last executing test programs:

15m59.645117815s ago: executing program 32 (id=707):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setlease(r1, 0x400, 0x300)
ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x8001, "836e77001048dcc366e99dd39c5be0764f6dcebf5cbe90611ec69c5714e62647", 0x1})

15m41.159024392s ago: executing program 33 (id=850):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=<r1=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x1ff, 0x30, 0x68, 0x6}, {0xa, 0x6, 0x80, 0x9}, {0x5, 0x7, 0x2a, 0xb}, {0x9, 0x1, 0xfa, 0x193c}, {0xd, 0x8, 0x9, 0x401}, {0xff0b, 0x5, 0x0, 0xfffffff7}]})
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r2, 0x1ad72f7)
accept4$netrom(r2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
set_mempolicy(0x4000, &(0x7f0000000080)=0x6, 0x1)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000)

15m7.609296891s ago: executing program 34 (id=1103):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x40000012})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000040)=[0x1], 0x0, 0x0, 0x0, 0x7f}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
r6 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x20)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6})
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) (async)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000)

14m39.263825863s ago: executing program 35 (id=1339):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6})
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc580, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000)

13m4.568952236s ago: executing program 36 (id=2160):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000034000/0x1000)=nil, 0x1000, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

12m46.393135861s ago: executing program 4 (id=2301):
r0 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x615800)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0xdbf78194260ef02b, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$FUSE(r1, &(0x7f00000000c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_DIRENT(r2, &(0x7f0000002100)={0x58, 0x0, r3, [{0x4, 0x4, 0xf, 0x0, '/dev/dlm_plock\x00'}, {0x0, 0x2, 0x5, 0x8, '!#\xb1\'^'}]}, 0x58)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close_range(r5, r5, 0x2)
r6 = syz_open_dev$media(&(0x7f00000021c0), 0x3, 0x0)
ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000002200))
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000002300)=0x6)
bind$pptp(0xffffffffffffffff, &(0x7f0000002340)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1e)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000002380)=""/223)
connect$pptp(r0, &(0x7f0000002480)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1e)
preadv(r4, &(0x7f0000002a00)=[{&(0x7f00000024c0)=""/145, 0x91}, {&(0x7f0000002580)=""/103, 0x67}, {&(0x7f0000002600)=""/137, 0x89}, {&(0x7f00000026c0)=""/50, 0x32}, {&(0x7f0000002700)=""/196, 0xc4}, {&(0x7f0000002800)=""/230, 0xe6}, {&(0x7f0000002900)=""/95, 0x5f}, {&(0x7f0000002980)=""/20, 0x14}, {&(0x7f00000029c0)=""/33, 0x21}], 0x9, 0x1c, 0x59)
bind$pptp(r1, &(0x7f0000002ac0)={0x18, 0x2, {0x3, @multicast1}}, 0x1e)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000002b00)={{0x1, 0x1, 0x18, <r7=>r0, {0x6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000002b40)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
socket(0x29, 0x802, 0x8)
syz_genetlink_get_family_id$gtp(&(0x7f0000002b80), r1)
ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r1, 0x8004af79, &(0x7f0000002bc0))
connect$pptp(r1, &(0x7f0000002c00)={0x18, 0x2, {0x2, @empty}}, 0x1e)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000002c40)={0x4})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000002d00)={'ip6gre0\x00', &(0x7f0000002c80)={'ip6gre0\x00', <r8=>0x0, 0x4, 0x1, 0xcd, 0x8, 0x61, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x0, 0x40, 0x0, 0x6}})
bind$xdp(r7, &(0x7f0000002d40)={0x2c, 0x9, r8, 0x26, r7}, 0x10)
openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0)
lseek(r0, 0x8, 0x0)
connect$pptp(r7, &(0x7f0000002dc0)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
bind$pptp(0xffffffffffffffff, &(0x7f0000002e00)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1e)

12m46.227883323s ago: executing program 4 (id=2302):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
socket$netlink(0x10, 0x3, 0x4)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f00000006c0)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}})
ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000000)={0x0, 0x400})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000100)={0x20, 0x23, 0xbf, {0xbf, 0x8, "242e5383056729adebbb152995b92a0365d3cd37609cdde8eb407bea790b4a1d729af436fef13eb1f30e48e9d2b21ac684de030443f8f0829b0669617ca783d650870c0d14a8f898cf4b56568dbf5405de83f211423945b6e91e1be6d53fe0b7d719d84aa7db1e2771ff572400dba4f25b4bca378d0124102e33a2ed252f500cb448a721bf780217d032f49cde24f1afb941689836c6397d98c5e1e8d2b3a1a18ea8f0199df7430b8e576439780e4482e0f9736346c0e72274edec155f"}}, &(0x7f0000000280)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "c34b398a06a733459d2a295b87269ef3d8ffbc7b1c167fbe4731062d769bb87d097dbadff5d0a62bc42fb9a392a36f2180c71963cac259fe507fe9b19e7adfb1787df307f7fea677cfa75de68903539fd02e0435061abdc2fdbf11ef87b7d51e793942c3eabaaa2e6b4b90222d4a9fd57659ea1ba42d6d51d45217df9565cefeed2daee78ae9c2ec4c90832f2678964b35345f35ab9e73f2b15c50bdfb546da757fa6042737b09843c87be969f11962d3d375a990e97ae66a9476a4b8799e81d1faa66bfa8b4754034474cf3c41ba8f27a246c835644ffb6a65980d10e"}}}, &(0x7f00000005c0)={0x34, &(0x7f00000003c0)={0x40, 0x3, 0x48, "2279ade554a885c70510ddc28baacb5d317e7a51f550ac025c76133b7eb0cb18e18c2e47ae74ff40e9c345f6836363f50f95a4d3f7d1574c8effea47a1b4a5083ea1563341c2ce81"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x56}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0xe, {0xc, "982dcebea28d75e2b71b5b60"}}, &(0x7f0000000540)={0x20, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x6}})
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1e984a19, 0x810, r0, 0x6acee000)

12m46.055150161s ago: executing program 37 (id=2302):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
socket$netlink(0x10, 0x3, 0x4)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f00000006c0)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}})
ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f0000000000)={0x0, 0x400})
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000100)={0x20, 0x23, 0xbf, {0xbf, 0x8, "242e5383056729adebbb152995b92a0365d3cd37609cdde8eb407bea790b4a1d729af436fef13eb1f30e48e9d2b21ac684de030443f8f0829b0669617ca783d650870c0d14a8f898cf4b56568dbf5405de83f211423945b6e91e1be6d53fe0b7d719d84aa7db1e2771ff572400dba4f25b4bca378d0124102e33a2ed252f500cb448a721bf780217d032f49cde24f1afb941689836c6397d98c5e1e8d2b3a1a18ea8f0199df7430b8e576439780e4482e0f9736346c0e72274edec155f"}}, &(0x7f0000000280)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "c34b398a06a733459d2a295b87269ef3d8ffbc7b1c167fbe4731062d769bb87d097dbadff5d0a62bc42fb9a392a36f2180c71963cac259fe507fe9b19e7adfb1787df307f7fea677cfa75de68903539fd02e0435061abdc2fdbf11ef87b7d51e793942c3eabaaa2e6b4b90222d4a9fd57659ea1ba42d6d51d45217df9565cefeed2daee78ae9c2ec4c90832f2678964b35345f35ab9e73f2b15c50bdfb546da757fa6042737b09843c87be969f11962d3d375a990e97ae66a9476a4b8799e81d1faa66bfa8b4754034474cf3c41ba8f27a246c835644ffb6a65980d10e"}}}, &(0x7f00000005c0)={0x34, &(0x7f00000003c0)={0x40, 0x3, 0x48, "2279ade554a885c70510ddc28baacb5d317e7a51f550ac025c76133b7eb0cb18e18c2e47ae74ff40e9c345f6836363f50f95a4d3f7d1574c8effea47a1b4a5083ea1563341c2ce81"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x56}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0xe, {0xc, "982dcebea28d75e2b71b5b60"}}, &(0x7f0000000540)={0x20, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x6}})
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1e984a19, 0x810, r0, 0x6acee000)

11m19.469514568s ago: executing program 38 (id=2912):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
sendmsg$nl_generic(r0, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f0000000040)={0x1208, 0x21, 0x2, 0x70bd29, 0x25dfdbfb, {0xe}, [@generic="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", @nested={0x10f6, 0x118, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @pid=r2}, @typed={0x4, 0x116}, @typed={0x8, 0x102, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0xff}, @generic="8f84115f1b382ce3994e1beca3c73aa34139361e22ae98dfedc85e8f1411250bcca713c8afd5363c96d1899b5cba5bd0987a3442178185a6ff51edd5e213b91aa1fac0863a8a3762a9b17411e8cb958bc8976266fb0f421910627c0ab22c2060a2492327246921f7bd955dc0802959375225f8396deae57d10f43c64424988bca9fdb8654c93fa0ae20cc89052f85a45d705f491c6b434f54e6c133b788047e0712f6c784df4199f27b0da3d8ab7cc33a1e3935cee935ab283bc22d8f91d5e0d8e64636168d04b011a78a26dbab8672d9266978aebb4485db676", @generic="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"]}]}, 0x1208}, 0x1, 0x0, 0x0, 0x4}, 0x40)

8m41.373527252s ago: executing program 7 (id=4370):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
chown(&(0x7f0000000100)='./cgroup\x00', 0x0, 0xee00)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
readv(r4, &(0x7f0000000740)=[{&(0x7f0000000240)=""/82, 0x52}], 0x1)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0)

8m41.370306434s ago: executing program 7 (id=4371):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
recvfrom(r2, 0x0, 0x0, 0x8eee2385daec478c, 0x0, 0x0) (async)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') (async)
chdir(&(0x7f0000000140)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETINFO(r3, 0xffffffff80000501, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80000, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f00000000c0)={r5, 0x0, 0x4, 0x40}) (async)
sendfile(r1, r1, 0x0, 0x5)

8m41.295412071s ago: executing program 7 (id=4374):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x64b50f6d620e5bd6)
r1 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000440)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\x18\xd5C(k\xf0\xf8\x02\x00\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D\xe9\t\xbd\x17\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6\x05\x00\x00\x00\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00'/186, &(0x7f0000000240)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='\x06\x00{O', &(0x7f0000000080)='\x1e\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000640)='dU|\xcbM\xe6\x91q\xe0\x05\xbes\xc0\xd2\xdb0}\xa6\xc4tly\xe0+\xb8~\xd9ymx\xa1\x06\xb4F\xf3Q:\xfem\xea\xed\xfc\x04\xf88\xe0\xa1&\xa8\xff\x10\xb3\xb2\x92N\f\x00!\xdbV\xc3\xca\r\x8c\xfb\x8esJ\xb3\x1bf\xce\v\x0e\xe3\xd5', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='\x00', &(0x7f00000001c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000200)='\x00', 0x0, r1)
close(r1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0x6, 0x2, 'client0\x00', 0x80000000, "d265ddb96b598ab0", "926f8907ccbac258b11f1721df8fe389214971ab6e81c172aa9174b75e677bc5", 0x7fffffff, 0x4})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
r7 = socket$inet6(0xa, 0x3, 0x5)
setuid(0xee00)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x9, 0xfffe}, 0x20)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="080800000049f631"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0adf010000080022012b0200000800abc1a166b0afff7a13423e92ad73329f00061004961d14c5"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x42}}}}}, 0x20}}, 0xc020)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b000200000000090400054508"], 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fcdbdf252700000008000300", @ANYRES32=0x0, @ANYBLOB="0c00dee701000000130000000a000600505050505050000089002a002d1a008005040000000000000001000000080000000800ff7f0000077e15100000000000070000007506010002001e00bd10198befde3052280b14d509f245f34aa1182d1a000811090000000000000005000f0011000000010007000000063c04000e030d7206030300"/146], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044890)
recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='overlay\x00', 0x212451, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100))
syz_open_dev$mouse(&(0x7f00000001c0), 0xffffffffffffff81, 0x800)

8m40.738634492s ago: executing program 7 (id=4384):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r0)
sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003e00)={0x14, r1, 0x437, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x4) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) (async)
umount2(&(0x7f0000000180)='./file0\x00', 0xb) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0xfffffffd)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008894) (async)
bind$inet6(r2, 0x0, 0xffffffffffffff5e) (async)
setsockopt$sock_int(r2, 0x1, 0x31, 0x0, 0x0) (async)
preadv(r2, 0x0, 0x0, 0x0, 0x8) (async)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)={0x42afc0, 0x1c1}, 0x18)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$FIBMAP(r5, 0x1, &(0x7f00000000c0)=0xffffffdf) (async)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f0000000100), &(0x7f00000001c0)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r7, 0x0) (async)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xd0)

8m40.710612976s ago: executing program 7 (id=4385):
r0 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x82)
fchdir(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000500)=""/45, 0x2d)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './cgroup\x00'})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r5, 0x200, 0xdda, 0x648, 0x8, 0x8}, 0x14)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0)

8m40.628404868s ago: executing program 7 (id=4388):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc05c5340, &(0x7f0000000440))
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000000680)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120)
syz_clone(0x4000, &(0x7f0000000140)="a973e64f52877a370e895b83584c08f23e7374a329abe90fa61a0d6944ba9d6449a1226a5e1a944a925f97e64941fc120b8c42150ab973e411a55d5e3e4992524c63dffc8beb25d2fc74038a4447626c902d400e2cb5bc103240421d105ae332796cdfde5903856278a8d20f3cf796109de952fe0d295725d9c63014f01f7684c61f1864233993035a607def14c3e204a074a69bc98e382bb44b8ce1e7f750e4c70c039488f24ede8d18a40c883b7b377b89ae6dd1790909b3727c34d9", 0xbd, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000200)="1bf6413ed25d74036fb167cc195840cbf89609123902357e718200ea3d6306557e89847c54eb4d06c44cc3189acb1fc7b638c5d0ef24b356a6c26719977027e3fbbb37190aed326e1acecd0ddf7c3deac5bdd1c0df2a2ab715c33f")
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d742dbd7000fddbdf250a00000008000300", @ANYRES32=r8, @ANYBLOB="140050800500020001000000050009000204000000e8bff1ab98000600ffffffffffff00d1"], 0x3c}, 0x1, 0x0, 0x0, 0x40006095}, 0x40010)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ad27fe88000000000000000000", @ANYRES16=r5, @ANYBLOB="000329bd7000ffdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="080057001e0300003c003300a0ac0300ffffffffffff080211000000ffffffffffffb3b1000081c03b008c1853065b3ce369f239f0b85776db040697617004e80a7ba2d5080057003b120000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040081) (async)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ad27fe88000000000000000000", @ANYRES16=r5, @ANYBLOB="000329bd7000ffdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="080057001e0300003c003300a0ac0300ffffffffffff080211000000ffffffffffffb3b1000081c03b008c1853065b3ce369f239f0b85776db040697617004e80a7ba2d5080057003b120000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040081)
syz_pidfd_open(r2, 0x0)
capset(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20000100, 0x8})
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r9, 0xc018620b, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x46a602, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r10, 0xf648d000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r10, 0xf648d000)
madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) (async)
madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2)
socket$inet6(0xa, 0x80002, 0x0) (async)
r11 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

8m40.522607424s ago: executing program 39 (id=4388):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc05c5340, &(0x7f0000000440))
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000000680)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120)
syz_clone(0x4000, &(0x7f0000000140)="a973e64f52877a370e895b83584c08f23e7374a329abe90fa61a0d6944ba9d6449a1226a5e1a944a925f97e64941fc120b8c42150ab973e411a55d5e3e4992524c63dffc8beb25d2fc74038a4447626c902d400e2cb5bc103240421d105ae332796cdfde5903856278a8d20f3cf796109de952fe0d295725d9c63014f01f7684c61f1864233993035a607def14c3e204a074a69bc98e382bb44b8ce1e7f750e4c70c039488f24ede8d18a40c883b7b377b89ae6dd1790909b3727c34d9", 0xbd, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000200)="1bf6413ed25d74036fb167cc195840cbf89609123902357e718200ea3d6306557e89847c54eb4d06c44cc3189acb1fc7b638c5d0ef24b356a6c26719977027e3fbbb37190aed326e1acecd0ddf7c3deac5bdd1c0df2a2ab715c33f")
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d742dbd7000fddbdf250a00000008000300", @ANYRES32=r8, @ANYBLOB="140050800500020001000000050009000204000000e8bff1ab98000600ffffffffffff00d1"], 0x3c}, 0x1, 0x0, 0x0, 0x40006095}, 0x40010)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ad27fe88000000000000000000", @ANYRES16=r5, @ANYBLOB="000329bd7000ffdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="080057001e0300003c003300a0ac0300ffffffffffff080211000000ffffffffffffb3b1000081c03b008c1853065b3ce369f239f0b85776db040697617004e80a7ba2d5080057003b120000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040081) (async)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ad27fe88000000000000000000", @ANYRES16=r5, @ANYBLOB="000329bd7000ffdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="080057001e0300003c003300a0ac0300ffffffffffff080211000000ffffffffffffb3b1000081c03b008c1853065b3ce369f239f0b85776db040697617004e80a7ba2d5080057003b120000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040081)
syz_pidfd_open(r2, 0x0)
capset(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20000100, 0x8})
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r9, 0xc018620b, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x46a602, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r10, 0xf648d000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r10, 0xf648d000)
madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) (async)
madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2)
socket$inet6(0xa, 0x80002, 0x0) (async)
r11 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

6m37.054483013s ago: executing program 3 (id=5248):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'veth0_to_hsr\x00', {0x8}, 0x7}) (async)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

6m37.043484896s ago: executing program 3 (id=5249):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}}, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r2, 0x92, 0x5, 0x2)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xf5da, <r3=>r2, 'id0\x00'})
sendto$x25(r3, &(0x7f0000000200)="19c16f8258994c6b9a396d5d2cab7d43915ad94b9b0262929806039406d81cd2cbb8cf4e2aa760b3e094d8e3eeea51cf98612d5b4342a0108cc04e8daf90a672d098bbd218574bc0d8224f7f4262db66b6e2", 0x52, 0x4000000, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r2, 0xa4717000)

6m36.797049293s ago: executing program 3 (id=5251):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f00007c1000/0x2000)=nil, 0x2000, 0x15) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x1}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000688000/0x2000)=nil, 0x2000, 0x1, 0x22052, r3, 0x2000)

6m36.653793222s ago: executing program 3 (id=5252):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x300008c0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x4)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x1fff)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff1000)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d001c00020400bf050005001201", 0x2e}], 0x1}, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x29)
getgroups(0x2, &(0x7f00000000c0)=[0xee01, <r5=>0xee01])
setfsgid(r5)
setfsgid(r5)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)

6m36.531517108s ago: executing program 3 (id=5253):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = socket(0x200000100000011, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r7, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0xef, 0x6, @remote}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e788d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x4000)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r9, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
close(r9)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
fstat(r10, &(0x7f0000000440))
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r12=>r11, {0x3, 0x3d}}, './file0\x00'})
sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x2000a040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

6m36.432562074s ago: executing program 3 (id=5254):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 32)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0}, 0x810) (rerun: 32)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x42002, 0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f0000000600), 0x0, &(0x7f0000000640)={r1, r2+60000000}, 0x0, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)

6m21.412565008s ago: executing program 40 (id=5254):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 32)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0}, 0x810) (rerun: 32)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x42002, 0x0) (async)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f0000000600), 0x0, &(0x7f0000000640)={r1, r2+60000000}, 0x0, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)

4m33.253462715s ago: executing program 1 (id=6268):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000080900010073797a30000000000900020073797a320000000014000000020a01"], 0x98}}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000640)=0x1, 0x4)
sendmsg$802154_dgram(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000000c0)={0x0}}, 0x4040000)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x6c0b01, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4m33.018809713s ago: executing program 1 (id=6273):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x6, &(0x7f0000000080)={0x0, "cbc19de8d51fc1a057020ccfd7da422ceb02449515512b2bde3ea4bdb44a7af50b"}})
socket$inet6_sctp(0xa, 0x1, 0x84)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)

4m32.965862097s ago: executing program 1 (id=6274):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x18, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000004500)={0x2020}, 0x2020)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000140)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, {0xa, 0x4e24, 0x2d7fff8c, @remote, 0x4}, 0x0, {[0x10001, 0xbc4, 0x0, 0xd130, 0xff, 0x8, 0x80008000, 0x4f65]}}, 0x5c)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
sendfile(r7, r0, 0x0, 0x7fffefff)
ptrace$poke(0x4, r1, &(0x7f0000000080), 0x80000000)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, <r8=>0x0, 0x0, 0x0]})
r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r10, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r9, 0xc01864b1, &(0x7f0000000080)={r11, 0x0, 0x7, 0x0, &(0x7f0000000140)})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000300)={r8, 0x0, r11, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})

4m32.54209756s ago: executing program 1 (id=6275):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x12, 0x1, 0x0, "c175f0b781eddc96e6d941c3a7f9582753f9ffff8cbae2850c67ea00"})
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x4000, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gretap0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r4, 0x11, 0x6, @local}, 0x10)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000004c0)={0x1, @win={{0x5, 0x3, 0xb78, 0x5}, 0x8, 0xfffffff7, &(0x7f00000003c0)={{0x94, 0xbeb, 0x4, 0x4}, &(0x7f0000000380)={{0x47c, 0xca, 0x80, 0x8}, &(0x7f0000000300)={{0xe9c, 0x2, 0x6, 0x7}}}}, 0x997, &(0x7f0000000400)="1f74a3c64e65c742fa38e0020d6ec4aba5de47085176fba0c15d2752eaaa21329d364c7a78f7e5686ae9a91e273087c1f9d47fac70c1bde124afc78ee79382c91a81bae926745d39d93a401b8561982c3b1923e8ba9a2af8ea61eb73e287f3bde2179c6f4ea9faa31fc137fa8e4bdf4419afa308b7c86ca8f402af539f8697f254b7", 0x5}})
sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x2}, 0x11, 0x0, 0x0, 0x0, "1d3cdb194d983bc4771308142797ffc0bbfac7dee152cbd692fdfa5b7c56d2424f541fc53124379060ac94108e5f3e138665d967f71d4ee2e0dbcdd692ace36e"}, 0x48}, 0x1, 0x0, 0x0, 0x8c000}, 0x10)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000005c0)='smb3\x00', 0x4400, 0x0)
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x79, 0x2205c0)
fchdir(r5)
r6 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000240))
ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000280)={@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x1, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})

4m32.506911549s ago: executing program 1 (id=6276):
r0 = openat$binfmt_format(0xffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)="01", 0x1)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r2, &(0x7f0000000200)="d5", 0x0, 0x20004840, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)
openat$binfmt_format(0xffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) (async)
write(r0, &(0x7f0000000080)="01", 0x1) (async)
socket$inet(0xa, 0x801, 0x84) (async)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r1, 0x8) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)
sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async)
sendto$inet6(r2, &(0x7f0000000200)="d5", 0x0, 0x20004840, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) (async)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) (async)

4m32.277096064s ago: executing program 1 (id=6277):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/170)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)

4m32.168430425s ago: executing program 41 (id=6277):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/170)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)

1m54.959013888s ago: executing program 8 (id=7776):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000006009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x200, 0x0, 'queue1\x00', 0xfffffffe})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000200)={0x0, 0x0, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x9423a67c26a11a1f, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = fsmount(r0, 0x0, 0x0)
openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched_retired(r5, &(0x7f0000002bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000000180)=@newchain={0x29d4, 0x64, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2, 0x6}, {0xa, 0x6}, {0xffff, 0xfff3}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x6, 0x6}}]}}, @f_tcindex={{0xc}, {0x298c, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x4}, @TCA_TCINDEX_ACT={0x120, 0x7, [@m_ctinfo={0x11c, 0xf, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x2823, 0x7, 0x8, 0x8}}]}, {0xbe, 0x6, "461d89294adcb00ee4ea8e05988ef2e324fd44497810ab66ce5c5378944c91b90e73fa01fbabb1d9440c49c05dc224b322d58e1ed2fc035ef43ef420a7e15cfb78622a091597933b345a42abd3a9825de5cad4843c876f1bf71df8b218da2bc46d0b5319806d07baf81bfb492b79cfa13daf4ddf24f778b7807106824b15d261a25044fcf9b05140f760ef0f7a063cbbef55a16ff38c2b27797f7b8ddc711979c6566f05c0ea98a9e17982f7afc3c709f3cddb1cafb812976d61"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x5}}}}]}, @TCA_TCINDEX_POLICE={0x898, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x7e63b13, 0x9, 0xfffffe01, 0xf, 0x0, 0x5, 0x4, 0x0, 0x10000, 0x8, 0x0, 0xfffffff7, 0x8, 0x5, 0x8a, 0x3, 0x1, 0x0, 0x9, 0x263, 0x5, 0x9, 0xfffffffb, 0x2, 0x7ff, 0x0, 0x2, 0x539, 0x9, 0x4, 0xdbc7, 0x3, 0xd, 0x1, 0xdcac, 0x3, 0x0, 0x7fffffff, 0x1e2, 0x1, 0x4, 0x0, 0x10001, 0x5, 0xffffffff, 0x6, 0x400, 0x7, 0xf, 0x0, 0x6ab, 0x7, 0x9, 0x7, 0x200, 0xd, 0x5, 0x1, 0x4, 0x0, 0x80000001, 0x896, 0x8, 0x1, 0xd3a, 0x43c, 0x7, 0x1, 0x2, 0x1338, 0x6, 0x7ff, 0x7, 0x1c, 0x929, 0xd8000000, 0x6, 0x7, 0x10, 0x1, 0x7, 0xffff, 0x1, 0x5, 0x8, 0x3, 0xaf0, 0x7ff, 0x6, 0x48, 0xf9c8, 0xfffeffff, 0x8, 0x7fffffff, 0x80, 0x2, 0x0, 0x10000, 0x7d, 0x7f, 0xfffffff9, 0x3, 0x7fff, 0xbd, 0x3, 0x93e8, 0x7, 0xff, 0xae, 0xbfd, 0x6, 0x100, 0x9, 0x5, 0x3, 0x2, 0x7fff, 0x7, 0x7, 0x9, 0x3, 0x4, 0xffffffff, 0x7, 0x8, 0x100, 0x7ff, 0x2, 0x7fffffff, 0x8, 0x3, 0x3, 0x5, 0x8, 0x3d635cc8, 0x7, 0x4, 0xfffff001, 0x4541, 0x3, 0x8001, 0x0, 0xfffffff9, 0x4, 0x4, 0x7, 0x8000, 0x5, 0x8, 0x0, 0x80000000, 0x8, 0xd, 0x424, 0x26a, 0xfffffffb, 0x2, 0x5, 0x6, 0x61e2, 0xfffffff8, 0x1f5c7be, 0x6, 0x6b, 0x80, 0xfff, 0x6, 0x80, 0x3, 0x9, 0x2, 0x5, 0x8, 0xb4, 0x7e9d03d9, 0x8, 0x1, 0x3, 0x8, 0x4, 0xfffff4b7, 0xc, 0x7, 0x0, 0x2, 0x8, 0xe, 0x4, 0x1ff, 0x10000, 0x1, 0x9, 0xf806, 0x6, 0xffff, 0x71eca6c0, 0x1, 0x7, 0x4, 0x9, 0xfff, 0x8, 0x3, 0x1, 0x5, 0x4, 0xffff724b, 0x361900, 0x2, 0x1516, 0xd057, 0x7, 0x8, 0x7ff, 0x60b7, 0x4, 0x8, 0x83b0, 0xcb21, 0x2, 0x6000, 0x1, 0x0, 0x0, 0x9d, 0xb2f, 0x400, 0xb, 0x2, 0x4, 0x6, 0x2, 0x1, 0x3, 0xffffffff, 0x0, 0x9, 0x1, 0xfffffff9, 0xecb, 0x0, 0x0, 0xd45, 0x2, 0x6f, 0x8, 0x2447, 0x7, 0x80000001, 0x5df649e4, 0xb, 0x5, 0xf, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x7fff, 0x4, 0xc38, {0x5, 0x1, 0x9, 0x800, 0x8001}, {0x4, 0x1, 0x4, 0x9800, 0x7, 0x101}, 0x2, 0x7, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x2, 0x8, 0xd59, {0x3, 0x0, 0x6, 0xd403, 0x6e6, 0x3}, {0x5, 0x2, 0xfff, 0x7fff, 0x4, 0x7fffffff}, 0x7, 0x2, 0x55}}, @TCA_POLICE_RATE={0x404, 0x2, [0x13b, 0x7, 0x10001, 0x8000, 0xfffe, 0x7, 0xd, 0x4d, 0x7, 0x101, 0x8ab1, 0x4, 0x970, 0x6, 0xf3, 0xfffffffd, 0x4, 0xa2, 0x0, 0x9, 0x33c, 0x7, 0x8, 0x2, 0x1, 0x40, 0x2, 0x5, 0x7, 0x0, 0x3, 0x7, 0x1, 0x3, 0x8, 0x6, 0x2, 0x81, 0x0, 0xfd0, 0xa, 0x3a, 0x8, 0x5, 0x5, 0x0, 0x2247, 0xfffffff7, 0x4, 0x1, 0x67, 0x7, 0x0, 0x400, 0x6, 0x400, 0x2, 0x210a, 0xd, 0x5aff, 0x3, 0x7, 0x6, 0x7ff, 0x4, 0x0, 0x6, 0x0, 0xb, 0x7, 0x1, 0x9, 0x101, 0x13d, 0x2d, 0x8, 0x1, 0x8, 0x4, 0x1a2a, 0xdc, 0x3, 0x200, 0x400, 0x8871, 0x9e8f, 0x4, 0x9, 0x9, 0x9, 0x8, 0xbf, 0x0, 0x10, 0x9, 0x9, 0x0, 0xffff, 0x8, 0x4, 0x10, 0x7, 0xffffffff, 0x7, 0xffffff7f, 0x9, 0x8, 0x1, 0x3, 0xffffff10, 0x5, 0xd7e, 0x7, 0xfffffffd, 0xfc, 0xb, 0x56f, 0x9, 0x5db4cad8, 0x7f, 0x185, 0x5, 0x81, 0x401, 0x3ff, 0x1, 0x6, 0x7, 0x3, 0xd22, 0x1, 0x2, 0xd3a0, 0x81, 0x1, 0x6, 0xff, 0x6, 0x9, 0x401, 0x8000, 0xb3b, 0x800, 0x80000000, 0x6f0, 0x1b29, 0x9, 0x99, 0x1, 0xfffffffa, 0x2, 0x8535, 0x8, 0x6, 0x8, 0x8, 0xfff, 0x3, 0x7ff, 0x7, 0x10, 0x174b, 0x1, 0x22e, 0xfffffff3, 0x7fffffff, 0x2, 0x5, 0xe4b, 0x3ff, 0x7ff, 0x7ff, 0x8, 0x3, 0x0, 0x7fffffff, 0x8, 0xfffffffa, 0x5, 0x2, 0x9, 0xa1, 0xd7, 0x3, 0x4, 0x5, 0x6, 0x3, 0x5e06, 0x95, 0x4, 0x9, 0xb3c3, 0x2, 0xff, 0x2, 0x5, 0xfffffff7, 0x0, 0x0, 0x94, 0x10001, 0x7, 0xfffffba9, 0x3, 0x1ff, 0x80000000, 0x3ff, 0x494, 0xde6, 0x10001, 0xfb6, 0x51, 0x7, 0xb, 0x2, 0x2, 0xff, 0x1ff, 0xfffffffe, 0xd4, 0x3ff, 0x7f, 0x100, 0x1, 0x1, 0x1ff, 0x1, 0x200, 0x8b, 0x9, 0xc1a2, 0x3, 0x206c90eb, 0x2, 0x1, 0x4, 0x8, 0x3, 0x9, 0x3, 0x13, 0x3, 0x7, 0xf, 0x1, 0x9, 0x6c, 0x5, 0x6, 0x6, 0x2, 0x7e3, 0xd, 0x0, 0x3175]}]}, @TCA_TCINDEX_ACT={0x1f4c, 0x7, [@m_connmark={0x1cc, 0x4, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0xfffffffffffffff9, 0xfffffffc, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x26bc, 0x20000000, 0x3, 0x100}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x1, 0x6983}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x40, 0x1}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbe, 0x6000, 0x20000000, 0x6, 0xb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1000, 0x20000000, 0x2, 0x8000}, 0x3}}]}, {0xf1, 0x6, "cce15589a25897856e939e89a7a2eb21a6e59adcdc77f65510c462f1d109467fd70c1d6c5e01de825d57894364eada8fa149f7dae43f92da57a77e0eff5ad6929beb53463ca7bad52b7bedb820530910367cc260471e5f9f2b3c30ed177ad09a6ffb6aa6da3e483df8f60ecd6301299309590de94a896ed28e7f99df6ba58499786256d4228cd1e9d97c012f27fd531db73df7ee0121b5c4c9c6e1d65a5935e811343a851acb7fc8c41bc97713afbfb040c56fd7cedf12cf6cc43211ae4978b80f90843c06fb0e3443a80e518d5aae23d1a861ec0053b83340c3f0f2fdf7b5022d5369baed1fb5458e4d2db0e1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_pedit={0x1d7c, 0x16, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x1, 0x0, 0x8, 0x0, 0x3}, 0x2, 0x81, [{0x8000, 0x7, 0x6, 0x7, 0x4, 0x60e}, {0x0, 0xe27c, 0x4, 0x9, 0xe85, 0x39}, {0x6, 0x7, 0x7fff, 0x6fa8, 0x3, 0x1}]}, [{0x6, 0x1000, 0x3, 0x7, 0x3, 0x4d4}, {0xffffffff, 0xc7, 0x1, 0x5, 0x1, 0x7ff}, {0x3, 0x7, 0x5, 0x5, 0x800, 0x10001}, {0xe6, 0x80000000, 0x7f, 0xd35a, 0xd, 0xd43}, {0xa, 0x6, 0x3, 0x7, 0xdd1, 0x81}, {0x6, 0x401, 0x4b, 0x2cc8, 0x2, 0x9}, {0x2d4, 0xb, 0x200, 0x8, 0x1, 0x5}, {0x9, 0x7, 0x4, 0xd, 0x7fffffff, 0x2}, {0x6, 0x81, 0x4, 0x3f, 0xda, 0x69}, {0x3, 0x3, 0xfffffffb, 0x1, 0x4, 0x7}, {0x80000001, 0xffffffff, 0x7, 0x1, 0x2, 0x3}, {0x200, 0xffffffff, 0xf24e, 0x7, 0x0, 0x9}, {0x7, 0x3, 0x200000, 0xfffffffe, 0x401, 0x9}, {0x8, 0x1000, 0x2f, 0x8, 0x2, 0xad}, {0x7fff, 0x3, 0x40, 0x5, 0x800, 0x4}, {0xffffffff, 0x2, 0x7f, 0x4, 0x2, 0xfffffffb}, {0x8, 0x5, 0x101, 0x6, 0xc, 0x4}, {0x8, 0x4, 0x9, 0xfffffff8, 0x1000, 0x5}, {0x7, 0x7, 0xe, 0x3f65, 0x1, 0x72b}, {0x2, 0x5, 0x7, 0x5, 0x10, 0x5}, {0x1, 0x6, 0x5, 0x7d, 0x0, 0x4b96}, {0x5, 0x0, 0x9, 0x6cf, 0x0, 0x6}, {0x8, 0xd800, 0xd1f, 0x4585, 0x6, 0x6}, {0x5, 0xac, 0x1, 0x4, 0x4, 0x6}, {0x3, 0x1, 0x9, 0x8f71, 0x2}, {0x4, 0x6, 0x3, 0x9, 0x7fffffff, 0x48}, {0x6, 0x800, 0xfffffeff, 0x2, 0x0, 0x9}, {0x3, 0x10001, 0x8, 0x0, 0x2, 0xffff}, {0x5, 0x9, 0x5, 0x4, 0x2, 0x5}, {0xc9, 0x44, 0x4, 0x100, 0xf3bd6d7, 0x8}, {0x401, 0x4, 0x8, 0xfffffffe, 0x8, 0x70}, {0x2, 0xd, 0xa, 0x481488b2, 0x4e, 0x48}, {0xb, 0x8, 0x66, 0x4, 0x200, 0x3ff}, {0xff, 0x1, 0x9, 0x3, 0x1, 0x6}, {0xffffffff, 0x2, 0x19cda343, 0x7fffffff, 0x6}, {0x9, 0x3, 0x4ae, 0x0, 0x8, 0x7}, {0x4, 0x0, 0x1157, 0x69, 0x3, 0x800}, {0xff, 0x821e, 0x9, 0x40, 0x4, 0x3e4f}, {0x7, 0x6, 0xef6c, 0x3f, 0x6, 0x8}, {0x2, 0x9, 0xa, 0x9, 0x5, 0x8}, {0x1, 0x800, 0x49f, 0x898, 0x3, 0x5}, {0x2, 0x1, 0x3, 0x3, 0x0, 0x2}, {0x8, 0x8, 0x2, 0x7, 0xd60f, 0x1ff}, {0xc7, 0x0, 0xff, 0x5, 0xe00, 0xff}, {0x4, 0x6, 0x4, 0x1000, 0x10, 0x5}, {0x0, 0x9, 0x2, 0x10, 0x400, 0x9}, {0x3, 0x3, 0xd2, 0x5, 0x90, 0x77}, {0x3, 0xf, 0x80, 0x7, 0x2, 0x2}, {0x1, 0x0, 0x9, 0x6, 0x6, 0x800}, {0x3, 0x0, 0x6, 0x3d198b38, 0x7ff, 0x1}, {0x2, 0xffffffff, 0xfffffff9, 0x9, 0x6, 0x8001}, {0xfff, 0x60c, 0x6, 0x7f, 0x200, 0x6}, {0x5, 0x0, 0x8, 0x9, 0x6}, {0x3, 0xfffffff7, 0xb746, 0xc, 0x8, 0x9}, {0x2602, 0x6, 0x9, 0x4, 0x0, 0x8}, {0xfffffff7, 0x7fff, 0x7f800000, 0x1d46, 0x7}, {0x6, 0xba2, 0x2, 0x2, 0x3, 0x9}, {0x1, 0x1ff, 0x5, 0x16, 0x0, 0x9}, {0x8, 0x2, 0x4, 0xd13, 0x322db125, 0xb}, {0x5, 0x8, 0x5, 0xfffffffd, 0xffff6655, 0xf8}, {0xbad, 0xe91, 0x1000, 0x5, 0x7, 0x2}, {0x3, 0x6, 0x7, 0x6, 0x0, 0x6}, {0x1, 0x0, 0x40000000, 0x0, 0x7, 0x2}, {0xc2, 0x1, 0xd026, 0x9, 0x9, 0xb0}, {0xd, 0xfffffffe, 0x0, 0x8, 0x0, 0x81}, {0x9, 0x345, 0x1fa4, 0xff, 0x6dc8ab4b, 0x8001}, {0x1000, 0x5, 0x3, 0x3, 0x2, 0xfff}, {0x1, 0x4, 0x9, 0x1ff, 0xa58c, 0x1000}, {0x2, 0xdec40, 0xe7, 0x80000001, 0x8000, 0x2}, {0x80000001, 0xffffffff, 0x8000, 0x7, 0x1}, {0x1b, 0x3, 0x4, 0x8, 0x2}, {0x80000000, 0x605c, 0x80000000, 0x2, 0xf769, 0x8}, {0xf, 0x0, 0x8, 0x8, 0x5d337d9a, 0xb}, {0x2, 0x7, 0x5, 0x1, 0x8000, 0xffffffff}, {0x0, 0x9, 0x1, 0xffffffff, 0x3e4b4673, 0x2}, {0x9, 0x401, 0x10001, 0x400, 0xff1, 0x3}, {0xe9, 0x8, 0x1, 0x9, 0x5, 0x7}, {0xfffff34d, 0x8, 0x8, 0x4182, 0x1}, {0x6, 0x75, 0x2, 0x1ff, 0x6, 0x4}, {0x6, 0xf, 0xffff0001, 0x80000001, 0x2, 0x1}, {0x25, 0x0, 0xfffffffb, 0x25f, 0x9, 0xe}, {0x6, 0x1, 0x2, 0x4, 0x7f}, {0x2, 0x9, 0xb1, 0x437, 0xe1, 0x9dc3}, {0x0, 0x8, 0x7, 0x78a1, 0x40, 0x9}, {0x5, 0x4866, 0x3ff, 0xc0ee, 0x8, 0x8}, {0x80000001, 0x1, 0x7fff, 0x2, 0x9, 0x2}, {0xa, 0x7, 0x3, 0x2, 0x7fff, 0x9}, {0xd243, 0x4, 0xc, 0x5, 0x80, 0x8bdf}, {0xff, 0x5000000, 0xda98, 0x3, 0xeb5, 0x9}, {0x9, 0xf, 0x2, 0x0, 0xf, 0xfffffffa}, {0x1000, 0xd4a, 0xae8f, 0x5, 0x3, 0x5}, {0xfffffe00, 0xe, 0x4, 0x80, 0x3, 0x4a82}, {0x1ff, 0xffff, 0x3, 0x7d4d, 0x1, 0x10001}, {0x4, 0x2d, 0x6, 0x5, 0x1da18d3, 0x6}, {0x5, 0x7, 0xffffffff, 0x62, 0x5, 0xff}, {0x10, 0x8617, 0x3ff, 0xa, 0x1, 0x3ff}, {0x7fff, 0x8, 0x2, 0x6, 0x1, 0x7ff800}, {0x48, 0x9, 0x2, 0x0, 0x10001, 0x4dbd}, {0x5, 0x8, 0x8, 0x6, 0xe, 0x7ff}, {0x3, 0x9, 0x4, 0x0, 0x0, 0x7}, {0xc4, 0xfffffff7, 0xc263, 0x7, 0xdd7, 0x1}, {0x7, 0x1, 0x7fffffff, 0x5, 0x1000, 0x7}, {0x9, 0x200, 0x2, 0x3c6a8f26, 0xba27, 0x3}, {0x9, 0x9, 0x8, 0x3, 0x6, 0x8}, {0x37a, 0x401, 0x100, 0x9, 0x2c, 0x100}, {0xffff, 0x2, 0x8, 0x3, 0x2, 0x7fffffff}, {0x5, 0x5, 0x33, 0xbc6, 0x7, 0x80000000}, {0x9, 0x7fffffff, 0x8, 0x4000000, 0xd, 0x7}, {0x4, 0xfffffff9, 0x4, 0x1, 0x7, 0x10000}, {0x81, 0xfffffff7, 0xfffffffc, 0x6, 0x5, 0x5}, {0x2, 0x7, 0x3, 0x7f97c742, 0xffffffff}, {0x3bb12ea2, 0x8, 0x2, 0x400, 0x6, 0x2}, {0x10, 0x6bad, 0x9, 0x4, 0x2, 0xdd8}, {0x2, 0x3, 0x6, 0x0, 0x3, 0x81b}, {0x7f, 0x8, 0x5, 0x80000001, 0x9, 0x12}, {0x1, 0xff, 0xc, 0x7, 0x2, 0x7fffffff}, {0x85d, 0x7, 0x1, 0x4f0f, 0x9}, {0x48d, 0x9, 0x7, 0x3, 0x9, 0x4}, {0x6, 0x1, 0x2, 0x8, 0x6, 0x5}, {0x98b, 0x0, 0x21ce61bb, 0x4, 0x5, 0x10000}, {0xfffffffb, 0x1, 0x8, 0x1, 0x1, 0x9}, {0xffff, 0xb66f, 0x80, 0x4, 0x1ff, 0xffffffff}, {0x91d, 0x3, 0x8, 0x6, 0x4, 0x39d}, {0x34, 0x0, 0x1, 0x2, 0x80000001, 0xf}, {0x6, 0x6, 0x4, 0x829b, 0x276, 0x1ff}, {0x2, 0x6, 0x3, 0xfffffff8, 0x0, 0x7}, {0xfffffffa, 0x7, 0x6, 0x80, 0x58f, 0x5}, {0x160, 0x3, 0x0, 0x8, 0x1ff, 0x6}], [{0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {}, {}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3}, {0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x2, 0xed693d7f40b36b6f}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x3, 0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xf4b, 0x7ff, 0x4, 0x69, 0x21}, 0x3, 0x7, [{0xfffffc23, 0xc3d9, 0x4, 0x5, 0x7, 0x7}]}, [{0x8, 0x8, 0x5, 0x5, 0xffff9384, 0x6}, {0x7, 0x7f, 0x0, 0x400, 0x3, 0x7fffffff}, {0x3, 0xfffff77b, 0x6, 0x4, 0x7, 0xffffffff}, {0x4, 0x360, 0x1, 0x4, 0x6, 0x8}, {0x3ff, 0x8, 0x2e, 0x9, 0x7fff, 0x3}, {0x2c, 0x5, 0x7, 0x8, 0x3, 0xe}, {0x9, 0x3, 0x7943, 0x6, 0x2}, {0x1, 0x0, 0x4ac3, 0x5, 0xfffffff9, 0x80000001}, {0x5, 0x400, 0xf, 0x9, 0x6, 0xfffffffb}, {0x6, 0x4, 0x7, 0x6, 0x7, 0x5805}, {0x3, 0x1000, 0xb7, 0x1000, 0x7, 0x10000}, {0x5, 0x5, 0x7, 0x8, 0x7, 0x80000000}, {0x0, 0x6, 0x200, 0x0, 0x4e, 0xfffffff8}, {0x4, 0x2d4, 0x5, 0xb88, 0x8, 0x6}, {0x0, 0x81, 0x3, 0x0, 0x1, 0xff}, {0x8, 0x3, 0x2, 0x0, 0xd, 0x80}, {0x9, 0xfffffffa, 0x1, 0x1, 0x40, 0x80}, {0x5, 0xffffffff, 0x2, 0x80000000, 0x9, 0x1}, {0x400, 0x9, 0x9, 0x0, 0xb6c, 0x7}, {0xffff7be6, 0x6, 0x6ae, 0x737a, 0x0, 0x8}, {0x7, 0x6, 0xb293, 0x8, 0x9, 0x3}, {0x5, 0xfffffafa, 0x1, 0x3, 0x1ff, 0x6}, {0xbf, 0xffffe0ec, 0x3, 0x0, 0x7fff, 0x2}, {0x0, 0x10000, 0xc3c6, 0x8, 0x2, 0x5}, {0x1, 0x3, 0x8, 0x3, 0x9, 0x5}, {0x0, 0x5e36, 0x0, 0x0, 0x8, 0x9}, {0x4, 0x3, 0x4, 0x7, 0x1, 0x6}, {0xbdd2, 0xffffffff, 0x2, 0x8, 0xe60, 0x4}, {0x3bb4, 0x4d, 0xc, 0x401, 0x6, 0xb}, {0x0, 0x5, 0x9, 0x9, 0x1, 0xfff}, {0x1, 0xb235, 0x5, 0x23, 0x9, 0x7}, {0x0, 0x2, 0x3, 0xfffffff7, 0x8000, 0x3}, {0x2, 0x580, 0x16, 0x9, 0x5, 0x2}, {0xa, 0x800, 0xff, 0x55bc, 0x1}, {0x4, 0x9, 0x9, 0x5, 0x4, 0x6}, {0x7, 0x8, 0x2, 0xf6f, 0x794b, 0xfff}, {0x3, 0x80000001, 0x1, 0x3fd, 0x28, 0x10001}, {0xc83, 0x0, 0x2, 0x9, 0x8, 0x5}, {0x5ba, 0x1ff, 0x2, 0x81, 0x4, 0xd}, {0xc, 0xfffffff9, 0xd9, 0x1, 0x1, 0x7}, {0x2d7800, 0x7, 0x89d, 0x9, 0x1, 0x5}, {0x2, 0xa, 0x8, 0x4, 0x10000, 0x80000000}, {0xc, 0x2, 0xe9, 0xfffffff9, 0x100, 0x6}, {0x4, 0x0, 0x81, 0x7fffffff, 0x7f, 0x5}, {0x1, 0x6, 0xa, 0xf, 0x8, 0x2}, {0x4, 0x0, 0xffffffff, 0x3, 0x4, 0x7ff}, {0xd, 0x0, 0x627f42cc, 0x4, 0x2a3c, 0xfffffc01}, {0x6, 0x80, 0x82, 0x14, 0x5, 0x3}, {0x3, 0xd4b, 0xf18, 0x5, 0x7fffffff, 0x1000}, {0x1, 0x9, 0x2, 0x3, 0x9, 0x9}, {0x9, 0x7ffb, 0x7fffffff, 0x8, 0x3, 0x8}, {0xff, 0x3, 0x649e, 0x9, 0x8, 0x3}, {0x0, 0x7, 0x2, 0x2, 0x5, 0x56}, {0xe000000, 0x319, 0x4, 0x6, 0x7, 0x4}, {0x1, 0x7, 0x4, 0x2, 0x22b, 0xf}, {0x7, 0x8, 0x3, 0x7, 0x7fffffff, 0x1}, {0x1, 0x4, 0x6, 0x100, 0x2}, {0xc, 0x9, 0x8, 0x0, 0x7, 0x8000}, {0x99, 0x3f8000, 0x8, 0x9, 0x7, 0xfffffffb}, {0x4, 0xa, 0x80000000, 0xfff, 0x2, 0x3}, {0x9, 0x4, 0x7f, 0x8, 0xd, 0x15dae9ae}, {0xa0a, 0x2, 0x800000, 0x4, 0x7, 0x3}, {0x7, 0x8, 0x9, 0xe74e, 0x2, 0x6}, {0x8, 0x170c6f2e, 0x80, 0xfffffbff, 0x9, 0x4}, {0x1ff, 0x1, 0x28, 0xc, 0x4, 0x4}, {0x0, 0xfffffff8, 0x8, 0x3, 0x7, 0xf}, {0xbb, 0x6, 0x7d, 0x7, 0x14000000, 0x5}, {0x4, 0xd, 0x8, 0x5, 0x2, 0x5}, {0x6, 0x0, 0x5, 0x0, 0xad, 0x5}, {0x6, 0x8, 0x3, 0x7, 0xfffffffa, 0x91}, {0xfffffffc, 0x40000, 0x400, 0x2, 0x7ff, 0x5}, {0x4, 0x77a, 0x9, 0x81, 0x80000001, 0x7}, {0x3, 0xb2, 0x80000000, 0xffffff06, 0x5}, {0xfffffff9, 0x6, 0x3ff, 0x1, 0xfffffff8, 0x2}, {0x57, 0x9, 0x7, 0x7fffffff, 0x5, 0x200}, {0x8, 0x5, 0x5, 0x3ff, 0x9, 0x4}, {0x0, 0x0, 0x7, 0xfff, 0x7, 0x200}, {0x9, 0x15, 0x0, 0x7fff, 0x22d, 0x1}, {0x37b, 0x8, 0x1, 0x101, 0x401}, {0x81, 0x9, 0x9, 0xc34, 0xffff, 0x9}, {0x7ff, 0x9341, 0x8001, 0xfffffffa, 0xff, 0x4}, {0x4, 0x7, 0x7f, 0x3, 0x1, 0x10001}, {0x29401400, 0x5, 0x0, 0x0, 0x10001, 0x7}, {0x79b2dbc9, 0x6, 0xf8, 0x6, 0xa0, 0x100}, {0x2, 0x400, 0x7, 0x7f, 0x9, 0x5}, {0x40, 0xfffffffa, 0x3, 0x2, 0x3, 0x10000}, {0x81, 0x2, 0x4, 0x2, 0x800, 0x6}, {0xcbb5, 0xfe4, 0xd, 0x7, 0x4, 0xffff}, {0x6, 0x8001, 0x76c7d8f, 0x2, 0x2, 0x5b0}, {0x81, 0x6, 0x6, 0xbe94774, 0x6, 0x4}, {0x8000, 0x400, 0x3, 0x1ee2, 0x1, 0x7}, {0xf, 0x3, 0x2, 0xfd, 0x3, 0x7}, {0x2, 0x5, 0x6, 0x8, 0x5, 0x800}, {0x7, 0x3, 0x7, 0x9, 0x3, 0x2}, {0x1, 0x8, 0x80, 0x10, 0x101, 0xffffffc3}, {0x0, 0x7, 0x9, 0xffffffff, 0x80000001, 0x8}, {0x200, 0xf1, 0xa60, 0x64f, 0x7, 0xf}, {0x5, 0x9, 0x0, 0x7ff, 0x3, 0x1}, {0x0, 0x8, 0x9d, 0x1, 0x8, 0x5}, {0x5, 0xfffffff7, 0x7, 0x0, 0x80000001, 0x5}, {0xfffffff9, 0xfffffff4, 0xfffffff7, 0x101, 0x2, 0xa}, {0x7, 0x400000, 0x800, 0x0, 0x7, 0x6}, {0xd, 0x8, 0xe9f, 0x1ff, 0x1, 0x7}, {0x2, 0x8, 0x5b, 0x7, 0x4, 0x9}, {0x7cb1, 0x8, 0x6a75, 0x8, 0x1, 0x2}, {0x7, 0x7, 0xc4, 0x5, 0x5, 0x8}, {0xae, 0x6, 0x1, 0xffff, 0x10000, 0xffffff28}, {0xd, 0x4, 0x3, 0x7f, 0x3, 0x8}, {0x5, 0x0, 0x7, 0xb46, 0xff, 0xb}, {0x1, 0x10, 0x40, 0x1, 0x8, 0x101}, {0x10000, 0x1, 0xb1, 0x3, 0x0, 0x5}, {0x8, 0x8, 0xf1, 0x4, 0x80000000, 0xffffffff}, {0x6, 0xcebd, 0xfffffeff, 0x0, 0xfffffff9}, {0x57e5, 0xfff, 0x7, 0x1000, 0x7, 0x79}, {0x5, 0x200000, 0x8001, 0x8, 0x8001, 0x6a}, {0xbf, 0xfffffc00, 0xa50, 0x3, 0x800, 0xfffffff9}, {0x1000, 0x1, 0x40, 0x1, 0x1, 0x1000}, {0x7, 0x81, 0xff, 0x1, 0x9, 0x4}, {0x7, 0x1, 0x4, 0x6, 0xffffffff, 0x7}, {0x180000, 0x3ff, 0x9, 0x4, 0x9, 0x6}, {0x6, 0x6, 0x9, 0x6}, {0x5, 0x7, 0x1ff, 0xfffffff7, 0x4, 0xc}, {0x43c, 0x6, 0x4, 0x4, 0xfffffff7, 0x8}, {0xffffffff, 0x8, 0x5, 0x9, 0x2, 0x80000001}, {0xf48, 0x3, 0x8, 0x2f, 0x7, 0x8}, {0x5, 0x101, 0x4, 0x4, 0x8, 0x36}, {0x6, 0xffff6322, 0x79b6437c, 0x3, 0x6, 0x5}, {0xffffffff, 0x0, 0x8, 0x80000001, 0x4b7, 0x4}], [{0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0xeb573db78970bfac}, {0x3, 0x1}, {0x6}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x3, 0xa2330bedc3ceabb8}, {0x1, 0x1}, {0x2}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x54643f2f3992347f}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x6}, {0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x3}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x6}, {0x1, 0x1}, {0x2}, {}, {0x3}, {0x2}, {0x2, 0x1}]}}]}, {0xb0, 0x6, "ad120be921ac49a41feb51a2e0242cbe49548b05241c47086df645c0604730302424926fc1255261a3693f71ff917f6d341ea198857c8e7588447257c7a5413856a99f09e4eaa48b8d82ae4a30060152d3191e129f86704bef5c6c5ff542f281d3435eabdd0d5b4e94609ec60329077bd9d8fe0ca6f8a2e9f98b39b1af6b15a3efc3e5c07354d9b63713196cb4ab8a39758bf20ff98b5e88a7866a2aa8da50a1d74680bbabed52f0f490063e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xfff}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2}, @TCA_TCINDEX_POLICE={0x64, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x100, 0x6, 0x8, {0x8, 0x2, 0x100, 0xa, 0x600, 0x2}, {0x2, 0x0, 0x5, 0xf693, 0xfffb, 0x4d00}, 0x1, 0x1, 0x200}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}]}]}}]}, 0x29d4}, 0x1, 0x0, 0x0, 0x40090}, 0x8001)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000002c00)='posixacl\x00', 0x0, 0x0)

1m54.635440709s ago: executing program 8 (id=7777):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000})
r6 = fcntl$dupfd(r5, 0x406, r1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) (async)
ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x11}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x8000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m54.461931232s ago: executing program 8 (id=7778):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
shutdown(r1, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x50442, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="fb02339088ffc88d71ec533e747361", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)

1m53.965078651s ago: executing program 8 (id=7779):
r0 = socket$unix(0x1, 0x1, 0x0)
recvfrom$unix(r0, &(0x7f0000000080)=""/163, 0xa3, 0x10020, &(0x7f0000000140)=@file={0x520a387cf67ce20e, './file0\x00'}, 0x6e)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x57789000)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0x3ff, 0x0, 0x7, 0x7}, {0xb, 0x8, 0x2, 0x2}, {0x1, 0xc, 0x3, 0x3d}, {0x200, 0x8, 0x80, 0x62}, {0x6, 0x53, 0x1, 0x1}, {0x6268, 0x0, 0x6, 0x1}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)={0x0, <r3=>0x0})
syz_open_procfs(r3, &(0x7f0000000280)='net/arp\x00') (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf25030000004c00018008000600050000001400040000000000000000000000ffffe00000011400040000000000000000000000000000000001080007"], 0x60}}, 0x40) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001143b0b"], 0x18}}, 0x9ee9fd74460f2f8e) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m53.828387027s ago: executing program 8 (id=7780):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001a1"], 0xfdef)
r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002ff7120c40911001cb00102030109022400010004100009047e100226d5180809050602ff0300000009af82020800000000"], 0x0)
syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="20100c0000000a210d438966c5d2551c0600"], 0x0, 0x0, 0x0}, 0x0)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x0, 0x0}, {0x1, 0xb000, 0x0, 0x0}], 0x2})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r5, 0xd83ba000)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x1})
ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000240)={{0x9, 0x2}, 0x100, '.\x02\x00'})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m52.489670759s ago: executing program 8 (id=7784):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0)
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

1m52.364252063s ago: executing program 42 (id=7784):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0)
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

44.391363448s ago: executing program 6 (id=8251):
capset(0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000400)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400f07000000a3fc7e2b8b"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000200)={0x40, 0x14}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x67}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x1, 0x8, 0x10001, 0x5, 0x0, 0xae, 0xfff1, 0xa, 0x3, 0x34b7, 0x9, 0x6}}, &(0x7f0000000500)={0x20, 0x85, 0x4, 0x80000001}, &(0x7f0000000540)={0x20, 0x83, 0x2, 0x1}, 0x0, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)

41.229611659s ago: executing program 6 (id=8271):
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x115c43, 0x0)
openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
set_mempolicy(0x4003, &(0x7f0000000200)=0x8000000007, 0x5fff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r1, 0x93774000)

41.134148541s ago: executing program 6 (id=8272):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000bc0), 0x40002, 0x0)
write$dsp(r0, &(0x7f0000001380)="22101d2d5c03f28d66ac8e15b0f113648f4337145e93b7b4ce012bf523094c4a", 0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x4, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0xffffffffffffffc0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x8, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

41.062864684s ago: executing program 6 (id=8273):
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
lstat(&(0x7f0000004600)='./cgroup\x00', 0x0)
pidfd_send_signal(r2, 0x1, 0x0, 0x4)
r3 = openat2(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', &(0x7f0000000100)={0x20000, 0x80, 0x3}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_open_dev$vim2m(&(0x7f0000000080), 0xba, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$unix(r4, &(0x7f0000000c40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x5c}, 0x6e, 0x0}}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r7, &(0x7f00000093c0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x9fa, 0x40476044, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x400}}, 0x50)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x114, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x63}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x51}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x24000001}, 0x17813bc1ac0ddbce)
r10 = openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r10, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x6, 0x3a, ')%\\&\\}:', 0x3a, 'exfat\x00', 0x3a, './file0/file0'}, 0x3a)
ioctl$TIOCNOTTY(r0, 0x5422)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0)

40.48877009s ago: executing program 6 (id=8282):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="c1776a31c065f43201ed4ea795d0db1dd428669d13b3d1fd333e31939fa7e6b3375ef6940f61ac57f0c3fbbc65917d387d0bd74ceefa3684ddb0523330da805100b7f664b012f3fd8f61f182c95f96bb35957ef80e4c6072d34bb9be7d8f6861d97ca9dda3e2", 0x66, 0x20040000, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c)
r1 = epoll_create1(0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x80002, 0xa)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a})
read$FUSE(r2, &(0x7f0000003640)={0x2020}, 0x2020)
epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008880)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0xf3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x200, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}})
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x94a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000)

40.197603335s ago: executing program 6 (id=8287):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x400000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write(r1, &(0x7f0000000080)="b6d4", 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setreuid(0x0, r4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca0000000109021200017f00c0000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x400000, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) (async)
write(r1, &(0x7f0000000080)="b6d4", 0x2) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async)
fstat(r3, &(0x7f0000000440)) (async)
setreuid(0x0, r4) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca0000000109021200017f00c0000904"], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async)

40.095009496s ago: executing program 43 (id=8287):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x400000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write(r1, &(0x7f0000000080)="b6d4", 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setreuid(0x0, r4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca0000000109021200017f00c0000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x400000, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) (async)
write(r1, &(0x7f0000000080)="b6d4", 0x2) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async)
fstat(r3, &(0x7f0000000440)) (async)
setreuid(0x0, r4) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca0000000109021200017f00c0000904"], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async)

35.470263205s ago: executing program 4 (id=8288):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000790000/0x3000)=nil, 0x3000, 0x100000a, 0x22052, r0, 0x93774000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)

35.279508688s ago: executing program 4 (id=8323):
socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14167e, 0xa0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
close(r0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_clone(0x20004000, &(0x7f00000001c0)="37baa5efd8d227e1a1fb6ce94e859b8eb5799caaa4429a28a081bb82833929841ab7a7aca493bbd63126e71110da18a857dfde508ae49f958995d4e356dc7e0a913486a41fee86e329ab07dfbd2a1af97439d1", 0x53, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000440)="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")
mount(&(0x7f0000000040)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ext3\x00', 0x220831, 0x0)

34.356689235s ago: executing program 4 (id=8330):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
sendfile(r1, r1, 0x0, 0x7ffff000)
mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x800009, 0x22052, r0, 0x2000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x46000, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x111000)
ioctl$CEC_ADAP_G_CONNECTOR_INFO(r2, 0x8044610a, &(0x7f0000000080)={0x0, @raw})
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4)

32.889450145s ago: executing program 4 (id=8340):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x713e40, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f0000000040)=[{0x10, 0xfb, 0x6, 0x8}, {0x5, 0x0, 0x6}, {0x4, 0xff, 0x4, 0x5}, {0x6, 0x5, 0x3, 0x40}, {0x5, 0x3, 0x3, 0x5}, {0x2, 0x10, 0x10, 0x401}]})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]})
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)="a21951ae9d6ca5b7f3440d193a26578ff2e8ce6901a9462421d990871ecae62b60ecd5748869ba9081d20a14e319b68ceb", 0x31}], 0x1, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd4}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x82, [@remote, @multicast2, @empty, @loopback, @remote, @broadcast, @private=0xa010100]}, @ssrr={0x89, 0xb, 0xaa, [@local, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xa0}, 0x1)
getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080))
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x4000)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[], 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10040084}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)

32.50588236s ago: executing program 44 (id=8340):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x713e40, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f0000000040)=[{0x10, 0xfb, 0x6, 0x8}, {0x5, 0x0, 0x6}, {0x4, 0xff, 0x4, 0x5}, {0x6, 0x5, 0x3, 0x40}, {0x5, 0x3, 0x3, 0x5}, {0x2, 0x10, 0x10, 0x401}]})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]})
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)="a21951ae9d6ca5b7f3440d193a26578ff2e8ce6901a9462421d990871ecae62b60ecd5748869ba9081d20a14e319b68ceb", 0x31}], 0x1, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd4}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x82, [@remote, @multicast2, @empty, @loopback, @remote, @broadcast, @private=0xa010100]}, @ssrr={0x89, 0xb, 0xaa, [@local, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xa0}, 0x1)
getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080))
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x4000)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[], 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10040084}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)

24.239427709s ago: executing program 0 (id=8410):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x1, 0x8, [0x4, 0xffffffff]})
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r3 = accept4$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x0)
poll(&(0x7f0000000180)=[{r2, 0x5}, {r0, 0x2}, {r0}, {r0, 0x2}, {r0, 0x1402}, {r3, 0x335fc87757f60ed0}, {r0, 0x8}, {r1, 0x104a}, {r0, 0x6008}], 0x9, 0x90)
epoll_create1(0x80000)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380)={<r5=>0x0, 0x2}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={<r6=>0x0, 0x2}, &(0x7f0000000440)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={<r7=>0x0, @in6={{0xa, 0x4e20, 0xb0, @loopback, 0x8}}, 0x0, 0x9e3}, &(0x7f0000000540)=0x90)
sendmsg$inet_sctp(r4, &(0x7f00000006c0)={&(0x7f0000000200)=@in6={0xa, 0x4e21, 0x4, @remote, 0x3}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="21f6fbb12ac0e406ec3bea84c7ec8a4e01d53ff50e29cdf33af919cf17ef036627cbab51230b49e4275551c1d6d767cdab9a24ea9b8a7d66a167c088500e0eb7e5bdd51dad2e1eca89d7b7807eddd54850da034b685a5f67a92f180b6f7300e0436f0f0f69bef29662ed7f0f81aa73b3bd6a530548bb6f9b694ca6240f65c312a4c3a3053ae5caf66c7c7eda2bb3d9b7bbf3ef567601e160e692b799908c49b9a51d64d7773147dd6861ac8ba18459204a2574cd0f4d7a9ee425e886842a56d0d3c8723f86d4d401dec3865bff", 0xcd}], 0x1, &(0x7f0000000580)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x7, 0x4200, 0x8, 0x4, 0xffffffff, 0x1ff, 0x8001, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x2, 0x77, 0x7b0, r6}}, @sndrcv={0x30, 0x84, 0x1, {0xb2, 0x8, 0x201, 0x7, 0x6, 0x40, 0x25, 0x80000000, r7}}, @init={0x18, 0x84, 0x0, {0x81, 0xb5, 0x6, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xffffffff}}], 0x118, 0x4}, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000700)={0x18000000, 0x1, 0xff, 0x7, 0x9, "9daa995e427471ee7f9ac6b80c632e2e7ae499", 0x6, 0x6})
r8 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00)
ioctl$UFFDIO_POISON(r8, 0xc020aa08, &(0x7f0000000740)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
r9 = dup(r3)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000880)={r5, 0x19e}, &(0x7f00000008c0)=0x8)
write$UHID_INPUT(r9, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001940)=[@in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x10000, @local, 0x10001}, @in={0x2, 0x4e21, @remote}], 0x7c)
shutdown(r3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000019c0)=0x8a18, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000001a00)={0x4, 0x4dc, 0x0, 'queue0\x00', 0xb})
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4)
readv(r9, &(0x7f0000002ec0)=[{&(0x7f0000001b40)=""/159, 0x9f}, {&(0x7f0000001c00)=""/130, 0x82}, {&(0x7f0000001cc0)=""/198, 0xc6}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/55, 0x37}, {&(0x7f0000002e00)=""/133, 0x85}], 0x6)
r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x810, r9, 0x0)
r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r1, 0x10000000)
syz_io_uring_submit(r10, r11, &(0x7f0000002f40)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000031c0)={&(0x7f0000003000)={0x1a4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}]}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x15, 0x3, @private1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x1a4}}, 0x800)

24.105074913s ago: executing program 0 (id=8413):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x2d1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x82, 0xd3, 0x0, 0x10, 0x10c4, 0x818a, 0xbc04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x2, 0x20, 0x1, [{{0x9, 0x4, 0x4f, 0x9, 0x1, 0x3, 0x0, 0x0, 0x4, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x9, 0x74, 0x6}}]}}]}}]}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6})
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x100, [0x0, 0x6], 0x1d}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
write$cgroup_devices(r4, &(0x7f0000000200)={'a', ' *:* ', 'rwm\x00'}, 0xa)
chdir(&(0x7f0000000440)='./bus\x00')
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000180), 0x0, 0x0, 0x2)
flock(r0, 0xf)

21.521708488s ago: executing program 5 (id=8435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b883d36581f"})
write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x6, 0x54, 0x67, 0x0, 0x5, 0x6, 0x0, @multicast2, @private=0xa010100}, {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0xc2, 0x5800, 0x0, 0x10, {[@window={0x3, 0x3, 0x1}, @window={0x3, 0x3}, @sack={0x5, 0x1a, [0x1, 0x1ff, 0x6, 0xfffffff8, 0x1, 0x400]}, @timestamp={0x8, 0xa, 0x1, 0x3}]}}}}}, 0x62)
ioprio_set$pid(0x1, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r2, r2, 0x0, 0x7ffff000)

21.466329296s ago: executing program 5 (id=8436):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f00000001c0)='-{-#}$\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00')
read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0xffffffbf)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0)

21.436227213s ago: executing program 5 (id=8437):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x62c481, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008894)
bind$inet6(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r5, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

21.257560706s ago: executing program 5 (id=8438):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83ba000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x5}, 0x8)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000080)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "f4c7eb5d561af5c86930b04935ba0e4c83a9b1a96b7dee22d9c7255db30aa309", 0x401, 0xb, 0x3, 0x5}, 0x3c)
sendmmsg$inet(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47f0"], 0x0)
syz_usb_ep_read(r3, 0xf, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x84}], 0x10}, 0x41)
mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83ba000) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
sendto$inet6(r1, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) (async)
shutdown(r1, 0x1) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x5}, 0x8) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000080)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "f4c7eb5d561af5c86930b04935ba0e4c83a9b1a96b7dee22d9c7255db30aa309", 0x401, 0xb, 0x3, 0x5}, 0x3c) (async)
sendmmsg$inet(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) (async)
syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47f0"], 0x0) (async)
syz_usb_ep_read(r3, 0xf, 0x0, 0x0) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x84}], 0x10}, 0x41) (async)
mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)

21.257233823s ago: executing program 2 (id=8439):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, 0xffffffffffffffff, 0x4000})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648d000)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000040), 0x4)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e)

21.256333628s ago: executing program 2 (id=8440):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1})
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='sysfs\x00', 0xa08003, 0x0)

21.075133355s ago: executing program 0 (id=8441):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f01b, 0x1})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x1, 0xa}, {0x6, 0x0, 0x0, 0xffff0001}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000280)=[{0x84, 0x8, 0x40, 0x800}, {0x6, 0x0, 0x0, 0xffff0001}]})
setitimer(0x2, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r4, 0xffff)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xe7)
fcntl$addseals(r4, 0x409, 0x7)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4, 0x30, 0x5, 0x2}, &(0x7f0000000040)=0x18)
r7 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000})
r8 = fcntl$dupfd(r7, 0x406, r1)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8})
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000006c0)={0x20, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
r12 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r12, 0x0, 0xcf, 0x0, &(0x7f0000000040))
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0)

20.528619329s ago: executing program 0 (id=8442):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x8, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0)
ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000002c0)={0x4, 0x1, "ff644b", 0x3, 0x2})
r3 = socket(0x2, 0x3, 0x67)
r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040))
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x2, @any, 0x6000, 0x2}, 0xe)
sendto$unix(r3, 0x0, 0x0, 0x4040, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="12000000", @ANYRES32, @ANYBLOB="0a001b", @ANYRES64], 0x2c}], 0x45}, 0x40)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x6, 0x0, 0x40, 0x8, 0x7, 0x7fff, 0x513, {0x0, @in6={{0xa, 0x4e23, 0xc1d, @mcast1, 0x7}}, 0x7, 0x1, 0xbfe8, 0x16, 0x6}}, &(0x7f0000000180)=0xb0)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @rand_addr=0x64010101}, {0x306, @link_local}, 0x2, {0x2, 0x4e24, @broadcast}, 'hsr0\x00'})
futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x400020000000a, 0x6}], 0x1, 0x0, 0x0, 0x2)
futex(0x0, 0xd, 0xfffffff9, 0x0, &(0x7f0000000100), 0xfffffffd)
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0xa)

20.055130861s ago: executing program 2 (id=8445):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRES16=<r4=>r2, @ANYRES8=<r5=>r0, @ANYRESDEC=r3, @ANYRESDEC=r2], 0x158}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000c04a6a6c05295a62cdef3e47bf3438a8efea9478f1a0683cc08f543df409cb8a21cee5dc939b4b63c963a761668c0c7505f50b6d69a34771c1862070011b647d214c9c7968d5cc5ac5c8959845dc61aeddcf87c3455ae906c3c4aad52bcf57c1f1dfc52c6bfc95cb78e5fc7f00c71ab414e0bfe37799609cd22584ff576685e67a80904da4eb955e08e9623909625677dc36ea1e699ffca2d483bf69522af3d69a3102ec37", @ANYRES16=r6, @ANYBLOB="040027bd7000fedbdf25070000000c00990001000000680000000400cc000400cc000400cc00080005000a00000005005300010000000400cc00"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @broadcast}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000080fcdbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="0a00180003030303030300000c0070000400030004000700"], 0x34}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0400463ed03320e639fa05a9fbdbdf257300000008000300d65c8678b05e0b1e8db87df11291f765d21ebcd63eb2de9bd03ac330c02ddda1b3da7d55210bce9f2002bb254bc458ee9e987004fcdced221eada5a47efe889b59f9c3a083c77c38e3d5ca15da34d7501485d576d1e0b38ed35a8ed045f10e2f00c2c2820ef62fcb04af8eecb6d7872131c3da4f496bb5586c5a81c1f9ceec9ae53796d0ad1b7387dd24db0b", @ANYRES32=r9, @ANYBLOB="0c00990000000080630000000500ee001d0000000800ef00020000000800ef0008000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20004055)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
writev(r10, &(0x7f0000000140)=[{}, {&(0x7f00000000c0)="2bc3603996a34b477ff9e61d08297a7ee76c6cb9c5be3d5bfca761624ffc97676fb004b282e0105d51c4c9affb7cbb98e7329e6504a1ac1e0aa917f32ecc3089667968a8eac3", 0x46}], 0x2)
read$FUSE(r10, &(0x7f0000003000)={0x2020}, 0x2020)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r10, 0xc0a85352, &(0x7f0000000600)={{0x4, 0xb}, 'port1\x00', 0x4a, 0x20c02, 0x10, 0x1c8, 0xfffffffe, 0xffffffff, 0x7, 0x0, 0x1, 0x6})
syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000002ff7120c40911001cb00102030109022400010004100009047e100226d5180809050602ff0300000009058202"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
readahead(r8, 0x3, 0xfffffffffffff813)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB='quota,grpquosa_inode_hardlimit=3,noswap', @ANYRESDEC=r2, @ANYRES64=r1, @ANYRES64=r4, @ANYRES16=r4, @ANYRES8=r5])
lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee01)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)

18.725708787s ago: executing program 9 (id=8450):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
syz_open_dev$video(&(0x7f0000000080), 0x1, 0x282000)
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x0, 0x40010, r1, 0x7dfff000)

18.725108076s ago: executing program 2 (id=8451):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@e={0xff, 0x3, 0xfd, 0x0, @generic}) (async, rerun: 64)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x866e1, 0x0)
epoll_create(0x3) (async, rerun: 32)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) (async, rerun: 32)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async)
r3 = eventfd(0x1)
read$eventfd(r3, &(0x7f0000000040), 0x8) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
dup(r4)
r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async)
r8 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async)
recvmmsg(r8, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0xffff}], 0x1, 0x10041, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async, rerun: 64)
sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (rerun: 64)

18.72463235s ago: executing program 9 (id=8452):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x341, 0x2}, 0xe)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1380, 0x1)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x900, &(0x7f0000000080)={0xf, 0x0, 0x120000}, 0x20)
openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x82)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r4, 0x1)
connect$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
close(r4)
syz_emit_vhci(0x0, 0x16)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140))
sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x3, 0x300)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'wlan0\x00'})

18.671561591s ago: executing program 9 (id=8453):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000999000/0x3000)=nil, 0x3000, 0x300000a, 0x8010, r0, 0xbf6b9000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000500190001000000a4111f850c76ff597e6402ff4304f5c2674ed7b874a501821b6bfa015fab23a88c4c18266755cd0156c42a0340023ad62363f3323f3b74f2d48552d4f790eb1befff54ca9da8c2cd3d1ce84d51e4f720fcb7032d5f3f64cae57dbcdad56f16785bdbe24298df26e2949889b2843d663ff04398d14b714b4f7dbd535d3d843e736f43f3f94b556010c615bdf0ce57e9c8a1f81003aa326830f7c757589593c6fcedb15383adfb68577e2510541f9de57f83f0c235ae11163c367adbd30e6cb3b60dfa7785ac7ba6c25a7180b1bd8a"], 0x30}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="55040000", @ANYRES16=r3, @ANYBLOB="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"], 0x440}}, 0x4040)

18.668283417s ago: executing program 2 (id=8454):
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x87, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000140)={0x2, 0x1, 0x4, 0x7fff, 0x453f, 0x81})
dup3(r1, r0, 0x0)
finit_module(r1, 0x0, 0x0)
r3 = fsmount(r0, 0x1, 0xc)
write$P9_RLERROR(r3, &(0x7f00000000c0)={0x1e, 0x7, 0x2, {0x15, '/dev/bus/usb/00#/00#\x00'}}, 0x1e)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x8, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0x80045505, 0x0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)

18.581494627s ago: executing program 9 (id=8455):
ioprio_set$pid(0x2, 0x0, 0x4007)
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000008711e192000000000000109022d00010000300309040000020300010009210700000122050009058103400400000009058203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r1, r1, 0x0, 0x7ffff000)

18.25534544s ago: executing program 5 (id=8456):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0xfe, 0x0, 0x3, 0x2}, @sadb_lifetime={0x4, 0x3, 0xffffffff, 0x6, 0x5, 0x2}]}, 0x78}, 0x1, 0x7}, 0x0)
readv(r1, &(0x7f0000000300)=[{&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000280)=""/97, 0x61}], 0x3)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x8e62b000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000180)=[{r2, 0x1040}, {r1, 0x604}, {r2, 0x482}], 0x3, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x7fff]}, 0x8)
getsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r4 = socket(0x40000000015, 0x805, 0x0)
setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000040)=0xd, 0x4)
r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
pwritev(r5, &(0x7f0000002540)=[{&(0x7f0000000080)="89db8b", 0x3}, {&(0x7f0000000200)="ba3a23f3", 0x4}], 0x2, 0x2, 0x6)
ioctl$SG_BLKSECTGET(r5, 0x1267, &(0x7f0000000480))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
getsockopt(r1, 0x9, 0x271b, 0x0, &(0x7f0000000000))
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xf, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0xfe, 0x0, 0x3, 0x2}, @sadb_lifetime={0x4, 0x3, 0xffffffff, 0x6, 0x5, 0x2}]}, 0x78}, 0x1, 0x7}, 0x0) (async)
readv(r1, &(0x7f0000000300)=[{&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000280)=""/97, 0x61}], 0x3) (async)
socket$inet(0xa, 0x801, 0x84) (async)
listen(r2, 0x8) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x8e62b000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ppoll(&(0x7f0000000180)=[{r2, 0x1040}, {r1, 0x604}, {r2, 0x482}], 0x3, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x7fff]}, 0x8) (async)
getsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)
socket(0x40000000015, 0x805, 0x0) (async)
setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000040)=0xd, 0x4) (async)
creat(&(0x7f0000000300)='./file0\x00', 0x0) (async)
pwritev(r5, &(0x7f0000002540)=[{&(0x7f0000000080)="89db8b", 0x3}, {&(0x7f0000000200)="ba3a23f3", 0x4}], 0x2, 0x2, 0x6) (async)
ioctl$SG_BLKSECTGET(r5, 0x1267, &(0x7f0000000480)) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0) (async)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) (async)
getsockopt(r1, 0x9, 0x271b, 0x0, &(0x7f0000000000)) (async)

18.168181794s ago: executing program 5 (id=8457):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x22020600)
ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)={0x30, r4, 0x301, 0x70bd28, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0xa, 0x52}}}}}, 0x30}}, 0x40)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
personality(0x5400004)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6})
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r5, 0x7dfff000)

17.257633831s ago: executing program 0 (id=8458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00')
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x82})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\"'], 0x922c3)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x10201, 0x0)
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x114a410, 0x0)

17.2547902s ago: executing program 0 (id=8459):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030f71e4c213034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0x2000000000000000, 0x0, 0x0, 0x0, 0x4b, 0x3, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xefe, 0x4})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r2 = getpgrp(0x0)
ptrace(0x4207, r2)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x80000000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4)
sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007)

17.052650197s ago: executing program 2 (id=8460):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001"], 0x34}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={<r3=>0x0, 0x3929f5d4}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r3, 0x40}, &(0x7f00000001c0)=0x8)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x88010, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0xac) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001"], 0x34}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3929f5d4}, &(0x7f00000000c0)=0x8) (async)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r3, 0x40}, &(0x7f00000001c0)=0x8) (async)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x88010, 0x0) (async)

15.593683208s ago: executing program 9 (id=8461):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000)

15.073447606s ago: executing program 9 (id=8462):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x43}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x101}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8001}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x87}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffff8}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x4}]}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048000)
r3 = dup2(r0, r0)
bind$qrtr(r3, &(0x7f00000001c0)={0x2a, 0x2, 0x7ffe}, 0xc)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x998a1efcb8e0b07c, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010)
sendto$unix(r3, &(0x7f0000000380)="63a7bb5c930a0c2c5c92c908eee5836090685854f7fb2fb3df5be97eb1b49e0ec4ce22a5370686031f2978d589726081e3f80dff5f55", 0x36, 0x4000051, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000440))
r6 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000480)={<r7=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000004c0)={r7, 0x2})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r8, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4c6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf02}]}, 0x48}}, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000680)={0x1, 0x0, 0x10000, 0x4, 0x3, 0x4, 0x8, 0x4, 0xfffffffa})
recvmsg$kcm(r3, &(0x7f0000000980)={&(0x7f00000006c0)=@isdn, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/9, 0x9}, {&(0x7f00000007c0)=""/211, 0xd3}], 0x3, &(0x7f0000000900)=""/79, 0x4f}, 0x10000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r9=>r0}, './file0\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r10, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
r11 = openat$incfs(r3, &(0x7f0000000bc0)='.log\x00', 0x80, 0xa)
ioctl$VIDIOC_SUBDEV_G_CROP(r11, 0xc038563b, &(0x7f0000000c00)={0x1, 0x0, {0x3, 0x7, 0xa6, 0xf7d6}})
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000c40)={<r12=>0x0, 0x80000000}, &(0x7f0000000c80)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000cc0)={r12, 0x97, "677dd8130cd5054ecf1d88049ec64b0e72fa75347aa4ea952dc33a43345f2597b5c7044f5fc28aa6078b2b263e9c2aed62d16c84ed406a86ad28fc6cb355e956fedfe2fee19ef3ab8990609b1dd79f44e2d7cc0e4bd559c4e5e924b0809cf2f5cf898c3dd1959ff183f70459e6093d51455101807318d2c8e9e2411a4284cdaa67bc85bd46139f534241b5a10e91cb34d233fcf0dcf2a3"}, &(0x7f0000000d80)=0x9f)
recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/196, 0xc4}, {&(0x7f0000000ec0)=""/101, 0x65}, {&(0x7f0000000f40)=""/23, 0x17}, {&(0x7f0000000f80)=""/184, 0xb8}], 0x4, &(0x7f0000001080)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001180)=""/208, 0xd0}, {&(0x7f0000001280)=""/171, 0xab}, {&(0x7f0000001340)=""/56, 0x38}, {&(0x7f0000001380)=""/37, 0x25}, {&(0x7f00000013c0)=""/202, 0xca}, {&(0x7f00000014c0)=""/58, 0x3a}, {&(0x7f0000001500)=""/132, 0x84}], 0x7, &(0x7f0000001640)=""/36, 0x24}}, {{&(0x7f0000001680), 0x80, &(0x7f0000001900)=[{&(0x7f0000001700)=""/56, 0x38}, {&(0x7f0000001740)=""/136, 0x88}, {&(0x7f0000001800)=""/204, 0xcc}], 0x3, &(0x7f0000001940)=""/185, 0xb9}, 0x3}, {{&(0x7f0000001a00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001a80)=""/154, 0x9a}, {&(0x7f0000001b40)=""/240, 0xf0}, {&(0x7f0000001c40)=""/177, 0xb1}, {&(0x7f0000001d00)=""/120, 0x78}, {&(0x7f0000001d80)=""/61, 0x3d}, {&(0x7f0000001dc0)=""/217, 0xd9}, {&(0x7f0000001ec0)=""/155, 0x9b}, {&(0x7f0000001f80)=""/46, 0x2e}, {&(0x7f0000001fc0)=""/99, 0x63}], 0x9, &(0x7f0000002100)=""/182, 0xb6}, 0x7}], 0x4, 0x40, &(0x7f00000022c0)={0x77359400})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000002300)={'batadv_slave_1\x00', <r13=>0x0})
setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000002340)={@remote, r13}, 0x14)
ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611)

3.055370617s ago: executing program 45 (id=8457):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x22020600)
ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)={0x30, r4, 0x301, 0x70bd28, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0xa, 0x52}}}}}, 0x30}}, 0x40)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
personality(0x5400004)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6})
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r5, 0x7dfff000)

2.039805861s ago: executing program 46 (id=8459):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030f71e4c213034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0x2000000000000000, 0x0, 0x0, 0x0, 0x4b, 0x3, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xefe, 0x4})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r2 = getpgrp(0x0)
ptrace(0x4207, r2)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x80000000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4)
sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007)

2.016175488s ago: executing program 47 (id=8460):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001"], 0x34}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={<r3=>0x0, 0x3929f5d4}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r3, 0x40}, &(0x7f00000001c0)=0x8)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x88010, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0xac) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001"], 0x34}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3929f5d4}, &(0x7f00000000c0)=0x8) (async)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r3, 0x40}, &(0x7f00000001c0)=0x8) (async)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x88010, 0x0) (async)

0s ago: executing program 48 (id=8462):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x43}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x101}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8001}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x87}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xfffffffffffffff8}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x4}]}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048000)
r3 = dup2(r0, r0)
bind$qrtr(r3, &(0x7f00000001c0)={0x2a, 0x2, 0x7ffe}, 0xc)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x998a1efcb8e0b07c, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010)
sendto$unix(r3, &(0x7f0000000380)="63a7bb5c930a0c2c5c92c908eee5836090685854f7fb2fb3df5be97eb1b49e0ec4ce22a5370686031f2978d589726081e3f80dff5f55", 0x36, 0x4000051, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000440))
r6 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000480)={<r7=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000004c0)={r7, 0x2})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r8, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4c6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf02}]}, 0x48}}, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000680)={0x1, 0x0, 0x10000, 0x4, 0x3, 0x4, 0x8, 0x4, 0xfffffffa})
recvmsg$kcm(r3, &(0x7f0000000980)={&(0x7f00000006c0)=@isdn, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/9, 0x9}, {&(0x7f00000007c0)=""/211, 0xd3}], 0x3, &(0x7f0000000900)=""/79, 0x4f}, 0x10000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r9=>r0}, './file0\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r10, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
r11 = openat$incfs(r3, &(0x7f0000000bc0)='.log\x00', 0x80, 0xa)
ioctl$VIDIOC_SUBDEV_G_CROP(r11, 0xc038563b, &(0x7f0000000c00)={0x1, 0x0, {0x3, 0x7, 0xa6, 0xf7d6}})
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000c40)={<r12=>0x0, 0x80000000}, &(0x7f0000000c80)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000cc0)={r12, 0x97, "677dd8130cd5054ecf1d88049ec64b0e72fa75347aa4ea952dc33a43345f2597b5c7044f5fc28aa6078b2b263e9c2aed62d16c84ed406a86ad28fc6cb355e956fedfe2fee19ef3ab8990609b1dd79f44e2d7cc0e4bd559c4e5e924b0809cf2f5cf898c3dd1959ff183f70459e6093d51455101807318d2c8e9e2411a4284cdaa67bc85bd46139f534241b5a10e91cb34d233fcf0dcf2a3"}, &(0x7f0000000d80)=0x9f)
recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000dc0)=""/196, 0xc4}, {&(0x7f0000000ec0)=""/101, 0x65}, {&(0x7f0000000f40)=""/23, 0x17}, {&(0x7f0000000f80)=""/184, 0xb8}], 0x4, &(0x7f0000001080)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001180)=""/208, 0xd0}, {&(0x7f0000001280)=""/171, 0xab}, {&(0x7f0000001340)=""/56, 0x38}, {&(0x7f0000001380)=""/37, 0x25}, {&(0x7f00000013c0)=""/202, 0xca}, {&(0x7f00000014c0)=""/58, 0x3a}, {&(0x7f0000001500)=""/132, 0x84}], 0x7, &(0x7f0000001640)=""/36, 0x24}}, {{&(0x7f0000001680), 0x80, &(0x7f0000001900)=[{&(0x7f0000001700)=""/56, 0x38}, {&(0x7f0000001740)=""/136, 0x88}, {&(0x7f0000001800)=""/204, 0xcc}], 0x3, &(0x7f0000001940)=""/185, 0xb9}, 0x3}, {{&(0x7f0000001a00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001a80)=""/154, 0x9a}, {&(0x7f0000001b40)=""/240, 0xf0}, {&(0x7f0000001c40)=""/177, 0xb1}, {&(0x7f0000001d00)=""/120, 0x78}, {&(0x7f0000001d80)=""/61, 0x3d}, {&(0x7f0000001dc0)=""/217, 0xd9}, {&(0x7f0000001ec0)=""/155, 0x9b}, {&(0x7f0000001f80)=""/46, 0x2e}, {&(0x7f0000001fc0)=""/99, 0x63}], 0x9, &(0x7f0000002100)=""/182, 0xb6}, 0x7}], 0x4, 0x40, &(0x7f00000022c0)={0x77359400})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000002300)={'batadv_slave_1\x00', <r13=>0x0})
setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000002340)={@remote, r13}, 0x14)
ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611)

kernel console output (not intermixed with test programs):

 from eth1
[ 1006.937551][ T7438] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1006.947335][ T7438] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1007.023997][ T7438] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1007.043430][ T7438] 8021q: adding VLAN 0 to HW filter on device team0
[ 1007.055090][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1007.062221][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1007.077820][T20016] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1007.084926][T20016] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1007.269913][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.275664][    C0] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1007.281458][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.287282][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.287398][ T7438] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1007.292943][    C0] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1007.293197][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.312030][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.317871][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.324188][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.330546][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.336664][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.342680][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.348682][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.354704][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE
[ 1007.361624][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.367264][    C0] cdc_wdm 6-1:1.0: Cannot schedule work
[ 1007.373255][    C0] cdc_wdm 6-1:1.0: Stall on int endpoint
[ 1007.378946][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[ 1007.388669][    C0] cdc_wdm 6-1:1.0: Unexpected error -71
[ 1007.393154][T14269] usb 6-1: USB disconnect, device number 60
[ 1007.624579][ T7438] veth0_vlan: entered promiscuous mode
[ 1007.642887][ T7438] veth1_vlan: entered promiscuous mode
[ 1007.665588][ T7438] veth0_macvtap: entered promiscuous mode
[ 1007.676435][ T7438] veth1_macvtap: entered promiscuous mode
[ 1007.695627][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1007.712819][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1007.725767][ T3523] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.736042][ T3523] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.754099][ T3523] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.764434][ T3523] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.821369][ T9855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1007.839668][ T9855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.871412][ T9855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1007.880110][ T9855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1008.468384][T14269] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1008.651012][T14269] usb 6-1: Using ep0 maxpacket: 16
[ 1008.657451][T14269] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[ 1008.673906][T14269] usb 6-1: config 0 has no interface number 0
[ 1008.683206][T14269] usb 6-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16
[ 1008.695639][T14269] usb 6-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64
[ 1008.706841][T14269] usb 6-1: config 0 interface 251 has no altsetting 0
[ 1008.717841][T14269] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1008.735016][T14269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1008.750493][ T5915] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71
[ 1008.765148][T14269] usb 6-1: Product: syz
[ 1008.773357][ T5915] asix 3-1:0.0: probe with driver asix failed with error -71
[ 1008.781600][T14269] usb 6-1: Manufacturer: syz
[ 1008.786292][T14269] usb 6-1: SerialNumber: syz
[ 1008.801245][ T5915] usb 3-1: USB disconnect, device number 20
[ 1008.813663][T24077] Bluetooth: hci4: command tx timeout
[ 1008.820955][T14269] usb 6-1: config 0 descriptor??
[ 1008.826760][ T7994] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1008.841912][ T7994] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1009.057727][ T7994] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1009.067443][ T7994] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1009.283004][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1009.306758][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1009.456690][ T8075] kvm: user requested TSC rate below hardware speed
[ 1009.549753][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1009.570879][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1009.605316][ T7994] /dev/rnullb0: Can't open blockdev
[ 1009.643166][T14269] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1009.671146][T14269] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[ 1009.696822][T14269] asix 6-1:0.251: probe with driver asix failed with error -5
[ 1009.709984][T14269] usb 6-1: USB disconnect, device number 61
[ 1010.116584][ T8127] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7809'.
[ 1010.125722][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7809'.
[ 1010.345553][ T8148] /dev/rnullb0: Can't open blockdev
[ 1010.568288][ T5934] usb 6-1: new low-speed USB device number 62 using dummy_hcd
[ 1010.720609][ T5934] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1010.733684][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.749902][ T5934] usb 6-1: config 0 descriptor??
[ 1010.888254][T24077] Bluetooth: hci4: command tx timeout
[ 1010.940007][ T8185] /dev/rnullb0: Can't open blockdev
[ 1011.039507][ T8196] /dev/rnullb0: Can't open blockdev
[ 1011.193157][ T8206] /dev/rnullb0: Can't open blockdev
[ 1011.343495][ T8224] /dev/rnullb0: Can't open blockdev
[ 1011.413792][ T8234] /dev/rnullb0: Can't open blockdev
[ 1011.524427][ T9854] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1012.779989][ T5934] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71
[ 1012.790391][ T5934] asix 6-1:0.0: probe with driver asix failed with error -71
[ 1012.800165][ T5934] usb 6-1: USB disconnect, device number 62
[ 1012.968269][ T5871] Bluetooth: hci4: command tx timeout
[ 1013.528277][T24077] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1013.528551][ T5871] Bluetooth: hci5: command 0x1003 tx timeout
[ 1014.116610][ T8280] ./cgroup: Can't lookup blockdev
[ 1014.146583][ T8283] input: syz1 as /devices/virtual/input/input114
[ 1014.153397][ T8283] input: failed to attach handler leds to device input114, error: -6
[ 1014.360617][ T5934] hid-generic 0005:0C45:1010.0056: item fetching failed at offset 1/5
[ 1014.371890][ T5934] hid-generic 0005:0C45:1010.0056: probe with driver hid-generic failed with error -22
[ 1014.602949][ T8327] PKCS8: Unsupported PKCS#8 version
[ 1014.720438][ T8336] /dev/rnullb0: Can't open blockdev
[ 1015.833609][   T30] audit: type=1326 audit(2000033179.951:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.5.7853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f755ed8ebe9 code=0x0
[ 1016.096856][ T8370] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[ 1016.105807][ T8370] /dev/rnullb0: Can't open blockdev
[ 1016.845695][ T8387] /dev/rnullb0: Can't open blockdev
[ 1016.938546][    T9] usb 6-1: new full-speed USB device number 63 using dummy_hcd
[ 1016.987149][ T8399] /dev/rnullb0: Can't open blockdev
[ 1017.098813][    T9] usb 6-1: too many configurations: 161, using maximum allowed: 8
[ 1017.111556][    T9] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1017.120637][    T9] usb 6-1: can't read configurations, error -61
[ 1017.258229][    T9] usb 6-1: new full-speed USB device number 64 using dummy_hcd
[ 1017.432583][    T9] usb 6-1: too many configurations: 161, using maximum allowed: 8
[ 1017.444058][    T9] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1017.453270][    T9] usb 6-1: can't read configurations, error -61
[ 1017.463095][    T9] usb usb6-port1: attempt power cycle
[ 1017.536340][ T8406] /dev/rnullb0: Can't open blockdev
[ 1017.542577][ T8407] /dev/rnullb0: Can't open blockdev
[ 1017.808616][    T9] usb 6-1: new full-speed USB device number 65 using dummy_hcd
[ 1017.862573][    T9] usb 6-1: too many configurations: 161, using maximum allowed: 8
[ 1017.873110][    T9] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1017.882250][    T9] usb 6-1: can't read configurations, error -61
[ 1017.964925][ T8434] nbd: must specify an index to disconnect
[ 1018.018915][    T9] usb 6-1: new full-speed USB device number 66 using dummy_hcd
[ 1018.051011][    T9] usb 6-1: too many configurations: 161, using maximum allowed: 8
[ 1018.063754][    T9] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1018.076586][    T9] usb 6-1: can't read configurations, error -61
[ 1018.091845][    T9] usb usb6-port1: unable to enumerate USB device
[ 1018.452597][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7870'.
[ 1018.606711][ T8449] /dev/rnullb0: Can't open blockdev
[ 1018.910353][ T8455] binder: 8454:8455 ioctl 400c620e 0 returned -14
[ 1019.658898][ T8474] /dev/rnullb0: Can't open blockdev
[ 1019.988323][ T6655] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1020.108268][ T5934] usb 6-1: new low-speed USB device number 67 using dummy_hcd
[ 1020.141002][ T6655] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1020.151770][ T6655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[ 1020.162824][ T6655] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1020.181339][ T6655] usb 3-1: language id specifier not provided by device, defaulting to English
[ 1020.193776][ T6655] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[ 1020.202969][ T6655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.210997][ T6655] usb 3-1: Manufacturer: ‰
[ 1020.215495][ T6655] usb 3-1: SerialNumber: syz
[ 1020.221683][ T6655] usb 3-1: config 0 descriptor??
[ 1020.228965][ T6655] em28xx 3-1:0.0: New device ‰  @ 480 Mbps (2013:0251, interface 0, class 0)
[ 1020.238574][ T6655] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1020.258227][ T5934] usb 6-1: Invalid ep0 maxpacket: 32
[ 1020.388239][ T5934] usb 6-1: new low-speed USB device number 68 using dummy_hcd
[ 1020.430588][ T8494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1020.439651][ T8494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1020.508724][ T6655] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1020.515036][ T6655] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 1020.522388][ T6655] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[ 1020.529418][ T6655] em28xx 3-1:0.0: No AC97 audio processor
[ 1020.537473][ T6655] usb 3-1: USB disconnect, device number 21
[ 1020.548227][ T5934] usb 6-1: Invalid ep0 maxpacket: 32
[ 1020.554562][ T6655] em28xx 3-1:0.0: Disconnecting em28xx
[ 1020.560309][ T5934] usb usb6-port1: attempt power cycle
[ 1020.566325][ T6655] em28xx 3-1:0.0: Freeing device
[ 1020.908301][ T5934] usb 6-1: new low-speed USB device number 69 using dummy_hcd
[ 1020.928682][ T5934] usb 6-1: Invalid ep0 maxpacket: 32
[ 1020.975971][ T8509] /dev/rnullb0: Can't open blockdev
[ 1021.058256][ T5934] usb 6-1: new low-speed USB device number 70 using dummy_hcd
[ 1021.090830][ T5934] usb 6-1: Invalid ep0 maxpacket: 32
[ 1021.096376][ T5934] usb usb6-port1: unable to enumerate USB device
[ 1021.815371][ T8544] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7893'.
[ 1021.827337][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7893'.
[ 1021.871054][ T8549] /dev/rnullb0: Can't open blockdev
[ 1022.104176][ T8563] /dev/rnullb0: Can't open blockdev
[ 1022.718268][ T8590] /dev/rnullb0: Can't open blockdev
[ 1022.832317][ T8594] /dev/rnullb0: Can't open blockdev
[ 1022.846696][ T8603] /dev/rnullb0: Can't open blockdev
[ 1022.945717][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7906'.
[ 1022.956287][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7906'.
[ 1022.973663][ T8606] netlink: 'syz.2.7906': attribute type 3 has an invalid length.
[ 1022.995340][ T8606] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7906'.
[ 1023.016283][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7906'.
[ 1023.030064][ T8607] netlink: 'syz.2.7906': attribute type 3 has an invalid length.
[ 1023.038092][ T8607] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7906'.
[ 1023.078740][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7906'.
[ 1023.478451][ T5915] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1023.644686][ T5915] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 1023.678072][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.705010][ T5915] usb 3-1: Product: syz
[ 1023.710582][ T5915] usb 3-1: Manufacturer: syz
[ 1023.729072][ T5915] usb 3-1: SerialNumber: syz
[ 1023.745751][ T5915] usb 3-1: config 0 descriptor??
[ 1024.056783][ T5915] usb 3-1: ignoring: probably an ADSL modem
[ 1024.121367][ T8676] /dev/rnullb0: Can't open blockdev
[ 1024.176283][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1024.191377][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.204316][ T8683] /dev/rnullb0: Can't open blockdev
[ 1024.211229][ T8687] /dev/rnullb0: Can't open blockdev
[ 1024.381366][ T5915] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1024.398492][ T6655] usb 6-1: new full-speed USB device number 71 using dummy_hcd
[ 1024.398651][ T5915] usb 3-1: USB disconnect, device number 22
[ 1025.027208][ T8724] fuse: Bad value for 'rootmode'
[ 1025.759983][ T8855] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1025.788547][ T8855] fuse: Unknown parameter '00000000000000000003'
[ 1025.796565][ T8866] /dev/rnullb0: Can't open blockdev
[ 1025.956222][ T8891] /dev/rnullb0: Can't open blockdev
[ 1026.567919][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7933'.
[ 1026.651056][ T8920] syz.5.7933: attempt to access beyond end of device
[ 1026.651056][ T8920] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1026.658261][ T5915] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1026.666066][ T8920] exFAT-fs (nbd5): unable to read boot sector
[ 1026.679149][ T8920] exFAT-fs (nbd5): failed to read boot sector
[ 1026.685675][ T8920] exFAT-fs (nbd5): failed to recognize exfat type
[ 1026.693962][ T8920] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1026.790516][ T8937] comedi: valid board names for 8255 driver are:
[ 1026.797101][ T8937]  8255
[ 1026.800004][ T8937] comedi: valid board names for vmk80xx driver are:
[ 1026.806621][ T8937]  vmk80xx
[ 1026.810294][ T8937] comedi: valid board names for usbduxsigma driver are:
[ 1026.817405][ T8937]  usbduxsigma
[ 1026.821260][ T8937] comedi: valid board names for usbduxfast driver are:
[ 1026.828204][ T5915] usb 3-1: Using ep0 maxpacket: 32
[ 1026.830495][ T5915] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[ 1026.834117][ T8937]  usbduxfast
[ 1026.845560][ T8937] comedi: valid board names for usbdux driver are:
[ 1026.847683][ T5915] usb 3-1: config 0 has no interface number 0
[ 1026.853623][ T8937]  usbdux
[ 1026.861086][ T5915] usb 3-1: config 0 interface 12 has no altsetting 0
[ 1026.861753][ T8937] comedi: valid board names for ni6501 driver are:
[ 1026.870132][ T5915] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1026.876718][ T8937]  ni6501
[ 1026.886459][ T8937] comedi: valid board names for dt9812 driver are:
[ 1026.893544][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.897255][ T8937]  dt9812
[ 1026.904986][ T8937] comedi: valid board names for ni_labpc_cs driver are:
[ 1026.906478][ T5915] usb 3-1: Product: syz
[ 1026.917065][ T8937]  ni_labpc_cs
[ 1026.923092][ T8937] comedi: valid board names for ni_daq_700 driver are:
[ 1026.924879][ T5915] usb 3-1: Manufacturer: syz
[ 1026.932829][ T8937]  ni_daq_700
[ 1026.935999][ T5915] usb 3-1: SerialNumber: syz
[ 1026.941364][ T8937] comedi: valid board names for labpc_pci driver are:
[ 1026.950085][ T5915] usb 3-1: config 0 descriptor??
[ 1026.960585][ T8937]  labpc_pci
[ 1026.966397][ T8937] comedi: valid board names for adl_pci9118 driver are:
[ 1026.974252][ T8937]  pci9118dg
[ 1026.977888][ T8937]  pci9118hg
[ 1026.981346][ T8937]  pci9118hr
[ 1026.984689][ T8937] comedi: valid board names for 8255_pci driver are:
[ 1026.992751][ T8937]  8255_pci
[ 1026.995991][ T8937] comedi: valid board names for s526 driver are:
[ 1027.002625][ T8937]  s526
[ 1027.002637][ T8937] comedi: valid board names for multiq3 driver are:
[ 1027.002648][ T8937]  multiq3
[ 1027.002656][ T8937] comedi: valid board names for pcmuio driver are:
[ 1027.021795][ T8937]  pcmuio48
[ 1027.021805][ T8937]  pcmuio96
[ 1027.021814][ T8937] comedi: valid board names for pcmmio driver are:
[ 1027.021824][ T8937]  pcmmio
[ 1027.021831][ T8937] comedi: valid board names for pcmda12 driver are:
[ 1027.021841][ T8937]  pcmda12
[ 1027.021848][ T8937] comedi: valid board names for pcmad driver are:
[ 1027.021858][ T8937]  pcmad12
[ 1027.021866][ T8937]  pcmad16
[ 1027.021874][ T8937] comedi: valid board names for ni_labpc driver are:
[ 1027.021884][ T8937]  lab-pc-1200
[ 1027.070467][ T8937]  lab-pc-1200ai
[ 1027.070481][ T8937]  lab-pc+
[ 1027.070491][ T8937] comedi: valid board names for atmio16 driver are:
[ 1027.083837][ T8937]  atmio16
[ 1027.083848][ T8937]  atmio16d
[ 1027.083856][ T8937] comedi: valid board names for ni_at_ao driver are:
[ 1027.083866][ T8937]  at-ao-6
[ 1027.101294][ T8937]  at-ao-10
[ 1027.101307][ T8937] comedi: valid board names for ni_at_a2150 driver are:
[ 1027.101317][ T8937]  ni_at_a2150
[ 1027.101325][ T8937] comedi: valid board names for adq12b driver are:
[ 1027.101335][ T8937]  adq12b
[ 1027.101343][ T8937] comedi: valid board names for mpc624 driver are:
[ 1027.101352][ T8937]  mpc624
[ 1027.101360][ T8937] comedi: valid board names for c6xdigio driver are:
[ 1027.141156][ T8937]  c6xdigio
[ 1027.141168][ T8937] comedi: valid board names for aio_iiro_16 driver are:
[ 1027.141178][ T8937]  aio_iiro_16
[ 1027.141185][ T8937] comedi: valid board names for aio_aio12_8 driver are:
[ 1027.141197][ T8937]  aio_aio12_8
[ 1027.141204][ T8937]  aio_ai12_8
[ 1027.141212][ T8937]  aio_ao12_4
[ 1027.141220][ T8937] comedi: valid board names for fl512 driver are:
[ 1027.141229][ T8937]  fl512
[ 1027.141236][ T8937] comedi: valid board names for dmm32at driver are:
[ 1027.141245][ T8937]  dmm32at
[ 1027.141252][ T8937] comedi: valid board names for dt282x driver are:
[ 1027.141264][ T8937]  dt2821
[ 1027.141290][ T8937]  dt2821-f
[ 1027.141297][ T8937]  dt2821-g
[ 1027.141305][ T8937]  dt2823
[ 1027.141312][ T8937]  dt2824-pgh
[ 1027.141319][ T8937]  dt2824-pgl
[ 1027.141327][ T8937]  dt2825
[ 1027.141334][ T8937]  dt2827
[ 1027.141341][ T8937]  dt2828
[ 1027.141348][ T8937]  dt2829
[ 1027.141355][ T8937]  dt21-ez
[ 1027.141363][ T8937]  dt23-ez
[ 1027.141370][ T8937]  dt24-ez
[ 1027.141377][ T8937]  dt24-ez-pgl
[ 1027.141385][ T8937] comedi: valid board names for dt2817 driver are:
[ 1027.141394][ T8937]  dt2817
[ 1027.141401][ T8937] comedi: valid board names for dt2815 driver are:
[ 1027.141428][ T8937]  dt2815
[ 1027.141435][ T8937] comedi: valid board names for dt2814 driver are:
[ 1027.141445][ T8937]  dt2814
[ 1027.141452][ T8937] comedi: valid board names for dt2811 driver are:
[ 1027.141461][ T8937]  dt2811-pgh
[ 1027.141468][ T8937]  dt2811-pgl
[ 1027.141475][ T8937] comedi: valid board names for dt2801 driver are:
[ 1027.141485][ T8937]  dt2801
[ 1027.141491][ T8937] comedi: valid board names for das6402 driver are:
[ 1027.141501][ T8937]  das6402-12
[ 1027.141508][ T8937]  das6402-16
[ 1027.141515][ T8937] comedi: valid board names for das1800 driver are:
[ 1027.141525][ T8937]  das-1701st
[ 1027.141532][ T8937]  das-1701st-da
[ 1027.141540][ T8937]  das-1702st
[ 1027.141563][ T8937]  das-1702st-da
[ 1027.327948][ T8937]  das-1702hr
[ 1027.327962][ T8937]  das-1702hr-da
[ 1027.327970][ T8937]  das-1701ao
[ 1027.327978][ T8937]  das-1702ao
[ 1027.327986][ T8937]  das-1801st
[ 1027.327993][ T8937]  das-1801st-da
[ 1027.328000][ T8937]  das-1802st
[ 1027.328007][ T8937]  das-1802st-da
[ 1027.328015][ T8937]  das-1802hr
[ 1027.328022][ T8937]  das-1802hr-da
[ 1027.328030][ T8937]  das-1801hc
[ 1027.328037][ T8937]  das-1802hc
[ 1027.328044][ T8937]  das-1801ao
[ 1027.328052][ T8937]  das-1802ao
[ 1027.328060][ T8937] comedi: valid board names for das800 driver are:
[ 1027.328070][ T8937]  das-800
[ 1027.328078][ T8937]  cio-das800
[ 1027.328086][ T8937]  das-801
[ 1027.328093][ T8937]  cio-das801
[ 1027.328100][ T8937]  das-802
[ 1027.328108][ T8937]  cio-das802
[ 1027.328116][ T8937]  cio-das802/16
[ 1027.328363][ T8937] comedi: valid board names for isa-das08 driver are:
[ 1027.328375][ T8937]  isa-das08
[ 1027.328383][ T8937]  das08-pgm
[ 1027.328390][ T8937]  das08-pgh
[ 1027.328397][ T8937]  das08-pgl
[ 1027.328404][ T8937]  das08-aoh
[ 1027.328411][ T8937]  das08-aol
[ 1027.328418][ T8937]  das08-aom
[ 1027.328425][ T8937]  das08/jr-ao
[ 1027.328431][ T8937]  das08jr-16-ao
[ 1027.328439][ T8937]  pc104-das08
[ 1027.328446][ T8937]  das08jr/16
[ 1027.328454][ T8937] comedi: valid board names for das16m1 driver are:
[ 1027.328462][ T8937]  das16m1
[ 1027.328469][ T8937] comedi: valid board names for dac02 driver are:
[ 1027.328477][ T8937]  dac02
[ 1027.328485][ T8937] comedi: valid board names for rti802 driver are:
[ 1027.328495][ T8937]  rti802
[ 1027.328502][ T8937] comedi: valid board names for rti800 driver are:
[ 1027.328511][ T8937]  rti800
[ 1027.328518][ T8937]  rti815
[ 1027.328525][ T8937] comedi: valid board names for pcm3724 driver are:
[ 1027.328533][ T8937]  pcm3724
[ 1027.328541][ T8937] comedi: valid board names for pcl818 driver are:
[ 1027.328550][ T8937]  pcl818l
[ 1027.328556][ T8937]  pcl818h
[ 1027.328562][ T8937]  pcl818hd
[ 1027.328569][ T8937]  pcl818hg
[ 1027.328576][ T8937]  pcl818
[ 1027.328582][ T8937]  pcl718
[ 1027.328589][ T8937]  pcm3718
[ 1027.328597][ T8937] comedi: valid board names for pcl816 driver are:
[ 1027.328605][ T8937]  pcl816
[ 1027.328611][ T8937]  pcl814b
[ 1027.328627][ T8937] comedi: valid board names for pcl812 driver are:
[ 1027.328637][ T8937]  pcl812
[ 1027.328644][ T8937]  pcl812pg
[ 1027.328650][ T8937]  acl8112pg
[ 1027.328658][ T8937]  acl8112dg
[ 1027.328665][ T8937]  acl8112hg
[ 1027.328672][ T8937]  a821pgl
[ 1027.328679][ T8937]  a821pglnda
[ 1027.328687][ T8937]  a821pgh
[ 1027.328694][ T8937]  a822pgl
[ 1027.328700][ T8937]  a822pgh
[ 1027.328708][ T8937]  a823pgl
[ 1027.328715][ T8937]  a823pgh
[ 1027.328721][ T8937]  pcl813
[ 1027.328728][ T8937]  pcl813b
[ 1027.328734][ T8937]  acl8113
[ 1027.328741][ T8937]  iso813
[ 1027.328747][ T8937]  acl8216
[ 1027.328754][ T8937]  a826pg
[ 1027.328760][ T8937] comedi: valid board names for pcl730 driver are:
[ 1027.328770][ T8937]  pcl730
[ 1027.328777][ T8937]  iso730
[ 1027.328784][ T8937]  acl7130
[ 1027.328790][ T8937]  pcm3730
[ 1027.328797][ T8937]  pcl725
[ 1027.328803][ T8937]  p8r8dio
[ 1027.328810][ T8937]  acl7225b
[ 1027.328816][ T8937]  p16r16dio
[ 1027.328822][ T8937]  pcl733
[ 1027.328829][ T8937]  pcl734
[ 1027.328835][ T8937]  opmm-1616-xt
[ 1027.328842][ T8937]  pearl-mm-p
[ 1027.328849][ T8937]  ir104-pbf
[ 1027.328857][ T8937] comedi: valid board names for pcl726 driver are:
[ 1027.328866][ T8937]  pcl726
[ 1027.328873][ T8937]  pcl727
[ 1027.328880][ T8937]  pcl728
[ 1027.328886][ T8937]  acl6126
[ 1027.328893][ T8937]  acl6128
[ 1027.328899][ T8937] comedi: valid board names for pcl724 driver are:
[ 1027.328909][ T8937]  pcl724
[ 1027.328916][ T8937]  pcl722
[ 1027.328923][ T8937]  pcl731
[ 1027.328931][ T8937]  acl7122
[ 1027.328938][ T8937]  acl7124
[ 1027.328945][ T8937]  pet48dio
[ 1027.328951][ T8937]  pcmio48
[ 1027.328958][ T8937]  onyx-mm-dio
[ 1027.328966][ T8937] comedi: valid board names for pcl711 driver are:
[ 1027.328975][ T8937]  pcl711
[ 1027.328983][ T8937]  pcl711b
[ 1027.328989][ T8937]  acl8112hg
[ 1027.328997][ T8937]  acl8112dg
[ 1027.329003][ T8937] comedi: valid board names for amplc_pc263 driver are:
[ 1027.329013][ T8937]  pc263
[ 1027.329019][ T8937] comedi: valid board names for amplc_pc236 driver are:
[ 1027.329028][ T8937]  pc36at
[ 1027.329035][ T8937] comedi: valid board names for amplc_dio200 driver are:
[ 1027.329046][ T8937]  pc212e
[ 1027.329053][ T8937]  pc214e
[ 1027.329060][ T8937]  pc215e
[ 1027.329066][ T8937]  pc218e
[ 1027.329073][ T8937]  pc272e
[ 1027.329080][ T8937] comedi: valid board names for comedi_parport driver are:
[ 1027.329090][ T8937]  comedi_parport
[ 1027.329097][ T8937] comedi: valid board names for comedi_test driver are:
[ 1027.329106][ T8937]  comedi_test
[ 1027.329113][ T8937] comedi: valid board names for comedi_bond driver are:
[ 1027.329122][ T8937]  comedi_bond
[ 1028.166083][ T8974] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1028.173263][ T8974] /dev/rnullb0: Can't open blockdev
[ 1028.318253][ T9667] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1028.353025][ T5915] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[ 1028.366227][ T5915] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[ 1028.375941][ T5915] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1028.384314][ T5915] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[ 1028.404048][ T5915] usb 3-1: USB disconnect, device number 23
[ 1028.509504][ T9667] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[ 1028.518845][ T9667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.539917][ T9667] usb 6-1: config 0 descriptor??
[ 1028.956829][ T9667] ath6kl: Failed to read usb control message: -71
[ 1028.973108][ T9667] ath6kl: Unable to read the bmi data from the device: -71
[ 1028.984244][ T9667] ath6kl: Unable to recv target info: -71
[ 1028.992724][ T9667] ath6kl: Failed to init ath6kl core: -71
[ 1028.999121][ T9667] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1029.016501][ T9667] usb 6-1: USB disconnect, device number 72
[ 1029.446442][ T9027] /dev/rnullb0: Can't open blockdev
[ 1029.453633][ T9028] /dev/rnullb0: Can't open blockdev
[ 1029.504324][ T9033] netlink: 'syz.6.7953': attribute type 15 has an invalid length.
[ 1029.517098][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7953'.
[ 1029.527163][ T9033] ALSA: seq fatal error: cannot create timer (-22)
[ 1029.835709][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7959'.
[ 1030.277845][ T9078] /dev/rnullb0: Can't open blockdev
[ 1030.311431][ T9080] /dev/rnullb0: Can't open blockdev
[ 1030.521315][ T9093] sctp: [Deprecated]: syz.6.7967 (pid 9093) Use of int in max_burst socket option deprecated.
[ 1030.521315][ T9093] Use struct sctp_assoc_value instead
[ 1030.608353][T14269] usb 3-1: new low-speed USB device number 24 using dummy_hcd
[ 1030.759033][T14269] usb 3-1: device descriptor read/64, error -71
[ 1030.874759][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.883092][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.889388][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.895419][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.904423][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.910430][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.918720][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.934522][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.941033][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.946724][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.962615][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.973552][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.980336][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.986974][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.993154][ T9108] /dev/rnullb0: Can't open blockdev
[ 1030.999017][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.004686][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.010811][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.016486][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.021863][T14269] usb 3-1: new low-speed USB device number 25 using dummy_hcd
[ 1031.030316][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.035944][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.042578][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.048594][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.054293][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.060232][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.065995][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.071841][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.077459][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.085170][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.091683][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.097471][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.103895][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.110311][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.115960][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.121790][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.127428][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.133761][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.142632][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.148735][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.154411][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.163093][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.168928][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.174526][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.179830][T14269] usb 3-1: device descriptor read/64, error -71
[ 1031.187183][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.193726][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.200064][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.205643][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.211950][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.217480][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.223193][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.228809][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.234391][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.240043][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.246226][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.252987][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.258919][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.264507][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.270365][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.275920][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.282040][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.287542][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.293554][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.298673][T14269] usb usb3-port1: attempt power cycle
[ 1031.299484][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.309824][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.315279][ T9108] /dev/rnullb0: Can't open blockdev
[ 1031.490752][ T9127] 9pnet_fd: Insufficient options for proto=fd
[ 1031.638275][T14269] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[ 1031.660295][T14269] usb 3-1: device descriptor read/8, error -71
[ 1031.899580][T14269] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[ 1031.919369][T14269] usb 3-1: device descriptor read/8, error -71
[ 1032.028404][T14269] usb usb3-port1: unable to enumerate USB device
[ 1032.579638][  T984] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1032.738343][  T984] usb 6-1: Using ep0 maxpacket: 8
[ 1032.745091][  T984] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1032.753389][  T984] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1032.763239][  T984] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1032.773155][  T984] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1032.783130][  T984] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1032.796241][  T984] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1032.805355][  T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1033.016976][  T984] usb 6-1: usb_control_msg returned -32
[ 1033.023235][  T984] usbtmc 6-1:16.0: can't read capabilities
[ 1033.044227][  T984] usb 6-1: USB disconnect, device number 73
[ 1033.131022][ T9163] /dev/rnullb0: Can't open blockdev
[ 1033.200930][ T9167] /dev/rnullb0: Can't open blockdev
[ 1033.498413][ T9667] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1033.660433][ T9667] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1033.673506][ T9667] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1033.684204][ T9667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1033.697734][ T9667] usb 6-1: config 0 descriptor??
[ 1033.906936][ T9667] usbhid 6-1:0.0: can't add hid device: -71
[ 1033.933228][ T9667] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1033.953633][ T9667] usb 6-1: USB disconnect, device number 74
[ 1034.233342][ T9244] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1034.240376][ T9244] /dev/rnullb0: Can't open blockdev
[ 1034.338267][ T9667] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1034.491806][ T9667] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 1034.500036][ T9667] usb 6-1: config 0 has no interface number 0
[ 1034.506302][ T9667] usb 6-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1034.517931][ T9667] usb 6-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1034.528025][ T9667] usb 6-1: config 0 interface 85 has no altsetting 0
[ 1034.534789][ T9667] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[ 1034.543987][ T9667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.553493][ T9667] usb 6-1: config 0 descriptor??
[ 1034.953150][ T9252] /dev/rnullb0: Can't open blockdev
[ 1034.971230][ T9667] hid-led 0003:1D34:0004.0057: collection stack underflow
[ 1034.981802][ T9667] hid-led 0003:1D34:0004.0057: item 0 1 0 12 parsing failed
[ 1034.998627][ T9667] hid-led 0003:1D34:0004.0057: probe with driver hid-led failed with error -22
[ 1035.171604][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1035.182504][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1035.221517][ T6655] usb 6-1: USB disconnect, device number 75
[ 1035.288534][  T984] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1035.462132][  T984] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[ 1035.472445][  T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1035.483066][  T984] usb 3-1: config 0 descriptor??
[ 1035.691895][ T9255] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1035.717225][ T9255] /dev/rnullb0: Can't open blockdev
[ 1035.752451][  T984] kaweth 3-1:0.0: Firmware present in device.
[ 1035.767437][  T984] kaweth 3-1:0.0: Error reading configuration (-71), no net device created
[ 1035.781493][  T984] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[ 1035.796625][  T984] usb 3-1: USB disconnect, device number 28
[ 1035.850916][ T9304] tipc: Started in network mode
[ 1035.855801][ T9304] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[ 1035.863627][ T9304] tipc: Enabled bearer <eth:geneve1>, priority 10
[ 1035.871356][ T9304] /dev/rnullb0: Can't open blockdev
[ 1036.138697][ T9667] usb 6-1: new full-speed USB device number 76 using dummy_hcd
[ 1036.298220][ T9667] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.312181][ T9667] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 255, setting to 64
[ 1036.323642][ T9667] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1036.341864][ T9667] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1036.353518][ T9667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.363104][ T9667] usb 6-1: Product: syz
[ 1036.367282][ T9667] usb 6-1: Manufacturer: syz
[ 1036.373329][ T9667] usb 6-1: SerialNumber: syz
[ 1036.376896][ T9311] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1036.388016][ T9667] usb 6-1: config 0 descriptor??
[ 1036.396700][ T9306] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1036.407687][ T9667] usb 6-1: ucan: probing device on interface #0
[ 1036.416671][ T9667] usb 6-1: ucan: invalid EP count (1)
[ 1036.423624][ T9667] usb 6-1: ucan: probe failed; try to update the device firmware
[ 1036.427147][ T9311] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8007'.
[ 1036.663378][ T9316] /dev/rnullb0: Can't open blockdev
[ 1036.924633][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8008'.
[ 1036.978520][ T9667] tipc: Node number set to 15444650
[ 1037.228224][ T9667] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[ 1037.380698][ T9667] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1037.389186][ T9667] usb 3-1: not running at top speed; connect to a high speed hub
[ 1037.397734][ T9667] usb 3-1: config 4 has an invalid interface number: 32 but max is 0
[ 1037.405901][ T9667] usb 3-1: config 4 has no interface number 0
[ 1037.413627][ T9667] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[ 1037.422706][ T9667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.430751][ T9667] usb 3-1: Product: syz
[ 1037.435510][ T9667] usb 3-1: Manufacturer: syz
[ 1037.440144][ T9667] usb 3-1: SerialNumber: syz
[ 1037.660631][ T9667] usb 3-1: Found UVC 0.02 device syz (17dc:0202)
[ 1037.667095][ T9667] usb 3-1: No valid video chain found.
[ 1037.674160][ T9667] usb 3-1: USB disconnect, device number 29
[ 1038.261218][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8011'.
[ 1038.377013][ T9352] /dev/rnullb0: Can't open blockdev
[ 1038.658232][ T5915] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[ 1038.797542][ T9363] /dev/rnullb0: Can't open blockdev
[ 1038.812801][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1038.825231][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[ 1038.836633][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1038.847836][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1038.857740][ T5915] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[ 1038.867070][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.884691][ T5915] usb 3-1: config 0 descriptor??
[ 1038.895123][ T9354] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1038.925549][  T984] usb 6-1: USB disconnect, device number 76
[ 1038.962742][ T9380] /dev/rnullb0: Can't open blockdev
[ 1039.088291][ T9383] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1039.108309][ T9383] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1039.131291][ T9384] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1039.345879][ T5915] nzxt-smart2 0003:1E71:2019.0058: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.2-1/input0
[ 1039.563688][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.573167][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.582714][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.592997][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.604587][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.613998][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.623890][ T9354] /dev/rnullb0: Can't open blockdev
[ 1039.631490][  T984] usb 3-1: USB disconnect, device number 30
[ 1039.976075][ T9419] netlink: 5404 bytes leftover after parsing attributes in process `syz.0.8020'.
[ 1039.986534][ T9419] netlink: 5404 bytes leftover after parsing attributes in process `syz.0.8020'.
[ 1040.055200][ T9421] /dev/rnullb0: Can't open blockdev
[ 1040.165660][ T9428] /dev/rnullb0: Can't open blockdev
[ 1040.175931][ T9431] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1040.185520][ T9434] /dev/rnullb0: Can't open blockdev
[ 1040.187573][ T9431] /dev/rnullb0: Can't open blockdev
[ 1040.231327][ T9437] /dev/rnullb0: Can't open blockdev
[ 1040.609841][ T9460] /dev/rnullb0: Can't open blockdev
[ 1040.615997][ T9460] /dev/rnullb0: Can't open blockdev
[ 1040.700847][ T9463] /dev/rnullb0: Can't open blockdev
[ 1040.707535][ T9463] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[ 1041.199675][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1041.207945][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1041.217080][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1041.219434][ T3523] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.240494][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1041.247951][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1041.300966][ T3523] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.380276][ T3523] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.454466][ T3523] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.473541][ T9472] chnl_net:caif_netlink_parms(): no params data found
[ 1041.565566][ T9472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1041.573061][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1041.581361][ T9472] bridge_slave_0: entered allmulticast mode
[ 1041.587910][ T9472] bridge_slave_0: entered promiscuous mode
[ 1041.595626][ T9472] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1041.605719][ T9472] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1041.613034][ T9472] bridge_slave_1: entered allmulticast mode
[ 1041.623283][ T9472] bridge_slave_1: entered promiscuous mode
[ 1041.673529][ T9472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1041.709265][ T9472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1041.727895][ T3523] bridge_slave_1: left allmulticast mode
[ 1041.737272][ T3523] bridge_slave_1: left promiscuous mode
[ 1041.746273][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1041.756670][ T3523] bridge_slave_0: left allmulticast mode
[ 1041.764776][ T3523] bridge_slave_0: left promiscuous mode
[ 1041.772019][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1041.790944][ T3523] tipc: Resetting bearer <eth:geneve1>
[ 1041.823065][ T9686] ntfs3(nbd2): try to read out of volume at offset 0x0
[ 1041.897416][ T3523] tipc: Disabling bearer <eth:geneve1>
[ 1041.955926][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1041.974343][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1042.006538][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8041'.
[ 1042.010492][ T3523] bond0 (unregistering): Released all slaves
[ 1042.052348][ T9472] team0: Port device team_slave_0 added
[ 1042.072066][ T9472] team0: Port device team_slave_1 added
[ 1042.097276][ T3523] tipc: Left network mode
[ 1042.103977][ T6655] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1042.147852][ T9472] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1042.159113][ T9472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1042.190629][ T9472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1042.203455][ T9759] syz.6.8042: attempt to access beyond end of device
[ 1042.203455][ T9759] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1042.204113][ T9472] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1042.226448][ T9472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1042.254396][ T9472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1042.291757][ T6655] usb 3-1: Using ep0 maxpacket: 32
[ 1042.318180][ T6655] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[ 1042.330107][ T6655] usb 3-1: config 0 has no interface number 0
[ 1042.336227][ T6655] usb 3-1: config 0 interface 12 has no altsetting 0
[ 1042.355457][ T6655] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[ 1042.373181][ T6655] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[ 1042.392717][ T6655] usb 3-1: Product: syz
[ 1042.402808][ T6655] usb 3-1: Manufacturer: syz
[ 1042.417187][ T6655] usb 3-1: SerialNumber: syz
[ 1042.432691][ T6655] usb 3-1: config 0 descriptor??
[ 1042.456452][ T9472] hsr_slave_0: entered promiscuous mode
[ 1042.468892][ T9472] hsr_slave_1: entered promiscuous mode
[ 1042.485889][ T9472] debugfs: 'hsr0' already exists in 'hsr'
[ 1042.498591][ T9472] Cannot create hsr debugfs directory
[ 1042.672632][ T6655] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71
[ 1042.685260][ T9825] delete_channel: no stack
[ 1042.697781][ T9844] binder: 9840:9844 ioctl 4018620d 0 returned -22
[ 1042.705449][ T6655] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[ 1042.718038][ T9841] binder: 9840:9841 ioctl 4018620d 0 returned -22
[ 1042.734970][ T6655] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1042.752253][ T6655] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[ 1042.767503][ T6655] usb 3-1: USB disconnect, device number 31
[ 1042.776026][ T3523] hsr_slave_0: left promiscuous mode
[ 1042.807311][ T3523] hsr_slave_1: left promiscuous mode
[ 1042.813383][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1042.813585][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1042.839741][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1042.849480][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1042.860965][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1042.869759][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1042.882456][ T3523] veth1_macvtap: left promiscuous mode
[ 1042.888050][ T3523] veth0_macvtap: left promiscuous mode
[ 1042.893897][ T3523] veth1_vlan: left promiscuous mode
[ 1042.900319][ T3523] veth0_vlan: left promiscuous mode
[ 1043.017219][ T3523] team0 (unregistering): Port device team_slave_1 removed
[ 1043.034377][ T3523] team0 (unregistering): Port device team_slave_0 removed
[ 1043.158287][ T6655] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1043.298271][T24077] Bluetooth: hci3: command tx timeout
[ 1043.321982][ T6655] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.332778][ T6655] usb 3-1: config 0 has no interfaces?
[ 1043.339752][ T6655] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1043.349052][ T6655] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1043.363701][ T6655] usb 3-1: Manufacturer: syz
[ 1043.385136][ T6655] usb 3-1: config 0 descriptor??
[ 1043.525167][ T9947] netlink: 5820 bytes leftover after parsing attributes in process `syz.0.8050'.
[ 1043.536854][ T9947] /dev/nullb0: Can't open blockdev
[ 1043.598211][T21770] usb 3-1: USB disconnect, device number 32
[ 1043.639035][ T9472] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1043.652700][ T9472] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1043.671244][ T9472] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1043.682068][ T9472] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1043.814520][ T9472] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1043.847235][ T9472] 8021q: adding VLAN 0 to HW filter on device team0
[ 1043.883895][T20017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1043.891051][T20017] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1043.922007][T20017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1043.929125][T20017] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1044.152279][ T9472] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1044.404533][ T9472] veth0_vlan: entered promiscuous mode
[ 1044.414125][ T9472] veth1_vlan: entered promiscuous mode
[ 1044.433811][ T9472] veth0_macvtap: entered promiscuous mode
[ 1044.442449][ T9472] veth1_macvtap: entered promiscuous mode
[ 1044.457325][ T9472] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1044.471960][ T9472] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1044.483478][T20013] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1044.492796][T20013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1044.503121][T20013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1044.512164][T20013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1044.551915][ T9852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1044.563964][ T9852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1044.585283][T20013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1044.594287][T20013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1044.866462][T10033] netlink: 'syz.5.8054': attribute type 10 has an invalid length.
[ 1044.894409][T10033] team0: Port device geneve1 added
[ 1045.368470][T24077] Bluetooth: hci3: command tx timeout
[ 1045.974442][T10071] /dev/rnullb0: Can't open blockdev
[ 1046.228236][T14269] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1046.378216][T14269] usb 6-1: Using ep0 maxpacket: 32
[ 1046.384946][T14269] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1046.398330][T14269] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1046.406521][T14269] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[ 1046.415657][T14269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.423734][T14269] usb 6-1: Product: syz
[ 1046.427902][T14269] usb 6-1: Manufacturer: syz
[ 1046.432699][T14269] usb 6-1: SerialNumber: syz
[ 1046.513807][T10102] /dev/rnullb0: Can't open blockdev
[ 1046.643369][T10116] netlink: 328 bytes leftover after parsing attributes in process `syz.6.8072'.
[ 1046.775883][T14269] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input115
[ 1046.790061][T10129] sctp: [Deprecated]: syz.6.8074 (pid 10129) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1046.790061][T10129] Use struct sctp_sack_info instead
[ 1046.807235][T10129] sctp: [Deprecated]: syz.6.8074 (pid 10129) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1046.807235][T10129] Use struct sctp_sack_info instead
[ 1046.811364][ T5222] bcm5974 6-1:1.0: could not read from device
[ 1046.830045][T14269] usb 6-1: USB disconnect, device number 77
[ 1047.188961][T10151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8075'.
[ 1047.438019][T10158] /dev/rnullb0: Can't open blockdev
[ 1047.449256][T24077] Bluetooth: hci3: command tx timeout
[ 1047.666785][T10172] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1047.754451][T10179] /dev/rnullb0: Can't open blockdev
[ 1047.805218][T10185] /dev/rnullb0: Can't open blockdev
[ 1048.046048][T10202] /dev/rnullb0: Can't open blockdev
[ 1048.131416][T10199] /dev/rnullb0: Can't open blockdev
[ 1048.285429][T10218] /dev/rnullb0: Can't open blockdev
[ 1048.301318][T10221] fuse: Unknown parameter 'up_id'
[ 1048.306996][T10221] 9pnet_fd: Insufficient options for proto=fd
[ 1048.485467][T10235] /dev/rnullb0: Can't open blockdev
[ 1048.778409][T21770] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1048.931957][T21770] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1048.940523][T21770] usb 6-1: config 6 has an invalid interface number: 158 but max is 0
[ 1048.948917][T21770] usb 6-1: config 6 has no interface number 0
[ 1048.955019][T21770] usb 6-1: config 6 interface 158 has no altsetting 0
[ 1048.963787][T21770] usb 6-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[ 1048.972985][T21770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.981129][T21770] usb 6-1: Product: syz
[ 1048.985326][T21770] usb 6-1: Manufacturer: syz
[ 1048.989950][T21770] usb 6-1: SerialNumber: syz
[ 1049.538301][T24077] Bluetooth: hci3: command tx timeout
[ 1049.603961][T10249] /dev/rnullb0: Can't open blockdev
[ 1049.642647][T10251] /dev/rnullb0: Can't open blockdev
[ 1049.700365][T10256] 9pnet_fd: Insufficient options for proto=fd
[ 1049.954299][T10239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1049.963398][T10239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1050.480277][T21770] rtsx_usb 6-1:6.158: probe with driver rtsx_usb failed with error -110
[ 1051.403771][T10279] /dev/rnullb0: Can't open blockdev
[ 1051.409188][T10280] /dev/rnullb0: Can't open blockdev
[ 1051.948501][T21770] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[ 1052.100026][T21770] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1052.111940][ T6655] usb 6-1: USB disconnect, device number 78
[ 1052.117856][T21770] usb 3-1: config 0 has no interfaces?
[ 1052.148179][T21770] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1052.157261][T21770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.169045][T21770] usb 3-1: config 0 descriptor??
[ 1052.418965][T14269] usb 3-1: USB disconnect, device number 33
[ 1052.953768][T10349] /dev/rnullb0: Can't open blockdev
[ 1053.228316][ T9667] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1053.261137][T10358] CIFS mount error: No usable UNC path provided in device string!
[ 1053.261137][T10358] 
[ 1053.271306][T10358] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1053.378397][ T9667] usb 3-1: Using ep0 maxpacket: 32
[ 1053.384880][ T9667] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1053.394044][ T9667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.403252][ T9667] usb 3-1: config 0 descriptor??
[ 1053.611371][ T9667] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1053.621475][ T9667] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1053.632726][ T9667] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1053.640069][ T9667] usb 3-1: media controller created
[ 1053.653564][ T9667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1053.921637][T10372] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1053.929767][T10372] /dev/rnullb0: Can't open blockdev
[ 1053.991075][T10376] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1054.001771][T10377] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1054.213366][T10351] /dev/rnullb0: Can't open blockdev
[ 1054.229095][ T9667] az6027: usb out operation failed. (-71)
[ 1054.234855][ T9667] stb0899_attach: Driver disabled by Kconfig
[ 1054.241403][ T9667] az6027: no front-end attached
[ 1054.241403][ T9667] 
[ 1054.250750][ T9667] az6027: usb out operation failed. (-71)
[ 1054.256543][ T9667] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1054.264934][ T9667] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input116
[ 1054.278399][ T9667] dvb-usb: schedule remote query interval to 400 msecs.
[ 1054.281150][T21770] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1054.285356][ T9667] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1054.303518][ T9667] usb 3-1: USB disconnect, device number 34
[ 1054.330205][ T1305] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1054.341118][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.382953][ T9667] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1054.448367][T21770] usb 6-1: Using ep0 maxpacket: 16
[ 1054.454840][T21770] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[ 1054.463344][T21770] usb 6-1: config 0 has no interface number 0
[ 1054.471807][T21770] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1054.481194][T21770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.489820][T21770] usb 6-1: Product: syz
[ 1054.494124][T21770] usb 6-1: Manufacturer: syz
[ 1054.498998][T21770] usb 6-1: SerialNumber: syz
[ 1054.504953][T21770] usb 6-1: config 0 descriptor??
[ 1054.761567][T10423] block nbd2: shutting down sockets
[ 1054.881915][T21770] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[ 1054.888831][T21770] usb 6-1: No valid video chain found.
[ 1054.897708][T21770] usb 6-1: USB disconnect, device number 79
[ 1055.439470][T10438] input: syz1 as /devices/virtual/input/input117
[ 1055.688358][ T9667] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1055.772337][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.782412][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.788099][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.799431][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.805409][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.813685][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.820343][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.826140][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.834557][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.839749][ T9667] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1055.841901][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.853695][ T9667] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1055.856551][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.865099][ T9667] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1055.885853][ T9667] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1055.897505][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.904253][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.912662][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.916549][ T9667] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[ 1055.918728][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.932996][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.938868][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.938867][ T9667] usb 6-1: Product: syz
[ 1055.938889][ T9667] usb 6-1: Manufacturer: syz
[ 1055.944604][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.959572][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.960183][ T9667] usb 6-1: SerialNumber: syz
[ 1055.965217][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.976022][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.984593][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.992579][T10451] /dev/rnullb0: Can't open blockdev
[ 1055.994043][ T9667] cdc_mbim 6-1:1.0: MBIM functional descriptor missing
[ 1055.999254][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.017367][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.022634][ T9667] cdc_mbim 6-1:1.0: bind() failure
[ 1056.034343][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.041088][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.046627][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.052550][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.058283][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.063838][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.069781][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.075714][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.082955][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.088776][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.094508][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.101913][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.107478][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.113126][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.119139][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.124714][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.132768][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.139940][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.145583][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.153501][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.159851][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.165513][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.171754][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.177832][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.184386][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.190455][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.196824][T10465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1056.205636][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.212129][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.217780][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.224647][T10465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1056.233121][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.239247][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.254063][T10469] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1056.255077][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.270434][T21770] usb 6-1: USB disconnect, device number 80
[ 1056.275055][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.295728][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.303627][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.309394][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.316870][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.333318][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.342963][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.361924][T10451] /dev/rnullb0: Can't open blockdev
[ 1056.673431][T10507] netlink: 348 bytes leftover after parsing attributes in process `syz.2.8140'.
[ 1056.720960][T10511] /dev/rnullb0: Can't open blockdev
[ 1056.779931][T10515] netlink: 666 bytes leftover after parsing attributes in process `syz.5.8143'.
[ 1056.783316][T10513] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[ 1056.826603][T24077] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 1056.827271][T10521] /dev/rnullb0: Can't open blockdev
[ 1056.907706][T10526] syzkaller1: entered promiscuous mode
[ 1056.914816][T10526] syzkaller1: entered allmulticast mode
[ 1056.977729][T10530] /dev/rnullb0: Can't open blockdev
[ 1057.015294][T10532] syzkaller1: entered promiscuous mode
[ 1057.022090][T10532] syzkaller1: entered allmulticast mode
[ 1057.156016][T10543] netlink: 'syz.2.8148': attribute type 10 has an invalid length.
[ 1057.227122][T10549] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1057.515683][T10563] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1057.522276][T10563] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1057.532504][T10563] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1057.541401][T10563] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[ 1057.548909][T10563] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1057.554987][T20013] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1057.555989][T10563] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1057.565142][T20013] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1057.575339][T10563] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1057.585283][T10563] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1057.604168][T10563] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1057.623615][T10563] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1057.642752][T10563] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1057.851665][T10594] fuse: Bad value for 'fd'
[ 1057.918384][  T981] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1058.088506][  T981] usb 6-1: Using ep0 maxpacket: 32
[ 1058.095184][  T981] usb 6-1: config 0 has an invalid interface number: 54 but max is 0
[ 1058.103409][  T981] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1058.113865][  T981] usb 6-1: config 0 has no interface number 0
[ 1058.120612][  T981] usb 6-1: config 0 interface 54 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1058.134081][  T981] usb 6-1: config 0 interface 54 has no altsetting 0
[ 1058.143049][  T981] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42
[ 1058.152368][  T981] usb 6-1: New USB device strings: Mfr=1, Product=16, SerialNumber=3
[ 1058.160636][  T981] usb 6-1: Product: syz
[ 1058.164917][  T981] usb 6-1: Manufacturer: syz
[ 1058.171429][  T981] usb 6-1: SerialNumber: syz
[ 1058.179164][  T981] usb 6-1: config 0 descriptor??
[ 1058.420664][T10578] /dev/rnullb0: Can't open blockdev
[ 1058.488277][  T981] ums_eneub6250 6-1:0.54: USB Mass Storage device detected
[ 1058.545763][  T981] usb 6-1: USB disconnect, device number 81
[ 1059.107275][T10646] /dev/nullb0: Can't open blockdev
[ 1059.138818][T10648] /dev/rnullb0: Can't open blockdev
[ 1059.618364][T24077] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1059.624534][ T5871] Bluetooth: hci5: command 0x1003 tx timeout
[ 1059.814048][T10662] /dev/rnullb0: Can't open blockdev
[ 1059.844436][T10673] debugfs: Bad value for 'source'
[ 1059.929804][ T6655] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1060.081286][T10680] /dev/rnullb0: Can't open blockdev
[ 1060.086887][T10683] /dev/rnullb0: Can't open blockdev
[ 1060.099647][ T6655] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9
[ 1060.111254][ T6655] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1060.122161][ T6655] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1060.129063][ T6655] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[ 1060.138448][ T6655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.153487][ T6655] usb 3-1: config 0 descriptor??
[ 1060.438275][  T981] usb 6-1: new low-speed USB device number 82 using dummy_hcd
[ 1060.567804][ T6655] pantherlord 0003:0810:0002.0059: unknown main item tag 0x6
[ 1060.587561][ T6655] pantherlord 0003:0810:0002.0059: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.2-1/input0
[ 1060.603628][ T6655] pantherlord 0003:0810:0002.0059: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[ 1060.618984][  T981] usb 6-1: no configurations
[ 1060.623600][  T981] usb 6-1: can't read configurations, error -22
[ 1060.724432][T10702] /dev/rnullb0: Can't open blockdev
[ 1060.758651][  T981] usb 6-1: new low-speed USB device number 83 using dummy_hcd
[ 1060.773861][ T6655] usb 3-1: USB disconnect, device number 35
[ 1060.908782][  T981] usb 6-1: no configurations
[ 1060.913429][  T981] usb 6-1: can't read configurations, error -22
[ 1060.920133][  T981] usb usb6-port1: attempt power cycle
[ 1061.258257][  T981] usb 6-1: new low-speed USB device number 84 using dummy_hcd
[ 1061.282103][  T981] usb 6-1: no configurations
[ 1061.286860][  T981] usb 6-1: can't read configurations, error -22
[ 1061.420045][  T981] usb 6-1: new low-speed USB device number 85 using dummy_hcd
[ 1061.449160][  T981] usb 6-1: no configurations
[ 1061.453780][  T981] usb 6-1: can't read configurations, error -22
[ 1061.460475][  T981] usb usb6-port1: unable to enumerate USB device
[ 1061.595134][T10740] /dev/rnullb0: Can't open blockdev
[ 1061.628282][  T984] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1061.663211][T10744] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8187'.
[ 1061.672800][T10744] /dev/rnullb0: Can't open blockdev
[ 1061.778207][  T984] usb 3-1: Using ep0 maxpacket: 8
[ 1061.784757][  T984] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1061.793231][  T984] usb 3-1: config 190 has an invalid interface number: 42 but max is 0
[ 1061.801563][  T984] usb 3-1: config 190 has an invalid descriptor of length 0, skipping remainder of the config
[ 1061.812348][  T984] usb 3-1: config 190 has no interface number 0
[ 1061.818850][  T984] usb 3-1: config 190 interface 42 has no altsetting 0
[ 1061.827321][  T984] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=77.12
[ 1061.836741][  T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.845702][  T984] usb 3-1: Product: syz
[ 1061.850316][  T984] usb 3-1: Manufacturer: syz
[ 1061.854949][  T984] usb 3-1: SerialNumber: syz
[ 1062.664665][T10764] /dev/rnullb0: Can't open blockdev
[ 1062.802111][T10771] loop6: detected capacity change from 0 to 7
[ 1062.809626][T10771] Dev loop6: unable to read RDB block 7
[ 1062.815225][T10771]  loop6: unable to read partition table
[ 1062.821502][T10771] loop6: partition table beyond EOD, truncated
[ 1062.827710][T10771] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà) failed (rc=-5)
[ 1064.308237][ T9667] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1064.348543][  T984] usb 3-1: USB disconnect, device number 36
[ 1064.471833][ T9667] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1064.481504][ T9667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1064.494567][ T9667] usb 6-1: Product: syz
[ 1064.499812][ T9667] usb 6-1: Manufacturer: syz
[ 1064.504438][ T9667] usb 6-1: SerialNumber: syz
[ 1064.513512][ T9667] usb 6-1: config 0 descriptor??
[ 1064.728658][ T9667] hso 6-1:0.0: Failed to find BULK IN ep
[ 1064.739238][ T9667] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 1064.943224][T10862] vxcan1: tx address claim with dlc 0
[ 1065.428425][   T24] usb 6-1: USB disconnect, device number 86
[ 1065.808191][   T24] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1065.970982][   T24] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 1065.979549][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1065.988540][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1065.999465][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1066.007396][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1066.016702][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1066.027648][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1066.035067][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1066.043980][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1066.055242][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1066.063115][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1066.072047][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1066.083091][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1066.090912][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1066.100180][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1066.112135][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1066.127184][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1066.136485][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1066.147547][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1066.155568][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1066.169847][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1066.182120][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1066.186961][T10890] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8213'.
[ 1066.191505][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1066.207184][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1066.223573][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1066.234124][   T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1066.243884][   T24] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1066.253631][   T24] usb 6-1: Product: syz
[ 1066.258365][   T24] usb 6-1: Manufacturer: syz
[ 1066.262975][   T24] usb 6-1: SerialNumber: syz
[ 1066.271415][   T24] usb 6-1: config 0 descriptor??
[ 1066.280929][   T24] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[ 1066.284969][T10904] /dev/rnullb0: Can't open blockdev
[ 1066.333977][T10908] /dev/rnullb0: Can't open blockdev
[ 1066.342203][T10910] /dev/rnullb0: Can't open blockdev
[ 1066.491419][T10916] /dev/rnullb0: Can't open blockdev
[ 1066.543435][T21770] usb 6-1: USB disconnect, device number 87
[ 1066.557017][T21770] yurex 6-1:0.0: USB YUREX #0 now disconnected
[ 1067.072808][T10935] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8222'.
[ 1067.083119][T10935] /dev/rnullb0: Can't open blockdev
[ 1067.708206][   T24] usb 6-1: new low-speed USB device number 88 using dummy_hcd
[ 1067.821913][T10979] /dev/rnullb0: Can't open blockdev
[ 1067.860196][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1067.871600][   T24] usb 6-1: config 0 has no interfaces?
[ 1067.877103][   T24] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1067.887030][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.897695][   T24] usb 6-1: config 0 descriptor??
[ 1068.287581][T10996] netlink: 'syz.2.8237': attribute type 11 has an invalid length.
[ 1068.385442][T10999] /dev/rnullb0: Can't open blockdev
[ 1069.332233][T11014] /dev/rnullb0: Can't open blockdev
[ 1069.428315][ T9667] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1069.436906][ T3523] nci: nci_rsp_packet: unknown rsp opcode 0x6
[ 1069.449242][T11047] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8241'.
[ 1069.601786][ T9667] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1069.612936][ T9667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.621299][ T9667] usb 3-1: Product: syz
[ 1069.625485][ T9667] usb 3-1: Manufacturer: syz
[ 1069.631433][ T9667] usb 3-1: SerialNumber: syz
[ 1069.641871][ T9667] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1069.656815][   T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1070.509184][ T9667] usb 6-1: USB disconnect, device number 88
[ 1070.556860][T11069] /dev/rnullb0: Can't open blockdev
[ 1070.679711][T11074] fuse: Unknown parameter 'gåWŒdÛ00000000000000000000'
[ 1070.712438][T11078] /dev/rnullb0: Can't open blockdev
[ 1070.739025][   T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1070.746517][   T24] ath9k_htc: Failed to initialize the device
[ 1070.778042][   T24] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1071.416037][T11093] syz.5.8247: attempt to access beyond end of device
[ 1071.416037][T11093] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1071.468566][T11095] /dev/rnullb0: Can't open blockdev
[ 1071.714044][T11100] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8250'.
[ 1072.374134][T11041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1072.448314][ T9667] usb 3-1: USB disconnect, device number 37
[ 1072.515148][T11119] /dev/rnullb0: Can't open blockdev
[ 1072.545479][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8253'.
[ 1072.588040][T11125] picdev_write: 484 callbacks suppressed
[ 1072.588058][T11125] kvm: pic: non byte write
[ 1072.737938][T11136] /dev/rnullb0: Can't open blockdev
[ 1073.005676][T11155] /dev/rnullb0: Can't open blockdev
[ 1073.234503][T11169] new mount options do not match the existing superblock, will be ignored
[ 1073.245166][T11169] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[ 1073.360282][  T984] usb 6-1: new full-speed USB device number 89 using dummy_hcd
[ 1073.532707][  T984] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1073.541076][  T984] usb 6-1: config 0 has no interface number 0
[ 1073.549900][  T984] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1073.559342][  T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.576480][  T984] usb 6-1: Product: syz
[ 1073.582438][  T984] usb 6-1: Manufacturer: syz
[ 1073.587248][  T984] usb 6-1: SerialNumber: syz
[ 1073.594596][  T984] usb 6-1: config 0 descriptor??
[ 1074.306285][T11190] syz.0.8268 uses old SIOCAX25GETINFO
[ 1074.312758][T11190] /dev/rnullb0: Can't open blockdev
[ 1074.319053][T11191] /dev/rnullb0: Can't open blockdev
[ 1074.354178][T11193] binder: 11192:11193 ioctl c0306201 200000000640 returned -22
[ 1074.608540][T11161] netlink: 'syz.5.8262': attribute type 4 has an invalid length.
[ 1074.718490][  T981] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1074.888428][  T981] usb 3-1: Using ep0 maxpacket: 16
[ 1074.895796][  T981] usb 3-1: config 5 has an invalid interface number: 20 but max is 0
[ 1074.904339][  T981] usb 3-1: config 5 has no interface number 0
[ 1074.911472][  T981] usb 3-1: config 5 interface 20 has no altsetting 0
[ 1074.920406][  T981] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08
[ 1074.931474][  T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.939499][  T981] usb 3-1: Product: syz
[ 1074.943673][  T981] usb 3-1: Manufacturer: syz
[ 1074.948396][  T981] usb 3-1: SerialNumber: syz
[ 1074.999918][ T9847] bridge_slave_1: left allmulticast mode
[ 1075.005635][ T9847] bridge_slave_1: left promiscuous mode
[ 1075.012519][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1075.021617][ T9847] bridge_slave_0: left allmulticast mode
[ 1075.027508][ T9847] bridge_slave_0: left promiscuous mode
[ 1075.033426][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1075.182061][ T9847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1075.224601][ T9847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1075.259419][ T9847] bond0 (unregistering): Released all slaves
[ 1075.274738][  T981] go7007 3-1:5.20: probe with driver go7007 failed with error -12
[ 1075.284597][  T981] usb 3-1: USB disconnect, device number 38
[ 1075.450379][  T984] usb 6-1: Firmware version (0.0) predates our first public release.
[ 1075.458950][  T984] usb 6-1: Please update to version 0.2 or newer
[ 1075.696443][ T9847] hsr_slave_0: left promiscuous mode
[ 1075.702770][ T9847] hsr_slave_1: left promiscuous mode
[ 1075.719820][ T9847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1075.727281][ T9847] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1075.729360][T11234] /dev/rnullb0: Can't open blockdev
[ 1075.740844][ T9847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1075.748963][ T9847] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1075.760078][ T9847] veth1_macvtap: left promiscuous mode
[ 1075.766106][ T9847] veth0_macvtap: left promiscuous mode
[ 1075.772430][ T9847] veth1_vlan: left promiscuous mode
[ 1075.779279][ T9847] veth0_vlan: left promiscuous mode
[ 1075.915450][T11241] /dev/rnullb0: Can't open blockdev
[ 1075.951075][ T9847] team0 (unregistering): Port device team_slave_1 removed
[ 1075.963258][ T9847] team0 (unregistering): Port device team_slave_0 removed
[ 1076.092771][ T5915] usb 6-1: USB disconnect, device number 89
[ 1076.136846][T11255] /dev/rnullb0: Can't open blockdev
[ 1076.161981][T11237] /dev/rnullb0: Can't open blockdev
[ 1076.212915][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8279'.
[ 1076.223204][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8279'.
[ 1076.232908][T11268] /dev/rnullb0: Can't open blockdev
[ 1076.312515][   T30] audit: type=1326 audit(2000033240.431:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11279 comm="syz.5.8281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ad9b8ebe9 code=0x0
[ 1076.396867][T11260] /dev/rnullb0: Can't open blockdev
[ 1076.460643][ T9847] IPVS: stop unused estimator thread 0...
[ 1076.805066][T11306] /dev/rnullb0: Can't open blockdev
[ 1076.834202][ T9847] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.881937][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1076.889859][T11311] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1076.892504][T11313] overlayfs: failed lookup in lower (newroot/90, name='bus', err=-40): overlapping layers
[ 1076.904241][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1076.906130][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1076.918550][ T9847] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.946992][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1076.954804][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1077.035231][ T9847] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.088281][ T9847] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.174035][T11307] chnl_net:caif_netlink_parms(): no params data found
[ 1077.243755][T11462] 8021q: VLANs not supported on syzkaller1
[ 1077.265849][ T9847] bridge_slave_1: left allmulticast mode
[ 1077.275026][ T5915] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1077.282942][ T9847] bridge_slave_1: left promiscuous mode
[ 1077.291886][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1077.301596][ T9847] bridge_slave_0: left allmulticast mode
[ 1077.307275][ T9847] bridge_slave_0: left promiscuous mode
[ 1077.314822][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1077.421842][T11480] /dev/rnullb0: Can't open blockdev
[ 1077.437928][T11475] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.8293'.
[ 1077.438210][ T5915] usb 6-1: Using ep0 maxpacket: 16
[ 1077.455979][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1077.467156][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1077.482623][ T5915] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00
[ 1077.492565][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.506806][ T5915] usb 6-1: config 0 descriptor??
[ 1077.597299][ T9847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1077.622881][ T9847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1077.659549][ T9847] bond0 (unregistering): Released all slaves
[ 1077.706320][T11307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1077.734059][T11307] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1077.745818][T11307] bridge_slave_0: entered allmulticast mode
[ 1077.761688][T11307] bridge_slave_0: entered promiscuous mode
[ 1077.847909][T11307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1077.856642][T11307] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1077.863854][T11307] bridge_slave_1: entered allmulticast mode
[ 1077.871130][T11307] bridge_slave_1: entered promiscuous mode
[ 1077.943281][T11307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1078.027589][T11307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1078.038086][T11549] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.8300'.
[ 1078.058000][T11549] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.8300'.
[ 1078.112802][ T9847] hsr_slave_0: left promiscuous mode
[ 1078.123615][ T9847] hsr_slave_1: left promiscuous mode
[ 1078.138669][ T9847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1078.157547][ T9847] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1078.174192][ T5915] usbhid 6-1:0.0: can't add hid device: -71
[ 1078.184604][ T5915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1078.197731][ T9847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1078.206920][ T5915] usb 6-1: USB disconnect, device number 90
[ 1078.216618][ T9847] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1078.232328][T11589] ALSA: seq fatal error: cannot create timer (-22)
[ 1078.249372][ T9847] veth1_macvtap: left promiscuous mode
[ 1078.258182][ T9847] veth0_macvtap: left promiscuous mode
[ 1078.263753][ T9847] veth1_vlan: left promiscuous mode
[ 1078.271902][ T9847] veth0_vlan: left promiscuous mode
[ 1078.610995][ T9847] team0 (unregistering): Port device team_slave_1 removed
[ 1078.625204][ T9847] team0 (unregistering): Port device team_slave_0 removed
[ 1078.709714][T11307] team0: Port device team_slave_0 added
[ 1078.760537][T11307] team0: Port device team_slave_1 added
[ 1078.813745][T11307] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1078.837913][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1078.876773][T11307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1078.893477][T11307] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1078.900754][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1078.930322][T11307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1078.930587][T11641] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.8303'.
[ 1078.984084][T11307] hsr_slave_0: entered promiscuous mode
[ 1078.993531][T11307] hsr_slave_1: entered promiscuous mode
[ 1078.995493][T11641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8303'.
[ 1079.010341][T11307] debugfs: 'hsr0' already exists in 'hsr'
[ 1079.016137][T11307] Cannot create hsr debugfs directory
[ 1079.050017][ T5871] Bluetooth: hci4: command tx timeout
[ 1079.294548][T11741] /dev/rnullb0: Can't open blockdev
[ 1079.395699][T11750] /dev/rnullb0: Can't open blockdev
[ 1079.431460][T11757] /dev/rnullb0: Can't open blockdev
[ 1079.758399][  T984] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1079.783749][T11307] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1079.926035][T11307] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1079.943609][T11796] /dev/rnullb0: Can't open blockdev
[ 1079.969673][T11307] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1079.982488][T11307] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1080.121239][T11307] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1080.162243][T11307] 8021q: adding VLAN 0 to HW filter on device team0
[ 1080.184307][T20013] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.191454][T20013] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1080.223425][ T9855] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.230574][ T9855] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1080.295484][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8314'.
[ 1080.494289][T11307] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1080.830152][T11307] veth0_vlan: entered promiscuous mode
[ 1080.869299][T11307] veth1_vlan: entered promiscuous mode
[ 1080.937967][T11307] veth0_macvtap: entered promiscuous mode
[ 1080.971763][T11307] veth1_macvtap: entered promiscuous mode
[ 1081.004257][T11307] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1081.016368][T11307] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1081.040972][ T9855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1081.051721][ T9855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1081.074468][ T9855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1081.110121][ T9855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1081.130859][ T5871] Bluetooth: hci4: command tx timeout
[ 1081.171527][ T9855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1081.200086][ T9855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1081.250266][T20013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1081.268390][T20013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1081.741047][T11918] netlink: 'syz.2.8326': attribute type 83 has an invalid length.
[ 1083.210559][T11969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1083.301958][T11978] virtio-fs: tag </dev/nullb0> not found
[ 1083.431766][T11982] syz.5.8335: attempt to access beyond end of device
[ 1083.431766][T11982] loop5: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 1083.487385][T11982] XFS (loop5): SB validate failed with error -5.
[ 1083.617808][T12004] /dev/rnullb0: Can't open blockdev
[ 1083.878265][   T24] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1084.005535][T12009] /dev/rnullb0: Can't open blockdev
[ 1084.012242][ T9854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.048182][   T24] usb 6-1: Using ep0 maxpacket: 8
[ 1084.062245][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1084.087236][   T24] usb 6-1: config 254 has an invalid interface number: 3 but max is 0
[ 1084.117061][   T24] usb 6-1: config 254 has no interface number 0
[ 1084.127079][ T9854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.153716][   T24] usb 6-1: config 254 interface 3 has no altsetting 0
[ 1084.179509][   T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=5e.fa
[ 1084.193614][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1084.214336][   T24] usb 6-1: Product: syz
[ 1084.223072][ T9854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.234328][   T24] usb 6-1: Manufacturer: syz
[ 1084.249221][   T24] usb 6-1: SerialNumber: syz
[ 1084.326459][ T9854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.519479][   T24] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282
[ 1084.538373][   T24] gspca_sn9c20x: Write register 1000 failed -71
[ 1084.555029][   T24] gspca_sn9c20x: Device initialization failed
[ 1084.579732][   T24] gspca_sn9c20x 6-1:254.3: probe with driver gspca_sn9c20x failed with error -71
[ 1084.599847][   T24] usb 6-1: USB disconnect, device number 92
[ 1084.756201][ T9854] bridge_slave_1: left allmulticast mode
[ 1084.773098][T24077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1084.782237][T24077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1084.789657][T24077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1084.797244][T24077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1084.804834][T24077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1084.806096][ T9854] bridge_slave_1: left promiscuous mode
[ 1084.858082][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1084.877852][ T9854] bridge_slave_0: left allmulticast mode
[ 1084.899934][ T9854] bridge_slave_0: left promiscuous mode
[ 1084.926081][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.117054][T12061] /dev/nullb0: Can't open blockdev
[ 1085.221635][T12066] futex_wake_op: syz.2.8345 tries to shift op by -1; fix this program
[ 1085.394627][ T9854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1085.453036][ T9854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1085.491211][ T9854] bond0 (unregistering): Released all slaves
[ 1085.802315][T12197] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8348'.
[ 1085.846439][T12048] chnl_net:caif_netlink_parms(): no params data found
[ 1085.905268][ T9854] hsr_slave_0: left promiscuous mode
[ 1085.914259][ T9854] hsr_slave_1: left promiscuous mode
[ 1085.929424][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1085.943726][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1085.956750][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1085.966712][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1085.989289][ T9854] veth1_macvtap: left promiscuous mode
[ 1085.995347][ T9854] veth0_macvtap: left promiscuous mode
[ 1086.008402][ T9854] veth1_vlan: left promiscuous mode
[ 1086.015258][ T9854] veth0_vlan: left promiscuous mode
[ 1086.225811][ T9854] team0 (unregistering): Port device team_slave_1 removed
[ 1086.248932][ T9854] team0 (unregistering): Port device team_slave_0 removed
[ 1086.514802][T12048] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1086.538400][T12048] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1086.888771][T24077] Bluetooth: hci4: command tx timeout
[ 1086.938635][T12048] bridge_slave_0: entered allmulticast mode
[ 1086.964680][T12048] bridge_slave_0: entered promiscuous mode
[ 1086.992454][T12048] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1087.020137][T12048] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1087.027312][T12048] bridge_slave_1: entered allmulticast mode
[ 1087.069170][T12048] bridge_slave_1: entered promiscuous mode
[ 1087.156509][T12048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1087.189326][T12048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1087.284308][T12048] team0: Port device team_slave_0 added
[ 1087.297515][T12048] team0: Port device team_slave_1 added
[ 1087.388094][T12048] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1087.406066][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1087.458168][T12048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1087.484801][T12048] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1087.494147][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1087.533526][T12048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1087.586140][T12048] hsr_slave_0: entered promiscuous mode
[ 1087.598886][T12048] hsr_slave_1: entered promiscuous mode
[ 1087.602387][T12428] /dev/rnullb0: Can't open blockdev
[ 1087.604965][T12048] debugfs: 'hsr0' already exists in 'hsr'
[ 1087.616674][T12048] Cannot create hsr debugfs directory
[ 1087.727059][T12048] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1087.810892][T12048] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1087.910407][T12048] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1087.955025][T12048] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1088.102016][T12048] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1088.114396][T12048] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1088.125290][T12048] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1088.137157][T12048] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1088.168456][ T5871] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1088.218479][T12048] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1088.240494][T12048] 8021q: adding VLAN 0 to HW filter on device team0
[ 1088.261297][T20016] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1088.268465][T20016] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1088.298825][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1088.305977][ T9847] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1088.444446][T12550] netlink: 'syz.5.8358': attribute type 13 has an invalid length.
[ 1088.459748][T12550] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8358'.
[ 1088.496386][T12550] /dev/rnullb0: Can't open blockdev
[ 1088.626297][T12048] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1088.734496][T12570] /dev/rnullb0: Can't open blockdev
[ 1088.891727][T12583] pim6reg1: entered promiscuous mode
[ 1088.897189][T12583] pim6reg1: entered allmulticast mode
[ 1088.916700][T12048] veth0_vlan: entered promiscuous mode
[ 1088.929859][T12048] veth1_vlan: entered promiscuous mode
[ 1088.953592][T12048] veth0_macvtap: entered promiscuous mode
[ 1088.964637][T12048] veth1_macvtap: entered promiscuous mode
[ 1088.978816][T24077] Bluetooth: hci4: command tx timeout
[ 1088.986165][T12048] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1089.001858][T12048] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1089.015635][ T9854] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1089.035540][ T9854] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1089.062111][ T9854] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1089.092072][ T9854] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1089.114212][ T9854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.123666][ T9854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.160060][ T9852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.171596][ T9852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.198355][ T9667] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 1089.291248][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8341'.
[ 1089.301479][T12614] openvswitch: netlink: push_nsh: missing base or metadata attributes
[ 1089.310512][T12614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1089.366964][ T9667] usb 6-1: config 0 has an invalid interface number: 25 but max is 0
[ 1089.388055][ T9667] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1089.405661][ T9667] usb 6-1: config 0 has no interface number 0
[ 1089.412554][ T9667] usb 6-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1089.430127][ T9667] usb 6-1: config 0 interface 25 has no altsetting 0
[ 1089.438887][ T9667] usb 6-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee
[ 1089.454598][ T9667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.472821][ T9667] usb 6-1: Product: syz
[ 1089.486326][ T9667] usb 6-1: Manufacturer: syz
[ 1089.498215][ T9667] usb 6-1: SerialNumber: syz
[ 1089.512355][ T9667] usb 6-1: config 0 descriptor??
[ 1089.638624][ T5934] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1089.726876][T12658] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16)
[ 1089.732072][ T9667] usb 6-1: Found UVC 0.00 device syz (1b3b:2951)
[ 1089.745079][T12658] /dev/rnullb0: Can't open blockdev
[ 1089.748336][ T9667] usb 6-1: No valid video chain found.
[ 1089.805029][ T5934] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10
[ 1089.831962][ T5934] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024
[ 1089.853744][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1089.875233][ T5934] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[ 1089.888213][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.906496][ T5934] usb 3-1: Product: syz
[ 1089.916551][ T5934] usb 3-1: Manufacturer: syz
[ 1089.926654][ T5934] usb 3-1: SerialNumber: syz
[ 1089.936869][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1089.951589][ T5934] usb 3-1: config 0 descriptor??
[ 1089.962554][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1089.977678][ T5934] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[ 1089.986876][ T9667] usb 6-1: USB disconnect, device number 93
[ 1090.015956][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[ 1090.036761][T12580] /dev/rnullb0: Can't open blockdev
[ 1090.040126][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[ 1090.062857][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[ 1090.078647][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[ 1090.086604][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[ 1090.094776][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[ 1090.107309][ T5934] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1090.118866][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[ 1090.126811][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[ 1090.135855][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[ 1090.154042][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[ 1090.168283][ T5934] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[ 1090.177544][T12624] /dev/rnullb0: Can't open blockdev
[ 1090.188523][ T5934] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1090.214589][ T5934] usb 3-1: USB disconnect, device number 39
[ 1090.242031][ T5934] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1090.279200][ T5934] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1090.286912][T12702] /dev/rnullb0: Can't open blockdev
[ 1090.306201][ T5934] keyspan 3-1:0.0: device disconnected
[ 1090.366592][T12713] netlink: 'syz.9.8371': attribute type 2 has an invalid length.
[ 1090.382971][T12713] netlink: 164 bytes leftover after parsing attributes in process `syz.9.8371'.
[ 1090.415182][T12713] /dev/rnullb0: Can't open blockdev
[ 1090.814836][T12748] /dev/rnullb0: Can't open blockdev
[ 1090.823788][T12751] /dev/rnullb0: Can't open blockdev
[ 1090.999377][T12768] /dev/rnullb0: Can't open blockdev
[ 1091.048360][T24077] Bluetooth: hci4: command tx timeout
[ 1091.086593][T12772] /dev/rnullb0: Can't open blockdev
[ 1091.233321][T12778] /dev/rnullb0: Can't open blockdev
[ 1091.797442][T12819] /dev/rnullb0: Can't open blockdev
[ 1092.063147][T12839] netlink: 'syz.0.8398': attribute type 9 has an invalid length.
[ 1092.142965][T12843] /dev/rnullb0: Can't open blockdev
[ 1092.202482][T12847] /dev/rnullb0: Can't open blockdev
[ 1092.299335][T12852] /dev/rnullb0: Can't open blockdev
[ 1092.426705][T12864] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8405'.
[ 1092.432678][T12865] /dev/nullb0: Can't open blockdev
[ 1092.436700][T12856] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8405'.
[ 1092.501741][T12855] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8405'.
[ 1092.541305][T12856] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8405'.
[ 1092.588803][T12864] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.8405'.
[ 1092.598702][T12855] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.8405'.
[ 1092.651207][T12880] Unsupported ieee802154 address type: 0
[ 1092.727592][T12892] netlink: 'syz.5.8411': attribute type 13 has an invalid length.
[ 1092.764036][T12892] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8411'.
[ 1092.775509][T12892] syz_tun: refused to change device tx_queue_len
[ 1092.898175][ T9667] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1092.934102][T12901] /dev/rnullb0: Can't open blockdev
[ 1092.992855][T12903] tmpfs: Bad value for 'mpol'
[ 1093.051647][ T9667] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64
[ 1093.063036][ T9667] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1093.088177][ T9667] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1093.100224][ T9667] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1093.130691][ T9667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1093.131410][T24077] Bluetooth: hci4: command tx timeout
[ 1093.139037][ T9667] usb 3-1: Product: syz
[ 1093.157944][T12916] /dev/rnullb0: Can't open blockdev
[ 1093.167538][ T9667] usb 3-1: Manufacturer: Р
[ 1093.173514][ T9667] usb 3-1: SerialNumber: syz
[ 1093.191844][T12880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1093.231895][T12923] 9pnet_fd: Insufficient options for proto=fd
[ 1093.244629][T12923] /dev/rnullb0: Can't open blockdev
[ 1093.283416][T12926] 9pnet_fd: Insufficient options for proto=fd
[ 1093.416414][ T9667] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8
[ 1093.473874][ T9667] usb 3-1: USB disconnect, device number 40
[ 1093.484129][ T9667] usblp0: removed
[ 1093.798178][   T24] usb 10-1: new full-speed USB device number 29 using dummy_hcd
[ 1093.930511][   T24] usb 10-1: device descriptor read/64, error -71
[ 1094.178747][   T24] usb 10-1: new full-speed USB device number 30 using dummy_hcd
[ 1094.201595][T12977] /dev/rnullb0: Can't open blockdev
[ 1094.208268][T14269] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1094.284959][T12982] /dev/rnullb0: Can't open blockdev
[ 1094.308355][   T24] usb 10-1: device descriptor read/64, error -71
[ 1094.363533][T14269] usb 3-1: too many configurations: 9, using maximum allowed: 8
[ 1094.373010][T14269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1094.385074][T14269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1094.396727][T14269] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1094.405004][T14269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1094.420523][T14269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1094.433502][   T24] usb usb10-port1: attempt power cycle
[ 1094.439152][T14269] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1094.452183][T14269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1094.474484][T14269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1094.486047][T14269] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1094.496605][T14269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1094.506529][T14269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1094.520699][T14269] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1094.528819][T14269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1094.537946][T14269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1094.549260][T14269] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1094.556682][T14269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1094.565711][T14269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1094.578381][T14269] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1094.587050][T14269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1094.596106][T14269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1094.607088][T14269] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1094.615447][T14269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1094.624902][T14269] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1094.635863][T14269] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1094.644327][T14269] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1094.653492][T14269] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1094.661895][T14269] usb 3-1: Product: syz
[ 1094.666072][T14269] usb 3-1: Manufacturer: syz
[ 1094.671306][T14269] usb 3-1: SerialNumber: syz
[ 1094.677795][T14269] usb 3-1: config 0 descriptor??
[ 1094.685978][T14269] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[ 1094.788197][   T24] usb 10-1: new full-speed USB device number 31 using dummy_hcd
[ 1094.811257][   T24] usb 10-1: device descriptor read/8, error -71
[ 1094.894525][T14269] IPVS: starting estimator thread 0...
[ 1094.913661][T13008] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8434'.
[ 1094.924343][T13008] netlink: 176 bytes leftover after parsing attributes in process `syz.5.8434'.
[ 1094.999520][T14269] usb 3-1: USB disconnect, device number 41
[ 1095.008211][T13005] IPVS: using max 48 ests per chain, 115200 per kthread
[ 1095.016157][T14269] yurex 3-1:0.0: USB YUREX #0 now disconnected
[ 1095.049782][   T24] usb 10-1: new full-speed USB device number 32 using dummy_hcd
[ 1095.078864][   T24] usb 10-1: device descriptor read/8, error -71
[ 1095.190405][   T24] usb usb10-port1: unable to enumerate USB device
[ 1095.374208][T13025] /dev/rnullb0: Can't open blockdev
[ 1095.763531][   T30] audit: type=1326 audit(2000033259.881:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.0.8441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb75318ebe9 code=0xffff0000
[ 1095.788509][T21770] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1095.818296][   T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1095.928342][T21770] usb 6-1: device descriptor read/64, error -71
[ 1095.978181][   T24] usb 3-1: Using ep0 maxpacket: 32
[ 1095.984603][   T24] usb 3-1: config 0 has an invalid interface number: 168 but max is 0
[ 1095.993184][   T24] usb 3-1: config 0 has no interface number 0
[ 1095.999467][   T24] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6
[ 1096.009116][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.018988][   T24] usb 3-1: config 0 descriptor??
[ 1096.031925][   T24] speedtch 3-1:0.168: speedtch_bind: wrong device class 176
[ 1096.044767][   T24] speedtch 3-1:0.168: usbatm_usb_probe: bind failed: -19!
[ 1096.168344][T21770] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1096.234124][   T24] usb 3-1: USB disconnect, device number 42
[ 1096.308278][T21770] usb 6-1: device descriptor read/64, error -71
[ 1096.418298][T21770] usb usb6-port1: attempt power cycle
[ 1096.758225][T21770] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1096.779969][T21770] usb 6-1: device descriptor read/8, error -71
[ 1096.878366][T11963] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 1097.018235][T21770] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1097.028277][T11963] usb 10-1: Using ep0 maxpacket: 16
[ 1097.035123][T11963] usb 10-1: config 1 has an invalid interface number: 105 but max is 0
[ 1097.043899][T11963] usb 10-1: config 1 has no interface number 0
[ 1097.043981][T21770] usb 6-1: device descriptor read/8, error -71
[ 1097.056479][T11963] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1097.058438][   T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1097.066546][T11963] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1097.084320][T11963] usb 10-1: config 1 interface 105 has no altsetting 0
[ 1097.093011][T11963] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1097.102182][T11963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.110932][T11963] usb 10-1: Product: syz
[ 1097.115191][T11963] usb 10-1: Manufacturer: syz
[ 1097.119908][T11963] usb 10-1: SerialNumber: syz
[ 1097.126956][T11963] hub 10-1:1.105: bad descriptor, ignoring hub
[ 1097.133251][T11963] hub 10-1:1.105: probe with driver hub failed with error -5
[ 1097.188446][T21770] usb usb6-port1: unable to enumerate USB device
[ 1097.228165][   T24] usb 3-1: Using ep0 maxpacket: 32
[ 1097.234516][   T24] usb 3-1: config 0 has an invalid interface number: 126 but max is 0
[ 1097.243643][   T24] usb 3-1: config 0 has no interface number 0
[ 1097.249988][   T24] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1097.260415][   T24] usb 3-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1097.270483][   T24] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[ 1097.280919][   T24] usb 3-1: config 0 interface 126 has no altsetting 0
[ 1097.293031][   T24] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[ 1097.302226][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.310305][   T24] usb 3-1: Product: syz
[ 1097.314501][   T24] usb 3-1: Manufacturer: syz
[ 1097.319426][   T24] usb 3-1: SerialNumber: syz
[ 1097.325689][   T24] usb 3-1: config 0 descriptor??
[ 1097.333415][T13075] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1097.532162][T11963] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1097.544795][T13075] tmpfs: Unknown parameter 'grpquosa_inode_hardlimit'
[ 1097.545459][T11963] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1097.554261][T13075] /dev/rnullb0: Can't open blockdev
[ 1097.573592][   T24] ir_usb 3-1:0.126: IR Dongle converter detected
[ 1097.581688][   T24] usb 3-1: IRDA class descriptor not found, device not bound
[ 1097.583851][T11963] aqc111 10-1:1.105 eth25: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 26:f9:96:17:9b:5c
[ 1097.593591][   T24] usb 3-1: USB disconnect, device number 43
[ 1097.610573][T11963] aqc111 10-1:1.105 eth25: Failed to read(0x1) reg index 0x0002: -32
[ 1097.726176][T11963] aqc111 10-1:1.105 eth25: Failed to read(0x1) reg index 0x0002: -71
[ 1097.739539][T11963] aqc111 10-1:1.105 eth25: Failed to write(0x1) reg index 0x0002: -71
[ 1097.752547][T11963] aqc111 10-1:1.105 eth25: Failed to write(0x1) reg index 0x0001: -71
[ 1097.766928][T11963] aqc111 10-1:1.105 eth25: Failed to write(0x1) reg index 0x0002: -71
[ 1097.793388][T11963] aqc111 10-1:1.105 eth25: Failed to write(0x1) reg index 0x0001: -71
[ 1098.428291][   T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1098.578168][   T24] usb 3-1: Using ep0 maxpacket: 16
[ 1098.587184][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1098.598328][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[ 1098.607385][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1098.616898][   T24] usb 3-1: config 0 descriptor??
[ 1098.918163][    T9] usb 6-1: new low-speed USB device number 98 using dummy_hcd
[ 1099.028281][   T24] kye 0003:0458:0087.005A: unknown main item tag 0x0
[ 1099.035040][   T24] kye 0003:0458:0087.005A: unknown main item tag 0x0
[ 1099.041826][   T24] kye 0003:0458:0087.005A: unknown main item tag 0x0
[ 1099.048844][   T24] kye 0003:0458:0087.005A: unknown main item tag 0x0
[ 1099.055635][   T24] kye 0003:0458:0087.005A: unknown main item tag 0x0
[ 1099.062532][   T24] kye 0003:0458:0087.005A: unknown main item tag 0x0
[ 1099.069313][   T24] kye 0003:0458:0087.005A: unknown main item tag 0x0
[ 1099.074030][    T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 1099.076008][   T24] kye 0003:0458:0087.005A: unknown main item tag 0x0
[ 1099.087461][    T9] usb 6-1: config 179 has no interface number 0
[ 1099.092122][   T24] kye 0003:0458:0087.005A: unknown main item tag 0x0
[ 1099.101009][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[ 1099.104686][   T24] kye 0003:0458:0087.005A: unknown main item tag 0x0
[ 1099.116642][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1099.128083][   T24] kye 0003:0458:0087.005A: hidraw0: USB HID v0.09 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0
[ 1099.159500][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1099.172348][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[ 1099.187867][    T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1099.203873][    T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1099.213019][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.223462][T13170] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1099.232440][    T9] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1099.240089][   T24] usb 3-1: USB disconnect, device number 44
[ 1099.244137][    T9] xpad 6-1:179.65: probe with driver xpad failed with error -90
[ 1099.561093][T13199] fuse: Bad value for 'rootmode'
[ 1113.902868][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1113.911433][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1113.919393][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1113.927593][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1113.936369][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1115.032993][T24077] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1115.042750][T24077] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1115.050430][T24077] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1115.059769][T24077] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1115.067216][T24077] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1115.079288][T13238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1115.087386][T13238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1115.095470][T13238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1115.103080][T13238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1115.111086][T13238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1115.755074][ T1305] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1115.764544][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.992763][T13238] Bluetooth: hci5: command tx timeout
[ 1116.955582][ T5188] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1116.963296][ T5188] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1116.970514][ T5188] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1116.979350][ T5188] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1116.987060][ T5188] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1117.111921][T13238] Bluetooth: hci6: command tx timeout
[ 1117.191741][T13238] Bluetooth: hci7: command tx timeout
[ 1118.070923][T13238] Bluetooth: hci5: command tx timeout
[ 1119.030615][T13238] Bluetooth: hci8: command tx timeout
[ 1119.189906][T13238] Bluetooth: hci6: command tx timeout
[ 1119.269730][T13238] Bluetooth: hci7: command tx timeout
[ 1120.161155][T13238] Bluetooth: hci5: command tx timeout
[ 1121.107923][T13238] Bluetooth: hci8: command tx timeout
[ 1121.267953][T13238] Bluetooth: hci6: command tx timeout
[ 1121.347801][T13238] Bluetooth: hci7: command tx timeout
[ 1122.227197][T13238] Bluetooth: hci5: command tx timeout
[ 1123.185952][T13238] Bluetooth: hci8: command tx timeout
[ 1123.345993][T13238] Bluetooth: hci6: command tx timeout
[ 1123.425819][T13238] Bluetooth: hci7: command tx timeout
[ 1125.263999][T13238] Bluetooth: hci8: command tx timeout
[ 1163.879661][ T5188] Bluetooth: hci3: command 0x0406 tx timeout
[ 1173.982691][ T5188] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1173.989953][ T5188] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1173.997227][ T5188] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1174.004899][ T5188] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1174.013148][ T5188] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1175.048852][ T5188] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1175.056816][ T5188] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1175.064476][ T5188] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1175.072773][ T5188] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1175.080648][ T5188] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1175.106814][T13238] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1175.114199][T13238] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1175.121833][T13238] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1175.129589][T13238] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1175.137415][T13238] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1176.109021][ T5188] Bluetooth: hci9: command tx timeout
[ 1177.045425][T13238] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1177.053004][T13238] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1177.060710][T13238] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1177.069301][T13238] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1177.076875][T13238] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1177.140220][ T1305] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1177.142260][ T5188] Bluetooth: hci10: command tx timeout
[ 1177.155204][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.228085][ T5188] Bluetooth: hci11: command tx timeout
[ 1178.177257][ T5188] Bluetooth: hci9: command tx timeout
[ 1179.136494][ T5188] Bluetooth: hci12: command tx timeout
[ 1179.216497][ T5188] Bluetooth: hci10: command tx timeout
[ 1179.296282][ T5188] Bluetooth: hci11: command tx timeout
[ 1180.255596][ T5188] Bluetooth: hci9: command tx timeout
[ 1181.214743][ T5188] Bluetooth: hci12: command tx timeout
[ 1181.304660][ T5188] Bluetooth: hci10: command tx timeout
[ 1181.374559][ T5188] Bluetooth: hci11: command tx timeout
[ 1182.333757][ T5188] Bluetooth: hci9: command tx timeout
[ 1183.293053][ T5188] Bluetooth: hci12: command tx timeout
[ 1183.373074][ T5188] Bluetooth: hci10: command tx timeout
[ 1183.452971][ T5188] Bluetooth: hci11: command tx timeout
[ 1185.381263][ T5188] Bluetooth: hci12: command tx timeout
[ 1209.911471][T13238] Bluetooth: hci4: command 0x0406 tx timeout
[ 1234.070611][T13238] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1234.079843][T13238] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1234.087944][T13238] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1234.095803][T13238] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1234.103536][T13238] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1235.159674][T13238] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1235.170335][T13238] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1235.177862][T13238] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1235.185774][T13238] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1235.193290][T13238] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1235.208601][ T5188] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1235.216049][ T5188] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1235.223452][ T5188] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1235.231237][ T5188] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1235.239265][ T5188] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1236.133068][T13238] Bluetooth: hci13: command tx timeout
[ 1237.128807][ T5188] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 1237.136562][ T5188] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 1237.144415][ T5188] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 1237.153060][ T5188] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 1237.162292][ T5188] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 1237.250627][ T5188] Bluetooth: hci14: command tx timeout
[ 1237.252029][T13238] Bluetooth: hci15: command tx timeout
[ 1238.219814][T13238] Bluetooth: hci13: command tx timeout
[ 1238.532221][ T1305] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1238.541484][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.250710][T24077] Bluetooth: hci16: command tx timeout
[ 1239.328863][T24077] Bluetooth: hci15: command tx timeout
[ 1239.338918][T24077] Bluetooth: hci14: command tx timeout
[ 1240.290119][T24077] Bluetooth: hci13: command tx timeout
[ 1240.608081][T24077] Bluetooth: hci5: command 0x0406 tx timeout
[ 1240.614208][T24077] Bluetooth: hci7: command 0x0406 tx timeout
[ 1240.620698][T24077] Bluetooth: hci6: command 0x0406 tx timeout
[ 1240.622573][T13319] Bluetooth: hci8: command 0x0406 tx timeout
[ 1241.330089][T13238] Bluetooth: hci16: command tx timeout
[ 1241.407348][ T5188] Bluetooth: hci15: command tx timeout
[ 1241.409508][T13238] Bluetooth: hci14: command tx timeout
[ 1242.368749][T13238] Bluetooth: hci13: command tx timeout
[ 1243.406902][T13238] Bluetooth: hci16: command tx timeout
[ 1243.485862][T13238] Bluetooth: hci15: command tx timeout
[ 1243.495827][T13238] Bluetooth: hci14: command tx timeout
[ 1245.486616][T13238] Bluetooth: hci16: command tx timeout
[ 1251.960846][   T31] INFO: task dhcpcd:5532 blocked for more than 143 seconds.
[ 1251.968176][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1251.975576][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1251.984345][   T31] task:dhcpcd          state:D stack:21480 pid:5532  tgid:5532  ppid:5531   task_flags:0x400140 flags:0x00004002
[ 1251.996341][   T31] Call Trace:
[ 1251.999654][   T31]  <TASK>
[ 1252.002583][   T31]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1252.007081][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 1252.012196][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1252.017958][   T31]  ? __pfx___schedule+0x10/0x10
[ 1252.023095][   T31]  ? schedule+0x91/0x360
[ 1252.027356][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1252.032212][   T31]  ? lock_release+0x4b/0x3e0
[ 1252.036821][   T31]  schedule+0x165/0x360
[ 1252.041401][   T31]  rpm_resume+0x4c9/0x15f0
[ 1252.045848][   T31]  ? __pfx_rpm_resume+0x10/0x10
[ 1252.051123][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 1252.056191][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1252.062398][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1252.067812][   T31]  rpm_resume+0x8c1/0x15f0
[ 1252.092227][   T31]  ? __pfx_rpm_resume+0x10/0x10
[ 1252.097110][   T31]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 1252.110930][   T31]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 1252.116869][   T31]  ? hsr_netdev_notify+0x29e/0xcf0
[ 1252.122666][   T31]  ? __pfx_ib_device_get_by_netdev+0x10/0x10
[ 1252.128678][   T31]  ? lowpan_event+0x107/0x6a0
[ 1252.133868][   T31]  __pm_runtime_resume+0x11c/0x180
[ 1252.139008][   T31]  usb_autopm_get_interface+0x20/0xf0
[ 1252.145135][   T31]  usbnet_open+0x85/0xce0
[ 1252.149544][   T31]  ? notifier_call_chain+0x3bf/0x3e0
[ 1252.155047][   T31]  __dev_open+0x46d/0x880
[ 1252.159467][   T31]  ? __pfx___dev_open+0x10/0x10
[ 1252.164330][   T31]  __dev_change_flags+0x1ea/0x6d0
[ 1252.169478][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[ 1252.174871][   T31]  ? __pfx___dev_change_flags+0x10/0x10
[ 1252.180503][   T31]  ? stack_depot_save_flags+0x40/0x860
[ 1252.186286][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1252.191359][   T31]  netif_change_flags+0x88/0x1a0
[ 1252.196313][   T31]  dev_change_flags+0x130/0x260
[ 1252.201375][   T31]  devinet_ioctl+0xbb4/0x1b50
[ 1252.206072][   T31]  ? __might_fault+0xb0/0x130
[ 1252.210846][   T31]  ? __pfx_devinet_ioctl+0x10/0x10
[ 1252.215979][   T31]  ? get_user_ifreq+0x12c/0x180
[ 1252.220922][   T31]  inet_ioctl+0x3c0/0x4c0
[ 1252.225281][   T31]  ? __pfx_inet_ioctl+0x10/0x10
[ 1252.230169][   T31]  ? lock_release+0x4b/0x3e0
[ 1252.234774][   T31]  ? tomoyo_path_number_perm+0x47a/0x5a0
[ 1252.240485][   T31]  ? kfree+0x18e/0x440
[ 1252.244984][   T31]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1252.250138][   T31]  sock_do_ioctl+0xdc/0x300
[ 1252.254841][   T31]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1252.260076][   T31]  ? file_init_path+0x434/0x590
[ 1252.264973][   T31]  sock_ioctl+0x576/0x790
[ 1252.269371][   T31]  ? __pfx_sock_ioctl+0x10/0x10
[ 1252.274241][   T31]  ? fd_install+0x30d/0x540
[ 1252.278745][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1252.283888][   T31]  ? __pfx_sock_ioctl+0x10/0x10
[ 1252.289027][   T31]  __se_sys_ioctl+0xfc/0x170
[ 1252.293712][   T31]  do_syscall_64+0xfa/0x3b0
[ 1252.298233][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1252.303073][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.309147][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1252.313853][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.319799][   T31] RIP: 0033:0x7f748e78c378
[ 1252.324214][   T31] RSP: 002b:00007ffda33e71d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1252.332707][   T31] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007f748e78c378
[ 1252.340726][   T31] RDX: 00007ffda33f73d0 RSI: 0000000000008914 RDI: 0000000000000043
[ 1252.349083][   T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1252.357278][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda3407570
[ 1252.365344][   T31] R13: 00007f748e68c6c8 R14: 0000000000000028 R15: 0000000000008914
[ 1252.373407][   T31]  </TASK>
[ 1252.376532][   T31] INFO: task kworker/0:6:11963 blocked for more than 143 seconds.
[ 1252.384369][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1252.391854][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1252.400578][   T31] task:kworker/0:6     state:D stack:22440 pid:11963 tgid:11963 ppid:2      task_flags:0x4288060 flags:0x00004000
[ 1252.412672][   T31] Workqueue: usb_hub_wq hub_event
[ 1252.417725][   T31] Call Trace:
[ 1252.421060][   T31]  <TASK>
[ 1252.424005][   T31]  __schedule+0x1798/0x4cc0
[ 1252.428519][   T31]  ? unwind_next_frame+0x19ae/0x2390
[ 1252.433853][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 1252.438918][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1252.444392][   T31]  ? __pfx___schedule+0x10/0x10
[ 1252.449813][   T31]  ? schedule+0x91/0x360
[ 1252.454085][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1252.458979][   T31]  ? lock_release+0x4b/0x3e0
[ 1252.463608][   T31]  ? schedule+0x91/0x360
[ 1252.467852][   T31]  ? wq_worker_sleeping+0x63/0x250
[ 1252.472998][   T31]  schedule+0x165/0x360
[ 1252.477158][   T31]  rpm_resume+0x4c9/0x15f0
[ 1252.481617][   T31]  ? __pfx_rpm_resume+0x10/0x10
[ 1252.486474][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 1252.491815][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1252.497915][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1252.503492][   T31]  rpm_resume+0x8c1/0x15f0
[ 1252.507933][   T31]  ? __pfx_rpm_resume+0x10/0x10
[ 1252.512923][   T31]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 1252.518317][   T31]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 1252.524291][   T31]  ? kfree+0x18e/0x440
[ 1252.528372][   T31]  __pm_runtime_resume+0x11c/0x180
[ 1252.533822][   T31]  usb_autopm_get_interface+0x20/0xf0
[ 1252.539292][   T31]  aqc111_suspend+0x6e8/0xaf0
[ 1252.543986][   T31]  ? dpm_sysfs_add+0xd2/0x270
[ 1252.548676][   T31]  ? device_add+0x4d8/0xb50
[ 1252.553600][   T31]  ? usb_new_device+0xb4c/0x16f0
[ 1252.558566][   T31]  ? process_scheduled_works+0xae1/0x17b0
[ 1252.564511][   T31]  ? worker_thread+0x8a0/0xda0
[ 1252.569356][   T31]  ? __pfx_aqc111_suspend+0x10/0x10
[ 1252.574577][   T31]  ? idr_get_free+0x8dc/0xa70
[ 1252.579344][   T31]  ? plist_del+0x1d0/0x3f0
[ 1252.583883][   T31]  ? idr_alloc_u32+0x1b7/0x2d0
[ 1252.588635][   T31]  ? __pfx_idr_alloc_u32+0x10/0x10
[ 1252.593785][   T31]  ? kernfs_link_sibling+0x2fb/0x3e0
[ 1252.599180][   T31]  ? lock_acquire+0x5f/0x360
[ 1252.603782][   T31]  ? kernfs_add_one+0x2c2/0x520
[ 1252.608638][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1252.613456][   T31]  ? lock_acquire+0x5f/0x360
[ 1252.618062][   T31]  usb_suspend_both+0x28d/0x1060
[ 1252.623064][   T31]  ? __pfx_usb_suspend_both+0x10/0x10
[ 1252.628463][   T31]  ? autosuspend_check+0x42b/0x5c0
[ 1252.633618][   T31]  ? __pfx_usb_runtime_suspend+0x10/0x10
[ 1252.639471][   T31]  usb_runtime_suspend+0x58/0x110
[ 1252.644505][   T31]  __rpm_callback+0x2f1/0x7f0
[ 1252.649224][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1252.654567][   T31]  ? dev_pm_enable_wake_irq_check+0xca/0x1d0
[ 1252.660657][   T31]  ? __pfx_usb_runtime_suspend+0x10/0x10
[ 1252.666494][   T31]  rpm_suspend+0x893/0x1720
[ 1252.671098][   T31]  ? __pfx_rpm_suspend+0x10/0x10
[ 1252.676061][   T31]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 1252.681662][   T31]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 1252.687583][   T31]  ? device_add+0x70b/0xb50
[ 1252.692131][   T31]  __pm_runtime_suspend+0x12f/0x1a0
[ 1252.697338][   T31]  usb_new_device+0xbb2/0x16f0
[ 1252.702215][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 1252.707435][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1252.712233][   T31]  hub_event+0x2958/0x4a20
[ 1252.716684][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1252.721502][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1252.726290][   T31]  ? lock_acquire+0x5f/0x360
[ 1252.730924][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1252.735707][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1252.741480][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1252.747209][   T31]  process_scheduled_works+0xae1/0x17b0
[ 1252.752958][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1252.759422][   T31]  worker_thread+0x8a0/0xda0
[ 1252.764034][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1252.770579][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1252.776502][   T31]  ? __kthread_parkme+0x7b/0x200
[ 1252.781498][   T31]  kthread+0x711/0x8a0
[ 1252.785592][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1252.790833][   T31]  ? __pfx_kthread+0x10/0x10
[ 1252.795455][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1252.800277][   T31]  ? __pfx_kthread+0x10/0x10
[ 1252.804900][   T31]  ret_from_fork+0x3f9/0x770
[ 1252.809542][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1252.814667][   T31]  ? __switch_to_asm+0x39/0x70
[ 1252.819496][   T31]  ? __switch_to_asm+0x33/0x70
[ 1252.824275][   T31]  ? __pfx_kthread+0x10/0x10
[ 1252.828896][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1252.833670][   T31]  </TASK>
[ 1252.836719][   T31] INFO: task syz.5.8457:13170 blocked for more than 144 seconds.
[ 1252.845244][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1252.853057][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1252.862184][   T31] task:syz.5.8457      state:D stack:27688 pid:13170 tgid:13169 ppid:9472   task_flags:0x400140 flags:0x00004004
[ 1252.874446][   T31] Call Trace:
[ 1252.877819][   T31]  <TASK>
[ 1252.880827][   T31]  __schedule+0x1798/0x4cc0
[ 1252.885347][   T31]  ? stack_trace_save+0x9c/0xe0
[ 1252.890233][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[ 1252.895627][   T31]  ? stack_depot_save_flags+0x40/0x860
[ 1252.901133][   T31]  ? __pfx___schedule+0x10/0x10
[ 1252.905997][   T31]  ? schedule+0x91/0x360
[ 1252.910299][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1252.915087][   T31]  ? lock_release+0x4b/0x3e0
[ 1252.919854][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1252.925764][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1252.932150][   T31]  schedule+0x165/0x360
[ 1252.936328][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1252.941823][   T31]  __mutex_lock+0x7e6/0x1360
[ 1252.946434][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1252.951266][   T31]  ? dev_ioctl+0x7a4/0x1150
[ 1252.956219][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1252.961567][   T31]  ? dev_load+0x21/0x1f0
[ 1252.965820][   T31]  dev_ioctl+0x7a4/0x1150
[ 1252.970512][   T31]  sock_do_ioctl+0x22c/0x300
[ 1252.975145][   T31]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1252.980530][   T31]  ? do_futex+0x333/0x420
[ 1252.984899][   T31]  sock_ioctl+0x576/0x790
[ 1252.989291][   T31]  ? __pfx_sock_ioctl+0x10/0x10
[ 1252.994156][   T31]  ? __pfx___se_sys_futex+0x10/0x10
[ 1252.999494][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1253.004737][   T31]  ? __pfx_sock_ioctl+0x10/0x10
[ 1253.009702][   T31]  __se_sys_ioctl+0xfc/0x170
[ 1253.014302][   T31]  do_syscall_64+0xfa/0x3b0
[ 1253.018884][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.024956][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1253.029714][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.035621][   T31] RIP: 0033:0x7f8ad9b8ebe9
[ 1253.040135][   T31] RSP: 002b:00007f8adaa7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1253.048570][   T31] RAX: ffffffffffffffda RBX: 00007f8ad9db5fa0 RCX: 00007f8ad9b8ebe9
[ 1253.056686][   T31] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000007
[ 1253.065026][   T31] RBP: 00007f8ad9c11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1253.073318][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1253.081592][   T31] R13: 00007f8ad9db6038 R14: 00007f8ad9db5fa0 R15: 00007ffe87779368
[ 1253.089717][   T31]  </TASK>
[ 1253.092756][   T31] INFO: task syz.5.8457:13194 blocked for more than 144 seconds.
[ 1253.100528][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1253.107661][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1253.116372][   T31] task:syz.5.8457      state:D stack:26872 pid:13194 tgid:13169 ppid:9472   task_flags:0x400040 flags:0x00004004
[ 1253.128364][   T31] Call Trace:
[ 1253.131686][   T31]  <TASK>
[ 1253.134624][   T31]  __schedule+0x1798/0x4cc0
[ 1253.139205][   T31]  ? __pfx___schedule+0x10/0x10
[ 1253.144090][   T31]  ? schedule+0x91/0x360
[ 1253.148327][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1253.153169][   T31]  ? lock_release+0x4b/0x3e0
[ 1253.157795][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1253.163979][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1253.170723][   T31]  schedule+0x165/0x360
[ 1253.175115][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1253.180641][   T31]  __mutex_lock+0x7e6/0x1360
[ 1253.185256][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1253.190092][   T31]  ? nl80211_dump_wiphy+0x49/0x6f0
[ 1253.195225][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1253.200528][   T31]  ? trace_kmalloc+0x1f/0xd0
[ 1253.205137][   T31]  nl80211_dump_wiphy+0x49/0x6f0
[ 1253.210178][   T31]  ? __build_skb_around+0x262/0x3f0
[ 1253.215397][   T31]  genl_dumpit+0x10b/0x1b0
[ 1253.219841][   T31]  netlink_dump+0x6e4/0xe90
[ 1253.224352][   T31]  ? __pfx_netlink_dump+0x10/0x10
[ 1253.229433][   T31]  ? genl_start+0x499/0x6c0
[ 1253.233959][   T31]  __netlink_dump_start+0x5cb/0x7e0
[ 1253.239362][   T31]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[ 1253.245097][   T31]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[ 1253.251386][   T31]  ? genl_get_cmd+0x7d9/0x910
[ 1253.256166][   T31]  ? __pfx_genl_start+0x10/0x10
[ 1253.261079][   T31]  ? __pfx_genl_dumpit+0x10/0x10
[ 1253.266037][   T31]  ? __pfx_genl_done+0x10/0x10
[ 1253.271172][   T31]  genl_rcv_msg+0x5da/0x790
[ 1253.275732][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1253.281032][   T31]  ? __pfx_nl80211_dump_wiphy+0x10/0x10
[ 1253.286720][   T31]  ? __pfx_nl80211_dump_wiphy_done+0x10/0x10
[ 1253.292756][   T31]  ? __asan_memcpy+0x40/0x70
[ 1253.297358][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1253.302783][   T31]  ? __skb_clone+0x63/0x7a0
[ 1253.307302][   T31]  netlink_rcv_skb+0x205/0x470
[ 1253.312300][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1253.317350][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1253.322765][   T31]  ? lock_release+0x4b/0x3e0
[ 1253.327373][   T31]  ? down_read+0x1ad/0x2e0
[ 1253.331851][   T31]  genl_rcv+0x28/0x40
[ 1253.335842][   T31]  netlink_unicast+0x82c/0x9e0
[ 1253.340638][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1253.345936][   T31]  ? netlink_sendmsg+0x642/0xb30
[ 1253.350921][   T31]  ? skb_put+0x11b/0x210
[ 1253.355192][   T31]  netlink_sendmsg+0x805/0xb30
[ 1253.359993][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1253.365326][   T31]  ? futex_unqueue+0x22/0x240
[ 1253.370411][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1253.375379][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1253.380933][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1253.386242][   T31]  __sock_sendmsg+0x21c/0x270
[ 1253.390991][   T31]  ____sys_sendmsg+0x505/0x830
[ 1253.395797][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1253.401225][   T31]  ? import_iovec+0x74/0xa0
[ 1253.405777][   T31]  ___sys_sendmsg+0x21f/0x2a0
[ 1253.410506][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1253.415731][   T31]  ? futex_wait+0x285/0x360
[ 1253.420518][   T31]  ? __fget_files+0x2a/0x420
[ 1253.425139][   T31]  ? __fget_files+0x3a0/0x420
[ 1253.429860][   T31]  __x64_sys_sendmsg+0x19b/0x260
[ 1253.434810][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1253.440330][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1253.445121][   T31]  do_syscall_64+0xfa/0x3b0
[ 1253.449691][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.455788][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1253.460519][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.466427][   T31] RIP: 0033:0x7f8ad9b8ebe9
[ 1253.470890][   T31] RSP: 002b:00007f8adaa5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1253.479676][   T31] RAX: ffffffffffffffda RBX: 00007f8ad9db6090 RCX: 00007f8ad9b8ebe9
[ 1253.487803][   T31] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000006
[ 1253.495854][   T31] RBP: 00007f8ad9c11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1253.503870][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1253.511884][   T31] R13: 00007f8ad9db6128 R14: 00007f8ad9db6090 R15: 00007ffe87779368
[ 1253.519882][   T31]  </TASK>
[ 1253.522904][   T31] INFO: task syz.0.8459:13199 blocked for more than 144 seconds.
[ 1253.530940][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1253.538057][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1253.546829][   T31] task:syz.0.8459      state:D stack:28040 pid:13199 tgid:13198 ppid:26644  task_flags:0x400140 flags:0x00004004
[ 1253.558782][   T31] Call Trace:
[ 1253.562052][   T31]  <TASK>
[ 1253.564970][   T31]  __schedule+0x1798/0x4cc0
[ 1253.569620][   T31]  ? __pfx___schedule+0x10/0x10
[ 1253.574824][   T31]  ? schedule+0x91/0x360
[ 1253.579130][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1253.584201][   T31]  ? lock_release+0x4b/0x3e0
[ 1253.588871][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1253.594779][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1253.601156][   T31]  schedule+0x165/0x360
[ 1253.605326][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1253.610817][   T31]  __mutex_lock+0x7e6/0x1360
[ 1253.615429][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1253.620273][   T31]  ? __tun_chr_ioctl+0x37a/0x1df0
[ 1253.625323][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1253.630424][   T31]  ? lock_release+0x4b/0x3e0
[ 1253.635114][   T31]  ? __might_fault+0xb0/0x130
[ 1253.640101][   T31]  ? __might_fault+0xcc/0x130
[ 1253.644796][   T31]  __tun_chr_ioctl+0x37a/0x1df0
[ 1253.649679][   T31]  ? __pfx___tun_chr_ioctl+0x10/0x10
[ 1253.654977][   T31]  ? __fget_files+0x2a/0x420
[ 1253.659646][   T31]  ? __fget_files+0x3a0/0x420
[ 1253.664336][   T31]  ? __fget_files+0x2a/0x420
[ 1253.669073][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1253.674029][   T31]  ? __pfx_tun_chr_ioctl+0x10/0x10
[ 1253.679527][   T31]  __se_sys_ioctl+0xfc/0x170
[ 1253.684160][   T31]  do_syscall_64+0xfa/0x3b0
[ 1253.688901][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.694993][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1253.699715][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.705617][   T31] RIP: 0033:0x7fb75318ebe9
[ 1253.710094][   T31] RSP: 002b:00007fb753f69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1253.718632][   T31] RAX: ffffffffffffffda RBX: 00007fb7533b5fa0 RCX: 00007fb75318ebe9
[ 1253.726610][   T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000007
[ 1253.734614][   T31] RBP: 00007fb753211e19 R08: 0000000000000000 R09: 0000000000000000
[ 1253.742619][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1253.750800][   T31] R13: 00007fb7533b6038 R14: 00007fb7533b5fa0 R15: 00007ffcd2eb4f68
[ 1253.759000][   T31]  </TASK>
[ 1253.762040][   T31] INFO: task syz.0.8459:13200 blocked for more than 145 seconds.
[ 1253.770250][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1253.777374][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1253.786610][   T31] task:syz.0.8459      state:D stack:28456 pid:13200 tgid:13198 ppid:26644  task_flags:0x400040 flags:0x00004004
[ 1253.799066][   T31] Call Trace:
[ 1253.802354][   T31]  <TASK>
[ 1253.805271][   T31]  __schedule+0x1798/0x4cc0
[ 1253.809845][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1253.814623][   T31]  ? futex_unqueue+0x22/0x240
[ 1253.819389][   T31]  ? futex_unqueue+0x22/0x240
[ 1253.824085][   T31]  ? __pfx___schedule+0x10/0x10
[ 1253.828974][   T31]  ? schedule+0x91/0x360
[ 1253.833233][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1253.838022][   T31]  ? lock_release+0x4b/0x3e0
[ 1253.842653][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1253.848625][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1253.854968][   T31]  schedule+0x165/0x360
[ 1253.859370][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1253.864847][   T31]  __mutex_lock+0x7e6/0x1360
[ 1253.869501][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1253.874274][   T31]  ? tun_chr_close+0x3e/0x1c0
[ 1253.879606][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1253.884874][   T31]  ? __pfx_locks_remove_posix+0x10/0x10
[ 1253.890715][   T31]  ? do_futex+0x333/0x420
[ 1253.895077][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[ 1253.900274][   T31]  tun_chr_close+0x3e/0x1c0
[ 1253.904813][   T31]  __fput+0x449/0xa70
[ 1253.908836][   T31]  fput_close_sync+0x119/0x200
[ 1253.913607][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1253.918417][   T31]  ? __pfx_fput_close_sync+0x10/0x10
[ 1253.923709][   T31]  __x64_sys_close+0x7f/0x110
[ 1253.928451][   T31]  do_syscall_64+0xfa/0x3b0
[ 1253.932962][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.939148][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1253.943846][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.949783][   T31] RIP: 0033:0x7fb75318ebe9
[ 1253.954211][   T31] RSP: 002b:00007fb753f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1253.962776][   T31] RAX: ffffffffffffffda RBX: 00007fb7533b6090 RCX: 00007fb75318ebe9
[ 1253.971051][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[ 1253.979097][   T31] RBP: 00007fb753211e19 R08: 0000000000000000 R09: 0000000000000000
[ 1253.987351][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1253.995550][   T31] R13: 00007fb7533b6128 R14: 00007fb7533b6090 R15: 00007ffcd2eb4f68
[ 1254.003589][   T31]  </TASK>
[ 1254.006618][   T31] INFO: task syz.0.8459:13201 blocked for more than 145 seconds.
[ 1254.014451][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1254.021599][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1254.030403][   T31] task:syz.0.8459      state:D stack:28200 pid:13201 tgid:13198 ppid:26644  task_flags:0x400140 flags:0x00004004
[ 1254.042434][   T31] Call Trace:
[ 1254.045708][   T31]  <TASK>
[ 1254.048709][   T31]  __schedule+0x1798/0x4cc0
[ 1254.053251][   T31]  ? __pfx___schedule+0x10/0x10
[ 1254.058142][   T31]  ? schedule+0x91/0x360
[ 1254.062389][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1254.067150][   T31]  ? lock_release+0x4b/0x3e0
[ 1254.071772][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1254.077679][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1254.084248][   T31]  schedule+0x165/0x360
[ 1254.088701][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1254.094209][   T31]  __mutex_lock+0x7e6/0x1360
[ 1254.099234][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1254.104022][   T31]  ? dev_ioctl+0x7a4/0x1150
[ 1254.108586][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1254.113716][   T31]  ? apparmor_capable+0x137/0x1b0
[ 1254.118842][   T31]  ? dev_load+0x21/0x1f0
[ 1254.123102][   T31]  dev_ioctl+0x7a4/0x1150
[ 1254.127489][   T31]  sock_do_ioctl+0x22c/0x300
[ 1254.132294][   T31]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1254.137424][   T31]  ? do_futex+0x333/0x420
[ 1254.141944][   T31]  sock_ioctl+0x576/0x790
[ 1254.146288][   T31]  ? lock_release+0x4b/0x3e0
[ 1254.150912][   T31]  ? __pfx_sock_ioctl+0x10/0x10
[ 1254.155784][   T31]  ? __fget_files+0x2a/0x420
[ 1254.160420][   T31]  ? __fget_files+0x3a0/0x420
[ 1254.165117][   T31]  ? __fget_files+0x2a/0x420
[ 1254.169780][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1254.174733][   T31]  ? __pfx_sock_ioctl+0x10/0x10
[ 1254.179635][   T31]  __se_sys_ioctl+0xfc/0x170
[ 1254.184233][   T31]  do_syscall_64+0xfa/0x3b0
[ 1254.189255][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.195333][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1254.200357][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.206284][   T31] RIP: 0033:0x7fb75318ebe9
[ 1254.210814][   T31] RSP: 002b:00007fb753f27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1254.219297][   T31] RAX: ffffffffffffffda RBX: 00007fb7533b6180 RCX: 00007fb75318ebe9
[ 1254.227278][   T31] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000008
[ 1254.235300][   T31] RBP: 00007fb753211e19 R08: 0000000000000000 R09: 0000000000000000
[ 1254.243319][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1254.251404][   T31] R13: 00007fb7533b6218 R14: 00007fb7533b6180 R15: 00007ffcd2eb4f68
[ 1254.259434][   T31]  </TASK>
[ 1254.262462][   T31] INFO: task syz.2.8460:13206 blocked for more than 145 seconds.
[ 1254.270231][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1254.277341][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1254.286041][   T31] task:syz.2.8460      state:D stack:26952 pid:13206 tgid:13205 ppid:30861  task_flags:0x400040 flags:0x00004004
[ 1254.298434][   T31] Call Trace:
[ 1254.301901][   T31]  <TASK>
[ 1254.304843][   T31]  __schedule+0x1798/0x4cc0
[ 1254.309389][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[ 1254.314778][   T31]  ? __pfx___schedule+0x10/0x10
[ 1254.319671][   T31]  ? schedule+0x91/0x360
[ 1254.323940][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1254.328747][   T31]  ? lock_release+0x4b/0x3e0
[ 1254.333346][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1254.339296][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1254.345635][   T31]  schedule+0x165/0x360
[ 1254.349809][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1254.355285][   T31]  __mutex_lock+0x7e6/0x1360
[ 1254.359958][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1254.364732][   T31]  ? tipc_nl_bearer_disable+0x17/0x40
[ 1254.370220][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1254.375266][   T31]  ? __nla_parse+0x40/0x60
[ 1254.379718][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1254.386066][   T31]  ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0
[ 1254.392727][   T31]  tipc_nl_bearer_disable+0x17/0x40
[ 1254.398082][   T31]  genl_family_rcv_msg_doit+0x212/0x300
[ 1254.403820][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1254.410174][   T31]  genl_rcv_msg+0x60e/0x790
[ 1254.414708][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1254.419761][   T31]  ? __pfx_tipc_nl_bearer_disable+0x10/0x10
[ 1254.425703][   T31]  ? __asan_memcpy+0x40/0x70
[ 1254.430347][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1254.435745][   T31]  ? __skb_clone+0x63/0x7a0
[ 1254.440297][   T31]  netlink_rcv_skb+0x205/0x470
[ 1254.445076][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1254.450166][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1254.455947][   T31]  ? lock_release+0x4b/0x3e0
[ 1254.460581][   T31]  ? down_read+0x1ad/0x2e0
[ 1254.465033][   T31]  genl_rcv+0x28/0x40
[ 1254.469054][   T31]  netlink_unicast+0x82c/0x9e0
[ 1254.473826][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1254.479150][   T31]  ? netlink_sendmsg+0x642/0xb30
[ 1254.484100][   T31]  ? skb_put+0x11b/0x210
[ 1254.488365][   T31]  netlink_sendmsg+0x805/0xb30
[ 1254.493137][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1254.498763][   T31]  ? futex_unqueue+0x22/0x240
[ 1254.503457][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1254.508633][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1254.513935][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1254.519514][   T31]  __sock_sendmsg+0x21c/0x270
[ 1254.524386][   T31]  ____sys_sendmsg+0x505/0x830
[ 1254.529247][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1254.534730][   T31]  ? import_iovec+0x74/0xa0
[ 1254.539274][   T31]  ___sys_sendmsg+0x21f/0x2a0
[ 1254.543963][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1254.549213][   T31]  ? futex_wait+0x285/0x360
[ 1254.553734][   T31]  ? __fget_files+0x2a/0x420
[ 1254.558366][   T31]  ? __fget_files+0x3a0/0x420
[ 1254.563065][   T31]  __x64_sys_sendmsg+0x19b/0x260
[ 1254.568053][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1254.573532][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1254.578361][   T31]  do_syscall_64+0xfa/0x3b0
[ 1254.583018][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.589113][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1254.593821][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.600019][   T31] RIP: 0033:0x7fd8f3b8ebe9
[ 1254.604451][   T31] RSP: 002b:00007fd8f4a90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1254.613251][   T31] RAX: ffffffffffffffda RBX: 00007fd8f3db5fa0 RCX: 00007fd8f3b8ebe9
[ 1254.621307][   T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[ 1254.629494][   T31] RBP: 00007fd8f3c11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1254.637475][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1254.645501][   T31] R13: 00007fd8f3db6038 R14: 00007fd8f3db5fa0 R15: 00007fff92ac6a18
[ 1254.653534][   T31]  </TASK>
[ 1254.656581][   T31] INFO: task syz.9.8462:13217 blocked for more than 146 seconds.
[ 1254.664393][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1254.671546][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1254.680349][   T31] task:syz.9.8462      state:D stack:24456 pid:13217 tgid:13217 ppid:12048  task_flags:0x400040 flags:0x00004004
[ 1254.692315][   T31] Call Trace:
[ 1254.695585][   T31]  <TASK>
[ 1254.698719][   T31]  __schedule+0x1798/0x4cc0
[ 1254.703512][   T31]  ? kasan_save_stack+0x3e/0x60
[ 1254.708521][   T31]  ? __fput_deferred+0x154/0x390
[ 1254.713644][   T31]  ? fput_close+0x119/0x200
[ 1254.718330][   T31]  ? __se_sys_close_range+0x359/0x650
[ 1254.723713][   T31]  ? do_syscall_64+0xfa/0x3b0
[ 1254.728559][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.734645][   T31]  ? __pfx___schedule+0x10/0x10
[ 1254.739730][   T31]  ? schedule+0x91/0x360
[ 1254.743980][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1254.748813][   T31]  ? lock_release+0x4b/0x3e0
[ 1254.753411][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1254.759443][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1254.765795][   T31]  schedule+0x165/0x360
[ 1254.769971][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1254.775433][   T31]  __mutex_lock+0x7e6/0x1360
[ 1254.780079][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1254.784899][   T31]  ? tun_chr_close+0x3e/0x1c0
[ 1254.789613][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1254.794659][   T31]  ? __pfx_tun_chr_close+0x10/0x10
[ 1254.799830][   T31]  tun_chr_close+0x3e/0x1c0
[ 1254.804619][   T31]  __fput+0x449/0xa70
[ 1254.808644][   T31]  task_work_run+0x1d4/0x260
[ 1254.813383][   T31]  ? __pfx_task_work_run+0x10/0x10
[ 1254.818561][   T31]  ? __pfx___se_sys_close_range+0x10/0x10
[ 1254.824307][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1254.829118][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1254.833921][   T31]  exit_to_user_mode_loop+0xec/0x110
[ 1254.839377][   T31]  do_syscall_64+0x2bd/0x3b0
[ 1254.844368][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.850655][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1254.855441][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.861449][   T31] RIP: 0033:0x7f900f98ebe9
[ 1254.865872][   T31] RSP: 002b:00007ffcffdfe788 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1254.874315][   T31] RAX: 0000000000000000 RBX: 00007f900fbb7da0 RCX: 00007f900f98ebe9
[ 1254.882322][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1254.890320][   T31] RBP: 00007f900fbb7da0 R08: 0000000000000244 R09: 0000001effdfea7f
[ 1254.898334][   T31] R10: 00007f900fbb7cb0 R11: 0000000000000246 R12: 000000000010d2b4
[ 1254.906504][   T31] R13: 00007f900fbb6360 R14: ffffffffffffffff R15: 00007ffcffdfe8a0
[ 1254.914706][   T31]  </TASK>
[ 1254.917977][   T31] INFO: task syz.9.8462:13218 blocked for more than 146 seconds.
[ 1254.925697][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1254.932831][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1254.941553][   T31] task:syz.9.8462      state:D stack:28368 pid:13218 tgid:13217 ppid:12048  task_flags:0x400040 flags:0x00004004
[ 1254.953543][   T31] Call Trace:
[ 1254.956835][   T31]  <TASK>
[ 1254.959829][   T31]  __schedule+0x1798/0x4cc0
[ 1254.964355][   T31]  ? __pfx___schedule+0x10/0x10
[ 1254.969410][   T31]  ? schedule+0x91/0x360
[ 1254.973649][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1254.978467][   T31]  ? lock_release+0x4b/0x3e0
[ 1254.983068][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1254.989005][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1254.995352][   T31]  schedule+0x165/0x360
[ 1254.999700][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1255.005164][   T31]  __mutex_lock+0x7e6/0x1360
[ 1255.010091][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1255.014907][   T31]  ? genl_rcv_msg+0x10d/0x790
[ 1255.019834][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1255.024871][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1255.030046][   T31]  ? radix_tree_lookup+0x240/0x290
[ 1255.035204][   T31]  genl_rcv_msg+0x10d/0x790
[ 1255.039741][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1255.044776][   T31]  ? ref_tracker_free+0x63a/0x7d0
[ 1255.049838][   T31]  ? __asan_memcpy+0x40/0x70
[ 1255.054440][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1255.059848][   T31]  ? __skb_clone+0x63/0x7a0
[ 1255.064362][   T31]  netlink_rcv_skb+0x205/0x470
[ 1255.069180][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1255.074222][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1255.079752][   T31]  ? lock_release+0x4b/0x3e0
[ 1255.084363][   T31]  ? down_read+0x1ad/0x2e0
[ 1255.088834][   T31]  genl_rcv+0x28/0x40
[ 1255.092829][   T31]  netlink_unicast+0x82c/0x9e0
[ 1255.097635][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1255.102923][   T31]  ? netlink_sendmsg+0x642/0xb30
[ 1255.107907][   T31]  ? skb_put+0x11b/0x210
[ 1255.112383][   T31]  netlink_sendmsg+0x805/0xb30
[ 1255.117229][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1255.122730][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1255.127756][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1255.133079][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1255.138413][   T31]  __sock_sendmsg+0x21c/0x270
[ 1255.143110][   T31]  __sys_sendto+0x3bd/0x520
[ 1255.147691][   T31]  ? __pfx___sys_sendto+0x10/0x10
[ 1255.152733][   T31]  ? count_memcg_event_mm+0x21/0x260
[ 1255.158090][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[ 1255.163408][   T31]  __x64_sys_sendto+0xde/0x100
[ 1255.168202][   T31]  do_syscall_64+0xfa/0x3b0
[ 1255.172717][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1255.178829][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1255.183516][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1255.189618][   T31] RIP: 0033:0x7f900f990a7c
[ 1255.194043][   T31] RSP: 002b:00007f9010769ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1255.202516][   T31] RAX: ffffffffffffffda RBX: 00007f9010769fc0 RCX: 00007f900f990a7c
[ 1255.210535][   T31] RDX: 0000000000000020 RSI: 00007f901076a010 RDI: 0000000000000004
[ 1255.218833][   T31] RBP: 0000000000000000 R08: 00007f9010769f14 R09: 000000000000000c
[ 1255.226999][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[ 1255.235011][   T31] R13: 00007f9010769f68 R14: 00007f901076a010 R15: 0000000000000000
[ 1255.243144][   T31]  </TASK>
[ 1255.246154][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[ 1255.255218][   T31] INFO: task syz.9.8462:13219 blocked for more than 146 seconds.
[ 1255.262988][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1255.270154][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1255.278854][   T31] task:syz.9.8462      state:D stack:27816 pid:13219 tgid:13217 ppid:12048  task_flags:0x400140 flags:0x00004004
[ 1255.290816][   T31] Call Trace:
[ 1255.294111][   T31]  <TASK>
[ 1255.297296][   T31]  __schedule+0x1798/0x4cc0
[ 1255.301819][   T31]  ? __pfx___schedule+0x10/0x10
[ 1255.306657][   T31]  ? schedule+0x91/0x360
[ 1255.310949][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1255.315936][   T31]  ? lock_release+0x4b/0x3e0
[ 1255.320635][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1255.326703][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1255.333189][   T31]  schedule+0x165/0x360
[ 1255.337398][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1255.342867][   T31]  __mutex_lock+0x7e6/0x1360
[ 1255.347525][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1255.352307][   T31]  ? genl_rcv_msg+0x10d/0x790
[ 1255.357480][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1255.362512][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1255.367664][   T31]  ? radix_tree_lookup+0x240/0x290
[ 1255.372805][   T31]  genl_rcv_msg+0x10d/0x790
[ 1255.377360][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1255.382398][   T31]  ? ref_tracker_free+0x63a/0x7d0
[ 1255.387452][   T31]  ? __asan_memcpy+0x40/0x70
[ 1255.392055][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1255.397534][   T31]  ? __skb_clone+0x63/0x7a0
[ 1255.402507][   T31]  netlink_rcv_skb+0x205/0x470
[ 1255.407501][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1255.412545][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1255.418161][   T31]  ? lock_release+0x4b/0x3e0
[ 1255.422770][   T31]  ? down_read+0x1ad/0x2e0
[ 1255.427410][   T31]  genl_rcv+0x28/0x40
[ 1255.431410][   T31]  netlink_unicast+0x82c/0x9e0
[ 1255.436163][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1255.441502][   T31]  ? netlink_sendmsg+0x642/0xb30
[ 1255.446447][   T31]  ? skb_put+0x11b/0x210
[ 1255.450735][   T31]  netlink_sendmsg+0x805/0xb30
[ 1255.455540][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1255.460894][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1255.465857][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1255.471211][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1255.476527][   T31]  __sock_sendmsg+0x21c/0x270
[ 1255.481310][   T31]  __sys_sendto+0x3bd/0x520
[ 1255.485826][   T31]  ? __pfx___sys_sendto+0x10/0x10
[ 1255.490911][   T31]  ? count_memcg_event_mm+0x21/0x260
[ 1255.496231][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[ 1255.501553][   T31]  __x64_sys_sendto+0xde/0x100
[ 1255.506309][   T31]  do_syscall_64+0xfa/0x3b0
[ 1255.510866][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1255.517195][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1255.522106][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1255.528216][   T31] RIP: 0033:0x7f900f990a7c
[ 1255.532643][   T31] RSP: 002b:00007f9010748ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1255.541134][   T31] RAX: ffffffffffffffda RBX: 00007f9010748fc0 RCX: 00007f900f990a7c
[ 1255.549163][   T31] RDX: 0000000000000020 RSI: 00007f9010749010 RDI: 0000000000000003
[ 1255.557184][   T31] RBP: 0000000000000000 R08: 00007f9010748f14 R09: 000000000000000c
[ 1255.565157][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1255.573202][   T31] R13: 00007f9010748f68 R14: 00007f9010749010 R15: 0000000000000000
[ 1255.581241][   T31]  </TASK>
[ 1255.584388][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[ 1255.593462][   T31] INFO: task syz.9.8462:13220 blocked for more than 146 seconds.
[ 1255.601236][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1255.608403][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1255.617128][   T31] task:syz.9.8462      state:D stack:27112 pid:13220 tgid:13217 ppid:12048  task_flags:0x400140 flags:0x00004006
[ 1255.629920][   T31] Call Trace:
[ 1255.633424][   T31]  <TASK>
[ 1255.636372][   T31]  __schedule+0x1798/0x4cc0
[ 1255.641019][   T31]  ? __pfx___schedule+0x10/0x10
[ 1255.645899][   T31]  ? schedule+0x91/0x360
[ 1255.650179][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1255.654970][   T31]  ? lock_release+0x4b/0x3e0
[ 1255.659623][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1255.665536][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1255.671890][   T31]  schedule+0x165/0x360
[ 1255.676052][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1255.681547][   T31]  __mutex_lock+0x7e6/0x1360
[ 1255.686146][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1255.690944][   T31]  ? genl_rcv_msg+0x10d/0x790
[ 1255.695648][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1255.700730][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1255.705883][   T31]  ? radix_tree_lookup+0x240/0x290
[ 1255.711031][   T31]  genl_rcv_msg+0x10d/0x790
[ 1255.715565][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1255.720656][   T31]  ? ref_tracker_free+0x63a/0x7d0
[ 1255.725923][   T31]  ? __asan_memcpy+0x40/0x70
[ 1255.730594][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1255.736133][   T31]  ? __skb_clone+0x63/0x7a0
[ 1255.740861][   T31]  netlink_rcv_skb+0x205/0x470
[ 1255.745649][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1255.750967][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1255.756285][   T31]  ? lock_release+0x4b/0x3e0
[ 1255.761002][   T31]  ? down_read+0x1ad/0x2e0
[ 1255.765807][   T31]  genl_rcv+0x28/0x40
[ 1255.769954][   T31]  netlink_unicast+0x82c/0x9e0
[ 1255.774744][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1255.780097][   T31]  ? netlink_sendmsg+0x642/0xb30
[ 1255.785050][   T31]  ? skb_put+0x11b/0x210
[ 1255.789344][   T31]  netlink_sendmsg+0x805/0xb30
[ 1255.794130][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1255.799660][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1255.804625][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1255.810047][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1255.815396][   T31]  __sock_sendmsg+0x21c/0x270
[ 1255.820173][   T31]  __sys_sendto+0x3bd/0x520
[ 1255.825033][   T31]  ? __pfx___sys_sendto+0x10/0x10
[ 1255.830158][   T31]  ? count_memcg_event_mm+0x21/0x260
[ 1255.835616][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[ 1255.840966][   T31]  __x64_sys_sendto+0xde/0x100
[ 1255.845759][   T31]  do_syscall_64+0xfa/0x3b0
[ 1255.850474][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1255.857205][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1255.861900][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1255.868154][   T31] RIP: 0033:0x7f900f990a7c
[ 1255.872586][   T31] RSP: 002b:00007f9010727ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1255.881401][   T31] RAX: ffffffffffffffda RBX: 00007f9010727fc0 RCX: 00007f900f990a7c
[ 1255.889576][   T31] RDX: 0000000000000020 RSI: 00007f9010728010 RDI: 0000000000000003
[ 1255.897752][   T31] RBP: 0000000000000000 R08: 00007f9010727f14 R09: 000000000000000c
[ 1255.905734][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1255.913773][   T31] R13: 00007f9010727f68 R14: 00007f9010728010 R15: 0000000000000000
[ 1255.921803][   T31]  </TASK>
[ 1255.924816][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[ 1255.934246][   T31] INFO: task syz.9.8462:13221 blocked for more than 147 seconds.
[ 1255.942261][   T31]       Not tainted 6.17.0-rc1-next-20250814-syzkaller #0
[ 1255.949440][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1255.958442][   T31] task:syz.9.8462      state:D stack:27816 pid:13221 tgid:13217 ppid:12048  task_flags:0x400140 flags:0x00004004
[ 1255.970443][   T31] Call Trace:
[ 1255.973736][   T31]  <TASK>
[ 1255.976699][   T31]  __schedule+0x1798/0x4cc0
[ 1255.981242][   T31]  ? __pfx___schedule+0x10/0x10
[ 1255.986097][   T31]  ? schedule+0x91/0x360
[ 1255.990397][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1255.995190][   T31]  ? lock_release+0x4b/0x3e0
[ 1255.999833][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1256.005827][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1256.012186][   T31]  schedule+0x165/0x360
[ 1256.016334][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1256.021810][   T31]  __mutex_lock+0x7e6/0x1360
[ 1256.026408][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1256.031503][   T31]  ? genl_rcv_msg+0x10d/0x790
[ 1256.036227][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1256.041540][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1256.046712][   T31]  ? radix_tree_lookup+0x240/0x290
[ 1256.051837][   T31]  genl_rcv_msg+0x10d/0x790
[ 1256.056336][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1256.061397][   T31]  ? ref_tracker_free+0x63a/0x7d0
[ 1256.066438][   T31]  ? __asan_memcpy+0x40/0x70
[ 1256.071305][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1256.076717][   T31]  ? __skb_clone+0x63/0x7a0
[ 1256.081247][   T31]  netlink_rcv_skb+0x205/0x470
[ 1256.086020][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1256.091085][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1256.096388][   T31]  ? lock_release+0x4b/0x3e0
[ 1256.101014][   T31]  ? down_read+0x1ad/0x2e0
[ 1256.105453][   T31]  genl_rcv+0x28/0x40
[ 1256.109475][   T31]  netlink_unicast+0x82c/0x9e0
[ 1256.114262][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1256.119605][   T31]  ? netlink_sendmsg+0x642/0xb30
[ 1256.124559][   T31]  ? skb_put+0x11b/0x210
[ 1256.128850][   T31]  netlink_sendmsg+0x805/0xb30
[ 1256.133858][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1256.139202][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1256.144287][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1256.149662][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1256.154957][   T31]  __sock_sendmsg+0x21c/0x270
[ 1256.159669][   T31]  __sys_sendto+0x3bd/0x520
[ 1256.164181][   T31]  ? __pfx___sys_sendto+0x10/0x10
[ 1256.169274][   T31]  ? count_memcg_event_mm+0x21/0x260
[ 1256.174590][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[ 1256.180091][   T31]  __x64_sys_sendto+0xde/0x100
[ 1256.184906][   T31]  do_syscall_64+0xfa/0x3b0
[ 1256.189717][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1256.195808][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1256.200540][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1256.206483][   T31] RIP: 0033:0x7f900f990a7c
[ 1256.210903][   T31] RSP: 002b:00007f900d7f2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1256.219376][   T31] RAX: ffffffffffffffda RBX: 00007f900d7f2fc0 RCX: 00007f900f990a7c
[ 1256.227414][   T31] RDX: 0000000000000020 RSI: 00007f900d7f3010 RDI: 0000000000000003
[ 1256.235765][   T31] RBP: 0000000000000000 R08: 00007f900d7f2f14 R09: 000000000000000c
[ 1256.243806][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 1256.252023][   T31] R13: 00007f900d7f2f68 R14: 00007f900d7f3010 R15: 0000000000000000
[ 1256.260073][   T31]  </TASK>
[ 1256.263114][   T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[ 1256.272230][   T31] INFO: lockdep is turned off.
[ 1256.277162][   T31] NMI backtrace for cpu 0
[ 1256.277177][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) 
[ 1256.277198][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1256.277209][   T31] Call Trace:
[ 1256.277217][   T31]  <TASK>
[ 1256.277224][   T31]  dump_stack_lvl+0x189/0x250
[ 1256.277255][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1256.277280][   T31]  ? __pfx__printk+0x10/0x10
[ 1256.277310][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1256.277335][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1256.277361][   T31]  ? __pfx__printk+0x10/0x10
[ 1256.277386][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1256.277409][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1256.277435][   T31]  watchdog+0xf60/0xfa0
[ 1256.277454][   T31]  ? watchdog+0x1e2/0xfa0
[ 1256.277473][   T31]  kthread+0x711/0x8a0
[ 1256.277489][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1256.277506][   T31]  ? __pfx_kthread+0x10/0x10
[ 1256.277532][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1256.277558][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1256.277574][   T31]  ? __pfx_kthread+0x10/0x10
[ 1256.277600][   T31]  ret_from_fork+0x3f9/0x770
[ 1256.277623][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1256.277647][   T31]  ? __switch_to_asm+0x39/0x70
[ 1256.277663][   T31]  ? __switch_to_asm+0x33/0x70
[ 1256.277678][   T31]  ? __pfx_kthread+0x10/0x10
[ 1256.277704][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1256.277727][   T31]  </TASK>
[ 1256.277733][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1256.425319][    C1] NMI backtrace for cpu 1
[ 1256.425335][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) 
[ 1256.425352][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1256.425363][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1256.425383][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 1a 25 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1256.425396][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[ 1256.425411][    C1] RAX: 3c8acbd6bbb6ef00 RBX: ffffffff8196d368 RCX: 3c8acbd6bbb6ef00
[ 1256.425423][    C1] RDX: 0000000000000001 RSI: ffffffff8c04d960 RDI: ffffffff8196d368
[ 1256.425433][    C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3
[ 1256.425461][    C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fe4db30
[ 1256.425473][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a56b40
[ 1256.425484][    C1] FS:  0000000000000000(0000) GS:ffff8881258d6000(0000) knlGS:0000000000000000
[ 1256.425497][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1256.425508][    C1] CR2: 00005555f72bd000 CR3: 000000000e336000 CR4: 00000000003526f0
[ 1256.425523][    C1] Call Trace:
[ 1256.425530][    C1]  <TASK>
[ 1256.425536][    C1]  default_idle+0x13/0x20
[ 1256.425555][    C1]  default_idle_call+0x74/0xb0
[ 1256.425575][    C1]  do_idle+0x1e8/0x510
[ 1256.425596][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1256.425619][    C1]  ? do_idle+0xc/0x510
[ 1256.425638][    C1]  cpu_startup_entry+0x44/0x60
[ 1256.425657][    C1]  start_secondary+0x101/0x110
[ 1256.425675][    C1]  common_startup_64+0x13e/0x147
[ 1256.425696][    C1]  </TASK>
[ 1256.426456][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1256.426476][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) 
[ 1256.426503][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1256.426518][   T31] Call Trace:
[ 1256.426529][   T31]  <TASK>
[ 1256.426539][   T31]  dump_stack_lvl+0x99/0x250
[ 1256.426577][   T31]  ? __asan_memcpy+0x40/0x70
[ 1256.426611][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1256.426644][   T31]  ? __pfx__printk+0x10/0x10
[ 1256.426684][   T31]  vpanic+0x281/0x750
[ 1256.426713][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1256.426739][   T31]  ? preempt_schedule+0xae/0xc0
[ 1256.426763][   T31]  ? preempt_schedule_common+0x83/0xd0
[ 1256.426788][   T31]  panic+0xb9/0xc0
[ 1256.426814][   T31]  ? __pfx_panic+0x10/0x10
[ 1256.426841][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1256.426873][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1256.426907][   T31]  watchdog+0xf9f/0xfa0
[ 1256.426932][   T31]  ? watchdog+0x1e2/0xfa0
[ 1256.426957][   T31]  kthread+0x711/0x8a0
[ 1256.426991][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1256.427014][   T31]  ? __pfx_kthread+0x10/0x10
[ 1256.427049][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1256.427084][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1256.427106][   T31]  ? __pfx_kthread+0x10/0x10
[ 1256.427140][   T31]  ret_from_fork+0x3f9/0x770
[ 1256.427170][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1256.427203][   T31]  ? __switch_to_asm+0x39/0x70
[ 1256.427223][   T31]  ? __switch_to_asm+0x33/0x70
[ 1256.427244][   T31]  ? __pfx_kthread+0x10/0x10
[ 1256.427278][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1256.427308][   T31]  </TASK>
[ 1256.751334][   T31] Kernel Offset: disabled
[ 1256.755653][   T31] Rebooting in 86400 seconds..