872145][ T4257] usb 5-1: Product: syz
[  320.876834][ T4257] usb 5-1: Manufacturer: syz
[  320.881468][ T4257] usb 5-1: SerialNumber: syz
[  321.142548][ T4257] usb 5-1: config 0 descriptor??
[  321.199587][ T4257] sierra 5-1:0.153: Sierra USB modem converter detected
[  321.271221][ T4283] Bluetooth: hci3: Malformed HCI Event: 0x22
[  321.765569][ T4257] usb 5-1: USB disconnect, device number 6
[  321.776114][ T4257] sierra 5-1:0.153: device disconnected
[  323.681058][ T6305] netlink: 'syz.3.453': attribute type 21 has an invalid length.
[  323.689529][ T6305] netlink: 'syz.3.453': attribute type 6 has an invalid length.
[  323.697416][ T6305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.453'.
[  324.367980][ T6311] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  324.424980][ T6311] F2FS-fs (loop1): Unable to read 1th superblock
[  324.448159][ T6311] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  324.463728][ T6311] F2FS-fs (loop1): Unable to read 2th superblock
[  325.506866][ T6322] tipc: Started in network mode
[  325.527489][ T6322] tipc: Node identity 3e60a3ff4e1, cluster identity 4711
[  325.580972][ T6322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.646287][ T6322] tipc: Resetting bearer <eth:syzkaller0>
[  325.661410][ T6324] netlink: 'syz.3.455': attribute type 20 has an invalid length.
[  325.679464][ T6325] device syzkaller0 entered promiscuous mode
[  325.694467][ T6325] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  325.733423][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'.
[  325.830908][ T6321] tipc: Resetting bearer <eth:syzkaller0>
[  325.890219][ T6321] tipc: Disabling bearer <eth:syzkaller0>
[  326.273439][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'.
[  326.285583][ T6335] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  326.294361][ T6335] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  326.303046][ T6335] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  326.311811][ T6335] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  326.321549][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'.
[  326.474154][ T4257] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  326.676106][ T4257] usb 6-1: config index 0 descriptor too short (expected 146, got 18)
[  327.505939][ T4283] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  327.514630][ T4283] Bluetooth: hci2: Injecting HCI hardware error event
[  327.523679][ T4272] Bluetooth: hci2: hardware error 0x00
[  327.544761][ T4257] usb 6-1: config 0 has an invalid interface number: 153 but max is 0
[  327.704016][ T4257] usb 6-1: config 0 has no interface number 0
[  327.935161][ T4257] usb 6-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  327.980907][ T4257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.022964][ T4257] usb 6-1: Product: syz
[  328.034885][ T4257] usb 6-1: Manufacturer: syz
[  328.051317][ T4257] usb 6-1: SerialNumber: syz
[  328.636903][ T4257] usb 6-1: config 0 descriptor??
[  328.699233][ T4257] sierra 6-1:0.153: Sierra USB modem converter detected
[  328.866582][ T6358] netlink: 'syz.4.465': attribute type 21 has an invalid length.
[  328.876121][ T6358] netlink: 'syz.4.465': attribute type 6 has an invalid length.
[  328.883885][ T6358] netlink: 132 bytes leftover after parsing attributes in process `syz.4.465'.
[  329.503768][ T4257] usb 6-1: USB disconnect, device number 2
[  329.567322][ T4257] sierra 6-1:0.153: device disconnected
[  330.902515][ T4272] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  331.105433][ T6378] netlink: 'syz.0.471': attribute type 20 has an invalid length.
[  331.317571][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'.
[  332.469936][ T4310] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  332.485417][ T5470] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  333.697534][ T5470] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  333.709293][ T4310] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  334.093335][ T5470] usb 1-1: Direct firmware load for dvb-usb-s630.fw failed with error -2
[  334.136401][ T5470] usb 1-1: Falling back to sysfs fallback for: dvb-usb-s630.fw
[  334.981255][ T6398] netlink: 'syz.4.477': attribute type 21 has an invalid length.
[  335.014079][ T6398] netlink: 'syz.4.477': attribute type 6 has an invalid length.
[  335.021882][ T6398] netlink: 132 bytes leftover after parsing attributes in process `syz.4.477'.
[  338.234268][    C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 21120 ms
[  338.242352][    C1] sl0: transmit timed out, driver error?
[  340.915734][ T6441] netlink: 'syz.0.484': attribute type 20 has an invalid length.
[  341.311041][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.484'.
[  342.225320][ T6457] netlink: 'syz.4.489': attribute type 21 has an invalid length.
[  343.107381][ T6457] netlink: 'syz.4.489': attribute type 6 has an invalid length.
[  343.193387][ T4272] Bluetooth: unknown link type 108
[  343.215039][ T6457] netlink: 132 bytes leftover after parsing attributes in process `syz.4.489'.
[  344.681459][ T6471] netlink: 'syz.1.495': attribute type 20 has an invalid length.
[  345.226818][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.495'.
[  345.244300][ T4335] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  345.264195][ T4272] Bluetooth: hci0: command 0x0409 tx timeout
[  345.445723][ T4335] usb 4-1: config index 0 descriptor too short (expected 146, got 18)
[  345.466630][ T4335] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[  345.505075][ T4335] usb 4-1: config 0 has no interface number 0
[  345.544038][ T4335] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  345.553283][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.567756][ T4335] usb 4-1: Product: syz
[  345.576685][ T4335] usb 4-1: Manufacturer: syz
[  345.583603][ T4335] usb 4-1: SerialNumber: syz
[  345.604892][ T4335] usb 4-1: config 0 descriptor??
[  345.649022][ T4335] sierra 4-1:0.153: Sierra USB modem converter detected
[  345.821908][ T4335] usb 4-1: USB disconnect, device number 3
[  345.855521][ T4335] sierra 4-1:0.153: device disconnected
[  348.625171][ T6504] Device name cannot be null; rc = [-22]
[  351.664051][ T6520] netlink: 'syz.5.506': attribute type 21 has an invalid length.
[  351.689901][ T6520] netlink: 'syz.5.506': attribute type 6 has an invalid length.
[  351.697939][ T6520] netlink: 132 bytes leftover after parsing attributes in process `syz.5.506'.
[  353.224137][ T4363] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  353.505761][ T4363] usb 5-1: config index 0 descriptor too short (expected 146, got 18)
[  353.545543][ T4363] usb 5-1: config 0 has an invalid interface number: 153 but max is 0
[  353.809643][ T4363] usb 5-1: config 0 has no interface number 0
[  353.832288][ T4363] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  354.008879][ T4363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.021339][ T4363] usb 5-1: Product: syz
[  354.027500][ T4363] usb 5-1: Manufacturer: syz
[  354.032913][ T4363] usb 5-1: SerialNumber: syz
[  354.799227][ T4363] usb 5-1: config 0 descriptor??
[  354.817084][ T4363] sierra 5-1:0.153: Sierra USB modem converter detected
[  355.012283][ T4363] usb 5-1: USB disconnect, device number 7
[  355.035575][ T4363] sierra 5-1:0.153: device disconnected
[  355.336462][ T6560] Device name cannot be null; rc = [-22]
[  357.376563][ T6563] netlink: 'syz.0.517': attribute type 21 has an invalid length.
[  357.384459][ T6563] netlink: 'syz.0.517': attribute type 6 has an invalid length.
[  357.392090][ T6563] netlink: 132 bytes leftover after parsing attributes in process `syz.0.517'.
[  357.414257][ T4257] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  357.615982][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.640805][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.681841][ T4257] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  357.704121][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.724330][ T4257] usb 5-1: config 0 descriptor??
[  358.912388][ T6581] netlink: 'syz.5.520': attribute type 21 has an invalid length.
[  358.920677][ T6581] netlink: 'syz.5.520': attribute type 6 has an invalid length.
[  358.928655][ T6581] netlink: 132 bytes leftover after parsing attributes in process `syz.5.520'.
[  359.269136][ T4257] usb 5-1: language id specifier not provided by device, defaulting to English
[  359.493564][ T4257] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71
[  359.519796][ T4257] uclogic 0003:256C:006D.0004: failed probing parameters: -71
[  360.375293][ T4257] uclogic: probe of 0003:256C:006D.0004 failed with error -71
[  360.386240][ T4257] usb 5-1: USB disconnect, device number 8
[  363.033566][ T6626] vivid-001: =================  START STATUS  =================
[  363.076999][ T6626] vivid-001: Interlaced VBI Format: false
[  363.364538][ T6626] vivid-001: ==================  END STATUS  ==================
[  363.851932][ T6639] netlink: 'syz.0.534': attribute type 21 has an invalid length.
[  363.860173][ T6639] netlink: 'syz.0.534': attribute type 6 has an invalid length.
[  363.870217][ T6639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.534'.
[  364.634034][ T6644] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  364.665851][ T6644] netlink: 830 bytes leftover after parsing attributes in process `syz.1.537'.
[  364.944324][ T4272] Bluetooth: hci4: command 0x0405 tx timeout
[  368.135976][ T6680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.546'.
[  369.113393][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'.
[  369.156947][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'.
[  371.880312][ T6705] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  371.909505][ T6705] netlink: 830 bytes leftover after parsing attributes in process `syz.1.552'.
[  372.550271][ T6712] netlink: 6 bytes leftover after parsing attributes in process `syz.0.555'.
[  372.559221][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  372.567613][ T6712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  376.374166][ T4257] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  376.994111][ T4257] usb 5-1: Using ep0 maxpacket: 16
[  377.002789][ T4257] usb 5-1: config 6 has an invalid interface number: 28 but max is 3
[  377.429879][ T4257] usb 5-1: config 6 has an invalid interface number: 4 but max is 3
[  377.486758][ T4257] usb 5-1: config 6 has an invalid interface number: 86 but max is 3
[  377.520791][ T4257] usb 5-1: config 6 has an invalid interface number: 191 but max is 3
[  377.584128][ T4257] usb 5-1: config 6 has no interface number 0
[  377.604531][ T4257] usb 5-1: config 6 has no interface number 1
[  377.687502][ T4257] usb 5-1: config 6 has no interface number 2
[  377.709306][ T4257] usb 5-1: config 6 has no interface number 3
[  377.757526][ T4257] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  377.863012][ T6768] tmpfs: Unknown parameter 'usrquota_block_hardlimit'
[  378.177430][ T4257] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  378.248928][ T4257] usb 5-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  378.309395][ T4257] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  378.354382][ T4257] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[  378.365725][ T4257] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  378.404100][ T4257] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7
[  378.482198][ T4257] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0
[  378.509151][ T4257] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  378.556341][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.563209][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.571100][ T4459] sl0: compressed packet ignored
[  378.584705][ T4257] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0
[  378.634219][ T4257] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping
[  378.714605][ T4257] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  378.784165][ T4257] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  378.830526][ T4257] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  378.885251][ T4257] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping
[  378.926694][ T4257] usb 5-1: config 6 interface 4 has no altsetting 0
[  378.933366][ T4257] usb 5-1: config 6 interface 86 has no altsetting 0
[  378.981241][ T4257] usb 5-1: config 6 interface 191 has no altsetting 0
[  379.010557][ T6768] netlink: 830 bytes leftover after parsing attributes in process `syz.5.566'.
[  380.297671][ T6784] netlink: 6 bytes leftover after parsing attributes in process `syz.1.569'.
[  380.306647][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  380.315345][ T6784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  380.449099][ T6787] netlink: 'syz.3.570': attribute type 20 has an invalid length.
[  380.464106][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.570'.
[  381.814274][ T4257] usb 5-1: string descriptor 0 read error: -71
[  381.821408][ T4257] usb 5-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9
[  381.954205][ T4257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.129264][ T4257] usb 5-1: can't set config #6, error -71
[  382.137418][ T4257] usb 5-1: USB disconnect, device number 9
[  386.191050][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'.
[  386.203532][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'.
[  386.928571][ T6844] netlink: 'syz.5.584': attribute type 20 has an invalid length.
[  388.199340][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.5.584'.
[  388.489963][ T6864] Device name cannot be null; rc = [-22]
[  393.037759][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'.
[  393.081235][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'.
[  398.265675][ T6942] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  398.274975][ T6942] F2FS-fs (loop11): Unable to read 1th superblock
[  398.281746][ T6942] I/O error, dev loop11, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  398.291039][ T6942] F2FS-fs (loop11): Unable to read 2th superblock
[  399.023980][    C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20460 ms
[  399.024788][ T5470] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  399.032113][    C1] sl0: transmit timed out, driver error?
[  399.047537][ T4310] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  399.102383][ T4310] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  399.175991][ T5470] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware
[  399.224931][ T4310] usb 2-1: Direct firmware load for dvb-usb-s630.fw failed with error -2
[  399.265884][ T4310] usb 2-1: Falling back to sysfs fallback for: dvb-usb-s630.fw
[  399.668079][ T6972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.611'.
[  400.532913][ T6980] Device name cannot be null; rc = [-22]
[  401.104061][ T4283] Bluetooth: hci4: command 0x0406 tx timeout
[  401.669711][ T6995] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  401.678935][ T6995] F2FS-fs (loop1): Unable to read 1th superblock
[  401.685439][ T6995] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  401.694615][ T6995] F2FS-fs (loop1): Unable to read 2th superblock
[  402.092115][ T7002] tmpfs: Unknown parameter 'quota'
[  402.207620][ T7002] netlink: 830 bytes leftover after parsing attributes in process `syz.0.618'.
[  404.835479][ T7032] netlink: 32 bytes leftover after parsing attributes in process `syz.4.623'.
[  408.257128][ T7053] tmpfs: Unknown parameter 'quota'
[  408.333571][ T7053] netlink: 830 bytes leftover after parsing attributes in process `syz.4.629'.
[  408.799153][ T7067] Device name cannot be null; rc = [-22]
[  410.476082][ T7081] netlink: 32 bytes leftover after parsing attributes in process `syz.5.635'.
[  411.043563][ T7084] netlink: 'syz.3.636': attribute type 20 has an invalid length.
[  411.066122][ T7084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.636'.
[  416.272320][ T7131] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  416.281658][ T7131] F2FS-fs (loop1): Unable to read 1th superblock
[  416.288241][ T7131] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  416.297434][ T7131] F2FS-fs (loop1): Unable to read 2th superblock
[  416.714015][ T4684] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  417.584628][   T27] INFO: task udevd:4375 blocked for more than 143 seconds.
[  417.905692][   T27]       Not tainted 6.1.146-syzkaller #0
[  418.003580][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  418.044925][   T27] task:udevd           state:D stack:25888 pid:4375  ppid:3637   flags:0x00004002
[  418.085885][ T4684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  418.134302][   T27] Call Trace:
[  418.147938][ T4684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  418.151700][   T27]  <TASK>
[  418.224069][   T27]  __schedule+0x10e9/0x40d0
[  418.244112][   T27]  ? release_firmware_map_entry+0x18a/0x18a
[  418.250409][   T27]  ? __mutex_trylock_common+0x80/0x250
[  418.263461][   T27]  ? trace_raw_output_contention_end+0xd0/0xd0
[  418.270729][ T4684] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  418.279206][   T27]  schedule+0xb9/0x180
[  418.290968][   T27]  schedule_preempt_disabled+0xf/0x20
[  418.333795][   T27]  __mutex_lock+0x555/0xaf0
[  418.345338][   T27]  ? __mutex_lock+0x3a5/0xaf0
[  418.363475][   T27]  ? uevent_show+0x16c/0x320
[  418.379843][   T27]  ? mutex_lock_nested+0x10/0x10
[  418.401180][ T4684] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  418.434840][   T27]  uevent_show+0x16c/0x320
[  418.459752][   T27]  dev_attr_show+0x50/0xb0
[  418.484129][   T27]  sysfs_kf_seq_show+0x349/0x4b0
[  418.496380][ T4684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.513165][   T27]  ? device_get_ownership+0xa0/0xa0
[  418.548280][   T27]  seq_read_iter+0x49b/0xd50
[  418.586792][ T4684] usb 4-1: config 0 descriptor??
[  418.597862][   T27]  ? common_file_perm+0x171/0x1c0
[  418.639572][   T27]  vfs_read+0x434/0x920
[  418.674754][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  418.727519][   T27]  ? kernel_read+0x1e0/0x1e0
[  418.770510][   T27]  ? __x64_sys_newfstat+0x171/0x1c0
[  418.818779][   T27]  ? __fdget_pos+0x2b5/0x360
[  418.856395][   T27]  ksys_read+0x143/0x240
[  418.897185][   T27]  ? vfs_write+0x960/0x960
[  418.938131][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  418.986122][   T27]  do_syscall_64+0x4c/0xa0
[  419.025922][   T27]  ? clear_bhb_loop+0x60/0xb0
[  419.064113][   T27]  ? clear_bhb_loop+0x60/0xb0
[  419.101188][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  419.159561][   T27] RIP: 0033:0x7ff951be3407
[  419.208956][   T27] RSP: 002b:00007fffd134a090 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  419.280633][   T27] RAX: ffffffffffffffda RBX: 00007ff951b57880 RCX: 00007ff951be3407
[  419.351500][   T27] RDX: 0000000000001000 RSI: 0000560a6e74e020 RDI: 0000000000000008
[  419.433096][   T27] RBP: 00007ff951d2bff0 R08: 0000000000000000 R09: 0000000000000000
[  419.498337][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[  419.587830][   T27] R13: 00007ff951d2bea0 R14: 0000000000000000 R15: 0000560a6e748f30
[  419.656783][   T27]  </TASK>
[  419.659974][   T27] 
[  419.659974][   T27] Showing all locks held in the system:
[  419.761052][   T27] 1 lock held by rcu_tasks_kthre/12:
[  419.811332][   T27]  #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  419.880027][   T27] 1 lock held by rcu_tasks_trace/13:
[  419.910372][   T27]  #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  419.977726][   T27] 1 lock held by khungtaskd/27:
[  420.027810][   T27]  #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  420.110242][   T27] 2 locks held by getty/4030:
[  420.142063][   T27]  #0: ffff888031539098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  420.262355][   T27]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380
[  420.325011][   T27] 6 locks held by kworker/0:3/4310:
[  420.330363][   T27]  #0: ffff88801cea5d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  420.356222][   T27]  #1: ffffc900046a7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  420.367936][   T27]  #2: ffff888145756190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210
[  420.377385][   T27]  #3: ffff88801efc0190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  420.387373][   T27]  #4: ffff8880294bb118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  420.397719][   T27]  #5: ffffffff8c9d79b0 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xec/0x2a0
[  420.409718][   T27] 4 locks held by udevd/4375:
[  420.417945][   T27]  #0: ffff88807e4069e0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50
[  420.427257][   T27]  #1: ffff888079175888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0
[  420.438536][   T27]  #2: ffff8880772430f0 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3b0
[  420.452417][   T27]  #3: ffff88801efc0190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320
[  420.476475][   T27] 2 locks held by kworker/u4:7/4399:
[  420.494040][   T27]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  420.519236][   T27]  #1: ffffc90004c5fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  420.519394][ T4684] usb 4-1: can't set config #0, error -71
[  420.566201][   T27] 4 locks held by udevd/4569:
[  420.567872][ T4684] usb 4-1: USB disconnect, device number 4
[  420.570932][   T27]  #0: ffff888027387418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50
[  420.616959][   T27]  #1: ffff888023830088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0
[  420.628998][   T27]  #2: ffff88805c7b70f0 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0x71/0x3b0
[  420.639463][   T27]  #3: ffff888057d6b190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x22/0x90
[  420.653841][   T27] 3 locks held by kworker/1:9/4684:
[  420.663476][   T27]  #0: ffff88801cea5d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  420.693954][   T27]  #1: ffffc9000c687d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  420.713625][   T27]  #2: ffff8881457c0190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210
[  420.723437][   T27] 5 locks held by kworker/0:8/5470:
[  420.729162][   T27]  #0: ffff88801cea5d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  420.740288][   T27]  #1: ffffc90004c6fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160
[  420.752980][   T27]  #2: ffff88823bc66990 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210
[  420.762787][   T27]  #3: ffff888057d6b190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  420.772660][   T27]  #4: ffff88807aa25118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  420.787257][   T27] 2 locks held by dhcpcd-run-hook/7155:
[  420.792895][   T27] 
[  420.797568][   T27] =============================================
[  420.797568][   T27] 
[  420.809268][   T27] NMI backtrace for cpu 0
[  420.813672][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0
[  420.821609][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  420.831702][   T27] Call Trace:
[  420.835019][   T27]  <TASK>
[  420.838007][   T27]  dump_stack_lvl+0x168/0x22e
[  420.842741][   T27]  ? irq_work_queue+0xb8/0x140
[  420.847604][   T27]  ? show_regs_print_info+0x12/0x12
[  420.853024][   T27]  ? load_image+0x3b0/0x3b0
[  420.857585][   T27]  ? vprintk_emit+0x571/0x680
[  420.862318][   T27]  ? printk_sprint+0x460/0x460
[  420.867144][   T27]  nmi_cpu_backtrace+0x3f4/0x470
[  420.872132][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  420.878332][   T27]  ? _printk+0xcc/0x110
[  420.882538][   T27]  ? load_image+0x3b0/0x3b0
[  420.887091][   T27]  ? load_image+0x3b0/0x3b0
[  420.891648][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  420.898194][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  420.904253][   T27]  watchdog+0xeee/0xf30
[  420.908460][   T27]  ? watchdog+0x1ed/0xf30
[  420.912854][   T27]  kthread+0x29d/0x330
[  420.916969][   T27]  ? hungtask_pm_notify+0x40/0x40
[  420.922215][   T27]  ? kthread_blkcg+0xd0/0xd0
[  420.926863][   T27]  ret_from_fork+0x1f/0x30
[  420.931339][   T27]  </TASK>
[  420.935175][   T27] Sending NMI from CPU 0 to CPUs 1:
[  420.940456][    C1] NMI backtrace for cpu 1
[  420.940468][    C1] CPU: 1 PID: 7158 Comm: sed Not tainted 6.1.146-syzkaller #0
[  420.940492][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  420.940502][    C1] RIP: 0010:check_preemption_disabled+0x59/0x110
[  420.940532][    C1] Code: 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 <f7> 04 24 00 02 00 00 74 cc 65 4c 8b 3d 46 48 ec 75 41 f6 47 2f 04
[  420.940547][    C1] RSP: 0018:ffffc90000ab7880 EFLAGS: 00000046
[  420.940562][    C1] RAX: 0000000000000001 RBX: ffff88802b013b80 RCX: 0000000080000000
[  420.940574][    C1] RDX: 0000000000000000 RSI: ffffffff8a8c15e0 RDI: ffffffff8adef260
[  420.940586][    C1] RBP: 0000000000000001 R08: ffff88802b013b80 R09: 0000000000000003
[  420.940598][    C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000
[  420.940608][    C1] R13: 0000000000000246 R14: ffff88807bd4f1d8 R15: ffff88802b014660
[  420.940621][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  420.940636][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  420.940647][    C1] CR2: 00007fa3ffb480a0 CR3: 0000000031607000 CR4: 00000000003506e0
[  420.940663][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  420.940673][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  420.940684][    C1] Call Trace:
[  420.940689][    C1]  <TASK>
[  420.940696][    C1]  lock_is_held_type+0x100/0x190
[  420.940720][    C1]  mas_next_entry+0x8ba/0xea0
[  420.940753][    C1]  validate_mm+0x1d4/0x2b0
[  420.940773][    C1]  ? vma_expand+0x880/0x880
[  420.940795][    C1]  ? vma_set_page_prot+0x135/0x3a0
[  420.940816][    C1]  mmap_region+0x7aa/0x1d30
[  420.940843][    C1]  ? file_mmap_ok+0x170/0x170
[  420.940864][    C1]  ? cap_mmap_addr+0x165/0x2e0
[  420.940897][    C1]  do_mmap+0x894/0xf30
[  420.940921][    C1]  ? mlock_future_check+0x100/0x100
[  420.940940][    C1]  ? ima_file_mmap+0x8e/0x150
[  420.940964][    C1]  ? ima_file_free+0x3e0/0x3e0
[  420.940987][    C1]  ? __up_read+0x27c/0x660
[  420.941009][    C1]  vm_mmap_pgoff+0x1b2/0x2b0
[  420.941036][    C1]  ? account_locked_vm+0xe0/0xe0
[  420.941061][    C1]  ? ksys_mmap_pgoff+0xe6/0x6f0
[  420.941080][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  420.941102][    C1]  do_syscall_64+0x4c/0xa0
[  420.941123][    C1]  ? clear_bhb_loop+0x60/0xb0
[  420.941139][    C1]  ? clear_bhb_loop+0x60/0xb0
[  420.941156][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  420.941182][    C1] RIP: 0033:0x7fa3ffe29242
[  420.941195][    C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00
[  420.941209][    C1] RSP: 002b:00007ffee4e85908 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  420.941226][    C1] RAX: ffffffffffffffda RBX: 00007fa3ffb49000 RCX: 00007fa3ffe29242
[  420.941239][    C1] RDX: 0000000000000003 RSI: 0000000000001888 RDI: 00007fa3ffb49000
[  420.941250][    C1] RBP: 0000000000000032 R08: 00000000ffffffff R09: 0000000000000000
[  420.941260][    C1] R10: 0000000000000032 R11: 0000000000000206 R12: 00007ffee4e859c8
[  420.941272][    C1] R13: 00007fa3ffe06580 R14: 00007ffee4e85d80 R15: 00007fa3ffb49000
[  420.941290][    C1]  </TASK>
[  421.285421][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  421.292345][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0
[  421.300281][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  421.310375][   T27] Call Trace:
[  421.313771][   T27]  <TASK>
[  421.316738][   T27]  dump_stack_lvl+0x168/0x22e
[  421.321541][   T27]  ? memcpy+0x3c/0x60
[  421.325571][   T27]  ? show_regs_print_info+0x12/0x12
[  421.330807][   T27]  ? load_image+0x3b0/0x3b0
[  421.335370][   T27]  panic+0x2c9/0x710
[  421.339321][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  421.345008][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  421.349557][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  421.355161][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  421.361373][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  421.367574][   T27]  watchdog+0xf2d/0xf30
[  421.371780][   T27]  ? watchdog+0x1ed/0xf30
[  421.376156][   T27]  kthread+0x29d/0x330
[  421.380359][   T27]  ? hungtask_pm_notify+0x40/0x40
[  421.385433][   T27]  ? kthread_blkcg+0xd0/0xd0
[  421.390079][   T27]  ret_from_fork+0x1f/0x30
[  421.394550][   T27]  </TASK>
[  421.397919][   T27] Kernel Offset: disabled
[  421.402269][   T27] Rebooting in 86400 seconds..