last executing test programs:

2m53.837332835s ago: executing program 3 (id=338):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

2m50.586704049s ago: executing program 3 (id=354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

2m50.418893204s ago: executing program 3 (id=357):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13)

2m50.306039818s ago: executing program 3 (id=358):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x0, 0x48bc, 0x9, 0x5, 0x101, 0x40, 0x1, 0x7, 0x100, 0x8, 0xa76a, 0x4, 0xe2, 0x0, 0x6, 0x83f4, 0x20, 0xaa, 0x7, 0x0, 0x7, 0x7, 0x20a, 0x86e, 0x2, 0x50, 0x0, 0xff, 0x8, 0x3, 0x3, 0x100, 0x7, 0x85b, 0x4, 0x8, 0x9, 0x9, 0x6, 0x7, 0x3, 0x401, 0x0, 0x7, 0x1, 0xd, 0x8, 0xfffeffff, 0x0, 0x1, 0xe16, 0x101, 0x4, 0x8, 0x9, 0x8, 0x0, 0x90, 0x3, 0x1, 0x7344, 0x3, 0xfff, 0xed38, 0xb0f9, 0x8, 0x400, 0x879, 0x2, 0x4, 0x8b8, 0x2, 0x1, 0xffffff7f, 0xffff8001, 0xa605, 0x4fa9, 0x4859, 0x8, 0xfffffffc, 0x6, 0x7fffffff, 0x84ee, 0xf, 0x2, 0xb, 0x4, 0xffff, 0x4, 0x10001, 0x5, 0x1, 0x4, 0x1, 0x4, 0x200, 0x9, 0x1, 0x4, 0x3, 0x4, 0xd4c5, 0xa, 0x7, 0x2, 0x2, 0x2fd4e867, 0x4, 0xe, 0x9, 0x8, 0x3, 0x0, 0x7d, 0x9, 0x8, 0x5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x6, 0x0, 0xc4, 0xfffffff8, 0x5, 0x4, 0x86b978a9, 0x8, 0x0, 0x9, 0x7f, 0x5, 0x5, 0x4, 0xb9, 0x0, 0x5e4, 0xffffffff, 0x3a39de97, 0x3, 0x3ff, 0x4d, 0x7, 0x3, 0xa, 0x80, 0x1, 0x2e5c912e, 0x900000, 0xc73d, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x7fff, 0x1d6, 0x0, 0x100, 0x4, 0x1, 0x6, 0x7, 0x40, 0x5, 0x3, 0x0, 0x2ced, 0xa7a, 0x8, 0x75c, 0x93ca, 0x8, 0x9, 0x10, 0x7, 0x82f9, 0x7, 0x1000, 0xa8e, 0xfff, 0x5, 0xfff, 0x262, 0x81, 0x4, 0x2, 0xff, 0xfffffffb, 0xffff, 0xb36, 0x5, 0x8, 0x10000, 0xda, 0x428, 0xd, 0x1, 0xb0e, 0x2, 0x4, 0x4000, 0x7, 0xfff, 0xf, 0x56, 0x800, 0x401, 0xfff, 0x3, 0x1, 0x6, 0x0, 0xf0, 0x3, 0x5, 0x7dae8f6b, 0xffffffff, 0x3, 0x5, 0x5, 0xf7, 0xfffffff7, 0x6, 0x76, 0x4c6, 0x70d, 0x101, 0x40, 0x4, 0x3, 0x5, 0x2, 0x5, 0x2, 0x0, 0x9, 0x8, 0x7, 0x13050aa4, 0x8000, 0x1ff, 0x7, 0xfff, 0xfaa, 0x0, 0x6, 0x8, 0x40, 0x7, 0x1, 0x8]}]}]}}]}, 0x43c}}, 0x800)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)

2m50.24128225s ago: executing program 3 (id=359):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823", 0x3f, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c", 0xb7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m49.958915919s ago: executing program 3 (id=360):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x3380, &(0x7f0000000200)={0x0, 0x1d60, 0x100, 0x1, 0x8000004}, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
dup(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080))
timerfd_create(0x0, 0x0)
read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)

2m34.819820783s ago: executing program 32 (id=360):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x3380, &(0x7f0000000200)={0x0, 0x1d60, 0x100, 0x1, 0x8000004}, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
dup(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080))
timerfd_create(0x0, 0x0)
read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)

5.880648152s ago: executing program 2 (id=923):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

5.835325643s ago: executing program 0 (id=925):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823", 0x3f, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c", 0xb7}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.497139174s ago: executing program 0 (id=930):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c)

5.373880668s ago: executing program 0 (id=932):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x119, 0x0, &(0x7f0000001300)="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", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x40)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

5.251241372s ago: executing program 0 (id=935):
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x46, 0xba, 0x8c, 0x40, 0x9e1, 0x5121, 0xf2dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x45, 0x20, 0x8, "", [{{0x9, 0x4, 0x8d, 0xc, 0x0, 0xec, 0xab, 0x9f, 0x5e}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})

3.847295747s ago: executing program 2 (id=941):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823", 0x3f, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d92", 0xb6}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.554092046s ago: executing program 1 (id=944):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)=',8Z', 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40001)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r1, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/254, 0xfe}, {&(0x7f0000000800)=""/39, 0x27}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/218, 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{0x0}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000f00)=""/81, 0x51}, {&(0x7f0000000f80)=""/75, 0x4b}], 0x4}}], 0x4, 0x40000200, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0), 0x45)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

3.214177657s ago: executing program 1 (id=945):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))

3.075602121s ago: executing program 1 (id=946):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x4)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x6)
landlock_restrict_self(r0, 0x4)
landlock_restrict_self(r1, 0x5)
landlock_restrict_self(r1, 0x4)
landlock_restrict_self(r1, 0x5)
landlock_restrict_self(r1, 0x1)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

2.954190065s ago: executing program 4 (id=947):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0)

2.893045587s ago: executing program 1 (id=948):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000200)="6eb3", &(0x7f00000000c0)=""/221}, 0x20)

2.890638657s ago: executing program 4 (id=949):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "a800b043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0)
sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a2411", 0xc1}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r5 = socket$alg(0x26, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vxcan1\x00'})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r4, 0xa, 0x1, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000640)}, 0x40)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x10000, 0x1, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010426bd7000fedbdf2503000000300001"], 0x44}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2.816507259s ago: executing program 1 (id=950):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x2, 0x3, 0x5, 0x6, 0x3, 0x4, {0x1, 0x3ff, 0xff, 0x4, 0x100, 0x4, 0x9, 0x7ffffffd, 0x9, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080)=0x2, 0x7f03)

2.80351614s ago: executing program 2 (id=951):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2.623321416s ago: executing program 1 (id=952):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc2000)
mbind(&(0x7f00003e1000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0x69, 0x7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020)

2.306153706s ago: executing program 0 (id=953):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f021})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0xfb, 0xa, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x2}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.842533711s ago: executing program 2 (id=955):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)=',8Z', 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40001)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r1, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/254, 0xfe}, {&(0x7f0000000800)=""/39, 0x27}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/218, 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{0x0}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000f00)=""/81, 0x51}, {&(0x7f0000000f80)=""/75, 0x4b}], 0x4}}], 0x4, 0x40000200, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0), 0x45)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

1.665082776s ago: executing program 2 (id=957):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823", 0x3f, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c", 0xb7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.644964267s ago: executing program 5 (id=958):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000002000000000000000102", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007'], 0x50)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)

1.56395799s ago: executing program 4 (id=959):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$inet(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$kcm(0x2, 0xa, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)

1.442209234s ago: executing program 5 (id=960):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x40440c0)

1.406004765s ago: executing program 4 (id=961):
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x22, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="d95839027eb32eb1c65b6daef702bffeba43e38e69de94dc739a8754fcc2b526c12c", 0x0, 0x101, 0x2, 0x0, 0x0})

1.179570952s ago: executing program 4 (id=962):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x84043, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000400)={0x0, 0x7, 0x80, 0xb6, 0x16, "004fba7d07ffffff08630400"})
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000101010200000000000000000a00ff7e140019800c000200"], 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_create(0x3, 0x0, 0x0)

1.179451522s ago: executing program 5 (id=963):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000700)={0x1, 0x0, [{0x7, 0x2, 0x0, 0x0, @adapter={0x9, 0xe327, 0x4, 0x2, 0xc13f}}]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

287.064111ms ago: executing program 4 (id=964):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r6=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x65}]}}]}, 0x3c}}, 0x4000010)

249.180262ms ago: executing program 0 (id=965):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0xfffffffffffffffc, 0x12)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

241.663682ms ago: executing program 5 (id=966):
r0 = dup(0xffffffffffffffff)
write$tun(r0, &(0x7f0000000400)={@void, @void, @mpls={[], @ipv6=@tcp={0x2, 0x6, "876027", 0x175, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@srh={0x2, 0xa, 0x4, 0x5, 0xff, 0x0, 0x5d60, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x88, 0x4, 0x0, 0x10, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x3a, 0x4, 0x1, 0x83, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}, @dstopts={0x2f, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x8, 0x0, 0x6}, {"1cadee81046ec1dcaf0bcbae96f1ca4f4d194bd825f5fce7f6d7336d72bb8817523b3b292457b13e10a8f5156a227d3736fa593134900d455a1fcf9a92b5cb9c0bdc7edbb8a9f38dfa98d68af6e47b6d80ef989e3b627ca9e2fa2cdfcff83028672bcc60a7d4e8e7792b5cd672d0ca89e42fcb5a128c17ccd024b6a3aa83b0a137932a1842eddef31c42632bdd6e4b1ff9281895f71c66ae6b260c0a7e8089ac6b72050dd219b844d3"}}}}}}, 0x19d)

145.790485ms ago: executing program 5 (id=967):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)=',8Z', 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40001)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r1, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/254, 0xfe}, {&(0x7f0000000800)=""/39, 0x27}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/218, 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{0x0}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000f00)=""/81, 0x51}, {&(0x7f0000000f80)=""/75, 0x4b}], 0x4}}], 0x4, 0x40000200, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0), 0x45)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

144.945465ms ago: executing program 2 (id=968):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
set_mempolicy(0xc003, 0x0, 0xfffffffffffffe01)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x6c000, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000340)=@mmap={0x9d5, 0x2, 0x4, 0x1, 0x101, {0x77359400}, {0x4, 0x0, 0x9, 0x7, 0xbe, 0x4, "ce3283d5"}, 0xa, 0x1, {}, 0x69})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, r1, r1, 0x7})
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3})

0s ago: executing program 5 (id=969):
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xaad80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x80087601, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
preadv(r5, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x5775, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3})
syz_open_dev$sg(0x0, 0xa, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x400, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d2b984b30c50997d3bef409ff2176fd7afe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa501c50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})

kernel console output (not intermixed with test programs):

NGE): team_slave_1: link becomes ready
[   71.823459][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.832206][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.841182][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.868048][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.883024][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.896489][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.904853][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.912688][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.920428][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.928784][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.940619][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.949113][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.976337][ T4202] device veth0_vlan entered promiscuous mode
[   71.985708][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.001065][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.054806][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.064232][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.073310][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.082528][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.092021][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.101326][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.113536][ T4189] device veth0_macvtap entered promiscuous mode
[   72.129121][ T4202] device veth1_vlan entered promiscuous mode
[   72.140897][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.155559][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.164783][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.174180][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.190774][ T4189] device veth1_macvtap entered promiscuous mode
[   72.198788][ T4199] device veth0_vlan entered promiscuous mode
[   72.228659][ T4190] device veth0_vlan entered promiscuous mode
[   72.236522][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.247696][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.256189][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.264842][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.273658][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.282400][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.291433][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.299358][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.317970][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.334705][ T4190] device veth1_vlan entered promiscuous mode
[   72.345697][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.356396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.365500][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.375299][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.384248][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.394835][ T4202] device veth0_macvtap entered promiscuous mode
[   72.405311][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.417684][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.428832][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.438330][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.447351][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.465973][ T4199] device veth1_vlan entered promiscuous mode
[   72.473926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.482644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.491614][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.500216][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.508764][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.518441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.526368][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.536406][ T4202] device veth1_macvtap entered promiscuous mode
[   72.551824][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.609442][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.619556][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.629057][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.639047][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.647881][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.657849][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.669133][ T4199] device veth0_macvtap entered promiscuous mode
[   72.689585][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.700580][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.712825][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.729535][ T4199] device veth1_macvtap entered promiscuous mode
[   72.744614][ T4190] device veth0_macvtap entered promiscuous mode
[   72.756113][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.764951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.773917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.782936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.792153][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.801165][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.809867][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.824914][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.836290][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.848166][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.857492][ T4190] device veth1_macvtap entered promiscuous mode
[   72.889981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.898717][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.919072][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.936964][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.961756][ T4202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.972788][ T4202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.981869][ T4202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.991282][ T4202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.003470][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.015039][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.025217][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.035973][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.047610][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.057083][ T4191] device veth0_vlan entered promiscuous mode
[   73.064755][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.073503][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.081393][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.090339][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.103088][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.114054][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.124236][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.135385][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.145360][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.156110][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.171019][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.185831][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.196785][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.206749][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.217362][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.228677][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.242217][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.253777][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.263933][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.274682][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.284936][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.295776][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.307510][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.316194][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.324916][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.333805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.343004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.352234][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.361593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.390419][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.396163][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.398438][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.409845][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.423765][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.432689][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.461336][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.470782][ T4246] Bluetooth: hci3: command 0x040f tx timeout
[   73.478444][ T4191] device veth1_vlan entered promiscuous mode
[   73.487392][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.496259][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.505338][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.509725][ T4246] Bluetooth: hci2: command 0x040f tx timeout
[   73.514950][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.533394][ T4246] Bluetooth: hci0: command 0x040f tx timeout
[   73.550916][ T4237] Bluetooth: hci4: command 0x040f tx timeout
[   73.563035][ T4237] Bluetooth: hci1: command 0x040f tx timeout
[   73.592406][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   73.602214][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   73.614192][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.623047][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.638238][ T4191] device veth0_macvtap entered promiscuous mode
[   73.682536][ T4191] device veth1_macvtap entered promiscuous mode
[   73.695252][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.706813][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.740299][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.740983][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.748553][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.761923][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.774194][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.783333][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.795602][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.806543][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.816617][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.827351][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.837516][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.848033][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.857938][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.868637][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.881726][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.892056][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.903322][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.913520][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.925160][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.935432][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.946186][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.957031][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.967824][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.981650][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.006911][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.024747][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.037934][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.047966][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.064818][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.074036][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.109022][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.125951][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.148424][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.168089][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.199945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.254983][  T891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.261148][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.270366][  T891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.273451][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.285940][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.308091][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.338521][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.375305][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.390607][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.422684][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.456426][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.488081][ T4272] input: syz1 as /devices/virtual/input/input5
[   74.497740][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.521220][  T891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.577411][  T891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.625909][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.635211][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.808192][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.828151][  T891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.844031][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[   74.851283][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[   75.401933][ T4278] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.551874][ T4229] Bluetooth: hci0: command 0x0419 tx timeout
[   75.596674][ T4229] Bluetooth: hci2: command 0x0419 tx timeout
[   75.617063][ T4229] Bluetooth: hci3: command 0x0419 tx timeout
[   75.638528][ T4233] Bluetooth: hci1: command 0x0419 tx timeout
[   75.670036][ T4233] Bluetooth: hci4: command 0x0419 tx timeout
[   75.727627][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   76.086059][ T4278] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.344134][ T4278] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.576462][ T4310] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET)
[   77.587054][ T4278] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.618870][ T4312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.299695][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   78.309677][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   78.319679][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   78.389679][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   78.521198][ T4278] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.537833][ T4278] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.552182][ T4278] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.566076][ T4278] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.089645][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   79.329682][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   79.419666][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!!
[   79.634826][ T4336] capability: warning: `syz.0.19' uses 32-bit capabilities (legacy support in use)
[   80.287447][ T4229] Bluetooth: hci4: command 0x0405 tx timeout
[   81.195489][ T4336] program syz.0.19 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   81.572698][ T4340] sched: RT throttling activated
[   82.169679][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[   82.429652][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   82.449653][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   83.841456][ T4362] DRBG: could not allocate digest TFM handle: hmac(sha512)
[   84.729068][ T4404] exfat: Deprecated parameter 'debug'
[   85.046839][ T4404] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   85.240248][ T4404] exFAT-fs (loop1): unable to read boot sector
[   85.269760][ T4404] exFAT-fs (loop1): failed to read boot sector
[   85.275970][ T4404] exFAT-fs (loop1): failed to recognize exfat type
[   89.259786][ T4246] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   90.330098][ T4246] usb 1-1: Using ep0 maxpacket: 32
[   90.450031][ T4246] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   90.459039][ T4246] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   90.467800][ T4246] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   90.574384][ T4501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'.
[   90.586509][ T4246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   90.590833][ T4501] Zero length message leads to an empty skb
[   90.596568][ T4246] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   90.616419][ T4246] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   90.638891][ T4246] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   90.652457][ T4246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.679989][ T4246] usb 1-1: config 0 descriptor??
[   91.065836][ T4246] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   91.109803][   T13] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   91.163503][ T4246] usb 1-1: USB disconnect, device number 2
[   91.929804][ T4246] usblp0: removed
[   92.279973][   T13] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.309695][   T13] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.395986][   T13] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   92.409745][ T4246] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   92.473095][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.659704][ T4246] usb 1-1: Using ep0 maxpacket: 32
[   92.765445][   T13] usb 3-1: GET_CAPABILITIES returned 0
[   92.772128][   T13] usbtmc 3-1:16.0: can't read capabilities
[   92.779990][ T4246] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   92.796946][ T4246] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   92.832894][ T4246] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   92.864506][ T4246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   92.890688][ T4246] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   92.922339][ T4246] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   92.966303][ T4246] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   92.995319][ T4246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.028926][ T4246] usb 1-1: config 0 descriptor??
[   93.079868][ T4246] usb 1-1: can't set config #0, error -71
[   93.096344][ T4246] usb 1-1: USB disconnect, device number 3
[   93.136404][ T4530] loop0: detected capacity change from 0 to 256
[   93.155968][ T4530] =======================================================
[   93.155968][ T4530] WARNING: The mand mount option has been deprecated and
[   93.155968][ T4530]          and is ignored by this kernel. Remove the mand
[   93.155968][ T4530]          option from the mount to silence this warning.
[   93.155968][ T4530] =======================================================
[   93.301850][ T4530] FAT-fs (loop0): Directory bread(block 64) failed
[   93.334762][ T4530] FAT-fs (loop0): Directory bread(block 65) failed
[   93.364796][ T4530] FAT-fs (loop0): Directory bread(block 66) failed
[   93.399116][ T4530] FAT-fs (loop0): Directory bread(block 67) failed
[   93.419774][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   93.438584][ T4530] FAT-fs (loop0): Directory bread(block 68) failed
[   93.450262][ T4530] FAT-fs (loop0): Directory bread(block 69) failed
[   93.463748][ T4530] FAT-fs (loop0): Directory bread(block 70) failed
[   93.497679][ T4530] FAT-fs (loop0): Directory bread(block 71) failed
[   93.517026][ T4530] FAT-fs (loop0): Directory bread(block 72) failed
[   93.529780][ T4530] FAT-fs (loop0): Directory bread(block 73) failed
[   93.566023][ T4233] usb 3-1: USB disconnect, device number 2
[   93.690475][ T4230] usb 5-1: Using ep0 maxpacket: 16
[   93.819864][ T4230] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.872838][ T4230] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.892611][ T4230] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   93.906854][ T4230] usb 5-1: config 0 interface 0 has no altsetting 0
[   93.928064][ T4230] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   94.014166][ T4540] loop3: detected capacity change from 0 to 128
[   94.620707][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.636321][ T4230] usb 5-1: config 0 descriptor??
[   94.668539][ T4540] FAT-fs (loop3): bogus logical sector size 55191
[   94.675138][ T4540] FAT-fs (loop3): Can't find a valid FAT filesystem
[   95.130959][ T4230] hid (null): bogus close delimiter
[   95.142131][ T4230] hid (null): bogus close delimiter
[   95.198305][ T4230] hid (null): global environment stack underflow
[   95.226376][ T4230] hid (null): report_id 0 is invalid
[   95.311786][ T1333] cfg80211: failed to load regulatory.db
[   95.344604][ T4230] usb 5-1: USB disconnect, device number 2
[   95.679743][ T1333] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   95.710154][   T21] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   96.070011][ T1333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.120501][ T1333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.137487][ T4555] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   96.165143][ T1333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.207569][ T4555] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   96.215103][ T1333] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.245122][ T1333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.265478][   T21] usb 4-1: unable to get BOS descriptor or descriptor too short
[   96.284601][ T1333] usb 3-1: config 0 descriptor??
[   96.310305][   T21] usb 4-1: not running at top speed; connect to a high speed hub
[   96.400947][   T21] usb 4-1: config 0 has an invalid interface number: 88 but max is 0
[   96.426801][   T21] usb 4-1: config 0 has no interface number 0
[   96.453046][   T21] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   96.487834][   T21] usb 4-1: config 0 interface 88 has no altsetting 0
[   96.659856][   T21] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   96.689397][   T21] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   96.711211][   T21] usb 4-1: Product: syz
[   96.743667][   T21] usb 4-1: Manufacturer: syz
[   96.760030][   T21] usb 4-1: SerialNumber: syz
[   96.782186][ T1333] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd
[   96.790444][   T21] usb 4-1: config 0 descriptor??
[   96.813794][ T1333] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   96.877579][ T1333] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   97.122207][ T1333] usb 3-1: USB disconnect, device number 3
[   97.142406][   T21] usb 4-1: USB disconnect, device number 2
[   97.261588][ T4569] fido_id[4569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   98.851209][ T4585] loop2: detected capacity change from 0 to 128
[   99.533102][ T4585] FAT-fs (loop2): bogus logical sector size 55191
[   99.539713][ T4585] FAT-fs (loop2): Can't find a valid FAT filesystem
[   99.646539][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88806082f000: rx timeout, send abort
[   99.656735][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806082f000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  101.157294][ T4611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.107'.
[  101.630588][ T4246] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  102.046007][ T1333] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.091748][ T4246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.154020][ T4246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.168430][ T4246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  102.168464][ T4623] tipc: Failed to remove unknown binding: 66,0,0/0:1316586785/1316586787
[  102.183187][ T4246] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  102.197454][ T4623] tipc: Failed to remove unknown binding: 66,0,0/0:1316586785/1316586786
[  102.205800][ T4246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.215314][ T4623] tipc: Failed to remove unknown binding: 66,0,0/0:1316586785/1316586787
[  102.226160][ T4623] tipc: Failed to remove unknown binding: 66,0,0/0:1316586785/1316586786
[  102.233721][ T4246] usb 3-1: config 0 descriptor??
[  102.365297][ T4631] netlink: 76 bytes leftover after parsing attributes in process `syz.3.116'.
[  102.491027][   T26] audit: type=1804 audit(1781802935.077:2): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.118" name="bus" dev="ramfs" ino=34912 res=1 errno=0
[  102.529997][ T1333] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.577287][ T1333] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  102.593915][ T4637] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.115'.
[  102.670363][ T1333] usb 2-1: config 1 has no interface number 0
[  102.728165][ T1333] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  103.110238][ T1333] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  103.164184][ T4246] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  103.186318][ T1333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.233681][ T1333] usb 2-1: Product: syz
[  103.237902][ T1333] usb 2-1: Manufacturer: syz
[  103.242261][   T26] audit: type=1326 audit(1781802935.817:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.0.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505544e59 code=0x7ffc0000
[  103.282165][ T4246] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  103.283880][ T1333] usb 2-1: SerialNumber: syz
[  103.329843][   T26] audit: type=1326 audit(1781802935.867:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.0.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505544e59 code=0x7ffc0000
[  103.330483][ T4246] usb 3-1: USB disconnect, device number 4
[  103.448120][ T4642] fido_id[4642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  103.462215][   T26] audit: type=1326 audit(1781802935.867:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.0.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505544e59 code=0x7ffc0000
[  103.494613][   T26] audit: type=1326 audit(1781802935.867:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.0.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505544e59 code=0x7ffc0000
[  103.527852][   T26] audit: type=1326 audit(1781802935.877:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.0.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2505544e59 code=0x7ffc0000
[  103.557919][   T26] audit: type=1326 audit(1781802935.877:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.0.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505544e59 code=0x7ffc0000
[  103.632829][   T26] audit: type=1326 audit(1781802935.877:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.0.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505544e59 code=0x7ffc0000
[  103.678711][   T26] audit: type=1326 audit(1781802935.897:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.0.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505544e59 code=0x7ffc0000
[  103.748646][   T26] audit: type=1326 audit(1781802935.897:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4638 comm="syz.0.119" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2505544e59 code=0x7ffc0000
[  103.773947][ T1333] cdc_ncm 2-1:1.1: NCM or ECM functional descriptors missing
[  103.781508][ T1333] cdc_ncm 2-1:1.1: bind() failure
[  103.789848][ T4233] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  103.800842][ T1333] usb 2-1: USB disconnect, device number 2
[  103.919704][ T1107] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  104.055146][ T4233] usb 1-1: Using ep0 maxpacket: 16
[  104.180745][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.191284][ T1107] usb 4-1: Using ep0 maxpacket: 32
[  104.202097][ T4233] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  104.310685][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[  104.350280][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  104.368627][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  104.517536][ T4233] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  104.538880][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.547131][ T4233] usb 1-1: Product: syz
[  104.552013][ T4233] usb 1-1: Manufacturer: syz
[  104.556661][ T4233] usb 1-1: SerialNumber: syz
[  104.577879][ T4233] usb 1-1: config 0 descriptor??
[  105.703936][ T4672] process 'syz.4.128' launched './file2' with NULL argv: empty string added
[  105.721371][ T4673] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.130'.
[  105.974904][ T1107] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  106.837566][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.854211][ T1107] usb 4-1: Product: syz
[  106.858681][ T1107] usb 4-1: Manufacturer: syz
[  106.864851][ T1107] usb 4-1: SerialNumber: syz
[  106.899263][ T1107] usb 4-1: config 0 descriptor??
[  106.939825][ T1107] usb 4-1: can't set config #0, error -71
[  106.974686][ T4233] usb 1-1: USB disconnect, device number 4
[  107.039323][ T1107] usb 4-1: USB disconnect, device number 3
[  108.250871][ T4695] siw: device registration error -23
[  108.583058][ T4716] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.142'.
[  109.539924][ T1333] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  109.603975][    T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  109.711478][ T4742] loop4: detected capacity change from 0 to 256
[  109.805498][ T4742] FAT-fs (loop4): Directory bread(block 64) failed
[  109.826969][ T1333] usb 1-1: Using ep0 maxpacket: 8
[  109.829763][ T4742] FAT-fs (loop4): Directory bread(block 65) failed
[  109.850287][ T4742] FAT-fs (loop4): Directory bread(block 66) failed
[  109.869731][    T7] usb 4-1: Using ep0 maxpacket: 32
[  109.908218][ T4742] FAT-fs (loop4): Directory bread(block 67) failed
[  109.985855][ T4742] FAT-fs (loop4): Directory bread(block 68) failed
[  110.066193][ T4742] FAT-fs (loop4): Directory bread(block 69) failed
[  110.157637][ T4742] FAT-fs (loop4): Directory bread(block 70) failed
[  110.223690][ T4742] FAT-fs (loop4): Directory bread(block 71) failed
[  110.280314][ T4742] FAT-fs (loop4): Directory bread(block 72) failed
[  110.349045][ T4742] FAT-fs (loop4): Directory bread(block 73) failed
[  110.658321][ T4751] loop1: detected capacity change from 0 to 512
[  110.843502][ T1333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  110.853829][ T1333] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  110.863068][ T1333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.882607][ T1333] usb 1-1: config 0 descriptor??
[  112.645380][ T4760] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.156'.
[  112.674543][    T7] usb 4-1: unable to get BOS descriptor or descriptor too short
[  112.939877][ T1333] usb 1-1: can't set config #0, error -71
[  112.946804][ T1333] usb 1-1: USB disconnect, device number 5
[  112.992180][    T7] usb 4-1: unable to read config index 0 descriptor/start: -71
[  113.009694][    T7] usb 4-1: can't read configurations, error -71
[  113.052513][ T4398] attempt to access beyond end of device
[  113.052513][ T4398] loop4: rw=1, want=1832, limit=256
[  113.340260][ T4398] attempt to access beyond end of device
[  113.340260][ T4398] loop4: rw=1, want=1928, limit=256
[  113.369518][ T4398] attempt to access beyond end of device
[  113.369518][ T4398] loop4: rw=1, want=4008, limit=256
[  113.601871][ T4398] attempt to access beyond end of device
[  113.601871][ T4398] loop4: rw=1, want=33800, limit=256
[  114.224524][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  114.224554][   T26] audit: type=1326 audit(1781802946.817:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4785 comm="syz.1.166" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13001d6e59 code=0x0
[  114.852487][ T4804] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.168'.
[  115.979728][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  116.249770][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  116.390017][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.498981][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.509136][ T4230] usb 1-1: Using ep0 maxpacket: 8
[  116.617098][ T4831] loop4: detected capacity change from 0 to 128
[  117.157954][ T4831] FAT-fs (loop4): bogus logical sector size 55191
[  117.164614][ T4831] FAT-fs (loop4): Can't find a valid FAT filesystem
[  117.178348][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  117.196872][    T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  117.206049][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.217747][    T7] usb 2-1: config 0 descriptor??
[  117.399893][ T4230] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  117.462938][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.505263][ T4230] usb 1-1: Product: syz
[  117.552070][ T4230] usb 1-1: Manufacturer: syz
[  117.567358][ T4230] usb 1-1: SerialNumber: syz
[  117.574077][ T4230] usb 1-1: config 0 descriptor??
[  117.711711][    T7] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  117.795164][ T4837] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.182'.
[  118.409938][ T4230] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  118.431356][    T7] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  118.779921][ T4230] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  118.829960][ T4230] usb 1-1: USB disconnect, device number 6
[  119.709731][ T1107] usb 2-1: reset high-speed USB device number 3 using dummy_hcd
[  120.399692][ T4265] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  120.566254][ T4868] loop3: detected capacity change from 0 to 512
[  120.643344][   T21] usb 2-1: USB disconnect, device number 3
[  120.649741][ T4265] usb 1-1: Using ep0 maxpacket: 32
[  120.715561][ T4868] EXT4-fs (loop3): Invalid want_extra_isize 64
[  120.780022][ T4265] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  120.847107][ T4265] usb 1-1: config 0 has no interface number 0
[  120.903177][ T4265] usb 1-1: config 0 interface 12 has no altsetting 0
[  121.091052][ T4265] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  121.122515][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.152931][ T4265] usb 1-1: Product: syz
[  121.157110][ T4265] usb 1-1: Manufacturer: syz
[  121.169702][ T4265] usb 1-1: SerialNumber: syz
[  121.199788][ T4246] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  121.207884][ T4265] usb 1-1: config 0 descriptor??
[  121.817313][ T4246] usb 5-1: config 0 has an invalid interface number: 33 but max is 0
[  121.826386][ T4246] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.837206][ T4246] usb 5-1: config 0 has no interface number 0
[  121.845050][ T4246] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[  121.855386][ T4246] usb 5-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.029999][ T4246] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64
[  122.089246][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.125774][ T4246] usb 5-1: Product: syz
[  122.139914][ T4246] usb 5-1: Manufacturer: syz
[  122.247893][ T4246] usb 5-1: SerialNumber: syz
[  122.280831][ T4246] usb 5-1: config 0 descriptor??
[  122.349261][ T4881] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.193'.
[  122.418780][ T4870] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  122.943408][ T4246] hdpvr 5-1:0.33: Could not find bulk-in endpoint
[  123.039876][ T4246] hdpvr: probe of 5-1:0.33 failed with error -12
[  123.081269][ T4265] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  123.113402][ T4265] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  123.265176][ T4265] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  123.287973][ T4265] f81534: probe of 1-1:0.12 failed with error -71
[  123.571028][ T4265] usb 1-1: USB disconnect, device number 7
[  124.048414][ T1107] usb 5-1: USB disconnect, device number 3
[  124.279765][ T4265] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  125.899713][ T4265] usb 1-1: Using ep0 maxpacket: 32
[  126.059864][ T4265] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  126.069571][ T4265] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  126.107792][ T4265] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  126.132706][ T4265] usb 1-1: config 1 has no interface number 0
[  126.154285][ T4265] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  126.205367][ T4265] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  126.254830][ T4265] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  126.289395][ T4265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.475207][ T4265] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  126.548392][ T4910] loop3: detected capacity change from 0 to 512
[  126.613485][ T4910] EXT4-fs (loop3): Invalid want_extra_isize 64
[  126.690792][ T4265] snd_usb_pod 1-1:1.1: set_interface failed
[  126.706937][ T4265] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  126.794670][ T4265] snd_usb_pod: probe of 1-1:1.1 failed with error -71
[  126.889311][ T4265] usb 1-1: USB disconnect, device number 8
[  128.868865][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'.
[  129.943486][ T4964] loop8: detected capacity change from 0 to 8
[  129.980368][ T4182] Dev loop8: unable to read RDB block 8
[  129.994669][ T4182]  loop8: unable to read partition table
[  130.008442][ T4182] loop8: partition table beyond EOD, truncated
[  130.027267][ T4964] Dev loop8: unable to read RDB block 8
[  130.062607][ T4964]  loop8: unable to read partition table
[  130.076171][ T4964] loop8: partition table beyond EOD, truncated
[  130.101139][ T4964] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  130.780482][ T4975] loop0: detected capacity change from 0 to 512
[  132.434766][ T4230] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  132.653777][ T4975] EXT4-fs (loop0): Invalid want_extra_isize 64
[  132.687071][ T4230] Bluetooth: hci1: Injecting HCI hardware error event
[  132.722522][ T4196] Bluetooth: hci1: hardware error 0x00
[  133.971366][ T4995] loop8: detected capacity change from 0 to 8
[  134.031719][ T4803] Dev loop8: unable to read RDB block 8
[  134.037472][ T4803]  loop8: unable to read partition table
[  134.061757][ T4803] loop8: partition table beyond EOD, truncated
[  134.103805][ T4995] Dev loop8: unable to read RDB block 8
[  134.125065][ T4995]  loop8: unable to read partition table
[  134.140995][ T5000] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  134.154459][ T4995] loop8: partition table beyond EOD, truncated
[  134.174801][ T5003] loop3: detected capacity change from 0 to 512
[  134.200369][ T4995] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  134.297553][ T5003] EXT4-fs (loop3): Invalid want_extra_isize 64
[  134.311966][ T5009] futex_wake_op: syz.0.237 tries to shift op by 144; fix this program
[  134.332246][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'.
[  134.342800][ T5009] netlink: 'syz.0.237': attribute type 2 has an invalid length.
[  135.297550][ T5027] loop3: detected capacity change from 0 to 512
[  135.409207][ T5027] EXT4-fs (loop3): Invalid want_extra_isize 64
[  136.272244][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  136.278591][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  136.679724][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  136.960345][ T4229] usb 5-1: Using ep0 maxpacket: 32
[  137.292076][ T4229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.302356][ T4229] usb 5-1: config 0 has no interfaces?
[  137.308457][ T4229] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  137.346981][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.380709][ T4229] usb 5-1: config 0 descriptor??
[  137.710229][ T4229] usb 5-1: USB disconnect, device number 4
[  138.380957][ T5059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.249'.
[  138.627089][ T5064] device ip6gretap1 entered promiscuous mode
[  138.688274][ T5072] loop1: detected capacity change from 0 to 512
[  138.780882][ T5072] EXT4-fs (loop1): Invalid want_extra_isize 64
[  138.838947][ T5078] futex_wake_op: syz.4.251 tries to shift op by 144; fix this program
[  138.852240][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'.
[  138.861319][ T5078] netlink: 'syz.4.251': attribute type 2 has an invalid length.
[  139.207716][ T5082] loop2: detected capacity change from 0 to 512
[  141.869815][ T4229] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  142.390287][ T4229] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  142.593554][ T4229] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  142.901923][ T5127] loop3: detected capacity change from 0 to 512
[  142.922362][ T4229] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.941224][ T4229] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  142.960363][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.025465][ T4229] usb 3-1: invalid MIDI out EP 0
[  143.042834][ T5127] EXT4-fs (loop3): Invalid want_extra_isize 64
[  143.283639][ T4229] snd-usb-audio: probe of 3-1:27.0 failed with error -22
[  143.336464][ T4229] usb 3-1: USB disconnect, device number 5
[  143.337773][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.453916][ T5147] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  144.460858][ T5147] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  144.497131][ T5147] vhci_hcd vhci_hcd.0: Device attached
[  144.679747][ T4237] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  144.759745][ T4229] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  144.857351][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f048800: rx timeout, send abort
[  144.866516][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f048800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  145.050032][ T4237] usb 4-1: config 0 has no interfaces?
[  145.056329][ T4237] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  145.121999][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.189136][ T4237] usb 4-1: config 0 descriptor??
[  145.474986][ T4237] usb 4-1: USB disconnect, device number 6
[  145.484456][ T5149] vhci_hcd: connection closed
[  145.487298][  T144] vhci_hcd: stop threads
[  145.539577][  T144] vhci_hcd: release socket
[  145.609386][  T144] vhci_hcd: disconnect device
[  145.619972][ T4229] usb 39-1: device descriptor read/64, error -71
[  145.819755][ T4229] vhci_hcd: vhci_device speed not set
[  147.879728][ T4237] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  147.940612][ T5158] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.948889][ T5158] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.977159][ T5187] loop8: detected capacity change from 0 to 7
[  148.088585][ T5187] Dev loop8: unable to read RDB block 7
[  148.119689][ T4237] usb 1-1: Using ep0 maxpacket: 16
[  148.350835][ T5187]  loop8: AHDI p1 p2
[  148.360411][ T5187] loop8: partition table partially beyond EOD, truncated
[  148.400593][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.425327][ T5187] loop8: p1 start 1702000233 is beyond EOD, truncated
[  148.447570][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.478098][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  148.641667][ T4237] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  148.651356][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.677565][ T4237] usb 1-1: config 0 descriptor??
[  149.201585][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.415869][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.427400][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.441096][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.448366][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.455790][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.463123][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.470383][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.477647][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.499917][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.535246][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.576131][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.607428][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.636298][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.676904][ T4237] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  149.734309][ T4237] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input7
[  149.873879][ T4237] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  149.979911][ T4237] usb 1-1: USB disconnect, device number 9
[  150.793119][ T5204] fido_id[5204]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  151.159823][ T5046] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  151.320033][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  151.380316][ T5158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.396641][ T5158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.426308][ T5046] usb 3-1: Using ep0 maxpacket: 32
[  151.549956][ T5046] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  151.564746][   T23] usb 4-1: Using ep0 maxpacket: 32
[  151.571280][ T5046] usb 3-1: config 0 has no interface number 0
[  151.587268][ T5046] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  151.612397][ T5046] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  151.630567][ T5046] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  151.640775][ T5046] usb 3-1: config 0 interface 196 has no altsetting 0
[  151.700649][   T23] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  151.714212][   T23] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  151.727170][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  151.742199][   T23] usb 4-1: config 1 has no interface number 0
[  151.750825][   T23] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  151.765572][   T23] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  151.779338][   T23] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  151.799924][ T5046] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  151.818645][ T5046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.831502][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.843154][ T5046] usb 3-1: Product: syz
[  151.852884][ T5046] usb 3-1: Manufacturer: syz
[  151.859866][ T5046] usb 3-1: SerialNumber: syz
[  151.866356][ T5046] usb 3-1: config 0 descriptor??
[  151.890058][ T5218] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  151.902948][   T23] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  152.030126][ T5240] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  152.125437][   T23] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  152.349794][ T5046] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  152.360168][ T5046] ipheth: probe of 3-1:0.196 failed with error -22
[  152.415114][ T5158] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.435206][ T5158] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.458173][ T5158] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.479944][ T5158] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.595427][ T4246] usb 3-1: USB disconnect, device number 6
[  152.932968][ T5158] syz.1.279 (5158) used greatest stack depth: 19792 bytes left
[  153.160218][ T4246] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  153.942184][ T4246] usb 4-1: USB disconnect, device number 7
[  153.969315][ T4246] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  158.840253][ T5299] program syz.0.321 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  160.249794][ T4231] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  160.389909][ T4246] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  160.429790][ T4230] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  160.629729][ T4246] usb 4-1: Using ep0 maxpacket: 32
[  160.689940][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short
[  160.752130][ T4246] usb 4-1: config index 0 descriptor too short (expected 19, got 18)
[  160.780150][ T4231] usb 5-1: config 8 has an invalid interface number: 141 but max is 0
[  160.789098][ T4231] usb 5-1: config 8 has no interface number 0
[  160.801547][ T4231] usb 5-1: config 8 interface 141 has no altsetting 0
[  160.834816][ T4230] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  160.843066][ T4230] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10044, setting to 1024
[  160.861059][ T4230] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024
[  160.875383][ T4230] usb 2-1: config 0 interface 0 has no altsetting 0
[  160.919891][ T4246] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  160.929196][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.937781][ T4246] usb 4-1: Product: syz
[  160.942495][ T4246] usb 4-1: Manufacturer: syz
[  160.947108][ T4246] usb 4-1: SerialNumber: syz
[  160.968738][ T4246] usb 4-1: config 0 descriptor??
[  160.989868][ T4231] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=f2.dd
[  160.999225][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.007663][ T4231] usb 5-1: Product: syz
[  161.012266][ T4231] usb 5-1: Manufacturer: syz
[  161.013698][ T4246] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  161.016963][ T4231] usb 5-1: SerialNumber: syz
[  161.031537][ T4246] dvb-usb: bulk message failed: -22 (2/0)
[  161.049059][ T4246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  161.070516][ T4246] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  161.079241][ T4246] usb 4-1: media controller created
[  161.090026][ T4230] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  161.096590][ T4246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.106405][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  161.119721][   T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  161.127809][ T4246] usb 4-1: selecting invalid altsetting 7
[  161.133878][ T4230] usb 2-1: Product: syz
[  161.135361][ T4246] cxusb: set interface failed
[  161.138456][ T4230] usb 2-1: Manufacturer: syz
[  161.144081][ T4246] dvb-usb: bulk message failed: -22 (1/0)
[  161.152871][ T4230] usb 2-1: SerialNumber: syz
[  161.169785][ T4230] usb 2-1: config 0 descriptor??
[  161.189987][ T5309] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  161.213894][ T4230] hub 2-1:0.0: bad descriptor, ignoring hub
[  161.214790][ T5310] cxusb: i2c wr: len=79 is too big!
[  161.214790][ T5310] 
[  161.226138][ T4230] hub: probe of 2-1:0.0 failed with error -5
[  161.230127][ T4246] DVB: Unable to find symbol lgdt330x_attach()
[  161.241468][ T4246] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  161.248271][ T4230] usb 2-1: selecting invalid altsetting 0
[  161.359809][   T23] usb 1-1: Using ep0 maxpacket: 32
[  161.369871][ T4246] rc_core: IR keymap rc-dvico-portable not found
[  161.377366][ T4246] Registered IR keymap rc-empty
[  161.391215][ T4246] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  161.425851][ T4246] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8
[  161.490681][   T23] usb 1-1: config 1 has an invalid interface number: 1 but max is 0
[  161.500408][   T23] usb 1-1: config 1 has no interface number 0
[  161.571791][ T4246] dvb-usb: schedule remote query interval to 100 msecs.
[  161.579782][ T4246] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  161.713592][   T23] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40
[  161.753281][ T4246] usb 4-1: USB disconnect, device number 8
[  161.767320][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.809851][   T23] usb 1-1: Product: syz
[  161.814507][   T23] usb 1-1: Manufacturer: syz
[  161.819564][   T23] usb 1-1: SerialNumber: syz
[  161.919920][ T5309] usb 2-1: reset high-speed USB device number 4 using dummy_hcd
[  162.129986][ T4246] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  162.303216][   T23] usb 1-1: USB disconnect, device number 10
[  162.341543][ T4231] int51x1: probe of 5-1:8.141 failed with error -71
[  162.440100][ T5313] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  162.536591][ T4231] usb 5-1: USB disconnect, device number 5
[  163.348024][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  163.512319][ T5353] program syz.0.341 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  163.569765][ T4230] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  164.669958][ T4230] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  164.681643][ T4230] usb 4-1: config 0 has no interface number 0
[  164.692295][ T4230] usb 4-1: config 0 interface 41 has no altsetting 0
[  164.880039][ T4230] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  164.898523][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.931631][ T4230] usb 4-1: Product: syz
[  164.980463][ T4230] usb 4-1: Manufacturer: syz
[  165.037848][ T4230] usb 4-1: SerialNumber: syz
[  165.103960][ T4230] usb 4-1: config 0 descriptor??
[  166.000062][ T4230] CoreChips: probe of 4-1:0.41 failed with error -71
[  166.023839][ T4230] usb 4-1: USB disconnect, device number 9
[  166.139699][ T5046] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  166.379679][ T5046] usb 3-1: Using ep0 maxpacket: 8
[  166.502246][ T5046] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  166.540476][ T5046] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  166.560630][ T5046] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  166.610353][ T5046] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  166.625021][ T5046] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.642394][ T5046] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  166.652249][ T5046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.009824][ T5046] usb 3-1: usb_control_msg returned -32
[  167.015598][ T5046] usbtmc 3-1:16.0: can't read capabilities
[  167.519815][ T5046] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  167.569875][ T5309] usb 2-1: failed to restore interface 0 altsetting 251 (error=-110)
[  167.600748][ T4235] usb 2-1: USB disconnect, device number 4
[  167.779668][ T5046] usb 1-1: Using ep0 maxpacket: 32
[  167.899891][ T5046] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  167.930227][ T5046] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[  168.002559][ T5046] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  168.249956][ T5046] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  168.259055][ T5046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.316721][ T5046] usb 1-1: Product: syz
[  168.336376][ T5046] usb 1-1: Manufacturer: syz
[  168.354186][ T5046] usb 1-1: SerialNumber: syz
[  168.432096][ T5046] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  168.456059][ T5046] imon 1-1:155.0: unable to initialize intf0, err -19
[  168.483578][ T5046] imon:imon_probe: failed to initialize context!
[  168.513998][ T5046] imon 1-1:155.0: unable to register, err -19
[  168.869548][ T5046] usb 3-1: USB disconnect, device number 7
[  168.971706][ T5492] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  170.392625][ T4233] usb 1-1: USB disconnect, device number 11
[  172.194362][ T5527] loop0: detected capacity change from 0 to 512
[  176.776158][ T5576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'.
[  181.365453][ T5625] siw: device registration error -23
[  181.965184][ T5631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'.
[  182.098535][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.413'.
[  184.906723][ T5667] chnl_net:caif_netlink_parms(): no params data found
[  185.207725][ T5229] Bluetooth: hci5: command 0x0409 tx timeout
[  185.254670][ T5695] siw: device registration error -23
[  185.694139][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.709910][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.728494][ T5667] device bridge_slave_0 entered promiscuous mode
[  185.806964][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.938950][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.960841][ T5667] device bridge_slave_1 entered promiscuous mode
[  186.816565][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.740597][ T4233] Bluetooth: hci5: command 0x041b tx timeout
[  187.796773][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.159964][ T4231] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  188.214120][ T5667] team0: Port device team_slave_0 added
[  188.231107][ T5667] team0: Port device team_slave_1 added
[  188.334786][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.380452][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.419816][ T4231] usb 1-1: Using ep0 maxpacket: 32
[  189.554471][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.556229][   T23] Bluetooth: hci2: command 0x0406 tx timeout
[  189.567886][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.606427][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.620021][   T23] Bluetooth: hci0: command 0x0406 tx timeout
[  189.660135][   T23] Bluetooth: hci3: command 0x0406 tx timeout
[  189.679945][   T23] Bluetooth: hci4: command 0x0406 tx timeout
[  189.736724][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.749810][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short
[  189.792933][ T5046] Bluetooth: hci5: command 0x040f tx timeout
[  189.829754][ T4231] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  189.838561][ T4231] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  189.884456][ T4231] usb 1-1: config 14 has no interface number 0
[  189.899060][ T4231] usb 1-1: config 14 has no interface number 1
[  189.919688][ T4231] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  189.939461][ T4231] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping
[  189.951440][ T4231] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  189.964087][ T4231] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  189.978541][ T4231] usb 1-1: config 14 interface 57 has no altsetting 0
[  189.986001][ T4231] usb 1-1: config 14 interface 228 has no altsetting 0
[  189.998348][ T5667] device hsr_slave_0 entered promiscuous mode
[  190.038668][ T5667] device hsr_slave_1 entered promiscuous mode
[  190.073666][ T5667] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.090403][ T5667] Cannot create hsr debugfs directory
[  190.102865][ T5738] netlink: 'syz.2.434': attribute type 10 has an invalid length.
[  190.124655][ T5738] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  190.149932][ T4231] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  190.161662][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.191238][ T4231] usb 1-1: Product: syz
[  190.195455][ T4231] usb 1-1: Manufacturer: syz
[  190.202067][ T4231] usb 1-1: SerialNumber: syz
[  190.865754][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.048276][ T4231] legousbtower 1-1:14.57: interrupt endpoints not found
[  191.279211][ T4231] legousbtower 1-1:14.228: interrupt endpoints not found
[  191.454746][ T4231] usb 1-1: USB disconnect, device number 12
[  191.748897][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.776339][ T5746] siw: device registration error -23
[  191.838934][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.869729][ T4246] Bluetooth: hci5: command 0x0419 tx timeout
[  191.911183][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.366926][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'.
[  193.461204][ T5667] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  193.539048][ T5667] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  193.614497][ T5667] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  193.674738][ T5795] netlink: 'syz.0.449': attribute type 1 has an invalid length.
[  193.690173][ T5795] netlink: 44 bytes leftover after parsing attributes in process `syz.0.449'.
[  193.723568][ T5667] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  194.061851][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.705032][ T5818] siw: device registration error -23
[  194.729525][ T5667] 8021q: adding VLAN 0 to HW filter on device team0
[  194.747837][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.771145][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.844440][ T5423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.880671][ T5423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.913829][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.921041][ T5423] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.944641][ T5423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  194.957895][ T5423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  194.973820][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.981018][ T5423] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.023559][ T5423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  195.049178][ T5423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  195.090796][ T5423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.139938][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  195.196948][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  195.246197][ T5833] program syz.2.458 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  195.317139][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  195.366614][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  195.517376][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  195.691343][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  195.912145][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  196.068694][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  196.220505][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  196.229290][ T5843] loop2: detected capacity change from 0 to 256
[  196.380559][ T5851] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  196.387210][ T5851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  196.421922][ T5851] vhci_hcd vhci_hcd.0: Device attached
[  196.454089][    T9] device hsr_slave_0 left promiscuous mode
[  196.464947][ T5843] FAT-fs (loop2): Directory bread(block 64) failed
[  196.479823][ T5843] FAT-fs (loop2): Directory bread(block 65) failed
[  196.494702][ T5843] FAT-fs (loop2): Directory bread(block 66) failed
[  196.502612][    T9] device hsr_slave_1 left promiscuous mode
[  196.520893][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.528540][ T5843] FAT-fs (loop2): Directory bread(block 67) failed
[  196.557579][ T5843] FAT-fs (loop2): Directory bread(block 68) failed
[  196.571829][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.579166][ T5843] FAT-fs (loop2): Directory bread(block 69) failed
[  196.596832][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.624853][ T5843] FAT-fs (loop2): Directory bread(block 70) failed
[  196.649786][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.658387][    T9] device bridge_slave_1 left promiscuous mode
[  196.664760][ T5843] FAT-fs (loop2): Directory bread(block 71) failed
[  196.664868][ T5843] FAT-fs (loop2): Directory bread(block 72) failed
[  196.664912][ T5843] FAT-fs (loop2): Directory bread(block 73) failed
[  196.674457][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.702738][ T4246] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  196.718565][    T9] device bridge_slave_0 left promiscuous mode
[  196.726141][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.751118][ T5046] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  196.773916][    T9] device veth1_macvtap left promiscuous mode
[  196.784188][    T9] device veth0_macvtap left promiscuous mode
[  196.790747][    T9] device veth1_vlan left promiscuous mode
[  196.798634][    T9] device veth0_vlan left promiscuous mode
[  198.018665][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  198.025051][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  198.100553][ T5046] usb 2-1: Using ep0 maxpacket: 16
[  198.238170][ T5423] attempt to access beyond end of device
[  198.238170][ T5423] loop2: rw=1, want=1832, limit=256
[  198.261702][ T5046] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  198.280922][ T5423] attempt to access beyond end of device
[  198.280922][ T5423] loop2: rw=1, want=1928, limit=256
[  198.459939][ T5046] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  198.480143][ T5046] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.488494][ T5046] usb 2-1: Product: syz
[  198.489313][ T5423] attempt to access beyond end of device
[  198.489313][ T5423] loop2: rw=1, want=16720, limit=256
[  198.499633][ T5046] usb 2-1: Manufacturer: syz
[  198.508660][ T5046] usb 2-1: SerialNumber: syz
[  198.589179][ T5871] siw: device registration error -23
[  198.702071][ T5046] usb 2-1: config 0 descriptor??
[  198.769039][ T5046] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  198.790935][ T5046] usb 2-1: Detected FT232BM
[  198.876466][ T5423] attempt to access beyond end of device
[  198.876466][ T5423] loop2: rw=1, want=18808, limit=256
[  198.901650][ T5423] attempt to access beyond end of device
[  198.901650][ T5423] loop2: rw=1, want=20856, limit=256
[  198.923855][ T5423] attempt to access beyond end of device
[  198.923855][ T5423] loop2: rw=1, want=22928, limit=256
[  198.940173][ T5423] attempt to access beyond end of device
[  198.940173][ T5423] loop2: rw=1, want=24984, limit=256
[  198.953804][ T5853] usbip_core: unknown command
[  198.956237][ T5423] attempt to access beyond end of device
[  198.956237][ T5423] loop2: rw=1, want=27032, limit=256
[  198.958543][ T5853] vhci_hcd: unknown pdu 302055424
[  198.983630][ T5423] attempt to access beyond end of device
[  198.983630][ T5423] loop2: rw=1, want=29080, limit=256
[  199.001298][ T5853] usbip_core: unknown command
[  199.003020][ T5046] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  199.017798][ T4761] vhci_hcd: stop threads
[  199.021439][ T5423] attempt to access beyond end of device
[  199.021439][ T5423] loop2: rw=1, want=32592, limit=256
[  199.025827][ T4761] vhci_hcd: release socket
[  199.035472][    T9] team0 (unregistering): Port device team_slave_1 removed
[  199.044389][ T4761] vhci_hcd: disconnect device
[  199.045516][ T5046] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  199.062386][ T5046] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  199.078353][    T9] team0 (unregistering): Port device team_slave_0 removed
[  199.115807][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.128912][ T5046] usb 2-1: USB disconnect, device number 6
[  199.160099][ T5046] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  199.178551][ T5046] ftdi_sio 2-1:0.0: device disconnected
[  199.187199][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.309084][    T9] bond0 (unregistering): Released all slaves
[  199.600498][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  199.608129][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  199.683464][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.858546][ T5902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  201.398019][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  201.417869][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  201.801563][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  201.890928][ T4246] vhci_hcd: vhci_device speed not set
[  201.922857][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  202.188921][ T5667] device veth0_vlan entered promiscuous mode
[  202.220924][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  202.282066][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  202.405099][ T5667] device veth1_vlan entered promiscuous mode
[  202.453127][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  202.591942][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  204.038740][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  204.752677][ T5667] device veth0_macvtap entered promiscuous mode
[  204.792415][ T5667] device veth1_macvtap entered promiscuous mode
[  205.457991][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'.
[  205.493749][ T5947] device syz_tun entered promiscuous mode
[  205.520092][ T5947] device macvlan2 entered promiscuous mode
[  205.602940][ T5936] siw: device registration error -23
[  205.620413][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.729901][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.840068][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.964915][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.121531][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.267673][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.472695][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.643672][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  207.352292][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  207.390746][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.433267][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.454976][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'.
[  207.509374][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.608823][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.197006][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.285970][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.414630][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.469620][ T5667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.527386][ T5667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.536454][ T5667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.545223][ T5667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.605755][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  209.762117][ T5427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  210.864710][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'.
[  211.109069][ T5420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.157446][ T6003] overlayfs: overlapping lowerdir path
[  211.182188][ T5420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.669877][ T4235] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  211.726854][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  211.755439][ T4761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.788975][ T4761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.871269][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  211.959795][ T4235] usb 1-1: Using ep0 maxpacket: 32
[  212.120261][ T4235] usb 1-1: unable to get BOS descriptor or descriptor too short
[  212.215003][ T4235] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  213.039867][ T4235] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  213.039912][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.039930][ T4235] usb 1-1: Product: syz
[  213.039943][ T4235] usb 1-1: Manufacturer: syz
[  213.039955][ T4235] usb 1-1: SerialNumber: syz
[  214.080019][ T4235] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  214.889825][ T4235] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  214.919867][ T4235] usb 1-1: USB disconnect, device number 13
[  215.207709][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  215.269908][ T4233] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  215.559819][ T4233] usb 2-1: Using ep0 maxpacket: 8
[  215.710047][ T4233] usb 2-1: config 0 has an invalid interface number: 143 but max is 0
[  215.736940][ T4233] usb 2-1: config 0 has no interface number 0
[  215.753953][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.766274][ T4233] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  215.789783][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.811906][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.845977][ T4233] usb 2-1: config 0 descriptor??
[  215.863349][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.905349][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.958837][ T6072] loop2: detected capacity change from 0 to 512
[  216.044595][ T6072] EXT4-fs (loop2): Invalid want_extra_isize 64
[  216.069970][ T4233] viperboard 2-1:0.143: version 0.00 found at bus 002 address 007
[  217.065419][ T4233] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  217.079092][ T4233] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  217.116155][ T4233] usb 2-1: USB disconnect, device number 7
[  217.361378][ T6095] hub 8-0:1.0: USB hub found
[  217.368742][ T6095] hub 8-0:1.0: 1 port detected
[  219.261248][ T6126] loop2: detected capacity change from 0 to 512
[  219.374488][ T6126] EXT4-fs (loop2): Invalid want_extra_isize 64
[  220.100175][ T4231] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  220.834036][ T4231] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0
[  220.863141][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0
[  221.689847][ T4231] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  221.768612][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  221.884924][ T4231] usb 1-1: Product: syz
[  222.282001][ T4231] usb 1-1: Manufacturer: syz
[  222.314064][ T4231] usb 1-1: SerialNumber: syz
[  222.335254][ T4231] usb 1-1: config 0 descriptor??
[  223.239971][ T4231] usb 1-1: can't set config #0, error -71
[  223.253387][ T4231] usb 1-1: USB disconnect, device number 14
[  223.584894][ T6153] ODEBUG: Out of memory. ODEBUG disabled
[  225.339238][ T6225] loop5: detected capacity change from 0 to 512
[  225.379855][ T6225] EXT4-fs (loop5): Invalid want_extra_isize 64
[  226.991161][ T6270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'.
[  227.279729][ T5229] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  227.374467][ T6289] loop5: detected capacity change from 0 to 256
[  227.531866][ T6289] FAT-fs (loop5): Directory bread(block 64) failed
[  227.548831][ T6289] FAT-fs (loop5): Directory bread(block 65) failed
[  227.555875][ T6289] FAT-fs (loop5): Directory bread(block 66) failed
[  227.565548][ T6289] FAT-fs (loop5): Directory bread(block 67) failed
[  227.790358][ T6289] FAT-fs (loop5): Directory bread(block 68) failed
[  227.984215][ T5229] usb 3-1: Using ep0 maxpacket: 16
[  228.016064][ T6289] FAT-fs (loop5): Directory bread(block 69) failed
[  228.024263][ T6289] FAT-fs (loop5): Directory bread(block 70) failed
[  228.031771][ T6289] FAT-fs (loop5): Directory bread(block 71) failed
[  228.038403][ T6289] FAT-fs (loop5): Directory bread(block 72) failed
[  228.047247][ T6289] FAT-fs (loop5): Directory bread(block 73) failed
[  228.770052][ T5229] usb 3-1: config 127 has an invalid interface number: 124 but max is 0
[  229.461758][ T5229] usb 3-1: config 127 has no interface number 0
[  229.468322][ T5229] usb 3-1: config 127 interface 124 has no altsetting 0
[  229.653054][ T6314] loop5: detected capacity change from 0 to 512
[  229.665516][ T5229] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  229.744187][ T6314] EXT4-fs (loop5): Invalid want_extra_isize 64
[  229.792376][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.810722][ T5229] usb 3-1: Product: syz
[  229.815261][ T5229] usb 3-1: Manufacturer: syz
[  229.823582][ T5229] usb 3-1: SerialNumber: syz
[  232.587271][ T5229] usb 3-1: USB disconnect, device number 8
[  235.306426][ T6366] futex_wake_op: syz.2.568 tries to shift op by 144; fix this program
[  236.293163][ T6378] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  238.164731][ T6420] futex_wake_op: syz.5.581 tries to shift op by 144; fix this program
[  240.090230][    T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  241.189713][    T7] usb 1-1: Using ep0 maxpacket: 32
[  241.330042][    T7] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  241.338483][    T7] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  241.354715][    T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  241.381037][    T7] usb 1-1: config 1 has no interface number 0
[  241.387188][    T7] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  241.399188][    T7] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  241.418023][    T7] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  241.445021][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.522427][    T7] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  241.730562][    T7] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  242.761683][ T4235] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  243.459988][ T4235] usb 1-1: USB disconnect, device number 15
[  243.534125][ T4235] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  244.090044][ T6531] overlayfs: failed to resolve './file0': -2
[  244.747082][ T6533] siw: device registration error -23
[  247.184171][ T6557] loop4: detected capacity change from 0 to 512
[  247.236974][ T6557] EXT4-fs (loop4): Invalid want_extra_isize 64
[  247.874164][ T6581] overlayfs: failed to resolve './file0': -2
[  249.624598][ T6602] vivid-001: kernel_thread() failed
[  251.552155][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'.
[  251.642326][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'.
[  253.179662][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  253.619705][    T7] usb 5-1: Using ep0 maxpacket: 16
[  253.749984][    T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.846719][    T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.010519][    T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  254.030480][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.068994][    T7] usb 5-1: Product: syz
[  254.087111][    T7] usb 5-1: Manufacturer: syz
[  254.099298][    T7] usb 5-1: SerialNumber: syz
[  254.429876][    T7] usb 5-1: 0:2 : does not exist
[  254.499953][    T7] usb 5-1: USB disconnect, device number 6
[  254.765197][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  256.238412][ T6717] siw: device registration error -23
[  256.923605][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  256.966503][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  256.992027][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.018826][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.048027][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.113240][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.136067][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.165114][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.180082][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.187726][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.200698][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.208470][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.224471][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.254745][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.268731][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.279443][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.290388][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.298238][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.357974][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.410031][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.455334][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.489073][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.519710][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.555795][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.589368][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.617670][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.699668][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.724546][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.749969][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.769489][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.794226][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.802780][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.812896][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.830028][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.985151][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  257.993268][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.002711][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.423974][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.432369][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.440779][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.448458][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.461148][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.468584][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.489855][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.510524][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.517973][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.535996][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.543589][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.554459][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.563047][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.687144][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.700764][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.708295][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.716048][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.723686][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.731215][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.738728][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.746283][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.754027][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.769347][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.799616][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.836030][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.853285][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.863668][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.871208][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.878758][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.888935][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.896724][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.907428][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.915227][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.922815][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.930446][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.937906][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.945422][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.952916][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.960873][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.968353][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.975971][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.983625][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.991146][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  258.998601][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  259.006162][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  259.013781][ T4233] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  259.030482][ T4233] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  259.134999][ T6807] loop5: detected capacity change from 0 to 512
[  259.151969][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  259.158470][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  259.236177][ T6803] fido_id[6803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  259.322823][ T6807] EXT4-fs (loop5): Invalid want_extra_isize 64
[  259.333918][ T6820] futex_wake_op: syz.1.669 tries to shift op by 144; fix this program
[  261.357565][ T6819] siw: device registration error -23
[  262.284732][ T4246] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  263.329955][ T4246] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  264.489481][ T4246] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  264.528090][ T4246] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  264.612139][ T4246] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  264.659674][ T4246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.799770][ T4246] usb 6-1: can't set config #27, error -71
[  264.855422][ T4246] usb 6-1: USB disconnect, device number 2
[  264.997036][ T6871] futex_wake_op: syz.4.682 tries to shift op by 144; fix this program
[  265.853558][ T6877] loop0: detected capacity change from 0 to 512
[  265.949781][ T6877] EXT4-fs (loop0): Invalid want_extra_isize 64
[  266.177195][ T6885] siw: device registration error -23
[  271.731417][ T6932] loop5: detected capacity change from 0 to 512
[  272.042769][ T6932] EXT4-fs (loop5): Invalid want_extra_isize 64
[  273.039619][ T4246] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  273.189747][ T6176] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  273.329684][ T4246] usb 1-1: Using ep0 maxpacket: 32
[  273.439618][ T6176] usb 6-1: Using ep0 maxpacket: 16
[  273.621542][ T6176] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.660875][ T4246] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  273.684789][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.709867][ T4246] usb 1-1: Product: syz
[  273.714255][ T4246] usb 1-1: Manufacturer: syz
[  273.720274][ T4246] usb 1-1: SerialNumber: syz
[  273.742343][ T4246] usb 1-1: config 0 descriptor??
[  273.798414][ T4246] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  273.804611][ T6176] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.806632][ T4246] dvb-usb: bulk message failed: -22 (4/0)
[  273.833890][ T4246] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  273.854766][ T4246] dvb-usb: bulk message failed: -22 (5/0)
[  273.873261][ T4246] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  273.922471][ T6947] siw: device registration error -23
[  274.055560][ T4246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  274.080755][ T4246] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  274.108441][ T4246] usb 1-1: media controller created
[  274.110199][ T6936] dvb-usb: bulk message failed: -22 (7/0)
[  274.151211][ T4246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  274.196970][ T4246] usb 1-1: selecting invalid altsetting 3
[  274.201733][ T6176] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  274.203384][ T6936] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  274.226871][ T4246] ttusb2: set interface to alts=3 failed
[  274.266891][ T6936] ttusb2: i2c transfer failed.
[  274.739911][ T6176] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  274.761921][ T6176] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  274.796351][ T4246] DVB: Unable to find symbol tda10086_attach()
[  274.801686][ T6176] usb 6-1: SerialNumber: syz
[  274.809929][ T4246] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  274.938628][ T6176] hub 6-1:1.0: bad descriptor, ignoring hub
[  274.952777][ T6176] hub: probe of 6-1:1.0 failed with error -5
[  274.981109][ T6176] cdc_ether: probe of 6-1:1.0 failed with error -22
[  274.994835][ T4246] dvb-usb: bulk message failed: -22 (4/0)
[  275.001170][ T4246] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  275.011441][ T4246] dvb-usb: bulk message failed: -22 (5/0)
[  275.017190][ T4246] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  275.027720][ T4246] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  275.079303][ T4246] usb 1-1: USB disconnect, device number 16
[  275.136719][ T6176] usb 6-1: USB disconnect, device number 3
[  275.506587][ T4246] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  276.016963][ T6968] program syz.0.711 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  276.533795][ T6176] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  276.889913][ T6176] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  276.889953][ T6176] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  276.889989][ T6176] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  276.890049][ T6176] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.958766][ T6993] futex_wake_op: syz.1.719 tries to shift op by 144; fix this program
[  276.979735][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.719'.
[  277.450009][ T6973] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  277.647069][ T6998] capability: warning: `syz.4.721' uses deprecated v2 capabilities in a way that may be insecure
[  277.694512][ T6176] usb 6-1: USB disconnect, device number 4
[  278.687203][ T7011] loop1: detected capacity change from 0 to 512
[  278.817968][ T7011] EXT4-fs (loop1): Invalid want_extra_isize 64
[  281.634314][ T7058] program syz.5.737 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  281.767360][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'.
[  281.834869][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'.
[  281.877153][ T7066] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  282.150867][ T7072] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  283.864513][ T7096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.750'.
[  284.619729][    T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  284.698167][ T7120] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.759'.
[  285.009779][    T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  285.754935][    T7] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  285.764891][    T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  285.774615][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.819950][ T7114] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  286.632919][   T21] usb 2-1: USB disconnect, device number 8
[  287.139771][ T5229] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  287.510327][ T5229] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  287.547167][ T5229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.616175][ T5229] usb 6-1: config 0 descriptor??
[  287.680316][ T5229] cp210x 6-1:0.0: cp210x converter detected
[  288.005163][ T5229] usb 6-1: cp210x converter now attached to ttyUSB0
[  291.840608][   T23] usb 6-1: USB disconnect, device number 5
[  291.905084][   T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  291.951750][   T23] cp210x 6-1:0.0: device disconnected
[  292.413908][   T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  292.481899][ T7203] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.783'.
[  292.659738][   T23] usb 6-1: Using ep0 maxpacket: 8
[  292.747755][ T7207] program syz.1.785 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  292.789865][   T23] usb 6-1: config 0 interface 0 has no altsetting 0
[  292.796560][   T23] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  292.985725][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.012053][   T23] usb 6-1: config 0 descriptor??
[  294.411841][    T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  294.456500][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  294.475586][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  294.499144][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  294.649614][    T7] usb 2-1: Using ep0 maxpacket: 8
[  295.831560][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  295.882905][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  295.890387][    T7] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  295.933365][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  295.950208][    T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  296.028026][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.106940][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.197402][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.285560][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.362218][    T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  296.372060][    T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  296.381136][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.385495][    T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.402529][    T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  296.411722][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.529813][    T7] usb 2-1: can't set config #16, error -71
[  296.538937][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.549864][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.556703][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.563603][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.570294][    T7] usb 2-1: USB disconnect, device number 9
[  296.570622][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.583072][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.589992][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.680799][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.688013][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.825572][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.832499][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.839311][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.846427][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  296.869668][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.829644][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.836874][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.844090][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.851381][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.858286][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.868440][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.878622][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.886463][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.894082][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.901206][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.908018][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.915258][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.922362][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.930492][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  297.937824][   T23] sony 0003:054C:0268.0007: unknown main item tag 0x0
[  298.055042][   T23] sony 0003:054C:0268.0007: hiddev0,hidraw0: USB HID v80.c1 Device [HID 054c:0268] on usb-dummy_hcd.5-1/input0
[  298.076249][   T23] sony 0003:054C:0268.0007: failed to claim input
[  298.105613][   T23] usb 6-1: USB disconnect, device number 6
[  298.209443][ T7240] fido_id[7240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  300.289916][ T4246] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  300.669827][ T4246] usb 1-1: Using ep0 maxpacket: 8
[  300.790538][ T4246] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  302.278788][ T4246] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  302.312258][ T4246] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  302.324735][ T4246] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  302.337350][ T4246] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  302.353149][ T4246] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  302.362835][ T4246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.719825][ T4246] usb 1-1: usb_control_msg returned -71
[  302.728758][ T4246] usbtmc 1-1:16.0: can't read capabilities
[  302.788713][ T4246] usb 1-1: USB disconnect, device number 17
[  302.833196][ T7287] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.810'.
[  305.713605][ T7327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.824'.
[  306.515183][ T7353] binder_alloc: 7351: binder_alloc_buf, no vma
[  307.300205][ T7375] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.839'.
[  307.907550][ T4246] Bluetooth: hci5: command 0x0406 tx timeout
[  308.879680][ T7387] block device autoloading is deprecated and will be removed.
[  311.601356][ T7411] exFAT-fs (nullb0): invalid boot record signature
[  311.623491][ T7411] exFAT-fs (nullb0): failed to read boot sector
[  311.657077][ T7411] exFAT-fs (nullb0): failed to recognize exfat type
[  312.006846][ T7415] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.851'.
[  312.765327][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'.
[  313.280860][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'.
[  314.199699][ T4296] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  314.809695][ T4296] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  314.809718][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.809730][ T4296] usb 1-1: Product: syz
[  314.809752][ T4296] usb 1-1: Manufacturer: syz
[  314.809760][ T4296] usb 1-1: SerialNumber: syz
[  314.811314][ T4296] usb 1-1: config 0 descriptor??
[  314.991614][ T4296] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  315.312499][ T4296] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  315.570195][ T4296] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  315.570247][ T4296] usb 1-1: media controller created
[  315.583043][ T4296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  315.640911][ T4296] DVB: Unable to find symbol mt352_attach()
[  315.691505][ T4296] DVB: Unable to find symbol nxt6000_attach()
[  315.691519][ T4296] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  315.740981][ T4296] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  315.742431][ T4296] dvb-usb: schedule remote query interval to 1000 msecs.
[  315.742452][ T4296] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  315.742468][ T4296] dvb-usb: bulk message failed: -22 (7/0)
[  315.742484][ T4296] dvb-usb: bulk message failed: -22 (7/0)
[  315.750770][ T4296] usb 1-1: USB disconnect, device number 18
[  315.778484][ T4296] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  315.986855][ T7454] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.862'.
[  318.714620][ T7493] netlink: 27 bytes leftover after parsing attributes in process `syz.1.871'.
[  320.136001][ T7503] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.875'.
[  320.509678][    T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  320.592086][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  320.598715][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  321.764749][    T7] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  321.775779][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.784263][    T7] usb 3-1: Product: syz
[  321.788618][    T7] usb 3-1: Manufacturer: syz
[  321.793845][    T7] usb 3-1: SerialNumber: syz
[  321.802845][    T7] usb 3-1: config 0 descriptor??
[  321.841292][    T7] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  321.867234][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  321.909964][    T7] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  321.930606][    T7] usb 3-1: media controller created
[  321.951745][ T7528] netlink: 'syz.0.884': attribute type 1 has an invalid length.
[  321.959901][ T7528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.967709][ T7528] IPv6: NLM_F_CREATE should be set when creating new route
[  322.004007][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  322.333788][    T7] DVB: Unable to find symbol mt352_attach()
[  322.467994][    T7] DVB: Unable to find symbol nxt6000_attach()
[  322.474966][    T7] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  322.661777][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11
[  322.681967][    T7] dvb-usb: schedule remote query interval to 1000 msecs.
[  322.689045][    T7] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  323.429021][    T7] dvb-usb: bulk message failed: -22 (7/0)
[  323.434902][    T7] dvb-usb: bulk message failed: -22 (7/0)
[  323.442917][    T7] usb 3-1: USB disconnect, device number 9
[  323.503142][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  323.513598][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:2 Not tainted syzkaller #0
[  323.520398][    T7] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  323.521167][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  323.541648][ T4195] Workqueue: hci2 hci_rx_work
[  323.546406][ T4195] Call Trace:
[  323.549729][ T4195]  <TASK>
[  323.552718][ T4195]  dump_stack_lvl+0x188/0x250
[  323.557440][ T4195]  ? show_regs_print_info+0x20/0x20
[  323.562667][ T4195]  ? load_image+0x400/0x400
[  323.567209][ T4195]  sysfs_create_dir_ns+0x26a/0x290
[  323.572358][ T4195]  ? sysfs_warn_dup+0xa0/0xa0
[  323.577063][ T4195]  ? process_one_work+0x85f/0x1010
[  323.582290][ T4195]  ? do_raw_spin_unlock+0x11d/0x230
[  323.587524][ T4195]  kobject_add_internal+0x6e0/0xd90
[  323.592846][ T4195]  kobject_add+0x160/0x230
[  323.597296][ T4195]  ? kobject_init+0x1d0/0x1d0
[  323.601999][ T4195]  ? klist_children_get+0x50/0x50
[  323.607053][ T4195]  ? get_device_parent+0x121/0x3f0
[  323.612189][ T4195]  device_add+0x48c/0x1000
[  323.616642][ T4195]  hci_conn_add_sysfs+0xd1/0x1e0
[  323.621610][ T4195]  le_conn_complete_evt+0xc4b/0x15c0
[  323.626937][ T4195]  ? cs_le_create_conn+0x5e0/0x5e0
[  323.632082][ T4195]  ? __mutex_trylock_common+0x155/0x260
[  323.637646][ T4195]  hci_le_meta_evt+0xd62/0x3cb0
[  323.642510][ T4195]  ? hci_event_packet+0x37e/0x1370
[  323.647648][ T4195]  ? __lock_acquire+0x7d10/0x7d10
[  323.652711][ T4195]  ? hci_remote_host_features_evt+0x290/0x290
[  323.658864][ T4195]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  323.664493][ T4195]  ? mark_lock+0x94/0x320
[  323.668821][ T4195]  ? mutex_unlock+0x10/0x10
[  323.673325][ T4195]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  323.679322][ T4195]  ? lock_chain_count+0x20/0x20
[  323.684195][ T4195]  ? __rwlock_init+0x140/0x140
[  323.688964][ T4195]  hci_event_packet+0xe4b/0x1370
[  323.693898][ T4195]  ? lockdep_hardirqs_on+0x94/0x140
[  323.699097][ T4195]  ? rcu_lock_release+0x20/0x20
[  323.703944][ T4195]  ? hci_send_to_monitor+0x9c/0x4a0
[  323.709147][ T4195]  hci_rx_work+0x255/0xa10
[  323.713570][ T4195]  process_one_work+0x85f/0x1010
[  323.718521][ T4195]  ? worker_detach_from_pool+0x240/0x240
[  323.724146][ T4195]  ? lockdep_hardirqs_off+0x70/0x100
[  323.729430][ T4195]  ? _raw_spin_lock_irq+0xb7/0xf0
[  323.734454][ T4195]  ? _raw_spin_lock_irqsave+0x100/0x100
[  323.739999][ T4195]  ? wq_worker_running+0x97/0x170
[  323.745036][ T4195]  worker_thread+0xaa6/0x1290
[  323.749723][ T4195]  kthread+0x436/0x520
[  323.753783][ T4195]  ? rcu_lock_release+0x20/0x20
[  323.758627][ T4195]  ? kthread_blkcg+0xd0/0xd0
[  323.763212][ T4195]  ret_from_fork+0x1f/0x30
[  323.767640][ T4195]  </TASK>
[  323.773003][ T4195] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  323.786870][ T4195] Bluetooth: hci2: failed to register connection device
[  324.758408][ T7522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  326.500758][    T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  326.570260][ T7596] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.903'.
[  326.939789][    T7] usb 5-1: config 0 has an invalid interface number: 33 but max is 0
[  326.948020][    T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.996257][    T7] usb 5-1: config 0 has no interface number 0
[  327.019749][    T7] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[  327.030244][    T7] usb 5-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  327.209823][    T7] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64
[  327.218987][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.242554][    T7] usb 5-1: Product: syz
[  327.269697][    T7] usb 5-1: Manufacturer: syz
[  327.278490][    T7] usb 5-1: SerialNumber: syz
[  327.305280][    T7] usb 5-1: config 0 descriptor??
[  327.339905][ T7575] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  327.364408][    T7] hdpvr 5-1:0.33: Could not find bulk-in endpoint
[  327.395796][    T7] hdpvr: probe of 5-1:0.33 failed with error -12
[  328.269419][    T7] usb 5-1: USB disconnect, device number 7
[  328.497942][ T7633] loop5: detected capacity change from 0 to 512
[  328.554826][ T7634] misc userio: Invalid payload size
[  328.562301][ T7634] misc userio: No port type given on /dev/userio
[  328.730464][ T7633] EXT4-fs (loop5): Invalid want_extra_isize 64
[  331.527341][ T7671] loop5: detected capacity change from 0 to 7
[  331.562541][ T4181] Dev loop5: unable to read RDB block 7
[  331.568158][ T4181]  loop5: unable to read partition table
[  331.593063][ T4181] loop5: partition table beyond EOD, truncated
[  331.634126][ T7671] Dev loop5: unable to read RDB block 7
[  331.648159][ T7671]  loop5: unable to read partition table
[  331.681656][ T7671] loop5: partition table beyond EOD, truncated
[  331.714349][ T7671] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  331.771312][ T7680] program syz.0.932 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.226566][ T7701] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.936'.
[  332.279678][   T21] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  332.769915][   T21] usb 1-1: unable to get BOS descriptor or descriptor too short
[  333.319147][   T21] usb 1-1: config 8 has an invalid interface number: 141 but max is 0
[  333.335421][   T21] usb 1-1: config 8 has no interface number 0
[  333.342300][   T21] usb 1-1: config 8 interface 141 has no altsetting 0
[  333.624309][   T21] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=f2.dd
[  333.789624][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.828918][   T21] usb 1-1: Product: syz
[  333.880744][   T21] usb 1-1: Manufacturer: syz
[  333.899614][   T21] usb 1-1: SerialNumber: syz
[  334.289899][   T21] int51x1: probe of 1-1:8.141 failed with error -71
[  334.324214][   T21] usb 1-1: USB disconnect, device number 19
[  335.654993][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.960'.
[  335.728063][    C1] sd 0:0:1:0: tag#4250 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  335.738408][    C1] sd 0:0:1:0: tag#4250 CDB: opcode=0xd9 (vendor)
[  335.744827][    C1] sd 0:0:1:0: tag#4250 CDB[00]: d9 58 39 02 7e b3 2e b1 c6 5b 6d ae f7 02 bf fe
[  335.753924][    C1] sd 0:0:1:0: tag#4250 CDB[10]: ba 43 e3 8e 69 de 94 dc 73 9a 87 54 fc c2 b5 26
[  335.763033][    C1] sd 0:0:1:0: tag#4250 CDB[20]: c1 2c
[  336.026361][ T7770] futex_wake_op: syz.4.962 tries to shift op by 144; fix this program
[  336.059477][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'.
[  336.070325][ T7770] netlink: 'syz.4.962': attribute type 2 has an invalid length.
[  337.289302][ T7783] trusted_key: encrypted_key: insufficient parameters specified
[  337.539112][ T7787] loop5: detected capacity change from 0 to 7
[  337.572767][ T7787] Dev loop5: unable to read RDB block 7
[  337.578653][ T7787]  loop5: unable to read partition table
[  337.585090][ T7787] loop5: partition table beyond EOD, truncated
[  337.592057][ T7787] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  338.130515][ T4182] 
[  338.132897][ T4182] ======================================================
[  338.140186][ T4182] WARNING: possible circular locking dependency detected
[  338.147216][ T4182] syzkaller #0 Not tainted
[  338.151636][ T4182] ------------------------------------------------------
[  338.158648][ T4182] udevd/4182 is trying to acquire lock:
[  338.164186][ T4182] ffff8880218b2938 ((wq_completion)loop5){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0
[  338.173960][ T4182] 
[  338.173960][ T4182] but task is already holding lock:
[  338.181308][ T4182] ffff8880208f1468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  338.190097][ T4182] 
[  338.190097][ T4182] which lock already depends on the new lock.
[  338.190097][ T4182] 
[  338.200493][ T4182] 
[  338.200493][ T4182] the existing dependency chain (in reverse order) is:
[  338.209493][ T4182] 
[  338.209493][ T4182] -> #6 (&lo->lo_mutex){+.+.}-{3:3}:
[  338.216971][ T4182]        __mutex_lock_common+0x1e3/0x2400
[  338.222693][ T4182]        mutex_lock_killable_nested+0x17/0x20
[  338.228765][ T4182]        lo_open+0x6a/0x100
[  338.233284][ T4182]        blkdev_get_whole+0x90/0x390
[  338.238570][ T4182]        blkdev_get_by_dev+0x2d0/0xa60
[  338.244009][ T4182]        blkdev_open+0x12d/0x2c0
[  338.248941][ T4182]        do_dentry_open+0x7ff/0xf80
[  338.254144][ T4182]        path_openat+0x26f5/0x2fa0
[  338.259265][ T4182]        do_filp_open+0x1e2/0x410
[  338.264287][ T4182]        do_sys_openat2+0x150/0x4b0
[  338.269473][ T4182]        __x64_sys_openat+0x135/0x160
[  338.274840][ T4182]        do_syscall_64+0x4c/0xa0
[  338.279765][ T4182]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  338.281619][ T7789] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.964'.
[  338.286176][ T4182] 
[  338.286176][ T4182] -> #5 (&disk->open_mutex){+.+.}-{3:3}:
[  338.303032][ T4182]        __mutex_lock_common+0x1e3/0x2400
[  338.308834][ T4182]        mutex_lock_nested+0x17/0x20
[  338.314109][ T4182]        blkdev_get_by_dev+0x157/0xa60
[  338.319564][ T4182]        swsusp_check+0xa1/0x2b0
[  338.324514][ T4182]        software_resume+0xc6/0x3b0
[  338.329708][ T4182]        resume_store+0xe4/0x130
[  338.334632][ T4182]        kernfs_fop_write_iter+0x379/0x4c0
[  338.340601][ T4182]        vfs_write+0x745/0xd60
[  338.345351][ T4182]        ksys_write+0x152/0x260
[  338.350276][ T4182]        do_syscall_64+0x4c/0xa0
[  338.355201][ T4182]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  338.361603][ T4182] 
[  338.361603][ T4182] -> #4 (system_transition_mutex/1){+.+.}-{3:3}:
[  338.370099][ T4182]        __mutex_lock_common+0x1e3/0x2400
[  338.375819][ T4182]        mutex_lock_nested+0x17/0x20
[  338.381088][ T4182]        software_resume+0x7c/0x3b0
[  338.386397][ T4182]        resume_store+0xe4/0x130
[  338.391325][ T4182]        kernfs_fop_write_iter+0x379/0x4c0
[  338.397122][ T4182]        vfs_write+0x745/0xd60
[  338.401879][ T4182]        ksys_write+0x152/0x260
[  338.406717][ T4182]        do_syscall_64+0x4c/0xa0
[  338.411644][ T4182]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  338.418057][ T4182] 
[  338.418057][ T4182] -> #3 (&of->mutex){+.+.}-{3:3}:
[  338.425246][ T4182]        __mutex_lock_common+0x1e3/0x2400
[  338.431102][ T4182]        mutex_lock_nested+0x17/0x20
[  338.436380][ T4182]        kernfs_seq_start+0x51/0x3c0
[  338.441649][ T4182]        seq_read_iter+0x3c4/0xd50
[  338.446767][ T4182]        vfs_read+0x759/0xd60
[  338.451505][ T4182]        ksys_read+0x152/0x260
[  338.456508][ T4182]        do_syscall_64+0x4c/0xa0
[  338.461431][ T4182]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  338.467829][ T4182] 
[  338.467829][ T4182] -> #2 (&p->lock){+.+.}-{3:3}:
[  338.474860][ T4182]        __mutex_lock_common+0x1e3/0x2400
[  338.480566][ T4182]        mutex_lock_nested+0x17/0x20
[  338.485839][ T4182]        seq_read_iter+0xad/0xd50
[  338.490848][ T4182]        do_iter_readv_writev+0x47e/0x5f0
[  338.496553][ T4182]        do_iter_read+0x20b/0x7c0
[  338.501565][ T4182]        loop_process_work+0x16dd/0x24a0
[  338.507181][ T4182]        process_one_work+0x85f/0x1010
[  338.512626][ T4182]        worker_thread+0xaa6/0x1290
[  338.517810][ T4182]        kthread+0x436/0x520
[  338.522382][ T4182]        ret_from_fork+0x1f/0x30
[  338.527516][ T4182] 
[  338.527516][ T4182] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}:
[  338.536621][ T4182]        process_one_work+0x7bb/0x1010
[  338.542073][ T4182]        worker_thread+0xaa6/0x1290
[  338.547257][ T4182]        kthread+0x436/0x520
[  338.551828][ T4182]        ret_from_fork+0x1f/0x30
[  338.556765][ T4182] 
[  338.556765][ T4182] -> #0 ((wq_completion)loop5){+.+.}-{0:0}:
[  338.564816][ T4182]        __lock_acquire+0x2c42/0x7d10
[  338.570175][ T4182]        lock_acquire+0x19e/0x400
[  338.575185][ T4182]        flush_workqueue+0x16c/0x13d0
[  338.580538][ T4182]        drain_workqueue+0xcf/0x380
[  338.585720][ T4182]        destroy_workqueue+0x7b/0xb20
[  338.591078][ T4182]        __loop_clr_fd+0x234/0xb90
[  338.596189][ T4182]        blkdev_put+0x53f/0x7d0
[  338.601044][ T4182]        blkdev_close+0x76/0xa0
[  338.605877][ T4182]        __fput+0x234/0x930
[  338.610360][ T4182]        task_work_run+0x125/0x1a0
[  338.615452][ T4182]        exit_to_user_mode_loop+0x10f/0x130
[  338.621329][ T4182]        exit_to_user_mode_prepare+0xee/0x180
[  338.627394][ T4182]        syscall_exit_to_user_mode+0x16/0x40
[  338.633363][ T4182]        do_syscall_64+0x58/0xa0
[  338.638286][ T4182]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  338.644699][ T4182] 
[  338.644699][ T4182] other info that might help us debug this:
[  338.644699][ T4182] 
[  338.655008][ T4182] Chain exists of:
[  338.655008][ T4182]   (wq_completion)loop5 --> &disk->open_mutex --> &lo->lo_mutex
[  338.655008][ T4182] 
[  338.668459][ T4182]  Possible unsafe locking scenario:
[  338.668459][ T4182] 
[  338.675893][ T4182]        CPU0                    CPU1
[  338.681486][ T4182]        ----                    ----
[  338.686928][ T4182]   lock(&lo->lo_mutex);
[  338.691166][ T4182]                                lock(&disk->open_mutex);
[  338.698268][ T4182]                                lock(&lo->lo_mutex);
[  338.705040][ T4182]   lock((wq_completion)loop5);
[  338.710043][ T4182] 
[  338.710043][ T4182]  *** DEADLOCK ***
[  338.710043][ T4182] 
[  338.718273][ T4182] 2 locks held by udevd/4182:
[  338.722941][ T4182]  #0: ffff8880207f3d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0
[  338.732238][ T4182]  #1: ffff8880208f1468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  338.741479][ T4182] 
[  338.741479][ T4182] stack backtrace:
[  338.747438][ T4182] CPU: 1 PID: 4182 Comm: udevd Not tainted syzkaller #0
[  338.754353][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  338.764394][ T4182] Call Trace:
[  338.767662][ T4182]  <TASK>
[  338.770698][ T4182]  dump_stack_lvl+0x188/0x250
[  338.775373][ T4182]  ? load_image+0x400/0x400
[  338.779894][ T4182]  ? show_regs_print_info+0x20/0x20
[  338.785106][ T4182]  ? print_circular_bug+0x12b/0x1a0
[  338.790289][ T4182]  check_noncircular+0x296/0x330
[  338.795223][ T4182]  ? add_chain_block+0x940/0x940
[  338.800170][ T4182]  ? lockdep_lock+0xf1/0x1f0
[  338.804834][ T4182]  ? mark_lock+0x94/0x320
[  338.809152][ T4182]  __lock_acquire+0x2c42/0x7d10
[  338.814163][ T4182]  ? __lock_acquire+0x13bc/0x7d10
[  338.819258][ T4182]  ? verify_lock_unused+0x140/0x140
[  338.824440][ T4182]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  338.830417][ T4182]  ? verify_lock_unused+0x140/0x140
[  338.835604][ T4182]  ? memset+0x1e/0x40
[  338.839571][ T4182]  lock_acquire+0x19e/0x400
[  338.844076][ T4182]  ? flush_workqueue+0x150/0x13d0
[  338.849222][ T4182]  ? __mutex_trylock_common+0x155/0x260
[  338.854799][ T4182]  ? read_lock_is_recursive+0x10/0x10
[  338.860181][ T4182]  ? __init_swait_queue_head+0xa5/0x150
[  338.865741][ T4182]  flush_workqueue+0x16c/0x13d0
[  338.870589][ T4182]  ? flush_workqueue+0x150/0x13d0
[  338.875799][ T4182]  ? __lock_acquire+0x7d10/0x7d10
[  338.880967][ T4182]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  338.886957][ T4182]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  338.892432][ T4182]  ? rcu_work_rcufn+0x120/0x120
[  338.897279][ T4182]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  338.902913][ T4182]  ? finish_wait+0xc0/0x1d0
[  338.907416][ T4182]  drain_workqueue+0xcf/0x380
[  338.912260][ T4182]  destroy_workqueue+0x7b/0xb20
[  338.917281][ T4182]  __loop_clr_fd+0x234/0xb90
[  338.921964][ T4182]  ? lo_release+0x172/0x1f0
[  338.926631][ T4182]  ? lo_open+0x100/0x100
[  338.930862][ T4182]  blkdev_put+0x53f/0x7d0
[  338.935656][ T4182]  blkdev_close+0x76/0xa0
[  338.940359][ T4182]  ? blkdev_open+0x2c0/0x2c0
[  338.945073][ T4182]  __fput+0x234/0x930
[  338.949070][ T4182]  task_work_run+0x125/0x1a0
[  338.953976][ T4182]  exit_to_user_mode_loop+0x10f/0x130
[  338.959621][ T4182]  exit_to_user_mode_prepare+0xee/0x180
[  338.965402][ T4182]  syscall_exit_to_user_mode+0x16/0x40
[  338.971002][ T4182]  do_syscall_64+0x58/0xa0
[  338.975702][ T4182]  ? clear_bhb_loop+0x30/0x80
[  338.980707][ T4182]  ? clear_bhb_loop+0x30/0x80
[  338.985516][ T4182]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  338.991432][ T4182] RIP: 0033:0x7f0051a49407
[  338.995943][ T4182] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  339.017930][ T4182] RSP: 002b:00007ffd5c0c5a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[  339.026448][ T4182] RAX: 0000000000000000 RBX: 00007f005195b880 RCX: 00007f0051a49407
[  339.034419][ T4182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  339.042412][ T4182] RBP: 00007f005195b6e8 R08: 0000000000000000 R09: 0000000000000000
[  339.050395][ T4182] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[  339.058459][ T4182] R13: 000055a8959f4410 R14: 0000000000000008 R15: 000055a8959efe20
[  339.066437][ T4182]  </TASK>
[  339.069482][    C1] vkms_vblank_simulate: vblank timer overrun