last executing test programs:

22.767725766s ago: executing program 1 (id=1042):
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10)

17.760617021s ago: executing program 2 (id=1045):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0)
r1 = syz_io_uring_setup(0x49e, &(0x7f0000000500)={0x0, 0x69af, 0x3180, 0x8000, 0x27e}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x680102, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x82, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='vegas\x00', 0x6)
sendmmsg$inet(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet(r5, &(0x7f0000000180)="17", 0x59a, 0x0, 0x0, 0xffffffffffffffa1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003e000b0104000000fddbdf25047c000008003680040002000c00018006000600088e"], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0x2004c014)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:11 2', 0x1b)
close_range(r4, 0xffffffffffffffff, 0x0)

16.630144332s ago: executing program 2 (id=1047):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
syz_open_dev$dri(&(0x7f0000000200), 0xffffffffacecc35e, 0x1690c0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x200008, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
dup(0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)

15.623220392s ago: executing program 3 (id=1048):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$caif_seqpacket(0x25, 0x5, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f0000000580), 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
mount(&(0x7f0000000b40)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0)

15.599557842s ago: executing program 1 (id=1049):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000400)=0x200000000)
write$vhost_msg(r1, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x6b142, 0x0)
mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota')
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000004)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x41, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add89240005c67762675fb308a3d40aa1c788df6"}, 0xd8)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004940)=@delchain={0xd30, 0x64, 0x100, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xd, 0xffff}, {0x0, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0xd04, 0x2, [@TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_ACT={0xc90, 0x1, [@m_police={0x56c, 0x15, 0x0, 0x0, {{0xb}, {0x470, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x6, 0x6, 0xefffffff, {0xf6, 0x1, 0x44ab, 0xb6, 0x400, 0x2}, {0x0, 0x2, 0x4a54, 0x800, 0x401, 0x8}, 0x1, 0x4, 0x1000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0xe1, 0x77c, 0xffffff00, 0x9, 0x7, 0xe1d, 0x8f, 0x7, 0x4d11, 0xc8, 0x7, 0xd, 0x5, 0x4, 0xad, 0xcd3, 0xfff, 0x24000000, 0x5, 0x656, 0x8, 0x9, 0xb, 0x8, 0x1, 0x400, 0xc11, 0x8, 0x3, 0x3, 0xfffffffe, 0xfffffff7, 0x7, 0x3, 0x7, 0x4, 0x4, 0xd8, 0x80000001, 0x74f6, 0x8, 0x0, 0x0, 0x5, 0x2, 0x2, 0x9, 0xffff824a, 0x1, 0xe, 0xffffffff, 0xfffffff9, 0x3, 0x8, 0x3, 0xfffffff9, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd5d8, 0x2df, 0xffffffff, 0x4, 0xfffffff8, 0x8, 0x8, 0x4, 0x3, 0x200, 0x1, 0x1, 0x80000000, 0x7ff, 0x3, 0x2, 0x0, 0x80000000, 0x7e, 0xfab6, 0x5, 0x6, 0xfebf, 0x3, 0x45400000, 0xf5, 0x3, 0x3, 0x40, 0x3, 0xd97, 0x4, 0x10001, 0x7ff, 0x0, 0xe, 0xffffffff, 0x8, 0x401, 0x1, 0xfffffffe, 0xfffffffe, 0x80000001, 0x1, 0xfffffff9, 0x80, 0xffffffff, 0x5, 0x8, 0x9, 0xffffff80, 0x5, 0xfffffffa, 0x7, 0xfffffee8, 0x8, 0x4, 0xc, 0x9, 0x6, 0x7, 0x7ff, 0x0, 0x2, 0x4, 0x6, 0x5, 0x7, 0xc9, 0x4, 0x7, 0x1, 0x2, 0xfffffff8, 0x4, 0x200, 0xb, 0xbc57, 0x1, 0x5, 0x3, 0x10000, 0x36dc, 0x2, 0x0, 0x3, 0xfffffc01, 0x4, 0x5, 0xfffffa33, 0x8, 0x4, 0x7fff, 0x3, 0x7, 0x9, 0x5, 0x10000, 0x4957, 0x6, 0x8, 0xffffffff, 0x2, 0xc886, 0x7, 0x8, 0x9, 0x0, 0x10001, 0x2, 0x6, 0x5, 0x3, 0x1, 0x2, 0x1, 0xc6f, 0x5, 0x1, 0x9e1820bf, 0x2, 0xffff, 0x1c191755, 0x6, 0x8, 0x4, 0x7ff, 0x5, 0x5, 0x0, 0x0, 0x46, 0x9, 0x10001, 0x7fffffff, 0x4, 0x0, 0x4, 0x1, 0x8, 0x1, 0x8000000, 0x2, 0x401, 0x2, 0x4, 0x7fffffff, 0x7, 0x7f4, 0x1, 0x4, 0x3, 0x2, 0x0, 0x3, 0xe89, 0x41c, 0xffff0000, 0x9bf, 0xffff, 0x401, 0x1, 0x9, 0x2, 0x6, 0x1, 0xfffffffd, 0x2, 0xd, 0x0, 0x3, 0x8, 0x0, 0x2, 0x9, 0x2, 0x3, 0x7, 0x6, 0x7, 0x9, 0x3, 0x200, 0x4, 0x8, 0x3, 0x2, 0x8, 0x2, 0x3, 0x7, 0x400, 0x0, 0x0, 0x9]}]]}, {0xd4, 0x6, "607c956f7cef93d7a3cd2a054d59954e545e9a99e95c6a73487c4f49ccc4eeaa0e27028241f60e933bc21318be70431b3ee08b907b2d0a224bff7c8cc5958443764529507c0547f2336f1ccd0f67fb33f2f730566ce745254a6cba7bf0b6eec68513cf94748f7f02f6f925b0b488e30405491cb38861d6da855cadb9f280042a8aaf31a0862a21fd2db1dd90f553983758c51bcd60cd0e31ae089b93f728f100da9f845c69a7f77de0bad6699b5467d09f2e27d1fa118cba9eae92ef390c0cecc4b42fd5bb1ee745439c156ce7b5fd2a"}, {0xc, 0x7, {0x6dfb7ae9731b9c9c, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x74, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}]}, {0x3f, 0x6, "1d1536a8642168d40b42742f86f130d91d891d818f6464c1e922bcfefaf2c6020a683fb365d291cddc1a8c38f7237d2ba676297ac22a9a25a9112e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x190, 0x19, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffc00, 0x3, 0x2, 0x4, 0xf4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1bab, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe61, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7f, 0x8000, 0x7, 0x7, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x197f, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0xaf26a8821264bbd6, 0x0, 0x34d16929}}]}, {0xe9, 0x6, "0ebab4e07802ea50ade010b2574b76873b16707efabf6f5547ec4ce081d4ec6ce03c93033bf0f12a92fdec3475bf21f1e5ce175e95ba9f726e4b9ef5c40682e7df66928eb57bd53c2eaa9d6347640102902fc73018aee0661b80adcbd452023bbd852c806f084d82eeb02c9d8f27990dfdcd13f4adb590ecff4c6f56e322b7e059810df0abaf63a9a203bf967b913c79b3b16fd3bae31a8bac5c6e79fcefa581bb15ecc9160a05e3415f38b75ace42fb807322a53a2865e9c760e746b78f421f4707c62f1b268382caddbdaa95c33524f5d86e7012637d44eaf21ab6e46eb7df5fe24bc08d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x110, 0x12, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0xdd, 0x6, "66c67a4cdffadeb75e59c99e607704ac97e8c843c20da6309b8bffb2d62bca9ca79228528af6c9560636eb6ad82ecef8607b77124d24047644ca5477d738d3362070a06eb0a4b56762c1950c333a185d3ffdd8724b7b7cfde720522a8137a1e77efb2a8ac6d9d053fbe63824a43447b352424bd47da8882492d8ef2bfd81a3d4beced44eb15d7d96d5a31b31df088ca53d6ead63793ce792fda469861dcbabee94f0e3c4a2358bcbfedbaee5aa236a65ebd3ed308880c8f945bb453c58e2411b16ec946b1ebff8ce438082f6298059b06cf6e4aab1a1eac823"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0x1bc, 0x1e, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7f, 0x20000000, 0x80000001, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0xffffffffffffffff, 0x4fa2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x0, 0x6, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6f7, 0x0, 0x3, 0x9, 0xff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x3, 0x5, 0x9, 0x80000000}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x8, 0x4, 0x7fff}, 0x3}}]}, {0xd0, 0x6, "803419ed726441ba04e8f744909e336ee5487130fc05fae0750ec5d657c55421920f020ec95b54765bdacdba0b9865a3d570d0be1190c7dd051b506ef312ef032aa3640a2b7a8e7ce2b2e28d12a795a97488385745bc46e32f032e3f18172e97be4a75f9201634b8708d6c21f661637643d64313affb1883262e474e58471a6e9d5b6a24cb496c1036c55aa41e72e30fc2bb49620fe70099109890877a889e9cbd3e5dd1ce404a89821f99d9ba5cb3850a171834832e2c219ae32227b9b7b3a00ef455a2d90e266f6b396d06"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0xf8, 0x8, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x85f, 0x10000006}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb58}}, @TCA_GACT_PARMS={0x18, 0x2, {0x18, 0x100, 0x5, 0x34, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x8, 0xffffffffffffffff, 0x3, 0x401}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1, 0x1, 0x9, 0x7}}]}, {0x69, 0x6, "2ae94bcb71d38c4d0a22596093aaae7367ccae200aa385d7b8904683c91ed67be21946afcc69788411defe35c074139f88dd28b363cb26cf40b0fcb50b4ff2c49ba9d7c493442038621fc868cdc4123a95ad5d58cc6aee5acc20c0018291ee51542a47181e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x58, 0x14, 0x0, 0x0, {{0x7}, {0x4}, {0x2e, 0x6, "ba3bc965ba9d4d5ae4e543d7c987ab8033091d351fb3d1e5d5cdafb65a790be069b2fa0286ebdbd440af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x100, 0xe, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x100, 0x5, 0xc29c, 0x40}, 0x71e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x639, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcb, 0x3, 0x8, 0x1, 0xfffff7b5}, 0xff}}]}, {0x7a, 0x6, "7305b83c5173e7dc7aafe35f558c076d7a2d71b03bd16aa318291593ef8bd9f3f9b90c05f7e4860afdda44dd0359b58a458e6583fbdef95834c0ddb2ca64f335e0e9fa219196ea82a05470f41a6e6efe71eb6517531579c993ef1a67c95e34310097f113c8acdd38472aea5a939327e74c19c9be6120"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xdf52, 0x6, 0x9, 0x80000000}]}}, @TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xf4, 0x1, 0x6, 0x3}, {0x2, 0x7, 0x20, 0x7f}, {0x7fff, 0x7, 0xff, 0x2}, {0x95, 0xf, 0x7, 0x6}, {0xe9, 0x2b, 0x1, 0x9}]}}]}}]}, 0xd30}}, 0x1000000)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000280)=0xbd2, 0x4)
write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {&(0x7f00000007c0)=""/175, 0xaf, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r1, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48)
close_range(r0, 0xffffffffffffffff, 0x0)

14.104543361s ago: executing program 1 (id=1058):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
syz_pidfd_open(0x0, 0x0)

12.770568826s ago: executing program 3 (id=1052):
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x200000000)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x6b142, 0x0)
mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota')
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000004)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x41, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add89240005c67762675fb308a3d40aa1c788df6"}, 0xd8)
write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f00000007c0)=""/175, 0xaf, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48)

12.729277787s ago: executing program 2 (id=1053):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socketpair(0xf, 0x5, 0x7, &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]})
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc})
read$FUSE(r4, &(0x7f000000a400)={0x2020, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x2b, 0x3ff7400, 0x12008010}}, 0x50)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0)
writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21)
write$char_usb(r1, &(0x7f0000001300)='7', 0x1)
write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1)
syz_usb_disconnect(r0)

12.224711857s ago: executing program 3 (id=1054):
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)

8.679691634s ago: executing program 0 (id=1055):
sched_setscheduler(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000100)={0x10, 0x8, 0xf2c8})
write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c)
read$hiddev(r3, &(0x7f0000000040)=""/117, 0x75)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
dup3(r5, r4, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000)

5.830969179s ago: executing program 3 (id=1056):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0)
r1 = syz_io_uring_setup(0x49e, &(0x7f0000000500)={0x0, 0x69af, 0x3180, 0x8000, 0x27e}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x680102, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x82, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='vegas\x00', 0x6)
sendmmsg$inet(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet(r5, &(0x7f0000000180)="17", 0x59a, 0x0, 0x0, 0xffffffffffffffa1)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r6, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:11 2', 0x1b)
close_range(r4, 0xffffffffffffffff, 0x0)

5.802364269s ago: executing program 2 (id=1057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32], 0x40}}, 0x8080)

5.701207981s ago: executing program 0 (id=1059):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0)
r1 = syz_io_uring_setup(0x49e, &(0x7f0000000500)={0x0, 0x69af, 0x3180, 0x8000, 0x27e}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x680102, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x82, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='vegas\x00', 0x6)
sendmmsg$inet(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet(r5, &(0x7f0000000180)="17", 0x59a, 0x0, 0x0, 0xffffffffffffffa1)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r6, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:11 2', 0x1b)
close_range(r4, 0xffffffffffffffff, 0x0)

4.685265171s ago: executing program 2 (id=1060):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, 0x0, &(0x7f0000000180)='%pK    \x00'}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
eventfd2(0x3, 0x80000)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0)
read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0xffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r8, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080)

4.19139349s ago: executing program 1 (id=1061):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x34325852, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0x19c}, {0xfffffffc, 0x80001}]}})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
shutdown(r9, 0x1)
ioctl$FBIOGETCMAP(r8, 0x4604, 0x0)

3.783847728s ago: executing program 3 (id=1062):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x10001, 0x483d, 0x5, 0xa, 0x8, 0x0, 0x2, 0xb, 0xfa, 0x0, 0x80, 0x6, 0xfffffffffffff92c}, {0x4f25, 0x4, 0x0, 0x8, 0x9e, 0x2, 0x2, 0xf6, 0xe5, 0xfb, 0x8, 0x3, 0x4}, {0x7, 0x3, 0x4, 0xd8, 0xf8, 0x3, 0x5, 0x3, 0x7, 0x3, 0x6, 0x40, 0x8}], 0xffffffff})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x5, 0x1009, 0x6, 0x3, 0x40, 0x2, 0x2, 0x9, 0x1, 0x4, 0x2, 0x9, 0x200}, {0xfffffffe, 0x80, 0x7, 0x0, 0x1, 0x6, 0x9, 0xff, 0x1, 0x1, 0x9, 0xf, 0x9}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0x0, 0x87, 0x5, 0x1, 0x2, 0x3}], 0xf87})

3.763073498s ago: executing program 0 (id=1063):
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x200000000)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x6b142, 0x0)
mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota')
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000004)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x41, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add89240005c67762675fb308a3d40aa1c788df6"}, 0xd8)
write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f00000007c0)=""/175, 0xaf, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48)

2.561159781s ago: executing program 1 (id=1064):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000400)=0x200000000)
write$vhost_msg(r1, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x6b142, 0x0)
mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota')
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000004)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x41, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add89240005c67762675fb308a3d40aa1c788df6"}, 0xd8)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004940)=@delchain={0xd30, 0x64, 0x100, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xd, 0xffff}, {0x0, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0xd04, 0x2, [@TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_ACT={0xc90, 0x1, [@m_police={0x56c, 0x15, 0x0, 0x0, {{0xb}, {0x470, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x6, 0x6, 0xefffffff, {0xf6, 0x1, 0x44ab, 0xb6, 0x400, 0x2}, {0x0, 0x2, 0x4a54, 0x800, 0x401, 0x8}, 0x1, 0x4, 0x1000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0xe1, 0x77c, 0xffffff00, 0x9, 0x7, 0xe1d, 0x8f, 0x7, 0x4d11, 0xc8, 0x7, 0xd, 0x5, 0x4, 0xad, 0xcd3, 0xfff, 0x24000000, 0x5, 0x656, 0x8, 0x9, 0xb, 0x8, 0x1, 0x400, 0xc11, 0x8, 0x3, 0x3, 0xfffffffe, 0xfffffff7, 0x7, 0x3, 0x7, 0x4, 0x4, 0xd8, 0x80000001, 0x74f6, 0x8, 0x0, 0x0, 0x5, 0x2, 0x2, 0x9, 0xffff824a, 0x1, 0xe, 0xffffffff, 0xfffffff9, 0x3, 0x8, 0x3, 0xfffffff9, 0x1, 0x6, 0xffffffff, 0x80000000, 0xd5d8, 0x2df, 0xffffffff, 0x4, 0xfffffff8, 0x8, 0x8, 0x4, 0x3, 0x200, 0x1, 0x1, 0x80000000, 0x7ff, 0x3, 0x2, 0x0, 0x80000000, 0x7e, 0xfab6, 0x5, 0x6, 0xfebf, 0x3, 0x45400000, 0xf5, 0x3, 0x3, 0x40, 0x3, 0xd97, 0x4, 0x10001, 0x7ff, 0x0, 0xe, 0xffffffff, 0x8, 0x401, 0x1, 0xfffffffe, 0xfffffffe, 0x80000001, 0x1, 0xfffffff9, 0x80, 0xffffffff, 0x5, 0x8, 0x9, 0xffffff80, 0x5, 0xfffffffa, 0x7, 0xfffffee8, 0x8, 0x4, 0xc, 0x9, 0x6, 0x7, 0x7ff, 0x0, 0x2, 0x4, 0x6, 0x5, 0x7, 0xc9, 0x4, 0x7, 0x1, 0x2, 0xfffffff8, 0x4, 0x200, 0xb, 0xbc57, 0x1, 0x5, 0x3, 0x10000, 0x36dc, 0x2, 0x0, 0x3, 0xfffffc01, 0x4, 0x5, 0xfffffa33, 0x8, 0x4, 0x7fff, 0x3, 0x7, 0x9, 0x5, 0x10000, 0x4957, 0x6, 0x8, 0xffffffff, 0x2, 0xc886, 0x7, 0x8, 0x9, 0x0, 0x10001, 0x2, 0x6, 0x5, 0x3, 0x1, 0x2, 0x1, 0xc6f, 0x5, 0x1, 0x9e1820bf, 0x2, 0xffff, 0x1c191755, 0x6, 0x8, 0x4, 0x7ff, 0x5, 0x5, 0x0, 0x0, 0x46, 0x9, 0x10001, 0x7fffffff, 0x4, 0x0, 0x4, 0x1, 0x8, 0x1, 0x8000000, 0x2, 0x401, 0x2, 0x4, 0x7fffffff, 0x7, 0x7f4, 0x1, 0x4, 0x3, 0x2, 0x0, 0x3, 0xe89, 0x41c, 0xffff0000, 0x9bf, 0xffff, 0x401, 0x1, 0x9, 0x2, 0x6, 0x1, 0xfffffffd, 0x2, 0xd, 0x0, 0x3, 0x8, 0x0, 0x2, 0x9, 0x2, 0x3, 0x7, 0x6, 0x7, 0x9, 0x3, 0x200, 0x4, 0x8, 0x3, 0x2, 0x8, 0x2, 0x3, 0x7, 0x400, 0x0, 0x0, 0x9]}]]}, {0xd4, 0x6, "607c956f7cef93d7a3cd2a054d59954e545e9a99e95c6a73487c4f49ccc4eeaa0e27028241f60e933bc21318be70431b3ee08b907b2d0a224bff7c8cc5958443764529507c0547f2336f1ccd0f67fb33f2f730566ce745254a6cba7bf0b6eec68513cf94748f7f02f6f925b0b488e30405491cb38861d6da855cadb9f280042a8aaf31a0862a21fd2db1dd90f553983758c51bcd60cd0e31ae089b93f728f100da9f845c69a7f77de0bad6699b5467d09f2e27d1fa118cba9eae92ef390c0cecc4b42fd5bb1ee745439c156ce7b5fd2a"}, {0xc, 0x7, {0x6dfb7ae9731b9c9c, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x74, 0x1d, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}]}, {0x3f, 0x6, "1d1536a8642168d40b42742f86f130d91d891d818f6464c1e922bcfefaf2c6020a683fb365d291cddc1a8c38f7237d2ba676297ac22a9a25a9112e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x190, 0x19, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffc00, 0x3, 0x2, 0x4, 0xf4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1bab, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe61, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7f, 0x8000, 0x7, 0x7, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x197f, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0xaf26a8821264bbd6, 0x0, 0x34d16929}}]}, {0xe9, 0x6, "0ebab4e07802ea50ade010b2574b76873b16707efabf6f5547ec4ce081d4ec6ce03c93033bf0f12a92fdec3475bf21f1e5ce175e95ba9f726e4b9ef5c40682e7df66928eb57bd53c2eaa9d6347640102902fc73018aee0661b80adcbd452023bbd852c806f084d82eeb02c9d8f27990dfdcd13f4adb590ecff4c6f56e322b7e059810df0abaf63a9a203bf967b913c79b3b16fd3bae31a8bac5c6e79fcefa581bb15ecc9160a05e3415f38b75ace42fb807322a53a2865e9c760e746b78f421f4707c62f1b268382caddbdaa95c33524f5d86e7012637d44eaf21ab6e46eb7df5fe24bc08d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x110, 0x12, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0xdd, 0x6, "66c67a4cdffadeb75e59c99e607704ac97e8c843c20da6309b8bffb2d62bca9ca79228528af6c9560636eb6ad82ecef8607b77124d24047644ca5477d738d3362070a06eb0a4b56762c1950c333a185d3ffdd8724b7b7cfde720522a8137a1e77efb2a8ac6d9d053fbe63824a43447b352424bd47da8882492d8ef2bfd81a3d4beced44eb15d7d96d5a31b31df088ca53d6ead63793ce792fda469861dcbabee94f0e3c4a2358bcbfedbaee5aa236a65ebd3ed308880c8f945bb453c58e2411b16ec946b1ebff8ce438082f6298059b06cf6e4aab1a1eac823"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mirred={0x1bc, 0x1e, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7f, 0x20000000, 0x80000001, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0xffffffffffffffff, 0x4fa2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x0, 0x6, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6f7, 0x0, 0x3, 0x9, 0xff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x3, 0x5, 0x9, 0x80000000}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x8, 0x4, 0x7fff}, 0x3}}]}, {0xd0, 0x6, "803419ed726441ba04e8f744909e336ee5487130fc05fae0750ec5d657c55421920f020ec95b54765bdacdba0b9865a3d570d0be1190c7dd051b506ef312ef032aa3640a2b7a8e7ce2b2e28d12a795a97488385745bc46e32f032e3f18172e97be4a75f9201634b8708d6c21f661637643d64313affb1883262e474e58471a6e9d5b6a24cb496c1036c55aa41e72e30fc2bb49620fe70099109890877a889e9cbd3e5dd1ce404a89821f99d9ba5cb3850a171834832e2c219ae32227b9b7b3a00ef455a2d90e266f6b396d06"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0xf8, 0x8, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x85f, 0x10000006}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb58}}, @TCA_GACT_PARMS={0x18, 0x2, {0x18, 0x100, 0x5, 0x34, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x8, 0xffffffffffffffff, 0x3, 0x401}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1, 0x1, 0x9, 0x7}}]}, {0x69, 0x6, "2ae94bcb71d38c4d0a22596093aaae7367ccae200aa385d7b8904683c91ed67be21946afcc69788411defe35c074139f88dd28b363cb26cf40b0fcb50b4ff2c49ba9d7c493442038621fc868cdc4123a95ad5d58cc6aee5acc20c0018291ee51542a47181e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x58, 0x14, 0x0, 0x0, {{0x7}, {0x4}, {0x2e, 0x6, "ba3bc965ba9d4d5ae4e543d7c987ab8033091d351fb3d1e5d5cdafb65a790be069b2fa0286ebdbd440af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x100, 0xe, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x100, 0x5, 0xc29c, 0x40}, 0x71e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x639, 0x2}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcb, 0x3, 0x8, 0x1, 0xfffff7b5}, 0xff}}]}, {0x7a, 0x6, "7305b83c5173e7dc7aafe35f558c076d7a2d71b03bd16aa318291593ef8bd9f3f9b90c05f7e4860afdda44dd0359b58a458e6583fbdef95834c0ddb2ca64f335e0e9fa219196ea82a05470f41a6e6efe71eb6517531579c993ef1a67c95e34310097f113c8acdd38472aea5a939327e74c19c9be6120"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xdf52, 0x6, 0x9, 0x80000000}]}}, @TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xf4, 0x1, 0x6, 0x3}, {0x2, 0x7, 0x20, 0x7f}, {0x7fff, 0x7, 0xff, 0x2}, {0x95, 0xf, 0x7, 0x6}, {0xe9, 0x2b, 0x1, 0x9}]}}]}}]}, 0xd30}}, 0x1000000)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000280)=0xbd2, 0x4)
write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {&(0x7f00000007c0)=""/175, 0xaf, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r1, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48)
close_range(r0, 0xffffffffffffffff, 0x0)

2.500379102s ago: executing program 0 (id=1065):
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'mpc624\x00', [0x3c4, 0x13, 0xff, 0x1000, 0x14000000, 0x0, 0xfffffffc, 0x6, 0x8, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x3, 0x403, 0x9, 0x200, 0x1, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6, 0x1000000]})
openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x100)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r4, r4, 0x0, 0x9)
socket$nl_route(0x10, 0x3, 0x0)

2.360233495s ago: executing program 3 (id=1066):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$caif_seqpacket(0x25, 0x5, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r2, &(0x7f0000000580), 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
mount(&(0x7f0000000b40)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0)

2.351720435s ago: executing program 2 (id=1067):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socketpair(0xf, 0x5, 0x7, &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]})
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc})
read$FUSE(r4, &(0x7f000000a400)={0x2020, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x2b, 0x3ff7400, 0x12008010}}, 0x50)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0)
writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21)
write$char_usb(r1, &(0x7f0000001300)='7', 0x1)
write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1)
syz_usb_disconnect(r0)

1.011816291s ago: executing program 0 (id=1068):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32], 0x40}}, 0x8080)

930.349542ms ago: executing program 1 (id=1069):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
syz_pidfd_open(0x0, 0x0)

0s ago: executing program 0 (id=1070):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
syz_pidfd_open(0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts.
syzkaller login: [   82.167139][ T5773] cgroup: Unknown subsys name 'net'
[   82.301547][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.031584][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.837717][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.863993][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.879062][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.881508][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.894612][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.902586][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.910665][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.917646][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.922341][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.925640][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.933954][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.940366][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.948291][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.953832][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.961539][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.969126][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   85.976365][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.981934][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.995593][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   85.996220][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.004231][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.011386][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   86.020582][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.024955][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.444958][ T5789] chnl_net:caif_netlink_parms(): no params data found
[   86.650377][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.657719][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.666394][ T5789] bridge_slave_0: entered allmulticast mode
[   86.674505][ T5789] bridge_slave_0: entered promiscuous mode
[   86.686988][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.694302][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.701512][ T5789] bridge_slave_1: entered allmulticast mode
[   86.708815][ T5789] bridge_slave_1: entered promiscuous mode
[   86.716386][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   86.823644][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.871125][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.896551][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   86.966519][ T5789] team0: Port device team_slave_0 added
[   86.973035][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   87.010454][ T5789] team0: Port device team_slave_1 added
[   87.143921][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.151230][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.160966][ T5785] bridge_slave_0: entered allmulticast mode
[   87.169401][ T5785] bridge_slave_0: entered promiscuous mode
[   87.178561][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.186724][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.213716][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.254162][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.261359][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.269845][ T5787] bridge_slave_0: entered allmulticast mode
[   87.277461][ T5787] bridge_slave_0: entered promiscuous mode
[   87.286729][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.294108][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.301381][ T5785] bridge_slave_1: entered allmulticast mode
[   87.311109][ T5785] bridge_slave_1: entered promiscuous mode
[   87.334580][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.341589][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.367937][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.379464][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.386831][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.395286][ T5786] bridge_slave_0: entered allmulticast mode
[   87.403083][ T5786] bridge_slave_0: entered promiscuous mode
[   87.410974][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.419073][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.427642][ T5787] bridge_slave_1: entered allmulticast mode
[   87.435497][ T5787] bridge_slave_1: entered promiscuous mode
[   87.480886][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.489665][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.497681][ T5786] bridge_slave_1: entered allmulticast mode
[   87.506702][ T5786] bridge_slave_1: entered promiscuous mode
[   87.532698][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.553021][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.599936][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.629910][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.642288][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.701157][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.732956][ T5789] hsr_slave_0: entered promiscuous mode
[   87.739910][ T5789] hsr_slave_1: entered promiscuous mode
[   87.775994][ T5787] team0: Port device team_slave_0 added
[   87.812939][ T5785] team0: Port device team_slave_0 added
[   87.821351][ T5787] team0: Port device team_slave_1 added
[   87.830386][ T5786] team0: Port device team_slave_0 added
[   87.856111][ T5785] team0: Port device team_slave_1 added
[   87.884058][ T5786] team0: Port device team_slave_1 added
[   87.966472][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.973573][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.000570][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.014930][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.022004][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.033587][ T5802] Bluetooth: hci1: command tx timeout
[   88.050433][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.070296][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.077417][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.103879][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.115028][ T5802] Bluetooth: hci2: command tx timeout
[   88.115844][   T50] Bluetooth: hci3: command tx timeout
[   88.120695][ T5802] Bluetooth: hci0: command tx timeout
[   88.133588][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.140595][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.167392][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.180638][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.187905][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.214210][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.226343][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.233464][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.260474][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.358981][ T5787] hsr_slave_0: entered promiscuous mode
[   88.366240][ T5787] hsr_slave_1: entered promiscuous mode
[   88.373431][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.381420][ T5787] Cannot create hsr debugfs directory
[   88.413702][ T5786] hsr_slave_0: entered promiscuous mode
[   88.420157][ T5786] hsr_slave_1: entered promiscuous mode
[   88.426905][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.434932][ T5786] Cannot create hsr debugfs directory
[   88.489737][ T5785] hsr_slave_0: entered promiscuous mode
[   88.497765][ T5785] hsr_slave_1: entered promiscuous mode
[   88.504424][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.512011][ T5785] Cannot create hsr debugfs directory
[   88.839016][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.875806][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.886431][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.923780][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.017859][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.028784][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.050153][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.061755][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.111648][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.124628][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.150617][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.170845][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.264195][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.294831][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.305694][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.318918][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.417763][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.484732][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[   89.496800][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.530909][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.538888][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.576887][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   89.598973][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.606320][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.625570][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.644980][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.678330][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.685569][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.697281][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.704518][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.788074][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   89.800351][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   89.835621][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.842847][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.869620][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.876879][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.891004][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.898246][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.938512][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.945771][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.998493][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.112965][ T5802] Bluetooth: hci1: command tx timeout
[   90.194624][ T5802] Bluetooth: hci0: command tx timeout
[   90.200148][ T5802] Bluetooth: hci3: command tx timeout
[   90.201605][   T50] Bluetooth: hci2: command tx timeout
[   90.319349][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.467377][ T5789] veth0_vlan: entered promiscuous mode
[   90.524775][ T5789] veth1_vlan: entered promiscuous mode
[   90.607956][ T5789] veth0_macvtap: entered promiscuous mode
[   90.626023][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.645857][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.658711][ T5789] veth1_macvtap: entered promiscuous mode
[   90.679397][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.709142][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.746289][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.787336][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.797297][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.806669][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.815659][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.878932][ T5786] veth0_vlan: entered promiscuous mode
[   90.958708][ T5787] veth0_vlan: entered promiscuous mode
[   90.981443][ T5786] veth1_vlan: entered promiscuous mode
[   91.001450][ T5787] veth1_vlan: entered promiscuous mode
[   91.008022][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.020478][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.025231][ T5785] veth0_vlan: entered promiscuous mode
[   91.084095][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.101325][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.101733][ T5785] veth1_vlan: entered promiscuous mode
[   91.167641][ T5787] veth0_macvtap: entered promiscuous mode
[   91.197211][ T5787] veth1_macvtap: entered promiscuous mode
[   91.206113][ T5786] veth0_macvtap: entered promiscuous mode
[   91.230900][ T5785] veth0_macvtap: entered promiscuous mode
[   91.248689][ T5786] veth1_macvtap: entered promiscuous mode
[   91.278849][ T5785] veth1_macvtap: entered promiscuous mode
[   91.289972][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.303099][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.317023][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.347257][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.383300][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.405508][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.418444][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.434280][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.445297][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.457330][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.470837][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.509266][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.525122][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.538968][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.552319][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.574658][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.589652][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.598769][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.610008][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.618879][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.635563][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.646782][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.657181][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.667861][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.678641][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.689165][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.702427][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.720462][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.729385][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.738507][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.747317][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.767464][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.778137][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.788968][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.800038][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.811142][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.821842][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.833778][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.845802][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.854702][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.855008][   T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   91.870410][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.880578][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.025686][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.043542][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.053532][   T27] usb 2-1: Using ep0 maxpacket: 16
[   92.072629][   T27] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[   92.092391][   T27] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   92.117478][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.125661][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.125699][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.142963][   T27] usb 2-1: Product: syz
[   92.147189][   T27] usb 2-1: Manufacturer: syz
[   92.151932][   T27] usb 2-1: SerialNumber: syz
[   92.190020][   T27] usb 2-1: config 0 descriptor??
[   92.202744][   T50] Bluetooth: hci1: command tx timeout
[   92.228745][  T788] cfg80211: failed to load regulatory.db
[   92.238323][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.250110][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.273102][   T50] Bluetooth: hci2: command tx timeout
[   92.282821][ T5799] Bluetooth: hci0: command tx timeout
[   92.288362][   T50] Bluetooth: hci3: command tx timeout
[   92.330894][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.339425][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.385085][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.401566][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.465728][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.499815][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.572004][ T5881] syz.0.1[5881]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   92.614751][ T5881] loop0: detected capacity change from 0 to 512
[   92.779554][ T5881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.921486][ T5881] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.396439][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   93.406568][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   93.498916][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   93.507947][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.672154][    C0] sched: RT throttling activated
[   94.687294][   T50] Bluetooth: hci1: command tx timeout
[   94.693029][   T50] Bluetooth: hci3: command tx timeout
[   94.698592][   T50] Bluetooth: hci0: command tx timeout
[   94.781742][   T50] Bluetooth: hci2: command tx timeout
[   95.393333][ T5896] usb 2-1: USB disconnect, device number 2
[   95.671339][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.017473][ T5909] binder: 5902:5909 ioctl c0306201 200000000780 returned -11
[   96.039645][ T5909] loop3: detected capacity change from 0 to 128
[  100.504111][   T28] audit: type=1326 audit(1757730075.468:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a278eba9 code=0x7ffc0000
[  100.585644][ T5940] loop0: detected capacity change from 0 to 1024
[  100.592566][   T28] audit: type=1326 audit(1757730075.478:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a278eba9 code=0x7ffc0000
[  100.637066][   T28] audit: type=1326 audit(1757730075.478:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff0a278eba9 code=0x7ffc0000
[  100.666842][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  100.699633][ T5940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.760664][   T28] audit: type=1326 audit(1757730075.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a278eba9 code=0x7ffc0000
[  100.783540][   T28] audit: type=1326 audit(1757730075.498:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a278eba9 code=0x7ffc0000
[  100.810710][   T28] audit: type=1326 audit(1757730075.498:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff0a278eba9 code=0x7ffc0000
[  100.833142][   T28] audit: type=1326 audit(1757730075.498:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a278eba9 code=0x7ffc0000
[  100.855446][   T28] audit: type=1326 audit(1757730075.498:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a278eba9 code=0x7ffc0000
[  100.983962][ T5940] EXT4-fs error (device loop0): ext4_get_first_dir_block:3606: inode #11: comm syz.0.17: directory missing '..'
[  100.996921][   T28] audit: type=1326 audit(1757730075.498:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0a278eba9 code=0x7ffc0000
[  101.073266][   T28] audit: type=1326 audit(1757730075.508:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a278eba9 code=0x7ffc0000
[  101.147483][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.074310][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  103.616922][ T5956] loop3: detected capacity change from 0 to 128
[  103.657220][ T5956] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  103.738876][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  103.843530][ T5956] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  104.076556][ T5961] binder: 5954:5961 ioctl c0306201 200000000780 returned -11
[  104.109556][ T5961] loop0: detected capacity change from 0 to 128
[  104.705406][ T5956] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  105.479670][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  105.488675][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.684924][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.716967][ T5971] loop1: detected capacity change from 0 to 1764
[  106.781157][ T5981] loop1: detected capacity change from 0 to 40427
[  106.791642][ T5981] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  106.799773][ T5981] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  106.820476][ T5981] F2FS-fs (loop1): invalid crc value
[  106.836663][ T5973] loop3: detected capacity change from 0 to 32768
[  106.856832][ T5981] F2FS-fs (loop1): Found nat_bits in checkpoint
[  106.929490][ T5981] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  106.936934][ T5981] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  109.817400][ T6002] loop2: detected capacity change from 0 to 1764
[  110.141954][ T6005] loop3: detected capacity change from 0 to 64
[  111.388507][ T6014] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  112.081458][ T6021] loop2: detected capacity change from 0 to 32768
[  112.562291][ T6023] loop0: detected capacity change from 0 to 32768
[  114.115032][ T6038] syz.3.48 (6038) used greatest stack depth: 17960 bytes left
[  114.441092][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.582975][ T6043] loop2: detected capacity change from 0 to 32768
[  115.652586][ T6043] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.898386][ T6043] XFS (loop2): Ending clean mount
[  115.942841][ T6043] XFS (loop2): Quotacheck needed: Please wait.
[  116.021857][ T6065] syzkaller0: entered promiscuous mode
[  116.037079][ T6065] syzkaller0: entered allmulticast mode
[  116.045260][ T6043] XFS (loop2): Quotacheck: Done.
[  116.154950][ T6068] vivid-000: disconnect
[  116.590023][ T5786] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  116.715497][ T6061] vivid-000: reconnect
[  117.202990][ T6074] loop0: detected capacity change from 0 to 1764
[  119.029841][ T6072] loop1: detected capacity change from 0 to 32768
[  120.089673][ T6103] syzkaller0: entered promiscuous mode
[  120.154831][ T6103] syzkaller0: entered allmulticast mode
[  120.648713][ T6119] vivid-002: disconnect
[  121.266158][ T6114] vivid-002: reconnect
[  122.299207][ T6127] loop1: detected capacity change from 0 to 1764
[  124.386344][ T6150] Zero length message leads to an empty skb
[  126.797585][ T6166] vivid-002: disconnect
[  126.901271][ T6168] loop3: detected capacity change from 0 to 1764
[  127.719210][ T6162] vivid-002: reconnect
[  130.690851][ T6190] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  130.720478][ T6190] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  131.904240][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'.
[  132.016485][ T6185] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  132.024393][ T6185] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  132.078289][ T6185] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  132.099723][ T6185] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  132.108858][ T6185] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  132.155059][ T6185] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  132.207483][ T6185] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  132.227305][ T6185] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  132.273664][ T6185] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  132.311853][ T6201] loop1: detected capacity change from 0 to 1764
[  132.323261][ T6185] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  132.334337][ T6185] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  132.373554][ T6185] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  132.389769][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  132.389784][   T28] audit: type=1326 audit(1757730107.358:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706eb8eba9 code=0x7ffc0000
[  132.552069][   T28] audit: type=1326 audit(1757730107.398:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706eb8eba9 code=0x7ffc0000
[  132.578229][   T28] audit: type=1326 audit(1757730107.398:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f706eb8eba9 code=0x7ffc0000
[  132.578268][   T28] audit: type=1326 audit(1757730107.398:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706eb8eba9 code=0x7ffc0000
[  132.578300][   T28] audit: type=1326 audit(1757730107.398:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706eb8eba9 code=0x7ffc0000
[  132.578333][   T28] audit: type=1326 audit(1757730107.398:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f706eb8eba9 code=0x7ffc0000
[  132.578364][   T28] audit: type=1326 audit(1757730107.398:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706eb8eba9 code=0x7ffc0000
[  132.578395][   T28] audit: type=1326 audit(1757730107.398:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706eb8eba9 code=0x7ffc0000
[  132.578427][   T28] audit: type=1326 audit(1757730107.398:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f706eb8eba9 code=0x7ffc0000
[  132.578458][   T28] audit: type=1326 audit(1757730107.398:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f706eb8eba9 code=0x7ffc0000
[  133.155107][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  133.162657][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  134.032997][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  134.112296][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  134.399066][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout
[  134.408706][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  136.112341][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  136.192263][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  136.432384][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  136.433121][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout
[  136.668366][ T6244] loop0: detected capacity change from 0 to 1764
[  137.079248][ T6250] vivid-001: disconnect
[  137.227405][ T6252] syzkaller0: entered promiscuous mode
[  137.234294][ T6252] syzkaller0: entered allmulticast mode
[  137.485543][ T6254] loop1: detected capacity change from 0 to 512
[  137.525799][ T6254] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  137.556181][ T6254] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  137.625258][ T6254] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  137.654566][ T6254] EXT4-fs (loop1): 1 truncate cleaned up
[  137.658814][ T6245] vivid-001: reconnect
[  137.661819][ T6254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.083544][   T28] kauditd_printk_skb: 37 callbacks suppressed
[  138.083843][   T28] audit: type=1800 audit(1757730113.048:77): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="bus" dev="loop1" ino=18 res=0 errno=0
[  138.192314][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout
[  138.282970][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout
[  138.512412][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  138.518550][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout
[  138.548217][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.740339][ T6274] loop0: detected capacity change from 0 to 1764
[  140.572674][ T6286] syzkaller0: entered promiscuous mode
[  140.598778][ T6286] syzkaller0: entered allmulticast mode
[  140.920151][ T6295] vivid-002: disconnect
[  141.499939][ T6288] vivid-002: reconnect
[  142.216901][ T6308] loop1: detected capacity change from 0 to 512
[  142.302277][ T6308] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  143.318173][ T6308] EXT4-fs (loop1): 1 truncate cleaned up
[  143.347399][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.551686][   T28] audit: type=1800 audit(1757730118.518:78): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.117" name="bus" dev="loop1" ino=18 res=0 errno=0
[  144.484953][ T6322] loop0: detected capacity change from 0 to 1764
[  145.611648][ T6342] vivid-001: disconnect
[  145.755470][ T6344] netlink: 88 bytes leftover after parsing attributes in process `syz.2.126'.
[  145.858271][ T6344] netlink: 'syz.2.126': attribute type 21 has an invalid length.
[  145.866672][ T6344] netlink: 128 bytes leftover after parsing attributes in process `syz.2.126'.
[  145.883061][ T6344] netlink: 'syz.2.126': attribute type 4 has an invalid length.
[  145.890823][ T6344] netlink: 3 bytes leftover after parsing attributes in process `syz.2.126'.
[  145.956763][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.245195][ T6335] vivid-001: reconnect
[  147.400013][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout
[  147.426871][ T6334] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  147.989660][ T6334] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  148.025921][ T6334] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  148.055426][ T6334] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  148.891751][ T6360] loop0: detected capacity change from 0 to 1764
[  149.582266][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout
[  149.609832][ T6372] ªªªªªª: renamed from wg2 (while UP)
[  150.112247][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout
[  150.118521][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout
[  152.282002][ T6368] loop3: detected capacity change from 0 to 32768
[  153.642382][ T6397] loop0: detected capacity change from 0 to 1764
[  154.432445][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout
[  155.409625][ T6384] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  156.362333][ T6384] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  156.672913][ T6384] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  156.681284][ T6384] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  157.504921][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout
[  158.158831][ T6425] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  158.753933][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout
[  158.760201][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout
[  159.170985][ T6433] loop0: detected capacity change from 0 to 1764
[  159.781337][ T6438] loop0: detected capacity change from 0 to 1764
[  160.044169][ T6440] loop3: detected capacity change from 0 to 512
[  160.222015][ T6440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  160.308508][ T6440] EXT4-fs (loop3): 1 truncate cleaned up
[  160.352963][ T6440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.772758][ T6445] loop1: detected capacity change from 0 to 512
[  160.809189][ T6445] =======================================================
[  160.809189][ T6445] WARNING: The mand mount option has been deprecated and
[  160.809189][ T6445]          and is ignored by this kernel. Remove the mand
[  160.809189][ T6445]          option from the mount to silence this warning.
[  160.809189][ T6445] =======================================================
[  160.882592][ T6445] EXT4-fs: Ignoring removed mblk_io_submit option
[  160.922718][   T28] audit: type=1800 audit(1757730135.858:79): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.154" name="bus" dev="loop3" ino=18 res=0 errno=0
[  160.932252][ T6445] EXT4-fs: Invalid want_extra_isize 1
[  161.759785][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.178214][  T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  162.442326][  T788] usb 2-1: Using ep0 maxpacket: 32
[  162.457846][  T788] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  162.485342][  T788] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  162.505844][ T6461] vivid-004: disconnect
[  162.506316][  T788] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  162.522827][  T788] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  162.536349][  T788] usb 2-1: config 0 interface 0 has no altsetting 0
[  162.546644][  T788] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  162.556421][  T788] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  162.565224][  T788] usb 2-1: Product: syz
[  162.569583][  T788] usb 2-1: Manufacturer: syz
[  162.574419][  T788] usb 2-1: SerialNumber: syz
[  162.582042][  T788] usb 2-1: config 0 descriptor??
[  162.595945][  T788] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  162.614825][  T788] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  162.632523][ T6463] syzkaller0: entered promiscuous mode
[  162.639037][ T6463] syzkaller0: entered allmulticast mode
[  162.760743][ T6452] vivid-004: reconnect
[  164.479151][ T6479] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  164.490727][ T6480] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  165.144080][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  166.765737][  T787] usb 2-1: USB disconnect, device number 3
[  168.044514][  T787] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  169.170798][ T6488] loop3: detected capacity change from 0 to 512
[  169.184533][ T6488] EXT4-fs: Ignoring removed mblk_io_submit option
[  169.222346][ T6488] EXT4-fs: Invalid want_extra_isize 1
[  169.314567][ T6482] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  169.993962][ T6497] syzkaller0: entered promiscuous mode
[  170.015182][ T6497] syzkaller0: entered allmulticast mode
[  170.920270][ T6508] vivid-004: disconnect
[  171.126043][ T6498] vivid-004: reconnect
[  171.415147][ T6513] loop1: detected capacity change from 0 to 512
[  171.452520][ T6513] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  171.487873][ T6513] EXT4-fs (loop1): 1 truncate cleaned up
[  171.513524][ T6513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.741482][   T28] audit: type=1800 audit(1757730146.708:80): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.174" name="bus" dev="loop1" ino=18 res=0 errno=0
[  172.538090][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.168052][ T6521] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  174.173586][ T6533] loop1: detected capacity change from 0 to 512
[  174.182503][ T6521] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  174.188948][ T6521] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  174.202580][ T6521] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  174.213121][ T6533] EXT4-fs: Ignoring removed mblk_io_submit option
[  174.220661][ T6533] EXT4-fs: Invalid want_extra_isize 1
[  174.300128][ T6482] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  174.388258][ T6515] loop2: detected capacity change from 0 to 32768
[  174.658788][ T6538] syzkaller0: entered promiscuous mode
[  174.668387][ T6538] syzkaller0: entered allmulticast mode
[  176.202650][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  176.209737][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  176.216086][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout
[  176.272280][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout
[  176.838186][ T6556] vivid-002: disconnect
[  177.759995][ T6550] vivid-002: reconnect
[  178.034128][ T6564] affs: No valid root block on device nullb0
[  179.030294][ T6572] loop1: detected capacity change from 0 to 512
[  179.205440][ T6572] EXT4-fs: Ignoring removed mblk_io_submit option
[  179.390826][ T6572] EXT4-fs: Invalid want_extra_isize 1
[  180.085443][ T6578] tipc: Started in network mode
[  180.090563][ T6578] tipc: Node identity ce23cc0f8323, cluster identity 4711
[  180.116979][ T6578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.774066][ T6578] tipc: Resetting bearer <eth:syzkaller0>
[  180.815640][ T6577] tipc: Disabling bearer <eth:syzkaller0>
[  180.971738][ T6570] loop0: detected capacity change from 0 to 32768
[  182.504618][ T6590] loop3: detected capacity change from 0 to 1764
[  185.227768][ T6603] vivid-002: disconnect
[  185.794494][ T6593] vivid-002: reconnect
[  185.872805][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  186.037828][ T6609] loop1: detected capacity change from 0 to 512
[  186.052187][    T9] usb 3-1: Using ep0 maxpacket: 32
[  186.061821][ T6609] EXT4-fs: Ignoring removed mblk_io_submit option
[  186.084111][    T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  186.093861][ T6609] EXT4-fs: Invalid want_extra_isize 1
[  186.095013][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  186.136173][    T9] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  186.384989][    T9] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  186.398320][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  186.409119][    T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  186.432328][    T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  187.674652][    T9] usb 3-1: Product: syz
[  187.678929][    T9] usb 3-1: Manufacturer: syz
[  187.683668][    T9] usb 3-1: SerialNumber: syz
[  187.692140][    T9] usb 3-1: config 0 descriptor??
[  187.701551][    T9] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  187.742525][    T9] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  188.518104][ T5792] usb 3-1: USB disconnect, device number 2
[  188.624278][ T5792] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  189.268681][ T6629] loop2: detected capacity change from 0 to 1764
[  192.101600][ T6638] tipc: Started in network mode
[  192.107006][ T6638] tipc: Node identity 5ae3ccb82a17, cluster identity 4711
[  192.116436][ T6638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.130233][ T6638] tipc: Resetting bearer <eth:syzkaller0>
[  192.154496][ T6637] tipc: Disabling bearer <eth:syzkaller0>
[  192.274873][ T6641] vivid-000: disconnect
[  192.358493][ T6643] loop3: detected capacity change from 0 to 512
[  192.371656][ T6643] EXT4-fs: Ignoring removed mblk_io_submit option
[  192.396326][ T6643] EXT4-fs: Invalid want_extra_isize 1
[  192.962028][ T6633] vivid-000: reconnect
[  194.452602][ T6636] loop2: detected capacity change from 0 to 32768
[  194.892619][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  194.908076][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  195.658710][ T6663] input: syz1 as /devices/virtual/input/input5
[  197.709123][ T6675] loop0: detected capacity change from 0 to 512
[  197.733457][ T6675] EXT4-fs: Ignoring removed mblk_io_submit option
[  198.527501][ T6675] EXT4-fs: Invalid want_extra_isize 1
[  198.961275][ T6679] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  199.245988][ T6679] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  200.250341][ T6679] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  200.261085][ T6679] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  200.945964][ T5799] Bluetooth: hci1: command 0x0c1a tx timeout
[  201.091243][ T6705] loop2: detected capacity change from 0 to 512
[  201.204001][ T6705] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  201.462334][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout
[  202.070942][ T6705] EXT4-fs (loop2): 1 truncate cleaned up
[  202.093206][ T6705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.286856][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout
[  202.293083][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout
[  203.108913][ T6726] vivid-001: disconnect
[  203.723500][ T6720] vivid-001: reconnect
[  205.159042][ T6717] sp0: Synchronizing with TNC
[  205.349986][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.611208][ T6736] loop2: detected capacity change from 0 to 512
[  206.663620][ T6736] EXT4-fs: Ignoring removed mblk_io_submit option
[  206.670352][ T6736] EXT4-fs: Invalid want_extra_isize 1
[  208.342784][ T6482] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  209.745965][ T6761] loop2: detected capacity change from 0 to 512
[  209.764492][ T6761] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  210.003338][ T6770] vivid-000: disconnect
[  210.668951][ T6765] vivid-000: reconnect
[  211.042342][ T6761] EXT4-fs (loop2): 1 truncate cleaned up
[  211.180449][ T6761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.369564][ T6751] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  211.392726][ T6751] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  211.420763][ T6751] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  211.442131][ T6751] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  211.695421][ T6779] loop0: detected capacity change from 0 to 512
[  211.704654][ T6779] EXT4-fs: Ignoring removed mblk_io_submit option
[  211.712396][ T5799] Bluetooth: hci1: command 0x0c1a tx timeout
[  211.736613][   T28] audit: type=1800 audit(1757730186.708:81): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.238" name="bus" dev="loop2" ino=18 res=0 errno=0
[  211.835147][ T6779] EXT4-fs: Invalid want_extra_isize 1
[  213.365214][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.472796][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout
[  213.473665][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout
[  213.478948][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout
[  214.034193][ T6793] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  214.108206][ T6793] syzkaller0: entered promiscuous mode
[  214.160659][ T6793] syzkaller0: entered allmulticast mode
[  215.544012][ T6811] vivid-002: disconnect
[  216.257604][ T6807] vivid-002: reconnect
[  218.667196][ T6822] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  218.702597][ T6822] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  218.725801][ T6822] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  218.765854][ T6822] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  219.104980][ T6821] loop1: detected capacity change from 0 to 32768
[  220.469442][ T6832] loop2: detected capacity change from 0 to 512
[  220.528196][ T6832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  220.587604][ T6832] EXT4-fs (loop2): 1 truncate cleaned up
[  220.639863][ T6832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.672907][ T5799] Bluetooth: hci1: command 0x0c1a tx timeout
[  220.764643][ T5799] Bluetooth: hci2: command 0x0c1a tx timeout
[  220.770747][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout
[  220.832325][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout
[  221.284605][   T28] audit: type=1800 audit(1757730196.258:82): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.256" name="bus" dev="loop2" ino=18 res=0 errno=0
[  222.580738][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.737956][ T6852] vivid-000: disconnect
[  223.433461][ T6849] vivid-000: reconnect
[  223.443085][ T6854] netlink: 52 bytes leftover after parsing attributes in process `syz.3.263'.
[  223.487461][ T6854] netlink: 44 bytes leftover after parsing attributes in process `syz.3.263'.
[  227.244501][ T6892] vivid-004: disconnect
[  227.894775][ T6887] vivid-004: reconnect
[  227.971358][ T6895] netlink: 52 bytes leftover after parsing attributes in process `syz.0.274'.
[  227.981720][ T6895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.274'.
[  231.164727][ T6923] vivid-004: disconnect
[  231.870825][ T6920] vivid-004: reconnect
[  232.268168][ T6927] netlink: 52 bytes leftover after parsing attributes in process `syz.2.285'.
[  232.289124][ T6927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.285'.
[  236.939180][ T6954] vivid-004: disconnect
[  237.646618][ T6951] vivid-004: reconnect
[  238.018251][ T6957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.294'.
[  239.128809][ T6961] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  239.174076][ T6961] syzkaller0: entered promiscuous mode
[  239.179628][ T6961] syzkaller0: entered allmulticast mode
[  239.757625][ T6971] sp0: Synchronizing with TNC
[  242.650156][ T6987] vivid-001: disconnect
[  243.880781][ T6982] vivid-001: reconnect
[  244.027593][ T6992] input: syz1 as /devices/virtual/input/input6
[  246.642717][ T6997] netlink: 52 bytes leftover after parsing attributes in process `syz.3.305'.
[  251.863283][ T7047] vivid-004: disconnect
[  252.393687][ T7039] vivid-004: reconnect
[  252.425979][ T7043] netlink: 52 bytes leftover after parsing attributes in process `syz.3.316'.
[  252.554202][ T7038] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  252.561015][ T7038] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  252.575044][ T7038] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  252.582635][ T7038] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  254.602339][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout
[  254.608566][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout
[  254.614817][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  254.620894][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  256.142684][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  256.149377][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  257.322583][ T7086] vivid-002: disconnect
[  257.869878][ T7081] vivid-002: reconnect
[  258.135398][ T7091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'.
[  262.057703][ T7113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.078315][ T7113] syzkaller0: entered promiscuous mode
[  262.091555][ T7113] syzkaller0: entered allmulticast mode
[  262.181980][ T7113] tipc: Resetting bearer <eth:syzkaller0>
[  262.428823][ T7112] tipc: Resetting bearer <eth:syzkaller0>
[  263.044506][ T7112] tipc: Disabling bearer <eth:syzkaller0>
[  263.074817][    T8] tipc: Node number set to 1291897871
[  263.180970][ T7121] vivid-004: disconnect
[  263.557892][ T7116] vivid-004: reconnect
[  263.907197][ T7126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.337'.
[  268.190013][ T7162] vivid-001: disconnect
[  268.327042][ T7154] vivid-001: reconnect
[  269.243499][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.348'.
[  269.513313][ T7169] tipc: Started in network mode
[  269.527895][ T7169] tipc: Node identity 6ee387bee09f, cluster identity 4711
[  269.546060][ T7169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.581408][ T7169] syzkaller0: entered promiscuous mode
[  269.604977][ T7169] syzkaller0: entered allmulticast mode
[  269.645795][ T7169] tipc: Resetting bearer <eth:syzkaller0>
[  269.680086][ T7168] tipc: Resetting bearer <eth:syzkaller0>
[  270.334016][ T7168] tipc: Disabling bearer <eth:syzkaller0>
[  273.568869][ T7194] vivid-004: disconnect
[  274.043543][ T7190] vivid-004: reconnect
[  275.874083][ T7200] loop3: detected capacity change from 0 to 4096
[  276.048420][ T7200] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  276.206617][ T7200] ntfs3: loop3: Failed to initialize $Secure::$SDH (-22).
[  276.214207][ T7200] ntfs3: loop3: Failed to initialize $Secure (-22).
[  276.440198][ T7206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'.
[  276.692537][    T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  277.742126][    T8] usb 3-1: Using ep0 maxpacket: 32
[  278.724145][    T8] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  278.744338][    T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  278.756963][    T8] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  278.768501][    T8] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  278.782348][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  278.797534][    T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  278.806941][    T8] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  278.820689][    T8] usb 3-1: Product: syz
[  278.826740][    T8] usb 3-1: Manufacturer: syz
[  278.831582][    T8] usb 3-1: SerialNumber: syz
[  278.849222][    T8] usb 3-1: config 0 descriptor??
[  278.861851][    T8] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  278.899550][    T8] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  280.477277][ T7231] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  280.492642][ T7232] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  283.402803][   T27] usb 3-1: USB disconnect, device number 3
[  283.408747][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  283.447689][   T27] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  284.828918][ T7245] vivid-000: disconnect
[  285.439871][ T7241] vivid-000: reconnect
[  286.851827][ T7255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.370'.
[  287.173014][ T7259] loop2: detected capacity change from 0 to 4096
[  287.605995][ T7259] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  287.692351][ T7259] ntfs3: loop2: Failed to initialize $Secure::$SDH (-22).
[  287.699704][ T7259] ntfs3: loop2: Failed to initialize $Secure (-22).
[  289.319539][ T7271] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  291.471040][ T7285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.379'.
[  294.881370][ T7292] input: syz1 as /devices/virtual/input/input7
[  297.109450][ T7300] loop0: detected capacity change from 0 to 4096
[  298.390886][ T7300] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  298.575965][ T7300] ntfs3: loop0: Failed to initialize $Secure::$SDH (-22).
[  298.583974][ T7300] ntfs3: loop0: Failed to initialize $Secure (-22).
[  299.274334][ T7309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.286379][ T7309] syzkaller0: entered promiscuous mode
[  299.291986][ T7309] syzkaller0: entered allmulticast mode
[  299.354743][ T7309] tipc: Resetting bearer <eth:syzkaller0>
[  299.381021][ T7308] tipc: Resetting bearer <eth:syzkaller0>
[  299.410789][ T7308] tipc: Disabling bearer <eth:syzkaller0>
[  299.416928][ T5116] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  299.602168][ T5116] usb 1-1: Using ep0 maxpacket: 32
[  299.644636][ T5116] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  299.691406][ T5116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  299.784198][ T5116] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  299.795581][ T5116] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  299.809666][ T5116] usb 1-1: config 0 interface 0 has no altsetting 0
[  299.826121][ T5116] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  299.850093][ T5116] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  299.872115][ T5116] usb 1-1: Product: syz
[  299.877891][ T5116] usb 1-1: Manufacturer: syz
[  299.908368][ T5116] usb 1-1: SerialNumber: syz
[  299.938023][ T5116] usb 1-1: config 0 descriptor??
[  299.984973][ T5116] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  300.013318][ T5116] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  300.492594][ T5116] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  300.777914][ T5116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.977401][ T5116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.996406][ T5116] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  301.006007][ T5116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.019121][ T5116] usb 4-1: config 0 descriptor??
[  301.832477][ T7325] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  301.842718][ T7326] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  304.222253][ T5878] usb 1-1: USB disconnect, device number 2
[  304.222321][    C0] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  304.279047][ T5878] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  305.373821][ T5116] usbhid 4-1:0.0: can't add hid device: -71
[  305.379894][ T5116] usbhid: probe of 4-1:0.0 failed with error -71
[  305.396863][ T5116] usb 4-1: USB disconnect, device number 2
[  312.601121][ T7403] ALSA: mixer_oss: invalid OSS volume ''
[  314.366555][ T7411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.409'.
[  316.340297][ T7419] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  316.365352][ T7419] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  316.382245][ T7419] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  316.401844][ T7419] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  317.888526][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  317.898975][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  318.134712][ T7441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.418'.
[  318.192568][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout
[  318.347278][ T7444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.366684][ T7444] syzkaller0: entered promiscuous mode
[  318.382241][ T7444] syzkaller0: entered allmulticast mode
[  318.431163][ T7444] tipc: Resetting bearer <eth:syzkaller0>
[  318.442288][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  318.448389][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout
[  318.454938][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout
[  318.656002][ T7443] tipc: Resetting bearer <eth:syzkaller0>
[  318.742753][ T7443] tipc: Disabling bearer <eth:syzkaller0>
[  321.033689][ T7465] loop0: detected capacity change from 0 to 1764
[  321.323412][ T5878] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  322.539837][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.563870][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.724824][ T5878] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  322.737475][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.785255][ T5878] usb 2-1: config 0 descriptor??
[  323.134906][ T5878] usbhid 2-1:0.0: can't add hid device: -71
[  323.141102][ T5878] usbhid: probe of 2-1:0.0 failed with error -71
[  323.220769][ T5878] usb 2-1: USB disconnect, device number 4
[  325.770921][ T7494] loop1: detected capacity change from 0 to 1764
[  330.406424][ T7517] sp0: Synchronizing with TNC
[  334.370776][ T7537] loop2: detected capacity change from 0 to 1764
[  339.056301][  T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  339.227895][ T7573] loop1: detected capacity change from 0 to 1764
[  339.424298][  T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.438473][  T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.192243][  T787] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  340.201499][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.254716][  T787] usb 3-1: config 0 descriptor??
[  340.511236][  T787] usbhid 3-1:0.0: can't add hid device: -71
[  340.547270][  T787] usbhid: probe of 3-1:0.0 failed with error -71
[  340.610186][  T787] usb 3-1: USB disconnect, device number 4
[  340.634118][ T7584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.901662][ T7584] syzkaller0: entered promiscuous mode
[  341.091695][ T7584] syzkaller0: entered allmulticast mode
[  341.567853][ T7586] tipc: Resetting bearer <eth:syzkaller0>
[  341.628825][ T7582] tipc: Resetting bearer <eth:syzkaller0>
[  341.670736][ T7582] tipc: Disabling bearer <eth:syzkaller0>
[  344.523391][ T7613] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  345.058471][ T7615] loop2: detected capacity change from 0 to 1764
[  345.618047][ T7619] affs: No valid root block on device nullb0
[  346.842353][  T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  346.964429][ T7626] tipc: Started in network mode
[  346.980766][ T7626] tipc: Node identity 565cb7905b9e, cluster identity 4711
[  346.988723][ T7626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.042572][  T787] usb 2-1: Using ep0 maxpacket: 32
[  347.067604][  T787] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  347.075111][ T7629] syzkaller0: entered promiscuous mode
[  347.101688][  T787] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  347.113974][  T787] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  347.126130][  T787] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  347.140705][  T787] usb 2-1: config 0 interface 0 has no altsetting 0
[  347.141572][ T7629] syzkaller0: entered allmulticast mode
[  347.170144][  T787] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  347.181667][  T787] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  347.191543][  T787] usb 2-1: Product: syz
[  347.196350][  T787] usb 2-1: Manufacturer: syz
[  347.201543][  T787] usb 2-1: SerialNumber: syz
[  347.251280][  T787] usb 2-1: config 0 descriptor??
[  347.325356][  T787] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  347.361415][  T787] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  347.651223][ T7626] tipc: Resetting bearer <eth:syzkaller0>
[  347.743431][ T7625] tipc: Resetting bearer <eth:syzkaller0>
[  347.892926][ T7625] tipc: Disabling bearer <eth:syzkaller0>
[  348.520626][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  348.533748][ T7634] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  348.542248][ T7636] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  349.195657][  T787] usb 2-1: USB disconnect, device number 5
[  352.014584][  T787] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  352.700820][ T7651] loop3: detected capacity change from 0 to 1764
[  353.806959][ T7656] input: syz1 as /devices/virtual/input/input8
[  358.120350][ T7676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.128325][ T7676] syzkaller0: entered promiscuous mode
[  358.134619][ T7676] syzkaller0: entered allmulticast mode
[  358.269526][ T7676] tipc: Resetting bearer <eth:syzkaller0>
[  358.322690][ T7675] tipc: Resetting bearer <eth:syzkaller0>
[  359.304959][ T7675] tipc: Disabling bearer <eth:syzkaller0>
[  360.033385][ T7683] sp0: Synchronizing with TNC
[  360.275287][ T7688] affs: No valid root block on device nullb0
[  364.001493][ T7696] loop1: detected capacity change from 0 to 1764
[  364.395740][ T7698] syzkaller0: entered promiscuous mode
[  364.414443][ T7698] syzkaller0: entered allmulticast mode
[  365.728339][ T7713] netlink: 88 bytes leftover after parsing attributes in process `syz.1.493'.
[  366.481542][ T7713] netlink: 'syz.1.493': attribute type 21 has an invalid length.
[  366.524387][ T7713] netlink: 128 bytes leftover after parsing attributes in process `syz.1.493'.
[  366.534139][ T7713] netlink: 'syz.1.493': attribute type 4 has an invalid length.
[  366.541898][ T7713] netlink: 3 bytes leftover after parsing attributes in process `syz.1.493'.
[  367.137420][ T7719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.182820][ T7719] syzkaller0: entered promiscuous mode
[  367.188429][ T7719] syzkaller0: entered allmulticast mode
[  367.312576][ T7719] tipc: Resetting bearer <eth:syzkaller0>
[  367.332630][ T7716] tipc: Resetting bearer <eth:syzkaller0>
[  367.446919][ T7716] tipc: Disabling bearer <eth:syzkaller0>
[  369.235099][ T7729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.312458][ T7731] syzkaller0: entered promiscuous mode
[  369.369686][ T7731] syzkaller0: entered allmulticast mode
[  369.555653][ T7729] tipc: Resetting bearer <eth:syzkaller0>
[  369.572840][ T7735] affs: No valid root block on device nullb0
[  369.645037][ T7727] tipc: Resetting bearer <eth:syzkaller0>
[  369.744188][ T7737] loop1: detected capacity change from 0 to 1764
[  369.756051][ T7727] tipc: Disabling bearer <eth:syzkaller0>
[  371.402151][ T5116] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  372.003627][ T5116] usb 1-1: Using ep0 maxpacket: 32
[  372.040639][ T5116] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  372.097059][ T5116] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  372.140416][ T5116] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  372.187977][ T5116] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  372.243412][ T5116] usb 1-1: config 0 interface 0 has no altsetting 0
[  372.287477][ T5116] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  372.324253][ T5116] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  372.352562][ T5116] usb 1-1: Product: syz
[  372.512141][ T5116] usb 1-1: Manufacturer: syz
[  372.516919][ T5116] usb 1-1: SerialNumber: syz
[  372.526238][ T5116] usb 1-1: config 0 descriptor??
[  372.544479][ T5116] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  372.579898][ T5116] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  373.903756][ T7759] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  373.912394][ T7760] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  374.100225][  T787] usb 1-1: USB disconnect, device number 3
[  374.100303][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  374.652183][  T787] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  378.681443][ T7779] loop1: detected capacity change from 0 to 1764
[  378.917329][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  378.923915][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  384.124385][ T7813] loop2: detected capacity change from 0 to 1764
[  387.074555][ T5116] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  387.432463][ T5116] usb 3-1: Using ep0 maxpacket: 32
[  387.441486][ T5116] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  387.450481][ T5116] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  387.481413][ T5116] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  387.514282][ T7843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.521272][ T5116] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  387.542593][ T7843] syzkaller0: entered promiscuous mode
[  387.549500][ T7843] syzkaller0: entered allmulticast mode
[  387.555654][ T5116] usb 3-1: config 0 interface 0 has no altsetting 0
[  387.613945][ T5116] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  387.651825][ T7843] tipc: Resetting bearer <eth:syzkaller0>
[  387.659870][ T5116] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  387.674499][ T7842] tipc: Resetting bearer <eth:syzkaller0>
[  387.680455][ T5116] usb 3-1: Product: syz
[  387.685117][ T5116] usb 3-1: Manufacturer: syz
[  387.690387][ T5116] usb 3-1: SerialNumber: syz
[  387.718538][ T5116] usb 3-1: config 0 descriptor??
[  387.737075][ T5116] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  387.754667][ T7842] tipc: Disabling bearer <eth:syzkaller0>
[  387.774502][ T5116] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  389.574316][ T7850] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  389.589312][ T7851] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  392.275046][  T787] usb 3-1: USB disconnect, device number 5
[  392.281020][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  392.294946][  T787] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  392.373705][ T7854] loop1: detected capacity change from 0 to 1764
[  394.565886][ T7857] ALSA: mixer_oss: invalid OSS volume ''
[  395.908618][ T7876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.933376][ T7876] syzkaller0: entered promiscuous mode
[  395.938950][ T7876] syzkaller0: entered allmulticast mode
[  396.871355][ T7884] tipc: Resetting bearer <eth:syzkaller0>
[  396.947375][ T7875] tipc: Resetting bearer <eth:syzkaller0>
[  397.212606][    T8] tipc: Node number set to 230864784
[  397.544447][ T7875] tipc: Disabling bearer <eth:syzkaller0>
[  397.995345][ T7897] loop2: detected capacity change from 0 to 1764
[  400.696767][ T7925] vivid-001: disconnect
[  400.912630][ T7921] vivid-001: reconnect
[  402.656600][ T7907] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  402.663665][ T7907] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  402.669830][ T7907] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  402.676652][ T7907] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  402.923416][ T7937] loop1: detected capacity change from 0 to 1764
[  403.632130][ T5799] Bluetooth: hci1: command 0x0c1a tx timeout
[  404.812381][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout
[  404.818559][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout
[  404.824818][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout
[  405.375357][ T7954] vivid-002: disconnect
[  405.401288][ T7949] vivid-002: reconnect
[  408.409446][ T7974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.431307][ T7974] syzkaller0: entered promiscuous mode
[  408.440815][ T7974] syzkaller0: entered allmulticast mode
[  408.487946][ T7976] loop1: detected capacity change from 0 to 1764
[  408.539711][ T7974] tipc: Resetting bearer <eth:syzkaller0>
[  408.783239][ T7973] tipc: Resetting bearer <eth:syzkaller0>
[  409.485288][ T5878] tipc: Node number set to 2390525886
[  409.808741][ T7973] tipc: Disabling bearer <eth:syzkaller0>
[  410.921200][ T7991] vivid-002: disconnect
[  411.100717][ T7987] vivid-002: reconnect
[  412.589507][ T7993] ALSA: mixer_oss: invalid OSS volume ''
[  414.572348][ T8015] loop3: detected capacity change from 0 to 1764
[  420.100957][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  420.759127][ T8039] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  420.785903][ T8039] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  420.812386][ T8039] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  420.829370][ T8039] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  421.571893][ T8060] loop3: detected capacity change from 0 to 1764
[  422.674787][ T8067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  422.699643][ T8067] syzkaller0: entered promiscuous mode
[  422.722147][ T8067] syzkaller0: entered allmulticast mode
[  422.817473][ T8064] tipc: Resetting bearer <eth:syzkaller0>
[  422.833777][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout
[  422.839879][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout
[  422.846110][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  422.874091][ T8064] tipc: Disabling bearer <eth:syzkaller0>
[  425.135921][ T8091] loop1: detected capacity change from 0 to 1764
[  425.186237][ T7882] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  426.952288][ T7882] usb 4-1: Using ep0 maxpacket: 8
[  427.493201][ T7882] usb 4-1: unable to read config index 0 descriptor/start: -71
[  427.500922][ T7882] usb 4-1: can't read configurations, error -71
[  428.225437][ T8111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.105851][ T8111] syzkaller0: entered promiscuous mode
[  429.111418][ T8111] syzkaller0: entered allmulticast mode
[  429.342406][ T5878] tipc: Node number set to 1895091384
[  429.359924][ T8110] tipc: Resetting bearer <eth:syzkaller0>
[  429.619486][ T8110] tipc: Disabling bearer <eth:syzkaller0>
[  431.803183][ T5844] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  431.854151][ T8137] loop1: detected capacity change from 0 to 1764
[  432.012910][ T5844] usb 3-1: Using ep0 maxpacket: 8
[  432.111719][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  432.142895][ T5844] usb 3-1: config 0 has no interfaces?
[  432.151295][ T5844] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  432.160616][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.168940][ T5844] usb 3-1: Product: syz
[  432.177345][ T5844] usb 3-1: Manufacturer: syz
[  432.182528][ T5844] usb 3-1: SerialNumber: syz
[  432.221048][ T5844] usb 3-1: config 0 descriptor??
[  432.351194][ T8140] affs: No valid root block on device nullb0
[  436.620922][    T8] usb 3-1: USB disconnect, device number 6
[  440.093607][ T8182] affs: No valid root block on device nullb0
[  440.334595][ T8180] loop3: detected capacity change from 0 to 1764
[  440.354690][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  440.361101][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  445.377769][ T8212] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  446.884781][ T8219] affs: No valid root block on device nullb0
[  447.289526][ T8228] loop3: detected capacity change from 0 to 1764
[  451.325987][ T8248] loop0: detected capacity change from 0 to 4096
[  451.400403][ T8248] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  451.629788][ T8248] ntfs3: loop0: failed to replay log file. Can't mount rw!
[  453.119178][ T8265] loop1: detected capacity change from 0 to 1764
[  454.719606][    T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  455.375580][ T8279] affs: No valid root block on device nullb0
[  455.431828][ T8280] vivid-001: disconnect
[  455.456244][    T8] usb 2-1: Using ep0 maxpacket: 32
[  455.625938][ T8270] vivid-001: reconnect
[  455.661897][    T8] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  455.872460][    T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  455.907691][    T8] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  455.950607][    T8] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  456.118659][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  456.134164][    T8] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  456.148306][    T8] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  456.172217][    T8] usb 2-1: Product: syz
[  456.176481][    T8] usb 2-1: Manufacturer: syz
[  456.197756][    T8] usb 2-1: SerialNumber: syz
[  456.491619][    T8] usb 2-1: config 0 descriptor??
[  456.518460][    T8] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  456.554218][    T8] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  457.896924][ T5878] usb 2-1: USB disconnect, device number 6
[  457.924765][ T5878] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  458.381664][ T8303] loop2: detected capacity change from 0 to 4096
[  458.933749][ T8303] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  459.532477][ T8305] syzkaller0: entered promiscuous mode
[  459.538000][ T8305] syzkaller0: entered allmulticast mode
[  459.659998][ T8303] ntfs3: loop2: Failed to initialize $Secure::$SDH (-22).
[  459.667362][ T8303] ntfs3: loop2: Failed to initialize $Secure (-22).
[  460.169442][ T8309] loop0: detected capacity change from 0 to 1764
[  463.264012][ T8326] affs: No valid root block on device nullb0
[  463.644050][ T8327] affs: No valid root block on device nullb0
[  463.846867][ T8333] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  464.532113][ T5878] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  464.790420][ T8341] loop0: detected capacity change from 0 to 4096
[  464.807510][ T8341] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  464.852184][ T5878] usb 4-1: Using ep0 maxpacket: 32
[  465.232700][ T5878] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  465.265458][ T5878] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  465.313519][ T8341] ntfs3: loop0: Failed to initialize $Secure::$SDH (-22).
[  465.320881][ T8341] ntfs3: loop0: Failed to initialize $Secure (-22).
[  465.329953][ T5878] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  465.342817][ T5878] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  465.356729][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0
[  465.376455][ T5878] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  465.386435][ T5878] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  465.420023][ T5878] usb 4-1: Product: syz
[  465.439672][ T5878] usb 4-1: Manufacturer: syz
[  465.558636][ T5878] usb 4-1: SerialNumber: syz
[  465.577108][ T5878] usb 4-1: config 0 descriptor??
[  465.589736][ T5878] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  465.609208][ T5878] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  465.622114][  T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  465.949651][  T787] usb 3-1: Using ep0 maxpacket: 32
[  466.646626][  T787] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  466.732181][  T787] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  466.787531][  T787] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  466.799833][  T787] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  466.952857][ T8351] affs: No valid root block on device nullb0
[  467.905119][ T8347] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  468.351040][    C1] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  468.358950][ T5116] usb 4-1: USB disconnect, device number 5
[  471.187539][ T5116] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  471.230355][  T787] usb 3-1: config 0 interface 0 has no altsetting 0
[  471.240555][  T787] usb 3-1: string descriptor 0 read error: -71
[  471.247844][  T787] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  471.264271][  T787] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  471.449131][  T787] usb 3-1: config 0 descriptor??
[  471.700347][  T787] usb 3-1: can't set config #0, error -71
[  471.758741][  T787] usb 3-1: USB disconnect, device number 7
[  471.764467][ T8358] loop2: detected capacity change from 0 to 1764
[  474.398960][ T8379] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  474.743244][ T8367] ALSA: mixer_oss: invalid OSS volume ''
[  476.596118][ T8394] loop3: detected capacity change from 0 to 1764
[  477.197822][ T8401] affs: No valid root block on device nullb0
[  481.210953][ T8431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  483.684631][ T8442] vivid-002: disconnect
[  483.689776][ T8441] vivid-002: reconnect
[  483.925832][ T8454] affs: No valid root block on device nullb0
[  486.512183][   T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  486.722213][   T27] usb 2-1: Using ep0 maxpacket: 8
[  486.739529][   T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  486.751362][   T27] usb 2-1: config 0 has no interfaces?
[  486.782049][   T27] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  486.844981][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.853298][   T27] usb 2-1: Product: syz
[  486.857616][   T27] usb 2-1: Manufacturer: syz
[  486.862397][   T27] usb 2-1: SerialNumber: syz
[  486.891340][   T27] usb 2-1: config 0 descriptor??
[  488.145573][ T8475] ALSA: mixer_oss: invalid OSS volume ''
[  490.793673][ T8493] sp0: Synchronizing with TNC
[  490.995563][ T5844] usb 2-1: USB disconnect, device number 7
[  491.349698][ T8497] loop3: detected capacity change from 0 to 4096
[  491.842450][ T8497] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  492.034824][ T8497] ntfs3: loop3: Failed to initialize $Secure::$SDH (-22).
[  492.042607][ T8497] ntfs3: loop3: Failed to initialize $Secure (-22).
[  492.266112][ T8502] affs: No valid root block on device nullb0
[  494.760918][ T8513] affs: No valid root block on device nullb0
[  495.672351][ T5878] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  496.356847][ T5878] usb 1-1: Using ep0 maxpacket: 32
[  496.377754][ T5878] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  496.392194][ T5878] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  496.467775][ T5878] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  496.518708][ T5878] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  496.555310][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0
[  496.578392][ T5878] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  496.599928][ T5878] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  496.629167][ T5878] usb 1-1: Product: syz
[  496.648250][ T5878] usb 1-1: Manufacturer: syz
[  496.678540][ T5878] usb 1-1: SerialNumber: syz
[  496.693809][ T5878] usb 1-1: config 0 descriptor??
[  496.710223][ T5878] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  496.983928][ T5878] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  499.911365][ T7882] usb 1-1: USB disconnect, device number 4
[  503.031754][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  503.155490][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  503.361078][ T7882] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  503.630117][ T8551] affs: No valid root block on device nullb0
[  504.224098][ T8554] loop2: detected capacity change from 0 to 4096
[  504.263091][ T8554] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  504.424066][ T8554] ntfs3: loop2: Failed to initialize $Secure::$SDH (-22).
[  504.432813][ T8554] ntfs3: loop2: Failed to initialize $Secure (-22).
[  504.871548][ T6482] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  505.096339][ T8561] affs: No valid root block on device nullb0
[  508.202872][ T8585] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  508.600833][ T8581] vivid-001: disconnect
[  508.638774][ T8589] affs: No valid root block on device nullb0
[  508.646736][ T8576] vivid-001: reconnect
[  508.972012][ T8590] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  510.455919][ T8601] loop2: detected capacity change from 0 to 4096
[  510.478363][ T8601] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  510.581027][ T8601] ntfs3: loop2: Failed to initialize $Secure::$SDH (-22).
[  510.588617][ T8601] ntfs3: loop2: Failed to initialize $Secure (-22).
[  515.057781][ T8628] affs: No valid root block on device nullb0
[  515.324392][ T8631] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  516.197412][ T8639] loop2: detected capacity change from 0 to 4096
[  516.751735][ T8639] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  517.561869][ T8639] ntfs3: loop2: Failed to initialize $Secure::$SDH (-22).
[  517.569441][ T8639] ntfs3: loop2: Failed to initialize $Secure (-22).
[  519.111661][ T8651] affs: No valid root block on device nullb0
[  519.309913][ T8654] affs: No valid root block on device nullb0
[  519.344897][ T8653] syz.3.754 uses obsolete (PF_INET,SOCK_PACKET)
[  523.699280][ T8680] syzkaller0: entered promiscuous mode
[  523.716108][ T8680] syzkaller0: entered allmulticast mode
[  524.004468][ T8688] loop0: detected capacity change from 0 to 4096
[  525.388770][ T8688] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  525.416076][ T8688] ntfs3: loop0: Failed to initialize $Secure::$SDH (-22).
[  525.424106][ T8688] ntfs3: loop0: Failed to initialize $Secure (-22).
[  526.345549][ T8693] sp0: Synchronizing with TNC
[  526.449830][ T8696] affs: No valid root block on device nullb0
[  532.185908][ T8732] affs: No valid root block on device nullb0
[  533.476205][ T5792] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  533.942217][ T5792] usb 1-1: Using ep0 maxpacket: 32
[  533.954529][ T8744] vivid-004: disconnect
[  533.961259][ T5792] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  533.974536][ T8738] vivid-004: reconnect
[  533.980730][ T5792] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  534.020639][ T5792] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  534.040930][ T5792] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  534.055448][ T5792] usb 1-1: config 0 interface 0 has no altsetting 0
[  534.066108][ T5792] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  534.078786][ T5792] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  534.239274][ T5792] usb 1-1: Product: syz
[  534.244195][ T5792] usb 1-1: Manufacturer: syz
[  534.248994][ T5792] usb 1-1: SerialNumber: syz
[  534.263225][ T5792] usb 1-1: config 0 descriptor??
[  534.293294][ T5792] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  535.670307][ T5792] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  537.665955][    T8] usb 1-1: USB disconnect, device number 5
[  538.940904][    T8] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  541.400615][ T8785] affs: No valid root block on device nullb0
[  541.830105][ T8793] vivid-001: disconnect
[  541.842843][ T8788] vivid-001: reconnect
[  546.905377][ T8826] affs: No valid root block on device nullb0
[  546.953135][ T8828] vivid-004: disconnect
[  546.981351][ T8823] vivid-004: reconnect
[  547.248697][ T8834] input: syz1 as /devices/virtual/input/input11
[  552.673606][ T8861] vivid-001: disconnect
[  552.680259][ T8854] vivid-001: reconnect
[  552.917509][ T8866] vivid-004: disconnect
[  552.940162][ T8862] vivid-004: reconnect
[  553.804303][ T8868] affs: No valid root block on device nullb0
[  557.223141][ T8907] vivid-002: disconnect
[  557.273182][ T8903] vivid-002: reconnect
[  558.433539][ T8915] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  558.443166][ T8915] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  558.452975][ T8915] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  560.257721][ T8928] loop1: detected capacity change from 0 to 1764
[  561.718760][ T8940] vivid-000: disconnect
[  561.767535][ T8937] vivid-000: reconnect
[  562.095884][ T8943] vivid-000: disconnect
[  562.122328][ T8941] vivid-000: reconnect
[  563.167230][ T8950] input: syz1 as /devices/virtual/input/input12
[  563.398804][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  563.414688][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  564.852852][ T8961] loop2: detected capacity change from 0 to 1764
[  565.850192][ T8967] affs: No valid root block on device nullb0
[  566.914107][ T8974] vivid-004: disconnect
[  566.923887][ T8971] vivid-004: reconnect
[  568.957712][    T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  569.362778][    T8] usb 3-1: Using ep0 maxpacket: 32
[  569.398997][    T8] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  569.420478][    T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  569.447663][    T8] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  569.490845][    T8] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  569.504217][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  569.514311][    T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  569.532077][    T8] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  569.580754][    T8] usb 3-1: Product: syz
[  569.590927][    T8] usb 3-1: Manufacturer: syz
[  569.601086][    T8] usb 3-1: SerialNumber: syz
[  569.655968][    T8] usb 3-1: config 0 descriptor??
[  569.689462][    T8] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  569.744982][    T8] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  571.000566][ T9008] affs: No valid root block on device nullb0
[  571.370312][ T9006] loop3: detected capacity change from 0 to 1764
[  574.374571][ T5878] usb 3-1: USB disconnect, device number 8
[  574.420189][ T5878] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  574.785368][ T9024] vivid-002: disconnect
[  575.025561][ T9020] vivid-002: reconnect
[  578.242586][ T9043] input: syz1 as /devices/virtual/input/input13
[  579.670828][ T9051] loop3: detected capacity change from 0 to 1764
[  579.698584][ T9053] sp0: Synchronizing with TNC
[  579.783175][    T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  580.032005][    T8] usb 3-1: Using ep0 maxpacket: 32
[  580.617591][    T8] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  581.603781][ T9059] vivid-001: disconnect
[  582.326352][    T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  582.338755][    T8] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  582.350097][    T8] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  582.364233][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  582.386007][ T9055] vivid-001: reconnect
[  582.409770][    T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  582.465985][    T8] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  582.505929][    T8] usb 3-1: Product: syz
[  582.518209][    T8] usb 3-1: Manufacturer: syz
[  582.530587][    T8] usb 3-1: SerialNumber: syz
[  582.572319][    T8] usb 3-1: config 0 descriptor??
[  582.630354][    T8] usb 3-1: can't set config #0, error -71
[  582.682724][    T8] usb 3-1: USB disconnect, device number 9
[  585.662563][ T9080] syzkaller0: entered promiscuous mode
[  585.675401][ T9081] loop2: detected capacity change from 0 to 1764
[  585.682238][ T9080] syzkaller0: entered allmulticast mode
[  586.972017][    T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  587.175820][ T9095] vivid-002: disconnect
[  587.198441][ T9092] vivid-002: reconnect
[  587.262100][    T8] usb 3-1: Using ep0 maxpacket: 32
[  587.292603][    T8] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  587.321460][    T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  587.357353][    T8] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  587.397893][    T8] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  587.416807][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  587.652048][    T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  587.680999][    T8] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  587.699943][    T8] usb 3-1: Product: syz
[  587.708797][    T8] usb 3-1: Manufacturer: syz
[  588.440579][    T8] usb 3-1: SerialNumber: syz
[  588.474968][    T8] usb 3-1: config 0 descriptor??
[  588.483193][    T8] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  588.503795][    T8] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  590.809942][ T9114] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  590.818147][ T9115] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  591.598691][ T8769] usb 3-1: USB disconnect, device number 10
[  591.598771][    C0] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  592.973404][ T8769] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  595.649963][ T9122] loop1: detected capacity change from 0 to 1764
[  596.206134][ T9130] input: syz1 as /devices/virtual/input/input14
[  597.403139][ T9133] vivid-000: disconnect
[  597.459615][ T9128] vivid-000: reconnect
[  599.149094][ T9147] affs: No valid root block on device nullb0
[  600.092059][ T8769] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  600.175742][ T9152] loop3: detected capacity change from 0 to 1764
[  600.282146][ T8769] usb 2-1: Using ep0 maxpacket: 32
[  600.289692][ T8769] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  600.298623][ T8769] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  600.313552][ T8769] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  600.352699][ T8769] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  600.379817][ T8769] usb 2-1: config 0 interface 0 has no altsetting 0
[  600.413297][ T8769] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  600.447049][ T8769] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  601.372003][ T8769] usb 2-1: Product: syz
[  601.432233][ T8769] usb 2-1: Manufacturer: syz
[  601.443562][ T8769] usb 2-1: SerialNumber: syz
[  601.517949][ T8769] usb 2-1: config 0 descriptor??
[  601.746522][ T8769] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  601.808040][ T8769] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  602.290595][ T9168] affs: No valid root block on device nullb0
[  602.708130][  T787] usb 2-1: USB disconnect, device number 8
[  605.382863][  T787] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  606.195965][ T9176] vivid-000: disconnect
[  606.241025][ T9172] vivid-000: reconnect
[  607.903084][ T9187] loop2: detected capacity change from 0 to 1764
[  607.957964][ T9193] netlink: 88 bytes leftover after parsing attributes in process `syz.3.893'.
[  608.080043][ T9195] sp0: Synchronizing with TNC
[  612.240666][    T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  612.442140][    T8] usb 1-1: Using ep0 maxpacket: 32
[  612.455083][    T8] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  612.464261][    T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  612.476561][    T8] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  612.494739][ T9222] vivid-001: disconnect
[  612.506276][ T9220] vivid-001: reconnect
[  612.512629][    T8] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  612.544566][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  612.566354][    T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  612.580373][    T8] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  612.593564][    T8] usb 1-1: Product: syz
[  612.599159][    T8] usb 1-1: Manufacturer: syz
[  612.606126][    T8] usb 1-1: SerialNumber: syz
[  612.620657][    T8] usb 1-1: config 0 descriptor??
[  612.636782][    T8] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  612.661593][    T8] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  612.714044][ T9226] sp0: Synchronizing with TNC
[  616.430863][    T8] usb 1-1: USB disconnect, device number 6
[  616.459587][    T8] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  618.373731][ T9255] netlink: 88 bytes leftover after parsing attributes in process `syz.1.914'.
[  618.463501][ T9256] vivid-001: disconnect
[  618.505334][ T9252] vivid-001: reconnect
[  618.549372][ T9255] netlink: 'syz.1.914': attribute type 21 has an invalid length.
[  618.557570][ T9255] netlink: 128 bytes leftover after parsing attributes in process `syz.1.914'.
[  618.566996][ T9255] netlink: 'syz.1.914': attribute type 4 has an invalid length.
[  618.585726][ T9255] netlink: 3 bytes leftover after parsing attributes in process `syz.1.914'.
[  622.758348][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  623.042137][    T8] usb 1-1: Using ep0 maxpacket: 32
[  623.053030][    T8] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  623.061344][    T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  623.153002][    T8] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  623.189334][    T8] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  623.203485][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  623.215697][    T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  623.224941][ T5116] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  623.233555][    T8] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  623.252448][    T8] usb 1-1: Product: syz
[  623.256973][    T8] usb 1-1: Manufacturer: syz
[  623.261616][    T8] usb 1-1: SerialNumber: syz
[  623.425592][    T8] usb 1-1: config 0 descriptor??
[  623.455103][    T8] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  624.184389][    T8] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  624.213183][ T5116] usb 3-1: Using ep0 maxpacket: 32
[  624.220560][ T5116] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  624.261104][ T5116] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  624.411038][ T9286] vivid-001: disconnect
[  624.585725][    T8] usb 1-1: USB disconnect, device number 7
[  624.677145][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  624.685391][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  624.959386][ T5116] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  627.018414][ T9284] vivid-001: reconnect
[  627.082069][ T5116] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  627.103093][    T8] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  627.117854][ T5116] usb 3-1: config 0 interface 0 has no altsetting 0
[  627.208924][ T5116] usb 3-1: string descriptor 0 read error: -71
[  627.245465][ T5116] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  627.282817][ T5116] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  627.322626][ T5116] usb 3-1: config 0 descriptor??
[  627.350934][ T5116] usb 3-1: can't set config #0, error -71
[  627.381495][ T5116] usb 3-1: USB disconnect, device number 11
[  631.692313][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  631.882156][   T27] usb 4-1: Using ep0 maxpacket: 32
[  631.894653][   T27] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  631.912023][   T27] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  631.927070][   T27] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  631.959228][   T27] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  632.007446][   T27] usb 4-1: config 0 interface 0 has no altsetting 0
[  632.035781][   T27] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  632.052026][   T27] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  632.066052][   T27] usb 4-1: Product: syz
[  632.074376][   T27] usb 4-1: Manufacturer: syz
[  632.079041][   T27] usb 4-1: SerialNumber: syz
[  632.087602][   T27] usb 4-1: config 0 descriptor??
[  632.097829][   T27] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  632.115649][   T27] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  632.791847][ T9327] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  632.803001][ T9328] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  632.864193][ T8769] usb 4-1: USB disconnect, device number 6
[  632.864369][    C1] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  636.122263][ T8769] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  636.435526][ T9339] vivid-004: disconnect
[  636.475396][ T9333] vivid-004: reconnect
[  645.132237][ T5878] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  645.362297][ T5878] usb 4-1: Using ep0 maxpacket: 32
[  645.607771][ T5878] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  645.634042][ T5878] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  645.701847][ T5878] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  645.746334][ T9381] vivid-004: disconnect
[  645.754330][ T9378] vivid-004: reconnect
[  645.759689][ T5878] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  645.814672][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0
[  645.823619][ T5878] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  645.823645][ T5878] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  645.823663][ T5878] usb 4-1: Product: syz
[  645.823673][ T5878] usb 4-1: Manufacturer: syz
[  645.823683][ T5878] usb 4-1: SerialNumber: syz
[  645.825584][ T5878] usb 4-1: config 0 descriptor??
[  645.845968][ T5878] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  645.862911][ T5878] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  646.384909][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  647.263230][    T9] usb 1-1: Using ep0 maxpacket: 32
[  647.457578][ T9391] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  647.473799][ T9392] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  647.512963][ T5878] usb 4-1: USB disconnect, device number 7
[  647.513030][    C1] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  647.713849][ T5878] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  648.794362][ T9398] vivid-004: disconnect
[  648.953664][ T9394] vivid-004: reconnect
[  650.825564][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  650.842125][    T9] usb 1-1: can't read configurations, error -71
[  652.421966][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  653.242346][    T9] usb 1-1: Using ep0 maxpacket: 32
[  653.259928][    T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  653.283617][    T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  653.325556][    T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  653.348175][    T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  653.363785][ T9422] vivid-001: disconnect
[  653.382084][ T9418] vivid-001: reconnect
[  653.390860][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  653.415242][    T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  653.425494][    T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  653.677400][    T9] usb 1-1: Product: syz
[  653.807098][    T9] usb 1-1: Manufacturer: syz
[  653.861780][    T9] usb 1-1: SerialNumber: syz
[  654.011597][    T9] usb 1-1: config 0 descriptor??
[  654.344285][    T9] usb 1-1: can't set config #0, error -71
[  654.668156][    T9] usb 1-1: USB disconnect, device number 9
[  655.980227][    T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  656.002423][ T9442] netlink: 'syz.0.967': attribute type 12 has an invalid length.
[  656.192112][    T8] usb 4-1: Using ep0 maxpacket: 32
[  656.321995][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  656.999424][    T8] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  657.008947][    T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  657.020146][    T8] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  657.032093][    T8] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  657.045732][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  657.055587][    T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  657.082201][    T8] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  657.090743][    T8] usb 4-1: Product: syz
[  657.102673][    T8] usb 4-1: Manufacturer: syz
[  657.107386][    T8] usb 4-1: SerialNumber: syz
[  657.126244][    T8] usb 4-1: config 0 descriptor??
[  657.134515][    T8] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  657.148912][    T8] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  657.211228][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  657.234362][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  657.244582][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  657.253864][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.265307][    T9] usb 1-1: config 0 descriptor??
[  658.171441][ T9455] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  658.180642][ T5844] usb 4-1: USB disconnect, device number 8
[  658.180645][    C1] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  658.194644][ T9454] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  658.792112][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  660.094968][    T9] usbhid: probe of 1-1:0.0 failed with error -71
[  661.623882][ T5844] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  661.632307][    T9] usb 1-1: USB disconnect, device number 10
[  664.729682][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  665.673072][    T8] usb 2-1: Using ep0 maxpacket: 8
[  665.680711][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  665.699297][    T8] usb 2-1: config 0 has no interfaces?
[  665.759364][    T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  665.779176][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.372135][    T8] usb 2-1: Product: syz
[  666.376382][    T8] usb 2-1: Manufacturer: syz
[  666.415319][    T8] usb 2-1: SerialNumber: syz
[  666.439184][    T8] usb 2-1: config 0 descriptor??
[  666.742226][ T7882] usb 2-1: USB disconnect, device number 9
[  669.772020][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  671.004792][    T8] usb 2-1: Using ep0 maxpacket: 32
[  671.038516][    T8] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  671.070955][    T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  671.085243][    T8] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  671.113578][    T8] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  671.127892][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  671.168655][    T8] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  671.662306][    T8] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  671.702020][    T8] usb 2-1: Product: syz
[  671.762378][    T8] usb 2-1: Manufacturer: syz
[  671.781982][    T8] usb 2-1: SerialNumber: syz
[  671.808030][    T8] usb 2-1: config 0 descriptor??
[  671.874109][    T8] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  671.920321][    T8] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  672.832890][ T9528] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  672.841796][ T9529] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  672.902485][    C0] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  672.908592][    T8] usb 2-1: USB disconnect, device number 10
[  675.367639][    T8] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  675.932031][ T5116] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  676.262109][ T5116] usb 3-1: Using ep0 maxpacket: 32
[  676.347214][ T5116] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  676.372149][ T5116] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  677.282004][ T5116] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  677.293789][ T5116] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  677.312122][ T5116] usb 3-1: config 0 interface 0 has no altsetting 0
[  677.321777][ T5116] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  677.331519][ T5116] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  677.341447][ T5116] usb 3-1: Product: syz
[  677.349899][ T5116] usb 3-1: Manufacturer: syz
[  677.354933][ T5116] usb 3-1: SerialNumber: syz
[  677.372712][ T5116] usb 3-1: config 0 descriptor??
[  677.387466][ T5116] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  677.426580][ T5116] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  682.287623][ T5116] usb 3-1: USB disconnect, device number 12
[  682.329363][ T5116] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  682.338737][ T9556] netlink: 'syz.3.993': attribute type 12 has an invalid length.
[  682.684947][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  683.056205][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  683.121250][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  683.283957][    T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  683.323004][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.409543][    T9] usb 4-1: config 0 descriptor??
[  683.561974][ T7882] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  683.863796][ T7882] usb 1-1: Using ep0 maxpacket: 32
[  683.889188][ T7882] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  683.928866][ T7882] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  683.968562][ T7882] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  683.986870][ T7882] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  684.006393][ T7882] usb 1-1: config 0 interface 0 has no altsetting 0
[  684.017170][ T7882] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  684.032441][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  684.033528][ T7882] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  684.056540][ T7882] usb 1-1: Product: syz
[  684.061204][ T7882] usb 1-1: Manufacturer: syz
[  684.069834][ T7882] usb 1-1: SerialNumber: syz
[  684.098836][ T7882] usb 1-1: config 0 descriptor??
[  684.148206][ T7882] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  684.170489][ T7882] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  684.238244][    T9] usbhid: probe of 4-1:0.0 failed with error -71
[  684.248946][    T9] usb 4-1: USB disconnect, device number 9
[  685.593457][ T9576] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  685.601275][ T7882] usb 1-1: USB disconnect, device number 11
[  685.601337][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  685.615651][ T9582] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  685.625312][ T7882] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  685.795115][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  686.117882][    T9] usb 3-1: Using ep0 maxpacket: 8
[  686.123778][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  686.145825][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  687.081460][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  687.115598][    T9] usb 3-1: config 0 has no interfaces?
[  687.193292][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  687.221736][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.249523][    T9] usb 3-1: Product: syz
[  687.284436][    T9] usb 3-1: Manufacturer: syz
[  687.298695][    T9] usb 3-1: SerialNumber: syz
[  687.369649][    T9] usb 3-1: config 0 descriptor??
[  687.651490][ T9589] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1000'.
[  687.660800][ T9589] ip6gretap0: entered promiscuous mode
[  687.667109][ T9589] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1000'.
[  689.160548][   T27] usb 3-1: USB disconnect, device number 13
[  691.759008][ T9622] netlink: 'syz.1.1010': attribute type 12 has an invalid length.
[  692.062235][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  692.110847][ T9627] netlink: 'syz.0.1012': attribute type 12 has an invalid length.
[  692.253711][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.292670][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  692.448981][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  692.458204][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.493094][    T9] usb 2-1: config 0 descriptor??
[  693.483326][   T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  694.133985][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  694.170149][    T9] usbhid: probe of 2-1:0.0 failed with error -71
[  694.200537][    T9] usb 2-1: USB disconnect, device number 11
[  694.303481][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.142008][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  695.152427][   T27] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  695.161532][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.204709][   T27] usb 1-1: config 0 descriptor??
[  695.262138][   T27] usb 1-1: can't set config #0, error -71
[  695.272190][   T27] usb 1-1: USB disconnect, device number 12
[  700.494779][ T9664] sp0: Synchronizing with TNC
[  703.910780][ T9690] netlink: 'syz.1.1027': attribute type 12 has an invalid length.
[  705.182010][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  706.593182][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  706.677647][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  706.695837][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  706.705497][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.733994][    T9] usb 2-1: config 0 descriptor??
[  706.986874][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  707.012775][    T9] usbhid: probe of 2-1:0.0 failed with error -71
[  707.172166][    T9] usb 2-1: USB disconnect, device number 12
[  714.152618][ T9747] input: syz1 as /devices/virtual/input/input17
Stopping sshd: stopped /usr/sbin/sshd (pid 5545)
OK
[  722.732336][   T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  722.961963][   T27] usb 3-1: Using ep0 maxpacket: 32
[  722.978763][   T27] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  722.987398][   T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  722.998704][   T27] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  723.009970][   T27] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  723.023551][   T27] usb 3-1: config 0 interface 0 has no altsetting 0
[  723.039185][   T27] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  723.048752][   T27] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  723.048947][   T27] usb 3-1: Product: syz
[  723.058452][   T27] usb 3-1: Manufacturer: syz
[  723.058578][   T27] usb 3-1: SerialNumber: syz
[  723.062003][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'.
[  723.076101][   T27] usb 3-1: config 0 descriptor??
[  723.107662][   T27] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  723.119456][   T27] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
Stopping crond: [  723.271033][ T9798] gtp0: entered promiscuous mode
[  723.342077][ T9798] gtp0: entered allmulticast mode
[  725.064545][   T27] usb 3-1: USB disconnect, device number 14
[  725.906004][   T27] ldusb 3-1:0.0: LD USB Device #0 now disconnected
stopped /usr/sbin/crond (pid 5529)
OK
[  726.698636][ T9810] input: syz1 as /devices/virtual/input/input18
[  729.333350][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'.
Stopping dhcpcd...
[  729.752774][ T9816] gtp0: entered promiscuous mode
[  730.167826][ T9816] gtp0: entered allmulticast mode
stopped /sbin/dhcpcd (pid 5450)
Stopping network: [  733.689810][ T7882] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  733.972078][ T7882] usb 3-1: Using ep0 maxpacket: 32
[  734.001970][ T7882] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  734.041979][ T7882] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  734.065907][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'.
[  734.075060][ T7882] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  734.111920][ T7882] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  734.120251][ T9863] gtp1: entered promiscuous mode
[  734.161067][ T7882] usb 3-1: config 0 interface 0 has no altsetting 0
[  734.203138][ T9863] gtp1: entered allmulticast mode
[  734.210199][ T7882] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  734.344284][ T7882] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  734.371902][ T7882] usb 3-1: Product: syz
[  734.376255][ T7882] usb 3-1: Manufacturer: syz
[  734.381033][ T7882] usb 3-1: SerialNumber: syz
[  734.539158][ T7882] usb 3-1: config 0 descriptor??
[  734.636464][ T7882] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  734.784096][ T7882] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
serialport: VM disconnected.