last executing test programs:

10m10.913388251s ago: executing program 1 (id=447):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000001800000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010c0006"], 0x98}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)

10m10.648229342s ago: executing program 1 (id=449):
socket(0x15, 0x2, 0x100)
mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x208002, 0x0)

10m10.50240831s ago: executing program 1 (id=452):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) (async)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil)
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, 0x0) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) (async)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r3, 0x0, 0x27, 0x8}) (async)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@cpuid={0x2, 0x18, {0x4, 0x1}}, @code={0x1, 0x0, {"66baa000ed410f01820d0000003666400f3881294c0fc79a0c000000c402a9b6b988c50000360f01d166b86a008ec83e0fc768ba363e3666460f3831490066b81b008ee8"}}], 0xfffffffffffffdda})
ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)={0x8000000, 0x2, 0xf, 0x1d, 0x4})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) (async)
sendto$inet6(r5, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x149882, 0x8)
write$sysctl(r6, &(0x7f0000000040)='1\x00', 0x2)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
fadvise64(r7, 0x65f, 0x2, 0x5) (async)
connect$caif(r6, &(0x7f0000000100)=@dbg={0x25, 0xf2, 0x7}, 0x18) (async)
ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000280)={0x28, 0x0, r3, 0x0, &(0x7f0000000140)="8a645892a76864937c40faa4bdaab4cae7aa2a672de88653b7", 0x19, 0x8}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r9, 0x0, 0x5, 0x1000000000005}) (async)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r9, 0x0, 0xfffffffffffffffd, 0x2000000000000004}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r9, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) (async)
socket$inet6(0xa, 0x1, 0x6)

10m10.148559709s ago: executing program 1 (id=457):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0xc001, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000100)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000380)="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", 0x1000, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001380)={&(0x7f00000001c0)="75cfeec488e3d5b86486fa2a3f7f2471b09a615bb129d200c600b8dee1871ea71934bfbf875c1cd18afe2df198875b0c4165a9d5ff4e16e4ccc14a6c743bf8d9586c42fe511eef6a475087a093c07fed2af8f9465966d5897200068b4358f485f3d2dbefd0d4d29120830e4da95660f8475bb3576b71fdb0f44c196172910485ba358651db2db612bbc568f19ab1db5647124964fdc62abce1740df2c459f4a15eada9ae3d19a99b707b7d2f334744", 0xaf, <r4=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000001440)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000001480)={r5})
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001400)={&(0x7f00000013c0)=[r2, r3, r4], 0x3, 0x800, 0x0, <r7=>0xffffffffffffffff})
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = pidfd_getfd(r7, r1, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGSKNS(r11, 0x894c, 0x0)
close(r10)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r12=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r12, 0x0, <r13=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r13})
preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1b5080, 0x0)

10m9.94103411s ago: executing program 1 (id=459):
r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='2', 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'cpu'}]}, 0x5)
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, r2, &(0x7f0000000180))
r4 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000200)='stack\x00')
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
write(r6, &(0x7f0000000300)="1c1594576698b1de94d55abc61ac9d7ec57f952edc800f2c643d95215a160f6a3618c424142adc9197812e2fd8c5c6665d0b5e1e191e0862560a4de2e0", 0x3d)
readv(r5, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)={0x0, <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180)={0x0, <r9=>0x0}, &(0x7f0000000bc0)=0xc)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r9}]}, 0x1c}}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={<r10=>0x0}, &(0x7f0000000500)=0xc)
statx(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup\x00', 0x100, 0xd0947919f67215b8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r12, 0x0)
sendmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f0000000200)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000280)="79fad1b55bdccefea43f0d2671ce73d443a8645af8d799bceb2c8cc0f391f3c074a2cb173e1922fce780bbd15f1d4750dc0c1b3333c3369d4ff9a1bc1eeaaffc44781798941b8f4f00f53606c2236024062fde18d10508e863d4b579bfc79834d5053822357e38d8e43ab1ea0acbf9d31318e7ab5569503ff3e9d64a64", 0x7d}, {&(0x7f0000000080)}, {&(0x7f0000000300)="e4d2754b0b57cbc8215625c0b375a5c1fb5e66868b8a6b843c72e110f5ce5ee8aa5890443f2f525ce653f5130b942edee4ad1455b5df51404fb8257862594dec4d0b5584c8697965fc201aa251069f73ef80e0cac614c3dcda055e897efc882538b8dfd2bd3ec770f1e4ae7e55280c02904871b912aafc7a719742a5988941fc2131775872f11c47872f6ddfcbe31dcedbac38f0602c847f0b8cbb1d1e6c2eb74187ab1893055c27691dab4469216d86a1495d9ed48ca3ef10c04e2216a24ef93b63061dad202f0e4d3cfbb8551177d4670eff1ff2841305423a425d0b7b9cc69cb327a8ce47d64be2f728c56341e8b9a5", 0xf1}], 0x3, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r7, r9, r3}}}, @cred={{0x1c, 0x1, 0x2, {r10, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r11}}}], 0x60, 0x40}}, {{&(0x7f0000000700)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="67e72eeb2710951a00ffb347608f572785d16a0483df635068cdfc686fe763922dad574cf3379fb697d441b9c8c452", 0x2f}], 0x1, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r12, r2, r3}}}], 0x40, 0x20040000}}], 0x2, 0x4040040)
mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x300808, 0x0)

10m8.524973567s ago: executing program 1 (id=468):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000000)={0x6, [0x8, 0x6, 0x10001, 0xfffffffffffffffb, 0x7, 0xd3b]})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x538, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xaa74, 0xf523, 0x8000, 0x8000, 0x101, 0x77d, 0x40]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7339, 0xca91, 0xffff, 0xfff8, 0xc, 0x6, 0x4, 0xbd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x9620, 0xe24, 0xff81, 0xb, 0x9, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa2be, 0x9, 0x5, 0x3ff, 0x4, 0x9, 0x9, 0xff51]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x36, 0xb, 0x1, 0x12, 0x4, 0x36, 0x36, 0x60, 0x1, 0xb, 0x6, 0x9, 0x5, 0x9, 0x48, 0xc, 0xb, 0x6, 0x1, 0x67, 0x2d, 0x5, 0x0, 0x3, 0x4, 0x5, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x1, 0x3, 0x6, 0xaa1, 0x7, 0x9]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x24, 0x6, 0x4, 0x16, 0x6, 0x2, 0x76, 0x6f, 0x2d, 0x12, 0x1b, 0x30, 0x24, 0x5, 0x1b, 0x2, 0x1b, 0x6c, 0x36, 0x12, 0x4a, 0x4, 0x36, 0x5, 0x48, 0x18, 0x36, 0x36, 0x16]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x1, 0x24, 0x30, 0x18, 0x9, 0x6c, 0xb, 0x30, 0x6c]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0xc, 0x8, 0x24, 0xc, 0xaa78ea94c6611732, 0x12, 0x48, 0x24, 0x0, 0x3, 0x2, 0x16, 0x30, 0x6, 0x48, 0x15, 0xc, 0x1b, 0x24, 0x1b, 0x1b, 0x16, 0x2, 0x48, 0x48]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x1}, {0x0, 0xa}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x1}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x1}, {0x6, 0x3}, {0x2, 0x2}, {0x2, 0x6}, {}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x8}, {0x7, 0x5}, {0x7, 0x8}, {0x5, 0x2}, {0x4, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x36, 0x36, 0x32, 0x1b, 0x16, 0xb, 0x6, 0x12, 0x30, 0x4, 0xc, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x1ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x4, 0x2, 0x3c, 0x2, 0x3, 0x60, 0x30, 0xb, 0x2, 0x1, 0x24, 0x12, 0x4, 0x2, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffba, 0x8, 0xfff, 0x3, 0x2, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x6, 0x0, 0x5313, 0x0, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x6, 0x5, 0x2, 0x2, 0x2, 0x5fca]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x4, 0x9, 0x416, 0x3, 0x3, 0xfff7, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x1, 0x17, 0x7, 0x2, 0x4871, 0x536, 0xffb8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x9, 0x0, 0x6, 0x728, 0x1ff, 0x1ff]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1}, {0x1}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x6}, {0x6, 0x2}, {0x4}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {0x2, 0x1}, {}, {0x0, 0x8}, {0x6, 0x6}, {0x2, 0x5}, {0x3, 0x7}, {0x5, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x3}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0x7}, {0x7, 0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x6}, {0x2, 0x5}, {0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0x5}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3f, 0x8, 0x8, 0x1, 0xfd7a, 0x4, 0x4c, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x1000, 0xe, 0xbd, 0x5, 0x800, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0xa56d, 0x2fd8, 0xff, 0x4, 0x4, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe7, 0xa, 0x2, 0x4, 0x9, 0xf02b, 0xe26, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xda, 0x5, 0x9, 0x7, 0x6, 0x1b, 0x795]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x3, 0x864, 0x2, 0x1ff, 0x7ff, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfffb, 0xfffd, 0xf, 0x7, 0x0, 0x5, 0xfffd]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x225, 0xa44, 0xfffe, 0x7, 0x9, 0x2, 0xc86]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xe5dd, 0x6, 0x318, 0xc, 0x0, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x3, 0x0, 0x0, 0x100, 0x2ff2, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x25, 0x3, 0x3, 0x3bb2, 0x2, 0x100, 0x2, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x16, 0x5, 0x3, 0x4, 0x4, 0x24, 0x60, 0x6c, 0x5, 0x4, 0x48, 0x1, 0xc, 0xc, 0x5, 0xc, 0x18, 0x6, 0x1b, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x0, 0x1000, 0x0, 0x5ac, 0x45, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1d, 0x18, 0x12, 0x2, 0x24, 0x69, 0x6, 0x1b, 0xc, 0x12, 0x9, 0x6c, 0x3, 0x2, 0x6c, 0x7a, 0xb, 0x12, 0x24, 0x60, 0x60, 0x5, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x5, 0x40, 0x0, 0x8000, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xff81, 0x5, 0x2, 0x6, 0x7, 0x1, 0x4d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x5, 0x9, 0x101, 0x8b2b, 0x4, 0x1, 0x6]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4c5, 0x5, 0x1, 0x1000, 0x3, 0x3, 0x10]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x3, 0x5}, {0x3}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x3}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x6, 0x1}, {0x7, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x7, 0x4}, {0x5, 0x3}, {0x2, 0x8}, {}, {0x0, 0x7}, {0x3, 0x6}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x7}, {0x2, 0x4}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0xa}, {0x4, 0x5}, {0x1}, {0x4, 0x9}, {0x1, 0x9}, {0x1}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0xa}, {0x1}, {0x5, 0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x4, 0x3}, {0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x3, 0x9}, {0x3, 0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x47b, 0x0, 0x99ce, 0x7, 0x7, 0x6, 0x5, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x47d, 0xfdbc, 0x2, 0x0, 0x2, 0x3, 0x5d1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x4044}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
connect(r4, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80)

9m53.460834178s ago: executing program 32 (id=468):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000000)={0x6, [0x8, 0x6, 0x10001, 0xfffffffffffffffb, 0x7, 0xd3b]})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x538, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xaa74, 0xf523, 0x8000, 0x8000, 0x101, 0x77d, 0x40]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7339, 0xca91, 0xffff, 0xfff8, 0xc, 0x6, 0x4, 0xbd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x9620, 0xe24, 0xff81, 0xb, 0x9, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa2be, 0x9, 0x5, 0x3ff, 0x4, 0x9, 0x9, 0xff51]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x36, 0xb, 0x1, 0x12, 0x4, 0x36, 0x36, 0x60, 0x1, 0xb, 0x6, 0x9, 0x5, 0x9, 0x48, 0xc, 0xb, 0x6, 0x1, 0x67, 0x2d, 0x5, 0x0, 0x3, 0x4, 0x5, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x1, 0x3, 0x6, 0xaa1, 0x7, 0x9]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x24, 0x6, 0x4, 0x16, 0x6, 0x2, 0x76, 0x6f, 0x2d, 0x12, 0x1b, 0x30, 0x24, 0x5, 0x1b, 0x2, 0x1b, 0x6c, 0x36, 0x12, 0x4a, 0x4, 0x36, 0x5, 0x48, 0x18, 0x36, 0x36, 0x16]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x1, 0x24, 0x30, 0x18, 0x9, 0x6c, 0xb, 0x30, 0x6c]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0xc, 0x8, 0x24, 0xc, 0xaa78ea94c6611732, 0x12, 0x48, 0x24, 0x0, 0x3, 0x2, 0x16, 0x30, 0x6, 0x48, 0x15, 0xc, 0x1b, 0x24, 0x1b, 0x1b, 0x16, 0x2, 0x48, 0x48]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x1}, {0x0, 0xa}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x1}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x3}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x1}, {0x6, 0x3}, {0x2, 0x2}, {0x2, 0x6}, {}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x7, 0x8}, {0x7, 0x5}, {0x7, 0x8}, {0x5, 0x2}, {0x4, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x36, 0x36, 0x32, 0x1b, 0x16, 0xb, 0x6, 0x12, 0x30, 0x4, 0xc, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0x1ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x4, 0x2, 0x3c, 0x2, 0x3, 0x60, 0x30, 0xb, 0x2, 0x1, 0x24, 0x12, 0x4, 0x2, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xffba, 0x8, 0xfff, 0x3, 0x2, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ff, 0x6, 0x0, 0x5313, 0x0, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x1, 0x6, 0x5, 0x2, 0x2, 0x2, 0x5fca]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x4, 0x9, 0x416, 0x3, 0x3, 0xfff7, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x1, 0x17, 0x7, 0x2, 0x4871, 0x536, 0xffb8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x9, 0x0, 0x6, 0x728, 0x1ff, 0x1ff]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1}, {0x1}, {0x1, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x6}, {0x6, 0x2}, {0x4}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {0x2, 0x1}, {}, {0x0, 0x8}, {0x6, 0x6}, {0x2, 0x5}, {0x3, 0x7}, {0x5, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x3}, {0x5, 0x6}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0x7}, {0x7, 0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x3}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x6}, {0x2, 0x5}, {0x2}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0x5}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3f, 0x8, 0x8, 0x1, 0xfd7a, 0x4, 0x4c, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x1000, 0xe, 0xbd, 0x5, 0x800, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0xa56d, 0x2fd8, 0xff, 0x4, 0x4, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe7, 0xa, 0x2, 0x4, 0x9, 0xf02b, 0xe26, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xda, 0x5, 0x9, 0x7, 0x6, 0x1b, 0x795]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x3, 0x864, 0x2, 0x1ff, 0x7ff, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfffb, 0xfffd, 0xf, 0x7, 0x0, 0x5, 0xfffd]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x225, 0xa44, 0xfffe, 0x7, 0x9, 0x2, 0xc86]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xe5dd, 0x6, 0x318, 0xc, 0x0, 0x0, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x3, 0x0, 0x0, 0x100, 0x2ff2, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x25, 0x3, 0x3, 0x3bb2, 0x2, 0x100, 0x2, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x16, 0x5, 0x3, 0x4, 0x4, 0x24, 0x60, 0x6c, 0x5, 0x4, 0x48, 0x1, 0xc, 0xc, 0x5, 0xc, 0x18, 0x6, 0x1b, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x0, 0x1000, 0x0, 0x5ac, 0x45, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1d, 0x18, 0x12, 0x2, 0x24, 0x69, 0x6, 0x1b, 0xc, 0x12, 0x9, 0x6c, 0x3, 0x2, 0x6c, 0x7a, 0xb, 0x12, 0x24, 0x60, 0x60, 0x5, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x5, 0x40, 0x0, 0x8000, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xff81, 0x5, 0x2, 0x6, 0x7, 0x1, 0x4d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x5, 0x9, 0x101, 0x8b2b, 0x4, 0x1, 0x6]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4c5, 0x5, 0x1, 0x1000, 0x3, 0x3, 0x10]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x3, 0x5}, {0x3}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x3}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x8}, {0x6, 0x1}, {0x7, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {0x2, 0x8}, {0x7, 0x4}, {0x5, 0x3}, {0x2, 0x8}, {}, {0x0, 0x7}, {0x3, 0x6}, {0x6, 0x5}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x7}, {0x2, 0x4}, {0x0, 0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0xa}, {0x4, 0x5}, {0x1}, {0x4, 0x9}, {0x1, 0x9}, {0x1}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0xa}, {0x1}, {0x5, 0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x4, 0x3}, {0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x3, 0x9}, {0x3, 0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x47b, 0x0, 0x99ce, 0x7, 0x7, 0x6, 0x5, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x47d, 0xfdbc, 0x2, 0x0, 0x2, 0x3, 0x5d1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x4044}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
connect(r4, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80)

6m54.548955243s ago: executing program 4 (id=1943):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000009b000040"])
ioprio_set$pid(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_get$pid(0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80a80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000)
r5 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0x17)

6m54.275885398s ago: executing program 4 (id=1956):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
syz_clone(0x80843711, 0x0, 0xfffffcf7, 0x0, 0x0, 0x0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0)

6m54.127016093s ago: executing program 4 (id=1951):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2a000, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000300), 0x75aeaeb7, 0x0)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000200)={0xa, @win={{0x3, 0xff, 0x9, 0x6}, 0x8, 0x20000, 0x0, 0x80000002, 0x0, 0x9}})
r3 = socket(0x11, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)={0x200, 0x30, 0x900, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x14, 0xfe, 0x0, 0x0, @ipv6=@mcast1}, @generic="0c6f76503bf6d7450e6b2d85697aa4bfa43ad492576374c2d9ff713ef65852faa57ea40dea32e4757e138edae6eeaaaee6afd0a5064b693067230a3b1368ae37847ea6e067199a8edd9c7607bb5b4ee8d7dfab0adca2cc26e5fdb8fe893bd211ae69a61c3e52c52cfaef1c47ebe62994e9a875c37eedf44d0072d69afb3b669d18eb96ee0403b3eb7ebfb487eb9ac767f4ffbb255e1d3347a8", @nested={0x13d, 0xf0, 0x0, 0x1, [@generic="2912c34da4a2df2426dd793fb36492ee77dff921e8719a5152a341f462ce482e9312030dd1e00e5bea646d3d3d75c9224be8c2f7a607b74bf4307c0e3e62783a58f7a9a84033ba134929f75be33b5dc8c91f7c215cbed28d915cde222fe605750fff10e75805fe4e00a07a905778ec2b8a02747329e4c18dc43db97cb0baee77bc580044d524694d7884c2ab90027fd4358eaae72a0222d6b81dd94173ee270b8c188a5c1de11ccafade1781f19f99120b842b3c640cc653427d2287b9ff62ba6eb3c82dd3d2cb1303ee5994ea78fef66e37e1a684629b36020d9f052249d8", @generic="1af7af25e9e942678df06f6bfdbba5ffca219edc9e014df5b8a45c3aeffffa9044c7b6ea438d716e69918512c573245c97d288583877950d33c618d9fe3558e7c0ae70ce04e58e10b6508946a614cfe02c3aa5997dd6", @nested={0x4, 0x146}]}]}, 0x200}], 0x1, 0x0, 0x0, 0x4000}, 0x1)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000600)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}})
sendfile(r1, r0, 0x0, 0xfffc)

6m54.060917286s ago: executing program 4 (id=1952):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffc, 0x6, 0x62, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000ac0)="4b0489452051", 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900})

6m53.990662436s ago: executing program 4 (id=1953):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000500)=0x304000002)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000000)=""/4, 0x4, &(0x7f0000000540)=""/4096, 0x3, 0x1}}, 0x48)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYBLOB="09b97fe7c4735bb4ca4e63ac977e9fab326a5d391039d6da4b28ca288f04aed348"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000040)={0xb, 0x10000})
ppoll(&(0x7f0000000100)=[{r1, 0x1030}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40)

6m50.944894138s ago: executing program 4 (id=1967):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 32)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) (rerun: 32)
write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) (async, rerun: 64)
r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000005c0), 0x8800, 0x0) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x24e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x104, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x40, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x2008040) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="43010807", @ANYRES16=r5, @ANYBLOB="00012dbd7000fcdbdf2503000000050005008000000005000200e5000000"], 0x24}, 0x1, 0x0, 0x0, 0xc815}, 0x840) (async, rerun: 32)
setuid(r3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {<r7=>r3}}, './file0\x00'}) (async)
syz_open_dev$mouse(&(0x7f0000000600), 0x3, 0x80100)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000002c0)=0xe8)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x814080, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB=',obj_type=,smackfsroot=:!$(:-!{{,uid<', @ANYRESDEC=r7, @ANYBLOB="2c7375626a5f747970653d65787404000000000000006469aee7e3d186d9c45d796e85ee6a5a3b3fe5334446cf5579827c435dbf4803c3e1968e79020620aade7a3db0478ff4ce24ccee89ad2920785ea9aee53d20ced3859a624578bc1b5b2cad55fc", @ANYRESDEC=r8, @ANYBLOB=',smackfsdef=:$&,dont_appraise,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',\x00'])
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0)

6m35.89675846s ago: executing program 33 (id=1967):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 32)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) (rerun: 32)
write$cgroup_devices(r1, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) (async, rerun: 64)
r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000005c0), 0x8800, 0x0) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x24e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x104, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x40, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x2008040) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="43010807", @ANYRES16=r5, @ANYBLOB="00012dbd7000fcdbdf2503000000050005008000000005000200e5000000"], 0x24}, 0x1, 0x0, 0x0, 0xc815}, 0x840) (async, rerun: 32)
setuid(r3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {<r7=>r3}}, './file0\x00'}) (async)
syz_open_dev$mouse(&(0x7f0000000600), 0x3, 0x80100)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000002c0)=0xe8)
socket$inet_tcp(0x2, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x814080, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB=',obj_type=,smackfsroot=:!$(:-!{{,uid<', @ANYRESDEC=r7, @ANYBLOB="2c7375626a5f747970653d65787404000000000000006469aee7e3d186d9c45d796e85ee6a5a3b3fe5334446cf5579827c435dbf4803c3e1968e79020620aade7a3db0478ff4ce24ccee89ad2920785ea9aee53d20ced3859a624578bc1b5b2cad55fc", @ANYRESDEC=r8, @ANYBLOB=',smackfsdef=:$&,dont_appraise,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',\x00'])
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0)

4m53.363725058s ago: executing program 2 (id=2891):
syz_clone(0x4200011, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="05000000010000", 0x7)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x3e00, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_loaded', 0xc0001, 0x14)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000140)=""/189, &(0x7f0000000200)=0xbd)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)

4m53.102853852s ago: executing program 2 (id=2892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000003000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0)

4m52.997615441s ago: executing program 2 (id=2893):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000005980)={0x0, 0x0, &(0x7f0000005940)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0xf5ffffff}, 0x4040800)

4m52.981278451s ago: executing program 2 (id=2894):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
sendmmsg$inet6(r1, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x5, @loopback, 0x22}, 0xfd7f, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}], 0x1, 0x14018891)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="150000e9", @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) (async)
write$binfmt_misc(r4, &(0x7f00000004c0), 0x0) (async)
recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x2040, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32)
mount$overlay(0x0, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000480), 0x1020802, &(0x7f0000000680)={[{@verity_on}, {@redirect_dir_off}, {@nfs_export_on}], [{@flag='mand'}, {@audit}, {@euid_lt}, {@audit}, {@fowner_eq}]}) (async, rerun: 32)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 64)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async, rerun: 64)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) (async)
sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0), &(0x7f0000000140)=0x4)

4m52.907322542s ago: executing program 2 (id=2895):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30097}}], 0x300, 0xf00)

4m52.72549894s ago: executing program 2 (id=2896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000020000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010c0006"], 0x98}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)

4m52.592762994s ago: executing program 34 (id=2896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000020000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010c0006"], 0x98}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)

2m13.974486597s ago: executing program 5 (id=4263):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0x9)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d480e8b089b3f350068090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e8040000005802b77f07227227b7fa67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e9871540000000000004ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e4843e2808d4743b95bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c6f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20e8911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab9d6203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edcad74b221cfec48000000000000000d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea50000000000000068987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c10900df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d8008d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c46bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78bb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba1a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bf340b17cfcfd9c52c9711937f79abb1a124f121fc65483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4f01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8650000878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95a498b562d71565f924779ca1f731b3346ff177050373d79ff7bc1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f79a598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015a08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b686081b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24ae918423922e4e0167584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f13a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307f561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r2 = socket$inet(0x2, 0x3, 0x4)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000380)={0x2, 0x4e01, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}}], 0x1, 0xe000)
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000080)={0x5, 0x8, 0x28b7, 0x5, 0x6})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f626174616476006c00038068000380600001805c000200005107933aae57150df02ff70f377bca71bd681a9c1e8a4974d4"], 0x98}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={'gre0\x00', <r3=>0x0, 0x7, 0x1, 0x6, 0x800, {{0x20, 0x4, 0x2, 0x2a, 0x80, 0x65, 0x0, 0x8c, 0x4, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0x19, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x4}, {@local, 0x5}, {@remote, 0x8}, {@multicast2, 0xfffffffd}, {@remote, 0x7}]}, @generic={0x7, 0x6, "d2514755"}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x1b, 0xf6, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @private=0xa010101]}, @rr={0x7, 0x17, 0x72, [@dev={0xac, 0x14, 0x14, 0x33}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1]}]}}}}})
r4 = socket(0x11, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004}, 0x4020)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x5)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x903]}, 0x8, 0x800)
socket(0x10, 0x3, 0x0)
r9 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
r10 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r10, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x40180, 0x0)
syz_usb_control_io$cdc_ncm(r9, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f00000000c0)={0xa, {0x8, 0x81, 0x3}}, 0xa)
syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r9])
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002040)=ANY=[@ANYBLOB="1400000010000100000000000028000000120a0102"], 0x50}}, 0x0)
r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x22052, r12, 0x2000)

2m11.665364829s ago: executing program 5 (id=4278):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0xc}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x88c0}, 0x40805)
sendmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)="0fff3f", 0x3}], 0x1, 0x0, 0x0, 0x80000}}], 0x1, 0x4000)

2m11.567606868s ago: executing program 5 (id=4279):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc02c5341, &(0x7f0000000200)={{}, {0x0, 0x4}})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_open_dev$evdev(&(0x7f00000006c0), 0x9, 0x40000)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendmmsg$inet6(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cefe", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="2400000000005f543ab7fe1391861c93d015d90e0000290000003200"/46, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x4400c800)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="01ec8f063e0df011953874bb7d4ceb00"/34], 0x1c}}, 0x0) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40104593, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async)
io_setup(0x7, &(0x7f0000000080)=<r5=>0x0)
io_destroy(r5) (async)
io_pgetevents(r5, 0x3, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0xbc51, 0x101, 0x5, 0x4b, 0x1, 0x6, 0x4}, 0x1c)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0)
pread64(r6, &(0x7f00000000c0)=""/70, 0x46, 0x2b) (async)
r7 = socket$inet6(0xa, 0x2, 0x0) (async)
io_setup(0x6, &(0x7f0000000180)=<r8=>0x0)
io_submit(r8, 0x4, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f00000015c0)="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", 0x1000, 0x614, 0x0, 0x0, r6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f0000000300)="4143bbcdccd24a1562e2a4df3acc72d6eb03df4ed7ea7f459ea0dde7e1d99b5152efe24e65b8441766063493ab06cbe27b4ceddde345adad087c81541ea0366a53b90cc5e4fa370d00924012a2b36d2cdc8a161db83c990008fb0c703f0613", 0x5f, 0xa, 0x0, 0x1, r6}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x5e9, r1, &(0x7f00000004c0)="9c57901521112c1e4e94c877ce5064e2ed94cf18cb71349891dc40c60925f2dbecaf0d6417e75b9a0025a68f4b5a78b06a0a5e51edfe50a2f8fb4826963f14aeacbf890b83a17767a83f8bae012ac3553eaec4aab452c2873ab622e79a888474a0f8ffe0c4c1352714714e6384097d9362c71994c187074a2514c7078b3c75b4239ee37dd67fa9cecff6640181930a58fe1a3b", 0x93, 0xe, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f0000000600)="0b1164ee205d59b208cb6ad1e63c1cf5582ac76a5d06b101382ab5effaea1cef30d87d1557ee104db7d6115db9030601c4e9b4b34dab7d03fa842bdc93a1cf375f2ee20d3e67236221bf43aa7fd2ba6ebac231f21a21b753762a", 0x5a, 0x8, 0x0, 0x1, r1}])
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async)
r10 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x8000, &(0x7f0000000400)={0xa, 0x4e20, 0x800, @mcast2, 0xc}, 0x1c) (async)
recvmmsg(r7, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x400017a, 0x40000002, 0x0)

2m11.405422735s ago: executing program 5 (id=4280):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x12002, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000040))
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r4, 0x6}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r4}, &(0x7f00000021c0)=0x8)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$cgroup_ro(r0, &(0x7f0000002180)='cpu.stat\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_DIRENT(r5, &(0x7f0000002200)=ANY=[@ANYBLOB="1000000000000000d8ff736aaf87691936b20d45fe376d68c3943bd09accc3c182df115a164c433a0a189ae3f118a1c81d81ff4a1f81b4d3a95f16b318c7a2f34650c99a4a6f36a950aa0608af91584256f9ed8373cbe33428531bd50aca59ee47855350dfbcc883e234b1d4e46f287322241d1f3c6949336ed2f8bfb92722c054879fc374cfe7ef497d8048961c71864ee98d2f42062da289a245edff6321d9", @ANYRES64=r6], 0x10)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000022c0)={0x5, {0x3, 0x10001, 0x800, 0x7}})
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r8, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x72, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

2m11.340912654s ago: executing program 5 (id=4282):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000002108000f0001000000", 0x24)

2m11.262746204s ago: executing program 5 (id=4283):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x4, 0x0, 0x0, 0x2}, 0x4, [0x8, 0xe74, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x100000, 0x0, 0x9, 0x9, 0x0, 0x8, 0x9, 0x0, 0xfffffffc], [0x80000000, 0x0, 0x0, 0xb16, 0x10000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x7, 0x100000, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0xa0d, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x10009, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x1c, [0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7], [0x3, 0x3, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x8000, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}, 0x45c)

2m10.925936266s ago: executing program 35 (id=4283):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x4, 0x0, 0x0, 0x2}, 0x4, [0x8, 0xe74, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf605, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x100000, 0x0, 0x9, 0x9, 0x0, 0x8, 0x9, 0x0, 0xfffffffc], [0x80000000, 0x0, 0x0, 0xb16, 0x10000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x7, 0x100000, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0xa0d, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x10009, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x1c, [0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7], [0x3, 0x3, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x8000, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4]}, 0x45c)

1m13.453647665s ago: executing program 6 (id=4743):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0xd01, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xd01, 0x0, [0x0, 0x0, 0x1]})

1m13.395374019s ago: executing program 6 (id=4744):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
inotify_init()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))
r1 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2000000, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x3e8}], 0x400000000000172, 0x4000000)

1m12.449496917s ago: executing program 6 (id=4746):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x101d0)

1m12.373282597s ago: executing program 6 (id=4747):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400000005006eec00be00446c0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a)

1m11.956758863s ago: executing program 6 (id=4748):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000140)=0x3, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="0ac5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28)
sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@txtime={{0x18, 0x11a, 0x3d, 0x4}}], 0x18}, 0x8000)
read(r0, &(0x7f00000001c0)=""/36, 0x24)

1m11.777186064s ago: executing program 6 (id=4750):
r0 = memfd_secret(0x80000)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_ifreq(r1, 0x8916, 0x0)
r2 = creat(&(0x7f0000001380)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x100)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x2}}, {@directio}, {@aname={'aname', 0x3d, 'ntfs3\x00'}}, {@aname={'aname', 0x3d, 'ntfs3\x00'}}, {@cache_fscache}, {@version_L}, {@access_client}, {@aname={'aname', 0x3d, '/dev/rnullb0\x00'}}], [{@fowner_lt={'fowner<', r3}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@permit_directio}, {@context={'context', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, 'ntfs3\x00'}}, {@obj_user={'obj_user', 0x3d, '#'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@dont_measure}]}})

1m8.412608316s ago: executing program 3 (id=4769):
unshare(0x26000400)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x4, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000480)=""/86, 0x0, 0x10000})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010329bd7000fcdbdf25240000003000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000014000200000000000000000000000000000000000800030000000000340001800800030002000000140002006e657464657673696d300000000000001400020076657468315f746f5f627269646765"], 0x78}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xfffffffc}, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, r5, 0xe7d02281b1d40d47, 0x0, 0x0, {0x81}}, 0x14}}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r6, 0x29, 0x43, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af10, &(0x7f0000000540))
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup/file0\x00', &(0x7f0000000240)='gfs2\x00', 0x40000, 0x0)

1m8.321554906s ago: executing program 3 (id=4771):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="05000000010000", 0x7)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x8000, 0x0)

1m8.149219551s ago: executing program 3 (id=4772):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000280000000009e000040"])

1m7.965440248s ago: executing program 3 (id=4773):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './cgroup\x00'})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000300)=@urb_type_interrupt={0x1, {0x2}, 0x3, 0x1, &(0x7f0000000280)="dbc4a25279110e891630ec86d28395588b97ee19d5fe7dc0a05261e95e4215104ae1356dcdfcf17e24bfc1117224586a5e7e50009298d2249a51783447cee640f2dd90be3c045b771f8a", 0x4a, 0x200, 0x7, 0x0, 0x2, 0x5, &(0x7f0000000200)="1d9574575a10d05d794bdb9a03f416c52d1fdbe50d758353ee66300d79bb6c566b65daca16d818add823"})
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x2000c040)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, 0x1411, 0x1, 0x70bd2d, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

1m7.923631133s ago: executing program 3 (id=4774):
r0 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'macvtap0\x00'})
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, 0x2, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_MASK={0x78, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x27393f3853e104b4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xf}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000200)="fc737428e8d90acd4699df0af77fbe0221b24413fe4346df71605bf6d1d0344afbe356d0009001dc2929f09c1171c4a1d9de77065644ee9b99762f84489cad94e3317170f3c0f9157079a2a49988ef34d1c4e9cca599c14c9335d9ae89d809442dd33c7687bd7b5050acec06a7269bd0482a400fcfabdcd292b5a8aaf5e42e25ad9f385d07aac247dc243a752aa9b17fdd9db8dc91cfc42550755c834d71a63303197448d95c452d7e5c31d2ae2082fc5730de7919ea646a710fc734147a02fe404a65ba229bc8b56082bb1482a2e5bd174d1dbc2e3d", 0xd6}, {&(0x7f0000000300)="cd02ca4d491a41d30e983bde8a4b137298ebd3eb331f32ca8a3aafbbd3e97f54d299930afa3d6a54ea915ed8", 0x2c}, {&(0x7f0000000340)="cc841509f13c66dc77fa6890f8cf8fff9f941f12fd22ec06d6c99ed9e1d3a63a35c48f4d4840c6a6b15e4ee0635a543a43e327608c63bf767ab76a6719f159fba7eb96cd6f0aa3972eee3d33c3f44d755385925415d48639bf1031c2358c738f22a3aeab7ab0", 0x66}, {&(0x7f00000003c0)="e130fcd0a69af6cce19dc2ca0b302c783d7a297818fc93482eaeeaca2b92242d897c58a94317362323360de059769ff14c62c274d71b6e61e7d58ba31052d0e1fda805922cb59e88a6460f55a2c50d3a3be397a55b52ce35c9440d855596abd50041994dffd300df850d327d41691f496eda7ffd97fc4af506130baba2dd7cf43e90350c5d645b2c9a8b51552e5b30688eed252d5d", 0x95}, {&(0x7f0000000480)="c65ef88cdeabe16f36c10993d789bd9195c4dc8c4eefc5c7efc0ce1506783088b9d85821f018d6e3c2d82284f2d9a11d302c1a6a95580bddf965acd9b4526ca419b6182143cd7142a020b6b9e79372c404b518d37ee09f0aa216250dcdc1930e339089d3d4d7a8ec042330057b6ce4f07e9a807caffbae24ebb2308cd283c31fbc7dae338fac0a0aef44d16e67b3960a78b3f78678bf76559ff97019a25887b0c6c8d096cf8d4864db19085b3524aea43a95", 0xb2}, {&(0x7f0000000540)="557fa41e7330c30d7c054b75acee35f1720e387a4ab343822de584dd7339f1b47a434a0d5e48430f46af2419fa37dc2fc047bd014b6b4fc2bd4dbf518a607c51d6e19569876a92528ae2b85e6d3a71d72bb2604707061091c859e979fb73738fdcec2cd5f0e4a55b8de9404daa467f710b0712e5abee0c417da4fe8a8325a23b32ece57cfeb7adcf054b390904174e89c8229618a82180c234a73f3eacc0125eae215bd4fef91bd44d5ff7d9", 0xac}, {&(0x7f0000000600)="395a589a73330ff59ccd61282e458dabbfdaad718add0503abb5a2a880cce2c14255ad0d73cb168be00cc6a6471c0a11f20526c275575ec3c8635a81a04522012a10ed6492d2bc646618ab0d421bdda41c084c58", 0x54}, {&(0x7f0000000680)="94cfc5475253e60f0f17edea61d51a43d65d0449e7e83777f9661deb4cb3a4c3cb4015761432c83e6584d8a8ccc766078c5b466ad35b27da9052cfb2931fc4bf436a301e3494dd2d71cf22b7de3e", 0x4e}], 0x8)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000780)={@dev={0xfe, 0x80, '\x00', 0x23}, @broadcast, 0x13, 0x15}})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r3=>r0, {0x1}}, './file0\x00'})
clock_gettime(0x0, &(0x7f0000000840)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r3, 0x0, &(0x7f0000000880)={{r4, r5+60000000}, {0x77359400}}, &(0x7f00000008c0))
ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000900))
sendmsg$kcm(r3, &(0x7f0000001d80)={&(0x7f0000000940)=@llc={0x1a, 0x8, 0xc, 0xfb, 0x6, 0xc, @local}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=[{0xf0, 0x111, 0x401, "4db1e05c5f3d4ede6347c7e32c1045563b275f36b918a1e2ca1a907bb8df8a26fa27de9dcbefb17cc5f4507cc6a4ca01b4b5c5edd362bf0bc612d61405a6165920240565966a07a67128da9184122a7fd620eec72a4fb724fa2e47c6377faae4e3f6309c2bbea91e9b338ead271ff56719d558c9f341d9c64fc6d5516e3327134e3c8736eda3b44f461ddf38f723308f48e5db97677836434c85bf4bb6b24d2928808669855c5649304e56c158b46b43564ac4347213809e614d90b1df445d9ef4e39053ffcc30725c1a78b88a4f6846c386606911abc87aa96cf3480083"}, {0xa0, 0x1b, 0xfffffffc, "9211cce09e2629a2b0b07c3b6f015a31fc2887ddd6ece8c0413ce44c4f93a068fe858df08c1d719cfc00bf1cc6dc48e592b632016dde0e52fc3a648ec48aad7c58872255242b76af8c2a367f2e81c95080a35d3692cf94a514b8d385a12a90872220c76b226fa85d0ccd339e32ef48da8eda57c034ea2b79c8125ec11a839be6c290f0394b7ad0dbb26b"}, {0x1010, 0x1, 0x1, "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"}, {0x60, 0x115, 0xc, "fbe54e9838f6ee3203dbe6a87d65f6a66d394936a587310b8b9c2c8778ef4d64022fbea454e0cd01855299f2076ce51700dd822c8b9a678b88efef0e8023c7950d9a73feacfa2bc6f83e"}, {0x20, 0x102, 0x6, "a4195a813e5bdd116968719f"}, {0x70, 0x29, 0x8, "55255a3271fe6c40fe863ca48aafa680f3065aeaa94df5441c729b5451612f9b5d07c259b0134ae6e3e7c266f442c8f1c59cfe6d6c5b1153888b060a7eabd342d7307599f18626d3813477dd8aa8bbb4ca71b25e355358d80fbcc1"}, {0x78, 0x112, 0x4, "939d2dc59bcd4c2a5e441e1c349b9f09af77b8104c610e68b96478c7a69c4c8f16388b7ef997f75fdd645af315c1cf5a3f24cad3b9a168cbe09b235af5f5c4fff854ed74b816b81ee5665536f3adc79d793fdd2ae32dd3788797a86f6751fb27f5aeb015ef"}, {0x20, 0x10d, 0x3, "f0a05a2d2967fe93ad"}, {0x38, 0x101, 0x200, "4c9e85d2cbc02bebdee8f6cd5751642173318cf2bf7c345dc0a52454a9943507e7"}], 0x1360}, 0x20000000)
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000001e00)={0x28, 0x2, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000001f40)={0x48, 0x3, r6, 0x0, 0x1, 0xee, &(0x7f0000001e40)="a80c0545f2ea6cecfa858a43c47dcfae5984fcde5d53b248f3aea0a8665ca89e1e21aca927b2c7bc4910b5c51a46e07081509e055519250ad58082a995ae9dd77314ad05a61d1768022b69105f2b0814992ac729bb5247ecde5fdf2fe28106075bd3fd81085c09789b975dabd02d6bc6dc9cfad116f4e1de8244a7375d4a9bba5eb3a0e1f2be0afba739ad851d704dc3061d0c8855bc38e190feff36c9ec60f567387e6e0f7ea160b9733d90e1855630168df6ec537ebc291e47f524aa24a854134ee915d4e90868a26e2315b29191bfa77d71cc37e081869a0b9704be5b55da2e6fe190e9492e6468d2fd0cfbcb"})
r7 = syz_open_dev$vcsu(&(0x7f0000001fc0), 0x9, 0x90800)
write$usbip_server(r7, &(0x7f0000002000)=@ret_unlink={{0x4, 0xfffff271}}, 0x30)
timerfd_create(0x3, 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000020c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002040)="558768bcbab391476f371a3e94ac4633255c9a43fa0c4dd4a9d9b2f2ea329a78e91ee760012dc247ecca8ce8d0f1c629be87197cb458f52b8dec594954ac3785c79d86c70eaa313ea922d070f4b8", 0x4e, r0}, 0x68)
ioctl$BLKCRYPTOIMPORTKEY(r3, 0xc0401289, &(0x7f0000002200)={&(0x7f0000002140)="491e2610bc81321ad4a7d8cacb8daab6e9b23969ce74f51fa6902e", 0x1b, &(0x7f0000002180)=""/123, 0x7b})
lseek(r2, 0x4, 0x3)
fcntl$setsig(r1, 0xa, 0x2d)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000002240)=[{{0x3}, {0x4, 0x1}}, {{0x2}, {0x0, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x40)
cachestat(r3, &(0x7f0000002280)={0x1, 0x6}, &(0x7f00000022c0), 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000002300)=0x2, 0xfffffffffffff16a, 0x1)
ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000002340)={0x0, {}, 0x0, {}, 0x9000, 0x0, 0x1a, 0xc, "d780913a162862ea685941ed86ba1c1c29d200ab4b0812240d30dad59a674a5696e318946249831c93a218f33382e4d46325c67188aca849a0dc5357c26e4471", "cbcfae212b2e42f21eb4020ccea4cf4bd43085760826a3e3581fe309afe071a9", [0x0, 0xc]})
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002400), 0x2a8a00)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000002440)={0x8001, 0x80000000, 0x0, 'queue0\x00', 0x9})
ioctl$KDFONTOP_COPY(r7, 0x4b72, &(0x7f0000002900)={0x3, 0x0, 0x7, 0xf, 0x3e, &(0x7f0000002500)})
syz_open_procfs(0x0, &(0x7f0000002940)='limits\x00')

1m7.76945973s ago: executing program 3 (id=4776):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180)=0x5, 0x4)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0)

1m7.650885579s ago: executing program 36 (id=4776):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180)=0x5, 0x4)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0)

56.426692574s ago: executing program 37 (id=4750):
r0 = memfd_secret(0x80000)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_ifreq(r1, 0x8916, 0x0)
r2 = creat(&(0x7f0000001380)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x100)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x2}}, {@directio}, {@aname={'aname', 0x3d, 'ntfs3\x00'}}, {@aname={'aname', 0x3d, 'ntfs3\x00'}}, {@cache_fscache}, {@version_L}, {@access_client}, {@aname={'aname', 0x3d, '/dev/rnullb0\x00'}}], [{@fowner_lt={'fowner<', r3}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@permit_directio}, {@context={'context', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, 'ntfs3\x00'}}, {@obj_user={'obj_user', 0x3d, '#'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@dont_measure}]}})

3.600902659s ago: executing program 7 (id=5298):
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x2)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdc, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0xfffffffc, 0x80000100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2902, 0x0)
write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="00008808020400100a00090000040302f1576af83523d27443a88af83c9f73eff58528e67496e82c7b4fc264e1f8ab7360d584261c7fe5000e4cc66f"], 0x3c)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6})
r5 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r5, 0x107, 0xa, 0x0, &(0x7f0000001a00))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000194c0)={0x1, 0x10004, 0x9})
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x28c00, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x9, 0x9, 0x7})
close_range(r0, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000340)="07000000010003", 0x7)
recvmmsg(r7, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10002, 0x0)

2.637557318s ago: executing program 7 (id=5306):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000003580), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}, 0xffffffff}], 0x1, 0x0)

2.574981707s ago: executing program 7 (id=5308):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000020000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010c0006"], 0x98}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)

2.474313452s ago: executing program 7 (id=5309):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0040005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

2.233526156s ago: executing program 7 (id=5314):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
inotify_init()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))
r1 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2000000, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0xa101}], 0x400000000000172, 0x4000000)

2.065626046s ago: executing program 8 (id=5317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14, 0x11, 0x1, 0x4000000}}, 0x3c}}, 0x0)

2.062471444s ago: executing program 8 (id=5318):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200029c000000009e000040"])

1.957363167s ago: executing program 8 (id=5319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4000100"], 0x30}}, 0x0) (async)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4000100"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x500, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x84)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

1.829233864s ago: executing program 8 (id=5320):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="09000000000000000000feffff7f140001"], 0x28}}, 0x0)

1.741468125s ago: executing program 8 (id=5321):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001070102406835592d48ad010203010902120001077cc01509044a01009e3a7101"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = socket(0xa, 0x1, 0x0)
ioctl(r1, 0x8916, &(0x7f0000000000))
ioctl(r1, 0x8936, &(0x7f0000000000))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
setreuid(0x0, 0xee00)
syz_usb_connect(0x2, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000000c0)={0x40fc4afb, {{0xa, 0x4e20, 0x99c3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x1, 0x5, [{{0xa, 0x4e20, 0x0, @mcast2, 0xfffffffa}}, {{0xa, 0x4e23, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}}, {{0xa, 0x4e23, 0x498, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {{0xa, 0x4e20, 0x1ff, @remote, 0x70000}}, {{0xa, 0x4e21, 0x4855, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}}]}, 0x310)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000)

1.462923214s ago: executing program 9 (id=5325):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0)
close(r1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000002c0)={0x0, 0xa, [@remote, @remote, @local, @dev, @link_local, @broadcast, @remote, @link_local, @random="db6576d74337", @random="bb8021e9da14"]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000008010800000000000000000a00000805000300060000000900010073797a3100000000060002406558000006000240891700002c0004"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000020803"], 0x14}, 0x1, 0x0, 0x0, 0x8c}, 0x4000014)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000280), &(0x7f0000000380)=0x8)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000140)={0x8})
r6 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r6, 0x0)
ftruncate(r6, 0x3)
ioctl$MEDIA_REQUEST_IOC_REINIT(r6, 0x7c81, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)

1.374182845s ago: executing program 7 (id=5326):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="03dd"], 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000012c0)={0x1, 0x0, [{0x0, 0x63, &(0x7f00000001c0)=""/99}]})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x29, 0x6, 0x0, 0x4c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
writev(r4, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98)
splice(r3, 0x0, r5, 0x0, 0x80, 0x6)
syz_usb_ep_write(r0, 0x81, 0xfffffffffffffd77, &(0x7f0000000000)="00012c61020000001c11447298a9538f168516ff037f291e463685b0139216171afd0eafbd9c28d93b8b8fbdd59f3d473eb9d29d3de65dea17")

1.289295219s ago: executing program 9 (id=5328):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
bind$can_j1939(r0, 0x0, 0x0)
r1 = eventfd2(0x8000, 0x80800)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x3, r1})
r2 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local})
r5 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000140)={0xfffffffe, 0x1, 0x8, 0x6, &(0x7f0000001600)=[{}]})
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000ffc000/0x2000)=nil)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r7 = accept$packet(r2, 0x0, &(0x7f0000001080))
sendmsg$inet(r7, &(0x7f0000001300)={&(0x7f00000010c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001240)=[{&(0x7f0000001100)="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", 0xfa}, {&(0x7f0000001200)="9a05f80c4688d542a8e4a615bbecbc8eb05dba819e6d1a9f9a665c0f7313689dd866e5", 0x23}], 0x2, &(0x7f0000001280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x48}, 0x40000)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001280), 0x4}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884)
write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

951.352256ms ago: executing program 0 (id=5330):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

696.293131ms ago: executing program 0 (id=5331):
r0 = mmap$KVM_VCPU(&(0x7f0000e98000/0x1000)=nil, 0x930, 0x2, 0x4003831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000001c0)="db0149dd033be3ac2cc4a29ea6ab8031d1dfd900010000002627e700000000000000002000000000000000000000000000000000001d00385c55b3e4c7d9eb00", 0x0, 0x48)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff4000/0x4000)=nil, 0x930, 0x0, 0x13, r3, 0x0)
munmap(&(0x7f0000008000/0x1000)=nil, 0x200000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)

509.699661ms ago: executing program 0 (id=5332):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)

478.434897ms ago: executing program 0 (id=5333):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff4000/0x4000)=nil, 0x930, 0x0, 0x13, r2, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x2012, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000fed000/0x4000)=nil, 0x930, 0x0, 0x11, r5, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x0, 0x11, r5, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x0, 0x12, r5, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f000000f000/0x1000)=nil, 0x930, 0x0, 0x12, r7, 0x0)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x0, 0x11, r10, 0x0)
munmap(&(0x7f0000feb000/0x13000)=nil, 0x13000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)

309.841982ms ago: executing program 9 (id=5334):
mmap$KVM_VCPU(&(0x7f0000e98000/0x1000)=nil, 0x930, 0x2, 0x4003831, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff4000/0x4000)=nil, 0x930, 0x0, 0x13, r2, 0x0)
munmap(&(0x7f0000008000/0x1000)=nil, 0x200000)
mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0)

185.616623ms ago: executing program 0 (id=5335):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0xdddd1000, 0x1000, &(0x7f0000010000/0x1000)=nil})
munmap(&(0x7f0000014000/0x2000)=nil, 0x2000)

185.361743ms ago: executing program 9 (id=5336):
write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffff9, 0x8)
r0 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)

93.492703ms ago: executing program 9 (id=5337):
write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffff9, 0x8)
r0 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
r1 = mmap$KVM_VCPU(&(0x7f00002cb000/0x13000)=nil, 0x930, 0x1000007, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)

81.954459ms ago: executing program 8 (id=5338):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x13, r0, 0x30233000)

36.581993ms ago: executing program 0 (id=5339):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[])
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

0s ago: executing program 9 (id=5340):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10a}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

rface 126 has no altsetting 0
[  668.985820][ T6801] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  668.995031][ T6801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.996926][T19312] /dev/rnullb0: Can't open blockdev
[  669.003112][ T6801] usb 7-1: Product: syz
[  669.012504][ T6801] usb 7-1: Manufacturer: syz
[  669.017339][ T6801] usb 7-1: SerialNumber: syz
[  669.025555][ T6801] usb 7-1: config 0 descriptor??
[  669.031512][T19311] /dev/rnullb0: Can't open blockdev
[  669.037650][T19295] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  669.061845][T19308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4696'.
[  669.451249][ T6801] ir_usb 7-1:0.126: IR Dongle converter detected
[  669.570522][T19327] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  669.655216][ T6801] usb 7-1: IR Dongle converter now attached to ttyUSB0
[  669.738796][T14286] Bluetooth: hci3: command 0x0406 tx timeout
[  670.009421][T19342] /dev/rnullb0: Can't open blockdev
[  670.210839][T19355] /dev/rnullb0: Can't open blockdev
[  670.551193][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4720'.
[  670.761279][T19385] netlink: 'syz.3.4724': attribute type 1 has an invalid length.
[  670.769183][T14291] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  670.775646][T19385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4724'.
[  670.905913][T14291] usb 1-1: device descriptor read/64, error -71
[  670.999287][T19389] netlink: 'syz.3.4726': attribute type 27 has an invalid length.
[  671.155684][T14291] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  671.265385][ T6805] usb 7-1: USB disconnect, device number 48
[  671.285121][ T6808] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  671.295284][T14291] usb 1-1: device descriptor read/64, error -71
[  671.309915][ T6805] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  671.319247][ T6805] ir_usb 7-1:0.126: device disconnected
[  671.440551][T14291] usb usb1-port1: attempt power cycle
[  671.477577][ T6808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  671.500616][T19392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  671.505096][ T6808] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  671.527923][ T6808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.542419][ T6808] usb 4-1: config 0 descriptor??
[  671.560190][T19398] ptm ptm18: ldisc open failed (-12), clearing slot 18
[  671.761438][T19391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4727'.
[  671.794806][T14291] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  671.833452][T14291] usb 1-1: device descriptor read/8, error -71
[  671.982454][ T6808] dragonrise 0003:0079:0006.004C: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0
[  672.004450][ T6808] dragonrise 0003:0079:0006.004C: no inputs found
[  672.011089][ T6808] dragonrise 0003:0079:0006.004C: force feedback init failed
[  672.075051][T14291] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  672.097841][T14291] usb 1-1: device descriptor read/8, error -71
[  672.136577][T19412] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4735'.
[  672.186449][ T6801] usb 4-1: USB disconnect, device number 45
[  672.206372][T14291] usb usb1-port1: unable to enumerate USB device
[  672.810479][T19421] loop8: detected capacity change from 0 to 7
[  672.823821][T19421] Dev loop8: unable to read RDB block 7
[  672.844911][T19421]  loop8: unable to read partition table
[  672.851155][T19421] loop8: partition table beyond EOD, truncated
[  672.867697][T19421] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  672.950402][T19431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4741'.
[  673.074187][ T6801] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  673.235847][ T6801] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  673.244961][ T6801] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  673.255097][ T6801] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  673.264121][ T6801] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.277071][ T6801] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  673.286363][ T6803] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  673.293991][ T6801] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  673.301974][ T6801] usb 8-1: Product: syz
[  673.306922][ T6801] usb 8-1: Manufacturer: syz
[  673.316829][ T6801] cdc_wdm 8-1:1.0: skipping garbage
[  673.322046][ T6801] cdc_wdm 8-1:1.0: skipping garbage
[  673.330475][ T6801] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  673.336449][ T6801] cdc_wdm 8-1:1.0: Unknown control protocol
[  673.456440][ T6803] usb 4-1: config 0 has no interfaces?
[  673.468109][ T6803] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  673.477282][ T6803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.489555][ T6803] usb 4-1: Product: syz
[  673.494023][ T6803] usb 4-1: Manufacturer: syz
[  673.498604][ T6803] usb 4-1: SerialNumber: syz
[  673.512165][ T6803] usb 4-1: config 0 descriptor??
[  673.557371][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4738'.
[  674.767065][T19481] /dev/rnullb0: Can't open blockdev
[  675.013268][T14291] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  675.183027][T14291] usb 1-1: Using ep0 maxpacket: 16
[  675.193709][T14291] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  675.204324][T14291] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  675.216742][T14291] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  675.226114][T14291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.234175][T14291] usb 1-1: Product: syz
[  675.238337][T14291] usb 1-1: Manufacturer: syz
[  675.242984][T14291] usb 1-1: SerialNumber: syz
[  675.459668][T14291] usb 1-1: 0:2 : does not exist
[  675.471078][T14291] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  675.500227][T14291] usb 1-1: USB disconnect, device number 67
[  675.531531][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  675.916083][T14291] usb 8-1: USB disconnect, device number 20
[  676.045935][ T6808] usb 4-1: USB disconnect, device number 46
[  676.496040][T19513] netlink: 'syz.7.4757': attribute type 4 has an invalid length.
[  676.547483][ T6808] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  676.732355][ T6808] usb 4-1: Using ep0 maxpacket: 8
[  676.748343][ T6808] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  676.764373][ T6808] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  676.777011][ T6808] usb 4-1: Product: syz
[  676.781301][ T6808] usb 4-1: Manufacturer: syz
[  676.788382][ T6808] usb 4-1: SerialNumber: syz
[  676.806373][ T6808] usb 4-1: config 0 descriptor??
[  676.815784][ T6808] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  676.914045][T19528] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4758'.
[  676.924744][T19528] /dev/rnullb0: Can't open blockdev
[  677.022883][T19502] sctp: [Deprecated]: syz.3.4755 (pid 19502) Use of int in max_burst socket option.
[  677.022883][T19502] Use struct sctp_assoc_value instead
[  677.063538][ T6808] gspca_zc3xx: reg_w_i err -71
[  677.080144][ T6808] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  677.097795][ T6808] usb 4-1: USB disconnect, device number 47
[  677.195496][T14291] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  677.353742][T14291] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  677.372831][T14291] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  677.385442][T19543] input: syz0 as /devices/virtual/input/input89
[  677.389830][T14291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.411253][T14291] usb 1-1: config 0 descriptor??
[  677.420760][T14291] pwc: Askey VC010 type 2 USB webcam detected.
[  677.639022][T19548] /dev/rnullb0: Can't open blockdev
[  677.780850][T19554] netlink: 'syz.3.4764': attribute type 39 has an invalid length.
[  677.819299][T14291] pwc: recv_control_msg error -32 req 02 val 2b00
[  677.828075][T14291] pwc: recv_control_msg error -32 req 02 val 2700
[  677.845066][T14291] pwc: recv_control_msg error -32 req 02 val 2c00
[  677.866269][T14291] pwc: recv_control_msg error -32 req 04 val 1000
[  677.875989][T14291] pwc: recv_control_msg error -32 req 04 val 1300
[  677.883405][T14291] pwc: recv_control_msg error -32 req 04 val 1400
[  677.890920][T14291] pwc: recv_control_msg error -32 req 02 val 2000
[  677.898352][T14291] pwc: recv_control_msg error -32 req 02 val 2100
[  677.905929][T14291] pwc: recv_control_msg error -32 req 04 val 1500
[  677.914581][T14291] pwc: recv_control_msg error -32 req 02 val 2500
[  677.922042][T14291] pwc: recv_control_msg error -32 req 02 val 2400
[  678.134931][T14291] pwc: recv_control_msg error -71 req 02 val 2900
[  678.159089][T14291] pwc: recv_control_msg error -71 req 02 val 2800
[  678.180163][T14291] pwc: recv_control_msg error -71 req 04 val 1100
[  678.187495][T14291] pwc: recv_control_msg error -71 req 04 val 1200
[  678.212517][T14291] pwc: Registered as video103.
[  678.227952][T14291] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input90
[  678.264003][T14291] usb 1-1: USB disconnect, device number 68
[  678.312658][T19566] sp0: Synchronizing with TNC
[  678.347610][T19566] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  678.535465][T19574] /dev/rnullb0: Can't open blockdev
[  678.971760][T19582] netlink: 'syz.0.4779': attribute type 4 has an invalid length.
[  678.985279][T19582] netlink: 'syz.0.4779': attribute type 4 has an invalid length.
[  679.004124][T19582] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  679.102565][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  679.114776][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  679.123191][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  679.132788][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  679.142261][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  679.213947][T19583] lo speed is unknown, defaulting to 1000
[  679.449562][T19589] FAULT_INJECTION: forcing a failure.
[  679.449562][T19589] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  679.505756][T19589] CPU: 0 UID: 0 PID: 19589 Comm: syz.7.4781 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  679.505781][T19589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  679.505792][T19589] Call Trace:
[  679.505800][T19589]  <TASK>
[  679.505807][T19589]  dump_stack_lvl+0x189/0x250
[  679.505831][T19589]  ? __pfx____ratelimit+0x10/0x10
[  679.505851][T19589]  ? __pfx_dump_stack_lvl+0x10/0x10
[  679.505869][T19589]  ? __pfx__printk+0x10/0x10
[  679.505889][T19589]  ? fs_reclaim_acquire+0x7d/0x100
[  679.505920][T19589]  should_fail_ex+0x414/0x560
[  679.505947][T19589]  prepare_alloc_pages+0x213/0x610
[  679.505976][T19589]  __alloc_frozen_pages_noprof+0x123/0x370
[  679.506001][T19589]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  679.506029][T19589]  ? policy_nodemask+0x28b/0x720
[  679.506047][T19589]  ? try_to_migrate+0x3dc/0x670
[  679.506072][T19589]  alloc_pages_mpol+0x232/0x4a0
[  679.506096][T19589]  alloc_migration_target_by_mpol+0x2e6/0x590
[  679.506125][T19589]  migrate_pages_batch+0x7a0/0x2830
[  679.506165][T19589]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  679.506188][T19589]  ? __pfx_migrate_pages_batch+0x10/0x10
[  679.506216][T19589]  ? stack_depot_save_flags+0x40/0x900
[  679.506244][T19589]  ? kasan_save_track+0x3e/0x80
[  679.506258][T19589]  ? __kasan_slab_alloc+0x6c/0x80
[  679.506274][T19589]  ? mbind_range+0x3c8/0x800
[  679.506290][T19589]  ? __se_sys_mbind+0x730/0xc30
[  679.506304][T19589]  ? do_syscall_64+0xfa/0x3b0
[  679.506322][T19589]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.506352][T19589]  migrate_pages+0x1bcc/0x2930
[  679.506390][T19589]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  679.506418][T19589]  ? __pfx_migrate_pages+0x10/0x10
[  679.506449][T19589]  ? current_cpuset_is_being_rebound+0x1d/0x310
[  679.506472][T19589]  ? current_cpuset_is_being_rebound+0x1d/0x310
[  679.506492][T19589]  ? current_cpuset_is_being_rebound+0x1d/0x310
[  679.506529][T19589]  ? up_write+0x1c4/0x420
[  679.506547][T19589]  __se_sys_mbind+0xa3e/0xc30
[  679.506563][T19589]  ? __pfx_vfs_write+0x10/0x10
[  679.506585][T19589]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  679.506606][T19589]  ? __pfx___se_sys_mbind+0x10/0x10
[  679.506649][T19589]  ? __x64_sys_mbind+0x21/0xf0
[  679.506668][T19589]  do_syscall_64+0xfa/0x3b0
[  679.506688][T19589]  ? lockdep_hardirqs_on+0x9c/0x150
[  679.506708][T19589]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.506724][T19589]  ? clear_bhb_loop+0x60/0xb0
[  679.506743][T19589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.506759][T19589] RIP: 0033:0x7f497f18e929
[  679.506779][T19589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  679.506793][T19589] RSP: 002b:00007f497ffef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  679.506812][T19589] RAX: ffffffffffffffda RBX: 00007f497f3b6080 RCX: 00007f497f18e929
[  679.506825][T19589] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000001000
[  679.506836][T19589] RBP: 00007f497ffef090 R08: 0000000000000000 R09: 0000000000000002
[  679.506848][T19589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  679.506858][T19589] R13: 0000000000000001 R14: 00007f497f3b6080 R15: 00007ffff19c2fd8
[  679.506887][T19589]  </TASK>
[  679.956214][T19583] chnl_net:caif_netlink_parms(): no params data found
[  680.031595][T19583] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.038738][T19583] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.046853][T19583] bridge_slave_0: entered allmulticast mode
[  680.056158][T19583] bridge_slave_0: entered promiscuous mode
[  680.065517][T19583] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.073292][T19583] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.080985][T19583] bridge_slave_1: entered allmulticast mode
[  680.088586][T19583] bridge_slave_1: entered promiscuous mode
[  680.119712][T19583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  680.138082][T19583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.178805][T19583] team0: Port device team_slave_0 added
[  680.186627][T19583] team0: Port device team_slave_1 added
[  680.223405][T19583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  680.230363][T19583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  680.256856][T19583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  680.269874][T19583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  680.277673][T19583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  680.291198][T14286] Bluetooth: hci0: command 0x041b tx timeout
[  680.303861][ T5153] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  680.309895][T19583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  680.363633][T19583] hsr_slave_0: entered promiscuous mode
[  680.369983][T19583] hsr_slave_1: entered promiscuous mode
[  680.376703][T19583] debugfs: 'hsr0' already exists in 'hsr'
[  680.382660][T19583] Cannot create hsr debugfs directory
[  680.539868][T19601] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4783'.
[  680.785619][T19583] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  680.805044][T19583] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  680.834914][T19583] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  680.852610][T19583] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  681.023707][T19583] 8021q: adding VLAN 0 to HW filter on device bond0
[  681.082672][T19583] 8021q: adding VLAN 0 to HW filter on device team0
[  681.095653][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.102862][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state
[  681.147031][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.154241][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  681.170416][ T6803] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  681.170728][ T5153] Bluetooth: hci5: command tx timeout
[  681.335806][ T6803] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  681.356330][ T6803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  681.390341][ T6803] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  681.413049][ T6803] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  681.428261][T19634] tipc: Started in network mode
[  681.434074][T19634] tipc: Node identity ac14140c, cluster identity 4711
[  681.440273][ T6803] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  681.441588][T19634] tipc: New replicast peer: 255.255.255.255
[  681.459127][T19634] tipc: Enabled bearer <udp:syz2>, priority 10
[  681.465495][ T6803] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  681.465520][ T6803] usb 1-1: Product: syz
[  681.465535][ T6803] usb 1-1: Manufacturer: syz
[  681.471529][ T6803] cdc_wdm 1-1:1.0: skipping garbage
[  681.499723][ T6803] cdc_wdm 1-1:1.0: skipping garbage
[  681.508419][ T6803] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  681.511939][T19583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  681.522802][ T6803] cdc_wdm 1-1:1.0: Unknown control protocol
[  681.751438][ T6803] usb 1-1: USB disconnect, device number 69
[  681.775333][T19644] netlink: 'syz.7.4795': attribute type 27 has an invalid length.
[  681.845969][T19646] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  681.956416][T19583] veth0_vlan: entered promiscuous mode
[  681.968910][T19583] veth1_vlan: entered promiscuous mode
[  681.998800][T19583] veth0_macvtap: entered promiscuous mode
[  682.011136][T19583] veth1_macvtap: entered promiscuous mode
[  682.030214][T19583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  682.047052][T19583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  682.063918][   T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  682.075135][   T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  682.087858][   T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  682.101704][   T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  682.173508][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.191292][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.227517][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.236220][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.570454][ T6803] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  682.579638][ T6808] tipc: Node number set to 2886997004
[  682.721193][ T6803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  682.732704][ T6803] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[  682.742921][ T6803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.753302][ T6803] usb 1-1: config 0 descriptor??
[  682.799668][ T6802] usb 8-1: new low-speed USB device number 21 using dummy_hcd
[  682.952354][ T6802] usb 8-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[  682.967018][ T6802] usb 8-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt
[  682.977515][ T6802] usb 8-1: config 1 interface 0 has no altsetting 0
[  682.992135][ T6802] usb 8-1: string descriptor 0 read error: -22
[  682.998434][ T6802] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  683.007945][ T6802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.027233][T19657] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  683.036903][T19657] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  683.049624][ T6802] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22
[  683.165813][T19659] /dev/rnullb0: Can't open blockdev
[  683.246610][T19657] /dev/rnullb0: Can't open blockdev
[  683.255513][ T5153] Bluetooth: hci5: command tx timeout
[  683.277892][ T6802] usb 8-1: USB disconnect, device number 21
[  683.370179][ T6803] usbhid 1-1:0.0: can't add hid device: -71
[  683.376251][ T6803] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  683.412902][ T6803] usb 1-1: USB disconnect, device number 70
[  683.498214][T19665] nvme_fabrics: missing parameter 'transport=%s'
[  683.504927][T19665] nvme_fabrics: missing parameter 'nqn=%s'
[  683.739914][T19668] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4803'.
[  683.947619][T19675] syz.0.4806: attempt to access beyond end of device
[  683.947619][T19675] loop0: rw=0, sector=2, nr_sectors = 2 limit=0
[  683.965053][T19675] syz.0.4806: attempt to access beyond end of device
[  683.965053][T19675] loop0: rw=0, sector=16, nr_sectors = 2 limit=0
[  684.056877][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4807'.
[  684.358527][ T6803] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  684.419287][T19670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  684.508636][ T6803] usb 1-1: device descriptor read/64, error -71
[  684.529577][T19695] netlink: 'syz.7.4811': attribute type 29 has an invalid length.
[  684.538244][T19695] netlink: 'syz.7.4811': attribute type 29 has an invalid length.
[  684.549028][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4811'.
[  684.661967][T19700] /dev/rnullb0: Can't open blockdev
[  684.708203][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  684.714743][   T30] audit: type=1326 audit(2000000565.554:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19701 comm="syz.7.4814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497f18e929 code=0x0
[  684.748343][ T6803] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  684.791230][T19703] netlink: 'syz.7.4814': attribute type 11 has an invalid length.
[  684.888304][ T6803] usb 1-1: device descriptor read/64, error -71
[  684.994015][T19705] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  685.001726][ T6803] usb usb1-port1: attempt power cycle
[  685.214471][T19712] /dev/rnullb0: Can't open blockdev
[  685.338241][T14286] Bluetooth: hci5: command tx timeout
[  685.348099][ T6803] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  685.358065][   T30] audit: type=1326 audit(2000000566.204:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19714 comm="syz.8.4819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b7eb8e929 code=0x0
[  685.383233][ T6803] usb 1-1: device descriptor read/8, error -71
[  685.572550][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  685.627895][ T6803] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  685.658513][ T6803] usb 1-1: device descriptor read/8, error -71
[  685.771645][ T6803] usb usb1-port1: unable to enumerate USB device
[  686.086850][T19734] netlink: 'syz.7.4826': attribute type 4 has an invalid length.
[  687.040605][T19741] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4828'.
[  687.087900][ T5153] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  687.097128][ T5153] Bluetooth: hci0: command 0x041b tx timeout
[  687.258736][T19743] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4829'.
[  687.280718][T19743] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4829'.
[  687.306597][T19746] /dev/rnullb0: Can't open blockdev
[  687.316739][T19747] input: syz0 as /devices/virtual/input/input91
[  687.408963][T19750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.409504][ T5153] Bluetooth: hci5: command tx timeout
[  687.502594][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4835'.
[  687.553922][ T5153] Bluetooth: hci0: adv larger than maximum supported
[  687.553950][ T5153] Bluetooth: hci0: Malformed LE Event: 0x0d
[  687.686953][ T6801] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  687.858477][ T6801] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  687.875984][ T6801] usb 8-1: config 2 has 1 interface, different from the descriptor's value: 4
[  687.893711][ T6801] usb 8-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice= 6.1f
[  687.903630][ T6801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.911735][ T6801] usb 8-1: Product: syz
[  687.925059][ T6801] usb 8-1: Manufacturer: syz
[  687.929774][ T6801] usb 8-1: SerialNumber: syz
[  688.157602][ T6801] usb 8-1: NDI device with a latency value of 1
[  688.169813][ T6801] ftdi_sio 8-1:2.0: FTDI USB Serial Device converter detected
[  688.192189][ T6801] ftdi_sio ttyUSB0: unknown device type: 0x61f
[  688.215948][ T6801] usb 8-1: USB disconnect, device number 22
[  688.233971][ T6801] ftdi_sio 8-1:2.0: device disconnected
[  688.326497][ T6808] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  688.585963][T19793] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  688.593114][T19793] /dev/rnullb0: Can't open blockdev
[  688.809733][T19801] /dev/rnullb0: Can't open blockdev
[  688.878863][T19805] tipc: Started in network mode
[  688.883904][T19805] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  688.894200][T19805] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  688.905317][T19805] tipc: Enabled bearer <udp:syz1>, priority 10
[  689.116890][ T6808] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  689.162912][T19815] /dev/rnullb0: Can't open blockdev
[  689.278061][ T6808] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  689.311803][ T6808] usb 1-1: config 0 interface 0 has no altsetting 0
[  689.331315][ T6808] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  689.354630][ T6808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.391639][ T6808] usb 1-1: config 0 descriptor??
[  689.443838][T19824] netlink: 'syz.8.4862': attribute type 4 has an invalid length.
[  689.681360][T19832] /dev/rnullb0: Can't open blockdev
[  689.885978][T14286] Bluetooth: hci0: command 0x041b tx timeout
[  689.892085][ T5153] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  689.898851][ T6805] tipc: Node number set to 1
[  690.175655][ T6808] usbhid 1-1:0.0: can't add hid device: -71
[  690.185667][ T6808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  690.234258][ T6808] usb 1-1: USB disconnect, device number 76
[  690.540961][T14286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  690.558684][T14286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  690.571762][T14286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  690.580632][T14286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  690.591910][T14286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  690.636872][T19841] lo speed is unknown, defaulting to 1000
[  690.990724][T19841] chnl_net:caif_netlink_parms(): no params data found
[  691.109234][T19855] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4872'.
[  691.299162][T19865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4874'.
[  691.501583][T19867] ieee802154 phy0 wpan0: encryption failed: -22
[  692.333083][T19871] tipc: New replicast peer: 255.255.255.255
[  692.355847][T19871] tipc: Enabled bearer <udp:syz2>, priority 10
[  692.404770][T19841] bridge0: port 1(bridge_slave_0) entered blocking state
[  692.460415][T19841] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.476056][T19841] bridge_slave_0: entered allmulticast mode
[  692.528063][T19841] bridge_slave_0: entered promiscuous mode
[  692.566973][T19841] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.605158][T19841] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.647539][T19841] bridge_slave_1: entered allmulticast mode
[  692.666286][T19873] /dev/rnullb0: Can't open blockdev
[  692.692053][ T5153] Bluetooth: hci6: command tx timeout
[  692.703727][T19841] bridge_slave_1: entered promiscuous mode
[  692.949490][T19841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  692.990924][T19841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  693.108914][T19841] team0: Port device team_slave_0 added
[  693.130003][T19841] team0: Port device team_slave_1 added
[  693.215497][ T6808] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  693.238721][T19884] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4883'.
[  693.253565][T19841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  693.264958][T19841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  693.309308][T19841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  693.340460][T19841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  693.347645][T19841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  693.373582][    C0] vkms_vblank_simulate: vblank timer overrun
[  693.380434][T19841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  693.402488][ T6808] usb 9-1: Using ep0 maxpacket: 16
[  693.440157][ T6808] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  693.450038][ T6808] usb 9-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0
[  693.464049][ T6808] usb 9-1: Product: syz
[  693.485998][ T6808] usb 9-1: config 0 descriptor??
[  693.509939][ T6808] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  693.588602][T19841] hsr_slave_0: entered promiscuous mode
[  693.615327][T19841] hsr_slave_1: entered promiscuous mode
[  693.622854][T19841] debugfs: 'hsr0' already exists in 'hsr'
[  693.630017][T19841] Cannot create hsr debugfs directory
[  693.672616][T19894] /dev/rnullb0: Can't open blockdev
[  693.771462][T19897] netlink: 'syz.0.4888': attribute type 27 has an invalid length.
[  693.944778][T19841] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  693.955624][T19841] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  693.966466][T19841] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  693.976916][T19841] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  694.060838][T19841] 8021q: adding VLAN 0 to HW filter on device bond0
[  694.088848][T19841] 8021q: adding VLAN 0 to HW filter on device team0
[  694.100839][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.108004][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  694.127526][T10895] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.134698][T10895] bridge0: port 2(bridge_slave_1) entered forwarding state
[  694.350902][T19841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  694.411714][T19912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  694.435991][T19912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.717483][T19841] veth0_vlan: entered promiscuous mode
[  694.743108][T19841] veth1_vlan: entered promiscuous mode
[  694.763611][ T5153] Bluetooth: hci6: command tx timeout
[  694.797850][T19841] veth0_macvtap: entered promiscuous mode
[  694.828207][T19841] veth1_macvtap: entered promiscuous mode
[  694.875953][T19841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  694.930289][T19841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  694.974495][   T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  695.005977][   T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  695.056029][T19917] /dev/rnullb0: Can't open blockdev
[  695.485147][   T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  695.513125][   T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  695.769017][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  695.819478][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  695.924244][T10895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  695.953658][T10895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  695.967236][T19931] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4890'.
[  696.027124][ T6803] usb 9-1: USB disconnect, device number 2
[  696.056359][T19934] /dev/rnullb0: Can't open blockdev
[  696.392779][ T6802] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  696.478166][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4895'.
[  696.562764][ T6802] usb 8-1: Using ep0 maxpacket: 32
[  696.584095][ T6802] usb 8-1: config 232 has an invalid interface number: 25 but max is 0
[  696.602129][ T6802] usb 8-1: config 232 contains an unexpected descriptor of type 0x2, skipping
[  696.634128][ T6802] usb 8-1: config 232 has no interface number 0
[  696.640451][ T6802] usb 8-1: config 232 interface 25 altsetting 4 has a duplicate endpoint with address 0x9, skipping
[  696.692696][ T6802] usb 8-1: config 232 interface 25 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[  696.731911][ T6802] usb 8-1: config 232 interface 25 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  696.762900][ T6802] usb 8-1: config 232 interface 25 altsetting 4 has a duplicate endpoint with address 0xA, skipping
[  696.800274][ T6802] usb 8-1: config 232 interface 25 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  696.821774][ T6802] usb 8-1: config 232 interface 25 altsetting 4 endpoint 0xF has invalid wMaxPacketSize 0
[  696.832811][ T6802] usb 8-1: config 232 interface 25 altsetting 4 endpoint 0xE has an invalid bInterval 0, changing to 7
[  696.844201][ T5153] Bluetooth: hci6: command tx timeout
[  696.849968][ T6802] usb 8-1: config 232 interface 25 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[  696.861240][ T6802] usb 8-1: config 232 interface 25 has no altsetting 0
[  696.872255][ T6802] usb 8-1: New USB device found, idVendor=0bfd, idProduct=000a, bcdDevice=dc.bd
[  696.881548][ T6802] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.900168][ T6802] usb 8-1: Product:  
[  696.905366][ T6802] usb 8-1: Manufacturer: յﾆ点湢﵎ꠍ	
[  696.911278][ T6802] usb 8-1: SerialNumber: 诧繇涸槮䰟牸◐頻꿂῱ƞ羃伹Ṫ蒤爾멞攔藽阢禡䪷蓉㯪嫀纊ᶴ赹ꔫ㓛萃梮‍ﺕ谔樊ᛠ舧筩碭ᧇ蟹밨金纄䑵ᾏ袓뾇汼䕝߱㺦態먣䉁៙﮸尬﫩托ᤜ惍㋾힂긿⸮퉾벙捬䄏阦륆ꆔㆆ蕎䏤䭟甿茙椂㒇㓳
[  696.939460][    C0] vkms_vblank_simulate: vblank timer overrun
[  696.952503][T19934] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  697.014320][T19955] /dev/rnullb0: Can't open blockdev
[  697.173574][ T6802] kvaser_usb 8-1:232.25: error -ENODEV: Cannot get usb endpoint(s)
[  697.229838][ T6802] usb 8-1: USB disconnect, device number 23
[  697.292142][ T5899] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  697.371238][T19969] netlink: 'syz.0.4903': attribute type 4 has an invalid length.
[  697.454469][ T5899] usb 9-1: unable to get BOS descriptor or descriptor too short
[  697.464705][ T5899] usb 9-1: not running at top speed; connect to a high speed hub
[  697.490150][ T5899] usb 9-1: config 1 has an invalid interface number: 121 but max is 0
[  697.499420][ T5899] usb 9-1: config 1 has no interface number 0
[  697.510890][ T5899] usb 9-1: config 1 interface 121 has no altsetting 0
[  697.527598][ T5899] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51
[  697.536965][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.550140][ T5899] usb 9-1: Product: syz
[  697.554910][ T5899] usb 9-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩ辬졘ꚯ뫭㌏駔질Ӹ䫕ྃﱵ薶琇Ꮔ胬㍛鎝禂⮘紒∅ᑨ섾䍉鿡ƽ烐筊ꗼ삘頉棏ꂀ㸐夢迕
[  697.568052][T19974] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4906'.
[  697.581956][ T5899] usb 9-1: SerialNumber: syz
[  697.582716][T19974] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4906'.
[  697.861791][T19956] /dev/rnullb0: Can't open blockdev
[  697.919480][ T5899] usb_ehset_test 9-1:1.121: probe with driver usb_ehset_test failed with error -32
[  697.941824][ T5899] usb 9-1: USB disconnect, device number 3
[  698.132843][T14291] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  698.293722][T14291] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  698.320508][T14291] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  698.337307][T14291] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  698.348706][T14291] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  698.364401][T14291] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  698.376329][T14291] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.394105][T14291] usb 8-1: config 0 descriptor??
[  698.609746][T19995] /dev/rnullb0: Can't open blockdev
[  698.730289][T20000] /dev/rnullb0: Can't open blockdev
[  698.841093][T14291] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  698.853064][T14291] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  698.860676][T14291] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  698.870833][T14291] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  698.883518][T14291] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  698.911751][T14291] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  698.921717][T14286] Bluetooth: hci6: command tx timeout
[  698.958846][T14291] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  698.986353][T14291] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  699.010060][T14291] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  699.042732][T14291] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  699.082698][T14291] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  699.096254][T20010] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  699.114286][T14291] usb 8-1: USB disconnect, device number 24
[  699.270300][T20011] fido_id[20011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  699.912133][ T6805] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  700.020182][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4930'.
[  700.055575][T20037] ieee802154 phy0 wpan0: encryption failed: -22
[  700.120961][ T6805] usb 1-1: unable to get BOS descriptor or descriptor too short
[  700.135051][ T6805] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[  700.153141][ T6805] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  700.163794][T20042] netlink: 'syz.9.4931': attribute type 4 has an invalid length.
[  700.172233][ T6805] usb 1-1: config 63 has no interface number 0
[  700.178437][ T6805] usb 1-1: config 63 interface 66 has no altsetting 0
[  700.195440][T20042] netlink: 'syz.9.4931': attribute type 4 has an invalid length.
[  700.196351][ T6805] usb 1-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  700.212627][T20042] FAULT_INJECTION: forcing a failure.
[  700.212627][T20042] name failslab, interval 1, probability 0, space 0, times 0
[  700.212659][T20042] CPU: 0 UID: 0 PID: 20042 Comm: syz.9.4931 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  700.212686][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  700.212696][T20042] Call Trace:
[  700.212703][T20042]  <TASK>
[  700.212712][T20042]  dump_stack_lvl+0x189/0x250
[  700.212735][T20042]  ? __pfx____ratelimit+0x10/0x10
[  700.212758][T20042]  ? __pfx_dump_stack_lvl+0x10/0x10
[  700.212775][T20042]  ? __pfx__printk+0x10/0x10
[  700.212798][T20042]  ? __pfx___might_resched+0x10/0x10
[  700.212814][T20042]  ? fs_reclaim_acquire+0x7d/0x100
[  700.212837][T20042]  should_fail_ex+0x414/0x560
[  700.212867][T20042]  should_failslab+0xa8/0x100
[  700.212889][T20042]  __kmalloc_cache_noprof+0x70/0x3d0
[  700.212908][T20042]  ? ipv6_add_addr+0x530/0x1090
[  700.212933][T20042]  ipv6_add_addr+0x530/0x1090
[  700.212958][T20042]  ? __pfx_ipv6_add_addr+0x10/0x10
[  700.212980][T20042]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  700.213011][T20042]  add_addr+0x8b/0x2d0
[  700.213034][T20042]  addrconf_init_auto_addrs+0x262/0xbb0
[  700.213051][T20042]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  700.213068][T20042]  ? __pfx_addrconf_init_auto_addrs+0x10/0x10
[  700.213083][T20042]  ? addrconf_permanent_addr+0x917/0x9d0
[  700.213102][T20042]  ? addrconf_permanent_addr+0x917/0x9d0
[  700.213120][T20042]  ? addrconf_permanent_addr+0x917/0x9d0
[  700.213146][T20042]  ? __pfx_addrconf_permanent_addr+0x10/0x10
[  700.213166][T20042]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  700.213190][T20042]  ? __pfx___mutex_lock+0x10/0x10
[  700.213217][T20042]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  700.213237][T20042]  ? tls_dev_event+0x717/0xec0
[  700.213267][T20042]  ? addrconf_link_ready+0x112/0x170
[  700.213286][T20042]  addrconf_notify+0xacc/0x1010
[  700.213304][T20042]  notifier_call_chain+0x1b3/0x3e0
[  700.213327][T20042]  __dev_notify_flags+0x18d/0x2e0
[  700.213352][T20042]  ? __pfx___dev_notify_flags+0x10/0x10
[  700.213373][T20042]  ? __dev_change_flags+0x4cc/0x6d0
[  700.213400][T20042]  ? __pfx___dev_change_flags+0x10/0x10
[  700.213424][T20042]  ? __pfx_console_unlock+0x10/0x10
[  700.213443][T20042]  ? preempt_schedule_thunk+0x16/0x30
[  700.213474][T20042]  netif_change_flags+0xe8/0x1a0
[  700.213509][T20042]  do_setlink+0xc55/0x41c0
[  700.213548][T20042]  ? __pfx_do_setlink+0x10/0x10
[  700.213571][T20042]  ? _printk+0xcf/0x120
[  700.213587][T20042]  ? __pfx____ratelimit+0x10/0x10
[  700.213619][T20042]  ? __lock_acquire+0xab9/0xd20
[  700.213650][T20042]  ? __mutex_trylock_common+0x153/0x260
[  700.213671][T20042]  ? __pfx___mutex_trylock_common+0x10/0x10
[  700.213694][T20042]  ? rcu_is_watching+0x15/0xb0
[  700.213711][T20042]  ? trace_contention_end+0x39/0x120
[  700.213729][T20042]  ? __mutex_lock+0x330/0xe80
[  700.213752][T20042]  ? __pfx_aa_get_newest_label+0x10/0x10
[  700.213774][T20042]  ? rtnl_setlink+0x4ea/0x900
[  700.213793][T20042]  ? rcu_is_watching+0x15/0xb0
[  700.213810][T20042]  ? __pfx___mutex_lock+0x10/0x10
[  700.213841][T20042]  ? ns_capable+0x8a/0xf0
[  700.213863][T20042]  rtnl_setlink+0x604/0x900
[  700.213890][T20042]  ? __pfx_rtnl_setlink+0x10/0x10
[  700.213925][T20042]  ? kasan_quarantine_put+0xdd/0x220
[  700.214018][T20042]  ? __pfx_rtnl_setlink+0x10/0x10
[  700.214038][T20042]  rtnetlink_rcv_msg+0x7cf/0xb70
[  700.214063][T20042]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  700.214084][T20042]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  700.214103][T20042]  ? ref_tracker_free+0x63a/0x7d0
[  700.214119][T20042]  ? __copy_skb_header+0xa7/0x550
[  700.214138][T20042]  ? __pfx_ref_tracker_free+0x10/0x10
[  700.214154][T20042]  ? __skb_clone+0x63/0x7a0
[  700.214177][T20042]  netlink_rcv_skb+0x208/0x470
[  700.214200][T20042]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  700.214223][T20042]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  700.214256][T20042]  ? netlink_deliver_tap+0x2e/0x1b0
[  700.214277][T20042]  ? netlink_deliver_tap+0x2e/0x1b0
[  700.214303][T20042]  netlink_unicast+0x75b/0x8d0
[  700.214335][T20042]  netlink_sendmsg+0x805/0xb30
[  700.214365][T20042]  ? __pfx_netlink_sendmsg+0x10/0x10
[  700.214390][T20042]  ? aa_sock_msg_perm+0xf1/0x1d0
[  700.214409][T20042]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  700.214431][T20042]  ? __pfx_netlink_sendmsg+0x10/0x10
[  700.214454][T20042]  __sock_sendmsg+0x219/0x270
[  700.214477][T20042]  sock_write_iter+0x258/0x330
[  700.214505][T20042]  ? __pfx_sock_write_iter+0x10/0x10
[  700.214535][T20042]  ? __lock_acquire+0xab9/0xd20
[  700.214565][T20042]  do_iter_readv_writev+0x56b/0x7f0
[  700.214590][T20042]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  700.214615][T20042]  ? bpf_lsm_file_permission+0x9/0x20
[  700.214630][T20042]  ? security_file_permission+0x75/0x290
[  700.214653][T20042]  ? rw_verify_area+0x258/0x650
[  700.214675][T20042]  vfs_writev+0x31a/0x960
[  700.214702][T20042]  ? __lock_acquire+0xab9/0xd20
[  700.214725][T20042]  ? __pfx_vfs_writev+0x10/0x10
[  700.214762][T20042]  ? __fget_files+0x2a/0x420
[  700.214788][T20042]  ? __fget_files+0x3a0/0x420
[  700.214807][T20042]  ? __fget_files+0x2a/0x420
[  700.214837][T20042]  do_writev+0x14d/0x2d0
[  700.214862][T20042]  ? __pfx_do_writev+0x10/0x10
[  700.214882][T20042]  ? rcu_is_watching+0x15/0xb0
[  700.214903][T20042]  ? do_syscall_64+0xbe/0x3b0
[  700.214928][T20042]  do_syscall_64+0xfa/0x3b0
[  700.214947][T20042]  ? lockdep_hardirqs_on+0x9c/0x150
[  700.214967][T20042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.214983][T20042]  ? clear_bhb_loop+0x60/0xb0
[  700.215003][T20042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.215018][T20042] RIP: 0033:0x7f022d38e929
[  700.215034][T20042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  700.215049][T20042] RSP: 002b:00007f022b1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  700.215067][T20042] RAX: ffffffffffffffda RBX: 00007f022d5b6080 RCX: 00007f022d38e929
[  700.215079][T20042] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[  700.215090][T20042] RBP: 00007f022b1f6090 R08: 0000000000000000 R09: 0000000000000000
[  700.215101][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  700.215111][T20042] R13: 0000000000000000 R14: 00007f022d5b6080 R15: 00007ffe9fa2f048
[  700.215138][T20042]  </TASK>
[  700.326714][ T5899] usb 8-1: new full-speed USB device number 25 using dummy_hcd
[  700.369583][ T6805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.442585][ T5153] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  700.442874][ T5153] Bluetooth: hci0: command 0x041b tx timeout
[  700.523050][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  700.523082][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  700.523117][ T5899] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  700.523137][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.534600][ T6805] usb 1-1: Product: syz
[  700.568203][ T5899] usb 8-1: config 0 descriptor??
[  700.571984][ T6805] usb 1-1: Manufacturer: syz
[  700.572003][ T6805] usb 1-1: SerialNumber: syz
[  700.928965][ T5899] hub 8-1:0.0: USB hub found
[  700.960311][ T6805] uvcvideo 1-1:63.66: probe with driver uvcvideo failed with error -22
[  700.999488][ T6805] usb 1-1: USB disconnect, device number 77
[  701.130763][ T5899] hub 8-1:0.0: config failed, can't read hub descriptor (err -90)
[  701.391046][ T5899] usbhid 8-1:0.0: can't add hid device: -71
[  701.397102][ T5899] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  701.440644][ T5899] usb 8-1: USB disconnect, device number 25
[  701.589703][T20062] netlink: 'syz.9.4941': attribute type 1 has an invalid length.
[  701.691114][T20066] ieee802154 phy0 wpan0: encryption failed: -22
[  701.851373][T20073] fuse: Bad value for 'user_id'
[  701.856270][T20073] fuse: Bad value for 'user_id'
[  701.871492][T20073] nfs: Unknown parameter '�-'
[  701.877270][T20073] /dev/rnullb0: Can't open blockdev
[  701.990693][ T5899] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  702.121281][ T5899] usb 10-1: device descriptor read/64, error -71
[  702.138032][T20084] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  702.369851][ T5899] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  702.509800][ T5899] usb 10-1: device descriptor read/64, error -71
[  702.542983][T20100] netlink: 'syz.0.4957': attribute type 27 has an invalid length.
[  702.620429][ T5899] usb usb10-port1: attempt power cycle
[  702.624966][T20105] batadv_slave_1: entered promiscuous mode
[  702.786037][T20104] batadv_slave_1: left promiscuous mode
[  702.962661][ T5899] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  702.983710][T20113] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4961'.
[  703.017375][ T5899] usb 10-1: device descriptor read/8, error -71
[  703.133261][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4963'.
[  703.239818][ T6805] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  703.286934][ T5899] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  703.311131][ T5899] usb 10-1: device descriptor read/8, error -71
[  703.399315][ T6805] usb 8-1: device descriptor read/64, error -71
[  703.429959][ T5899] usb usb10-port1: unable to enumerate USB device
[  703.669294][ T6805] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  703.724913][T20131] /dev/rnullb0: Can't open blockdev
[  703.799645][ T6805] usb 8-1: device descriptor read/64, error -71
[  703.919615][ T6805] usb usb8-port1: attempt power cycle
[  703.999332][T14291] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  704.150523][T14291] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  704.165222][T14291] usb 9-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  704.174317][T14291] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  704.188922][T14291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.192552][T20138] /dev/rnullb0: Can't open blockdev
[  704.280272][ T6805] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  704.308554][ T6805] usb 8-1: device descriptor read/8, error -71
[  704.353937][T20144] lo speed is unknown, defaulting to 1000
[  704.572735][ T6805] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  704.614952][ T6805] usb 8-1: device descriptor read/8, error -71
[  704.731423][ T6805] usb usb8-port1: unable to enumerate USB device
[  704.767042][T20154] netlink: 'syz.8.4970': attribute type 27 has an invalid length.
[  704.832372][T20156] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4977'.
[  704.987802][T20154] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.995376][T20154] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.101986][T20154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  705.118298][T20154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  705.270509][   T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.290790][   T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.300432][   T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.310289][   T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.661563][   T30] audit: type=1326 audit(2000000586.530:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.9.4981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f022d38e929 code=0x0
[  705.753609][T20173] netlink: 'syz.9.4981': attribute type 11 has an invalid length.
[  705.794616][T20175] tmpfs: Unknown parameter 'nos'
[  706.118366][ T5153] Bluetooth: hci0: command 0x041b tx timeout
[  706.118717][T14286] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  706.283678][ T5153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  706.293858][ T5153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  706.302288][ T5153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  706.310607][ T5153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  706.320668][ T5153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  706.362388][T20178] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4986'.
[  706.364821][T20181] lo speed is unknown, defaulting to 1000
[  706.466532][T19676] bond0: (slave syz_tun): Releasing backup interface
[  706.592683][T20186] /dev/rnullb0: Can't open blockdev
[  706.764738][T20191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.799495][T18500] usb 9-1: USB disconnect, device number 4
[  706.828894][T20191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.840191][T20191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.850747][T20191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.860436][T20191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.973116][T20197] /dev/rnullb0: Can't open blockdev
[  706.982136][T20199] netlink: 'syz.9.4991': attribute type 39 has an invalid length.
[  707.010849][T20181] chnl_net:caif_netlink_parms(): no params data found
[  707.117465][T20204] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4993'.
[  707.480449][T20181] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.488172][T20181] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.497690][T20181] bridge_slave_0: entered allmulticast mode
[  707.505556][T20181] bridge_slave_0: entered promiscuous mode
[  707.517840][T20181] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.525126][T20181] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.535287][T20181] bridge_slave_1: entered allmulticast mode
[  707.543411][T20181] bridge_slave_1: entered promiscuous mode
[  707.647416][T18500] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  707.666836][T20181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  707.698833][T20181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  707.801377][T20181] team0: Port device team_slave_0 added
[  707.809273][T18500] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  707.821692][T20181] team0: Port device team_slave_1 added
[  707.827403][T18500] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  707.847635][T18500] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  707.856828][T18500] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.889155][T18500] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  707.910626][T18500] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  707.936341][T18500] usb 8-1: Product: syz
[  707.944029][T18500] usb 8-1: Manufacturer: syz
[  707.952013][T20181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  707.973804][T18500] cdc_wdm 8-1:1.0: skipping garbage
[  707.979444][T18500] cdc_wdm 8-1:1.0: skipping garbage
[  707.984738][T20181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  708.013455][T18500] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  708.021350][T18500] cdc_wdm 8-1:1.0: Unknown control protocol
[  708.045483][T20181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  708.106665][T20238] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5005'.
[  708.107342][T20181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  708.128429][T20181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  708.155960][T20181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  708.181947][T20240] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.5006'.
[  708.248624][T20240] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.5006'.
[  708.263108][T20240] netlink: 584 bytes leftover after parsing attributes in process `syz.8.5006'.
[  708.303515][T20181] hsr_slave_0: entered promiscuous mode
[  708.311088][T20181] hsr_slave_1: entered promiscuous mode
[  708.317775][T20181] debugfs: 'hsr0' already exists in 'hsr'
[  708.323645][T20181] Cannot create hsr debugfs directory
[  708.357974][T14286] Bluetooth: hci7: command tx timeout
[  708.406811][T20217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  708.417459][T20246] tipc: Started in network mode
[  708.424236][T20217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  708.425118][T20246] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  708.446797][T20246] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  708.473624][T18500] usb 8-1: USB disconnect, device number 30
[  708.476752][ T5899] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  708.650104][ T5899] usb 9-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config
[  708.667093][ T5899] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  708.692889][ T5899] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  708.723767][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  708.739794][ T5899] usb 9-1: SerialNumber: syz
[  708.981469][ T5899] usb 9-1: 0:2 : does not exist
[  709.020763][ T5899] usb 9-1: USB disconnect, device number 5
[  709.079839][ T3527] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.140161][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  709.307876][T20259] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5015'.
[  709.331177][T20181] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  709.345708][T20181] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  709.357816][T20181] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  709.366644][ T6802] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  709.369082][T20181] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  709.505056][T20181] 8021q: adding VLAN 0 to HW filter on device bond0
[  709.549793][ T6802] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  709.550433][T20181] 8021q: adding VLAN 0 to HW filter on device team0
[  709.561594][ T6802] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  709.593784][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.600954][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  709.610285][ T6802] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.628924][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.636093][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  709.656003][ T6802] usb 10-1: config 0 descriptor??
[  709.676514][ T5899] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  709.827728][ T5899] usb 8-1: Using ep0 maxpacket: 32
[  709.835824][ T5899] usb 8-1: config 0 descriptor has 1 excess byte, ignoring
[  709.856478][ T5899] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74
[  709.885489][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.895605][ T5899] usb 8-1: Product: syz
[  709.905737][ T5899] usb 8-1: Manufacturer: syz
[  709.914151][ T5899] usb 8-1: SerialNumber: syz
[  709.944629][ T5899] usb 8-1: config 0 descriptor??
[  709.961078][ T5899] rndis_host 8-1:0.0: skipping garbage
[  709.976973][ T5899] rndis_host 8-1:0.0: skipping garbage
[  709.985067][ T5899] usb 8-1: bad CDC descriptors
[  709.997331][ T5899] cdc_acm 8-1:0.0: skipping garbage
[  710.002688][ T5899] cdc_acm 8-1:0.0: skipping garbage
[  710.039564][T20181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  710.070528][ T6802] keytouch 0003:0926:3333.004E: fixing up Keytouch IEC report descriptor
[  710.104860][T20181] veth0_vlan: entered promiscuous mode
[  710.110951][ T6802] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.004E/input/input93
[  710.126879][T14291] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  710.143105][T20181] veth1_vlan: entered promiscuous mode
[  710.185466][T20267] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  710.186236][T20181] veth0_macvtap: entered promiscuous mode
[  710.192708][T20267] /dev/rnullb0: Can't open blockdev
[  710.210072][T20267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.216550][T20181] veth1_macvtap: entered promiscuous mode
[  710.227299][T20267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.295636][T20255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.298531][T20181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  710.318227][ T6802] keytouch 0003:0926:3333.004E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0
[  710.318320][ T6808] usb 8-1: USB disconnect, device number 31
[  710.336649][T20255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.345892][T14291] usb 9-1: config 0 has no interfaces?
[  710.363714][T14291] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  710.392968][T20181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  710.416650][T14291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  710.416678][T14291] usb 9-1: SerialNumber: syz
[  710.420717][T14291] usb 9-1: config 0 descriptor??
[  710.446630][T14286] Bluetooth: hci7: command tx timeout
[  710.449411][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  710.450593][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  710.450632][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  710.450661][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  710.629330][T20274] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5019'.
[  710.666304][ T6808] usb 9-1: USB disconnect, device number 6
[  710.729647][T10894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  710.744394][T14291] usb 10-1: USB disconnect, device number 6
[  710.756387][T10894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  710.828114][T20287] netlink: 'syz.7.5021': attribute type 4 has an invalid length.
[  710.848532][T20287] netlink: 'syz.7.5021': attribute type 4 has an invalid length.
[  710.875338][T20287] FAULT_INJECTION: forcing a failure.
[  710.875338][T20287] name failslab, interval 1, probability 0, space 0, times 0
[  710.892737][T20287] CPU: 0 UID: 0 PID: 20287 Comm: syz.7.5021 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  710.892761][T20287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  710.892772][T20287] Call Trace:
[  710.892779][T20287]  <TASK>
[  710.892787][T20287]  dump_stack_lvl+0x189/0x250
[  710.892810][T20287]  ? __pfx____ratelimit+0x10/0x10
[  710.892833][T20287]  ? __pfx_dump_stack_lvl+0x10/0x10
[  710.892851][T20287]  ? __pfx__printk+0x10/0x10
[  710.892903][T20287]  ? __pfx___might_resched+0x10/0x10
[  710.892918][T20287]  ? fs_reclaim_acquire+0x7d/0x100
[  710.892972][T20287]  should_fail_ex+0x414/0x560
[  710.892991][T20287]  should_failslab+0xa8/0x100
[  710.893004][T20287]  __kmalloc_noprof+0xcb/0x4f0
[  710.893015][T20287]  ? fib_create_info+0x1728/0x3210
[  710.893031][T20287]  fib_create_info+0x1728/0x3210
[  710.893048][T20287]  ? lockdep_hardirqs_on+0x9c/0x150
[  710.893062][T20287]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  710.893079][T20287]  fib_table_insert+0xc6/0x1b50
[  710.893101][T20287]  ? l3mdev_fib_table+0x18/0x160
[  710.893116][T20287]  fib_magic+0x2c4/0x390
[  710.893129][T20287]  ? __pfx_fib_magic+0x10/0x10
[  710.893147][T20287]  ? lockdep_rtnl_is_held+0x26/0x40
[  710.893157][T20287]  ? ip_mc_up+0x283/0x300
[  710.893173][T20287]  fib_add_ifaddr+0x144/0x5f0
[  710.893188][T20287]  fib_netdev_event+0x382/0x490
[  710.893201][T20287]  notifier_call_chain+0x1b3/0x3e0
[  710.893219][T20287]  __dev_notify_flags+0x18d/0x2e0
[  710.893236][T20287]  ? __pfx___dev_notify_flags+0x10/0x10
[  710.893249][T20287]  ? __dev_change_flags+0x4cc/0x6d0
[  710.893267][T20287]  ? __pfx___dev_change_flags+0x10/0x10
[  710.893280][T20287]  ? finish_task_switch+0x18b/0x950
[  710.893299][T20287]  netif_change_flags+0xe8/0x1a0
[  710.893318][T20287]  do_setlink+0xc55/0x41c0
[  710.893341][T20287]  ? trace_sched_exit_tp+0x38/0x120
[  710.893364][T20287]  ? __pfx_do_setlink+0x10/0x10
[  710.893382][T20287]  ? __lock_acquire+0xab9/0xd20
[  710.893401][T20287]  ? do_raw_spin_lock+0x121/0x290
[  710.893418][T20287]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  710.893429][T20287]  ? lockdep_hardirqs_on+0x9c/0x150
[  710.893441][T20287]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  710.893452][T20287]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  710.893466][T20287]  ? rcu_is_watching+0x15/0xb0
[  710.893477][T20287]  ? __mutex_lock+0xa6d/0xe80
[  710.893490][T20287]  ? __mutex_lock+0x51b/0xe80
[  710.893512][T20287]  ? rtnl_setlink+0x4ea/0x900
[  710.893529][T20287]  ? __pfx___mutex_lock+0x10/0x10
[  710.893555][T20287]  ? ns_capable+0x8a/0xf0
[  710.893571][T20287]  rtnl_setlink+0x604/0x900
[  710.893595][T20287]  ? __pfx_rtnl_setlink+0x10/0x10
[  710.893614][T20287]  ? __lock_acquire+0xab9/0xd20
[  710.893645][T20287]  ? __lock_acquire+0xab9/0xd20
[  710.893724][T20287]  ? __pfx_rtnl_setlink+0x10/0x10
[  710.893738][T20287]  rtnetlink_rcv_msg+0x7cf/0xb70
[  710.893757][T20287]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  710.893773][T20287]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  710.893795][T20287]  netlink_rcv_skb+0x208/0x470
[  710.893809][T20287]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  710.893823][T20287]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  710.893843][T20287]  ? netlink_deliver_tap+0x2e/0x1b0
[  710.893861][T20287]  ? netlink_deliver_tap+0x2e/0x1b0
[  710.893886][T20287]  netlink_unicast+0x75b/0x8d0
[  710.893915][T20287]  netlink_sendmsg+0x805/0xb30
[  710.893946][T20287]  ? __pfx_netlink_sendmsg+0x10/0x10
[  710.893964][T20287]  ? aa_sock_msg_perm+0xf1/0x1d0
[  710.893977][T20287]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  710.893990][T20287]  ? __pfx_netlink_sendmsg+0x10/0x10
[  710.894004][T20287]  __sock_sendmsg+0x219/0x270
[  710.894018][T20287]  sock_write_iter+0x258/0x330
[  710.894031][T20287]  ? __pfx_sock_write_iter+0x10/0x10
[  710.894055][T20287]  ? __lock_acquire+0xab9/0xd20
[  710.894073][T20287]  do_iter_readv_writev+0x56b/0x7f0
[  710.894088][T20287]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  710.894102][T20287]  ? bpf_lsm_file_permission+0x9/0x20
[  710.894111][T20287]  ? security_file_permission+0x75/0x290
[  710.894126][T20287]  ? rw_verify_area+0x258/0x650
[  710.894138][T20287]  vfs_writev+0x31a/0x960
[  710.894155][T20287]  ? __lock_acquire+0xab9/0xd20
[  710.894170][T20287]  ? __pfx_vfs_writev+0x10/0x10
[  710.894191][T20287]  ? __fget_files+0x2a/0x420
[  710.894207][T20287]  ? __fget_files+0x3a0/0x420
[  710.894220][T20287]  ? __fget_files+0x2a/0x420
[  710.894238][T20287]  do_writev+0x14d/0x2d0
[  710.894253][T20287]  ? __pfx_do_writev+0x10/0x10
[  710.894265][T20287]  ? rcu_is_watching+0x15/0xb0
[  710.894277][T20287]  ? do_syscall_64+0xbe/0x3b0
[  710.894292][T20287]  do_syscall_64+0xfa/0x3b0
[  710.894306][T20287]  ? lockdep_hardirqs_on+0x9c/0x150
[  710.894317][T20287]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.894326][T20287]  ? clear_bhb_loop+0x60/0xb0
[  710.894338][T20287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.894347][T20287] RIP: 0033:0x7f497f18e929
[  710.894357][T20287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  710.894365][T20287] RSP: 002b:00007f497ffef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  710.894377][T20287] RAX: ffffffffffffffda RBX: 00007f497f3b6080 RCX: 00007f497f18e929
[  710.894384][T20287] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[  710.894390][T20287] RBP: 00007f497ffef090 R08: 0000000000000000 R09: 0000000000000000
[  710.894396][T20287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  710.894402][T20287] R13: 0000000000000000 R14: 00007f497f3b6080 R15: 00007ffff19c2fd8
[  710.894417][T20287]  </TASK>
[  711.427532][    C0] vkms_vblank_simulate: vblank timer overrun
[  711.526676][T20289] syz.9.5022: attempt to access beyond end of device
[  711.526676][T20289] nbd9: rw=4096, sector=2, nr_sectors = 2 limit=0
[  711.558964][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  711.571031][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  711.616364][T20289] EXT4-fs (nbd9): unable to read superblock
[  711.713132][T20293] netlink: 'syz.8.5031': attribute type 27 has an invalid length.
[  711.897946][T20301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5023'.
[  711.941719][T20302] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5025'.
[  712.175750][ T6803] usb 8-1: new full-speed USB device number 32 using dummy_hcd
[  712.328804][ T6803] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  712.351327][ T6803] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.378925][ T6803] usb 8-1: config 0 descriptor??
[  712.407318][ T6803] cp210x 8-1:0.0: cp210x converter detected
[  712.515460][T14286] Bluetooth: hci7: command tx timeout
[  712.599498][T20320] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  712.828459][T20303] netlink: 348 bytes leftover after parsing attributes in process `syz.7.5024'.
[  712.839771][T20303] netlink: 1192 bytes leftover after parsing attributes in process `syz.7.5024'.
[  712.853527][ T6803] cp210x 8-1:0.0: failed to get vendor val 0x370c size 13: -71
[  712.870355][ T6803] cp210x 8-1:0.0: GPIO initialisation failed: -71
[  712.883580][ T6803] usb 8-1: cp210x converter now attached to ttyUSB0
[  712.908624][ T6803] usb 8-1: USB disconnect, device number 32
[  712.929547][ T6803] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  712.939188][ T6803] cp210x 8-1:0.0: device disconnected
[  713.124885][ T6808] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  713.253405][T20332] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5040'.
[  713.284917][ T6808] usb 10-1: Using ep0 maxpacket: 32
[  713.301560][ T6808] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[  713.322364][ T6808] usb 10-1: config 0 has no interface number 0
[  713.336993][ T6808] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  713.351104][ T6808] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.359561][ T6808] usb 10-1: Product: syz
[  713.364093][ T6808] usb 10-1: Manufacturer: syz
[  713.369064][ T6808] usb 10-1: SerialNumber: syz
[  713.389157][ T6808] usb 10-1: config 0 descriptor??
[  713.401369][ T6808] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  713.485974][T20342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5042'.
[  713.504052][T20340] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5043'.
[  713.602176][ T6808] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  713.620138][ T6808] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  713.800648][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7
[  713.820707][T20348] FAULT_INJECTION: forcing a failure.
[  713.820707][T20348] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  713.837460][T20348] CPU: 1 UID: 0 PID: 20348 Comm: syz.8.5045 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  713.837486][T20348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  713.837498][T20348] Call Trace:
[  713.837506][T20348]  <TASK>
[  713.837514][T20348]  dump_stack_lvl+0x189/0x250
[  713.837541][T20348]  ? __pfx____ratelimit+0x10/0x10
[  713.837564][T20348]  ? __pfx_dump_stack_lvl+0x10/0x10
[  713.837583][T20348]  ? __pfx__printk+0x10/0x10
[  713.837616][T20348]  should_fail_ex+0x414/0x560
[  713.837648][T20348]  _copy_to_user+0x31/0xb0
[  713.837668][T20348]  simple_read_from_buffer+0xe1/0x170
[  713.837696][T20348]  proc_fail_nth_read+0x1df/0x250
[  713.837716][T20348]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  713.837736][T20348]  ? rw_verify_area+0x258/0x650
[  713.837755][T20348]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  713.837774][T20348]  vfs_read+0x200/0x980
[  713.837799][T20348]  ? __pfx___mutex_lock+0x10/0x10
[  713.837821][T20348]  ? __pfx_vfs_read+0x10/0x10
[  713.837843][T20348]  ? __fget_files+0x2a/0x420
[  713.837870][T20348]  ? __fget_files+0x3a0/0x420
[  713.837890][T20348]  ? __fget_files+0x2a/0x420
[  713.837921][T20348]  ksys_read+0x145/0x250
[  713.837943][T20348]  ? __pfx_ksys_read+0x10/0x10
[  713.837969][T20348]  ? do_syscall_64+0xbe/0x3b0
[  713.837995][T20348]  do_syscall_64+0xfa/0x3b0
[  713.838017][T20348]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.838033][T20348]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  713.838050][T20348]  ? clear_bhb_loop+0x60/0xb0
[  713.838070][T20348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.838087][T20348] RIP: 0033:0x7f9b7eb8d33c
[  713.838108][T20348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  713.838124][T20348] RSP: 002b:00007f9b7f997030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  713.838142][T20348] RAX: ffffffffffffffda RBX: 00007f9b7edb5fa0 RCX: 00007f9b7eb8d33c
[  713.838156][T20348] RDX: 000000000000000f RSI: 00007f9b7f9970a0 RDI: 0000000000000003
[  713.838167][T20348] RBP: 00007f9b7f997090 R08: 0000000000000000 R09: 0000000000000000
[  713.838178][T20348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  713.838188][T20348] R13: 0000000000000000 R14: 00007f9b7edb5fa0 R15: 00007ffdf86db678
[  713.838218][T20348]  </TASK>
[  714.182059][T20353] /dev/rnullb0: Can't open blockdev
[  714.457213][T20358] loop8: detected capacity change from 0 to 7
[  714.475960][T20358] Dev loop8: unable to read RDB block 7
[  714.481616][T20358]  loop8: unable to read partition table
[  714.487627][T18500] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  714.497460][T20358] loop8: partition table beyond EOD, truncated
[  714.503728][T20358] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  714.596204][T14286] Bluetooth: hci7: command tx timeout
[  714.649231][T18500] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  714.666513][T18500] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  714.684511][T18500] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  714.693717][T18500] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  714.708069][T18500] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  714.717713][T18500] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  714.726297][T18500] usb 9-1: Product: syz
[  714.730624][T18500] usb 9-1: Manufacturer: syz
[  714.771775][T18500] cdc_wdm 9-1:1.0: skipping garbage
[  714.792889][T18500] cdc_wdm 9-1:1.0: skipping garbage
[  714.800810][T18500] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  714.808273][T18500] cdc_wdm 9-1:1.0: Unknown control protocol
[  715.062193][ T6802] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  715.082830][    C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71
[  715.095509][T18500] usb 10-1: USB disconnect, device number 7
[  715.109412][T18500] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  715.128342][T18500] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  715.149472][T18500] quatech2 10-1:0.51: device disconnected
[  715.181493][T20356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  715.200563][T20356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  715.221928][ T6808] usb 9-1: USB disconnect, device number 7
[  715.224049][ T6802] usb 8-1: Using ep0 maxpacket: 16
[  715.236945][ T6802] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  715.246876][ T6802] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.258948][ T6802] usb 8-1: config 0 descriptor??
[  715.267938][ T6802] gspca_main: sonixj-2.14.0 probing 0471:0327
[  716.015479][T20368] netlink: 156 bytes leftover after parsing attributes in process `syz.9.5054'.
[  716.330845][T20377] /dev/rnullb0: Can't open blockdev
[  716.399066][T20372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  716.483043][ T6808] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  716.663644][ T6808] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  716.684457][ T6808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  716.703392][ T6808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  716.703412][ T6802] gspca_sonixj: i2c_w8 err -71
[  716.721991][ T6808] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  716.736522][ T6808] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  716.743293][ T6802] sonixj 8-1:0.0: probe with driver sonixj failed with error -71
[  716.746185][ T6808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.762328][T20390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5062'.
[  716.776862][ T6802] usb 8-1: USB disconnect, device number 33
[  716.802898][ T6808] usb 9-1: config 0 descriptor??
[  717.016698][ T6808] hid_parser_main: 5 callbacks suppressed
[  717.016720][ T6808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  717.037820][T20394] input: syz0 as /devices/virtual/input/input94
[  717.050473][ T6808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  717.083128][ T6808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  717.090564][ T6808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  717.103283][ T6808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  717.110723][ T6808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  717.142696][ T6808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  717.150137][ T6808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  717.192708][ T6808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  717.210879][ T6808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  717.250131][ T6808] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  717.278708][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5066'.
[  717.301395][ T6808] usb 9-1: USB disconnect, device number 8
[  717.461515][T20404] fido_id[20404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  717.631467][T20418] /dev/rnullb0: Can't open blockdev
[  717.663183][ T6802] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  717.822550][ T6802] usb 1-1: Using ep0 maxpacket: 8
[  717.837242][ T6802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  717.864345][ T6802] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  717.876032][ T6802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.909649][ T6802] usb 1-1: Product: syz
[  717.920207][ T6802] usb 1-1: Manufacturer: syz
[  717.929903][ T6802] usb 1-1: SerialNumber: syz
[  717.942911][ T6802] usb 1-1: config 0 descriptor??
[  717.964016][ T6802] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  717.970505][T20429] netlink: 'syz.9.5075': attribute type 4 has an invalid length.
[  717.978874][ T6802] usb 1-1: selecting invalid altsetting 2
[  717.999148][ T6802] snd_usb_toneport 1-1:0.0: set_interface failed
[  718.000967][T20429] netlink: 'syz.9.5075': attribute type 4 has an invalid length.
[  718.019589][ T6802] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  718.038893][ T6802] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  718.171906][ T6802] usb 1-1: USB disconnect, device number 78
[  718.176682][T20438] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5078'.
[  718.217326][T20438] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5078'.
[  718.415081][T20447] syz.0.5081: attempt to access beyond end of device
[  718.415081][T20447] loop0: rw=0, sector=0, nr_sectors = 1 limit=0
[  718.472703][ T5899] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[  718.653941][ T5899] usb 9-1: config 65 has an invalid interface number: 95 but max is 0
[  718.672099][ T5899] usb 9-1: config 65 has no interface number 0
[  718.689002][ T5899] usb 9-1: string descriptor 0 read error: -22
[  718.695653][ T5899] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6
[  718.704956][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.721005][ T5899] usbtest 9-1:65.95: Linux gadget zero
[  718.727050][ T5899] usbtest 9-1:65.95: low-speed {control in/out} tests (+alt)
[  718.923347][ T5899] usb 9-1: USB disconnect, device number 9
[  719.707187][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5099'.
[  720.156216][T20504] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5104'.
[  720.173986][T20503] openvswitch: netlink: Duplicate or invalid key (type 0).
[  720.201339][T20503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  720.227330][T20507] /dev/rnullb0: Can't open blockdev
[  720.303210][T20509] netlink: 'syz.7.5106': attribute type 27 has an invalid length.
[  720.379894][T20511] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  720.740842][ T5899] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  720.761076][ T6808] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  720.822521][T20523] netlink: 'syz.0.5113': attribute type 27 has an invalid length.
[  720.879792][T20523] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.887259][T20523] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.912973][ T6808] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  720.920396][ T5899] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  720.930872][ T6812] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  720.930979][ T6808] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  720.930999][ T6808] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  720.931042][ T6808] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  720.933868][ T6808] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  720.948993][ T5899] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  720.949019][ T5899] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  720.949063][ T5899] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  720.952069][ T5899] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  720.969321][ T6808] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  720.969344][ T6808] usb 9-1: Product: syz
[  720.969357][ T6808] usb 9-1: Manufacturer: syz
[  721.001357][ T6808] cdc_wdm 9-1:1.0: skipping garbage
[  721.036104][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  721.038529][ T6808] cdc_wdm 9-1:1.0: skipping garbage
[  721.058801][ T6808] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  721.065088][ T6808] cdc_wdm 9-1:1.0: Unknown control protocol
[  721.111088][ T6812] usb 8-1: Using ep0 maxpacket: 16
[  721.118155][ T6812] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  721.121786][ T5899] usb 10-1: Product: syz
[  721.129655][ T6812] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  721.158253][ T5899] usb 10-1: Manufacturer: syz
[  721.165165][ T6812] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  721.166897][T20523] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  721.174828][ T6812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  721.192372][ T6812] usb 8-1: SerialNumber: syz
[  721.204736][ T5899] cdc_wdm 10-1:1.0: skipping garbage
[  721.210038][ T5899] cdc_wdm 10-1:1.0: skipping garbage
[  721.215054][ T6812] cdc_acm 8-1:1.0: skipping garbage
[  721.228573][T20523] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  721.259062][ T5899] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device
[  721.268227][ T5899] cdc_wdm 10-1:1.0: Unknown control protocol
[  721.479309][   T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  721.500782][   T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  721.505029][ T6803] usb 8-1: USB disconnect, device number 34
[  721.527276][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -EPIPE
[  721.541162][   T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  721.550082][   T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  721.562397][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  721.563052][ T5899] usb 9-1: USB disconnect, device number 10
[  721.569008][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  721.580949][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  721.809585][T20532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  721.818773][T20532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  721.990627][ T6812] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  722.161132][ T6812] usb 1-1: Using ep0 maxpacket: 32
[  722.178570][ T6812] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  722.198033][ T6812] usb 1-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[  722.208776][ T6812] usb 1-1: Product: syz
[  722.220154][ T6812] usb 1-1: Manufacturer: syz
[  722.237864][ T6812] usb 1-1: SerialNumber: syz
[  722.250529][ T6812] usb 1-1: config 0 descriptor??
[  722.269372][ T6812] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  722.350251][ T5899] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  722.490076][ T6802] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  722.510050][ T5899] usb 8-1: Using ep0 maxpacket: 16
[  722.516972][ T5899] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  722.525464][ T5899] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  722.536032][ T5899] usb 8-1: config 0 has no interface number 0
[  722.544461][ T5899] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  722.553979][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.563121][ T5899] usb 8-1: Product: syz
[  722.567437][ T5899] usb 8-1: Manufacturer: syz
[  722.572130][ T5899] usb 8-1: SerialNumber: syz
[  722.579462][ T5899] usb 8-1: config 0 descriptor??
[  722.589164][ T5899] usb 8-1: Found UVC 0.00 device syz (046d:08f3)
[  722.595854][ T5899] usb 8-1: No valid video chain found.
[  722.645866][ T6802] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  722.656531][ T6802] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  722.668225][ T6802] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  722.677648][ T6802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  722.685862][ T6802] usb 9-1: SerialNumber: syz
[  722.790369][T20534] /dev/rnullb0: Can't open blockdev
[  722.797422][ T5899] usb 8-1: USB disconnect, device number 35
[  722.897060][T20538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.898525][ T6812] gspca_stk1135: reg_w 0xd err -71
[  722.913442][ T6812] gspca_stk1135: serial bus timeout: status=0x00
[  722.915225][T20538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.930980][ T6812] gspca_stk1135: Sensor write failed
[  722.936387][ T6812] gspca_stk1135: serial bus timeout: status=0x00
[  722.949613][ T6812] gspca_stk1135: Sensor write failed
[  722.979794][ T6812] gspca_stk1135: serial bus timeout: status=0x00
[  723.005756][ T6812] gspca_stk1135: Sensor read failed
[  723.014972][ T6812] gspca_stk1135: serial bus timeout: status=0x00
[  723.028374][T20544] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  723.059715][ T6812] gspca_stk1135: Sensor read failed
[  723.073641][ T6812] gspca_stk1135: Detected sensor type unknown (0x0)
[  723.150592][ T6812] gspca_stk1135: serial bus timeout: status=0x00
[  723.156954][ T6812] gspca_stk1135: Sensor read failed
[  723.163082][ T6812] gspca_stk1135: serial bus timeout: status=0x00
[  723.169423][ T6812] gspca_stk1135: Sensor read failed
[  723.191716][ T6812] gspca_stk1135: serial bus timeout: status=0x00
[  723.198081][ T6812] gspca_stk1135: Sensor write failed
[  723.203434][ T6812] gspca_stk1135: serial bus timeout: status=0x00
[  723.210780][ T6812] gspca_stk1135: Sensor write failed
[  723.216163][ T6812] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  723.237515][ T6812] usb 1-1: USB disconnect, device number 79
[  723.238384][ T6802] usb 9-1: 0:2 : does not exist
[  723.261556][ T6802] usb 9-1: unit 255 not found!
[  723.287591][ T6802] usb 9-1: USB disconnect, device number 11
[  723.322002][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  723.420203][T18500] usb 10-1: USB disconnect, device number 9
[  723.466278][T20548] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5122'.
[  723.649741][ T6812] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  723.832997][ T6812] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  723.862083][ T6812] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  723.888247][ T6812] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  723.899534][ T6812] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.912603][ T6812] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  723.922476][ T6812] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  723.931891][ T6812] usb 8-1: Product: syz
[  723.936191][ T6812] usb 8-1: Manufacturer: syz
[  723.958082][ T6812] cdc_wdm 8-1:1.0: skipping garbage
[  723.965147][ T6812] cdc_wdm 8-1:1.0: skipping garbage
[  723.974009][ T6812] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  723.981320][ T6812] cdc_wdm 8-1:1.0: Unknown control protocol
[  724.089540][ T6802] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  724.163173][T20546] ALSA: seq fatal error: cannot create timer (-16)
[  724.175741][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5121'.
[  724.234246][ T6802] usb 10-1: device descriptor read/64, error -71
[  724.349124][ T5899] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  724.479060][ T6802] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  724.510886][ T5899] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  724.521910][T20571] /dev/rnullb0: Can't open blockdev
[  724.526967][ T5899] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  724.547406][ T5899] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  724.557326][ T5899] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  724.579908][ T5899] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  724.593407][T20575] netlink: 'syz.0.5132': attribute type 2 has an invalid length.
[  724.598990][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  724.617132][ T5899] usb 9-1: Product: syz
[  724.621552][ T5899] usb 9-1: Manufacturer: syz
[  724.629006][ T6802] usb 10-1: device descriptor read/64, error -71
[  724.637703][ T5899] cdc_wdm 9-1:1.0: skipping garbage
[  724.643032][ T5899] cdc_wdm 9-1:1.0: skipping garbage
[  724.651250][ T5899] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device
[  724.657193][ T5899] cdc_wdm 9-1:1.0: Unknown control protocol
[  724.739190][ T6802] usb usb10-port1: attempt power cycle
[  724.841600][    C0] cdc_wdm 8-1:1.0: unknown notification 172 received: index 44045 len 15
[  724.849145][ T6812] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  724.850824][    C0] cdc_wdm 8-1:1.0: unknown notification 2 received: index 1440 len 1
[  724.866264][    C0] cdc_wdm 8-1:1.0: unknown notification 5 received: index 1536 len 53248
[  724.875223][    C0] cdc_wdm 8-1:1.0: unknown notification 8 received: index 53248 len 7
[  724.883811][    C0] cdc_wdm 8-1:1.0: unknown notification 20 received: index 0 len 1024
[  724.892423][    C0] cdc_wdm 8-1:1.0: unknown notification 43 received: index 2048 len 3584
[  724.904381][ T5899] usb 9-1: USB disconnect, device number 12
[  725.008800][ T6812] usb 1-1: Using ep0 maxpacket: 16
[  725.015832][ T6812] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  725.028160][ T6812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  725.039147][ T6812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  725.053320][ T6812] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  725.062511][ T6812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.070874][ T6812] usb 1-1: Product: syz
[  725.075048][ T6812] usb 1-1: Manufacturer: syz
[  725.079773][ T6812] usb 1-1: SerialNumber: syz
[  725.087500][ T6812] usb 1-1: config 0 descriptor??
[  725.088735][ T6802] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  725.108223][ T6808] usb 8-1: USB disconnect, device number 36
[  725.125465][ T6802] usb 10-1: device descriptor read/8, error -71
[  725.304639][ T6812] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -12
[  725.324076][ T6812] usb 1-1: USB disconnect, device number 80
[  725.370280][ T6802] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  725.393439][ T6802] usb 10-1: device descriptor read/8, error -71
[  725.509057][ T6802] usb usb10-port1: unable to enumerate USB device
[  725.674093][T20579] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5134'.
[  725.683356][T20579] bridge_slave_1: left allmulticast mode
[  725.691464][T20579] bridge_slave_1: left promiscuous mode
[  725.697447][T20579] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.718903][T20579] bridge_slave_0: left allmulticast mode
[  725.724605][T20579] bridge_slave_0: left promiscuous mode
[  725.732440][T20579] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.426772][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5144'.
[  726.718198][ T6808] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  726.883632][ T6808] usb 1-1: not running at top speed; connect to a high speed hub
[  726.900903][ T6808] usb 1-1: config 95 has an invalid interface number: 1 but max is 0
[  726.916040][ T6808] usb 1-1: config 95 has no interface number 0
[  726.948048][ T6808] usb 1-1: config 95 interface 1 has no altsetting 0
[  726.955418][T20607] /dev/rnullb0: Can't open blockdev
[  726.967125][ T6808] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[  726.994921][ T6808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.027870][ T6808] usb 1-1: Product: syz
[  727.032972][ T6808] usb 1-1: Manufacturer: syz
[  727.037722][ T6808] usb 1-1: SerialNumber: syz
[  727.341117][ T6808] usb 1-1: USB disconnect, device number 81
[  727.493315][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  727.799588][T20635] netlink: 'syz.9.5156': attribute type 4 has an invalid length.
[  727.836756][T20635] netlink: 'syz.9.5156': attribute type 4 has an invalid length.
[  728.057332][ T6808] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  728.227278][ T6808] usb 9-1: Using ep0 maxpacket: 16
[  728.234002][ T6808] usb 9-1: config 0 has an invalid interface number: 148 but max is 0
[  728.242768][ T6808] usb 9-1: config 0 has no interface number 0
[  728.249144][ T6808] usb 9-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  728.260490][ T6808] usb 9-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55
[  728.270791][ T6808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.284704][ T6808] usb 9-1: config 0 descriptor??
[  728.720842][ T6803] usb 9-1: USB disconnect, device number 13
[  729.125132][T20661] syz.0.5168: attempt to access beyond end of device
[  729.125132][T20661] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0
[  729.142729][T20661] syz.0.5168: attempt to access beyond end of device
[  729.142729][T20661] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0
[  729.156898][T20661] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  729.167445][T20661] syz.0.5168: attempt to access beyond end of device
[  729.167445][T20661] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0
[  729.180740][T20661] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  729.212068][T20661] syz.0.5168: attempt to access beyond end of device
[  729.212068][T20661] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[  729.226280][T20661] syz.0.5168: attempt to access beyond end of device
[  729.226280][T20661] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[  729.286712][T20661] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  729.296396][T20661] syz.0.5168: attempt to access beyond end of device
[  729.296396][T20661] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[  729.332368][T20661] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  729.342920][T20661] syz.0.5168: attempt to access beyond end of device
[  729.342920][T20661] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[  729.366713][T20661] syz.0.5168: attempt to access beyond end of device
[  729.366713][T20661] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[  729.406582][T20661] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  729.416242][T20661] syz.0.5168: attempt to access beyond end of device
[  729.416242][T20661] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[  729.464174][T20661] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  729.464649][T20670] /dev/rnullb0: Can't open blockdev
[  729.489300][T20661] syz.0.5168: attempt to access beyond end of device
[  729.489300][T20661] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[  729.513535][T20661] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  729.552659][T20661] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  729.565474][T20661] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  729.676501][ T6812] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  729.691526][T20675] /dev/rnullb0: Can't open blockdev
[  729.887332][ T6812] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  729.911565][ T6812] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  729.931471][ T6812] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  729.950194][T20691] tmpfs: Unknown parameter '�-M�'
[  729.958686][ T6812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.507245][T20705] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5185'.
[  730.572177][T20707] netlink: 'syz.9.5170': attribute type 27 has an invalid length.
[  730.786467][T20707] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.794213][T20707] bridge0: port 1(bridge_slave_0) entered disabled state
[  730.966550][T20707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  730.982587][T20707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  730.985230][T20719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5189'.
[  731.172998][   T36] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  731.207906][   T36] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  731.232116][   T36] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  731.324807][T20728] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  732.089921][T20737] netlink: 'syz.7.5195': attribute type 29 has an invalid length.
[  732.106645][T20737] netlink: 'syz.7.5195': attribute type 29 has an invalid length.
[  732.117302][T20737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5195'.
[  732.371413][T20749] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5200'.
[  732.437237][ T6808] usb 10-1: USB disconnect, device number 14
[  732.786313][T20761] input: syz0 as /devices/virtual/input/input96
[  732.902963][T20763] binder: 20762:20763 ioctl c00c620f 200000000180 returned -22
[  732.996955][T20767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5210'.
[  733.188336][ T6803] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  733.356422][T20771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  733.379846][ T6803] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[  733.389546][ T6803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  733.406212][ T6803] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  733.424246][ T6803] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  733.442985][ T6803] usb 10-1: Manufacturer: syz
[  733.476802][ T6803] usb 10-1: config 0 descriptor??
[  733.584763][ T6803] rc_core: IR keymap rc-hauppauge not found
[  733.590843][ T6803] Registered IR keymap rc-empty
[  733.611184][ T6803] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  733.645334][ T6803] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input97
[  733.750052][T20783] netlink: 'syz.0.5216': attribute type 39 has an invalid length.
[  734.023687][T20789] /dev/rnullb0: Can't open blockdev
[  734.113342][ T6803] usb 10-1: USB disconnect, device number 15
[  734.339369][T20796] /dev/rnullb0: Can't open blockdev
[  734.964359][ T6803] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  735.156446][ T6803] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  735.170463][ T6803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  735.185545][T20818] bio_check_eod: 2 callbacks suppressed
[  735.185560][T20818] syz.7.5231: attempt to access beyond end of device
[  735.185560][T20818] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  735.204391][ T6803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  735.214630][ T6803] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  735.228558][T20818] hpfs: hpfs_map_sector(): read error
[  735.244274][ T6803] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  735.244640][ T6808] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  735.260548][ T6803] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.291117][ T6803] usb 10-1: config 0 descriptor??
[  735.454600][ T6808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  735.476693][ T6808] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  735.503033][ T6808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.522484][ T6808] usb 1-1: config 0 descriptor??
[  735.715814][ T6803] plantronics 0003:047F:FFFF.0050: ignoring exceeding usage max
[  735.774926][ T6803] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  735.938937][T20835] binder: 20834:20835 ioctl c028660f 200000000140 returned -22
[  735.950508][ T6808] hid_parser_main: 5 callbacks suppressed
[  735.950529][ T6808] monterey 0003:0566:3004.0051: unknown main item tag 0x0
[  735.989006][ T6808] monterey 0003:0566:3004.0051: item fetching failed at offset 3/5
[  736.009724][ T6808] monterey 0003:0566:3004.0051: probe with driver monterey failed with error -22
[  736.038253][T20838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.077738][T20838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.148458][T20813] /dev/rnullb0: Can't open blockdev
[  736.156527][T20814] /dev/rnullb0: Can't open blockdev
[  736.191147][ T6803] usb 1-1: USB disconnect, device number 82
[  736.390517][T20846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.404490][T20846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.613466][ T6802] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  736.782638][T20854] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5244'.
[  736.909057][T20861] netlink: 'syz.0.5246': attribute type 4 has an invalid length.
[  736.939502][T20861] netlink: 'syz.0.5246': attribute type 4 has an invalid length.
[  737.329025][T20876] netlink: 'syz.7.5253': attribute type 27 has an invalid length.
[  737.434737][T20881] binder: 20879:20881 ioctl c00c620f 200000000180 returned -22
[  737.528339][T20883] tipc: New replicast peer: 255.255.255.255
[  737.536288][T20883] tipc: Enabled bearer <udp:syz2>, priority 10
[  737.721281][ T6808] usb 10-1: USB disconnect, device number 16
[  737.812072][ T6802] usb 8-1: device descriptor read/64, error -71
[  737.944141][T20894] /dev/rnullb0: Can't open blockdev
[  737.995683][T20894] netlink: 'syz.0.5261': attribute type 2 has an invalid length.
[  738.019713][T20894] cgroup2: Unknown parameter 'euid'
[  738.073702][ T6802] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  738.238377][ T6802] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  738.253340][ T6802] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  738.272656][ T5899] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  738.283404][ T6802] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  738.293721][ T6802] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  738.313331][T20906] can0: slcan on ttyS3.
[  738.322575][ T6802] usb 8-1: Manufacturer: syz
[  738.339319][ T6802] usb 8-1: config 0 descriptor??
[  738.372985][T20907] can0 (unregistered): slcan off ttyS3.
[  738.407726][T20906] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  738.422644][ T5899] usb 9-1: Using ep0 maxpacket: 16
[  738.448792][ T5899] usb 9-1: config 0 has an invalid interface number: 214 but max is 0
[  738.462459][ T6802] rc_core: IR keymap rc-hauppauge not found
[  738.484488][ T6802] Registered IR keymap rc-empty
[  738.490617][ T6802] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  738.501572][ T5899] usb 9-1: config 0 has no interface number 0
[  738.522918][ T5899] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  738.547072][ T5899] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  738.556934][ T6802] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input98
[  738.569302][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.570404][T20918] netlink: 'syz.0.5269': attribute type 4 has an invalid length.
[  738.580371][ T5899] usb 9-1: Product: syz
[  738.599212][ T5899] usb 9-1: Manufacturer: syz
[  738.607366][ T5899] usb 9-1: SerialNumber: syz
[  738.619560][ T5899] usb 9-1: config 0 descriptor??
[  738.647842][T20918] netlink: 'syz.0.5269': attribute type 4 has an invalid length.
[  738.670401][T20918] FAULT_INJECTION: forcing a failure.
[  738.670401][T20918] name failslab, interval 1, probability 0, space 0, times 0
[  738.683652][T20918] CPU: 0 UID: 0 PID: 20918 Comm: syz.0.5269 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  738.683678][T20918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  738.683689][T20918] Call Trace:
[  738.683697][T20918]  <TASK>
[  738.683705][T20918]  dump_stack_lvl+0x189/0x250
[  738.683730][T20918]  ? __pfx____ratelimit+0x10/0x10
[  738.683750][T20918]  ? __pfx_dump_stack_lvl+0x10/0x10
[  738.683769][T20918]  ? __pfx__printk+0x10/0x10
[  738.683795][T20918]  ? kasan_save_track+0x4f/0x80
[  738.683811][T20918]  ? kasan_save_track+0x3e/0x80
[  738.683827][T20918]  ? kasan_save_free_info+0x46/0x50
[  738.683847][T20918]  ? __kasan_slab_free+0x62/0x70
[  738.683868][T20918]  should_fail_ex+0x414/0x560
[  738.683898][T20918]  should_failslab+0xa8/0x100
[  738.683920][T20918]  kmem_cache_alloc_noprof+0x73/0x3c0
[  738.683936][T20918]  ? fib6_add_1+0x714/0x1460
[  738.683961][T20918]  fib6_add_1+0x714/0x1460
[  738.683999][T20918]  fib6_add+0x204/0x18a0
[  738.684033][T20918]  ? do_raw_spin_lock+0x121/0x290
[  738.684053][T20918]  ? __pfx_fib6_add+0x10/0x10
[  738.684084][T20918]  ? ip6_ins_rt+0xb2/0x120
[  738.684107][T20918]  ip6_ins_rt+0xc8/0x120
[  738.684126][T20918]  ? __pfx_ip6_ins_rt+0x10/0x10
[  738.684154][T20918]  ? nlmsg_notify+0xf0/0x1a0
[  738.684173][T20918]  ? nlmsg_notify+0x14a/0x1a0
[  738.684205][T20918]  __ipv6_ifa_notify+0x63f/0xac0
[  738.684239][T20918]  ? __pfx___ipv6_ifa_notify+0x10/0x10
[  738.684261][T20918]  ? __pfx_fib6_clean_node+0x10/0x10
[  738.684290][T20918]  ? __lock_acquire+0xab9/0xd20
[  738.684322][T20918]  ? fib6_flush_trees+0x12c/0x1a0
[  738.684348][T20918]  ? __pfx_fib6_flush_trees+0x10/0x10
[  738.684369][T20918]  ? __local_bh_enable_ip+0x12d/0x1c0
[  738.684385][T20918]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  738.684403][T20918]  ? do_raw_spin_unlock+0x122/0x240
[  738.684428][T20918]  add_addr+0x1b8/0x2d0
[  738.684452][T20918]  addrconf_init_auto_addrs+0x262/0xbb0
[  738.684469][T20918]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  738.684486][T20918]  ? __pfx_addrconf_init_auto_addrs+0x10/0x10
[  738.684502][T20918]  ? addrconf_permanent_addr+0x917/0x9d0
[  738.684520][T20918]  ? addrconf_permanent_addr+0x917/0x9d0
[  738.684538][T20918]  ? addrconf_permanent_addr+0x917/0x9d0
[  738.684563][T20918]  ? __pfx_addrconf_permanent_addr+0x10/0x10
[  738.684585][T20918]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  738.684611][T20918]  ? __pfx___mutex_lock+0x10/0x10
[  738.684633][T20918]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  738.684653][T20918]  ? tls_dev_event+0x717/0xec0
[  738.684684][T20918]  ? addrconf_link_ready+0x112/0x170
[  738.684702][T20918]  addrconf_notify+0xacc/0x1010
[  738.684724][T20918]  notifier_call_chain+0x1b3/0x3e0
[  738.684749][T20918]  __dev_notify_flags+0x18d/0x2e0
[  738.684777][T20918]  ? __pfx___dev_notify_flags+0x10/0x10
[  738.684799][T20918]  ? __dev_change_flags+0x4cc/0x6d0
[  738.684829][T20918]  ? __pfx___dev_change_flags+0x10/0x10
[  738.684852][T20918]  ? __pfx_console_unlock+0x10/0x10
[  738.684874][T20918]  ? irq_work_queue+0xbc/0x140
[  738.684899][T20918]  netif_change_flags+0xe8/0x1a0
[  738.684927][T20918]  do_setlink+0xc55/0x41c0
[  738.684968][T20918]  ? __pfx_do_setlink+0x10/0x10
[  738.684991][T20918]  ? _printk+0xcf/0x120
[  738.685008][T20918]  ? __pfx____ratelimit+0x10/0x10
[  738.685040][T20918]  ? __lock_acquire+0xab9/0xd20
[  738.685071][T20918]  ? __mutex_trylock_common+0x153/0x260
[  738.685092][T20918]  ? __pfx___mutex_trylock_common+0x10/0x10
[  738.685116][T20918]  ? rcu_is_watching+0x15/0xb0
[  738.685133][T20918]  ? trace_contention_end+0x39/0x120
[  738.685151][T20918]  ? __mutex_lock+0x330/0xe80
[  738.685174][T20918]  ? __pfx_aa_get_newest_label+0x10/0x10
[  738.685204][T20918]  ? rtnl_setlink+0x4ea/0x900
[  738.685224][T20918]  ? rcu_is_watching+0x15/0xb0
[  738.685241][T20918]  ? __pfx___mutex_lock+0x10/0x10
[  738.685271][T20918]  ? ns_capable+0x8a/0xf0
[  738.685295][T20918]  rtnl_setlink+0x604/0x900
[  738.685322][T20918]  ? __pfx_rtnl_setlink+0x10/0x10
[  738.685343][T20918]  ? __lock_acquire+0xab9/0xd20
[  738.685377][T20918]  ? __lock_acquire+0xab9/0xd20
[  738.685477][T20918]  ? __pfx_rtnl_setlink+0x10/0x10
[  738.685499][T20918]  rtnetlink_rcv_msg+0x7cf/0xb70
[  738.685525][T20918]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  738.685546][T20918]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  738.685584][T20918]  netlink_rcv_skb+0x208/0x470
[  738.685607][T20918]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  738.685631][T20918]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  738.685666][T20918]  ? netlink_deliver_tap+0x2e/0x1b0
[  738.685686][T20918]  ? netlink_deliver_tap+0x2e/0x1b0
[  738.685713][T20918]  netlink_unicast+0x75b/0x8d0
[  738.685745][T20918]  netlink_sendmsg+0x805/0xb30
[  738.685777][T20918]  ? __pfx_netlink_sendmsg+0x10/0x10
[  738.685803][T20918]  ? aa_sock_msg_perm+0xf1/0x1d0
[  738.685823][T20918]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  738.685845][T20918]  ? __pfx_netlink_sendmsg+0x10/0x10
[  738.685868][T20918]  __sock_sendmsg+0x219/0x270
[  738.685891][T20918]  sock_write_iter+0x258/0x330
[  738.685910][T20918]  ? __pfx_sock_write_iter+0x10/0x10
[  738.685938][T20918]  ? __lock_acquire+0xab9/0xd20
[  738.685969][T20918]  do_iter_readv_writev+0x56b/0x7f0
[  738.685995][T20918]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  738.686021][T20918]  ? bpf_lsm_file_permission+0x9/0x20
[  738.686035][T20918]  ? security_file_permission+0x75/0x290
[  738.686059][T20918]  ? rw_verify_area+0x258/0x650
[  738.686082][T20918]  vfs_writev+0x31a/0x960
[  738.686110][T20918]  ? __lock_acquire+0xab9/0xd20
[  738.686134][T20918]  ? __pfx_vfs_writev+0x10/0x10
[  738.686170][T20918]  ? __fget_files+0x2a/0x420
[  738.686202][T20918]  ? __fget_files+0x3a0/0x420
[  738.686222][T20918]  ? __fget_files+0x2a/0x420
[  738.686252][T20918]  do_writev+0x14d/0x2d0
[  738.686276][T20918]  ? __pfx_do_writev+0x10/0x10
[  738.686296][T20918]  ? rcu_is_watching+0x15/0xb0
[  738.686317][T20918]  ? do_syscall_64+0xbe/0x3b0
[  738.686343][T20918]  do_syscall_64+0xfa/0x3b0
[  738.686365][T20918]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.686380][T20918]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  738.686395][T20918]  ? clear_bhb_loop+0x60/0xb0
[  738.686414][T20918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.686429][T20918] RIP: 0033:0x7f0060b8e929
[  738.686445][T20918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  738.686459][T20918] RSP: 002b:00007f0061a36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  738.686477][T20918] RAX: ffffffffffffffda RBX: 00007f0060db6080 RCX: 00007f0060b8e929
[  738.686489][T20918] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[  738.686499][T20918] RBP: 00007f0061a36090 R08: 0000000000000000 R09: 0000000000000000
[  738.686508][T20918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  738.686519][T20918] R13: 0000000000000000 R14: 00007f0060db6080 R15: 00007fff63f2af98
[  738.686546][T20918]  </TASK>
[  739.345725][    C0] vkms_vblank_simulate: vblank timer overrun
[  739.471779][ T6808] tipc: Node number set to 1
[  739.576911][ T6803] usb 8-1: USB disconnect, device number 38
[  739.718302][T20933] netlink: 'syz.0.5273': attribute type 27 has an invalid length.
[  739.834573][T20923] binder: 20922:20923 ioctl c0306201 2000000001c0 returned -22
[  739.838689][ T5899] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.214/input/input99
[  740.109550][T20941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  740.119705][T20941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  740.138764][ T5899] usb 9-1: USB disconnect, device number 14
[  740.185277][T20944] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5275'.
[  740.241761][ T6808] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[  740.424560][ T6808] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 2
[  740.451307][ T6808] usb 1-1: config 8 interface 0 has no altsetting 0
[  740.463609][ T6808] usb 1-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=73.93
[  740.472915][ T6808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.480927][ T6808] usb 1-1: Product: syz
[  740.521637][ T6808] usb 1-1: Manufacturer: syz
[  740.526286][ T6808] usb 1-1: SerialNumber: syz
[  740.757114][ T6808] usb 1-1: USB disconnect, device number 83
[  740.983483][T20971] netlink: 'syz.8.5281': attribute type 32 has an invalid length.
[  741.014718][T20971] /dev/rnullb0: Can't open blockdev
[  741.219234][T20985] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  741.370460][T20989] netlink: 'syz.7.5285': attribute type 29 has an invalid length.
[  741.380335][T20989] netlink: 'syz.7.5285': attribute type 29 has an invalid length.
[  741.388874][T20989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5285'.
[  741.453222][T20991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5286'.
[  741.474372][T20991] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5286'.
[  741.601067][ T5899] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  741.762551][ T5899] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  741.774185][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.795130][ T5899] usb 1-1: config 0 descriptor??
[  741.817241][ T5899] gspca_main: spca508-2.14.0 probing 8086:0110
[  741.840910][T20999] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5287'.
[  742.021268][ T5899] gspca_spca508: reg_read err -32
[  742.027037][ T5899] gspca_spca508: reg_read err -32
[  742.035289][T21008] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5290'.
[  742.311503][T21016] /dev/rnullb0: Can't open blockdev
[  742.796089][ T5899] gspca_spca508: reg_read err -71
[  742.808292][ T5899] gspca_spca508: reg write: error -71
[  742.816893][ T5899] spca508 1-1:0.0: probe with driver spca508 failed with error -71
[  742.842219][ T5899] usb 1-1: USB disconnect, device number 84
[  743.025568][ T6808] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  743.192116][ T6808] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  743.201038][ T6808] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  743.215878][ T6808] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  743.225554][ T6808] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.239040][ T6808] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  743.248659][ T6808] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  743.256922][ T6808] usb 10-1: Product: syz
[  743.263832][ T6808] usb 10-1: Manufacturer: syz
[  743.276616][ T6808] cdc_wdm 10-1:1.0: skipping garbage
[  743.282634][ T6808] cdc_wdm 10-1:1.0: skipping garbage
[  743.289393][ T6808] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  743.295621][ T6808] cdc_wdm 10-1:1.0: Unknown control protocol
[  743.525925][T21048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5303'.
[  743.554646][ T5899] usb 10-1: USB disconnect, device number 17
[  743.557160][T21048] bridge_slave_1: left allmulticast mode
[  743.567009][T21048] bridge_slave_1: left promiscuous mode
[  743.600096][T21048] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.623409][T21048] bridge_slave_0: left allmulticast mode
[  743.629081][T21048] bridge_slave_0: left promiscuous mode
[  743.640082][T21048] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.752576][T21052] kvm: pic: non byte write
[  743.757103][T21052] kvm: pic: non byte write
[  743.761937][T21052] kvm: pic: non byte write
[  743.766480][T21052] kvm: pic: non byte write
[  743.772560][T21052] kvm: pic: non byte write
[  743.777041][T21052] kvm: pic: non byte write
[  743.786964][T21052] kvm: pic: non byte write
[  743.798644][T21052] kvm: pic: non byte write
[  743.870150][T21056] /dev/rnullb0: Can't open blockdev
[  743.979418][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5308'.
[  744.117054][T21065] validate_nla: 1 callbacks suppressed
[  744.117072][T21065] netlink: 'syz.7.5309': attribute type 39 has an invalid length.
[  744.327312][   T30] audit: type=1326 audit(2000000625.211:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21075 comm="syz.0.5315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0060b8e929 code=0x0
[  744.360453][T21067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  744.382674][T21082] netlink: 'syz.0.5315': attribute type 11 has an invalid length.
[  744.602327][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5319'.
[  744.603060][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5319'.
[  744.630998][T21091] /dev/rnullb0: Can't open blockdev
[  744.636657][T21092] /dev/rnullb0: Can't open blockdev
[  744.969264][ T6808] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[  745.067132][T21104] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5325'.
[  745.156217][ T6808] usb 9-1: config 7 has an invalid interface number: 74 but max is 0
[  745.175143][ T6808] usb 9-1: config 7 has no interface number 0
[  745.198145][ T6808] usb 9-1: config 7 interface 74 has no altsetting 0
[  745.211710][ T6808] usb 9-1: New USB device found, idVendor=3568, idProduct=2d59, bcdDevice=ad.48
[  745.230463][ T6808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.238482][ T6808] usb 9-1: Product: syz
[  745.253180][ T6808] usb 9-1: Manufacturer: syz
[  745.258955][ T6808] usb 9-1: SerialNumber: syz
[  745.334756][T21111] /dev/rnullb0: Can't open blockdev
[  745.379135][ T5899] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  745.541051][ T5899] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  745.574246][ T5899] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  745.594783][ T5899] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  745.614205][ T5899] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  745.640178][ T5899] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  745.655127][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  745.675790][ T5899] usb 8-1: Product: syz
[  745.688741][ T5899] usb 8-1: Manufacturer: syz
[  745.712217][ T5899] cdc_wdm 8-1:1.0: skipping garbage
[  745.721613][ T5899] cdc_wdm 8-1:1.0: skipping garbage
[  745.732898][ T5899] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  745.740408][ T5899] cdc_wdm 8-1:1.0: Unknown control protocol
[  745.774277][ T6808] usb 9-1: USB disconnect, device number 15
[  745.915028][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5326'.
[  746.473276][T21135] binder: binder_mmap: 21134 200000fff000-200001000000 bad vm_flags failed -1
[  746.507972][T21133] 
[  746.510336][T21133] ============================================
[  746.516484][T21133] WARNING: possible recursive locking detected
[  746.522650][T21133] 6.16.0-rc4-next-20250702-syzkaller #0 Not tainted
[  746.529233][T21133] --------------------------------------------
[  746.535372][T21133] syz.0.5339/21133 is trying to acquire lock:
[  746.541423][T21133] ffff8880426b48c8 (&sb->s_type->i_mutex_key#33){++++}-{4:4}, at: rpc_close_pipes+0x10a/0x730
[  746.551688][T21133] 
[  746.551688][T21133] but task is already holding lock:
[  746.559038][T21133] ffff8880426b11c8 (&sb->s_type->i_mutex_key#33){++++}-{4:4}, at: __simple_recursive_removal+0x190/0x510
[  746.570262][T21133] 
[  746.570262][T21133] other info that might help us debug this:
[  746.578304][T21133]  Possible unsafe locking scenario:
[  746.578304][T21133] 
[  746.585739][T21133]        CPU0
[  746.588998][T21133]        ----
[  746.592256][T21133]   lock(&sb->s_type->i_mutex_key#33);
[  746.597699][T21133]   lock(&sb->s_type->i_mutex_key#33);
[  746.603231][T21133] 
[  746.603231][T21133]  *** DEADLOCK ***
[  746.603231][T21133] 
[  746.611350][T21133]  May be due to missing lock nesting notation
[  746.611350][T21133] 
[  746.619645][T21133] 4 locks held by syz.0.5339/21133:
[  746.624826][T21133]  #0: ffff8880343540e0 (&type->s_umount_key#108){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[  746.635106][T21133]  #1: ffff888077a550a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190
[  746.644682][T21133]  #2: ffffffff8f8e2df0 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  746.656770][T21133]  #3: ffff8880426b11c8 (&sb->s_type->i_mutex_key#33){++++}-{4:4}, at: __simple_recursive_removal+0x190/0x510
[  746.668426][T21133] 
[  746.668426][T21133] stack backtrace:
[  746.674303][T21133] CPU: 1 UID: 0 PID: 21133 Comm: syz.0.5339 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  746.674322][T21133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  746.674332][T21133] Call Trace:
[  746.674341][T21133]  <TASK>
[  746.674348][T21133]  dump_stack_lvl+0x189/0x250
[  746.674369][T21133]  ? __pfx_dump_stack_lvl+0x10/0x10
[  746.674383][T21133]  ? __pfx__printk+0x10/0x10
[  746.674398][T21133]  ? print_lock_name+0xde/0x100
[  746.674414][T21133]  print_deadlock_bug+0x28b/0x2a0
[  746.674430][T21133]  validate_chain+0x1a3f/0x2140
[  746.674457][T21133]  __lock_acquire+0xab9/0xd20
[  746.674483][T21133]  ? rpc_close_pipes+0x10a/0x730
[  746.674496][T21133]  lock_acquire+0x120/0x360
[  746.674512][T21133]  ? rpc_close_pipes+0x10a/0x730
[  746.674529][T21133]  down_write+0x96/0x1f0
[  746.674548][T21133]  ? rpc_close_pipes+0x10a/0x730
[  746.674560][T21133]  ? __pfx_down_write+0x10/0x10
[  746.674577][T21133]  ? __pfx_find_submount+0x10/0x10
[  746.674590][T21133]  ? _raw_spin_unlock+0x28/0x50
[  746.674604][T21133]  ? d_walk+0x6f4/0x780
[  746.674622][T21133]  rpc_close_pipes+0x10a/0x730
[  746.674635][T21133]  ? d_invalidate+0x204/0x260
[  746.674646][T21133]  ? __pfx_rpc_close_pipes+0x10/0x10
[  746.674660][T21133]  ? up_write+0x1c4/0x420
[  746.674673][T21133]  ? __pfx_rpc_close_pipes+0x10/0x10
[  746.674686][T21133]  __simple_recursive_removal+0x208/0x510
[  746.674702][T21133]  ? __pfx_rpc_close_pipes+0x10/0x10
[  746.674715][T21133]  rpc_unlink+0x56/0x80
[  746.674727][T21133]  rpc_pipefs_event+0xc0/0x170
[  746.674750][T21133]  notifier_call_chain+0x1b3/0x3e0
[  746.674765][T21133]  blocking_notifier_call_chain+0x6a/0x90
[  746.674780][T21133]  rpc_kill_sb+0xd0/0x190
[  746.674795][T21133]  deactivate_locked_super+0xb9/0x130
[  746.674810][T21133]  cleanup_mnt+0x425/0x4c0
[  746.674823][T21133]  ? lockdep_hardirqs_on+0x9c/0x150
[  746.674840][T21133]  task_work_run+0x1d1/0x260
[  746.674857][T21133]  ? __pfx_task_work_run+0x10/0x10
[  746.674873][T21133]  ? __x64_sys_umount+0x122/0x160
[  746.674889][T21133]  ? exit_to_user_mode_loop+0x40/0x110
[  746.674909][T21133]  exit_to_user_mode_loop+0xec/0x110
[  746.674927][T21133]  do_syscall_64+0x2bd/0x3b0
[  746.674943][T21133]  ? lockdep_hardirqs_on+0x9c/0x150
[  746.674958][T21133]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.674971][T21133]  ? clear_bhb_loop+0x60/0xb0
[  746.674985][T21133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.674998][T21133] RIP: 0033:0x7f0060b8e929
[  746.675011][T21133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  746.675023][T21133] RSP: 002b:00007f0061a57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  746.675037][T21133] RAX: 0000000000000000 RBX: 00007f0060db5fa0 RCX: 00007f0060b8e929
[  746.675047][T21133] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040
[  746.675056][T21133] RBP: 00007f0060c10b39 R08: 0000000000000000 R09: 0000000000000000
[  746.675065][T21133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  746.675073][T21133] R13: 0000000000000000 R14: 00007f0060db5fa0 R15: 00007fff63f2af98
[  746.675088][T21133]  </TASK>
[  746.984186][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  748.144637][ T5899] usb 8-1: USB disconnect, device number 39