last executing test programs:

26m49.611922795s ago: executing program 32 (id=337):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000000)={0xe00, 0x0, 0x200d, 0x6, 0x9, {0x1, 0x2}, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x84)
capset(&(0x7f0000000080)={0x20071026}, 0x0)

26m29.852526711s ago: executing program 33 (id=507):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f0000000940)={0xa, 0x4e20, 0xa6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000"], 0xfdef)

26m10.548327841s ago: executing program 34 (id=621):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='task\x00')
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x1, 0x3, 0x5, 0x7fffffffffffffff, 0xc2, 0x55, 0x2, 0x1, 0x2})
syz_open_dev$hidraw(&(0x7f0000000140), 0x1, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x368, &(0x7f0000000240)={[{0x12, 0x4e00, "f635901916fcacac6d5359ff3b628289d4be"}, {0x5e, 0x4e00, "681ce69dea0ad04c0d86cbdfe956a17b6e80ac06ae6825100c12f0d41e0393dc0c97d1e238ef2540cd9b1fb013e16a90b46691e218bbb0eee789b22abe41f4c6e876e99100450330e31d71fb4f976186effa958c62c13fc6d48f97eb8ef4"}, {0xf9, 0x4e00, "18a46d43df8747187efdce3fac54d9dd534e5d36d75e665a85d5d44ad7387d08a127c22348c35e25203687a03d5f7c6118f98161447eb04cc2e774cae0989d8dd56fa26ca7d0030051e743bf4a82a1a3b580c5df369cceb1094d09c261e8398698c1110bed4964f7bd702ecb6a05d095387548f478c1ab2c714689865d52e51e1251c4375e8be20c5cff4d8f217d08175d8b97b78db9d2fb34c09ce926edc17dd300d4932ed2b125f2491e1451d5324c5aa32d47c3304253c2f77f0be240209d720aaa3cc70ee1f9563d94f09b9ba3928c7e567104f31683cbe4c55b0f0e2257ed5b219152e06911882ffedd006b213571d19c7df9d8413ee7"}, {0x90, 0x4e00, "524ec8d8f8b769a09e284bef0a650b99f99ef060f14d99bb479afe520d01724bff2a4fb84679ccd38a6a4073b5be4bc85ee6b2c450465df4c092308e807b9e56deaca6b1162a6040a0f9960126d8015e05ca5341dadd7a22c75143c4e58a90ba9086ce439d6e9f4c07fd78214c4d682446df08a8e96c0b5284321aa5c24aeb4057c146840f0c2e985cdd3710bb6f1f55"}, {0xa2, 0x4e00, "87f6e5c409f9aaf6a9c40eee2520af573cfe5a0063c3bfe3c850a5c7e9eefbc1f24970d6f787ac6041e99f7454d8d97cd37fda46d17edc272bd33135fca2217a3f18fe34b73461cc4976eef06116539b90bc31860ba04cf1f1cb127d4bf7bc91a027385399078ee4ace0a5740ab9d39c3fca8952586e8788c9254ec5b3747aa9f043477963704f064e5bfb1c55dfb8fc32cc6d891e7cf437c03f20a921235ee094e0"}, {0xac, 0x4e00, "0aafec461b2f5b3f717687a0da78adc730eff4069561719ded9aa5760d2da111bfeda261395cd6b570ededf9b24c597f4bbe024f985b42e359d066e460ac97ecccd5246664d3a72222b2fc7f5c104a102f2e9a489140c5f8d18c7db63da79d088d90dddb8e83d2a3e4e9363d4015cc556775a07bfaa915f631e46b32f9e0b4dac543f95bb17a59f2d0ac50e4fa78e232e70275f6c538a70fa21f42df4d68b7508fc5f79ed2584577be830074"}]})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r1)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x121800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x44)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x9c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x88, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '^@@-]$+\xe5[-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'F)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x33ef}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x20080054)
read$dsp(r0, &(0x7f0000000940)=""/216, 0xd8)
syz_usb_disconnect(r2)
syz_usb_disconnect(r2)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8b, &(0x7f0000000a40)=@generic={0x4, 0x2, 0x83, "67d7d79a", "7e5f3e81c38c7617a7cae50d831b294b33a4452520ea741395e869d7f3141c1fb4c5d06180541fcdb01e3000660177c6c632b18231ac4e04a1669c379a8aa9e81fe0e5c7b475dc7920415584d86cc179385770b05b859512f9f088d5f5dbf435ca53b0f144e846094ce946dffa62bba2fb99b6d0731167e9db98f5fe17bb5d19721bd6"})
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b00)={0x51, 0x3, 0xfffe, {0x3, 0x4}, {0x3, 0xfe01}, @cond=[{0x6, 0x9c, 0xd2, 0x7f, 0x2ab, 0x8}, {0x4cb8, 0x2, 0x6a, 0xfff7, 0x9, 0xb}]})
r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000b40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x8, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0xf5, 0x6}}]}}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x201, 0x2, 0x0, 0x4, 0x8, 0x6}, 0x14b, &(0x7f0000000bc0)={0x5, 0xf, 0x14b, 0x4, [@generic={0x69, 0x10, 0x2, "634cfca68359a90f45cdb188ae149bf5ee8029c823e580353c227e0649c5a60ba27d2de16315d7233eaa7d2efc22bec446f466367c28d66d2755333323e40ed5183e476cd9cf663f39ca62cb771da0c2e908de8d78bbcca47b4ac228a22a0f04a73d97212fe5"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x2, 0xff0f, 0x797, [0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x2, 0x7f}, @generic={0xc6, 0x10, 0x3, "c5c32b9c4123d994e99cbfc50a5750db1823786a65f81bcd858c37cf0bdf83a6e47bde1199a35bbf014a6ca630db7623e5873209d45dc782df9afbef96c75b88a4619346c3b1acbc3daa1491822d592a834517f40e7d77a1db487e223beb8d907c4d838e522a5bc66a887d2522380a9a3107e871b29e19c0756b06762ef78eaeed15ee6673c15d7793c53a4334fe6f3326ad218d5b3493e433869a700adae859135deec4f99768378dfa6b10c27eaaf72adcbe69cf1bed2260ab375f41a8e760f15360"}]}, 0x4, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x860}}, {0xef, &(0x7f0000000d80)=@string={0xef, 0x3, "92aea32e98e888277cf36c654277a1121fb27c06921ba59179b74672291db2d405a9131419765a7dc824e204976a5b4d9201ae2d62e27103fb39e47e94b7365e8e216221ad26a1e87637f083eb769fcd9ceb091266efb576d6c3f09de40757d4a616748b55492382a4149f316bfb796408f38090f24a0c9f95dcc086bd8586c6238d2a8dfb52adb9c6af5cec3ee5b77891848dc087d338759dfc895b4b15dde25558f2c8c3001967f6025aff6c74347b5baa7d3651726e45206194079e316d50627c229115a89ead2e8741c5f296e56cb334b0a8b41e676a7366f34476dcbe4a257abbbd605a95475340777c5a"}}, {0xa6, &(0x7f0000000e80)=@string={0xa6, 0x3, "1aa0e5ab06878db49c235e83293da9074ff2036f80425befdaca07e2f89668225073ea22fe1e0450536194ba76abc4f62e889445da877e60dff77f3d8ce92af1a66cfc1cf803d23894c85e4f5993fe78a105566bf904a0e95095a9eac56f092300e9e7f56e3aaeb2f4c709d8519acd364541cab07365baaf00fcf6385cc23929c024f2a957ad7445de978f403040bb7ce375fe1e7233d6aadef2b180f19e594b5b53eeb9"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x2801}}]})
syz_usb_control_io(r5, &(0x7f0000001140)={0x2c, &(0x7f0000001000)={0x20, 0x31, 0x1e, {0x1e, 0x8, "a56c12a50ff17e9005685b46cc0da3412e038dc834acea2184255b6b"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}, &(0x7f0000001080)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x22, 0x7, 0x6, 0x1, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x6, 0x7}]}}, &(0x7f00000010c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x1, 0x9, "3586e72f", "ad5041e5"}}, &(0x7f0000001100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x2, 0x8, 0xac, 0x9, 0x6}}}, &(0x7f0000001600)={0x84, &(0x7f0000001180)={0x20, 0x10, 0x8c, "81cf7d96b7a21f590a817963b97fb24cd4e55605de72f6732613eb31c8e33cd43e6903d5759828e32ffa9c7ed2bc2b10d8e08f762f0f8f5d8669b74f2c7bae7c00145b800a0883de846f4cd18bfad37f03a0ed6710f48108661ce9efc6d3da8792b7ca573ed262e76fa0e577ad03720f834f75fadca8cd2afeb48953ecc2d6771cd6d21532ffb7d803d191fd"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000012c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x1c00, 0x20}}, &(0x7f0000001340)={0x40, 0x7, 0x2, 0xfe}, &(0x7f0000001380)={0x40, 0x9, 0x1, 0x8}, &(0x7f00000013c0)={0x40, 0xb, 0x2, "2481"}, &(0x7f0000001400)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001440)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001480)={0x40, 0x17, 0x6, @local}, &(0x7f00000014c0)={0x40, 0x19, 0x2, "8bd8"}, &(0x7f0000001500)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001540)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000001580)={0x40, 0x1e, 0x1, 0x8}, &(0x7f00000015c0)={0x40, 0x21, 0x1, 0x9}})
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f00000016c0)=@ready={0x0, 0x0, 0x8, "15236e4f", {0x1, 0xfff, 0x8, 0x0, 0xf}})
syz_usb_connect$cdc_ecm(0x1, 0xa0, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x1, 0x1, 0x10, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "1c"}, {0x5, 0x24, 0x0, 0x68}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x4, 0xf}, [@ncm={0x6, 0x24, 0x1a, 0x101, 0x4}, @mdlm_detail={0xc, 0x24, 0x13, 0x72, "8002a7715de2693e"}, @mbim_extended={0x8, 0x24, 0x1c, 0x2131, 0xb, 0x5}, @country_functional={0x12, 0x24, 0x7, 0xb6, 0x5, [0x8, 0x2, 0x7ff, 0x4, 0x3, 0x6]}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xd, 0x7fff}, @mdlm={0x15, 0x24, 0x12, 0x200}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x2, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x40, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xfa, 0x80, 0x80}}}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x310, 0xb5, 0x8, 0x6, 0xa7, 0xff}, 0x56, &(0x7f0000001800)={0x5, 0xf, 0x56, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x0, 0xff00, 0x86a, [0x30, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x3, 0x4e, 0xe, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xca, "74cacd1df0b43fc34edf95e853b797e2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0xf, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "1c3d6a36daf9dfeff46e7d31f2bdb2ba"}]}, 0x2, [{0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x426}}]})
syz_pidfd_open(0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0x88, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0x5555555555540204}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0x88}, 0x1, 0x0, 0x0, 0x48001}, 0x40004)
creat(&(0x7f0000001b00)='./file0\x00', 0x10)
mount$bind(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='./file0/file0\x00', &(0x7f0000001bc0), 0x8d020, 0x0)
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001c00), 0x40, 0x0)
ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000001cc0)=@multiplanar_mmap={0xff, 0x2, 0x4, 0x800, 0xe, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x7, 0x2, 0x3, "40968909"}, 0x1ff, 0x1, {&(0x7f0000001c40)=[{0x5, 0x0, {0xffffffffffffffff}, 0x1}, {0x2, 0x8, {0x6}, 0x7}]}, 0x400, 0x0, r0})

23m8.220588932s ago: executing program 35 (id=1323):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffeff, 0x4522c0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000200000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r4, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
sendmmsg$inet6(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006)
r6 = accept4$unix(r4, 0x0, 0x0, 0x0)
recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x107, 0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000001505000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES16=r7, @ANYBLOB="000229bd7000ffdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0a001a00ffffffffffff00000a00060008021100000100000a00060008021100000100000a0006000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x81c0}, 0xc1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000001180)=ANY=[@ANYBLOB="a81f0000", @ANYRES16=r7, @ANYBLOB="00042abd7000fedbdf257500000008000300", @ANYRES32=r8, @ANYBLOB="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"/8064], 0x1fa8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x133, @loopback, 0x9}, {0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0xffffffffffffffff, 0x3}}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r9, 0x2000)

19m18.054255456s ago: executing program 36 (id=2531):
syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xc2, 0xba, 0xb8, 0x40, 0x1199, 0x6832, 0x9c50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xca, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x99, 0x9, 0x0, 0x20, 0x5f, 0x5, 0x4}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
syz_usb_connect(0x0, 0x24, &(0x7f0000000e00)=ANY=[@ANYBLOB="12011001c5a6e34063070120a47f01e66dc0ea02120001028f00060904020a00ff381e7f"], 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x388600, 0x0)

16m38.962728666s ago: executing program 37 (id=3482):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000000091, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x8, 0x4, {0x1, @raw_data="1b75ce6e2512f636be6d4188321671a21cc1cda0d1155b834d505cbc798bee0737429d800c538884f410c1a8bd6d766094f78a643548f95790efd961d813ffa411c30174bdbcb146cdb53746ba3c7695e8dc242dcdc0b256385c2b415826917920043c7d52bb872cb7190d5614c6f7dd8d30b9f69b601f86eb544fc6a502000000000000fd28bbe78cad95e46294b8f264502dbc46f7c194761f8f3120398bdd2fe6c9a97ba5d848ab673890f5787a4dca83c3a3f62a904372b81e768fa1bf9f611cf36a29535c0f"}}) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "d995f8be", {0x1, 0x4, 0x8f, 0x17, 0xb5}})
r2 = creat(&(0x7f0000001380)='./file0\x00', 0x244)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) (async)
recvmsg$can_j1939(r2, &(0x7f0000000280)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/126, 0x7e}], 0x3}, 0x40010100)

12m19.927535206s ago: executing program 5 (id=5310):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="14002c8008000000070000eb0700000007000000"], 0x30}}, 0x40000)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_open_dev$tty1(0xc, 0x4, 0x1)
exit(0x0)
sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a03000000000000000000020000080900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x1, 0x70bd29, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x14)
ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000001c0)={0x8, 0x30000, 0x4, 0x1, 0x20, 0x5, 0x1, 0x7f, 0xffffffff, 0x5, 0x80, 0x1c, 0x0, 0x0, 0x0})

12m18.986373567s ago: executing program 5 (id=5317):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfs\x00', 0x200000, 0x0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfs\x00', 0x200000, 0x0) (async)

12m18.727711692s ago: executing program 5 (id=5320):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480)="a04dcac99c0e9a597582fd6aaf9e8e1fd01892bd449be2568cc0a58d3dbad541e8c4792b104556225f65a60045fd9664fdc97bbdbc5076a08bbb90674284379ee3b6895a31e2ce19ba13494eb6334dd0601b1e488290db600a1c0046ea8d5582618b3c11dd08fd29850c58b1a5f49a4b290ad3", &(0x7f0000000940)="73836bd4aaa9ae933d9511594272f7d194e8ad3b7a6ce51de71dfe25cfdfbb5241efd9fc90eada52451693ae1f28c06c608885d2d916e921a0c0124229ffee2c0c54e93ddc54e792f9f763f63a45d2c996ba255691b4d4f1740cd0d2ca680ec4bbeefe0a0f561c37959e3564ed2c2c0c555bb13a425e22ca113c465975e15e7bfbe48cfa2bc1cc8a45c9d0aa84e0bf630a185afe30f80d269b0b99aea4c1fe605b47efd49557cb2b7334f21e"}}, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
process_vm_writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/198, 0xc6}, {&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000400)=""/39, 0x27}, {&(0x7f0000000440)=""/63, 0x3f}], 0x6, &(0x7f0000000840)=[{&(0x7f0000000500)=""/83, 0x53}, {&(0x7f0000000580)=""/210, 0xd2}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/174, 0xae}, {&(0x7f0000000740)=""/234, 0xea}], 0x5, 0x0)

12m17.444220307s ago: executing program 5 (id=5326):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sched\x00')
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000ddffffff9004000000000000ffff"])
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000003c80), 0x8)
write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x8)
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0/file0\x00', 0x51)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0)

12m17.101270815s ago: executing program 5 (id=5330):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x34, r1, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0)

12m16.570499266s ago: executing program 5 (id=5333):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000000c0), &(0x7f00000004c0)=0x4)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000073c2b403b1b5129ee9e01020301090246000100000002090419cd010e0100000624060000a105240405000d"], 0x0)
syz_usb_control_io$printer(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0xffff8000})
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xbc, 0xff, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x0, 0x2, 0x1, 0x2, 0xfff}, 0x3, 0x3, 0x2})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r5 = getpgrp(0x0)
write$cgroup_pid(r4, &(0x7f0000000080)=r5, 0x12)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x80800, 0x0)

12m16.252168831s ago: executing program 38 (id=5333):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000000c0), &(0x7f00000004c0)=0x4)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000073c2b403b1b5129ee9e01020301090246000100000002090419cd010e0100000624060000a105240405000d"], 0x0)
syz_usb_control_io$printer(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0xffff8000})
syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xbc, 0xff, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x0, 0x2, 0x1, 0x2, 0xfff}, 0x3, 0x3, 0x2})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r5 = getpgrp(0x0)
write$cgroup_pid(r4, &(0x7f0000000080)=r5, 0x12)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x80800, 0x0)

9m18.16837158s ago: executing program 0 (id=6506):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x4, 0xfffd, {0x0, 0x11}, {0x48, 0x2}, @ramp={0x0, 0x6, {0x6, 0x3ff, 0x1, 0xffd0}}})
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x400400)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'sit0\x00', <r4=>0x0})
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x47524247}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x10000008)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{<r9=>0x0, 0x6, 0x9ab9, 0x8, 0xb, 0xa, 0x9, 0x3, 0x6, 0x9, 0x1, 0x3, 0x595f, 0x81, 0x8}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000001480)={r9, 0x9})
setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f0000000500)={0x9, 0x80000000, 0x2}, 0xc)
sendto$packet(r2, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x1851820, 0x0)

9m18.035794926s ago: executing program 0 (id=6507):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000)
r1 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, 0x0)
readv(r0, &(0x7f0000000000), 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x100)
lgetxattr(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x70bd2b, 0x0, {0xff}, [@typed={0x4, 0x120}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

9m17.975878569s ago: executing program 0 (id=6508):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa4386dd6d00000000d9110100000000000000000000000000000000ff0200000000000000000000000000014e224e2000d990"], 0x113) (fail_nth: 1)

9m17.458218247s ago: executing program 0 (id=6511):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xcb)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) (async)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x12f748a, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
umount2(&(0x7f0000000200)='./file1\x00', 0xa) (async)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000000910000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000020000000b13"], 0x48}}, 0x20000000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

9m17.40649279s ago: executing program 0 (id=6512):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x7, 0x7})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)

9m17.137892653s ago: executing program 0 (id=6514):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300))
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
setrlimit(0x9, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11d, 0x1, 0x0, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
r7 = fcntl$getown(0xffffffffffffffff, 0x9)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
preadv(r2, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/244, 0xf4}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/229, 0xe5}], 0x6, 0xfffffff7, 0x80000001)
read$FUSE(r8, &(0x7f000000c3c0)={0x2020, 0x0, <r9=>0x0, <r10=>0x0, <r11=>0x0}, 0x2020)
write$FUSE_INIT(r8, &(0x7f0000000500)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df072bb, 0x0, 0x441, 0x104, 0x400008, 0x0, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(r8, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x200003, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r10, r11, 0x0, 0x10001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lchown(&(0x7f0000000000)='./cgroup\x00', 0xffffffffffffffff, r11)
getpgid(r7)

9m16.766756216s ago: executing program 39 (id=6514):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300))
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
setrlimit(0x9, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11d, 0x1, 0x0, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
r7 = fcntl$getown(0xffffffffffffffff, 0x9)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
preadv(r2, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/244, 0xf4}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/229, 0xe5}], 0x6, 0xfffffff7, 0x80000001)
read$FUSE(r8, &(0x7f000000c3c0)={0x2020, 0x0, <r9=>0x0, <r10=>0x0, <r11=>0x0}, 0x2020)
write$FUSE_INIT(r8, &(0x7f0000000500)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df072bb, 0x0, 0x441, 0x104, 0x400008, 0x0, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(r8, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x200003, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r10, r11, 0x0, 0x10001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lchown(&(0x7f0000000000)='./cgroup\x00', 0xffffffffffffffff, r11)
getpgid(r7)

5m34.091960121s ago: executing program 6 (id=7867):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) (async)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x8000, 0x0, 0x0, 0x0})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000440)={0x2, "418a814ada2b7b5ddf6df93463b735c8394113315b0708dddb36a3de0f0aa92a"}) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000440)={0x2, "418a814ada2b7b5ddf6df93463b735c8394113315b0708dddb36a3de0f0aa92a"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x80, "3e6b4a2960a542c56c7d013b5d4c1fd2e677add9b1d63e7297e5323ad70da172"})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf25120026dd8a32b8635c22d0818bf300001800018014000200766574683000000000000000080000000800090000000002080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0)

5m33.970846438s ago: executing program 6 (id=7869):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x9, 0x9}, 'syz1\x00', 0x3d})
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0)
ioctl$EVIOCRMFF(r2, 0x40044581, 0x0)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000)

5m33.695878431s ago: executing program 6 (id=7871):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x400, 0x0) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x400, 0x0)

5m33.614925877s ago: executing program 6 (id=7873):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xe, 0x101000)
ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000100)={{{0xd, 0x1}}, 0x6f, 0x3, &(0x7f0000000080)="61608ae30261830f6b24f7797b5f395f04956f660facc6c41a9259c7df87f8de2d30e4f342e8672df82a935159e527157f99be1956a36322c66dbd0854a3686e6742cdd6f8238e6420a35ae9e5608a00bb4ffe715724405f33bad41c026822a73ef452a40519643c1f4db1e9b99895"})
r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0xc0000)
ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={@null, 0x5, 'erspan0\x00'})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000002c0))
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000300)=""/16, &(0x7f0000000340)=0x10)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0)
sync_file_range(0xffffffffffffffff, 0x9, 0x2, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=<r7=>0x0, &(0x7f0000000480)=0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r8=>0x0, 0x4, 0x2, 0x4, 0x6, 0x40, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x20, 0x0, 0x3}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', <r10=>0x0, 0x4, 0x2d, 0x0, 0x1, 0x50, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8, 0x5db, 0x2}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000680)={'gretap0\x00', <r11=>0x0, 0x80, 0x7, 0x4, 0xffff, {{0x33, 0x4, 0x0, 0x20, 0xcc, 0x64, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@ssrr={0x89, 0x13, 0x77, [@local, @empty, @private=0xa010102, @empty]}, @cipso={0x86, 0x5a, 0x2, [{0x2, 0x5, "b993ca"}, {0x6, 0xa, "f7c29a8050dae9f9"}, {0x1, 0xa, "224500a1ae542ea1"}, {0x7, 0xd, "66698a962f5b5b2e3eeb0b"}, {0x7, 0xf, "9f9905f7e839b66a269fac87af"}, {0x0, 0x2}, {0x1, 0xe, "5a512ecfa1991d680b5a69b2"}, {0x2, 0x3, "fd"}, {0x6, 0xc, "6264773e2e8cdceb492b"}]}, @ssrr={0x89, 0x17, 0x1d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @empty, @multicast2]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0x98, [@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @remote, @empty, @remote, @local]}, @timestamp={0x44, 0x8, 0xf6, 0x0, 0x8, [0x9]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', <r12=>0x0, 0x2f, 0x3, 0x51, 0x9, 0x74, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8000, 0x7}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000880)={@loopback, <r13=>0x0}, &(0x7f00000008c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xe8, r6, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r15 = syz_open_dev$hiddev(&(0x7f0000000d00), 0x100000001, 0x80)
ioctl$HIDIOCGFIELDINFO(r15, 0xc038480a, &(0x7f0000000d40)={0x1, 0xffffffff, 0x7, 0x7f, 0x9, 0x10001, 0x1, 0x4, 0x9, 0xb, 0x8, 0xffff, 0xb, 0x40})
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r5)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000000e00)={0xa70, r16, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x60}}}}, [@NL80211_ATTR_FRAME={0x55e, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b, @random="9582b1a03838", {0x7, 0x8c4}, @value=@ver_80211n={0x0, 0x3b37, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x3ff, @random=0x8, 0x0, @void, @void, @void, @val={0x4, 0x6, {0xf, 0x2, 0x1ff, 0xfbe}}, @val={0x6, 0x2, 0x4}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x7, 0x8}}, [{0xdd, 0xa6, "44bd28e1175168da68064c83344d2caa0e7ca18c34a239282188b0a88e0f5adf5bca63129dbeffba06f4fa020ddc2fb5f8b1200fcda4318127bb9f38a6607fd4fcdfad76861b116c6421a376fff34eb565310a65b3207f8ab914cf8095335e09c7a198f6bb818f32e05fb4350cc7ec38999a8f12c504454dc9ba363ca0087ebcbd4b4966e5e4ad59650bdf0d6cde3a2a8119a7ff18b131a4ff02389ebedbd306f34cc0c0bd52"}, {0xdd, 0x78, "15f9126f00676dfb39b4bea3be25f4ae538383755d7301f4e2df68a7c91ef498f505d66a15718910e0659879baea95ad7d68880f08ce678f283fb27c2bdb6be12d6a1a8e3cffa4070f079ada1f4043053ef2fbf04a401aa0563f76a7e386d561b3b43c1737a93805d6ebcaf908e56d38178f8e5274d64b19"}, {0xdd, 0x5f, "89fd22ddf1987d8638be8152608d4a91d494ffe5707098fd96ae9847cc443bb5e91a9fc523aba4385c37767e7452ac69518dabcd109ad94f2288c17dcdb434bfe06ab23ed6ee2d4b73670388c85fc306e7c49181f1913055b49a0432c91f35"}, {0xdd, 0x32, "e741c205d8ad6ecd9137a5f12240ebb55b4d6749b6305d05d611880bf3faeea354c834593faec60631937a95d8afea3ae5f0"}, {0xdd, 0x86, "2c9e5f62d15b0a9ba10ff2289413c0e2f90be368382cbdf01566c8aa835baeea303ad7bb070bc2809ed064d4926b895c7932d2b5eb6765550bd992e9d5b37602a9af1320c0a52bce82f05c44b44d563892a3e3c1968125159970ccbfd8dea452bc3585a243ce1790eb22755ec02a1476670f058e8ceb06316349dcd656f4bfcd35e3176a263f"}, {0xdd, 0xc8, "2f7d4124ec367e2e73decebbe284fff4adc737ad02b30a29590921ba3b9d34c4bab96714d35d1d0d9d4e33cffa6e4069621a92d4c78797bb5acd465f522b7161c5e77e9875eb933e31e44ffde3e92e0264013d0ffc613d7f0eeda28e175268a85bfd22c06e0abfb524acba3c429370a71b6d2d0edc04d9d5e22510f835128b94317a6cc54f21c7ecf48b97fb6cea1d61a6553ff24e4afc82028aa026837623d6fa13210f8f3bbb570e74013c20b3c2994f0208d395a4271a5506d9a8372726125d084c4feaac8971"}, {0xdd, 0x88, "1cf95aea71401550f207d0daaef017e4b679618dbc638fc158cde47bbcd1a70fb32434af09a50d0b0c3e939d8670de6d1db52bb9ae8e2447b7835ed95b72e2bb71364696a8606fc04662df316f78b4f86e1121faa7d7349c9961b6f022610341279027672dcc9f27a02c63eb708274994c377997ca6684f7846d450dcf7adc20a6ec9dbd45f5c5cc"}, {0xdd, 0xb8, "e929ecc92b1c411f9f181d03c661baa09a9ab7846c16e1c3bcba3507ca325a485ae23ee52a88f077535112ceac04fd0a4f4c3ce5add858f8197358c2fb5d5680767b87f9bd611ba1aaed1d8e9602f727f76b5094c24618a5b60f8b55608959466b195ce5858a4714aeb13ca4ca3d2cd453ee20869a533e10d6104c42f8bae1cad928d10ce8db2695fbf96369a964b3eac9e692584f11746a76f3850d131c06b814b5948dae1b75a5d2806e799f77969a0dd05825c9d4830a"}, {0xdd, 0xc6, "77fafa2d8608896e92a3619c04c88604a4230e9c9b71d5533a4b7a9326bb6b74970c7b3db47325a70347103f20138aa22b6052b5a2cbfa761000855368dde0a63cdbeb443a7af0e7e4025fa2baddecc336e9b925873c5c08ba840da041144cdf55b1c814c5caf4a3d93ea8b3158776749d1b9e8f7856f73071b424f631e0b56ba5a2738b94c5a91a83440003c95ade5bd65b7049eabfa85fd7f6a14a4aa40eee5a9d926435a70558f222d999804e120cad15cf9418fc8fc51721c71db8bbca1f6ab3a74106a9"}]}}, @NL80211_ATTR_FRAME={0x27, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x2, 0x80}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @tdls_setup_req={0xc, 0x0, "", 0xef, @void, @val={0x1, 0x2, [{0x36, 0x1}, {0x2}]}, @void, @void}}}, @NL80211_ATTR_FRAME={0x441, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2f36}, @device_a, @device_a, @from_mac=@device_b, {0x2, 0x6}, @value=@ver_80211n={0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x38}, @val={0x2d, 0x1a, {0x10, 0x0, 0x1, 0x0, {0x6, 0x1ffc, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x57}}, @void, [{0xdd, 0xc6, "ab718bf337c0ea62c212b5bb5733fecf5e8ac509039d553a8419d7e06f18eefb3a75ef9f123e700acd98cb6eb0b19153e61ac109d7c87f3dfdcb86175fc952243fc670ca23f67031142fe4a5531fa51bbe60327896783ea7cbc6683175e9c3da6c08af1f11e37ce97ac74eb47a096eacd5e872860c11d1ba6ad79347a9af80dfc9be88c9d632b780d97345b94a16a85cdbba3b49652e5115682b0d52f693746e05d27bd22c10177098323725ce39f2238161a2b7b1c0e69f58e3ffe921e552a7037f7604f23d"}, {0xdd, 0x2b, "e27f921ae7092c4af05c7bbcbdea065d848df72cc7f22a8f2e3ef540efe2a6e58077eef2e9cd755ee96c4e"}, {0xdd, 0xcf, "6fa283144e6d4933894b23899acdec7baed3868de0ebebbb8f1c65f6999479d4364117c37ed01dfef27237c86dbd1825cbae21347570e86ee62bab2a1495431f2675723b3ffa44773a6d6a5fc20da1225e99d426f7604a88fa8417bc11156e9a7f1f6fcd770988c6ab74b0820c1217c751b479dc38c58ee653a08329763dc99f4708e47af5f680b2a3c0066842ecd6b6da4523e0db2351674d9332c7dd8f1a2a59ce7ccf3d67fa8374cd0e380ed1fd6fc31d1047b0aab7a397979a9b4aa0654e3af30f806c408ded55fbb32fa3b25a"}, {0xdd, 0xfe, "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"}, {0xdd, 0x3f, "c4fa75af39c33e6d3a3bb584144852ce2d549410b9a7c3d0bc044678f98ceba075c4c119ed0c2554cc464fa8f309340ee56afbcc533d09731812bb52a0b2cd"}, {0xdd, 0xd6, "4fc7699369f1f9c8e2e5bdc4cb747a9959ea32e39ed4f36bffafc6b69c8aea1ec0826e2c61fc994b49b336c04545b5339ef0009558294e78871f7e40fb5938516544603030bd437a6a2e93e2e974270a942b1df4da4a43617ddb7c84f98fa1857631217b9963a89f6da73612745554fb42a9facb5cfea6769ed032006c9f02c934bf9ab4ccf2a4b87fd5d44ae01a134d6f1fc241031d441ce02ecaad87cbc29b8a2d70fabed01612596e7f6bad562b2aab23b88af2570d99e64e6159b465bd064b80c03292c9bdf777ce6456ad7c37ba7b2852fac9a6"}, {0xdd, 0x19, "6b5e596c32aa50a6fb5e4cda8aad4b1e70d1c808badedcbf45"}]}}, @NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @initial, {0x1, 0x2}, @value=@ver_80211n={0x0, 0x7ffa, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @delba={0x3, 0x2, {{0x0, 0x0, 0x1}, 0x18, {0xbd, 0x6}}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x109}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xbce3}]]}, 0xa70}, 0x1, 0x0, 0x0, 0x20000000}, 0x2091)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r16, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb03f}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4045}, 0x2000c841)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r16, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x28}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000801)

5m33.42320885s ago: executing program 6 (id=7874):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="148000001000010000000000000000000000000a2c001fa8cc235a083509000000000000000040000900020073797a31000000000c0009"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
syz_io_uring_setup(0x6440, &(0x7f0000000500)={0x0, 0xd52b, 0x10100, 0x0, 0x20d}, &(0x7f0000000340), &(0x7f0000000140))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0505405, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x1, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})
ioctl$BLKRRPART(r0, 0x125f, 0x0)
read$FUSE(r0, &(0x7f0000004380)={0x2020}, 0x2020)

5m33.239822925s ago: executing program 6 (id=7876):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x66001, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
close(r4)
r5 = syz_usb_connect$cdc_ncm(0x1, 0x91, &(0x7f0000000e00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x7f, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ea89ad50fd"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x6, 0x2, 0xfe}, {0x6, 0x24, 0x1a, 0x6}, [@country_functional={0x6, 0x24, 0x7, 0x4, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x9, 0x3, 0x3, 0x400, 0x77}, @obex={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x1, 0x5, 0x22}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x4, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x30, 0xfd, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x9a, 0x6}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x4, 0x7, 0xd2, 0x20, 0xd}, 0x2a, &(0x7f0000000500)={0x5, 0xf, 0x2a, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "f82be655164ffed20ed16b49261093f2"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x4, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x6, 0x7ff}]}, 0x5, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x843}}, {0xfd, &(0x7f0000000580)=@string={0xfd, 0x3, "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"}}, {0xd6, &(0x7f0000000d00)=@string={0xd6, 0x3, "4de88ca7045949d767274220384533a816e31826bab1185663bc1d762b603fb3a1817c9e7d5ebd98c6c667518d6dd44ddd012e54bcacbd5a62bc4379b12a0cebbfb1cce779d97db0d800de8632807e91d4c0cf485a0e75f5e00610c2d3c7f7fbd61d645af37c4e2377dd3f15e4dfc8a588c9590a6217374d98a6a779364f32fdd4a7853a08438cf45acaf49bc2bda16502a7785161946f5886d31c1f98d779587aca4f51ad41d67f61d318da913731e727dc2e5cdab48ae196f9c1d85c6b4383411f049ccc9493e7b522dc70af237b9016f79d6b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1007}}, {0xb9, &(0x7f0000000740)=@string={0xb9, 0x3, "9fa6eba76a5060f50d1f01bba38bdb40bbe1ffda85f97ff113ac22f1abad98d9a376927e19b28f84db6d3056e5b26e8d5707e6fd2baa5391939408b1fb42fb7a0653d621c08a318273a64e45caf425290b59cba31c5c3142c0458cd0b38e497d33a56da0f985dacd8d650318a647242deb6769b312716a65b6c1a5887eaae21b206d0942a3a050c2cb77a3ddcddce3c67efd9cc73aa024ea56a411d7bfecb1da40de85634fd09d6c267f7dfd48d33cb4a0c7ffee5bfea1"}}]})
syz_usb_ep_read(r5, 0x6, 0xba, &(0x7f0000000880)=""/186)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r1, 0xc00, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xb, 0xfb6})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r8)
sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x24, r9, 0x91d, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004805}, 0x0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3000e5b1ace0bddb7d5f3a9ac05bcdf61d2644c3f62879f9948715a54b460709aac0bf7bc1ca8cb19e375a7e825c186806a0cf88936d28cec22f29ff25f4cc59e5fe013858b9a97acbd773ec04339eebb8fe3e8e2e18bf5d0bcd70b5d1c1424d814d582aba28291a8057f3f2dcca00"/126, @ANYRES16=r9, @ANYBLOB="000127bd7000fbdbdf25100000000c000600030000000000000005001100000000000500100060000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x48041)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}})
r10 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r11=>r3, {<r12=>0x0, 0xee00}}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x5, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}, {@msize={'msize', 0x3d, 0x7}}, {@privport}, {@aname={'aname', 0x3d, ']'}}, {@version_u}, {@access_user}, {@access_user}], [{@fowner_eq={'fowner', 0x3d, r10}}, {@smackfsdef={'smackfsdef', 0x3d, '.&::'}}, {@euid_eq={'euid', 0x3d, r12}}]}})
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x100)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
r13 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r13, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex+\x88\xfe\xf7\x01')
keyctl$instantiate(0xc, r13, &(0x7f0000000380)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'cache=none', 0x20, 0x9}, 0x34, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000000c0))
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000a40)={<r15=>0x0, 0x5}, &(0x7f0000000a80)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r14, 0x84, 0x22, &(0x7f0000000ac0)={0x7, 0x8208, 0x1ff, 0x2, r15}, &(0x7f0000000b00)=0x10)

5m17.33635862s ago: executing program 40 (id=7876):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x66001, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
close(r4)
r5 = syz_usb_connect$cdc_ncm(0x1, 0x91, &(0x7f0000000e00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x7f, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ea89ad50fd"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x6, 0x2, 0xfe}, {0x6, 0x24, 0x1a, 0x6}, [@country_functional={0x6, 0x24, 0x7, 0x4, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x9, 0x3, 0x3, 0x400, 0x77}, @obex={0x5}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x1, 0x5, 0x22}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x4, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x30, 0xfd, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x9a, 0x6}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x4, 0x7, 0xd2, 0x20, 0xd}, 0x2a, &(0x7f0000000500)={0x5, 0xf, 0x2a, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "f82be655164ffed20ed16b49261093f2"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x4, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x6, 0x7ff}]}, 0x5, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x843}}, {0xfd, &(0x7f0000000580)=@string={0xfd, 0x3, "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"}}, {0xd6, &(0x7f0000000d00)=@string={0xd6, 0x3, "4de88ca7045949d767274220384533a816e31826bab1185663bc1d762b603fb3a1817c9e7d5ebd98c6c667518d6dd44ddd012e54bcacbd5a62bc4379b12a0cebbfb1cce779d97db0d800de8632807e91d4c0cf485a0e75f5e00610c2d3c7f7fbd61d645af37c4e2377dd3f15e4dfc8a588c9590a6217374d98a6a779364f32fdd4a7853a08438cf45acaf49bc2bda16502a7785161946f5886d31c1f98d779587aca4f51ad41d67f61d318da913731e727dc2e5cdab48ae196f9c1d85c6b4383411f049ccc9493e7b522dc70af237b9016f79d6b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1007}}, {0xb9, &(0x7f0000000740)=@string={0xb9, 0x3, "9fa6eba76a5060f50d1f01bba38bdb40bbe1ffda85f97ff113ac22f1abad98d9a376927e19b28f84db6d3056e5b26e8d5707e6fd2baa5391939408b1fb42fb7a0653d621c08a318273a64e45caf425290b59cba31c5c3142c0458cd0b38e497d33a56da0f985dacd8d650318a647242deb6769b312716a65b6c1a5887eaae21b206d0942a3a050c2cb77a3ddcddce3c67efd9cc73aa024ea56a411d7bfecb1da40de85634fd09d6c267f7dfd48d33cb4a0c7ffee5bfea1"}}]})
syz_usb_ep_read(r5, 0x6, 0xba, &(0x7f0000000880)=""/186)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r1, 0xc00, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xb, 0xfb6})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r8)
sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x24, r9, 0x91d, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004805}, 0x0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3000e5b1ace0bddb7d5f3a9ac05bcdf61d2644c3f62879f9948715a54b460709aac0bf7bc1ca8cb19e375a7e825c186806a0cf88936d28cec22f29ff25f4cc59e5fe013858b9a97acbd773ec04339eebb8fe3e8e2e18bf5d0bcd70b5d1c1424d814d582aba28291a8057f3f2dcca00"/126, @ANYRES16=r9, @ANYBLOB="000127bd7000fbdbdf25100000000c000600030000000000000005001100000000000500100060000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x48041)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}})
r10 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r11=>r3, {<r12=>0x0, 0xee00}}, './file0\x00'})
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x5, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}, {@msize={'msize', 0x3d, 0x7}}, {@privport}, {@aname={'aname', 0x3d, ']'}}, {@version_u}, {@access_user}, {@access_user}], [{@fowner_eq={'fowner', 0x3d, r10}}, {@smackfsdef={'smackfsdef', 0x3d, '.&::'}}, {@euid_eq={'euid', 0x3d, r12}}]}})
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x100)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
r13 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r13, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex+\x88\xfe\xf7\x01')
keyctl$instantiate(0xc, r13, &(0x7f0000000380)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'cache=none', 0x20, 0x9}, 0x34, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000000c0))
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000a40)={<r15=>0x0, 0x5}, &(0x7f0000000a80)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r14, 0x84, 0x22, &(0x7f0000000ac0)={0x7, 0x8208, 0x1ff, 0x2, r15}, &(0x7f0000000b00)=0x10)

2m59.013850337s ago: executing program 8 (id=9005):
creat(&(0x7f0000000140)='./file0\x00', 0x71)
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x19})
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)

2m58.823970811s ago: executing program 8 (id=9007):
socket$alg(0x26, 0x5, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x10, r0, 0x90dde000) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000))

2m58.785317069s ago: executing program 8 (id=9009):
socket$packet(0x11, 0x3, 0x300)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
socket$igmp6(0xa, 0x3, 0x2) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) (async)
connect(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
sendto(r2, &(0x7f0000000140)="050000007a19b90c9daaeca1b1ec5719af0abbb83b0514127c8b417386b5c7cc0f676b6dac18222d5bf3b8b98708a136ddca61719a13016d", 0x38, 0x0, &(0x7f0000000080)=@phonet={0x1d, 0x0, 0xff, 0x80}, 0x80)
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000)

2m58.382921738s ago: executing program 8 (id=9012):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pwritev(r1, &(0x7f0000000b00)=[{0x0}, {0x0}, {&(0x7f0000000000)="ba70de013e", 0x5}], 0x3, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mmap(&(0x7f0000334000/0x3000)=nil, 0x3000, 0x5a051feb1f984a19, 0x110, r0, 0xa3a8c000)

2m58.035734778s ago: executing program 8 (id=9013):
r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1000000, 0x1000000000000})
dup(r0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000400)='jffs2\x00', 0xa7504a, 0x0)

2m58.03216288s ago: executing program 8 (id=9014):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd202, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xd)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[], 0x50}}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0xc8)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota')
chdir(&(0x7f0000000100)='./file1\x00')
r3 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f00000000c0)={0xfffffffffffffdfc, 0x809, 0x0, 0xa})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@x86={0x8, 0x8, 0x2, 0x0, 0x2, 0x6, 0xe, 0xfe, 0xfa, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x2, 0x8, '\x00', 0x4, 0x8000000000005})
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_GET_NO_NEW_PRIVS(0xd)
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2cb0"])
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='udf\x00', 0x8000, 0x0)

2m43.431968828s ago: executing program 2 (id=9099):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00')
fchdir(r1)
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x4, 0x0, 0x7, 0x80, 0x9, 0x2, 0x80, 0x8, 0x5, 0x80000001, 0x6, 0x400, 0x9, 0x7fffffff, 0x8, 0x0, 0x7, 0x9, 0x5, 0x9, 0x5, 0x10001, 0x40, 0x0, 0x5, 0x1, 0x6, 0xfffffc01, 0x3, 0x4, 0x8]})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000001c0)="2ef2660f205c260f01c8f2551b13f30f1eee6766c74424000020000067f30f12475765f0838b36d4b9baf80c66b8e261248766efbafc0ced0fa2260f79ba99004d763e0f070f070f20d86635200000000f22d8", 0x53}], 0x1, 0x0, &(0x7f0000000100), 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000000))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) (async)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') (async)
fchdir(r1) (async)
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, '\x00', @raw_data=[0x1, 0x4, 0x0, 0x7, 0x80, 0x9, 0x2, 0x80, 0x8, 0x5, 0x80000001, 0x6, 0x400, 0x9, 0x7fffffff, 0x8, 0x0, 0x7, 0x9, 0x5, 0x9, 0x5, 0x10001, 0x40, 0x0, 0x5, 0x1, 0x6, 0xfffffc01, 0x3, 0x4, 0x8]}) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000001c0)="2ef2660f205c260f01c8f2551b13f30f1eee6766c74424000020000067f30f12475765f0838b36d4b9baf80c66b8e261248766efbafc0ced0fa2260f79ba99004d763e0f070f070f20d86635200000000f22d8", 0x53}], 0x1, 0x0, &(0x7f0000000100), 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) (async)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000000)) (async)

2m43.33179444s ago: executing program 2 (id=9100):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async, rerun: 64)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async, rerun: 64)
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000)

2m43.04790922s ago: executing program 2 (id=9101):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
mq_notify(r0, &(0x7f0000000180)={0x0, 0x39, 0x0, @thr={&(0x7f0000000040)="71c276f202fe668bb21029bbd6767e2f4d768516c8a6cfb82682c4e2ead52ac6cbbf4ac8775f9d01e6fff00e527fc884f5a73f5c7fcc735fa0c4e77db2d54ee2d525914326d606f6f6c9a81d8782b632315765f0bb3a1dfd8fa7705d8ac38b3be1b402d3933995a9ed80364929f12f24fe7bb2a0b70359c07e79a2fd2fc82561be18b7b08f77b39fd8104f1509141e846b28479f04e2b70bcbb5c157e4c0d02dd44f92078809ec131a785aaade1706c67f4753e73db57e0cbc72ca", &(0x7f0000000100)="2323c0d119b577b643dfe5e46de084e43bdd051656e10f475de2fdd12a8c91d3e155095c8312825c8b2f9338912c49234012df2a7849796f06c6ea7bf6ac04b032b7fdc84a32"}})
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @empty}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, @empty}, 0xc)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x1004008, 0x0)

2m43.025399438s ago: executing program 2 (id=9102):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000380)=""/102, &(0x7f0000000480)=""/74, 0xffff1000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfb}, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r2=>0x0}, &(0x7f0000000180)=0xc)
prlimit64(r2, 0xf, &(0x7f00000001c0)={0x6c}, 0x0)

2m42.962238699s ago: executing program 2 (id=9103):
creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0x901}], 0x1, 0x4023, 0x0) (async, rerun: 64)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) (rerun: 64)

2m42.642303292s ago: executing program 41 (id=9014):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd202, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xd)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[], 0x50}}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0xc8)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota')
chdir(&(0x7f0000000100)='./file1\x00')
r3 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a)
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f00000000c0)={0xfffffffffffffdfc, 0x809, 0x0, 0xa})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@x86={0x8, 0x8, 0x2, 0x0, 0x2, 0x6, 0xe, 0xfe, 0xfa, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x2, 0x8, '\x00', 0x4, 0x8000000000005})
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_GET_NO_NEW_PRIVS(0xd)
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2cb0"])
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='udf\x00', 0x8000, 0x0)

2m42.321543595s ago: executing program 2 (id=9109):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1}) (async)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000280)=0x2)
close(0x3) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
preadv(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/129, 0x81}, {0x0, 0x2}], 0x2, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0xb821f000)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) (async)
r3 = syz_open_dev$ndb(&(0x7f0000000580), 0x0, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0}) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5})
r7 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r7, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x107801, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
madvise(&(0x7f0000412000/0x2000)=nil, 0x2000, 0x13) (async)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="40140200000033"], 0x0, 0x0})
syz_usb_control_io$printer(r7, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r7, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$printer(r7, 0x0, 0x0) (async)
ioctl$BLKFRASET(r3, 0x1264, 0x0)

2m41.580942585s ago: executing program 9 (id=9116):
creat(&(0x7f0000000140)='./file0\x00', 0x71)
mount(&(0x7f0000000200)=@sg0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(r5, 0xf518, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0))
writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000340)="e5e9f3e1", 0x4}], 0x1)
write$nci(r2, &(0x7f0000000a40)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x1, 0x1}, 0x4)
close(r2)

2m41.327747598s ago: executing program 9 (id=9117):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0x4)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)

2m41.280632955s ago: executing program 9 (id=9118):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0xa526, 0x4) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioprio_get$pid(0x2, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendfile(r1, r0, 0x0, 0x7ffff000)

2m41.096520072s ago: executing program 9 (id=9119):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='openpromfs\x00', 0x8001, 0x0)
chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000016})
epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0)
close(r0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
iopl(0x4)
fcntl$lock(r4, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffe})
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f0000000200)=""/33, &(0x7f0000000340)=0x21)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')
r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r7, r6, r6, 0x0)
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000100)={0x0, 0x4, 0x6, 0x0, 0x80010, 0xfffffffd})
keyctl$chown(0x4, r7, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0)

2m40.775702847s ago: executing program 9 (id=9120):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000002, 0xfffffffffffffe16, 0x0, 0x42010003, 0x80000001}) (async)
r1 = socket$netlink(0x10, 0x3, 0x8)
fcntl$lock(r1, 0x24, &(0x7f0000000200)={0x1, 0x1, 0x4}) (async)
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
close(r1)
mount(&(0x7f0000001400)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0)

2m40.247474696s ago: executing program 9 (id=9121):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000ec0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000bc0)=""/258, 0x102}, {&(0x7f00000003c0)=""/208, 0xd0}, {&(0x7f0000000700)=""/153, 0x99}, {&(0x7f00000000c0)=""/45, 0x2d}], 0x7}, 0x2000)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)

2m39.827330768s ago: executing program 42 (id=9121):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000ec0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000bc0)=""/258, 0x102}, {&(0x7f00000003c0)=""/208, 0xd0}, {&(0x7f0000000700)=""/153, 0x99}, {&(0x7f00000000c0)=""/45, 0x2d}], 0x7}, 0x2000)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)

2m26.674381247s ago: executing program 43 (id=9109):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1}) (async)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000280)=0x2)
close(0x3) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
preadv(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/129, 0x81}, {0x0, 0x2}], 0x2, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0xb821f000)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) (async)
r3 = syz_open_dev$ndb(&(0x7f0000000580), 0x0, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0}) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5})
r7 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r7, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x107801, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
madvise(&(0x7f0000412000/0x2000)=nil, 0x2000, 0x13) (async)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="40140200000033"], 0x0, 0x0})
syz_usb_control_io$printer(r7, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r7, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$printer(r7, 0x0, 0x0) (async)
ioctl$BLKFRASET(r3, 0x1264, 0x0)

4.986530093s ago: executing program 1 (id=9957):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100, 0x2}, 0x10)
getsockname$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x89}, 0x4000)
recvfrom$l2tp(r0, &(0x7f0000000200)=""/172, 0xac, 0x20000100, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x3, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x51)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [{0x20, ')&:'}, {0x20, 'syz1\x00'}], 0xa, "888086deb7524e2453ebb6e6514e69cdcd29357efc068fa110bea591899c671fb324c0fcf7e95c20b7159af495c5963695c8b8d273f041c45a30451e9dddfaaf2bfc97a4eda140058e11a13e121c29c8833a1c9a1fd4b67c4f0cc71996ca08ea46391886298e2fe298fe90e8440b6b4419d535d065478523da2da4fd64cde729067e50874611c2cf7bacec9bb0a48b413fedf4fa13a09b0fc72e55eb7e570c8985445d67b69f2bb2cbd6434935a6178e55de6bf6"}, 0xc9)
r3 = creat(&(0x7f0000000500)='./file0\x00', 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000540)={0x0, 0xea60}, 0x10)
r4 = syz_clone3(&(0x7f0000000780)={0x2000000, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600), {0x1d}, &(0x7f0000000640)=""/5, 0x5, &(0x7f0000000680)=""/162, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r3}}, 0x58)
waitid(0x6, r4, 0x0, 0x8, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000800)={0x4, 0x5, 0x40e, 0x45f151b4}, 0x10)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000940)={&(0x7f0000000840)=[<r5=>0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x1, 0x2, 0x9, 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket(0x22, 0x2, 0xd)
r8 = accept4(r7, &(0x7f00000009c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a40)=0x80, 0xc0800)
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000ac0)={0x0, <r9=>0x0, r5, 0x0, 0x0, 0xa, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000b00)={r9, 0x0, 0xc, 0x5, 0x1c})
ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1)
r10 = socket$inet(0x2, 0x4, 0x57df07b8)
bind$inet(r10, &(0x7f0000000b40)={0x2, 0x4e21, @remote}, 0x10)
connect$inet(r8, &(0x7f0000000b80)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000bc0)=0x1, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000c40)={&(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r9})
fspick(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0)

4.070631193s ago: executing program 1 (id=9960):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
creat(0x0, 0x4)
prlimit64(0x0, 0x7, 0x0, 0x0) (async)
pipe2(0x0, 0x0)
fadvise64(r0, 0x1000, 0x1, 0x2) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) (rerun: 32)
ioprio_set$uid(0x3, 0x0, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x84}}, 0x0) (async)
futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2)

3.7986087s ago: executing program 1 (id=9963):
creat(&(0x7f0000000080)='./file0\x00', 0x2)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffd}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "51edabd2"}]}}, 0x0}, 0x0)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

3.695770688s ago: executing program 4 (id=9965):
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca00030100700009040000000101"], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000312000000120354d266527324a903fb3a877881a75bc1fa5ec14b44ec3b43ea010d65d72a615400"/55]}, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000000))
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x4, 0xffffffffffffffff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='efivarfs\x00', 0x200002, 0x0)

2.904894225s ago: executing program 7 (id=9968):
creat(&(0x7f0000000140)='./file0\x00', 0x71)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4128, 0x0, 0x0, 0x0, 0x0})
mount(&(0x7f0000000040)=@sr0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x1001448, 0x0)
syz_clone(0xc0000100, &(0x7f0000000080)="505de7c612942e514e78e89ee0d3f20264490c4cc12dea2646adcc56543b90e83582a2119f56262806a1d32338591d68389dbdec6b928bb3d198858e72d077c893cd88aa45a51cdd840c1f542a47aab4021909656b4b46239904c8ebe1e5c0fb6cf8bcf745adb416d0ab8c178b83a6b28bec31f43750f176846681e8e5779474effb08c3baabbc0c60f6c653142af5020c134a1260", 0x95, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="2f4e12ce51776bbb19dcd05e65c57d514ceac2cbf9fef21c89b5742cc50fd2304958fb601bdcc2db0bde0b373a01ae960152a896f33681bf5ff0d65cc9e1a2e33f6220b0c8eb89b1973e61edf1d2fcbb7986a6c6c79a5b7f639fc636b8371885956039e79fde329f")

2.573834324s ago: executing program 7 (id=9970):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async)
r2 = epoll_create1(0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=', @ANYRESHEX=r2])
r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x6c}, @in6=@loopback, {0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x10000}, {}, {}, 0x0, 0x10000, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x140}}, 0x0) (async)
close(r6)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x3, 0x4, 0x9, 0x7ff, 0x40, 0x5}, {0xff, 0x1, 0x81, 0xffffffffffffffff, 0xd, 0x4a}], ['\x00', '\x00', '\x00', '\x00']}) (async)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r8, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) (async)
shutdown(r8, 0x1) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x7}, &(0x7f0000000080)=0x8) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20010, r7, 0xf648e000) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async)
madvise(&(0x7f000051d000/0x4000)=nil, 0x4000, 0x1) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000b94000/0x3000)=nil, 0x2)

2.337197907s ago: executing program 7 (id=9972):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
clock_nanosleep(0x9, 0x1, &(0x7f00000004c0), 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4212, r1, 0x202, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x1, 0x0, 0x1a17, 0x1f9, r1})
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)

2.215982347s ago: executing program 3 (id=9973):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r2 = socket$inet(0x2, 0x3, 0x9)
sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x20}}], 0x2, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0)
write$binfmt_misc(r5, &(0x7f0000000500)='k', 0x1)
r6 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000025000000000000004831ff53c7"], 0x3d})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000180)={[0x0, 0x4, 0xffffffffffffffff, 0x100, 0x200, 0x32ff, 0x2, 0x404, 0x5, 0x24, 0x4, 0x6, 0x3, 0x8001, 0x2, 0x7], 0xeeee0000, 0x85284}) (rerun: 64)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000002c0)=@x86={0x10, 0x8, 0x3, 0x0, 0xd8, 0x0, 0x8, 0xd, 0x1, 0x9, 0x2, 0x9, 0x0, 0xfffffffc, 0x2, 0x8, 0x0, 0xc8, 0x0, '\x00', 0x3}) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)
read$FUSE(r0, &(0x7f0000004380)={0x2020, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
syz_open_procfs(r7, &(0x7f0000000000)='net/vlan/config\x00')

2.099215849s ago: executing program 7 (id=9974):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x45809000) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r1, 0x29, 0x24, 0x0, &(0x7f0000000100))

2.091927197s ago: executing program 3 (id=9975):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251e00000008000100", @ANYRES32=0x0, @ANYBLOB="6f26e12e8bbfbafb59bb4702a31465f8ee2fcb118aa6a502d176f7a4ce25dc904a9514b4852f3e1d9c0301c353fa7b92c5e90d2bcd1bc9e0c5a9b190041603b939ffe0a21de34aa433b64d7a01012d048615b6d25c1a9ed000658061636e3073c5ffd778dddda70914dc214ad64e020ad16c0c44aa5a2d6ef98d7c0c9f988b22afef1a"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0)

1.952022312s ago: executing program 3 (id=9976):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000)
r1 = creat(0x0, 0x11)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x10, 0x0, &(0x7f0000000300)="2279f051028567b257d1b5b70a9cf625"})
ioctl$KVM_NMI(r1, 0xae9a) (async)
ioctl$KVM_NMI(r1, 0xae9a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a1, 0x0) (async)
ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a1, 0x0)
recvfrom$inet6(r2, 0x0, 0x0, 0x41, 0x0, 0x0) (async)
recvfrom$inet6(r2, 0x0, 0x0, 0x41, 0x0, 0x0)
munlock(&(0x7f0000d9f000/0x3000)=nil, 0x3000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TCSETA(r4, 0x802c542a, 0xffffffffffffffff) (async)
ioctl$TCSETA(r4, 0x802c542a, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x9, @vbi})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.95175735s ago: executing program 1 (id=9977):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001300)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4090)
syz_open_dev$sndmidi(&(0x7f0000000000), 0x8000000000000001, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0xdc39c000)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)

1.909853313s ago: executing program 7 (id=9978):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@remote, @private0={0xfc, 0x0, '\x00', 0x10}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40000, 0x40, 0x5, 0x100, 0x0, 0x40180043})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000)

1.814132515s ago: executing program 3 (id=9979):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0xa0fbc19589a45893, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440011800a0001006c696d6974000000340002800c00024000000000000000000c000140000000000000000508000540000000010800054000000001080003400000000c"], 0xc8}}, 0x0)
futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140)={{r0, r1/1000+60000}, {0x77359400}})

1.731879629s ago: executing program 1 (id=9980):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648e000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x4, 0x185800)
bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r3 = socket(0x18, 0x2, 0x7)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r5 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0xc81, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000140)={0x8, 0x1, 0x0, 0xfffbfffe, &(0x7f0000000000)=[{}]})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x7cd4, 0xb43}, 0x8)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xd}, {0xffffffffffffff51, 0x15, 0xc}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4011)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000002c0), 0x4)
r7 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)}], 0x1, 0x0)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x12e, [0x0, 0x200000000880, 0x2000000008b0, 0x200000000ab4], 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/302]}, 0x1a6)
sendfile(r8, r8, 0x0, 0x10000)
mount(&(0x7f0000000380)=@md0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='cgroup\x00', 0x827c78, &(0x7f0000000440)='hash\x00')
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000280))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.64014353s ago: executing program 3 (id=9981):
r0 = socket$key(0xf, 0x3, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000080)=0xffffff8a)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020520000400000026bd700000000000020081000000000000aee44999e2092e38874776f69c00000000000000"], 0x20}}, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'ipvlan0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3c, 0x80000001, 0xe, 0x522, 0x4, 0x4, 0x1, 0xb3, 0x2000}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_usb_connect(0x3, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002466c3940841706002fbb0102030109022d00013003b008090400620394982fd709050403"], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x0, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf25010000000c00020003000000000000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="ef2742da8d699eb85bf38b14fe0c00018008000100a1ed480f2d964e2a919074416d558b0b6a57c31616bd31f3675acb7fb8cfebbbb16eff21f05a50465a359954577264fffe8b9dfe16fe6e589115e872a684d62b2d87e77a1da183218357", @ANYRES32, @ANYBLOB="e6d6212dec6d20df793c4382d327f49486d68e84def646039c0175a9788203b9190f2c39b9d2442e4e82b500b5e8c1add5f697116d3e5f25f25d310c57ef681320f523bab78cf28fac0467c307bbbe4c6e299f9f943054b67ee76418d08738caeb63b66ffa8e21e03ad4a82e121205206734be29236c178d10e90dab3ddc32e19a3fb511bbfe53a30a699c4fcc98bca39043e6459475ac32a8aad72eb86865b130c2b185dd150f3f43a43350a465178c3af948164f75f82b49ca30fa50a81c7c214601ba13b44d354b741121576d9eb8e74cdb11eb1cedb2"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0)
syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
timer_settime(0x0, 0x0, 0x0, 0x0)
mq_open(0x0, 0x40, 0x8, &(0x7f0000000180)={0x9, 0x7, 0x10000, 0x1})
r8 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x30}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)

1.430105629s ago: executing program 1 (id=9982):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
write$dsp(r0, &(0x7f0000000040)="a7", 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r3 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x0)

559.9677ms ago: executing program 7 (id=9983):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
syz_open_dev$usbfs(&(0x7f0000000380), 0x2fb8, 0x1)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001200"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x73, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x8, 0x2, 0xffff, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x200}, @void, @eth={@multicast, @random="c72af67d3ebc", @void, {@ipv6={0x86dd, @tcp={0xd, 0x6, "da5996", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, {[], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x9, 0x0, 0x3a3}}}}}}}}, 0x4e)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)

518.746488ms ago: executing program 4 (id=9984):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
ioctl$mixer_OSS_GETVERSION(r0, 0x80086303, &(0x7f0000000000))
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000004a00)={'filter\x00', 0x0, [0x3, 0x401, 0x5]}, &(0x7f0000004a80)=0x44)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0)

449.854287ms ago: executing program 4 (id=9985):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x34}}, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000005, 0x12, 0xffffffffffffffff, 0x45809000)
ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f0000000000)={0x8000, 0x9c09, 0x7, 0x1000})

320.059097ms ago: executing program 4 (id=9986):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
fstat(r0, &(0x7f0000000040)) (async)
fstat(r0, &(0x7f0000000040))
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0)

267.583254ms ago: executing program 4 (id=9987):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0)
r0 = msgget(0x0, 0x521)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$apparmor_exec(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='stack :'], 0xe4)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x2, 0x1800)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x410200, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x20}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000085c}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00})
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={<r7=>0x0}, &(0x7f0000000100)=0xc)
set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x3)
getpgid(r7)
sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004400}, 0x4000010)

72.655329ms ago: executing program 3 (id=9988):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000bbbbbcbbbbbbaaaaaa0a03bb88f5e8"], 0x72)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, <r3=>0x0})
capset(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000100)={0xffff7fff, 0x1, 0x4, 0x4, 0x2164, 0xa46})
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0)
write(r4, &(0x7f0000000000)="fb196dec69a10b22", 0x8)

0s ago: executing program 4 (id=9989):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x4000)
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='cramfs\x00', 0x1100014, 0x0)

kernel console output (not intermixed with test programs):

dev
[ 1578.386101][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.394830][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.401665][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.407750][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.413985][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.420886][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.426681][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.432764][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.439306][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.445587][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.452129][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.458802][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.464611][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.471469][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.477377][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.485219][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.494100][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.500600][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.506606][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.513124][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.520544][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.526344][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.533230][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.539588][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.545781][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.551893][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.557675][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.564239][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.570373][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.576368][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.584600][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.590718][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.596770][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.605008][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.614892][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.622559][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.628731][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.636465][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.643813][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.653660][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.668833][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.675377][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.695527][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.721702][ T7736] /dev/rnullb0: Can't open blockdev
[ 1578.741521][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.761177][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.777561][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.791533][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.817732][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.831398][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.837460][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.843767][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.849854][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.859551][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.876812][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.888834][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.903076][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.920721][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.935371][ T7741] netlink: 'syz.9.9107': attribute type 1 has an invalid length.
[ 1578.946279][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.946993][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.947612][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.948360][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.951461][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.952230][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.954019][ T7732] /dev/rnullb0: Can't open blockdev
[ 1578.956250][ T7732] /dev/rnullb0: Can't open blockdev
[ 1579.017973][ T7743] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9108'.
[ 1579.108822][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1579.133150][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1579.267403][ T1085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1579.278411][ T1085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1579.290490][ T1085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1579.300972][ T1085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1579.309696][ T1085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1579.612294][ T7754] chnl_net:caif_netlink_parms(): no params data found
[ 1579.649643][ T7770] /dev/rnullb0: Can't open blockdev
[ 1579.794778][ T7777] /dev/sg0: Can't lookup blockdev
[ 1579.804116][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1579.816389][ T7777] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9116'.
[ 1579.823014][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1579.832978][ T7754] bridge_slave_0: entered allmulticast mode
[ 1579.841570][ T7754] bridge_slave_0: entered promiscuous mode
[ 1579.850637][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1579.858231][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1579.865685][ T7754] bridge_slave_1: entered allmulticast mode
[ 1579.890518][ T7754] bridge_slave_1: entered promiscuous mode
[ 1579.953992][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1579.971766][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1579.994638][ T7782] /dev/rnullb0: Can't open blockdev
[ 1580.036508][ T7754] team0: Port device team_slave_0 added
[ 1580.047388][ T7754] team0: Port device team_slave_1 added
[ 1580.091560][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1580.099270][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1580.125193][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1580.134092][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1580.147392][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1580.154571][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1580.182701][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1580.264200][ T7754] hsr_slave_0: entered promiscuous mode
[ 1580.271339][ T7754] hsr_slave_1: entered promiscuous mode
[ 1580.277875][ T7754] debugfs: 'hsr0' already exists in 'hsr'
[ 1580.283839][ T7754] Cannot create hsr debugfs directory
[ 1581.376865][ T1085] Bluetooth: hci5: command tx timeout
[ 1581.435407][T27127] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1581.665250][T27127] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1581.831945][T27127] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1582.042880][T27127] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1582.074107][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1582.089113][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1582.099409][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1582.123230][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1582.142747][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1582.331949][ T7754] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1582.396364][ T7754] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1582.473236][ T7754] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1582.496199][ T7754] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1582.618635][ T7829] /dev/rnullb0: Can't open blockdev
[ 1582.723413][T27127] bridge_slave_1: left allmulticast mode
[ 1582.735543][T27127] bridge_slave_1: left promiscuous mode
[ 1582.741468][T27127] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1582.769811][T27127] bridge_slave_0: left allmulticast mode
[ 1582.784323][ T7839] /dev/rnullb0: Can't open blockdev
[ 1582.789766][T27127] bridge_slave_0: left promiscuous mode
[ 1582.794425][ T7840] /dev/rnullb0: Can't open blockdev
[ 1582.815914][T27127] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1583.429265][   T55] block nbd2: Possible stuck request ffff888025760000: control (read@0,1024B). Runtime 90 seconds
[ 1583.440162][   T55] block nbd2: Possible stuck request ffff8880257601c0: control (read@1024,1024B). Runtime 90 seconds
[ 1583.451552][   T55] block nbd2: Possible stuck request ffff888025760380: control (read@2048,1024B). Runtime 90 seconds
[ 1583.470381][ T1085] Bluetooth: hci5: command tx timeout
[ 1584.086794][T27127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1584.104501][T27127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1584.115817][T27127] bond0 (unregistering): Released all slaves
[ 1584.216179][ T1085] Bluetooth: hci1: command tx timeout
[ 1584.660911][ T7816] chnl_net:caif_netlink_parms(): no params data found
[ 1584.825248][T27127] hsr_slave_0: left promiscuous mode
[ 1584.838572][T27127] hsr_slave_1: left promiscuous mode
[ 1584.849244][T27127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1584.858974][T27127] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1584.889209][T27127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1584.899350][T27127] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1584.960614][T27127] veth0_macvtap: left allmulticast mode
[ 1584.966378][T27127] veth0_macvtap: left promiscuous mode
[ 1584.976752][T27127] veth1_vlan: left promiscuous mode
[ 1584.987115][T27127] veth0_vlan: left promiscuous mode
[ 1585.574919][ T1085] Bluetooth: hci5: command tx timeout
[ 1586.069638][ T7911] overlay: ./file0 is not a directory
[ 1586.291168][ T1085] Bluetooth: hci1: command tx timeout
[ 1586.622705][T27127] team0 (unregistering): Port device team_slave_1 removed
[ 1586.744535][T27127] team0 (unregistering): Port device team_slave_0 removed
[ 1587.664049][ T1085] Bluetooth: hci5: command tx timeout
[ 1587.785020][ T5220] udevd[5220]: worker [31861] /devices/virtual/block/nbd2 is taking a long time
[ 1588.139259][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1588.158965][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1588.170284][ T7952] /dev/rnullb0: Can't open blockdev
[ 1588.175711][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1588.196047][ T7816] bridge_slave_0: entered allmulticast mode
[ 1588.214537][ T7816] bridge_slave_0: entered promiscuous mode
[ 1588.232510][ T7816] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1588.260697][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1588.269935][ T7816] bridge_slave_1: entered allmulticast mode
[ 1588.291874][ T7816] bridge_slave_1: entered promiscuous mode
[ 1588.327204][ T7754] 8021q: adding VLAN 0 to HW filter on device team0
[ 1588.378382][ T1085] Bluetooth: hci1: command tx timeout
[ 1588.496218][T27129] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1588.503551][T27129] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1588.561104][ T7816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1588.585886][ T7816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1588.714485][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1588.721738][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1588.755539][ T7964] /dev/rnullb0: Can't open blockdev
[ 1588.778705][ T7816] team0: Port device team_slave_0 added
[ 1588.814692][ T7816] team0: Port device team_slave_1 added
[ 1588.896416][ T7816] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1588.906627][ T7816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1588.936477][ T7816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1588.954096][ T7816] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1588.961155][ T7816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1589.002811][ T7816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1589.121884][ T7816] hsr_slave_0: entered promiscuous mode
[ 1589.136250][ T7816] hsr_slave_1: entered promiscuous mode
[ 1589.146619][ T7816] debugfs: 'hsr0' already exists in 'hsr'
[ 1589.158091][ T7816] Cannot create hsr debugfs directory
[ 1589.799676][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1590.212575][ T7754] veth0_vlan: entered promiscuous mode
[ 1590.365384][ T7754] veth1_vlan: entered promiscuous mode
[ 1590.504474][ T1085] Bluetooth: hci1: command tx timeout
[ 1590.511797][ T7754] veth0_macvtap: entered promiscuous mode
[ 1590.527935][ T7754] veth1_macvtap: entered promiscuous mode
[ 1590.615238][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1590.669357][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1590.728695][T27139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1590.752116][T27139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1590.764723][ T7816] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1590.794040][T27139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1590.808145][ T7816] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1590.827362][T27139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1590.839915][ T7816] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1590.892321][ T7816] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1590.996324][T27139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1591.025036][T27139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1591.099117][T27127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1591.120037][T27127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1591.289899][ T7816] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1591.328230][ T8022] /dev/rnullb0: Can't open blockdev
[ 1591.364064][ T7816] 8021q: adding VLAN 0 to HW filter on device team0
[ 1591.403048][T27127] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1591.410350][T27127] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1591.448633][T27127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1591.455898][T27127] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1591.875284][ T7816] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1592.277321][ T8050] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9138'.
[ 1592.342127][ T8050] binder: Unknown parameter 'obj_type'
[ 1592.417603][ T7816] veth0_vlan: entered promiscuous mode
[ 1592.458813][ T7816] veth1_vlan: entered promiscuous mode
[ 1592.532611][ T8056] /dev/rnullb0: Can't open blockdev
[ 1592.549545][ T7816] veth0_macvtap: entered promiscuous mode
[ 1592.605601][ T7816] veth1_macvtap: entered promiscuous mode
[ 1592.672502][ T7816] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1592.718864][ T7816] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1592.788618][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.833639][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.834043][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1592.869249][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1593.086161][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1593.122248][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1593.210224][T27129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1593.225909][T27129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1593.277865][ T8073] /dev/rnullb0: Can't open blockdev
[ 1593.701713][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9145'.
[ 1594.179525][ T5851] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1594.336643][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1594.354831][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1594.369071][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1594.382660][ T5851] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[ 1594.392315][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.408192][ T5851] usb 4-1: config 0 descriptor??
[ 1594.846560][ T5851] hid_parser_main: 5 callbacks suppressed
[ 1594.846583][ T5851] razer 0003:1532:011B.0066: unknown main item tag 0x2
[ 1594.881508][ T5851] razer 0003:1532:011B.0066: item fetching failed at offset 4/5
[ 1594.902309][T19756] usb 3-1: USB disconnect, device number 29
[ 1594.909694][ T5851] razer 0003:1532:011B.0066: probe with driver razer failed with error -22
[ 1595.042464][ T5946] usb 4-1: USB disconnect, device number 57
[ 1595.442197][ T8135] /dev/rnullb0: Can't open blockdev
[ 1595.596409][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1595.614525][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1595.645797][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1595.664183][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1595.673796][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1596.417711][ T8139] chnl_net:caif_netlink_parms(): no params data found
[ 1596.694404][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9161'.
[ 1596.757943][ T8184] /dev/rnullb0: Can't open blockdev
[ 1596.764749][ T8184] dlm: no locking on control device
[ 1596.949630][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1597.003644][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1597.031399][ T8139] bridge_slave_0: entered allmulticast mode
[ 1597.056973][ T8139] bridge_slave_0: entered promiscuous mode
[ 1597.073242][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1597.093591][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1597.115090][ T8139] bridge_slave_1: entered allmulticast mode
[ 1597.134045][ T8139] bridge_slave_1: entered promiscuous mode
[ 1597.211566][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1597.227917][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1597.321355][ T8139] team0: Port device team_slave_0 added
[ 1597.338878][ T8139] team0: Port device team_slave_1 added
[ 1597.419851][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1597.437987][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1597.463992][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1597.494007][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1597.521650][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1597.547483][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1597.573439][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1597.599136][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1597.753206][ T8139] hsr_slave_0: entered promiscuous mode
[ 1597.770833][ T8139] hsr_slave_1: entered promiscuous mode
[ 1597.784762][ T8139] debugfs: 'hsr0' already exists in 'hsr'
[ 1597.797302][ T1085] Bluetooth: hci6: command tx timeout
[ 1597.816287][ T8139] Cannot create hsr debugfs directory
[ 1597.932740][ T8207] netlink: 'syz.3.9166': attribute type 83 has an invalid length.
[ 1597.999987][ T8210] netlink: 'syz.3.9166': attribute type 83 has an invalid length.
[ 1599.070636][ T8236] netlink: 5404 bytes leftover after parsing attributes in process `syz.3.9168'.
[ 1599.111225][ T8236] netlink: 5404 bytes leftover after parsing attributes in process `syz.3.9168'.
[ 1599.278170][ T8139] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1599.292287][ T8139] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1599.312599][ T8139] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1599.332348][ T8139] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1599.544449][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1599.593884][ T8139] 8021q: adding VLAN 0 to HW filter on device team0
[ 1599.624436][T27127] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1599.631683][T27127] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1599.680252][T27127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1599.687505][T27127] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1599.868155][ T8261] XFS (rnullb0): Invalid superblock magic number
[ 1599.884381][ T1085] Bluetooth: hci6: command tx timeout
[ 1600.624322][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1600.869095][ T8139] veth0_vlan: entered promiscuous mode
[ 1600.949980][ T8139] veth1_vlan: entered promiscuous mode
[ 1601.094952][ T8139] veth0_macvtap: entered promiscuous mode
[ 1601.122140][ T8139] veth1_macvtap: entered promiscuous mode
[ 1601.185458][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1601.207516][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9180'.
[ 1601.243525][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1601.252540][ T8293] 9pnet_fd: Insufficient options for proto=fd
[ 1601.313157][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1601.345421][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1601.363709][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1601.404470][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1601.609586][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1601.633709][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1601.754594][T27131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1601.794536][T27131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1601.971490][ T1085] Bluetooth: hci6: command tx timeout
[ 1603.043920][T16312] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1603.223636][T16312] usb 4-1: config 2 has an invalid interface number: 153 but max is 0
[ 1603.253719][T16312] usb 4-1: config 2 has no interface number 0
[ 1603.260782][ T8338] No control pipe specified
[ 1603.265004][T16312] usb 4-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=f7.06
[ 1603.285864][T16312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1603.307094][T16312] usb 4-1: Product: syz
[ 1603.311327][T16312] usb 4-1: Manufacturer: syz
[ 1603.354439][T16312] usb 4-1: SerialNumber: syz
[ 1603.372563][T16312] hub 4-1:2.153: bad descriptor, ignoring hub
[ 1603.381753][T16312] hub 4-1:2.153: probe with driver hub failed with error -5
[ 1603.391144][T16312] sisusb 4-1:2.153: Invalid USB2VGA device
[ 1603.398993][T16312] sisusb 4-1:2.153: probe with driver sisusb failed with error -22
[ 1603.695823][T16312] usb 4-1: USB disconnect, device number 58
[ 1604.067530][ T1085] Bluetooth: hci6: command tx timeout
[ 1604.379077][   T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1604.553109][   T24] usb 2-1: Using ep0 maxpacket: 8
[ 1604.562104][   T24] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81
[ 1604.577342][   T24] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1604.580073][ T8297] usb 4-1: new low-speed USB device number 59 using dummy_hcd
[ 1604.588154][   T24] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1604.604843][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1604.761378][ T8297] usb 4-1: Invalid ep0 maxpacket: 32
[ 1604.843839][   T24] usb 2-1: string descriptor 0 read error: -71
[ 1604.852819][   T24] hub 2-1:32.0: bad descriptor, ignoring hub
[ 1604.858890][   T24] hub 2-1:32.0: probe with driver hub failed with error -5
[ 1604.922097][ T8297] usb 4-1: new low-speed USB device number 60 using dummy_hcd
[ 1604.953184][   T24] usb 2-1: USB disconnect, device number 64
[ 1605.082069][ T8297] usb 4-1: Invalid ep0 maxpacket: 32
[ 1605.095269][ T8297] usb usb4-port1: attempt power cycle
[ 1605.484823][ T8297] usb 4-1: new low-speed USB device number 61 using dummy_hcd
[ 1605.553449][ T8297] usb 4-1: Invalid ep0 maxpacket: 32
[ 1605.704534][ T8297] usb 4-1: new low-speed USB device number 62 using dummy_hcd
[ 1605.735597][ T8297] usb 4-1: Invalid ep0 maxpacket: 32
[ 1605.747691][ T8297] usb usb4-port1: unable to enumerate USB device
[ 1605.794865][   T24] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[ 1605.949174][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1605.960090][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1605.977086][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1605.990058][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1606.004504][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1606.042311][   T24] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1606.053197][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1606.075668][   T24] usb 2-1: Product: syz
[ 1606.082544][   T24] usb 2-1: Manufacturer: syz
[ 1606.092008][   T24] usb 2-1: SerialNumber: syz
[ 1606.107591][   T24] usb 2-1: config 0 descriptor??
[ 1606.338506][   T24] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1606.345361][   T24] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1606.538185][   T24] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32
[ 1606.546596][   T24] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32
[ 1606.580105][   T24] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[ 1606.617909][   T24] usb 2-1: USB disconnect, device number 65
[ 1607.634737][ T8297] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1607.807577][ T8297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1607.832400][ T8297] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1607.862691][ T8297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1607.893703][ T8297] usb 2-1: config 0 descriptor??
[ 1608.123113][ T8476] /dev/rnullb0: Can't open blockdev
[ 1608.296462][ T8479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9208'.
[ 1608.317060][ T8454] netlink: 184 bytes leftover after parsing attributes in process `syz.1.9203'.
[ 1608.359083][ T8481] /dev/rnullb0: Can't open blockdev
[ 1608.412729][ T8297] usbhid 2-1:0.0: can't add hid device: -71
[ 1608.436983][ T8297] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1608.479182][ T8297] usb 2-1: USB disconnect, device number 66
[ 1608.485896][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.703183][ T8497] /dev/rnullb0: Can't open blockdev
[ 1608.846496][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9213'.
[ 1608.955057][    C0] vcan0: j1939_tp_rxtimer: 0xffff888059834000: rx timeout, send abort
[ 1609.221244][ T8513] /dev/rnullb0: Can't open blockdev
[ 1609.269310][ T8510] /dev/rnullb0: Can't open blockdev
[ 1609.296350][ T8508] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1609.457361][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805a131800: rx timeout, send abort
[ 1609.458101][ T8508] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1609.466238][    C0] vcan0: j1939_tp_rxtimer: 0xffff888059834000: abort rx timeout. Force session deactivation
[ 1609.688153][ T8508] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1609.752005][ T5851] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1609.814751][ T8508] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1609.922916][ T5851] usb 4-1: Using ep0 maxpacket: 32
[ 1609.932920][ T5851] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1609.960757][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805a130000: rx timeout, send abort
[ 1609.965392][ T5851] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1609.969845][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805a131800: abort rx timeout. Force session deactivation
[ 1609.994459][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1610.018785][ T5851] usb 4-1: Product: syz
[ 1610.035200][ T5851] usb 4-1: Manufacturer: syz
[ 1610.050192][ T5851] usb 4-1: SerialNumber: syz
[ 1610.090043][ T5851] usb 4-1: config 0 descriptor??
[ 1610.124378][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1610.149013][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1610.175108][  T996] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1610.202973][  T996] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1610.471133][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805a130000: abort rx timeout. Force session deactivation
[ 1610.504490][ T5851] gs_usb 4-1:0.0: Couldn't get device config: (err=-121)
[ 1610.515005][ T5851] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121
[ 1611.314527][   T30] audit: type=1800 audit(2000000536.126:382): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9220" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[ 1611.438915][ T8568] /dev/rnullb0: Can't open blockdev
[ 1612.593398][ T5851] usb 4-1: USB disconnect, device number 63
[ 1613.643258][T16313] usb 10-1: [UEAGLE-ATM] firmware is not available
[ 1613.650086][ T5861] usb 10-1: [UEAGLE-ATM] firmware is not available
[ 1613.656734][   T55] block nbd2: Possible stuck request ffff888025760000: control (read@0,1024B). Runtime 120 seconds
[ 1613.675001][   T55] block nbd2: Possible stuck request ffff8880257601c0: control (read@1024,1024B). Runtime 120 seconds
[ 1613.687141][   T55] block nbd2: Possible stuck request ffff888025760380: control (read@2048,1024B). Runtime 120 seconds
[ 1613.757315][ T8623] dvmrp0: entered allmulticast mode
[ 1613.841234][ T8628] /dev/rnullb0: Can't open blockdev
[ 1614.471054][ T8297] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1614.651817][ T8297] usb 4-1: Using ep0 maxpacket: 16
[ 1614.706080][ T8297] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1614.775434][ T8297] usb 4-1: config 8 has an invalid interface number: 245 but max is 0
[ 1614.831906][ T8297] usb 4-1: config 8 has no interface number 0
[ 1614.901258][ T8297] usb 4-1: config 8 interface 245 has no altsetting 0
[ 1614.953317][ T8297] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=d8.77
[ 1614.968955][ T8297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1614.968986][ T8297] usb 4-1: Product: syz
[ 1614.969005][ T8297] usb 4-1: Manufacturer: syz
[ 1614.969023][ T8297] usb 4-1: SerialNumber: syz
[ 1615.184560][ T8297] cypress_m8 4-1:8.245: DeLorme Earthmate USB converter detected
[ 1615.230919][ T8297] earthmate ttyUSB0: required endpoint is missing
[ 1615.277690][ T8297] usb 4-1: USB disconnect, device number 64
[ 1615.320624][ T8297] cypress_m8 4-1:8.245: device disconnected
[ 1615.550550][ T8669] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1615.745114][ T8669] syz.1.9247: attempt to access beyond end of device
[ 1615.745114][ T8669] nbd1: rw=0, sector=8, nr_sectors = 8 limit=0
[ 1615.768003][ T8669] qnx4: unable to read the superblock
[ 1616.052731][ T8687] IPv6: Can't replace route, no match found
[ 1616.059038][ T8686] omfs: Invalid superblock (0)
[ 1616.068711][ T8687] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1616.316206][ T8697] gfs2: path_lookup on c::: returned error -2
[ 1616.519134][ T8297] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1616.717810][ T8297] usb 4-1: Using ep0 maxpacket: 32
[ 1616.728913][ T8297] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[ 1616.743914][ T8297] usb 4-1: config 0 has no interface number 0
[ 1616.759249][ T8297] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1616.813833][ T8297] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1616.890285][ T8297] usb 4-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1616.945217][ T8297] usb 4-1: config 0 interface 2 has no altsetting 0
[ 1616.962200][ T8725] ptm ptm1: ldisc open failed (-12), clearing slot 1
[ 1616.982153][ T8297] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[ 1616.998600][ T8297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1617.032410][ T8728] XFS (nullb0): Invalid superblock magic number
[ 1617.039851][ T8297] usb 4-1: config 0 descriptor??
[ 1617.360765][ T8741] /dev/rnullb0: Can't open blockdev
[ 1617.467798][ T8297] uclogic 0003:5543:0781.0067: unknown main item tag 0x0
[ 1617.512423][ T8297] uclogic 0003:5543:0781.0067: unknown main item tag 0x0
[ 1617.547166][ T8297] uclogic 0003:5543:0781.0067: unknown main item tag 0x0
[ 1617.593799][ T8754] input: syz1 as /devices/virtual/input/input127
[ 1617.598194][ T8297] uclogic 0003:5543:0781.0067: unknown main item tag 0x0
[ 1617.637772][ T8297] uclogic 0003:5543:0781.0067: unknown main item tag 0x0
[ 1617.654709][ T8756] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9269'.
[ 1617.669645][ T8297] uclogic 0003:5543:0781.0067: unknown main item tag 0x0
[ 1617.691658][ T8297] uclogic 0003:5543:0781.0067: unknown main item tag 0x0
[ 1617.710110][ T8297] uclogic 0003:5543:0781.0067: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.3-1/input2
[ 1617.853981][T19756] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1618.016121][T19756] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1618.068063][T19756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1618.116219][T19756] usb 2-1: Product: syz
[ 1618.136726][T19756] usb 2-1: Manufacturer: syz
[ 1618.160499][T19756] usb 2-1: SerialNumber: syz
[ 1618.192630][T19756] usb 2-1: config 0 descriptor??
[ 1618.246137][T19756] ch341 2-1:0.0: ch341-uart converter detected
[ 1619.060605][   T30] audit: type=1326 audit(2000000543.846:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.1.9268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28dd38e929 code=0x0
[ 1619.082547][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1619.167964][ T8799] netlink: 'syz.1.9268': attribute type 5 has an invalid length.
[ 1619.885144][T19756] usb 2-1: failed to send control message: -110
[ 1619.899620][T19756] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[ 1620.136880][T19756] usb 4-1: USB disconnect, device number 65
[ 1620.645959][ T5861] usb 2-1: USB disconnect, device number 67
[ 1620.662680][ T5861] ch341 2-1:0.0: device disconnected
[ 1620.818926][   T30] audit: type=1326 audit(2000000545.579:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.1.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dd38e929 code=0x7ffc0000
[ 1620.841251][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1620.937311][   T30] audit: type=1326 audit(2000000545.599:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.1.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dd38e929 code=0x7ffc0000
[ 1620.959655][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1620.969248][ T8859] kAFS: unparsable volume name
[ 1621.025506][   T30] audit: type=1326 audit(2000000545.599:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.1.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f28dd38e929 code=0x7ffc0000
[ 1621.082184][   T30] audit: type=1326 audit(2000000545.599:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.1.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dd38e929 code=0x7ffc0000
[ 1621.204766][   T30] audit: type=1326 audit(2000000545.599:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.1.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dd38e929 code=0x7ffc0000
[ 1621.227121][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1621.255037][ T8864] binder_alloc: binder_alloc_mmap_handler: 8863 200000735000-200000736000 already mapped failed -16
[ 1621.266288][   T30] audit: type=1326 audit(2000000545.599:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.1.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f28dd38e929 code=0x7ffc0000
[ 1621.296462][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9291'.
[ 1621.378231][   T30] audit: type=1326 audit(2000000545.599:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.1.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dd38e929 code=0x7ffc0000
[ 1621.447431][   T30] audit: type=1326 audit(2000000545.599:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.1.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dd38e929 code=0x7ffc0000
[ 1621.532315][   T30] audit: type=1326 audit(2000000545.619:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.1.9287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f28dd38e929 code=0x7ffc0000
[ 1621.627557][ T5861] usb 2-1: new full-speed USB device number 68 using dummy_hcd
[ 1621.650127][ T8876] XFS (rnullb0): Invalid superblock magic number
[ 1621.823419][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[ 1621.849787][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[ 1621.874893][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1621.911198][ T5861] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[ 1621.948869][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1621.968560][ T5861] usb 2-1: Product: syz
[ 1621.987591][ T5861] usb 2-1: Manufacturer: syz
[ 1621.997759][ T5861] usb 2-1: SerialNumber: syz
[ 1622.029410][ T5861] usb 2-1: config 0 descriptor??
[ 1622.037611][ T8865] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1622.079821][ T5861] option 2-1:0.0: GSM modem (1-port) converter detected
[ 1622.597450][    T9] usb 2-1: USB disconnect, device number 68
[ 1622.612543][    T9] option 2-1:0.0: device disconnected
[ 1623.832085][ T8940] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1624.920996][ T8964] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1625.541338][ T8297] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1625.716848][ T8297] usb 2-1: Using ep0 maxpacket: 8
[ 1625.733968][ T8297] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1625.788791][ T8297] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1625.831586][ T8297] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1625.912625][ T8297] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1625.955696][ T8297] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1625.992178][ T8297] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1626.001875][ T8297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.038984][ T8993] program syz.3.9312 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1626.260030][ T8297] usb 2-1: usb_control_msg returned -32
[ 1626.278678][ T8297] usbtmc 2-1:16.0: can't read capabilities
[ 1627.872237][ T9048] /dev/rnullb0: Can't open blockdev
[ 1628.101289][ T9053] vxfs: WRONG superblock magic 00000000 at 1
[ 1628.123472][ T9053] vxfs: WRONG superblock magic 00000000 at 8
[ 1628.151954][ T9053] vxfs: can't find superblock.
[ 1628.269103][   T24] usb 2-1: USB disconnect, device number 69
[ 1628.890924][ T9074] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9324'.
[ 1629.123005][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9326'.
[ 1629.454904][ T5861] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1629.593674][ T9101] vivid-000: disconnect
[ 1629.614304][ T5861] usb 4-1: device descriptor read/64, error -71
[ 1629.875195][ T5861] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1630.025957][ T5861] usb 4-1: device descriptor read/64, error -71
[ 1630.136215][ T5861] usb usb4-port1: attempt power cycle
[ 1630.250833][ T9127] sctp: [Deprecated]: syz.7.9336 (pid 9127) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1630.250833][ T9127] Use struct sctp_sack_info instead
[ 1630.279773][ T1085] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 1630.411232][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9338'.
[ 1630.511581][ T5861] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1630.548727][ T5861] usb 4-1: device descriptor read/8, error -71
[ 1630.737298][ T9153] /dev/rnullb0: Can't open blockdev
[ 1630.789879][ T5861] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1630.838946][ T5861] usb 4-1: device descriptor read/8, error -71
[ 1630.959956][ T5861] usb usb4-port1: unable to enumerate USB device
[ 1631.865042][ T9194] kAFS: unable to lookup cell ''
[ 1632.770477][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9353'.
[ 1632.829183][ T9218] binder: 9217:9218 ioctl c018620b 200000000000 returned -14
[ 1633.346051][ T8297] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1633.506576][ T8297] usb 2-1: Using ep0 maxpacket: 32
[ 1633.534304][ T8297] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1633.567941][ T8297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1633.591873][ T8297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1633.617458][ T8297] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1633.635472][ T8297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1633.670451][ T8297] usb 2-1: config 0 descriptor??
[ 1633.690989][ T9223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1633.715080][ T8297] hub 2-1:0.0: USB hub found
[ 1633.917405][ T8297] hub 2-1:0.0: 2 ports detected
[ 1634.053406][ T9246] /dev/rnullb0: Can't open blockdev
[ 1635.031340][ T9278] /dev/rnullb0: Can't open blockdev
[ 1635.365046][ T9289] netlink: 'syz.3.9364': attribute type 10 has an invalid length.
[ 1635.377071][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1635.402842][ T9289] bridge_slave_1: left allmulticast mode
[ 1635.408661][ T9289] bridge_slave_1: left promiscuous mode
[ 1635.415858][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1635.449192][ T9289] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1635.972517][T16313] usb 2-1-port1: cannot reset (err = -71)
[ 1635.979401][ T5861] usb 2-1: USB disconnect, device number 70
[ 1636.000529][T16313] usb 2-1-port1: attempt power cycle
[ 1636.458967][ T9311] overlayfs: failed lookup in lower (newroot/72, name='bus', err=-40): overlapping layers
[ 1636.865504][ T9317] /dev/sg0: Can't lookup blockdev
[ 1637.398179][T19756] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1637.480991][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9375'.
[ 1637.550073][T19756] usb 2-1: device descriptor read/64, error -71
[ 1637.708875][   T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1637.809492][T19756] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1637.838105][ T5856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1637.857374][ T5856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1637.870469][ T5856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1637.880839][ T5856] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1637.895910][ T5856] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1637.906556][   T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1637.932535][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.950700][   T24] usb 4-1: Product: syz
[ 1637.959822][T19756] usb 2-1: device descriptor read/64, error -71
[ 1637.966576][   T24] usb 4-1: Manufacturer: syz
[ 1637.976454][   T24] usb 4-1: SerialNumber: syz
[ 1638.008532][   T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1638.029914][ T5851] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1638.072325][T19756] usb usb2-port1: attempt power cycle
[ 1638.433784][T19756] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1638.471603][   T24] usb 4-1: USB disconnect, device number 70
[ 1638.488087][T19756] usb 2-1: device descriptor read/8, error -71
[ 1638.616261][T27127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1638.675867][ T9343] chnl_net:caif_netlink_parms(): no params data found
[ 1638.744045][T19756] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1638.755905][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1638.755925][   T30] audit: type=1326 audit(2000000563.472:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.7.9378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72438e929 code=0x0
[ 1638.813248][T19756] usb 2-1: device descriptor read/8, error -71
[ 1638.839552][ T9356] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1638.848764][   T44] IPVS: starting estimator thread 0...
[ 1638.864173][T27127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1638.922863][T19756] usb usb2-port1: unable to enumerate USB device
[ 1638.942176][ T9362] IPVS: using max 36 ests per chain, 86400 per kthread
[ 1639.001760][T27127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.142817][ T5851] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1639.149917][ T5851] ath9k_htc: Failed to initialize the device
[ 1639.168460][T27127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.173844][   T24] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1639.209353][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1639.241754][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1639.253102][ T9343] bridge_slave_0: entered allmulticast mode
[ 1639.261229][ T9343] bridge_slave_0: entered promiscuous mode
[ 1639.299032][ T9343] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1639.336371][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1639.352956][ T9343] bridge_slave_1: entered allmulticast mode
[ 1639.375000][ T9343] bridge_slave_1: entered promiscuous mode
[ 1639.612693][ T9343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1639.681044][ T9343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1639.694336][   T24] usb 4-1: new full-speed USB device number 71 using dummy_hcd
[ 1639.763367][T27127] bridge_slave_1: left allmulticast mode
[ 1639.780938][T27127] bridge_slave_1: left promiscuous mode
[ 1639.795400][T27127] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1639.809637][T27127] bridge_slave_0: left allmulticast mode
[ 1639.822645][T27127] bridge_slave_0: left promiscuous mode
[ 1639.830575][T27127] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1639.847023][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[ 1639.859911][   T24] usb 4-1: config 1 has an invalid interface descriptor of length 2, skipping
[ 1639.872883][   T24] usb 4-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config
[ 1639.904088][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1639.925923][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1639.962520][ T5856] Bluetooth: hci7: command tx timeout
[ 1639.974932][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1640.005279][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1640.013972][   T24] usb 4-1: Product: ꤂�몧跥⟵⌽ꋬ椌䶮㛣瓗꒨
[ 1640.021488][   T24] usb 4-1: Manufacturer: ဉ
[ 1640.031329][ T9376] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1640.500432][   T24] usb 4-1: 0:2 : does not exist
[ 1640.562630][   T24] usb 4-1: USB disconnect, device number 71
[ 1640.591568][T27127] dvmrp0 (unregistering): left allmulticast mode
[ 1640.666585][T31971] udevd[31971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1640.855743][ T9343] team0: Port device team_slave_0 added
[ 1640.919822][ T9343] team0: Port device team_slave_1 added
[ 1640.984204][ T9406] /dev/rnullb0: Can't open blockdev
[ 1640.992977][ T9407] /dev/rnullb0: Can't open blockdev
[ 1641.009899][T27127] tipc: Disabling bearer <udp:s>
[ 1641.015692][T27127] tipc: Left network mode
[ 1641.107984][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1641.132521][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1641.183720][ T9343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1641.276483][ T9343] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1641.284375][ T9343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1641.313277][ T9343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1641.439139][   T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1641.492760][ T5851] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1641.530988][ T9343] hsr_slave_0: entered promiscuous mode
[ 1641.537546][ T9343] hsr_slave_1: entered promiscuous mode
[ 1641.544799][ T9343] debugfs: 'hsr0' already exists in 'hsr'
[ 1641.551022][ T9343] Cannot create hsr debugfs directory
[ 1641.599876][   T24] usb 2-1: Using ep0 maxpacket: 32
[ 1641.627005][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1641.639704][ T5851] usb 4-1: device descriptor read/64, error -71
[ 1641.651403][   T24] usb 2-1: config 4 has an invalid interface number: 91 but max is 0
[ 1641.661257][   T24] usb 2-1: config 4 has no interface number 0
[ 1641.672955][   T24] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=6c.05
[ 1641.689622][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1641.700761][   T24] usb 2-1: Product: syz
[ 1641.704976][   T24] usb 2-1: Manufacturer: syz
[ 1641.710514][   T24] usb 2-1: SerialNumber: syz
[ 1641.821866][T27127] hsr_slave_0: left promiscuous mode
[ 1641.829249][T27127] hsr_slave_1: left promiscuous mode
[ 1641.838950][T27127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1641.848133][T27127] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1641.858688][T27127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1641.867775][T27127] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1641.890705][ T5851] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1641.934477][T27127] veth1_macvtap: left promiscuous mode
[ 1641.940092][T27127] veth0_macvtap: left promiscuous mode
[ 1641.945969][   T24] empeg 2-1:4.91: empeg converter detected
[ 1641.946350][T27127] veth1_vlan: left promiscuous mode
[ 1641.957283][T27127] veth0_vlan: left promiscuous mode
[ 1641.972062][   T24] usb 2-1: active config #4 != 1 ??
[ 1641.989453][   T24] usb 2-1: USB disconnect, device number 79
[ 1642.032396][ T5851] usb 4-1: device descriptor read/64, error -71
[ 1642.040404][ T5856] Bluetooth: hci7: command tx timeout
[ 1642.164134][ T5851] usb usb4-port1: attempt power cycle
[ 1642.512180][ T5851] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1642.536043][ T5851] usb 4-1: device descriptor read/8, error -71
[ 1642.813256][ T5851] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1642.850629][ T5851] usb 4-1: device descriptor read/8, error -71
[ 1642.964323][ T5851] usb usb4-port1: unable to enumerate USB device
[ 1643.136279][   T30] audit: type=1326 audit(2000000567.840:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.7.9387" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe72438e929 code=0x0
[ 1643.688235][T27127] team0 (unregistering): Port device team_slave_1 removed
[ 1643.803907][   T55] block nbd2: Possible stuck request ffff888025760000: control (read@0,1024B). Runtime 150 seconds
[ 1643.817617][   T55] block nbd2: Possible stuck request ffff8880257601c0: control (read@1024,1024B). Runtime 150 seconds
[ 1643.828796][   T55] block nbd2: Possible stuck request ffff888025760380: control (read@2048,1024B). Runtime 150 seconds
[ 1643.907805][T27127] team0 (unregistering): Port device team_slave_0 removed
[ 1644.118034][ T5856] Bluetooth: hci7: command tx timeout
[ 1644.678016][ T5851] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1644.848220][ T5851] usb 4-1: device descriptor read/64, error -71
[ 1645.108940][ T5851] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1645.272468][ T5851] usb 4-1: device descriptor read/64, error -71
[ 1645.392205][ T5851] usb usb4-port1: attempt power cycle
[ 1645.739373][ T5851] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1645.766942][ T5851] usb 4-1: device descriptor read/8, error -71
[ 1646.015724][ T5851] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1646.079209][ T5851] usb 4-1: device descriptor read/8, error -71
[ 1646.202091][ T5856] Bluetooth: hci7: command tx timeout
[ 1646.214349][ T5851] usb usb4-port1: unable to enumerate USB device
[ 1646.921178][ T9499] netlink: 18128 bytes leftover after parsing attributes in process `syz.1.9392'.
[ 1647.017117][ T9343] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1647.039833][ T9343] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1647.077901][ T9343] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1647.118603][ T9343] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1647.331710][ T9343] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1647.395183][ T5851] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1647.408891][ T9343] 8021q: adding VLAN 0 to HW filter on device team0
[ 1647.459018][T27127] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1647.466285][T27127] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1647.519215][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1647.526429][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1647.548284][ T5851] usb 2-1: device descriptor read/64, error -71
[ 1647.816845][ T5851] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1647.979374][ T5851] usb 2-1: device descriptor read/64, error -71
[ 1648.087533][ T5851] usb usb2-port1: attempt power cycle
[ 1648.268294][ T9343] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1648.457448][ T5851] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1648.509096][ T5851] usb 2-1: device descriptor read/8, error -71
[ 1648.748227][ T5851] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1648.784804][ T5851] usb 2-1: device descriptor read/8, error -71
[ 1648.910222][ T5851] usb usb2-port1: unable to enumerate USB device
[ 1648.997287][ T9343] veth0_vlan: entered promiscuous mode
[ 1649.078048][ T9343] veth1_vlan: entered promiscuous mode
[ 1649.189143][ T9343] veth0_macvtap: entered promiscuous mode
[ 1649.215718][ T9343] veth1_macvtap: entered promiscuous mode
[ 1649.287000][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1649.337503][ T9343] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1649.367765][T27139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1649.440434][T27139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1649.473225][T27139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1649.520072][T27139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1649.712436][T27139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1649.722976][T27139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1649.809745][  T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1649.818533][  T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1650.665644][ T9611] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1650.948841][ T9624] netlink: 'syz.1.9413': attribute type 1 has an invalid length.
[ 1650.972276][ T9625] netlink: 'syz.1.9413': attribute type 10 has an invalid length.
[ 1650.983266][ T9624] netlink: 'syz.1.9413': attribute type 10 has an invalid length.
[ 1650.993084][ T9625] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9413'.
[ 1651.008596][ T9624] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9413'.
[ 1651.328308][ T9631] team_slave_0: entered promiscuous mode
[ 1651.334772][ T9631] team_slave_1: entered promiscuous mode
[ 1651.369885][ T9631] team_slave_0: left promiscuous mode
[ 1651.376036][ T9631] team_slave_1: left promiscuous mode
[ 1651.421502][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9415'.
[ 1652.083947][ T9666] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1652.458279][ T9676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9426'.
[ 1653.247456][ T9711] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1653.287307][ T9711] syz.7.9432: attempt to access beyond end of device
[ 1653.287307][ T9711] loop7: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1653.507294][ T9717] /dev/rnullb0: Can't open blockdev
[ 1654.558648][ T5851] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1654.744244][ T5851] usb 4-1: Using ep0 maxpacket: 16
[ 1654.752096][ T5851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1654.757127][ T9720] netlink: 'syz.4.9435': attribute type 2 has an invalid length.
[ 1654.793000][ T5851] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1654.841579][ T5851] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1654.862127][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1654.895600][ T5851] usb 4-1: Product: syz
[ 1654.896840][ T9754] /dev/rnullb0: Can't open blockdev
[ 1654.932928][ T5851] usb 4-1: Manufacturer: syz
[ 1654.937599][ T5851] usb 4-1: SerialNumber: syz
[ 1655.173003][ T5851] usb 4-1: 0:2 : does not exist
[ 1655.498837][ T9774] /dev/rnullb0: Can't open blockdev
[ 1655.582541][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1655.596724][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1655.626428][ T5851] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[ 1655.694520][ T5851] usb 4-1: USB disconnect, device number 80
[ 1655.735061][   T44] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1655.799757][T31971] udevd[31971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1655.889680][   T44] usb 2-1: Using ep0 maxpacket: 8
[ 1655.898581][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1655.912544][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1655.932879][   T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1655.943284][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[ 1655.964145][   T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1655.993623][   T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1656.007125][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1656.027562][   T44] usb 2-1: config 0 descriptor??
[ 1656.033799][ T9777] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1656.487451][ T9777] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1656.524047][   T44] usb 2-1: USB disconnect, device number 84
[ 1656.530957][ T5856] Bluetooth: hci0: Opcode 0x0c03 failed: -71
[ 1656.601922][ T9799] syzkaller1: entered promiscuous mode
[ 1656.607631][ T9799] syzkaller1: entered allmulticast mode
[ 1656.750808][ T9805] /dev/rnullb0: Can't open blockdev
[ 1656.983703][ T9814] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1657.181543][ T9819] MTD: Couldn't look up './file0': -15
[ 1657.209979][    T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 1657.378612][    T9] usb 4-1: device descriptor read/64, error -71
[ 1657.644936][    T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 1657.830814][    T9] usb 4-1: device descriptor read/64, error -71
[ 1657.894974][ T9848] input: syz1 as /devices/virtual/input/input129
[ 1657.924918][ T9850] loop6: detected capacity change from 0 to 7
[ 1657.950247][    T9] usb usb4-port1: attempt power cycle
[ 1657.959551][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1657.968808][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1657.981222][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1657.990472][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1658.002192][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1658.004567][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9468'.
[ 1658.011464][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1658.049193][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1658.058539][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1658.070176][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1658.079430][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1658.089681][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1658.099045][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1658.110388][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1658.119624][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1658.138296][ T9850] ldm_validate_partition_table(): Disk read failed.
[ 1658.205075][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1658.214362][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1658.226634][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1658.235900][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1658.246218][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1658.255472][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1658.265470][ T9850] Dev loop6: unable to read RDB block 0
[ 1658.280334][ T9850]  loop6: unable to read partition table
[ 1658.290226][ T9850] loop6: partition table beyond EOD, truncated
[ 1658.300581][    T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 1658.303391][ T9850] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5)
[ 1658.319100][ T9857] /dev/rnullb0: Can't open blockdev
[ 1658.365530][    T9] usb 4-1: device descriptor read/8, error -71
[ 1658.621618][    T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1658.642820][    T9] usb 4-1: device descriptor read/8, error -71
[ 1658.752365][    T9] usb usb4-port1: unable to enumerate USB device
[ 1659.150593][ T9887] /dev/rnullb0: Can't open blockdev
[ 1659.483573][T19756] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1659.662644][T19756] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 1659.670996][T19756] usb 2-1: config 0 has no interface number 0
[ 1659.681234][T19756] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1659.699151][T19756] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1659.708847][T19756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1659.717404][T19756] usb 2-1: Product: syz
[ 1659.722588][T19756] usb 2-1: Manufacturer: syz
[ 1659.727619][T19756] usb 2-1: SerialNumber: syz
[ 1659.741262][T19756] usb 2-1: config 0 descriptor??
[ 1659.764926][T19756] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 1660.026054][ T9910] cgroup2: Unknown parameter 'nsdelg¸úate'
[ 1660.825606][ T9932] /dev/rnullb0: Can't open blockdev
[ 1661.999249][    C1] usb 2-1: yurex_control_callback - control failed: -2
[ 1662.034204][ T5851] usb 2-1: USB disconnect, device number 85
[ 1662.069626][ T5851] yurex 2-1:0.50: USB YUREX #0 now disconnected
[ 1662.755357][ T9994] /dev/rnullb0: Can't open blockdev
[ 1662.898779][T10000] omfs: Invalid superblock (0)
[ 1662.919345][T10001] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9491'.
[ 1663.197435][T19756] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1663.388238][T19756] usb 2-1: config 0 has an invalid interface number: 220 but max is 0
[ 1663.398647][T19756] usb 2-1: config 0 has no interface number 0
[ 1663.405149][T19756] usb 2-1: config 0 interface 220 has no altsetting 0
[ 1663.415927][T19756] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=89.24
[ 1663.430512][T19756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1663.440770][T19756] usb 2-1: Product: syz
[ 1663.445506][T19756] usb 2-1: Manufacturer: syz
[ 1663.450338][T19756] usb 2-1: SerialNumber: syz
[ 1663.478649][T19756] usb 2-1: config 0 descriptor??
[ 1663.565549][T10030] /dev/sg0: Can't lookup blockdev
[ 1663.703927][T19756] usbtest 2-1:0.220: couldn't get endpoints, -22
[ 1663.717395][T19756] usbtest 2-1:0.220: probe with driver usbtest failed with error -22
[ 1663.755878][T19756] usb 2-1: USB disconnect, device number 86
[ 1664.294353][T10053] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9499'.
[ 1664.628653][T10070] /dev/rnullb0: Can't open blockdev
[ 1664.682454][T10066] /dev/rnullb0: Can't open blockdev
[ 1665.164027][T10090] /dev/rnullb0: Can't open blockdev
[ 1665.312021][T10095] /dev/rnullb0: Can't open blockdev
[ 1666.648250][ T5856] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1666.886966][T10149] /dev/rnullb0: Can't open blockdev
[ 1667.275601][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9522'.
[ 1667.510155][ T5861] usb 2-1: new full-speed USB device number 87 using dummy_hcd
[ 1667.671926][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1667.690770][ T5861] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[ 1667.708581][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1667.776966][ T5861] usb 2-1: config 0 descriptor??
[ 1668.273278][ T5861] pyra 0003:1E7D:2C24.0068: hidraw0: USB HID v0.08 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0
[ 1668.485228][T10159] XFS (rnullb0): Invalid superblock magic number
[ 1668.553754][T10206] /dev/rnullb0: Can't open blockdev
[ 1668.756688][T10209] /dev/rnullb0: Can't open blockdev
[ 1668.936093][ T5861] usb 2-1: USB disconnect, device number 87
[ 1670.103436][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[ 1670.389677][T10267] netlink: 'syz.3.9546': attribute type 10 has an invalid length.
[ 1670.444080][T10267] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1670.489585][T10267] team0: Port device bond0 added
[ 1671.437950][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.475358][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.527331][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.562848][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.634491][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.656482][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.678537][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.686846][T10290] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20000
[ 1671.694050][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.698441][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.712997][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.721764][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.742221][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.752025][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.761222][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.768965][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.789896][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.806526][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.818450][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.839836][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.849086][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.869754][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.891545][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.904085][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.928786][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.948909][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.969940][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1671.989987][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.010097][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.028957][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.045559][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.054930][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.062210][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.069329][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.076298][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.083365][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.090440][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.097328][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.113563][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.120793][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.128150][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.156706][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.179718][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.206416][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.231949][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.262098][T10283] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1672.552063][T10316] /dev/rnullb0: Can't open blockdev
[ 1672.602421][T19756] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1672.782422][T19756] usb 2-1: Using ep0 maxpacket: 16
[ 1672.798153][T19756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1672.818498][T19756] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1672.849455][T19756] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255
[ 1672.874789][T19756] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1672.895348][T19756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1672.910287][T19756] usb 2-1: Product: syz
[ 1672.919557][T19756] usb 2-1: Manufacturer: syz
[ 1672.930344][T19756] usb 2-1: SerialNumber: syz
[ 1672.956486][T19756] usb 2-1: config 0 descriptor??
[ 1672.972775][T10306] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1673.084141][T19756] mcba_usb 2-1:0.0 can0: failed tx_urb -90
[ 1673.090069][T19756] mcba_usb 2-1:0.0 can0: Failed to send cmd (169)
[ 1673.142826][T19756] mcba_usb 2-1:0.0 can0: failed tx_urb -90
[ 1673.146573][T10334] /dev/rnullb0: Can't open blockdev
[ 1673.154870][T19756] mcba_usb 2-1:0.0 can0: Failed to send cmd (169)
[ 1673.170832][T19756] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected
[ 1673.233789][T19756] usb 2-1: USB disconnect, device number 88
[ 1673.259906][T19756] mcba_usb 2-1:0.0 can0: device disconnected
[ 1673.942459][   T55] block nbd2: Possible stuck request ffff888025760000: control (read@0,1024B). Runtime 180 seconds
[ 1673.954491][   T55] block nbd2: Possible stuck request ffff8880257601c0: control (read@1024,1024B). Runtime 180 seconds
[ 1673.965977][   T55] block nbd2: Possible stuck request ffff888025760380: control (read@2048,1024B). Runtime 180 seconds
[ 1674.734198][T10392] /dev/rnullb0: Can't open blockdev
[ 1675.515093][   T44] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1675.655222][   T44] usb 4-1: device descriptor read/64, error -71
[ 1675.895631][   T44] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1676.045906][   T44] usb 4-1: device descriptor read/64, error -71
[ 1676.046208][    T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1676.156358][   T44] usb usb4-port1: attempt power cycle
[ 1676.236469][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1676.268225][    T9] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[ 1676.284707][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1676.309671][    T9] usb 2-1: config 0 descriptor??
[ 1676.324736][    T9] gspca_main: sq930x-2.14.0 probing 041e:403c
[ 1676.498468][   T44] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1676.552326][   T44] usb 4-1: device descriptor read/8, error -71
[ 1676.817424][   T44] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1676.858170][   T44] usb 4-1: device descriptor read/8, error -71
[ 1676.975891][   T44] usb usb4-port1: unable to enumerate USB device
[ 1677.108098][    T9] gspca_sq930x: reg_w 0305 fd00 failed -71
[ 1677.114882][    T9] sq930x 2-1:0.0: probe with driver sq930x failed with error -71
[ 1677.135550][    T9] usb 2-1: USB disconnect, device number 89
[ 1677.754089][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9588'.
[ 1677.764585][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9588'.
[ 1677.773915][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9588'.
[ 1677.783826][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9588'.
[ 1677.811249][T10450] binder: 10449:10450 ioctl c018620b 200000000000 returned -14
[ 1678.333072][T10466] 9pnet_fd: Insufficient options for proto=fd
[ 1678.410163][   T24] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1678.572514][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1678.598725][   T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1678.619976][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1678.656500][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1678.672871][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1678.690556][   T24] usb 4-1: Product: syz
[ 1678.699356][   T24] usb 4-1: Manufacturer: syz
[ 1678.720598][   T24] usb 4-1: SerialNumber: syz
[ 1678.757088][   T24] hub 4-1:1.0: bad descriptor, ignoring hub
[ 1678.763779][   T24] hub 4-1:1.0: probe with driver hub failed with error -5
[ 1678.958240][   T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1679.067497][  T996] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1679.101500][ T5861] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1679.231792][ T5861] usb 2-1: device descriptor read/64, error -71
[ 1679.246703][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1679.261749][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1679.292178][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1679.307755][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1679.339884][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1679.359261][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1679.484618][ T5861] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1679.512887][ T5854] usb 4-1: USB disconnect, device number 89
[ 1679.529881][ T5854] usblp0: removed
[ 1679.632843][ T5861] usb 2-1: device descriptor read/64, error -71
[ 1679.745281][ T5861] usb usb2-port1: attempt power cycle
[ 1680.082995][ T5861] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1680.137357][ T5861] usb 2-1: device descriptor read/8, error -71
[ 1680.413654][ T5861] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1680.454402][ T5861] usb 2-1: device descriptor read/8, error -71
[ 1680.544759][T10534] /dev/rnullb0: Can't open blockdev
[ 1680.583526][ T5861] usb usb2-port1: unable to enumerate USB device
[ 1680.977418][T10550] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1681.075115][ T5856] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1681.455729][T16313] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1681.504554][T10575] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1681.522403][T10575] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1681.636501][T16313] usb 4-1: Using ep0 maxpacket: 32
[ 1681.658959][T16313] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1681.686045][T16313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1681.702613][T16313] usb 4-1: config 0 descriptor??
[ 1681.718819][T16313] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1681.730325][T10580] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1681.805116][T10580] fuse: Bad value for 'fd'
[ 1681.830934][T10580] 9pnet_fd: p9_fd_create_unix (10580): problem connecting socket: ./bus: -111
[ 1683.212312][ T5854] usb 4-1: USB disconnect, device number 90
[ 1684.471015][ T5854] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1684.690702][ T5854] usb 2-1: device descriptor read/64, error -71
[ 1684.931282][ T5854] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1685.071554][ T5854] usb 2-1: device descriptor read/64, error -71
[ 1685.182083][ T5854] usb usb2-port1: attempt power cycle
[ 1685.362109][ T5851] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1685.522044][ T5851] usb 4-1: device descriptor read/64, error -71
[ 1685.532051][ T5854] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1685.581448][ T5854] usb 2-1: device descriptor read/8, error -71
[ 1685.772477][ T5851] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1685.832576][ T5854] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1685.863748][ T5854] usb 2-1: device descriptor read/8, error -71
[ 1685.922659][ T5851] usb 4-1: device descriptor read/64, error -71
[ 1685.973715][ T5854] usb usb2-port1: unable to enumerate USB device
[ 1686.048711][ T5851] usb usb4-port1: attempt power cycle
[ 1686.064702][T10693] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9642'.
[ 1686.393455][ T5851] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1686.425102][ T5851] usb 4-1: device descriptor read/8, error -71
[ 1686.535301][T10704] fuse: Bad value for 'rootmode'
[ 1686.648546][T10709] pim6reg1: entered promiscuous mode
[ 1686.669321][T10709] pim6reg1: entered allmulticast mode
[ 1686.684566][ T5851] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1686.726492][ T5851] usb 4-1: device descriptor read/8, error -71
[ 1686.836791][ T5851] usb usb4-port1: unable to enumerate USB device
[ 1688.556898][ T5854] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1688.698347][ T5854] usb 2-1: device descriptor read/64, error -71
[ 1688.809512][T10786] /dev/rnullb0: Can't open blockdev
[ 1688.950537][ T5854] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1689.088389][ T5854] usb 2-1: device descriptor read/64, error -71
[ 1689.199054][ T5854] usb usb2-port1: attempt power cycle
[ 1689.548684][ T5854] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1689.585368][ T5854] usb 2-1: device descriptor read/8, error -71
[ 1689.828933][ T5854] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1689.849630][ T5854] usb 2-1: device descriptor read/8, error -71
[ 1689.970587][ T5854] usb usb2-port1: unable to enumerate USB device
[ 1690.496660][T10761] syz.3.9655 (10761): drop_caches: 1
[ 1690.709765][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9663'.
[ 1690.719334][T10802] nbd: illegal input index -1900544
[ 1690.875027][T10802] /dev/rnullb0: Can't open blockdev
[ 1691.305227][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1691.314430][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1691.382349][T16313] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1691.469803][T10809] netlink: 596 bytes leftover after parsing attributes in process `syz.1.9666'.
[ 1691.540047][T10812] befs: (nbd1): No write support. Marking filesystem read-only
[ 1691.549485][T10812] syz.1.9667: attempt to access beyond end of device
[ 1691.549485][T10812] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1691.630372][T10814] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9668'.
[ 1691.642368][T10814] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9668'.
[ 1691.653932][T10814] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9668'.
[ 1691.962270][ T5854] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1692.026254][T10823] ./file0: Can't lookup blockdev
[ 1692.112554][ T5854] usb 2-1: Using ep0 maxpacket: 32
[ 1692.128246][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1692.151030][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1692.164488][ T5854] usb 2-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00
[ 1692.174335][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.188109][ T5854] usb 2-1: config 0 descriptor??
[ 1692.453252][T16313] usb 4-1: device descriptor read/64, error -71
[ 1692.610114][ T5854] asus 0003:0B05:1866.0069: item fetching failed at offset 3/5
[ 1692.619007][ T5854] asus 0003:0B05:1866.0069: Asus hid parse failed: -22
[ 1692.628986][ T5854] asus 0003:0B05:1866.0069: probe with driver asus failed with error -22
[ 1692.703246][T16313] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1692.853832][T16313] usb 4-1: Using ep0 maxpacket: 32
[ 1692.864729][T16313] usb 4-1: config 120 has an invalid interface number: 85 but max is 0
[ 1692.874835][T16313] usb 4-1: config 120 has no interface number 0
[ 1692.883180][T16313] usb 4-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=9c.75
[ 1692.892942][T16313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1692.901596][T16313] usb 4-1: Product: syz
[ 1692.906261][T16313] usb 4-1: Manufacturer: syz
[ 1692.910913][T16313] usb 4-1: SerialNumber: syz
[ 1693.240412][ T5946] usb 2-1: USB disconnect, device number 102
[ 1693.247868][T16313] ums-datafab 4-1:120.85: USB Mass Storage device detected
[ 1693.270431][T16313] ums-datafab 4-1:120.85: Quirks match for vid 07c4 pid a002: 1
[ 1693.281784][T16313] ums-datafab 4-1:120.85: This device (07c4,a002,9c75 S 56 P f2) has an unneeded Protocol entry in unusual_devs.h (kernel 6.16.0-rc6-next-20250714-syzkaller)
[ 1693.281784][T16313]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 1693.344903][T16313] usb 4-1: USB disconnect, device number 96
[ 1693.913712][T10840] /dev/sg0: Can't lookup blockdev
[ 1694.277355][T10853] hpfs: Bad magic ... probably not HPFS
[ 1694.377928][T10857] program syz.1.9686 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1694.387879][T10847] block nbd7: NBD_DISCONNECT
[ 1694.393113][T10847] block nbd7: Send disconnect failed -22
[ 1694.401898][T10857] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9686'.
[ 1694.402179][T10847] block nbd7: Send disconnect failed -22
[ 1694.439589][T10846] block nbd7: Disconnected due to user request.
[ 1694.454037][T10846] block nbd7: shutting down sockets
[ 1694.600212][ T5946] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1694.806302][ T5946] usb 4-1: Using ep0 maxpacket: 32
[ 1694.823025][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1694.834481][ T5946] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1694.853626][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1694.864311][ T5946] usb 4-1: Product: syz
[ 1694.874071][ T5946] usb 4-1: Manufacturer: syz
[ 1694.882813][ T5946] usb 4-1: SerialNumber: syz
[ 1694.897662][ T5946] usb 4-1: config 0 descriptor??
[ 1695.024989][T10878] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1695.320960][ T5946] gs_usb 4-1:0.0: Configuring for 156 interfaces
[ 1695.330619][ T5946] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces
[ 1695.358103][ T5946] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[ 1695.387527][T19756] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1695.529724][ T5861] usb 4-1: USB disconnect, device number 97
[ 1695.606462][T19756] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1695.628083][T19756] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1695.655456][T19756] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1695.677573][T19756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1695.699735][T19756] usb 2-1: SerialNumber: syz
[ 1695.708702][T10888] syz.4.9695: attempt to access beyond end of device
[ 1695.708702][T10888] loop4: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1695.757966][T10888] syz.4.9695: attempt to access beyond end of device
[ 1695.757966][T10888] loop4: rw=0, sector=16, nr_sectors = 2 limit=0
[ 1695.871301][T10888] tls_set_device_offload_rx: netdev not found
[ 1695.983011][T19756] usb 2-1: 0:2 : does not exist
[ 1696.029880][T19756] usb 2-1: USB disconnect, device number 103
[ 1696.087428][T31971] udevd[31971]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1696.255894][T10900] binder: 10899:10900 ioctl c0306201 200000000180 returned -22
[ 1696.349606][T10902] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9700'.
[ 1696.513361][T10910] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9703'.
[ 1696.565255][T10909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9703'.
[ 1696.578953][T10909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9703'.
[ 1696.772070][T10917] can0: slcan on ttyS3.
[ 1696.911582][T10917] can0 (unregistered): slcan off ttyS3.
[ 1696.926092][T10921] can0: slcan on ttyS3.
[ 1697.010154][T10916] can0 (unregistered): slcan off ttyS3.
[ 1697.380372][T10939] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP)
[ 1697.582315][T10941] 9pnet_fd: Insufficient options for proto=fd
[ 1698.561710][ T5946] usb 4-1: new low-speed USB device number 98 using dummy_hcd
[ 1698.672503][ T5851] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1698.719440][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1698.737622][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1698.751484][ T5946] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[ 1698.767672][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1698.781653][ T5946] usb 4-1: config 0 descriptor??
[ 1698.802091][ T5851] usb 2-1: device descriptor read/64, error -71
[ 1699.052854][ T5851] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1699.202426][ T5946] logitech-djreceiver 0003:046D:C52F.006A: item fetching failed at offset 2/5
[ 1699.212929][ T5851] usb 2-1: device descriptor read/64, error -71
[ 1699.223111][ T5946] logitech-djreceiver 0003:046D:C52F.006A: logi_dj_probe: parse failed
[ 1699.231464][ T5946] logitech-djreceiver 0003:046D:C52F.006A: probe with driver logitech-djreceiver failed with error -22
[ 1699.323084][ T5851] usb usb2-port1: attempt power cycle
[ 1699.408895][T10964] syzkaller1: entered promiscuous mode
[ 1699.417030][T10964] syzkaller1: entered allmulticast mode
[ 1699.673295][ T5851] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1699.752131][T10987] Malformed UNC in devname
[ 1699.752131][T10987] 
[ 1699.759137][T10987] CIFS: VFS: Malformed UNC in devname
[ 1699.816487][ T5851] usb 2-1: device descriptor read/8, error -71
[ 1699.847069][T19756] usb 4-1: USB disconnect, device number 98
[ 1700.053827][ T5851] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1700.074388][ T5851] usb 2-1: device descriptor read/8, error -71
[ 1700.186933][ T5851] usb usb2-port1: unable to enumerate USB device
[ 1700.724867][ T5851] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1700.875841][ T5851] usb 4-1: Using ep0 maxpacket: 16
[ 1700.882938][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1700.894599][ T5851] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1700.904532][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1700.915582][ T5851] usb 4-1: config 0 descriptor??
[ 1701.388810][ T5851] mcp2221 0003:04D8:00DD.006B: unknown main item tag 0x0
[ 1701.396218][ T5851] mcp2221 0003:04D8:00DD.006B: unknown main item tag 0x0
[ 1701.403296][ T5851] mcp2221 0003:04D8:00DD.006B: unknown main item tag 0x0
[ 1701.410704][ T5851] mcp2221 0003:04D8:00DD.006B: unknown main item tag 0x0
[ 1701.418002][ T5851] mcp2221 0003:04D8:00DD.006B: unknown main item tag 0x0
[ 1701.426365][ T5851] mcp2221 0003:04D8:00DD.006B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[ 1701.497176][T10995] netlink: 'syz.1.9730': attribute type 1 has an invalid length.
[ 1701.521309][T10995] netlink: 'syz.1.9730': attribute type 2 has an invalid length.
[ 1701.936371][T16313] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1702.086736][T16313] usb 2-1: device descriptor read/64, error -71
[ 1702.327143][T16313] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1702.477348][T16313] usb 2-1: device descriptor read/64, error -71
[ 1702.592227][T16313] usb usb2-port1: attempt power cycle
[ 1702.937818][T16313] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1702.947868][ T5856] Bluetooth: hci5: command 0x0406 tx timeout
[ 1702.978827][T16313] usb 2-1: device descriptor read/8, error -71
[ 1702.990946][T11017] netlink: 'syz.4.9738': attribute type 1 has an invalid length.
[ 1702.998899][T11017] netlink: 'syz.4.9738': attribute type 1 has an invalid length.
[ 1703.248170][T16313] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1703.270453][T16313] usb 2-1: device descriptor read/8, error -71
[ 1703.384487][T16313] usb usb2-port1: unable to enumerate USB device
[ 1703.523770][ T5861] usb 4-1: USB disconnect, device number 99
[ 1703.899675][ T5861] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1704.054114][T11029] netlink: 'syz.4.9743': attribute type 7 has an invalid length.
[ 1704.059257][ T5861] usb 4-1: Using ep0 maxpacket: 32
[ 1704.062354][T11029] netlink: 'syz.4.9743': attribute type 1 has an invalid length.
[ 1704.070728][   T55] block nbd2: Possible stuck request ffff888025760000: control (read@0,1024B). Runtime 210 seconds
[ 1704.075450][T11029] netlink: 216 bytes leftover after parsing attributes in process `syz.4.9743'.
[ 1704.086037][   T55] block nbd2: Possible stuck request ffff8880257601c0: control (read@1024,1024B). Runtime 210 seconds
[ 1704.106309][   T55] block nbd2: Possible stuck request ffff888025760380: control (read@2048,1024B). Runtime 210 seconds
[ 1704.117560][ T5861] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1704.125896][ T5861] usb 4-1: config 0 has no interface number 0
[ 1704.141849][ T5861] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1704.151301][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1704.159648][ T5861] usb 4-1: Product: syz
[ 1704.163897][ T5861] usb 4-1: Manufacturer: syz
[ 1704.168515][ T5861] usb 4-1: SerialNumber: syz
[ 1704.176200][ T5861] usb 4-1: config 0 descriptor??
[ 1704.185527][ T5861] smsc95xx v2.0.0
[ 1704.718382][T11032] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1704.998164][ T5861] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 1705.030560][ T5861] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1705.065491][ T5861] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1705.081186][ T5861] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[ 1705.100809][ T5861] usb 4-1: USB disconnect, device number 100
[ 1705.319939][T11057] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9752'.
[ 1705.338709][T11057] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9752'.
[ 1705.350263][T11057] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9752'.
[ 1705.627952][T11064] batadv_slave_0: entered promiscuous mode
[ 1705.671674][ T5851] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1705.683348][   T30] audit: type=1400 audit(2000000630.262:399): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11066 comm="syz.3.9755"
[ 1705.739909][T11061] batadv_slave_0: left promiscuous mode
[ 1705.868029][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1705.890951][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1705.919996][ T5851] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1705.930078][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1705.963337][ T5851] usb 2-1: config 0 descriptor??
[ 1706.397364][ T5851] hkems 0003:2006:0118.006C: unknown main item tag 0x0
[ 1706.404507][ T5851] hkems 0003:2006:0118.006C: unknown main item tag 0x0
[ 1706.411438][ T5851] hkems 0003:2006:0118.006C: unknown main item tag 0x0
[ 1706.418856][ T5851] hkems 0003:2006:0118.006C: unknown main item tag 0x0
[ 1706.427769][ T5851] hkems 0003:2006:0118.006C: unknown main item tag 0x0
[ 1706.436037][ T5851] hkems 0003:2006:0118.006C: unknown main item tag 0x0
[ 1706.444646][ T5851] hkems 0003:2006:0118.006C: unknown main item tag 0x0
[ 1706.456644][ T5851] hkems 0003:2006:0118.006C: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0
[ 1706.481268][ T5851] hkems 0003:2006:0118.006C: no inputs found
[ 1706.491846][ T5851] hkems 0003:2006:0118.006C: force feedback init failed
[ 1706.573431][ T5854] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1706.734679][ T5854] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1706.745030][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1706.755993][ T5854] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1706.777560][ T5854] usb 4-1: config 1 interface 0 has no altsetting 1
[ 1706.790799][ T5854] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1706.800790][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1706.822405][ T5854] usb 4-1: Product: syz
[ 1706.834494][ T5854] usb 4-1: Manufacturer: syz
[ 1706.850767][ T5854] usb 4-1: SerialNumber: syz
[ 1706.872149][ T5854] smsusb:smsusb_probe: board id=8, interface number 0
[ 1707.060416][T11115] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1707.318953][T11120] XFS (rnullb0): Invalid superblock magic number
[ 1708.076635][ T5856] Bluetooth: hci1: command 0x0406 tx timeout
[ 1708.103462][ T5854] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1708.108088][T11136] IPVS: set_ctl: invalid protocol: 103 172.30.0.8:20001
[ 1708.114069][ T5854] smsusb 4-1:1.0: probe with driver smsusb failed with error -71
[ 1708.144149][ T5854] usb 4-1: USB disconnect, device number 101
[ 1708.373395][ T5854] usb 2-1: USB disconnect, device number 112
[ 1708.383487][T11141] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1709.456305][ T5854] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1709.616687][ T5854] usb 4-1: Using ep0 maxpacket: 32
[ 1709.634616][ T5854] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1709.652971][ T5854] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1709.669391][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1709.689445][ T5854] usb 4-1: Product: syz
[ 1709.693670][ T5854] usb 4-1: Manufacturer: syz
[ 1709.702981][ T5854] usb 4-1: SerialNumber: syz
[ 1709.713910][ T5854] usb 4-1: config 0 descriptor??
[ 1709.722364][T11163] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 1709.942184][ T5854] usb 4-1: USB disconnect, device number 102
[ 1710.161770][T11163] netlink: 'syz.3.9783': attribute type 10 has an invalid length.
[ 1710.537591][ T5854] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1710.690841][ T5854] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1710.702287][ T5854] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1710.715595][ T5854] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1710.725769][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1710.734714][ T5854] usb 2-1: Product: syz
[ 1710.741104][ T5854] usb 2-1: Manufacturer: syz
[ 1710.745745][ T5854] usb 2-1: SerialNumber: syz
[ 1710.761507][ T5854] cdc_mbim 2-1:1.0: skipping garbage
[ 1710.962384][T11192] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1711.575414][T11192] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1711.583319][ T5854] cdc_mbim 2-1:1.0: setting tx_max = 184
[ 1711.598148][ T5854] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[ 1711.620151][ T5854] wwan wwan0: port wwan0mbim0 attached
[ 1711.635652][ T5854] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, fa:9b:cc:60:d3:2f
[ 1711.858942][ T5854] usb 2-1: USB disconnect, device number 113
[ 1711.877416][ T5854] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[ 1711.956568][ T5854] wwan wwan0: port wwan0mbim0 disconnected
[ 1712.588296][T11217] kAFS: unparsable volume name
[ 1712.705081][T11223] nbd: must specify at least one socket
[ 1712.740395][T16313] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[ 1712.883591][T11231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9800'.
[ 1712.927025][T16313] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1712.944958][T16313] usb 2-1: not running at top speed; connect to a high speed hub
[ 1712.965045][T16313] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[ 1712.980563][T16313] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1712.997453][T16313] usb 2-1: config 4 has no interface number 0
[ 1713.015545][T16313] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[ 1713.033332][T16313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1713.042484][ T5854] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1713.070992][T16313] usb 2-1: Product: syz
[ 1713.075257][T16313] usb 2-1: Manufacturer: syz
[ 1713.079888][T16313] usb 2-1: SerialNumber: syz
[ 1713.171138][ T5854] usb 4-1: device descriptor read/64, error -71
[ 1713.330634][T16313] usb 2-1: Found UVC 0.00 device syz (04f2:b746)
[ 1713.341509][T16313] usb 2-1: No streaming interface found for terminal 6.
[ 1713.371837][T16313] usb 2-1: USB disconnect, device number 114
[ 1713.411551][ T5854] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1713.576021][ T5854] usb 4-1: device descriptor read/64, error -71
[ 1713.704001][ T5854] usb usb4-port1: attempt power cycle
[ 1713.910895][T11264] binder: 11263:11264 ioctl c018620b 200000000000 returned -14
[ 1714.042042][ T5854] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1714.074848][ T5854] usb 4-1: device descriptor read/8, error -71
[ 1714.262576][ T5946] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1714.315643][T11277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9811'.
[ 1714.322759][ T5854] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1714.355585][ T5854] usb 4-1: device descriptor read/8, error -71
[ 1714.402445][ T5946] usb 2-1: device descriptor read/64, error -71
[ 1714.435153][T11281] /dev/rnullb0: Can't open blockdev
[ 1714.472999][ T5854] usb usb4-port1: unable to enumerate USB device
[ 1714.653308][ T5946] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1714.783246][ T5946] usb 2-1: device descriptor read/64, error -71
[ 1714.904063][ T5946] usb usb2-port1: attempt power cycle
[ 1714.955834][T11292] /dev/rnullb0: Can't open blockdev
[ 1714.968491][T11292] /dev/rnullb0: Can't open blockdev
[ 1715.062170][T11297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1715.072204][T11297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1715.253791][ T5946] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1715.278112][ T5946] usb 2-1: device descriptor read/8, error -71
[ 1715.523932][ T5946] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1715.545812][ T5946] usb 2-1: device descriptor read/8, error -71
[ 1715.656165][ T5946] usb usb2-port1: unable to enumerate USB device
[ 1715.865962][T11300] QAT: Invalid ioctl 1075883590
[ 1715.871241][T11300] QAT: Invalid ioctl 1075883590
[ 1715.878347][T11300] QAT: Invalid ioctl 1075883590
[ 1715.883437][T11300] QAT: Invalid ioctl 1075883590
[ 1715.888901][T11300] QAT: Invalid ioctl 1075883590
[ 1715.894489][T11300] QAT: Invalid ioctl 1075883590
[ 1715.899789][T11300] QAT: Invalid ioctl 1075883590
[ 1715.905281][T11300] QAT: Invalid ioctl 1075883590
[ 1715.910300][T11300] QAT: Invalid ioctl 1075883590
[ 1715.915592][T11300] QAT: Invalid ioctl 1075883590
[ 1715.932728][T11300] /dev/rnullb0: Can't open blockdev
[ 1716.174488][ T5851] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1716.326525][ T5851] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1716.335711][ T5851] usb 4-1: config 1 has no interface number 0
[ 1716.343432][ T5851] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1716.354578][ T5851] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1716.363672][ T5851] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1716.375443][ T5851] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1716.384525][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1716.392657][ T5851] usb 4-1: Product: syz
[ 1716.396870][ T5851] usb 4-1: Manufacturer: syz
[ 1716.401487][ T5851] usb 4-1: SerialNumber: syz
[ 1717.226360][ T5851] cdc_ncm 4-1:1.1: bind() failure
[ 1717.258041][ T5851] usb 4-1: USB disconnect, device number 107
[ 1718.146531][T11338] afs: Unknown parameter 'dont_measure'
[ 1718.157225][   T24] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1718.199101][T11343] Invalid/unusable pipe
[ 1718.204626][T11343] 9pnet_fd: Insufficient options for proto=fd
[ 1718.296983][   T24] usb 2-1: device descriptor read/64, error -71
[ 1718.347429][ T5856] Bluetooth: hci6: command 0x0406 tx timeout
[ 1718.548377][   T24] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1718.552081][T11362] random: crng reseeded on system resumption
[ 1718.675802][T11367] tmpfs: Bad value for 'mpol'
[ 1718.688726][   T24] usb 2-1: device descriptor read/64, error -71
[ 1718.801057][   T24] usb usb2-port1: attempt power cycle
[ 1718.849800][T11370] netlink: 'syz.3.9838': attribute type 11 has an invalid length.
[ 1719.016691][T11374] futex_wake_op: syz.3.9839 tries to shift op by -1; fix this program
[ 1719.148085][   T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1719.187777][   T24] usb 2-1: device descriptor read/8, error -71
[ 1719.428340][   T24] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1719.455366][   T24] usb 2-1: device descriptor read/8, error -71
[ 1719.569680][   T24] usb usb2-port1: unable to enumerate USB device
[ 1720.830162][T11390] ./cgroup: Can't lookup blockdev
[ 1721.036898][   T30] audit: type=1800 audit(2000000645.604:400): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9847" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[ 1721.411145][ T5861] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1721.584705][ T5861] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1721.608523][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1721.638483][ T5861] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1721.680990][ T5861] usb 2-1: config 1 interface 0 has no altsetting 1
[ 1721.696334][ T5861] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[ 1721.710791][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1721.718924][ T5861] usb 2-1: Product: syz
[ 1721.728637][ T5861] usb 2-1: Manufacturer: syz
[ 1721.734101][ T5861] usb 2-1: SerialNumber: syz
[ 1721.757178][ T5861] smsusb:smsusb_probe: board id=8, interface number 0
[ 1721.871482][T11412] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1722.187690][T11426] netlink: 'syz.3.9857': attribute type 29 has an invalid length.
[ 1722.778194][ T5861] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[ 1722.791291][ T5861] smsusb 2-1:1.0: probe with driver smsusb failed with error -71
[ 1722.803894][   T30] audit: type=1800 audit(2000000647.372:401): pid=11438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9861" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[ 1722.822378][ T5861] usb 2-1: USB disconnect, device number 123
[ 1722.826094][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9861'.
[ 1722.891767][T11440] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1723.655308][T11451] kvm: pic: non byte write
[ 1723.660750][T11451] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns
[ 1724.490556][    T9] Process accounting resumed
[ 1724.510858][    T9] Process accounting resumed
[ 1724.521242][    T9] Process accounting resumed
[ 1724.529288][    T9] Process accounting resumed
[ 1724.536732][    T9] Process accounting resumed
[ 1724.545121][    T9] Process accounting resumed
[ 1724.550296][    T9] Process accounting resumed
[ 1724.556449][    T9] Process accounting resumed
[ 1724.561646][    T9] Process accounting resumed
[ 1724.567700][    T9] Process accounting resumed
[ 1724.573347][    T9] Process accounting resumed
[ 1724.585157][    T9] Process accounting resumed
[ 1724.590706][ T5861] Process accounting resumed
[ 1724.610691][ T5861] Process accounting resumed
[ 1724.623159][ T5861] Process accounting resumed
[ 1724.633176][ T5861] Process accounting resumed
[ 1724.640002][ T5861] Process accounting resumed
[ 1724.660693][ T5861] Process accounting resumed
[ 1724.674854][ T5861] Process accounting resumed
[ 1724.682243][ T5861] Process accounting resumed
[ 1724.687940][ T5861] Process accounting resumed
[ 1724.701064][ T5861] Process accounting resumed
[ 1724.706675][ T5861] Process accounting resumed
[ 1724.713962][ T5861] Process accounting resumed
[ 1724.737886][ T5861] Process accounting resumed
[ 1724.747775][ T5861] Process accounting resumed
[ 1724.749043][ T5854] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1724.752964][ T5861] Process accounting resumed
[ 1724.766137][    T9] Process accounting resumed
[ 1724.771227][    T9] Process accounting resumed
[ 1724.776598][    T9] Process accounting resumed
[ 1724.782096][    T9] Process accounting resumed
[ 1724.787216][T11484] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1724.788025][    T9] Process accounting resumed
[ 1724.832672][ T5861] Process accounting resumed
[ 1724.855029][    T9] Process accounting resumed
[ 1724.860403][    T9] Process accounting resumed
[ 1724.865749][    T9] Process accounting resumed
[ 1724.875013][    T9] Process accounting resumed
[ 1724.885678][    T9] Process accounting resumed
[ 1724.912357][    T9] Process accounting resumed
[ 1724.926247][    T9] Process accounting resumed
[ 1724.938342][    T9] Process accounting resumed
[ 1724.951646][T11486] FAT-fs (nullb0): bogus number of reserved sectors
[ 1724.960364][    T9] Process accounting resumed
[ 1724.971629][    T9] Process accounting resumed
[ 1724.974715][ T5854] usb 4-1: Using ep0 maxpacket: 32
[ 1724.979062][T11486] FAT-fs (nullb0): Can't find a valid FAT filesystem
[ 1724.989361][ T5861] Process accounting resumed
[ 1724.997011][ T5861] Process accounting resumed
[ 1725.005490][T11486] FAT-fs (nullb0): bogus number of reserved sectors
[ 1725.012903][ T5861] Process accounting resumed
[ 1725.018941][ T5854] usb 4-1: config 64 has an invalid interface number: 51 but max is 0
[ 1725.021594][ T5861] Process accounting resumed
[ 1725.038471][ T5854] usb 4-1: config 64 has no interface number 0
[ 1725.043214][T11486] FAT-fs (nullb0): Can't find a valid FAT filesystem
[ 1725.052561][T11489] ieee802154 phy1 wpan1: encryption failed: -22
[ 1725.054573][ T5854] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1725.071508][ T5861] Process accounting resumed
[ 1725.079544][ T5861] Process accounting resumed
[ 1725.086804][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[ 1725.093278][ T5861] Process accounting resumed
[ 1725.101626][ T5861] Process accounting resumed
[ 1725.104990][ T5854] usb 4-1: Manufacturer: syz
[ 1725.117699][ T5861] Process accounting resumed
[ 1725.124515][ T5854] usb 4-1: SerialNumber: syz
[ 1725.137146][ T5861] Process accounting resumed
[ 1725.156633][ T5861] Process accounting resumed
[ 1725.162947][ T5854] quatech2 4-1:64.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1725.169850][ T5861] Process accounting resumed
[ 1725.216626][ T5861] Process accounting resumed
[ 1725.228999][    T9] Process accounting resumed
[ 1725.259010][    T9] Process accounting resumed
[ 1725.264254][    T9] Process accounting resumed
[ 1725.276764][    T9] Process accounting resumed
[ 1725.287994][    T9] Process accounting resumed
[ 1725.293666][    T9] Process accounting resumed
[ 1725.299336][    T9] Process accounting resumed
[ 1725.309902][    T9] Process accounting resumed
[ 1725.400479][T11478] Process accounting resumed
[ 1725.415337][ T5854] usb 4-1: qt2_attach - failed to power on unit: -71
[ 1725.434186][ T5854] quatech2 4-1:64.51: probe with driver quatech2 failed with error -71
[ 1725.478577][ T5854] usb 4-1: USB disconnect, device number 108
[ 1725.799381][T11521] netlink: 'syz.3.9889': attribute type 1 has an invalid length.
[ 1726.569863][T11538] netlink: 'syz.3.9895': attribute type 291 has an invalid length.
[ 1727.384745][T11561] overlay: Unknown parameter 'obj_role'
[ 1728.068575][    T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1728.229546][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1728.237274][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1728.247659][    T9] usb 4-1: config 1 has an invalid interface number: 231 but max is 1
[ 1728.257036][    T9] usb 4-1: config 1 has an invalid interface number: 129 but max is 1
[ 1728.265885][    T9] usb 4-1: config 1 has no interface number 0
[ 1728.272625][    T9] usb 4-1: config 1 has no interface number 1
[ 1728.280862][    T9] usb 4-1: config 1 interface 231 has no altsetting 0
[ 1728.298141][    T9] usb 4-1: config 1 interface 129 has no altsetting 0
[ 1728.320251][    T9] usb 4-1: string descriptor 0 read error: -22
[ 1728.330569][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5
[ 1728.358369][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1728.452852][T11593] netlink: 'syz.4.9909': attribute type 3 has an invalid length.
[ 1729.359332][T11618] /dev/rnullb0: Can't open blockdev
[ 1729.634889][    T9] usbtest 4-1:1.231: couldn't get endpoints, -71
[ 1729.693098][    T9] usbtest 4-1:1.231: probe with driver usbtest failed with error -71
[ 1729.718485][T11630] 9p: Unknown Cache mode or invalid value fscache18446744073709551615
[ 1729.751325][    T9] usbtest 4-1:1.129: couldn't get endpoints, -22
[ 1729.758616][    T9] usbtest 4-1:1.129: probe with driver usbtest failed with error -22
[ 1729.788624][    T9] usb 4-1: USB disconnect, device number 109
[ 1730.075766][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9926'.
[ 1730.991052][    T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1731.131172][    T9] usb 2-1: device descriptor read/64, error -71
[ 1731.371738][    T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1731.521631][    T9] usb 2-1: device descriptor read/64, error -71
[ 1731.629031][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.641374][    T9] usb usb2-port1: attempt power cycle
[ 1731.663444][   T24] usb 4-1: new full-speed USB device number 110 using dummy_hcd
[ 1731.825956][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1731.842295][   T24] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40
[ 1731.851639][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1731.860835][   T24] usb 4-1: Product: syz
[ 1731.865436][   T24] usb 4-1: Manufacturer: syz
[ 1731.870105][   T24] usb 4-1: SerialNumber: syz
[ 1731.981976][    T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1732.002936][    T9] usb 2-1: device descriptor read/8, error -71
[ 1732.151456][T11669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1732.174654][T11669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1732.191131][T11669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1732.205898][T11669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1732.252287][    T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 1732.283300][    T9] usb 2-1: device descriptor read/8, error -71
[ 1732.404155][    T9] usb usb2-port1: unable to enumerate USB device
[ 1734.156507][T11697] pvfs2: Unknown parameter '/dev/kvm'
[ 1734.206040][   T55] block nbd2: Possible stuck request ffff888025760000: control (read@0,1024B). Runtime 240 seconds
[ 1734.220512][   T55] block nbd2: Possible stuck request ffff8880257601c0: control (read@1024,1024B). Runtime 240 seconds
[ 1734.233009][   T55] block nbd2: Possible stuck request ffff888025760380: control (read@2048,1024B). Runtime 240 seconds
[ 1734.541027][   T24] usbhid 4-1:1.0: can't add hid device: -22
[ 1734.557349][   T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -22
[ 1734.577109][   T24] usb 4-1: USB disconnect, device number 110
[ 1734.673506][T11715] syzkaller1: entered promiscuous mode
[ 1734.683389][T11715] syzkaller1: entered allmulticast mode
[ 1735.853279][T11727] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1736.967141][   T24] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1737.127283][   T24] usb 4-1: Using ep0 maxpacket: 16
[ 1737.134718][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1737.145656][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1737.158996][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1737.169473][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1737.179983][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1737.197507][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1737.215879][   T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1737.231662][   T24] usb 4-1: Manufacturer: syz
[ 1737.249894][   T24] usb 4-1: config 0 descriptor??
[ 1737.598127][   T24] rc_core: IR keymap rc-hauppauge not found
[ 1737.631197][   T24] Registered IR keymap rc-empty
[ 1737.645551][T11772] netlink: 'syz.7.9964': attribute type 16 has an invalid length.
[ 1737.656840][T11772] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9964'.
[ 1737.665837][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1737.678622][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1737.710014][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1737.738186][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input132
[ 1737.782654][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1737.804865][T11777] syz.7.9966: attempt to access beyond end of device
[ 1737.804865][T11777] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0
[ 1737.818022][T19756] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1737.820302][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1737.835776][T11777] syz.7.9966: attempt to access beyond end of device
[ 1737.835776][T11777] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0
[ 1737.849314][T11777] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1737.858205][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1737.863417][T11777] syz.7.9966: attempt to access beyond end of device
[ 1737.863417][T11777] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0
[ 1737.882022][T11777] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1737.893750][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1737.901497][T11777] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1737.909689][T11777] UDF-fs: Scanning with blocksize 512 failed
[ 1737.916685][T11777] syz.7.9966: attempt to access beyond end of device
[ 1737.916685][T11777] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0
[ 1737.930302][T11777] syz.7.9966: attempt to access beyond end of device
[ 1737.930302][T11777] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0
[ 1737.938228][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1737.946308][T11777] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1737.960890][T11777] syz.7.9966: attempt to access beyond end of device
[ 1737.960890][T11777] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 1737.975735][T11777] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1737.983737][T19756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1737.985501][T11777] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1737.996575][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1738.003466][T11777] UDF-fs: Scanning with blocksize 1024 failed
[ 1738.017803][T11777] syz.7.9966: attempt to access beyond end of device
[ 1738.017803][T11777] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0
[ 1738.028780][T19756] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1738.045890][T19756] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 1738.057904][T11777] syz.7.9966: attempt to access beyond end of device
[ 1738.057904][T11777] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 1738.065027][T19756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1738.080329][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1738.085221][T11777] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1738.099541][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1738.104657][T11777] syz.7.9966: attempt to access beyond end of device
[ 1738.104657][T11777] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 1738.107030][T19756] usb 2-1: config 0 descriptor??
[ 1738.125872][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1738.132979][T11777] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1738.146232][T11777] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1738.154013][T11777] UDF-fs: Scanning with blocksize 2048 failed
[ 1738.158420][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1738.169638][T11777] syz.7.9966: attempt to access beyond end of device
[ 1738.169638][T11777] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1738.184633][T11777] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256
[ 1738.194760][T11777] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512
[ 1738.202118][   T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1738.204479][T11777] UDF-fs: warning (device nbd7): udf_load_vrs: No anchor found
[ 1738.221286][T11777] UDF-fs: Scanning with blocksize 4096 failed
[ 1738.225811][   T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1738.227372][T11777] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1)
[ 1738.260723][   T24] usb 4-1: USB disconnect, device number 111
[ 1738.549327][T19756] kovaplus 0003:1E7D:2D50.006D: unbalanced delimiter at end of report description
[ 1738.585828][T19756] kovaplus 0003:1E7D:2D50.006D: parse failed
[ 1738.609097][T19756] kovaplus 0003:1E7D:2D50.006D: probe with driver kovaplus failed with error -22
[ 1738.798326][T19756] usb 2-1: USB disconnect, device number 2
[ 1738.934183][T11796] netlink: 'syz.3.9971': attribute type 5 has an invalid length.
[ 1738.942380][T11798] netlink: 'syz.3.9971': attribute type 5 has an invalid length.
[ 1740.030504][ T5861] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1740.206358][ T5861] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[ 1740.231315][ T5861] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1740.253112][ T5861] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1740.273878][ T5861] usb 4-1: config 48 interface 0 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1740.290556][T16313] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[ 1740.302147][ T5861] usb 4-1: config 48 interface 0 has no altsetting 0
[ 1740.313133][ T5861] usb 4-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f
[ 1740.322576][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1740.340700][ T5861] usb 4-1: Product: syz
[ 1740.345024][ T5861] usb 4-1: Manufacturer: syz
[ 1740.349643][ T5861] usb 4-1: SerialNumber: syz
[ 1740.453003][T16313] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1740.466683][T16313] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1740.480474][T16313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1740.498986][T16313] usb 2-1: Product: syz
[ 1740.503453][T16313] usb 2-1: Manufacturer: syz
[ 1740.508115][T16313] usb 2-1: SerialNumber: syz
[ 1740.539820][T16313] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1740.645950][ T5861] usb 4-1: USB disconnect, device number 112
[ 1740.969990][T11837] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1741.249306][   T31] INFO: task syz.2.9109:7746 blocked for more than 143 seconds.
[ 1741.281277][   T31]       Not tainted 6.16.0-rc6-next-20250714-syzkaller #0
[ 1741.288585][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1741.341487][   T31] task:syz.2.9109      state:D stack:28328 pid:7746  tgid:7744  ppid:3585   task_flags:0x400140 flags:0x00004004
[ 1741.369529][T16313] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[ 1741.385971][   T31] Call Trace:
[ 1741.396228][   T31]  <TASK>
[ 1741.415577][   T31]  __schedule+0x16f5/0x4d00
[ 1741.431355][   T31]  ? do_filp_open+0x1fa/0x410
[ 1741.441691][   T31]  ? do_sys_openat2+0x121/0x1c0
[ 1741.461447][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1741.478103][   T31]  ? schedule+0x165/0x360
[ 1741.500057][   T31]  ? __pfx___schedule+0x10/0x10
[ 1741.510993][   T31]  ? schedule+0x91/0x360
[ 1741.517083][   T31]  schedule+0x165/0x360
[ 1741.521799][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1741.527731][   T31]  __mutex_lock+0x724/0xe80
[ 1741.533101][   T31]  ? __mutex_lock+0x51b/0xe80
[ 1741.537967][   T31]  ? bdev_open+0xe0/0xd30
[ 1741.542952][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1741.548120][   T31]  ? wait_on_inode+0xc0/0x230
[ 1741.556606][   T31]  ? kobject_get_unless_zero+0x161/0x1f0
[ 1741.562790][   T31]  ? disk_block_events+0xab/0x120
[ 1741.568025][   T31]  ? bdev_open+0xaf/0xd30
[ 1741.572996][   T31]  bdev_open+0xe0/0xd30
[ 1741.577305][   T31]  blkdev_open+0x3a8/0x510
[ 1741.582356][   T31]  ? __pfx_blkdev_open+0x10/0x10
[ 1741.587585][   T31]  do_dentry_open+0x953/0x13f0
[ 1741.593201][   T31]  vfs_open+0x3b/0x340
[ 1741.597401][   T31]  ? path_openat+0x2ecd/0x3830
[ 1741.602827][   T31]  path_openat+0x2ee5/0x3830
[ 1741.607550][   T31]  ? arch_stack_walk+0xfc/0x150
[ 1741.613172][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1741.618252][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1741.625010][   T31]  do_filp_open+0x1fa/0x410
[ 1741.629971][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1741.635526][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1741.640715][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1741.646345][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1741.650836][   T31]  do_sys_openat2+0x121/0x1c0
[ 1741.657604][   T31]  ? __se_sys_futex+0x36f/0x400
[ 1741.663694][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1741.669201][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1741.674531][   T31]  __x64_sys_openat+0x138/0x170
[ 1741.679583][   T31]  do_syscall_64+0xfa/0x3b0
[ 1741.684799][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1741.690324][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1741.696930][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1741.702075][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1741.711420][   T31] RIP: 0033:0x7f6c3878d290
[ 1741.716641][   T31] RSP: 002b:00007f6c365d4b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1741.725583][   T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6c3878d290
[ 1741.734671][   T31] RDX: 0000000000000000 RSI: 00007f6c365d4c10 RDI: 00000000ffffff9c
[ 1741.743113][   T31] RBP: 00007f6c365d4c10 R08: 0000000000000000 R09: 002364626e2f7665
[ 1741.751316][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[ 1741.764048][   T31] R13: 0000000000000000 R14: 00007f6c389b6080 R15: 00007ffc504ebd98
[ 1741.772899][   T31]  </TASK>
[ 1741.776129][   T31] 
[ 1741.776129][   T31] Showing all locks held in the system:
[ 1741.788982][   T31] 1 lock held by khungtaskd/31:
[ 1741.802424][   T31]  #0: ffffffff8e53eca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1741.813200][   T31] 3 locks held by kworker/u8:5/996:
[ 1741.818624][   T31] 2 locks held by getty/5615:
[ 1741.823947][   T31]  #0: ffff88814dcfe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1741.834620][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1741.845335][   T31] 2 locks held by kworker/0:8/16313:
[ 1741.860390][   T31]  #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1741.884113][   T31]  #1: ffffc9000d71fbc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1741.895317][   T31] 3 locks held by kworker/u8:13/27139:
[ 1741.900934][   T31] 1 lock held by udevd/31861:
[ 1741.906683][   T31]  #0: ffff888025653358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 1741.916531][   T31] 1 lock held by syz.2.9109/7746:
[ 1741.921713][   T31]  #0: ffff888025653358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 1741.931588][   T31] 1 lock held by syz.7.9968/11786:
[ 1741.937696][   T31] 2 locks held by syz.3.9988/11846:
[ 1741.943409][   T31]  #0: ffffffff8f938648 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 1741.953004][   T31]  #1: ffffffff8e5447f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[ 1741.969826][   T31] 
[ 1741.977599][   T31] =============================================
[ 1741.977599][   T31] 
[ 1741.996046][   T31] NMI backtrace for cpu 0
[ 1741.996064][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) 
[ 1741.996083][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1741.996093][   T31] Call Trace:
[ 1741.996101][   T31]  <TASK>
[ 1741.996108][   T31]  dump_stack_lvl+0x189/0x250
[ 1741.996133][   T31]  ? __wake_up_klogd+0xd9/0x110
[ 1741.996151][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1741.996172][   T31]  ? __pfx__printk+0x10/0x10
[ 1741.996203][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1741.996247][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1741.996268][   T31]  ? _printk+0xcf/0x120
[ 1741.996298][   T31]  ? __pfx__printk+0x10/0x10
[ 1741.996323][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1741.996344][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1741.996371][   T31]  watchdog+0xfee/0x1030
[ 1741.996391][   T31]  ? watchdog+0x1de/0x1030
[ 1741.996415][   T31]  kthread+0x70e/0x8a0
[ 1741.996433][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1741.996449][   T31]  ? __pfx_kthread+0x10/0x10
[ 1741.996465][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1741.996481][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1741.996496][   T31]  ? __pfx_kthread+0x10/0x10
[ 1741.996519][   T31]  ret_from_fork+0x3f9/0x770
[ 1741.996542][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1741.996568][   T31]  ? __switch_to_asm+0x39/0x70
[ 1741.996582][   T31]  ? __switch_to_asm+0x33/0x70
[ 1741.996595][   T31]  ? __pfx_kthread+0x10/0x10
[ 1741.996610][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1741.996638][   T31]  </TASK>
[ 1741.996678][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1742.158723][    C1] NMI backtrace for cpu 1
[ 1742.158742][    C1] CPU: 1 UID: 0 PID: 1111 Comm: kworker/u8:6 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) 
[ 1742.158771][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1742.158783][    C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[ 1742.158809][    C1] RIP: 0010:memcpy_orig+0x58/0x130
[ 1742.158833][    C1] Code: 4f 08 4c 89 57 10 4c 89 5f 18 48 8d 7f 20 73 d4 83 c2 20 eb 44 48 01 d6 48 01 d7 48 83 ea 20 0f 1f 00 48 83 ea 20 4c 8b 46 f8 <4c> 8b 4e f0 4c 8b 56 e8 4c 8b 5e e0 48 8d 76 e0 4c 89 47 f8 4c 89
[ 1742.158849][    C1] RSP: 0018:ffffc90003d87878 EFLAGS: 00000206
[ 1742.158864][    C1] RAX: ffff888055d39000 RBX: ffff888077f7157e RCX: ffffffff895da55b
[ 1742.158878][    C1] RDX: 0000000000000042 RSI: ffff888057065e42 RDI: ffff888055d39082
[ 1742.158891][    C1] RBP: ffff888055d39000 R08: 0000010200000038 R09: 1ffff1100aba7210
[ 1742.158904][    C1] R10: dffffc0000000000 R11: ffffed100aba7211 R12: ffff888077f715d0
[ 1742.158918][    C1] R13: 0000000000000820 R14: 0000000000000082 R15: dffffc0000000000
[ 1742.158931][    C1] FS:  0000000000000000(0000) GS:ffff8881258b4000(0000) knlGS:0000000000000000
[ 1742.158946][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1742.158958][    C1] CR2: 00007fe724582178 CR3: 0000000059676000 CR4: 00000000003526f0
[ 1742.158975][    C1] DR0: 0000000000006a34 DR1: 0000000000000000 DR2: 000000000000000d
[ 1742.158985][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1742.158996][    C1] Call Trace:
[ 1742.159004][    C1]  <TASK>
[ 1742.159011][    C1]  pskb_expand_head+0x20b/0x1150
[ 1742.159047][    C1]  batadv_skb_head_push+0x169/0x200
[ 1742.159070][    C1]  batadv_send_skb_packet+0xfa/0x6d0
[ 1742.159097][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x62f/0x7e0
[ 1742.159132][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[ 1742.159156][    C1]  process_scheduled_works+0xae1/0x17b0
[ 1742.159192][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1742.159223][    C1]  worker_thread+0x8a0/0xda0
[ 1742.159259][    C1]  kthread+0x70e/0x8a0
[ 1742.159275][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1742.159296][    C1]  ? __pfx_kthread+0x10/0x10
[ 1742.159312][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1742.159328][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1742.159345][    C1]  ? __pfx_kthread+0x10/0x10
[ 1742.159360][    C1]  ret_from_fork+0x3f9/0x770
[ 1742.159382][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1742.159408][    C1]  ? __switch_to_asm+0x39/0x70
[ 1742.159423][    C1]  ? __switch_to_asm+0x33/0x70
[ 1742.159437][    C1]  ? __pfx_kthread+0x10/0x10
[ 1742.159452][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1742.159476][    C1]  </TASK>
[ 1742.160313][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1742.421607][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) 
[ 1742.432900][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1742.442962][   T31] Call Trace:
[ 1742.446251][   T31]  <TASK>
[ 1742.449197][   T31]  dump_stack_lvl+0x99/0x250
[ 1742.453803][   T31]  ? __asan_memcpy+0x40/0x70
[ 1742.458410][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1742.463623][   T31]  ? __pfx__printk+0x10/0x10
[ 1742.468239][   T31]  vpanic+0x281/0x750
[ 1742.472234][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1742.476745][   T31]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[ 1742.482310][   T31]  ? preempt_schedule+0xae/0xc0
[ 1742.487176][   T31]  ? preempt_schedule_common+0x83/0xd0
[ 1742.492644][   T31]  panic+0xb9/0xc0
[ 1742.496374][   T31]  ? __pfx_panic+0x10/0x10
[ 1742.500799][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1742.506181][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1742.512346][   T31]  watchdog+0x102d/0x1030
[ 1742.516683][   T31]  ? watchdog+0x1de/0x1030
[ 1742.521107][   T31]  kthread+0x70e/0x8a0
[ 1742.525179][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1742.529884][   T31]  ? __pfx_kthread+0x10/0x10
[ 1742.534474][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1742.539682][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1742.544886][   T31]  ? __pfx_kthread+0x10/0x10
[ 1742.549481][   T31]  ret_from_fork+0x3f9/0x770
[ 1742.554081][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1742.559201][   T31]  ? __switch_to_asm+0x39/0x70
[ 1742.563964][   T31]  ? __switch_to_asm+0x33/0x70
[ 1742.568726][   T31]  ? __pfx_kthread+0x10/0x10
[ 1742.573319][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1742.578094][   T31]  </TASK>
[ 1742.581481][   T31] Kernel Offset: disabled
[ 1742.585808][   T31] Rebooting in 86400 seconds..