last executing test programs:

1m59.467910418s ago: executing program 0 (id=311):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf6486000) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESDEC], 0xe) (async)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
mkdir(&(0x7f0000000380)='.\x02\x00', 0xcc)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async, rerun: 64)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x0, 0x0) (rerun: 64)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r3 = dup3(r2, 0xffffffffffffffff, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (rerun: 32)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) (async)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18)
sendmmsg(r6, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)="dd", 0x1}], 0x1}}], 0x1, 0x20004) (async)
r8 = open(&(0x7f00000002c0)='.\x02\x00', 0x22a200, 0x3d2)
mkdirat$cgroup(r8, &(0x7f0000000300)='syz1\x00', 0x1ff) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m59.188831998s ago: executing program 0 (id=314):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f00000000c0)=0xc000000, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000002640)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1d}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000740)="ff", 0x1}], 0x1}}], 0x1, 0x240040cc)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x4020, 0x3, [0x7, 0x1, 0x8f01]}, 0xe)
openat$cgroup_subtree(r5, &(0x7f0000000280), 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)
read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000001340)={0x18, 0x0, r7, {0x7}}, 0x18)
r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'macvtap0\x00', <r9=>0x0})
creat(&(0x7f00000004c0)='./bus\x00', 0x40)
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000580)=ANY=[@ANYBLOB="0491"], 0x2, 0x0)
sendto$packet(r8, &(0x7f0000000340)="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", 0x1000, 0x44001, &(0x7f0000000200)={0x11, 0x16, r9, 0x1, 0x3}, 0x14)

1m58.279766117s ago: executing program 0 (id=322):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0x2})
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0)

1m57.304064166s ago: executing program 0 (id=329):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x7, 0x9, 0x1}, 0x10)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f00000004c0)={0x18, 0x0, {0x2, @broadcast, 'ip_vti0\x00'}}, 0x1e)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240), 0x104001, &(0x7f00000003c0)={[{@size={'size', 0x3d, [0x74, 0x38, 0x67, 0x2d, 0x6d, 0x67, 0x33, 0x78]}}, {@inode64}, {@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x65, 0x6b]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x37, 0x38, 0x70]}}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@obj_type={'obj_type', 0x3d, '!#^'}}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r4, r4, 0x0, 0x7ffff000)

1m56.227965975s ago: executing program 0 (id=335):
mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x2a2d082, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x4161, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$getflags(r1, 0x40a)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1m55.559946663s ago: executing program 0 (id=338):
creat(&(0x7f0000000080)='./file0\x00', 0xac)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x4117, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x45833af92e4b39ff, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000000))
r3 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r3, 0x107, 0xc, 0x0, &(0x7f0000000000))
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x8030, 0x0)

1m55.138367387s ago: executing program 32 (id=338):
creat(&(0x7f0000000080)='./file0\x00', 0xac)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x4117, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x45833af92e4b39ff, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000000))
r3 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r3, 0x107, 0xc, 0x0, &(0x7f0000000000))
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x8030, 0x0)

22.358693171s ago: executing program 3 (id=859):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"])
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x14, 0xb, 0x32, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x7)
ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10, r7, 0x54540000)
sendfile(r0, r0, 0x0, 0x7ffff000)
r8 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x400)
pipe2$watch_queue(&(0x7f0000000100)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r10, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000"])
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r11 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCSETS2(r11, 0x5407, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2ddc3b0b4de81da99dd89b03a0520bf62d40d9"})
ioctl$SIOCRSSCAUSE(r8, 0x89e1, 0x0)

20.759574807s ago: executing program 3 (id=865):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x125080, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00')
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=<r2=>0xffffffffffffffff)
r3 = dup3(r1, r2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0}, &(0x7f0000000100)=0xc)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r5, &(0x7f0000000140))
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x200, 0x70bd2c, 0x25dfdbfd, 0x2, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4094)
fcntl$setownex(r3, 0xf, &(0x7f0000000300)={0x2, r4})
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000380)=0x4)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r6}, 0x14)
connect$can_bcm(r3, &(0x7f0000000400)={0x1d, r6}, 0x10)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, r3, 0x574)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r8, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8a}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40)
epoll_create1(0x80000)
setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000005c0)=@gcm_128={{0x304}, "55b6637c29d8ca6d", "65a24241eaaadf27c04b718c9d4e1924", "a5deaeca", "a1c5fa034b74eb12"}, 0x28)
r10 = openat$incfs(r3, &(0x7f0000000600)='.pending_reads\x00', 0x381003, 0x5)
sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x8081)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r11, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffff, 0xe}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x6008840)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r13, 0x6, 0x23, &(0x7f0000001a00)={&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/2, 0x2, 0x1, &(0x7f0000000a00)=""/4096, 0x1000}, &(0x7f0000001a40)=0x40)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000e, 0x12, r10, 0xe5d15000)
fsync(0xffffffffffffffff)

20.583617568s ago: executing program 3 (id=867):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r0}, 0x5, 0x4, 0x2})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000000)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x40, 0x0)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb)

19.418698195s ago: executing program 3 (id=872):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0xa}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xaa042, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendto$inet6(r0, &(0x7f0000001180)="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", 0xffffffffffffffa0, 0x4c840, 0x0, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
sendfile(r4, r4, 0x0, 0x7ffff000)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000003e00)={0x0, [{0x2, 0x20, 0x2, &(0x7f0000000080)="8977fabe"}, {0x2, 0x430, 0x400, &(0x7f0000000280)="5ce77968abf2ce25724377e2a799f2579aee43b5209bfc7665e87e06d70011a05fab6f5ca3ac860f9a9f9fbe6daf591b6b44c03d1ed43df302a88bb30ffae14cfea9929f949c2e7a0a89a4ad3138301beeba018b9ad3d54990668488564c6227614835b71086507a6ed60987efb0ebf6dc29f9a8c78f768f09b8b5dbcbd5e6bda5cce7c904d9"}, {0x0, 0x3d0, 0x9, &(0x7f0000000480)="43ae38f0755c98e2d0fbaf4d922e96bd55f2081c01cad930b9a9cd4e03227122f599a773dc6add490c53175878d3fffb060cc4293572644ab1f80e46695789210346e5ace3e5d2698bb0890af5a1ad0f188018c3dec47f6ab3bfc2cf1def3a82062dca870dad91b696e5a9ddda0e4bead02b6953d2f01f0a679c"}, {0x1, 0x0, 0x3ff, 0x0}, {0x1, 0x38, 0x0, &(0x7f0000000840)="b5438a8b392a43"}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x101, 0x0}, {0x2, 0x0, 0x3cc9, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7f1b, 0x0}, {0x2, 0x0, 0xfffffffd, 0x0}]})
bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r8 = accept4(r5, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x12, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x86440, 0x0)
ioctl$int_in(r8, 0x5452, &(0x7f0000000140)=0x481a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$alg(r8, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x340000c1)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003600)=ANY=[], 0x3734}}, 0x840)

18.500956621s ago: executing program 3 (id=879):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x601, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x33)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a740634a1236f3678de8ea2d0d661607e24300", "5615d9f5", "7c5cec21691a43fe"}, 0x38)
fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r3=>0x0})
syz_open_procfs(r3, &(0x7f0000000080)='net/ip6_flowlabel\x00')

18.247596133s ago: executing program 3 (id=880):
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1000000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0})
creat(&(0x7f0000000080)='./file0\x00', 0xac)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x2a040, 0x0)

17.938996643s ago: executing program 33 (id=880):
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1000000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0})
creat(&(0x7f0000000080)='./file0\x00', 0xac)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x2a040, 0x0)

6.462625401s ago: executing program 2 (id=931):
r0 = socket$inet6_sctp(0xa, 0xffffffffffffffff, 0x84)
syz_open_dev$media(&(0x7f0000000980), 0x3, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async)
getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f0000000200)) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x401200}}) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_io_uring_setup(0x4dd0, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x310}, 0x0, 0x0) (async)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002080)={'wlan1\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x240008c8) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x3c, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x110}]}, 0x18}}, 0x10)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
shutdown(r8, 0x1) (async)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0xa) (async)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1401, 0x1, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async)
sendfile(r7, r7, 0x0, 0x7ffff000)

6.185165737s ago: executing program 2 (id=933):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@sr0, 0x0, &(0x7f0000000100))

6.182701311s ago: executing program 1 (id=934):
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x5000c1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={<r1=>0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000011c0)={r1, 0x94, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8fe}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x8, @local, 0x8c9}]}, &(0x7f0000001200)=0x10)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
fadvise64(r2, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000)
socket$igmp6(0xa, 0x3, 0x2)

6.170019315s ago: executing program 2 (id=935):
r0 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={0x0, 0x64, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
syz_open_dev$sndctrl(0x0, 0xa, 0x111002)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x18bf42)
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
fadvise64(r6, 0x4, 0x5, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000)

5.533026303s ago: executing program 1 (id=937):
r0 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xf5, 0x40000, @dev}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000100)="daffc38b69363a52fe8000480000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000200)="01", 0x2a000}], 0x2}, 0xb00) (async)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xf5, 0x40000, @dev}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000100)="daffc38b69363a52fe8000480000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000200)="01", 0x2a000}], 0x2}, 0xb00)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)

5.143940554s ago: executing program 1 (id=939):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000e80)={0x281})
r3 = dup(r1)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000040)=<r4=>0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000180)={0x10, 0x2, {0x7, @struct={0x2, 0x2}, <r5=>0x0, 0x3, 0x100, 0x2, 0x7f, 0xd0, 0x2, @struct={0x955, 0x200}, 0x8, 0x7, [0x3, 0xfff, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x1, 0x3]}, {0x8, @struct={0x7fc, 0x2}, 0x0, 0x6, 0x2, 0xffffffffffffff7f, 0x5, 0x94, 0x80, @struct={0x2, 0x8}, 0x9, 0x9, [0x1000, 0x48e, 0x4c26, 0x5, 0x100, 0x1]}, {0x6, @struct={0x4}, 0x0, 0x0, 0xe73b, 0x21f, 0x8, 0x2, 0x1, @usage, 0x0, 0x2, [0x5, 0x5, 0x9, 0x263c, 0x2, 0x5]}, {0x890, 0x6, 0x5}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000080)=0x1b, 0x4)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x60de, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x800, &(0x7f00000002c0)={0xa, 0xffff, 0x2, @loopback, 0xf58}, 0x1c)
recvmmsg(r6, &(0x7f000000a100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002040, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000580)={{r0}, r4, 0x4, @unused=[0x4, 0x4, 0x5, 0x45], @devid=r5})
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000)

4.482182938s ago: executing program 5 (id=943):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=virtio,', {[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'hpfs\x00'}}, {@appraise_type}]}})

4.246592254s ago: executing program 5 (id=944):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x2400)
mkdirat(r3, &(0x7f0000000080)='./file1\x00', 0x1c0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000a9fc00040001c0"])
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[])
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
unlinkat(r4, &(0x7f00000003c0)='./file2\x00', 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000)

4.003792828s ago: executing program 4 (id=945):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2) (async, rerun: 64)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async)
r2 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x2, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (rerun: 32)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000)

3.885478023s ago: executing program 4 (id=946):
prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) (async)
creat(&(0x7f0000000140)='./file0\x00', 0x71) (async, rerun: 32)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) (rerun: 32)

3.666904216s ago: executing program 2 (id=947):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8f1bc000)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) (async)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@rand_addr=0x64010102, @empty, @rand_addr=0x64010100}, 0xc) (async)
setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@rand_addr=0x64010102, @empty, @rand_addr=0x64010100}, 0xc)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$kvm(0x0, 0x0, 0x80, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0xf, 0x0, &(0x7f0000000040))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.092141079s ago: executing program 4 (id=948):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0x1, 0x7, 0x1d9, 0x8004, 0x1, 0x1}]})
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1040, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)

2.826302204s ago: executing program 5 (id=949):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000c501"]) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="8f08009373fb81ad0000"])
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c000280080001400700ffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

2.607839994s ago: executing program 5 (id=950):
syz_io_uring_setup(0x76e3, &(0x7f0000000080)={0x0, 0xacf, 0x2, 0x3, 0x2da}, &(0x7f0000000100), &(0x7f0000000140))
r0 = socket(0x11, 0x3, 0x3d)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_vlan\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{0x7f, 0x4}, {0x3, 0xb36a}]}})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8482e00000095da7368000000000e000a001000000012800000128c", 0x2e}], 0x1}, 0xc004)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000700)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x3, 0x5, {"0e000000000105000000000006000001"}, 0x0, 0x1, 0x3ffffffffffffffc}}}, 0x118)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r7 = socket(0x22, 0x2, 0x4)
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r7)
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x4}, {0x63, 0x2}, @period={0x58, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}})
write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250)
r8 = memfd_secret(0x0)
write$char_usb(r8, &(0x7f0000000b80)="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", 0x1000)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r3, 0x2, "cbbbb6", "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"}}, 0x110)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6gretap0\x00'})

2.195931503s ago: executing program 5 (id=951):
mmap(&(0x7f0000310000/0x2000)=nil, 0x2000, 0x100000b, 0x10010, 0xffffffffffffffff, 0xf648e000)
r0 = socket$kcm(0x2d, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x11d, 0x484, 0x0, 0x0)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x3, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x0, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x5, 0xfffffffc, 0x3, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x5f, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x6, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x2, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x8000012f, 0x6, 0x401, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf07d, 0x101, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x5, 0x312, 0x75, 0xea4, 0x0, 0x4, 0x7, 0xff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x7, 0x5, 0xb, 0x1, 0x2020000, 0x3, 0xbc45, 0x48c93690, 0x3e, 0x3], [0x7, 0x408, 0x4, 0x5, 0x6401d37b, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x65, 0x1000000b, 0x4, 0x9, 0x5, 0x0, 0x1, 0x2005, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0xc043, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x3, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x2, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x2, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x1, 0x4, 0xc4, 0x9, 0x1, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xc2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1ff, 0x200, 0x10001, 0xfff]}, 0x45c)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000340)=0x9)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000000)=""/174, 0xae})
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x800)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$I2C(&(0x7f0000000180), 0x23c, 0x400402)
write(r7, &(0x7f0000000240)="c0c619349716993589cbb8d5328d104a6287c5fb9e7ddc3333f2bb3467b1e1ce7134bc3adf73ab2cb9b1ed2ce65c26a6e212916cee25fcfbb988ac65abe0a30b21c8569ccac9b8cacd9143f77a8d86b82498648c95567b00c15f783f1f8221ab8616f6467a8382e4ee70275e65fffbace18086ca5ae6049f9d55adbfa22c16acff2795ac73551956dd7d074f4f5671938a05adc68db7b89bd993aec95f46500882cbc4c9a9d987249ae083162f33dcfd68431f7f1f054f7504391a0db8f2", 0xbe)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002880), r6)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000028c0)={0x28, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8045}, 0x200040c0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.169932155s ago: executing program 1 (id=952):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x6c3ca000)
close(0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x743a36c1}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
shutdown(r3, 0x0)
r4 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r5, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @addr={0x0, 0xf}}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e28, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61", 0x72}], 0x1}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x6, 0x6}, 0x90)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0xe2, 0x4)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(0x3)
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
madvise(&(0x7f00001bb000/0x3000)=nil, 0x3000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)

2.00180054s ago: executing program 4 (id=953):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2)
r1 = syz_open_procfs(0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
listen(0xffffffffffffffff, 0x0)
close(0x3)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(r2)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000a, 0x3032, r3, 0xb9bb000)
socket$kcm(0x10, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xaf4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x18}}], 0x1, 0x800)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x7b719000)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = syz_usb_connect(0x2, 0x3c, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x24, &(0x7f0000000080)=0x83, 0x4)

1.667916044s ago: executing program 5 (id=954):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00', <r6=>0x0})
r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x44080)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x108, r1, 0x4, 0x70bd27, 0x8, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x58, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x30000000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x19}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x77d}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_SEC_DEVKEY={0x7c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendmmsg$alg(r9, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r9)
ioprio_set$pid(0x1, 0x0, 0x0)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
lseek(0xffffffffffffffff, 0x8, 0x4)
sendfile(r10, r10, 0x0, 0x7ffff000)

1.644347732s ago: executing program 1 (id=955):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)={0xfd8, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0x1}}}}, [@NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x34, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ab6fb3f4b230"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5d}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6f}]}, @NL80211_ATTR_NAN_FUNC={0xf78, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x260, 0xd, 0x0, 0x1, [{0xf9, 0x0, "255bd5ee9d01142ecf8c18a8e73bf65da427ff99b440471a86029363f3bd86d5554d0349535a4677a759850b52b90d77d74c632d35f43e53c32b26669a175a7ed8db014ac6b3ae0133eb64786f9af0573d5ecd2594cc2011fce911f1459ef3fc9171fe0b91d80a2dda6354a4d5b88929453f3a29953797c8cd26edaa8070bb482be84fd33bdd3fabd0e61d317237d3c13b524f5921a7083d16347fac88dd50a75d572054bdabce37a005b38b126423844a636650a4e848e1c9ff15cdfe410661c25bf9c73ae318f7784a8f5d22c02d39a902ac549e9990118ce0f82269f6b24581ceb612d712d69d195cb388948032ca8827575a82"}, {0x91, 0x0, "25ee583e8ea12be7d825080ead24c4e4487e17617f7fd6ac9f0ca3eca79416b281b46e2b3e4a219b27bd8c70cc473628eca20d3daf36fb086daf56f474f7977076982c32f4dd4cc45a6dae8063eedb0856a3bd1a72a37a620c8c115a009a44e30867f4bbb9f925118c3f0cfa59f4e74924b9c963b34eb4e2ca716e333dcadfa83a8101148383333fc0945431c9"}, {0xc9, 0x0, "f65da378d0fdb0eae24380c05be6593b9381ea9727ef47bfa08bf511b43b035991959123ad70a88b9d5d2095e3d620c9f7769480b58c8a06e16bb936d8728c3dd42963685c1045d55de3a6ee2001b99206d900de72957c01edce8ecefe1f3175f84c0e16a92ea87921c9f6a2493eaf3b35dfbf414af55cfaee11c995cd360af2488625ba7f0fa91177deba1dd8b99778425bb66853def81ff89e4ed7c1e8354c4a2bd4bda490717c23059141979ea9b0f6cc47a8c30a8bded0a97b710bcc0602b1e4f0605d"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd08, 0xe, 0x0, 0x1, [{0x5d, 0x0, "9d73a8817fda660b1bbb53ae6559a7c50f8ebde8a4cffa0e1767fca20f294119c7b9491c98b5b2584d78b1b9287e145880572f12d13615a1d25eed3f84abb21ecea8f82ff6d6b078f24e102cf40f58bc8a9de656532f00eb03"}, {0x4}, {0x9d, 0x0, "5f490e37b1be15ed2352d4075964b7492dd568bd7937a33950f1a54301d86058d47ace58295aff199eba18214e3b57db6fd9d2506d63d354fcdf19277c81b4ad623485994510e6323e3ec3ed2796940f3c6cb5a480edf46328a089c26d174099e6d12244080a07ec6f0aacd9977040b89a7bcd18e2e795b7670e957fb81ad617d073391e24a12b4bca3a9a494160ff31bb5f403f851b473522"}, {0x66, 0x0, "a16fb04998c60de1881a260331895b023448914a66dceed522e5179156c4e5d546dc38be4d620510be80368dbf50ba9231e2e54d2bc47513952d95bb6e32376875f32f1476d9504b10bc0c1e68ecdc375dcb6c32eb7321b8331c53167f852f7b0cf9"}, {0xb95, 0x0, "f7e809a3cb916da51c615e91bbe4fed68178849d7f13404e1224330c3549345424333425035dbeba9368fbb8ef514947d93e460e3202775b34016e64741ad47be09a3c3abc6058d5775aaa1a1afa9c70381fa97d24ff08214c1195180cdcfd3a38858330b08e18f92becaa22237aa083ee5cd83aa89590722d93c8dc2e8c153d3189d88b22025886520652f8606e968745b94c63df0e960a2404e566f9052bf04799d149a04a25cedce3cb66b1eca5050081b875daf371914e7e7465070b6d605146eaa8d3ee638e853da97f67116c90ef8f29b2ffcb1dc095e3c6d5ad88c160946b7a3c0d8a558fb83f0d2075b756c7866c5a7fc7ea6bb69d69e727869ad87a5ff92be1d36829ff761b10cb9cf457a9c110afc2ece82a225775afd643740d7cebd9f9dbcc91e47663b3f692f975cde0064301dc1e3353956a0c5a4ac81b45589f95c9e3f48956a65b1f04010129a04e51469ceefe27fbb81e85915cd930e8c0c30c2703e1db4836f6b5ce0f4fb0164e2bdec8850811e6ed73f944d37c23943e3e067d27750070ff4b00e4354001e1111c4ab0550dd6b0bbbbd89f980846a1d5c509a773fa741dd376d9a86553ee685390d15b3f60e0e30c9ffe28d371b9d8140fac5b50e51aab0c0c1c96574c9cc2d46fe7c6a3c2aa053402bf5bcd21925c37cb89d86b12fffdd820d6234cf1f5bee35223eeeca944edf6ff6988a5e68298dee1ad6f8b0823ec9fff2fb34d03756ffb60768b82a6b93d6fdcafda5e2da1041529f89e6f13a67b5b053cc3da9bb988a2a98095680e03fa5a6a93c86c6b4ac1de9d13616ac8fa6ab160d73f46bdead47975f2ab4968240462a0bfbf564981a897365be9687f6bcc18197c174d41d706693947aaa71621295a5a2ac1045884043b815f03cce2c7cb7a556fb23424c56a6e7d8414b02aed5ba501b9655950147dc1ac59846db566ac271566f3b993a5b7daf46f87cb7303956ae40cf1b4425128a1d914010cce79d90ff849214b4e113dc670e8e704e5758dd8a0d4f9c4e362d9f35e4773e8a61a31583a54b7bb3cb81aa2f017edb879a90921dc053c1c511ce5057c236d8f37cf12cadacacf3a918c8898609922497e7ab43b1e7394ba5870d5c1424b1e5f700948c3ad862e416f9a31f3a453aa9d3a3067113fcb1271635c191c0e24bda3f26393b29977b33d23c111474bf792295434b1081a47fec5e096653472a0d47fb192247b7eb18a5b4ba12a6aa8e61ed650a98e238ec9535ac24e53f14332237638fb988d0e50bcbb7926650a7e833c21ff355c3687b0b97a506a1e0904466809398094b6c506bb6682f062cf0748478394b11ecaada7c2cce97b657be61c7368a7bc398c1fb21b416458a0537fa199091eb5674d093d1d9d6ee3507bcdee105d055675d8d9850a39c6c574f63e0e9d81bf56d6ed31daedc002dd8de0ac978be72c977c7ffa856b900bba7076d7d863cd701adbb1c9029e41f36aa09745bcea07642986c158b4cbe1561a4545a908eee00a763e4a8308544fd4ccd1fd7d7dbebd9d370887e762170366213f6b40fd1066e7e05a921b211d9abfbca0f3f5bb829b4c41d4b037cd94013b5092c6aafe227a38ef02002a580fb8fc50b653624655317ccc05936051a3ee134af1fd72d89b317a33560220d7bd27053a05021de0ed051c6ae6bc0ec6f6776524e394fcb08fd12e3ee23476845d05e72b88992bf0b0c7ef60c93847c5f403a3f0e59ec391c38a8ad11793b6e0b774c6699322b3836e7bd1ea2fbcbcbb714263d852cd00e29e3a4a60fc76923ede5a4e4486204fc37c52e76b7eeb5324948065bab782503363ffebc201618cec3aade2335c498bd8e53147492ad3fbea4eed53313111802cc1d07df10227955179af43300ea38c1cf095fb3cce799f3ac49008ee6ec1146a363767a658e58d247f69204c27bc8fad8c4736faaa345deb5caf264855018d17040116017df224cc88ec721111d411c95e938480b3af86589a7f522e445ba70de49061e4dd455f73c2074a2c67ff212f7b8d950de5ef7ad314e1e9178250fab0094139ce7301040c8cd70dcb595634d12f416352b961e500dfa8a61195318049c601717e8457019b20b651f6e228d1e607fc86225e26e4739b309b2b7412a5efa56db12d21b76d7536c1ac82e2561468ecd8bade17c17d4ea4604bb0138d689746100305362c9316f17efbcb359e9ec39b0abc244f2114a72e9e058286dbeb24e203e6ae9733101888bcd1a3acfe009089c626f2cadbaca08b4074b7264db2299eafebd229ff548cfbc76e95ce1b59a05263cfe426536bf8b48a2391c2fe94f27bfc6211ac7437fc2d4f19c7df9abd771f692a9dc2d5a6f0aede07b756badc00aa6809c2cb36b8daa86e4b232bc1d965ca81c76a6cc4a7777729288a98a7fd3296636eefa00110976ed49d8a0a770b7c4c56820e7faace980ec827a0910455574b68306652e3b9f5b8dbf95d65f877d67a43ce7711e5a9a589340142f354016c18822fdc257ffda19ba16ba02e91f293f4c1d798ea2f7d64ec9be68f16df06a33a1a169d128d45da538c8bd44a3e7e195f3671cd3e7df18719946fe16af930624d26dcd3b70601cb1cf40899a4395f59a0b3ed156b53ee815beb952370ade19fcbd32722695d1a8afbd984fad876102e7c851b6abe7d24e80c618126171e4ebca03d26d045b23fa5a597be7fda4dd77923c2468de4a75e85e980814bd960c67f479d5b2dc45827209ff20f165ae3d7cd95a6a4d73c6a717d6bb15dbae53f2c0f9d31272050f9e927e09775504628558979cc5d1824fdec6d47941cf28b978f107e62570000a377568580d93974a3cdb3ead0e9e316d93c54740b093db90c055b66dc27abbc71586cacd461684215837cfaad9015cb9f53118384b9eef12842fcd42e904b99ee3b0a3bfa673fe64bb035e59e6ccffef88e2583fa9e2105cb88451ad0b4f5253f18113e6b8b51093be0375ed3493afa9c799dfbb8207cac4a2904c651e00eccd8c92443076e78798416cd7785b13ee4e6abbfeb468a9888400e573e808b519651931567082cb7c5b5e2eac75c6275f1595a6d44ab1a455bc672b97d0a71ddc0f5c0e642bb232e4ad9f14f456e8f250970f8b26013a935630d0d757d8178cdd790f66c44da462cd53ee07f736c154e73bbf19eb20429374fda1bd086dcdd0a8d5bfa19bd615bfc8c490eaf7aa9ff1ad5a79325358d3730f351a4781bf393b419ceb4e5c2bf2f34fe9372cfdc2e47937064e8cf95d45ef9103f471ae0689d3016dc37c1e6200ec366fca58e53573d0ff5678749d2629bf8433ba2fc9d1504bfb2b8ee47007c5804197da10388e847c6dbcee4a2453fad7fa60aa8f8ba8eaf6eb9f73e143f67584f0e9edd1ec69ee9ca3d4a3cb6c0299784577f2850e88e22c4cc2ac1ff4b771bd5d706596d8daf4dc9cf88d9aca9d6e996b0f5172f10a32f1a7bf32477624c45be7fba1f126c6a1fdc31af771bd2d7de94db2b79bc226c90f98223fbf38ce50e82ac743b89fb98ec374bfc7802cdc5005d4b23fb80bd993d5b01b36197357084048526543f93cd6ac2b2ebe1e39a3eac355c53c8564cd5d6c472fcc8331744a39213cb1f391fc0cbcf1e8a4b1f96207914742ba30f01044f978d5a8bc9670a25a42265c9c1e63e81c22e03497f5502139a5bf60d23f1aa573db26dbe0dcaac9b109c11ee8dcd86f81a99ef0c62520ab912111fd808dfb0940337333b9176a6a8f0942a87a3a64aa37a0e0d09c198f8564978509bb24d56e982b9795477b127697dd008b50dee545d21bc5b4f44faea9821a05f4b743d41a57209e89917173527f2d2902d760359de29b6f491202f82c8f109a8bfe6644c79ecb5fad4ba2340505818f1f9f042d4ab75e02ee3e63a167d96c2bacb7a0a86ea8288de11e00af97dc6132d0dc2dc1f0e2fb45c20a5434fb5e0caf8dfd14904ab2ab773d1239fbd6cf60e4ea20dc4dcfbdf356aaf2846c17a07a020419dbb988da36014f790f9dc4c4f5355aa167b1752c3537ff83ecd9142747f3d36509dc3480e1e281d06e0b1fea0e369a587cdf1c42de54692f49a01dc8f62408a0a81603b12e94dd4cf22823fb8a583eeb537264405681f03d066d5a0b92fdb44670c447aba5746ceefe2a7bbbc461ddfee098a65dfea41c327da4c20acb97305"}]}]}]}, 0xfd8}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r4, &(0x7f0000000a40)={0x2020}, 0x2020)
write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20, 0x8000000000000007, 0x0, {0x0, 0x8}}, 0x20)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCFLSH(r1, 0x80204705, 0x20000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, &(0x7f0000000040))
ioctl$BLKRRPART(r0, 0x125f, 0x0)
ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000001c0)="3aba9b35a94d1ed2d3c47188c912c70447b8e8ecb0c0b6d97d8c8620b15380666e9b5fea2a39576430a5d2d7b27bf9d2f5bcb6b218875d5a3949973d97bf172f6ef4d67e35679213bb36fcc492835880c90a092b7c2c6f39f606109b11f14ab47aa89380fc0ff07710bbedda3a71a335cbe12b55fa99571fd488d6f026817778c687dbe72e402bc58e2eb15e609fe708d1cbbea76f4b8aabc196bc31fa301191ae59b15670ec4fc4243ee45fe4120415c2734c7000c315e7106177c49ea500e5f20016e3146d756a325cc65e8a0229c88e96eebe40c4ffd38f10d80be52e9eec9bddde2f435aa2e7f5741526d241796fafdcfa099d6f51c758bed35b5f749e0b")
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) (async)
accept4(r2, 0x0, 0x0, 0x0) (async)
sendmmsg$alg(r3, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) (async)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)={0xfd8, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0x1}}}}, [@NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x34, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ab6fb3f4b230"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5d}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6f}]}, @NL80211_ATTR_NAN_FUNC={0xf78, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x260, 0xd, 0x0, 0x1, [{0xf9, 0x0, "255bd5ee9d01142ecf8c18a8e73bf65da427ff99b440471a86029363f3bd86d5554d0349535a4677a759850b52b90d77d74c632d35f43e53c32b26669a175a7ed8db014ac6b3ae0133eb64786f9af0573d5ecd2594cc2011fce911f1459ef3fc9171fe0b91d80a2dda6354a4d5b88929453f3a29953797c8cd26edaa8070bb482be84fd33bdd3fabd0e61d317237d3c13b524f5921a7083d16347fac88dd50a75d572054bdabce37a005b38b126423844a636650a4e848e1c9ff15cdfe410661c25bf9c73ae318f7784a8f5d22c02d39a902ac549e9990118ce0f82269f6b24581ceb612d712d69d195cb388948032ca8827575a82"}, {0x91, 0x0, "25ee583e8ea12be7d825080ead24c4e4487e17617f7fd6ac9f0ca3eca79416b281b46e2b3e4a219b27bd8c70cc473628eca20d3daf36fb086daf56f474f7977076982c32f4dd4cc45a6dae8063eedb0856a3bd1a72a37a620c8c115a009a44e30867f4bbb9f925118c3f0cfa59f4e74924b9c963b34eb4e2ca716e333dcadfa83a8101148383333fc0945431c9"}, {0xc9, 0x0, "f65da378d0fdb0eae24380c05be6593b9381ea9727ef47bfa08bf511b43b035991959123ad70a88b9d5d2095e3d620c9f7769480b58c8a06e16bb936d8728c3dd42963685c1045d55de3a6ee2001b99206d900de72957c01edce8ecefe1f3175f84c0e16a92ea87921c9f6a2493eaf3b35dfbf414af55cfaee11c995cd360af2488625ba7f0fa91177deba1dd8b99778425bb66853def81ff89e4ed7c1e8354c4a2bd4bda490717c23059141979ea9b0f6cc47a8c30a8bded0a97b710bcc0602b1e4f0605d"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd08, 0xe, 0x0, 0x1, [{0x5d, 0x0, "9d73a8817fda660b1bbb53ae6559a7c50f8ebde8a4cffa0e1767fca20f294119c7b9491c98b5b2584d78b1b9287e145880572f12d13615a1d25eed3f84abb21ecea8f82ff6d6b078f24e102cf40f58bc8a9de656532f00eb03"}, {0x4}, {0x9d, 0x0, "5f490e37b1be15ed2352d4075964b7492dd568bd7937a33950f1a54301d86058d47ace58295aff199eba18214e3b57db6fd9d2506d63d354fcdf19277c81b4ad623485994510e6323e3ec3ed2796940f3c6cb5a480edf46328a089c26d174099e6d12244080a07ec6f0aacd9977040b89a7bcd18e2e795b7670e957fb81ad617d073391e24a12b4bca3a9a494160ff31bb5f403f851b473522"}, {0x66, 0x0, "a16fb04998c60de1881a260331895b023448914a66dceed522e5179156c4e5d546dc38be4d620510be80368dbf50ba9231e2e54d2bc47513952d95bb6e32376875f32f1476d9504b10bc0c1e68ecdc375dcb6c32eb7321b8331c53167f852f7b0cf9"}, {0xb95, 0x0, "f7e809a3cb916da51c615e91bbe4fed68178849d7f13404e1224330c3549345424333425035dbeba9368fbb8ef514947d93e460e3202775b34016e64741ad47be09a3c3abc6058d5775aaa1a1afa9c70381fa97d24ff08214c1195180cdcfd3a38858330b08e18f92becaa22237aa083ee5cd83aa89590722d93c8dc2e8c153d3189d88b22025886520652f8606e968745b94c63df0e960a2404e566f9052bf04799d149a04a25cedce3cb66b1eca5050081b875daf371914e7e7465070b6d605146eaa8d3ee638e853da97f67116c90ef8f29b2ffcb1dc095e3c6d5ad88c160946b7a3c0d8a558fb83f0d2075b756c7866c5a7fc7ea6bb69d69e727869ad87a5ff92be1d36829ff761b10cb9cf457a9c110afc2ece82a225775afd643740d7cebd9f9dbcc91e47663b3f692f975cde0064301dc1e3353956a0c5a4ac81b45589f95c9e3f48956a65b1f04010129a04e51469ceefe27fbb81e85915cd930e8c0c30c2703e1db4836f6b5ce0f4fb0164e2bdec8850811e6ed73f944d37c23943e3e067d27750070ff4b00e4354001e1111c4ab0550dd6b0bbbbd89f980846a1d5c509a773fa741dd376d9a86553ee685390d15b3f60e0e30c9ffe28d371b9d8140fac5b50e51aab0c0c1c96574c9cc2d46fe7c6a3c2aa053402bf5bcd21925c37cb89d86b12fffdd820d6234cf1f5bee35223eeeca944edf6ff6988a5e68298dee1ad6f8b0823ec9fff2fb34d03756ffb60768b82a6b93d6fdcafda5e2da1041529f89e6f13a67b5b053cc3da9bb988a2a98095680e03fa5a6a93c86c6b4ac1de9d13616ac8fa6ab160d73f46bdead47975f2ab4968240462a0bfbf564981a897365be9687f6bcc18197c174d41d706693947aaa71621295a5a2ac1045884043b815f03cce2c7cb7a556fb23424c56a6e7d8414b02aed5ba501b9655950147dc1ac59846db566ac271566f3b993a5b7daf46f87cb7303956ae40cf1b4425128a1d914010cce79d90ff849214b4e113dc670e8e704e5758dd8a0d4f9c4e362d9f35e4773e8a61a31583a54b7bb3cb81aa2f017edb879a90921dc053c1c511ce5057c236d8f37cf12cadacacf3a918c8898609922497e7ab43b1e7394ba5870d5c1424b1e5f700948c3ad862e416f9a31f3a453aa9d3a3067113fcb1271635c191c0e24bda3f26393b29977b33d23c111474bf792295434b1081a47fec5e096653472a0d47fb192247b7eb18a5b4ba12a6aa8e61ed650a98e238ec9535ac24e53f14332237638fb988d0e50bcbb7926650a7e833c21ff355c3687b0b97a506a1e0904466809398094b6c506bb6682f062cf0748478394b11ecaada7c2cce97b657be61c7368a7bc398c1fb21b416458a0537fa199091eb5674d093d1d9d6ee3507bcdee105d055675d8d9850a39c6c574f63e0e9d81bf56d6ed31daedc002dd8de0ac978be72c977c7ffa856b900bba7076d7d863cd701adbb1c9029e41f36aa09745bcea07642986c158b4cbe1561a4545a908eee00a763e4a8308544fd4ccd1fd7d7dbebd9d370887e762170366213f6b40fd1066e7e05a921b211d9abfbca0f3f5bb829b4c41d4b037cd94013b5092c6aafe227a38ef02002a580fb8fc50b653624655317ccc05936051a3ee134af1fd72d89b317a33560220d7bd27053a05021de0ed051c6ae6bc0ec6f6776524e394fcb08fd12e3ee23476845d05e72b88992bf0b0c7ef60c93847c5f403a3f0e59ec391c38a8ad11793b6e0b774c6699322b3836e7bd1ea2fbcbcbb714263d852cd00e29e3a4a60fc76923ede5a4e4486204fc37c52e76b7eeb5324948065bab782503363ffebc201618cec3aade2335c498bd8e53147492ad3fbea4eed53313111802cc1d07df10227955179af43300ea38c1cf095fb3cce799f3ac49008ee6ec1146a363767a658e58d247f69204c27bc8fad8c4736faaa345deb5caf264855018d17040116017df224cc88ec721111d411c95e938480b3af86589a7f522e445ba70de49061e4dd455f73c2074a2c67ff212f7b8d950de5ef7ad314e1e9178250fab0094139ce7301040c8cd70dcb595634d12f416352b961e500dfa8a61195318049c601717e8457019b20b651f6e228d1e607fc86225e26e4739b309b2b7412a5efa56db12d21b76d7536c1ac82e2561468ecd8bade17c17d4ea4604bb0138d689746100305362c9316f17efbcb359e9ec39b0abc244f2114a72e9e058286dbeb24e203e6ae9733101888bcd1a3acfe009089c626f2cadbaca08b4074b7264db2299eafebd229ff548cfbc76e95ce1b59a05263cfe426536bf8b48a2391c2fe94f27bfc6211ac7437fc2d4f19c7df9abd771f692a9dc2d5a6f0aede07b756badc00aa6809c2cb36b8daa86e4b232bc1d965ca81c76a6cc4a7777729288a98a7fd3296636eefa00110976ed49d8a0a770b7c4c56820e7faace980ec827a0910455574b68306652e3b9f5b8dbf95d65f877d67a43ce7711e5a9a589340142f354016c18822fdc257ffda19ba16ba02e91f293f4c1d798ea2f7d64ec9be68f16df06a33a1a169d128d45da538c8bd44a3e7e195f3671cd3e7df18719946fe16af930624d26dcd3b70601cb1cf40899a4395f59a0b3ed156b53ee815beb952370ade19fcbd32722695d1a8afbd984fad876102e7c851b6abe7d24e80c618126171e4ebca03d26d045b23fa5a597be7fda4dd77923c2468de4a75e85e980814bd960c67f479d5b2dc45827209ff20f165ae3d7cd95a6a4d73c6a717d6bb15dbae53f2c0f9d31272050f9e927e09775504628558979cc5d1824fdec6d47941cf28b978f107e62570000a377568580d93974a3cdb3ead0e9e316d93c54740b093db90c055b66dc27abbc71586cacd461684215837cfaad9015cb9f53118384b9eef12842fcd42e904b99ee3b0a3bfa673fe64bb035e59e6ccffef88e2583fa9e2105cb88451ad0b4f5253f18113e6b8b51093be0375ed3493afa9c799dfbb8207cac4a2904c651e00eccd8c92443076e78798416cd7785b13ee4e6abbfeb468a9888400e573e808b519651931567082cb7c5b5e2eac75c6275f1595a6d44ab1a455bc672b97d0a71ddc0f5c0e642bb232e4ad9f14f456e8f250970f8b26013a935630d0d757d8178cdd790f66c44da462cd53ee07f736c154e73bbf19eb20429374fda1bd086dcdd0a8d5bfa19bd615bfc8c490eaf7aa9ff1ad5a79325358d3730f351a4781bf393b419ceb4e5c2bf2f34fe9372cfdc2e47937064e8cf95d45ef9103f471ae0689d3016dc37c1e6200ec366fca58e53573d0ff5678749d2629bf8433ba2fc9d1504bfb2b8ee47007c5804197da10388e847c6dbcee4a2453fad7fa60aa8f8ba8eaf6eb9f73e143f67584f0e9edd1ec69ee9ca3d4a3cb6c0299784577f2850e88e22c4cc2ac1ff4b771bd5d706596d8daf4dc9cf88d9aca9d6e996b0f5172f10a32f1a7bf32477624c45be7fba1f126c6a1fdc31af771bd2d7de94db2b79bc226c90f98223fbf38ce50e82ac743b89fb98ec374bfc7802cdc5005d4b23fb80bd993d5b01b36197357084048526543f93cd6ac2b2ebe1e39a3eac355c53c8564cd5d6c472fcc8331744a39213cb1f391fc0cbcf1e8a4b1f96207914742ba30f01044f978d5a8bc9670a25a42265c9c1e63e81c22e03497f5502139a5bf60d23f1aa573db26dbe0dcaac9b109c11ee8dcd86f81a99ef0c62520ab912111fd808dfb0940337333b9176a6a8f0942a87a3a64aa37a0e0d09c198f8564978509bb24d56e982b9795477b127697dd008b50dee545d21bc5b4f44faea9821a05f4b743d41a57209e89917173527f2d2902d760359de29b6f491202f82c8f109a8bfe6644c79ecb5fad4ba2340505818f1f9f042d4ab75e02ee3e63a167d96c2bacb7a0a86ea8288de11e00af97dc6132d0dc2dc1f0e2fb45c20a5434fb5e0caf8dfd14904ab2ab773d1239fbd6cf60e4ea20dc4dcfbdf356aaf2846c17a07a020419dbb988da36014f790f9dc4c4f5355aa167b1752c3537ff83ecd9142747f3d36509dc3480e1e281d06e0b1fea0e369a587cdf1c42de54692f49a01dc8f62408a0a81603b12e94dd4cf22823fb8a583eeb537264405681f03d066d5a0b92fdb44670c447aba5746ceefe2a7bbbc461ddfee098a65dfea41c327da4c20acb97305"}]}]}]}, 0xfd8}, 0x1, 0x0, 0x0, 0xa0}, 0x0) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
read$FUSE(r4, &(0x7f0000000a40)={0x2020}, 0x2020) (async)
write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20, 0x8000000000000007, 0x0, {0x0, 0x8}}, 0x20) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async)
ioctl$TCFLSH(r1, 0x80204705, 0x20000000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async)
ioctl$SNDCTL_SEQ_GETINCOUNT(r5, 0x80045105, &(0x7f0000000040)) (async)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)
ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000001c0)="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") (async)

1.463451197s ago: executing program 2 (id=956):
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='c 8:*\tw\n>'], 0x9)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000000780)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f00000000c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000480)={{@my=0x0}, 0x1, 0x2})
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000)

571.619491ms ago: executing program 4 (id=957):
socket$inet6(0xa, 0x80003, 0x3)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004054}, 0x4044890) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00"], 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x8000002b) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000001c0)=0x8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200040c0, &(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) (async)
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000003c0)={'icmp6\x00'}, &(0x7f0000000400)=0x1e) (async)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) (async, rerun: 32)
r5 = socket(0x10, 0x3, 0x0) (rerun: 32)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x7641e0d80563cd29}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, r6, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x81}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5a}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0xc850)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r5], 0x20}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xe000, 0x9, {}, {0xee01}, 0x647f, 0x6}) (async)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNISCRNMAP(r8, 0x4b47, &(0x7f00000000c0)=""/110)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0)

427.178403ms ago: executing program 4 (id=958):
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r0=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg0\x00', <r2=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000400)={'wg2\x00', <r6=>0x0})
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6, 0x800000}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x200, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x44}, 0x34002004)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r10 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
fcntl$lock(r11, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r11, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x800000000000fff, 0x1ffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r11, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x40000000, 0x3})
fcntl$lock(r11, 0x6, &(0x7f0000000000))
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r12, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/address_bits', 0x40000, 0x8)
ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r13)
fadvise64(r8, 0x94, 0x6e, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r8, 0x2000)

80.70342ms ago: executing program 2 (id=959):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00')
preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/140, 0x9a}], 0x10000000000000ec, 0x200000b4, 0xfffffffe)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYBLOB="86"], 0xd0060)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$COMEDI_CMDTEST(r2, 0x8050640a, &(0x7f00000000c0)={0x80, 0x1, 0x4, 0x2, 0x0, 0x5, 0x20, 0x9, 0x4, 0x4, 0x0, 0x9, &(0x7f0000000040)=[0x2, 0x3, 0xb3e, 0x80000000, 0x8], 0x5, &(0x7f0000000080)="885a2fb9960f283cec16ccf94eee9ab0e6bb", 0x12})
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1})
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x3)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = syz_open_dev$media(&(0x7f0000000580), 0x800, 0x0)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f00000006c0))
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3cd864b412f4bad5f0aabb6096010083bac50abcc2a969851966bc7826453a00100013072c928e65394b32e9fd000000000000000000ffffe0000002ac14141b0000000000000000000000004e050000000000030200200052000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000ac1414330000000000000000000000000500000000000000000000000000000008000000000000000a0000000000000006000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000002000000000000004f000000000000000c000000000000000200000028bd7000000000000200040002000000000000004c0012006d6f727573313238302d7373653200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
openat$cgroup_type(r2, &(0x7f0000000180), 0x2, 0x0)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0)

0s ago: executing program 1 (id=960):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648b000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r2 = syz_io_uring_setup(0x4e18, &(0x7f0000000180)={0x0, 0x13cb, 0x4, 0x2, 0x80}, &(0x7f0000000200), &(0x7f0000000280))
syz_io_uring_setup(0x5672, &(0x7f0000000000)={0x0, 0x2006599, 0x8000, 0x2, 0x2b5, 0x0, r2}, &(0x7f0000000080), &(0x7f0000ff4000))
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)

kernel console output (not intermixed with test programs):

: entered promiscuous mode
[  156.805326][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.813568][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.822562][ T7309] bridge_slave_1: entered allmulticast mode
[  156.834533][ T7309] bridge_slave_1: entered promiscuous mode
[  156.888698][ T7432] /dev/rnullb0: Can't open blockdev
[  157.058292][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.105446][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.231582][ T7439] /dev/rnullb0: Can't open blockdev
[  157.323704][ T7309] team0: Port device team_slave_0 added
[  157.362771][ T7309] team0: Port device team_slave_1 added
[  157.548201][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.580848][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.611165][ T5166] Bluetooth: hci0: command 0x041b tx timeout
[  157.638836][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.659342][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.669958][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.702705][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.785186][ T7450] /dev/rnullb0: Can't open blockdev
[  157.980044][ T7453] /dev/rnullb0: Can't open blockdev
[  157.987227][ T7309] hsr_slave_0: entered promiscuous mode
[  158.003637][ T7309] hsr_slave_1: entered promiscuous mode
[  158.172393][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  158.351457][    T9] usb 4-1: Using ep0 maxpacket: 16
[  158.383958][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  158.444424][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  158.454471][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.479621][    T9] usb 4-1: Product: syz
[  158.497037][    T9] usb 4-1: Manufacturer: syz
[  158.513111][    T9] usb 4-1: SerialNumber: syz
[  158.547049][    T9] usb 4-1: config 0 descriptor??
[  158.909600][ T7309] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  158.965677][ T7309] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  159.005325][ T7497] netlink: 288 bytes leftover after parsing attributes in process `syz.2.380'.
[  159.024209][ T7309] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  159.066946][ T7309] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  159.295919][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.331450][ T7309] 8021q: adding VLAN 0 to HW filter on device team0
[  159.385036][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.392320][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.446970][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.454255][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.681798][ T5166] Bluetooth: hci0: command 0x041b tx timeout
[  159.880377][ T7532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.383'.
[  159.912010][ T7525] netlink: 60 bytes leftover after parsing attributes in process `syz.1.383'.
[  160.115479][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.031323][ T6839] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  161.057130][ T7576] /dev/rnullb0: Can't open blockdev
[  161.072307][ T7577] ./cgroup: Can't lookup blockdev
[  161.125998][ T7309] veth0_vlan: entered promiscuous mode
[  161.215892][ T6839] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2
[  161.254559][ T7582] loop7: detected capacity change from 0 to 7
[  161.258103][ T6839] usb 2-1: config 8 interface 0 has no altsetting 0
[  161.289853][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  161.300633][ T6839] usb 2-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=73.93
[  161.315207][ T6839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.319086][ T7309] veth1_vlan: entered promiscuous mode
[  161.324853][ T6839] usb 2-1: Product: syz
[  161.336661][ T6839] usb 2-1: Manufacturer: syz
[  161.342291][ T6839] usb 2-1: SerialNumber: syz
[  161.342849][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.356379][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  161.365315][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.374568][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  161.384096][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.393309][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  161.405885][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.415172][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  161.430611][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.439937][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  161.497386][ T7582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.390'.
[  161.513679][ T7309] veth0_macvtap: entered promiscuous mode
[  161.526891][ T7309] veth1_macvtap: entered promiscuous mode
[  161.562413][ T7568] /dev/rnullb0: Can't open blockdev
[  161.571179][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.593872][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.603352][ T7586] /dev/rnullb0: Can't open blockdev
[  161.624179][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  161.627813][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.644784][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.652272][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.661800][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  161.669723][    C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.673232][ T6839] usb 2-1: USB disconnect, device number 21
[  161.679118][    C0] Buffer I/O error on dev loop7, logical block 1, async page read
[  161.693026][    C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.698703][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.702236][    C0] Buffer I/O error on dev loop7, logical block 2, async page read
[  161.702331][    C0] Buffer I/O error on dev loop7, logical block 3, async page read
[  161.726722][    C0] Buffer I/O error on dev loop7, logical block 4, async page read
[  161.730840][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.766083][ T5166] Bluetooth: hci0: command 0x041b tx timeout
[  161.768653][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.800418][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.963048][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.994218][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.040760][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.056553][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.196450][ T5947] usb 4-1: USB disconnect, device number 11
[  162.221204][ T5848] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  162.336131][ T7604] /dev/rnullb0: Can't open blockdev
[  162.391753][ T5848] usb 3-1: Using ep0 maxpacket: 32
[  162.429383][ T5848] usb 3-1: config 0 has an invalid interface number: 83 but max is 0
[  162.456366][ T5848] usb 3-1: config 0 has no interface number 0
[  162.488954][ T5848] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  162.513992][ T7612] vivid-000: disconnect
[  162.535155][ T5848] usb 3-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  162.583312][ T5848] usb 3-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.618164][ T5848] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  162.638845][ T7612] syz.1.394: attempt to access beyond end of device
[  162.638845][ T7612] loop1: rw=0, sector=2, nr_sectors = 2 limit=0
[  162.660094][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.670014][ T5848] usb 3-1: Product: syz
[  162.679885][ T7612] vxfs: unable to read disk superblock at 1
[  162.695183][ T5848] usb 3-1: Manufacturer: syz
[  162.701898][ T7612] syz.1.394: attempt to access beyond end of device
[  162.701898][ T7612] loop1: rw=0, sector=16, nr_sectors = 2 limit=0
[  162.719806][ T5848] usb 3-1: SerialNumber: syz
[  162.730845][ T7612] vxfs: unable to read disk superblock at 8
[  162.741490][ T5848] usb 3-1: config 0 descriptor??
[  162.750529][ T7612] vxfs: can't find superblock.
[  162.782741][ T5848] redrat3 3-1:0.83: Couldn't find all endpoints
[  162.867017][ T7626] netlink: 'syz.4.397': attribute type 1 has an invalid length.
[  162.876427][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'.
[  162.921202][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  163.003155][ T7591] /dev/rnullb0: Can't open blockdev
[  163.028373][ T5893] usb 3-1: USB disconnect, device number 12
[  163.091429][    T9] usb 2-1: Using ep0 maxpacket: 8
[  163.135370][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  163.157492][    T9] usb 2-1: too many configurations: 163, using maximum allowed: 8
[  163.179380][    T9] usb 2-1: config index 0 descriptor too short (expected 259, got 18)
[  163.207191][ T7637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  163.216363][    T9] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 199
[  163.253558][    T9] usb 2-1: can't read configurations, error -22
[  163.411411][    T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  163.565779][ T7645] random: crng reseeded on system resumption
[  163.641638][    T9] usb 2-1: Using ep0 maxpacket: 8
[  163.682377][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  163.690162][    T9] usb 2-1: too many configurations: 163, using maximum allowed: 8
[  163.752365][    T9] usb 2-1: config index 0 descriptor too short (expected 259, got 18)
[  163.793496][    T9] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 199
[  163.825086][    T9] usb 2-1: can't read configurations, error -22
[  163.841741][ T5166] Bluetooth: hci0: command 0x041b tx timeout
[  163.876732][    T9] usb usb2-port1: attempt power cycle
[  164.001050][ T5848] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  164.191370][ T7657] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  164.198004][ T5848] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  164.241428][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.259448][ T5848] usb 3-1: config 0 descriptor??
[  164.273322][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  164.309901][ T5848] ums-realtek 3-1:0.0: USB Mass Storage device detected
[  164.336974][    T9] usb 2-1: Using ep0 maxpacket: 8
[  164.353885][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  164.388841][    T9] usb 2-1: too many configurations: 163, using maximum allowed: 8
[  164.418100][    T9] usb 2-1: config index 0 descriptor too short (expected 259, got 18)
[  164.441116][    T9] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 199
[  164.449848][    T9] usb 2-1: can't read configurations, error -22
[  164.608948][ T7675] Malformed UNC in devname
[  164.608948][ T7675] 
[  164.620012][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  164.639233][ T7675] CIFS: VFS: Malformed UNC in devname
[  164.661873][    T9] usb 2-1: Using ep0 maxpacket: 8
[  164.678806][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  164.704503][    T9] usb 2-1: too many configurations: 163, using maximum allowed: 8
[  164.735219][    T9] usb 2-1: config index 0 descriptor too short (expected 259, got 18)
[  164.769578][    T9] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 199
[  164.798745][    T9] usb 2-1: can't read configurations, error -22
[  164.806906][    T9] usb usb2-port1: unable to enumerate USB device
[  164.922001][ T5893] usb 3-1: USB disconnect, device number 13
[  164.948567][ T7687] /dev/rnullb0: Can't open blockdev
[  165.219882][ T7699] /dev/rnullb0: Can't open blockdev
[  165.605205][ T7612] vivid-000: reconnect
[  165.641531][ T5893] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  165.668173][   T30] audit: type=1400 audit(1754245655.411:34): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=7721 comm="syz.2.414"
[  165.676513][ T7723] /dev/sg0: Can't lookup blockdev
[  165.853090][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.900062][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.923820][ T5166] Bluetooth: hci0: command 0x041b tx timeout
[  165.944666][ T5893] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  165.970037][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  166.007511][ T5893] usb 5-1: SerialNumber: syz
[  166.221114][ T5848] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  166.278549][ T7739] /dev/rnullb0: Can't open blockdev
[  166.411098][ T5848] usb 3-1: Using ep0 maxpacket: 8
[  166.447175][ T5848] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[  166.481522][ T5848] usb 3-1: config 0 has no interface number 0
[  166.518821][ T5848] usb 3-1: New USB device found, idVendor=2c42, idProduct=1605, bcdDevice=35.95
[  166.553413][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.581206][ T5848] usb 3-1: Product: syz
[  166.592255][ T5848] usb 3-1: Manufacturer: syz
[  166.604769][ T5848] usb 3-1: SerialNumber: syz
[  166.642378][ T5848] usb 3-1: config 0 descriptor??
[  166.664476][ T5848] f81232 3-1:0.16: f81534a converter detected
[  166.981706][ T7755] /dev/rnullb0: Can't open blockdev
[  167.115427][ T5848] f81534a ttyUSB0: f81232_set_register failed status: -71
[  167.157315][ T5848] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[  167.226537][ T5848] usb 3-1: USB disconnect, device number 14
[  167.272373][ T5848] f81232 3-1:0.16: device disconnected
[  167.661026][ T5848] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  167.855319][ T5848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.872601][ T5848] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  167.892891][ T5848] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  167.915319][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.958347][ T5848] usb 3-1: config 0 descriptor??
[  168.724847][ T5893] usb 5-1: 0:2 : does not exist
[  168.777106][ T5893] usb 5-1: USB disconnect, device number 2
[  168.788376][ T7785] /dev/rnullb0: Can't open blockdev
[  168.864717][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  168.967688][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.978263][ T5848] Bluetooth: Can't get version to change to load ram patch err
[  169.009034][ T5848] Bluetooth: Loading patch file failed
[  169.019534][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.031981][ T5848] ath3k 3-1:0.0: probe with driver ath3k failed with error -121
[  169.391261][ T5848] usb 3-1: USB disconnect, device number 15
[  169.687514][ T7802] /dev/rnullb0: Can't open blockdev
[  169.818151][ T7811] /dev/rnullb0: Can't open blockdev
[  170.103652][ T7816] netlink: 108 bytes leftover after parsing attributes in process `syz.2.437'.
[  170.251860][ T7818] /dev/rnullb0: Can't open blockdev
[  170.596001][ T7820] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  170.603390][ T7820] /dev/rnullb0: Can't open blockdev
[  171.030055][ T7838] MTD: Couldn't look up './file0': -15
[  171.092195][ T7838] overlayfs: failed to resolve './file1': -2
[  171.200547][ T7843] netlink: 400 bytes leftover after parsing attributes in process `syz.3.444'.
[  171.256399][ T7845] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  171.357437][ T7849] gfs2: gfs2 mount does not exist
[  171.495563][ T7854] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  171.514146][ T7853] /dev/rnullb0: Can't open blockdev
[  171.900684][ T7874] /dev/rnullb0: Can't open blockdev
[  171.984369][ T6839] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  172.154252][ T6839] usb 4-1: Using ep0 maxpacket: 32
[  172.176930][   T30] audit: type=1326 audit(1754245661.921:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.1.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa069f8eb69 code=0x0
[  172.212305][ T6839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.231560][ T6839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.261191][ T6839] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  172.270334][ T6839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.297392][ T6839] usb 4-1: config 0 descriptor??
[  172.307497][ T7879] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  172.375805][ T7882] /dev/rnullb0: Can't open blockdev
[  172.380598][ T7879] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  172.681339][   T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  172.721725][ T6839] aquacomputer_d5next 0003:0C70:F0B6.0005: unknown main item tag 0x0
[  172.757379][ T6839] aquacomputer_d5next 0003:0C70:F0B6.0005: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0
[  172.831187][   T44] usb 5-1: device descriptor read/64, error -71
[  173.082947][   T44] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  173.234130][   T44] usb 5-1: device descriptor read/64, error -71
[  173.353734][   T44] usb usb5-port1: attempt power cycle
[  173.701039][   T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  173.733074][   T44] usb 5-1: device descriptor read/8, error -71
[  173.991103][   T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  174.023429][ T6839] usb 4-1: reset high-speed USB device number 12 using dummy_hcd
[  174.042578][   T44] usb 5-1: device descriptor read/8, error -71
[  174.153043][   T44] usb usb5-port1: unable to enumerate USB device
[  174.886149][ T7891] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  175.454680][ T7900] KVM: debugfs: duplicate directory 7900-6
[  175.667281][   T30] audit: type=1326 audit(1754245665.411:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7890 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fbf8eb69 code=0x7fc00000
[  175.997469][ T7923] hugetlbfs: Unknown parameter 'sizeI�'
[  176.102006][   T24] usb 4-1: USB disconnect, device number 12
[  176.491396][ T5848] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  176.502226][ T7937] /dev/rnullb0: Can't open blockdev
[  176.661097][ T5848] usb 3-1: Using ep0 maxpacket: 8
[  176.677648][ T5848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.717866][ T5848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 200
[  176.748576][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  176.799360][ T5848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  176.862662][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  176.884279][ T5848] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  176.907292][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.930845][ T5848] usb 3-1: config 0 descriptor??
[  176.965156][ T7929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  177.101305][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'.
[  177.195238][ T7956] /dev/rnullb0: Can't open blockdev
[  177.201726][ T7929] /dev/rnullb0: Can't open blockdev
[  177.235137][ T7929] /dev/rnullb0: Can't open blockdev
[  177.243208][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.277940][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.308322][   T44] usb 3-1: USB disconnect, device number 16
[  177.375392][ T7966] /dev/rnullb0: Can't open blockdev
[  177.511106][ T6839] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  177.582435][ T7969] QAT: Device 253 not found
[  177.661446][ T6839] usb 4-1: device descriptor read/64, error -71
[  177.925236][ T6839] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  178.065942][ T6839] usb 4-1: device descriptor read/64, error -71
[  178.203918][ T6839] usb usb4-port1: attempt power cycle
[  178.392842][ T7988] syz.2.479: attempt to access beyond end of device
[  178.392842][ T7988] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0
[  178.416553][ T7988] hfsplus: unable to find HFS+ superblock
[  178.570897][ T6839] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  178.611939][ T6839] usb 4-1: device descriptor read/8, error -71
[  178.672010][ T7998] /dev/rnullb0: Can't open blockdev
[  178.881361][ T6839] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  178.927215][ T6839] usb 4-1: device descriptor read/8, error -71
[  179.052905][ T6839] usb usb4-port1: unable to enumerate USB device
[  179.462564][ T8017] /dev/rnullb0: Can't open blockdev
[  180.405027][ T8043] netlink: 'syz.2.491': attribute type 5 has an invalid length.
[  180.713404][ T8054] Bluetooth: MGMT ver 1.23
[  180.733011][ T8054] netlink: 'syz.2.495': attribute type 7 has an invalid length.
[  180.751139][ T8054] netlink: 232 bytes leftover after parsing attributes in process `syz.2.495'.
[  180.992502][ T8067] /dev/rnullb0: Can't open blockdev
[  181.026365][ T8071] netlink: 812 bytes leftover after parsing attributes in process `syz.2.499'.
[  181.062147][ T8071] openvswitch: netlink: VXLAN extension 206 out of range max 1
[  181.185537][ T8077] /dev/rnullb0: Can't open blockdev
[  181.402213][ T8086] /dev/rnullb0: Can't open blockdev
[  181.586104][ T8095] /dev/rnullb0: Can't open blockdev
[  181.610470][ T8094] /dev/rnullb0: Can't open blockdev
[  181.737801][ T8101] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  181.768186][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'.
[  181.771617][ T8101] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  182.007761][ T8109] bridge0: port 3(hsr_slave_1) entered blocking state
[  182.019521][ T8109] bridge0: port 3(hsr_slave_1) entered disabled state
[  182.027512][ T8109] hsr_slave_1: entered allmulticast mode
[  182.039199][ T8109] hsr_slave_1: left allmulticast mode
[  182.052049][ T5848] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  182.124579][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  182.193116][ T5848] usb 5-1: device descriptor read/64, error -71
[  182.289722][    T9] usb 3-1: device descriptor read/64, error -71
[  182.442505][ T5848] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  182.541393][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  182.615557][ T5848] usb 5-1: device descriptor read/64, error -71
[  182.686082][ T8123] /dev/rnullb0: Can't open blockdev
[  182.691540][    T9] usb 3-1: device descriptor read/64, error -71
[  182.755065][ T5848] usb usb5-port1: attempt power cycle
[  182.803983][    T9] usb usb3-port1: attempt power cycle
[  182.852056][ T8130] /dev/rnullb0: Can't open blockdev
[  183.111147][ T5848] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  183.161036][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  183.176720][ T5848] usb 5-1: device descriptor read/8, error -71
[  183.201973][    T9] usb 3-1: device descriptor read/8, error -71
[  183.297798][ T8141] /dev/rnullb0: Can't open blockdev
[  183.314827][ T8141] netlink: 19 bytes leftover after parsing attributes in process `syz.3.517'.
[  183.421118][ T5848] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  183.453948][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  183.462358][ T5848] usb 5-1: device descriptor read/8, error -71
[  183.501824][    T9] usb 3-1: device descriptor read/8, error -71
[  183.576137][ T5848] usb usb5-port1: unable to enumerate USB device
[  183.636064][    T9] usb usb3-port1: unable to enumerate USB device
[  184.599495][ T8188] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  184.663320][ T8190] loop8: detected capacity change from 0 to 4
[  184.701144][ T8190] Dev loop8: unable to read RDB block 4
[  184.707162][ T8190]  loop8: unable to read partition table
[  184.740899][ T8190] loop8: partition table beyond EOD, truncated
[  184.764155][ T8190] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  185.211475][ T3198] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  185.313749][ T8217] Can't find ip_set type hash:net,por
[  185.376379][ T3198] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[  185.411032][ T3198] usb 5-1: config 8 has no interface number 0
[  185.437582][ T3198] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  185.502305][ T3198] usb 5-1: config 8 interface 177 has no altsetting 0
[  185.509253][ T3198] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  185.512595][ T8231] netlink: 164 bytes leftover after parsing attributes in process `syz.3.531'.
[  185.549492][ T8231] /dev/rnullb0: Can't open blockdev
[  185.576773][ T3198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.594819][ T8204] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  185.866023][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.868205][ T8243] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  185.887002][ T8243] /dev/rnullb0: Can't open blockdev
[  185.914154][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.931077][ T8204] /dev/rnullb0: Can't open blockdev
[  185.938129][ T3198] usb 5-1: string descriptor 0 read error: -71
[  185.966666][    C0] ir_toy 5-1:8.177: out urb status: -71
[  186.481231][ T3198] ir_toy 5-1:8.177: could not write reset command: -110
[  186.499140][ T3198] ir_toy 5-1:8.177: probe with driver ir_toy failed with error -110
[  186.543079][ T3198] usb 5-1: USB disconnect, device number 11
[  186.651554][   T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  186.817677][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.832162][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.843982][   T24] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  186.856116][   T24] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  186.867784][   T24] usb 3-1: Manufacturer: syz
[  186.885987][   T24] usb 3-1: config 0 descriptor??
[  186.909105][   T24] usb 3-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  186.925880][   T24] usb 3-1: No valid video chain found.
[  186.945331][ T3198] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  187.082521][ T3198] usb 5-1: device descriptor read/64, error -71
[  187.121523][ T8259] /dev/rnullb0: Can't open blockdev
[  187.147690][    T9] usb 3-1: USB disconnect, device number 21
[  187.341362][ T3198] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  187.357279][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'.
[  187.370323][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'.
[  187.422506][ T8284] /dev/rnullb0: Can't open blockdev
[  187.492109][ T3198] usb 5-1: device descriptor read/64, error -71
[  187.533006][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'.
[  187.551172][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'.
[  187.618761][ T3198] usb usb5-port1: attempt power cycle
[  187.777556][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'.
[  187.793879][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'.
[  187.993672][ T3198] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  188.031954][ T3198] usb 5-1: device descriptor read/8, error -71
[  188.048581][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.549'.
[  188.291666][ T3198] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  188.335336][ T3198] usb 5-1: device descriptor read/8, error -71
[  188.464041][ T3198] usb usb5-port1: unable to enumerate USB device
[  188.820683][ T8304] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  188.850175][ T8304] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  189.342905][ T8331] /dev/rnullb0: Can't open blockdev
[  189.357613][ T8332] /dev/rnullb0: Can't open blockdev
[  189.706246][ T8349] netlink: 'syz.1.556': attribute type 21 has an invalid length.
[  190.691031][ T5893] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  190.898192][ T5893] usb 5-1: config 202 has an invalid interface number: 251 but max is 0
[  190.910985][ T5893] usb 5-1: config 202 has no interface number 0
[  190.924941][ T5893] usb 5-1: config 202 interface 251 has no altsetting 0
[  190.947677][ T5893] usb 5-1: New USB device found, idVendor=1b91, idProduct=0064, bcdDevice= 7.35
[  190.973688][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.022841][ T5893] usb 5-1: Product: syz
[  191.027081][ T5893] usb 5-1: Manufacturer: syz
[  191.053555][ T5893] usb 5-1: SerialNumber: syz
[  191.511161][ T6839] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  191.551137][ T3198] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  191.675321][ T6839] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  191.696596][ T6839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  191.710772][ T6839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 189, setting to 64
[  191.733023][ T3198] usb 4-1: config 0 has no interfaces?
[  191.734312][ T6839] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  191.741977][ T3198] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  191.763609][ T3198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.768486][ T6839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.782453][ T5893] ftdi_sio 5-1:202.251: FTDI USB Serial Device converter detected
[  191.797894][ T6839] usb 2-1: Product: syz
[  191.802743][ T6839] usb 2-1: Manufacturer: syz
[  191.807865][ T5893] ftdi_sio ttyUSB0: unknown device type: 0x735
[  191.811871][ T3198] usb 4-1: config 0 descriptor??
[  191.818512][ T6839] usb 2-1: SerialNumber: syz
[  191.835903][ T5893] usb 5-1: USB disconnect, device number 16
[  191.846262][ T6839] usb 2-1: config 0 descriptor??
[  191.863366][ T5893] ftdi_sio 5-1:202.251: device disconnected
[  191.871989][ T8372] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  191.972393][ T6839] rc_core: IR keymap rc-streamzap not found
[  191.988615][ T6839] Registered IR keymap rc-empty
[  191.996470][ T6839] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  192.026403][ T6839] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8
[  192.041430][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.050421][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.068934][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.079323][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.095457][ T5947] usb 4-1: USB disconnect, device number 17
[  192.126479][ T8380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.140300][ T8380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.186484][ T3198] usb 2-1: USB disconnect, device number 26
[  192.226889][ T8383] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  192.237034][ T8383] /dev/rnullb0: Can't open blockdev
[  192.251406][ T5848] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  192.413417][ T5848] usb 3-1: device descriptor read/64, error -71
[  192.502984][    C0] blk_print_req_error: 32 callbacks suppressed
[  192.503007][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  192.523297][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.532578][    C0] buffer_io_error: 30 callbacks suppressed
[  192.532598][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  192.546456][    C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.555660][    C0] Buffer I/O error on dev loop7, logical block 1, async page read
[  192.563608][    C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.572803][    C0] Buffer I/O error on dev loop7, logical block 2, async page read
[  192.580710][    C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.589904][    C0] Buffer I/O error on dev loop7, logical block 3, async page read
[  192.597848][    C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.607045][    C0] Buffer I/O error on dev loop7, logical block 4, async page read
[  192.614989][    C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.618837][ T8392] openvswitch: netlink: Unknown key attributes 2
[  192.624169][    C0] Buffer I/O error on dev loop7, logical block 5, async page read
[  192.624264][    C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.647684][    C0] Buffer I/O error on dev loop7, logical block 6, async page read
[  192.657835][ T5947] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  192.671350][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.680605][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  192.689159][    C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  192.698373][    C0] Buffer I/O error on dev loop7, logical block 1, async page read
[  192.706325][    C0] Buffer I/O error on dev loop7, logical block 2, async page read
[  192.791347][ T5848] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  192.813120][ T5947] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  192.833123][ T5947] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  192.847981][ T5947] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  192.863850][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.876379][ T5947] usb 4-1: Product: syz
[  192.881842][ T5947] usb 4-1: Manufacturer: syz
[  192.887426][ T5947] usb 4-1: SerialNumber: syz
[  192.931143][ T5848] usb 3-1: device descriptor read/64, error -71
[  193.051841][ T5848] usb usb3-port1: attempt power cycle
[  193.143039][ T5947] cdc_ncm 4-1:1.0: bind() failure
[  193.414697][ T5848] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  193.528561][ T8400] /dev/rnullb0: Can't open blockdev
[  193.561490][ T5848] usb 3-1: device descriptor read/8, error -71
[  193.626565][ T5947] usb 4-1: USB disconnect, device number 18
[  193.692753][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'.
[  193.761148][ T8406] /dev/rnullb0: Can't open blockdev
[  193.788845][ T8407] udevd[8407]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.812663][ T5848] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  193.862678][ T5848] usb 3-1: device descriptor read/8, error -71
[  193.993097][ T5848] usb usb3-port1: unable to enumerate USB device
[  194.061486][ T5947] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  194.229332][ T5947] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  194.257217][ T5947] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  194.269569][ T5947] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  194.281102][ T5947] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  194.290195][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.311600][ T8404] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  194.567580][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.602574][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.134573][ T8422] /dev/rnullb0: Can't open blockdev
[  195.241320][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  195.249287][ T5947] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  195.287891][ T5947] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input9
[  195.393130][ T5947] usb 4-1: USB disconnect, device number 19
[  195.399169][    C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  195.451066][    T9] usb 2-1: Using ep0 maxpacket: 32
[  195.468070][    T9] usb 2-1: too many configurations: 244, using maximum allowed: 8
[  195.518627][    T9] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  195.553417][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.570984][    T9] usb 2-1: Product: syz
[  195.578691][    T9] usb 2-1: Manufacturer: syz
[  195.585557][    T9] usb 2-1: SerialNumber: syz
[  195.608051][    T9] usb 2-1: config 0 descriptor??
[  195.697464][ T8443] No source specified
[  195.702037][ T6839] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[  195.719610][ T8443] /dev/rnullb0: Can't open blockdev
[  195.743439][ T8441] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  195.750618][ T8441] /dev/rnullb0: Can't open blockdev
[  195.840737][ T8419] /dev/rnullb0: Can't open blockdev
[  195.865386][    T9] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration
[  195.878461][ T6839] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  195.899275][ T6839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.915744][    T9] usb 2-1: USB disconnect, device number 27
[  195.923372][ T6839] usb 3-1: config 0 descriptor??
[  196.024407][ T8461] /dev/rnullb0: Can't open blockdev
[  196.131626][ T6839] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  196.168227][ T6839] asix 3-1:0.0: probe with driver asix failed with error -32
[  196.214192][ T6839] usb 3-1: USB disconnect, device number 26
[  196.345128][ T8477] netlink: 'syz.4.595': attribute type 21 has an invalid length.
[  196.353786][ T8477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.595'.
[  196.472598][    T9] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  196.536180][ T8483] /dev/rnullb0: Can't open blockdev
[  196.682210][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  196.700881][    T9] usb 4-1: config 0 has no interface number 0
[  196.721703][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  196.747523][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  196.765027][    T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  196.790564][ T8493] /dev/rnullb0: Can't open blockdev
[  196.800410][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.838908][    T9] usb 4-1: config 0 descriptor??
[  196.886489][    T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  196.953014][ T8496] /dev/rnullb0: Can't open blockdev
[  197.068167][ T8470] iowarrior 4-1:0.1: Error -90 while submitting URB
[  197.295290][ T8498] /dev/rnullb0: Can't open blockdev
[  197.425225][   T44] usb 4-1: USB disconnect, device number 20
[  197.594370][ T8505] /dev/rnullb0: Can't open blockdev
[  197.632912][ T8506] /dev/rnullb0: Can't open blockdev
[  197.890969][ T8513] kvm: kvm [8512]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0
[  198.803869][ T8528] afs: Unknown parameter 'dynile0'
[  198.992712][ T6839] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  199.164227][ T6839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.171112][    T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  199.178662][ T6839] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=c0.c5
[  199.195423][ T6839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.210873][ T6839] usb 4-1: config 0 descriptor??
[  199.352697][    T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  199.363791][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  199.376597][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  199.394490][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  199.404021][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  199.412535][    T9] usb 3-1: SerialNumber: syz
[  199.433074][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.457992][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.626557][    T9] cdc_acm 3-1:1.0: ttyACM0: USB ACM device
[  199.649214][    T9] usb 3-1: USB disconnect, device number 27
[  199.690670][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  199.695847][ T6839] usb 4-1: string descriptor 0 read error: -71
[  199.701286][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  199.738020][ T6839] hub 4-1:0.0: bad descriptor, ignoring hub
[  199.754188][ T6839] hub 4-1:0.0: probe with driver hub failed with error -5
[  199.783575][ T6839] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  199.799028][   T78] usb 4-1: Failed to submit usb control message: -71
[  199.820885][   T78] usb 4-1: unable to send the bmi data to the device: -71
[  199.838698][   T78] usb 4-1: unable to get target info from device
[  199.845561][   T78] usb 4-1: could not get target info (-71)
[  199.854334][ T6839] usb 4-1: USB disconnect, device number 21
[  199.860609][   T78] usb 4-1: could not probe fw (-71)
[  200.023217][ T8557] /dev/rnullb0: Can't open blockdev
[  200.133303][ T8559] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  200.155525][ T8559] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  200.165885][ T8559] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  200.179848][ T8559] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  200.274181][ T8564] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  200.675112][ T8579] /dev/rnullb0: Can't open blockdev
[  200.779152][ T8582] /dev/rnullb0: Can't open blockdev
[  200.791174][ T5947] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  200.821198][ T5893] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  200.855190][ T8587] /dev/rnullb0: Can't open blockdev
[  200.863969][ T8579] overlayfs: statfs failed on './file0'
[  200.945229][ T8590] /dev/rnullb0: Can't open blockdev
[  200.962357][ T5947] usb 3-1: config index 0 descriptor too short (expected 7768, got 18)
[  200.994853][ T5947] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  201.004126][ T5893] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  201.024019][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.031014][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  201.046777][ T5893] usb 5-1: SerialNumber: syz
[  201.056698][ T5947] usb 3-1: config 0 descriptor??
[  201.063117][ T8594] /dev/rnullb0: Can't open blockdev
[  201.073161][ T5947] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG
[  201.075772][ T5893] usb 5-1: config 0 descriptor??
[  201.100125][ T8593] trusted_key: syz.1.633 sent an empty control message without MSG_MORE.
[  201.298861][ T8577] netlink: 'syz.4.628': attribute type 1 has an invalid length.
[  201.308251][ T8577] netlink: 'syz.4.628': attribute type 1 has an invalid length.
[  201.331910][   T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  201.396522][ T5893] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e
[  201.411252][ T5893] hackrf 5-1:0.0: Could not detect board
[  201.417585][ T5893] hackrf 5-1:0.0: probe with driver hackrf failed with error -71
[  201.432267][ T5893] usb 5-1: USB disconnect, device number 17
[  201.493148][   T44] usb 3-1: USB disconnect, device number 28
[  201.512314][   T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  201.522642][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.530683][   T24] usb 4-1: Product: syz
[  201.536394][   T24] usb 4-1: Manufacturer: syz
[  201.541885][   T24] usb 4-1: SerialNumber: syz
[  201.549195][   T24] usb 4-1: config 0 descriptor??
[  201.759792][   T24] hso 4-1:0.0: Failed to find BULK IN ep
[  201.935805][ T8597] /dev/rnullb0: Can't open blockdev
[  201.973543][ T5947] usb 4-1: USB disconnect, device number 22
[  202.704512][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.723762][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.941454][ T5893] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  202.964837][ T8636] /dev/rnullb0: Can't open blockdev
[  203.113380][ T5893] usb 5-1: Using ep0 maxpacket: 8
[  203.123035][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short
[  203.154131][ T5893] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[  203.174540][ T5893] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  203.184979][ T5893] usb 5-1: config 4 has no interface number 0
[  203.195816][ T5893] usb 5-1: string descriptor 0 read error: -22
[  203.202257][ T5893] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  203.211392][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.240805][ T5893] usb 5-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[  203.261145][ T5893] usb 5-1: No valid video chain found.
[  203.478400][ T8642] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.649'.
[  203.551567][ T6839] usb 5-1: USB disconnect, device number 18
[  203.591648][ T5947] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  203.677524][ T8648] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  203.773098][ T5947] usb 3-1: Using ep0 maxpacket: 16
[  203.787230][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  203.841062][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  203.874183][ T5947] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  203.893634][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.921301][ T5947] usb 3-1: Product: syz
[  203.937931][ T5947] usb 3-1: Manufacturer: syz
[  203.971042][ T5947] usb 3-1: SerialNumber: syz
[  203.993414][ T5947] usb 3-1: config 0 descriptor??
[  204.014057][ T5947] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  204.025485][ T5947] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  204.271169][ T5848] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  204.381055][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  204.431099][ T5848] usb 2-1: Using ep0 maxpacket: 32
[  204.441681][ T5848] usb 2-1: config 0 has an invalid interface number: 231 but max is 0
[  204.449920][ T5848] usb 2-1: config 0 has no interface number 0
[  204.456489][ T5848] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  204.467414][ T5848] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid maxpacket 47112, setting to 1024
[  204.479156][ T5848] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  204.496368][ T5848] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  204.509647][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.517802][ T5848] usb 2-1: Product: syz
[  204.522486][ T5848] usb 2-1: Manufacturer: syz
[  204.527361][ T5848] usb 2-1: SerialNumber: syz
[  204.541671][ T5848] usb 2-1: config 0 descriptor??
[  204.547369][ T5947] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  204.560564][    T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  204.570859][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.571262][ T5947] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  204.571369][ T8659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  204.593542][ T5947] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  204.600571][ T5947] em28xx 3-1:0.0: No AC97 audio processor
[  204.605438][ T8659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  204.634890][    T9] usb 4-1: config 0 descriptor??
[  204.641369][ T6839] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  204.657228][ T5947] usb 3-1: USB disconnect, device number 29
[  204.681728][ T5947] em28xx 3-1:0.0: Disconnecting em28xx
[  204.697856][ T5848] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, b2:ab:16:7d:b1:7e
[  204.697869][ T8671] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  204.705688][ T5947] em28xx 3-1:0.0: Freeing device
[  204.717329][ T8670] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  204.791265][ T6839] usb 5-1: device descriptor read/64, error -71
[  204.838303][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.848499][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.908317][ T5893] usb 2-1: USB disconnect, device number 28
[  204.926110][ T5893] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  205.012485][ T8678] /dev/rnullb0: Can't open blockdev
[  205.033758][ T6839] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  205.114345][ T8682] netlink: 666 bytes leftover after parsing attributes in process `syz.2.660'.
[  205.191463][ T6839] usb 5-1: device descriptor read/64, error -71
[  205.311692][ T6839] usb usb5-port1: attempt power cycle
[  205.492189][ T8662] /dev/rnullb0: Can't open blockdev
[  205.526478][    T9] usb 4-1: Cannot set autoneg
[  205.543877][    T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  205.574095][    T9] usb 4-1: USB disconnect, device number 23
[  205.662394][ T6839] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  205.715291][ T6839] usb 5-1: device descriptor read/8, error -71
[  205.972460][ T6839] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  206.003783][ T6839] usb 5-1: device descriptor read/8, error -71
[  206.123154][ T6839] usb usb5-port1: unable to enumerate USB device
[  206.595927][ T8716] /dev/rnullb0: Can't open blockdev
[  206.632941][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'.
[  206.634181][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'.
[  206.778920][ T8727] afs: Unknown parameter 'fsname'
[  206.779036][ T8725] /dev/rnullb0: Can't open blockdev
[  206.785809][ T8727] /dev/rnullb0: Can't open blockdev
[  206.920861][ T8734] netlink: 100 bytes leftover after parsing attributes in process `syz.1.671'.
[  207.035965][ T8737] /dev/rnullb0: Can't open blockdev
[  207.083982][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  207.161260][ T5893] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  207.241076][    T9] usb 4-1: Using ep0 maxpacket: 8
[  207.252228][    T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  207.260529][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  207.270631][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  207.281371][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  207.291697][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.311287][ T5893] usb 3-1: Using ep0 maxpacket: 8
[  207.311385][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  207.325770][ T5893] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[  207.341015][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.346638][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xED, changing to 0x8D
[  207.381852][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  207.410073][ T5893] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  207.439804][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.459192][ T5893] usb 3-1: Product: syz
[  207.465301][ T5893] usb 3-1: Manufacturer: syz
[  207.492766][ T5893] usb 3-1: SerialNumber: syz
[  207.505918][ T5893] usb 3-1: config 0 descriptor??
[  207.524663][ T5893] powermate 3-1:0.0: probe with driver powermate failed with error -5
[  207.577585][    T9] usb 4-1: usb_control_msg returned -32
[  207.583864][    T9] usbtmc 4-1:16.0: can't read capabilities
[  207.731126][ T5947] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  207.739356][ T8732] : Can't lookup blockdev
[  207.747189][ T8732] : Can't lookup blockdev
[  207.759821][ T8732] : Can't lookup blockdev
[  207.772153][ T8732] : Can't lookup blockdev
[  207.777120][ T8732] : Can't lookup blockdev
[  207.782797][ T8749] pim6reg9: entered allmulticast mode
[  207.785156][ T8732] : Can't lookup blockdev
[  207.793926][ T8732] : Can't lookup blockdev
[  207.798911][ T8732] : Can't lookup blockdev
[  207.803869][ T8732] : Can't lookup blockdev
[  207.808689][ T8732] : Can't lookup blockdev
[  207.814624][ T8732] : Can't lookup blockdev
[  207.819396][ T8732] : Can't lookup blockdev
[  207.824945][ T8732] : Can't lookup blockdev
[  207.829821][ T8732] : Can't lookup blockdev
[  207.835150][ T8732] : Can't lookup blockdev
[  207.839937][ T8732] : Can't lookup blockdev
[  207.845090][ T8732] : Can't lookup blockdev
[  207.849880][ T8732] : Can't lookup blockdev
[  207.855668][ T8732] : Can't lookup blockdev
[  207.860486][ T8732] : Can't lookup blockdev
[  207.865549][ T8732] : Can't lookup blockdev
[  207.870316][ T8732] : Can't lookup blockdev
[  207.878421][ T8732] : Can't lookup blockdev
[  207.885264][ T8732] : Can't lookup blockdev
[  207.890186][ T8732] : Can't lookup blockdev
[  207.896786][ T8732] : Can't lookup blockdev
[  207.903285][ T5947] usb 5-1: Using ep0 maxpacket: 32
[  207.909692][ T8732] : Can't lookup blockdev
[  207.917611][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.929149][ T8732] : Can't lookup blockdev
[  207.941796][ T8732] : Can't lookup blockdev
[  207.946928][ T8732] : Can't lookup blockdev
[  207.951503][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.964853][ T8732] : Can't lookup blockdev
[  207.969677][ T8732] : Can't lookup blockdev
[  207.974438][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  207.990070][ T8732] : Can't lookup blockdev
[  207.994743][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.012558][ T5947] usb 5-1: config 0 descriptor??
[  208.028974][ T6839] usb 3-1: USB disconnect, device number 30
[  208.029454][ T5947] hub 5-1:0.0: USB hub found
[  208.227023][ T5947] hub 5-1:0.0: 1 port detected
[  208.295420][ T8755] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  208.359837][    T9] usb 4-1: USB disconnect, device number 24
[  209.031837][ T8772] /dev/rnullb0: Can't open blockdev
[  209.911781][ T8787] /dev/rnullb0: Can't open blockdev
[  210.047545][    T9] hub 5-1:0.0: activate --> -90
[  210.074537][    T9] hub 5-1:0.0: hub_ext_port_status failed (err = -32)
[  210.704172][ T8804] syzkaller0: tun_chr_ioctl cmd 1074025672
[  210.710071][ T8804] syzkaller0: ignored: set checksum disabled
[  211.121153][ T5166] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  211.122658][ T5845] Bluetooth: hci4: command 0x1003 tx timeout
[  211.231917][ T8816] /dev/rnullb0: Can't open blockdev
[  211.298588][ T8818] openvswitch: netlink: IP tunnel dst address not specified
[  211.364916][ T8810] /dev/rnullb0: Can't open blockdev
[  211.661634][ T5893] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  211.895549][ T5893] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  211.911079][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.952791][ T5893] usb 2-1: config 0 descriptor??
[  211.991585][ T5893] gspca_main: cpia1-2.14.0 probing 0813:0001
[  212.000230][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.043398][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.190005][ T5893] gspca_cpia1: usb_control_msg 05, error -71
[  212.206266][ T5893] gspca_cpia1: usb_control_msg 01, error -71
[  212.228212][ T5893] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  212.286358][ T5893] usb 2-1: USB disconnect, device number 29
[  212.782151][ T5947] usb 5-1: USB disconnect, device number 23
[  212.937491][ T8843] binder: 8840:8843 unknown command 0
[  212.956788][ T8846] /dev/rnullb0: Can't open blockdev
[  212.981877][ T8843] binder: 8840:8843 ioctl c0306201 200000000080 returned -22
[  213.002924][ T8848] /dev/rnullb0: Can't open blockdev
[  213.033463][ T8842] /dev/rnullb0: Can't open blockdev
[  213.443947][ T8864] loop6: detected capacity change from 0 to 7
[  213.463603][ T8864]  loop6: [POWERTEC] p1
[  213.477415][ T8864] loop6: p1 size 1680801792 extends beyond EOD, truncated
[  213.631086][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  213.741063][ T5947] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  213.801267][    T9] usb 4-1: Using ep0 maxpacket: 8
[  213.829298][    T9] usb 4-1: config 64 has an invalid interface number: 143 but max is 0
[  213.857010][    T9] usb 4-1: config 64 has no interface number 0
[  213.886158][    T9] usb 4-1: config 64 interface 143 has no altsetting 0
[  213.894235][ T8871] /dev/rnullb0: Can't open blockdev
[  213.915737][    T9] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=c5.be
[  213.925216][ T5947] usb 5-1: Using ep0 maxpacket: 32
[  213.949277][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.963190][ T5947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.985435][ T5947] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.999686][    T9] usb 4-1: Product: syz
[  214.011114][    T9] usb 4-1: Manufacturer: syz
[  214.018105][    T9] usb 4-1: SerialNumber: syz
[  214.030521][ T5947] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  214.047459][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  214.093644][ T5947] usb 5-1: Product: syz
[  214.102361][ T5947] usb 5-1: Manufacturer: syz
[  214.119646][ T5947] usb 5-1: SerialNumber: syz
[  214.183409][ T5947] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input13
[  214.334099][ T8861] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  214.374513][ T8861] overlayfs: failed to set xattr on upper
[  214.415282][ T8861] overlayfs: ...falling back to redirect_dir=nofollow.
[  214.422735][ T5848] usb 5-1: USB disconnect, device number 24
[  214.448204][ T8861] overlayfs: ...falling back to index=off.
[  214.469916][ T8861] overlayfs: ...falling back to uuid=null.
[  214.503359][ T8861] overlayfs: maximum fs stacking depth exceeded
[  214.557909][ T5848] appletouch 5-1:1.0: input: appletouch disconnected
[  214.624110][    T9] usb_ehset_test 4-1:64.143: probe with driver usb_ehset_test failed with error -32
[  214.667676][    T9] usb 4-1: USB disconnect, device number 25
[  215.578876][ T8907] kvm: pic: level sensitive irq not supported
[  215.661052][ T6839] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  215.864222][ T6839] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  215.879408][ T6839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.895095][ T6839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  215.905993][ T6839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.920800][ T6839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.931725][ T8914] /dev/rnullb0: Can't open blockdev
[  215.956309][ T6839] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  215.986220][ T6839] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  216.006436][ T6839] usb 4-1: Product: syz
[  216.010687][ T6839] usb 4-1: Manufacturer: syz
[  216.047843][ T6839] cdc_wdm 4-1:1.0: skipping garbage
[  216.075361][ T6839] cdc_wdm 4-1:1.0: skipping garbage
[  216.089134][ T6839] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  216.098126][ T6839] cdc_wdm 4-1:1.0: Unknown control protocol
[  216.258256][ T8903] cdc_wdm 4-1:1.0: Error submitting int urb - -90
[  216.421071][ T6839] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  216.601241][ T6839] usb 3-1: Using ep0 maxpacket: 16
[  216.615832][ T6839] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  216.628380][ T6839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.639631][ T6839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  216.653725][ T6839] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  216.674313][ T6839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.692118][ T6839] usb 3-1: Product: syz
[  216.707870][ T6839] usb 3-1: Manufacturer: syz
[  216.722387][ T6839] usb 3-1: SerialNumber: syz
[  216.981033][ T5947] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  217.141459][ T5947] usb 5-1: Using ep0 maxpacket: 32
[  217.153503][ T6839] usb 3-1: 0:2 : does not exist
[  217.158308][ T5947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 251, changing to 11
[  217.172553][ T5947] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  217.182731][ T5947] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  217.203025][ T5947] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  217.212296][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.220331][ T5947] usb 5-1: Product: 䜍ề꾋哣愙렙觌㯱慽⚵ᨊꍪྋ裿∾灉ﲈ縛϶륁⇦쫯ⴽ䙝秓㲒㰗靦ଲ悏✓倚證韧燿앟籶﹚촮ꗎꪽ먕⃯몝➳텲孶闉꽎⑳욀칵쁐ꯝ㗯쌥ਫ਼䜟ꘜӒ௓讳鱁汝㴫㇡待め혠ꑘⅬ蔺ᯒ⤀芪翜處林빯懔涖ｅ躶쪓鶂琮㉾垧׳蕯떽췷㍺ꢗ骣仲뽦桏￧쿊ㅷ믗김갿誶킥ᥧ䖵
[  217.256171][ T5947] usb 5-1: Manufacturer: చ
[  217.321145][   T44] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  217.488229][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  217.493242][ T5947] cdc_ncm 5-1:1.0: bind() failure
[  217.513016][ T5947] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  217.520079][ T5947] cdc_ncm 5-1:1.1: bind() failure
[  217.525697][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  217.537271][ T5947] usb 5-1: USB disconnect, device number 25
[  217.552791][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  217.574922][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  217.589320][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  217.613252][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  217.639235][   T44] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9
[  217.649077][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.657760][   T44] usb 2-1: Product: syz
[  217.663417][   T44] usb 2-1: Manufacturer: syz
[  217.668179][   T44] usb 2-1: SerialNumber: syz
[  217.678043][   T44] usb 2-1: config 0 descriptor??
[  217.689536][   T44] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected
[  217.700724][   T44] ti_usb_3410_5052 2-1:0.0: missing endpoints
[  217.779758][ T8920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.798534][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.809647][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.987826][ T6839] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  218.031198][ T6839] usb 3-1: USB disconnect, device number 31
[  218.089921][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.353916][ T6839] usb 4-1: USB disconnect, device number 26
[  218.480376][   T30] audit: type=1326 audit(1754245708.221:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fbf8eb69 code=0x7ffc0000
[  218.551898][   T30] audit: type=1326 audit(1754245708.251:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fbf8eb69 code=0x7ffc0000
[  218.593291][   T30] audit: type=1326 audit(1754245708.251:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3fbf8d4d0 code=0x7ffc0000
[  218.645001][   T30] audit: type=1326 audit(1754245708.251:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc3fbf90397 code=0x7ffc0000
[  218.681561][    T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  218.704794][   T30] audit: type=1326 audit(1754245708.251:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3fbf8eb69 code=0x7ffc0000
[  218.753786][ T8948] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  218.771040][   T30] audit: type=1326 audit(1754245708.251:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc3fbf90397 code=0x7ffc0000
[  218.811147][ T8948] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  218.831155][   T30] audit: type=1326 audit(1754245708.251:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc3fbf8d7ca code=0x7ffc0000
[  218.865529][   T30] audit: type=1326 audit(1754245708.251:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fbf8eb69 code=0x7ffc0000
[  218.912451][    T9] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[  218.920709][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.941845][   T30] audit: type=1326 audit(1754245708.261:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3fbf8eb69 code=0x7ffc0000
[  218.964312][    T9] usb 5-1: config 0 has no interface number 0
[  218.970475][    T9] usb 5-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 43
[  218.980616][    T9] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  218.997596][   T30] audit: type=1326 audit(1754245708.261:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fbf8eb69 code=0x7ffc0000
[  219.031111][    T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  219.040381][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.055202][    T9] usb 5-1: config 0 descriptor??
[  219.061471][ T8944] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  219.117673][    T9] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  219.317666][    T9] usb 5-1: USB disconnect, device number 26
[  219.325648][ T5924] usb 5-1: Failed to submit usb control message: -71
[  219.336339][ T8955] /dev/rnullb0: Can't open blockdev
[  219.355960][ T5924] usb 5-1: unable to send the bmi data to the device: -71
[  219.371326][ T5924] usb 5-1: unable to get target info from device
[  219.377825][ T5924] usb 5-1: could not get target info (-71)
[  219.390442][ T5924] usb 5-1: could not probe fw (-71)
[  219.429151][ T8957] /dev/rnullb0: Can't open blockdev
[  220.031681][ T8976] /dev/rnullb0: Can't open blockdev
[  220.092451][ T8981] /dev/rnullb0: Can't open blockdev
[  220.095125][   T24] usb 2-1: USB disconnect, device number 30
[  220.284447][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'.
[  220.482929][ T8999] /dev/rnullb0: Can't open blockdev
[  220.503826][ T8999] /dev/rnullb0: Can't open blockdev
[  220.509912][ T8995] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  220.522488][ T8999] /dev/rnullb0: Can't open blockdev
[  220.536612][ T8995] /dev/rnullb0: Can't open blockdev
[  220.551497][ T8999] /dev/rnullb0: Can't open blockdev
[  220.571856][ T8999] /dev/rnullb0: Can't open blockdev
[  220.578056][ T8999] /dev/rnullb0: Can't open blockdev
[  220.595651][ T8999] /dev/rnullb0: Can't open blockdev
[  220.611910][ T8999] /dev/rnullb0: Can't open blockdev
[  220.628364][ T8999] /dev/rnullb0: Can't open blockdev
[  220.638518][ T8999] /dev/rnullb0: Can't open blockdev
[  220.662072][ T8999] /dev/rnullb0: Can't open blockdev
[  220.681204][ T8999] /dev/rnullb0: Can't open blockdev
[  220.687270][ T8999] /dev/rnullb0: Can't open blockdev
[  220.717024][ T8999] /dev/rnullb0: Can't open blockdev
[  220.731772][ T8999] /dev/rnullb0: Can't open blockdev
[  220.741781][ T8999] /dev/rnullb0: Can't open blockdev
[  220.754184][   T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  220.754389][ T8999] /dev/rnullb0: Can't open blockdev
[  220.781901][ T8999] /dev/rnullb0: Can't open blockdev
[  220.792496][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.748'.
[  220.811909][ T8999] /dev/rnullb0: Can't open blockdev
[  220.819270][ T8999] /dev/rnullb0: Can't open blockdev
[  220.841908][ T8999] /dev/rnullb0: Can't open blockdev
[  220.847983][ T8999] /dev/rnullb0: Can't open blockdev
[  220.874698][ T8999] /dev/rnullb0: Can't open blockdev
[  220.880819][ T8999] /dev/rnullb0: Can't open blockdev
[  220.912064][ T8999] /dev/rnullb0: Can't open blockdev
[  220.927878][ T8999] /dev/rnullb0: Can't open blockdev
[  220.942871][ T8999] /dev/rnullb0: Can't open blockdev
[  220.956758][   T24] usb 4-1: Using ep0 maxpacket: 8
[  220.976173][ T8999] /dev/rnullb0: Can't open blockdev
[  220.992553][ T8999] /dev/rnullb0: Can't open blockdev
[  221.004006][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  221.027853][ T8999] /dev/rnullb0: Can't open blockdev
[  221.050679][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  221.055767][ T8999] /dev/rnullb0: Can't open blockdev
[  221.069974][ T9011] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  221.084150][ T9011] netlink: 'syz.4.750': attribute type 1 has an invalid length.
[  221.092244][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  221.094968][ T8999] /dev/rnullb0: Can't open blockdev
[  221.110518][ T9011] netlink: 'syz.4.750': attribute type 101 has an invalid length.
[  221.127984][ T8999] /dev/rnullb0: Can't open blockdev
[  221.136784][ T9011] netlink: 564 bytes leftover after parsing attributes in process `syz.4.750'.
[  221.140313][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.154742][ T8999] /dev/rnullb0: Can't open blockdev
[  221.181333][ T8999] /dev/rnullb0: Can't open blockdev
[  221.194644][ T8999] /dev/rnullb0: Can't open blockdev
[  221.207657][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  221.220032][ T8999] /dev/rnullb0: Can't open blockdev
[  221.235039][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.243990][ T8999] /dev/rnullb0: Can't open blockdev
[  221.256423][ T8999] /dev/rnullb0: Can't open blockdev
[  221.293350][ T9012] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  221.321752][ T8999] /dev/rnullb0: Can't open blockdev
[  221.338090][ T8999] /dev/rnullb0: Can't open blockdev
[  221.358472][ T8999] /dev/rnullb0: Can't open blockdev
[  221.388965][ T8999] /dev/rnullb0: Can't open blockdev
[  221.440668][ T8999] /dev/rnullb0: Can't open blockdev
[  221.468084][ T8999] /dev/rnullb0: Can't open blockdev
[  221.497605][ T8999] /dev/rnullb0: Can't open blockdev
[  221.513617][ T8999] /dev/rnullb0: Can't open blockdev
[  221.519923][ T8999] /dev/rnullb0: Can't open blockdev
[  221.522775][   T24] usb 4-1: GET_CAPABILITIES returned 0
[  221.536934][ T8999] /dev/rnullb0: Can't open blockdev
[  221.562110][   T24] usbtmc 4-1:16.0: can't read capabilities
[  221.563745][ T8999] /dev/rnullb0: Can't open blockdev
[  221.618699][ T8999] /dev/rnullb0: Can't open blockdev
[  221.650470][ T8999] /dev/rnullb0: Can't open blockdev
[  221.678024][ T8999] /dev/rnullb0: Can't open blockdev
[  221.707352][ T8999] /dev/rnullb0: Can't open blockdev
[  222.147420][    T9] usb 4-1: USB disconnect, device number 27
[  222.162107][   T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  222.341032][   T24] usb 2-1: device descriptor read/64, error -71
[  222.611037][   T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  222.728188][ T9065] /dev/rnullb0: Can't open blockdev
[  222.751084][   T24] usb 2-1: device descriptor read/64, error -71
[  222.892628][   T24] usb usb2-port1: attempt power cycle
[  223.111335][  T892] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  223.216807][ T9088] process 'syz.3.765' launched '/dev/fd/6' with NULL argv: empty string added
[  223.271197][   T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  223.311785][  T892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.331016][   T24] usb 2-1: device descriptor read/8, error -71
[  223.347652][  T892] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  223.368064][  T892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.390481][  T892] usb 5-1: config 0 descriptor??
[  223.612377][   T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  223.661874][   T24] usb 2-1: device descriptor read/8, error -71
[  223.730281][ T9102] /dev/rnullb0: Can't open blockdev
[  223.752133][ T9103] /dev/rnullb0: Can't open blockdev
[  223.802055][   T24] usb usb2-port1: unable to enumerate USB device
[  223.825161][  T892] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[  223.875041][  T892] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input15
[  223.936711][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'.
[  223.949131][ T9107] netlink: 'syz.2.769': attribute type 4 has an invalid length.
[  224.064767][  T892] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  224.381803][ T5947] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  224.496327][    C1] Mem-Info:
[  224.499873][    C1] active_anon:6988 inactive_anon:3 isolated_anon:0
[  224.499873][    C1]  active_file:33509 inactive_file:55200 isolated_file:0
[  224.499873][    C1]  unevictable:770 dirty:24 writeback:0
[  224.499873][    C1]  slab_reclaimable:11294 slab_unreclaimable:94936
[  224.499873][    C1]  mapped:25195 shmem:1375 pagetables:1539
[  224.499873][    C1]  sec_pagetables:0 bounce:0
[  224.499873][    C1]  kernel_misc_reclaimable:0
[  224.499873][    C1]  free:1285390 free_pcp:22654 free_cma:0
[  224.545058][    C1] Node 0 active_anon:27952kB inactive_anon:12kB active_file:129076kB inactive_file:220596kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:100780kB dirty:96kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11984kB pagetables:6012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  224.550147][ T5947] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  224.577088][    C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:4960kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  224.577190][    C0] vkms_vblank_simulate: vblank timer overrun
[  224.577214][    C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  224.577283][    C1] lowmem_reserve[]: 0 2496 2497 2497 2497
[  224.577331][    C1] Node 0 DMA32 free:1268532kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27904kB inactive_anon:12kB active_file:129076kB inactive_file:219512kB unevictable:1544kB writepending:96kB present:3129332kB managed:2556208kB mlocked:8kB bounce:0kB free_pcp:46284kB local_pcp:25820kB free_cma:0kB
[  224.577405][    C1] lowmem_reserve[]: 0 0 1 1 1
[  224.577461][    C1] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  224.577533][    C1] lowmem_reserve[]: 0 0 0 0 0
[  224.577582][    C1] Node 1 Normal free:3857668kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4960kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:44108kB local_pcp:25896kB free_cma:0kB
[  224.577656][    C1] lowmem_reserve[]: 0 0 0 0 0
[  224.763963][    C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  224.776775][    C1] Node 0 DMA32: 430*4kB (UM) 72*8kB (UM) 451*16kB (UM) 601*32kB (UME) 288*64kB (UME) 184*128kB (UM) 123*256kB (UME) 34*512kB (M) 16*1024kB (ME) 11*2048kB (UME) 271*4096kB (UM) = 1268552kB
[  224.795391][    C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  224.806998][    C1] Node 1 Normal: 1*4kB (U) 7*8kB (UE) 19*16kB (UME) 68*32kB (UE) 28*64kB (UE) 9*128kB (UME) 2*256kB (ME) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 939*4096kB (M) = 3857772kB
[  224.824205][    C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  224.833766][    C1] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  224.843059][    C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  224.852618][    C1] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  224.861926][    C1] 90083 total pagecache pages
[  224.866619][    C1] 3 pages in swap cache
[  224.870793][    C1] Free swap  = 124984kB
[  224.874951][    C1] Total swap = 124996kB
[  224.879112][    C1] 2097051 pages RAM
[  224.882928][    C1] 0 pages HighMem/MovableOnly
[  224.887605][    C1] 426101 pages reserved
[  224.891755][    C1] 0 pages cma reserved
[  224.918366][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.926628][ T5947] usb 4-1: Product: syz
[  224.930826][ T5947] usb 4-1: Manufacturer: syz
[  224.935775][ T5947] usb 4-1: SerialNumber: syz
[  224.964057][ T5947] usb 4-1: config 0 descriptor??
[  225.595880][ T5947] int51x1 4-1:0.0: probe with driver int51x1 failed with error -71
[  225.623706][ T5947] usb 4-1: USB disconnect, device number 28
[  225.737589][ T9127] bridge0: entered allmulticast mode
[  225.911099][ T5848] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  226.073201][ T5848] usb 3-1: Using ep0 maxpacket: 32
[  226.084235][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  226.096370][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  226.110174][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  226.138934][ T5848] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e
[  226.161236][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.169314][ T5848] usb 3-1: Product: syz
[  226.181516][ T5848] usb 3-1: Manufacturer: syz
[  226.186179][ T5848] usb 3-1: SerialNumber: syz
[  226.213604][ T5848] usb 3-1: config 0 descriptor??
[  226.237468][ T5848] iguanair 3-1:0.0: probe with driver iguanair failed with error -12
[  226.431946][ T9125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.440870][ T9125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.850532][   T24] usb 5-1: USB disconnect, device number 27
[  228.503470][ T9155] /dev/rnullb0: Can't open blockdev
[  228.667357][ T9157] binder: BINDER_SET_CONTEXT_MGR already set
[  228.694241][ T9157] binder: 9156:9157 ioctl 4018620d 200000000100 returned -16
[  228.702126][ T9158] binder: 9156:9158 ioctl ae80 0 returned -22
[  228.734729][ T5848] usb 3-1: USB disconnect, device number 32
[  228.902457][ T9166] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  229.182151][   T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  229.371189][   T24] usb 4-1: Using ep0 maxpacket: 8
[  229.389483][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  229.408585][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  229.427244][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  229.437543][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  229.453972][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  229.464809][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.491593][ T9169] /dev/rnullb0: Can't open blockdev
[  229.572411][ T9171] /dev/rnullb0: Can't open blockdev
[  229.582897][ T9171] /dev/rnullb0: Can't open blockdev
[  229.724445][   T24] usb 4-1: GET_CAPABILITIES returned 0
[  229.730038][   T24] usbtmc 4-1:16.0: can't read capabilities
[  229.736289][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.753964][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.835269][ T5947] usb 4-1: USB disconnect, device number 29
[  229.923727][ T9181] /dev/rnullb0: Can't open blockdev
[  229.975337][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.792'.
[  230.046131][ T9185] syz.3.795: attempt to access beyond end of device
[  230.046131][ T9185] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[  230.068081][ T9185] gfs2: error -5 reading superblock
[  230.381036][ T5947] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  230.511082][ T5947] usb 4-1: device descriptor read/64, error -71
[  230.598267][ T9193] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  230.616202][ T9193] /dev/rnullb0: Can't open blockdev
[  230.761307][ T5947] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  230.901245][ T5947] usb 4-1: device descriptor read/64, error -71
[  230.941780][ T9203] /dev/rnullb0: Can't open blockdev
[  231.011651][ T5947] usb usb4-port1: attempt power cycle
[  231.361143][ T5947] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  231.391851][ T5947] usb 4-1: device descriptor read/8, error -71
[  231.506300][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  231.506320][   T30] audit: type=1326 audit(1754245721.251:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9204 comm="syz.1.799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa069f8eb69 code=0x0
[  231.607668][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.799'.
[  231.622117][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.799'.
[  231.631176][ T5947] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  231.652031][ T5947] usb 4-1: device descriptor read/8, error -71
[  231.761881][ T5947] usb usb4-port1: unable to enumerate USB device
[  231.854343][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.867286][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.888985][ T9209] /dev/rnullb0: Can't open blockdev
[  232.111020][  T892] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  232.119475][ T9214] ./cgroup: Can't lookup blockdev
[  232.208235][ T9216] mkiss: ax0: crc mode is auto.
[  232.261138][  T892] usb 5-1: device descriptor read/64, error -71
[  232.501167][  T892] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  232.581337][   T44] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  232.641137][  T892] usb 5-1: device descriptor read/64, error -71
[  232.721186][   T44] usb 3-1: device descriptor read/64, error -71
[  232.761602][  T892] usb usb5-port1: attempt power cycle
[  232.802270][ T5893] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  232.971085][ T5893] usb 2-1: Using ep0 maxpacket: 8
[  232.976353][   T44] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  232.987269][ T5893] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[  232.995681][ T5893] usb 2-1: config 2 has no interface number 0
[  233.001925][ T5893] usb 2-1: config 2 interface 31 has no altsetting 0
[  233.011288][ T5893] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  233.020563][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.028713][ T5893] usb 2-1: Product: syz
[  233.032988][ T5893] usb 2-1: Manufacturer: syz
[  233.037602][ T5893] usb 2-1: SerialNumber: syz
[  233.052867][ T5893] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[  233.121145][  T892] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  233.128868][   T44] usb 3-1: device descriptor read/64, error -71
[  233.161823][  T892] usb 5-1: device descriptor read/8, error -71
[  233.241411][   T44] usb usb3-port1: attempt power cycle
[  233.431028][  T892] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  233.465883][  T892] usb 5-1: device descriptor read/8, error -71
[  233.561686][ T5947] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  233.582885][  T892] usb usb5-port1: unable to enumerate USB device
[  233.613344][   T44] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  233.643127][   T44] usb 3-1: device descriptor read/8, error -71
[  233.735841][ T5947] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.749660][ T5947] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  233.764690][ T5947] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  233.775715][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.798219][ T5947] usb 4-1: config 0 descriptor??
[  233.909786][   T44] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  233.931776][   T44] usb 3-1: device descriptor read/8, error -71
[  234.019445][ T9229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.040211][ T9229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.054890][   T44] usb usb3-port1: unable to enumerate USB device
[  234.255260][ T9229] /dev/rnullb0: Can't open blockdev
[  234.280592][ T5947] Bluetooth: Can't get version to change to load ram patch err
[  234.293626][ T5947] Bluetooth: Loading patch file failed
[  234.299386][ T5947] ath3k 4-1:0.0: probe with driver ath3k failed with error -121
[  234.943589][ T9233] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  235.446822][ T9240] /dev/rnullb0: Can't open blockdev
[  235.493663][ T9242] /dev/rnullb0: Can't open blockdev
[  235.587961][ T5893] usb 2-1: USB disconnect, device number 35
[  235.658629][ T9246] /dev/rnullb0: Can't open blockdev
[  235.727166][ T9250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.748113][ T9250] /dev/rnullb0: Can't open blockdev
[  236.093472][ T9259] /dev/rnullb0: Can't open blockdev
[  236.319440][ T5848] usb 4-1: USB disconnect, device number 34
[  236.477128][ T9267] /dev/rnullb0: Can't open blockdev
[  236.657384][ T9271] /dev/rnullb0: Can't open blockdev
[  236.829136][ T9273] loop4: detected capacity change from 0 to 2560
[  236.853649][ T5843] buffer_io_error: 25 callbacks suppressed
[  236.853670][ T5843] Buffer I/O error on dev loop4, logical block 0, async page read
[  236.911235][   T44] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  236.926899][ T9273] loop4: detected capacity change from 2560 to 524287999
[  236.955247][ T9273] Buffer I/O error on dev loop4, logical block 0, async page read
[  236.972648][ T9273] Buffer I/O error on dev loop4, logical block 0, async page read
[  237.014333][ T5843] Buffer I/O error on dev loop4, logical block 0, async page read
[  237.031983][ T9273] Buffer I/O error on dev loop4, logical block 0, async page read
[  237.060411][ T9273] Buffer I/O error on dev loop4, logical block 0, async page read
[  237.101862][   T44] usb 5-1: Using ep0 maxpacket: 8
[  237.107417][ T9273] Buffer I/O error on dev loop4, logical block 0, async page read
[  237.133582][ T5843] Buffer I/O error on dev loop4, logical block 0, async page read
[  237.138727][   T44] usb 5-1: config 2 has an invalid interface number: 31 but max is 0
[  237.149943][   T44] usb 5-1: config 2 has no interface number 0
[  237.159472][ T9273] Buffer I/O error on dev loop4, logical block 0, async page read
[  237.181240][   T44] usb 5-1: config 2 interface 31 has no altsetting 0
[  237.194510][ T9273] Buffer I/O error on dev loop4, logical block 0, async page read
[  237.205259][   T44] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  237.221015][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.229076][   T44] usb 5-1: Product: syz
[  237.233784][ T9273] ldm_validate_partition_table(): Disk read failed.
[  237.240819][ T9273] Dev loop4: unable to read RDB block 0
[  237.266560][   T44] usb 5-1: Manufacturer: syz
[  237.281719][ T9273]  loop4: unable to read partition table
[  237.287670][ T9273] loop_reread_partitions: partition scan of loop4 (�N}
[  237.287670][ T9273] �I�QD ��B�;*\_�+D�FV�ѷo�-dכ$���jU�fx��[��^B��$~���P) failed (rc=-5)
[  237.303745][   T44] usb 5-1: SerialNumber: syz
[  237.347715][   T44] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22
[  237.406454][ T5216] ldm_validate_partition_table(): Disk read failed.
[  237.435964][ T5216] Dev loop4: unable to read RDB block 0
[  237.460304][ T5216]  loop4: unable to read partition table
[  237.765855][ T5216] ldm_validate_partition_table(): Disk read failed.
[  237.792388][ T5216] Dev loop4: unable to read RDB block 0
[  237.816154][ T5216]  loop4: unable to read partition table
[  238.048700][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.834'.
[  238.105520][ T9303] /dev/rnullb0: Can't open blockdev
[  239.503371][ T5848] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  239.657279][   T24] usb 5-1: USB disconnect, device number 32
[  239.672945][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.700976][ T5848] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  239.736710][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.783036][ T5848] usb 2-1: config 0 descriptor??
[  240.252102][ T5848] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  240.276030][ T9344] syzkaller1: entered promiscuous mode
[  240.284037][ T5848] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input17
[  240.290633][ T9344] syzkaller1: entered allmulticast mode
[  240.381247][   T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  240.471192][ T5848] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  240.543336][   T24] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 2
[  240.572321][   T24] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  240.615359][   T24] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87
[  240.649059][   T24] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  240.677031][   T24] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  240.704219][   T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  240.723185][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.903408][    C0] Mem-Info:
[  240.906605][    C0] active_anon:7035 inactive_anon:3 isolated_anon:0
[  240.906605][    C0]  active_file:36282 inactive_file:69910 isolated_file:0
[  240.906605][    C0]  unevictable:3618 dirty:186 writeback:0
[  240.906605][    C0]  slab_reclaimable:11537 slab_unreclaimable:95768
[  240.906605][    C0]  mapped:25348 shmem:1373 pagetables:1508
[  240.906605][    C0]  sec_pagetables:0 bounce:0
[  240.906605][    C0]  kernel_misc_reclaimable:0
[  240.906605][    C0]  free:1268390 free_pcp:19924 free_cma:0
[  240.952287][    C0] Node 0 active_anon:28140kB inactive_anon:12kB active_file:140196kB inactive_file:279408kB unevictable:12936kB isolated(anon):0kB isolated(file):0kB mapped:101392kB dirty:744kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12008kB pagetables:5888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  240.984296][    C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:4932kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  241.014561][    C0] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  241.043448][    C0] lowmem_reserve[]: 0 2496 2497 2497 2497
[  241.049247][    C0] Node 0 DMA32 free:1197908kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28092kB inactive_anon:12kB active_file:140196kB inactive_file:278324kB unevictable:12936kB writepending:744kB present:3129332kB managed:2556208kB mlocked:11400kB bounce:0kB free_pcp:38100kB local_pcp:10912kB free_cma:0kB
[  241.082285][    C0] lowmem_reserve[]: 0 0 1 1 1
[  241.087025][    C0] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  241.116253][    C0] lowmem_reserve[]: 0 0 0 0 0
[  241.121024][    C0] Node 1 Normal free:3860292kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4932kB inactive_file:232kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:41588kB local_pcp:16952kB free_cma:0kB
[  241.152956][    C0] lowmem_reserve[]: 0 0 0 0 0
[  241.157706][    C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  241.170458][    C0] Node 0 DMA32: 866*4kB (UM) 782*8kB (UME) 295*16kB (UM) 238*32kB (UME) 56*64kB (UME) 110*128kB (UM) 128*256kB (UME) 36*512kB (UM) 17*1024kB (ME) 14*2048kB (UME) 259*4096kB (M) = 1197864kB
[  241.189276][    C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  241.200868][    C0] Node 1 Normal: 135*4kB (UM) 53*8kB (UME) 40*16kB (UME) 70*32kB (UME) 29*64kB (UME) 8*128kB (UE) 1*256kB (E) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 939*4096kB (M) = 3860292kB
[  241.218656][    C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  241.228225][    C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  241.237564][    C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  241.247118][    C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  241.256411][    C0] 107589 total pagecache pages
[  241.261220][    C0] 3 pages in swap cache
[  241.265386][    C0] Free swap  = 124984kB
[  241.269547][    C0] Total swap = 124996kB
[  241.273718][    C0] 2097051 pages RAM
[  241.277527][    C0] 0 pages HighMem/MovableOnly
[  241.282315][    C0] 426101 pages reserved
[  241.286503][    C0] 0 pages cma reserved
[  241.326220][ T9360] /dev/rnullb0: Can't open blockdev
[  241.341613][   T24] ath6kl: Failed to submit usb control message: -71
[  241.371439][   T24] ath6kl: unable to send the bmi data to the device: -71
[  241.378585][   T24] ath6kl: Unable to send get target info: -71
[  241.411352][   T24] ath6kl: Failed to init ath6kl core: -71
[  241.424749][   T24] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71
[  241.447116][   T24] usb 5-1: USB disconnect, device number 33
[  241.541083][  T892] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  241.691041][  T892] usb 4-1: Using ep0 maxpacket: 8
[  241.706493][  T892] usb 4-1: config 2 has an invalid interface number: 31 but max is 0
[  241.715206][  T892] usb 4-1: config 2 has no interface number 0
[  241.721466][  T892] usb 4-1: config 2 interface 31 has no altsetting 0
[  241.732955][  T892] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  241.744039][  T892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.752975][  T892] usb 4-1: Product: syz
[  241.757197][  T892] usb 4-1: Manufacturer: syz
[  241.762392][  T892] usb 4-1: SerialNumber: syz
[  241.784312][  T892] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22
[  241.934204][ T9369] /dev/rnullb0: Can't open blockdev
[  242.039897][ T9374] /dev/rnullb0: Can't open blockdev
[  242.191501][  T892] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  242.381512][  T892] usb 3-1: Using ep0 maxpacket: 16
[  242.407948][  T892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.441765][  T892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.472524][  T892] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00
[  242.492611][  T892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.536160][  T892] usb 3-1: config 0 descriptor??
[  242.675993][    T9] usb 2-1: USB disconnect, device number 36
[  242.995807][  T892] uclogic 0003:28BD:0074.0008: interface is invalid, ignoring
[  243.141818][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  243.188441][  T892] usb 3-1: USB disconnect, device number 37
[  243.315274][    T9] usb 2-1: Using ep0 maxpacket: 32
[  243.330164][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.364765][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.377181][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  243.394341][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.413044][    T9] usb 2-1: config 0 descriptor??
[  243.571004][   T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  243.734314][   T24] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  243.759263][   T24] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  243.783277][   T24] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  243.798784][   T24] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[  243.812609][   T24] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  243.825502][   T24] usb 5-1: Manufacturer: syz
[  243.830313][   T24] usb 5-1: SerialNumber: syz
[  243.857036][    T9] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0
[  243.869617][    T9] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0
[  243.877773][    T9] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0
[  243.890279][    T9] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0
[  243.918345][   T44] usb 4-1: USB disconnect, device number 35
[  243.920407][    T9] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0
[  243.966451][    T9] kone 0003:1E7D:2CED.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0
[  244.074690][ T9393] syzkaller1: entered promiscuous mode
[  244.089612][    T9] kone 0003:1E7D:2CED.0009: couldn't init struct kone_device
[  244.102693][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.113056][ T9393] syzkaller1: entered allmulticast mode
[  244.134992][    T9] kone 0003:1E7D:2CED.0009: couldn't install mouse
[  244.150421][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.182884][    T9] kone 0003:1E7D:2CED.0009: probe with driver kone failed with error -5
[  244.205129][ T9387] XFS (nullb0): Invalid superblock magic number
[  244.240640][   T30] audit: type=1326 audit(1754245733.981:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9391 comm="syz.3.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fbf8eb69 code=0x0
[  244.291793][   T24] yealink 5-1:36.0: invalid payload size 0, expected 16
[  244.324409][    T9] usb 2-1: USB disconnect, device number 37
[  244.335225][   T24] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input18
[  244.408921][    C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  244.416151][    C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  244.423334][    C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  244.430366][    C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  244.437419][    C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  244.444731][    C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  244.451754][    C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  244.459392][    C1] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  244.466230][    C1] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[  244.502821][   T24] usb 5-1: USB disconnect, device number 34
[  244.520267][ T9404] fuse: Unknown parameter ''
[  244.545239][ T9404] fuse: Unknown parameter ''
[  244.569833][ T9404] fuse: Unknown parameter ''
[  244.592253][ T9404] fuse: Unknown parameter ''
[  244.926221][ T9416] /dev/rnullb0: Can't open blockdev
[  246.012839][ T9425] No control pipe specified
[  246.191067][   T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  246.370998][   T24] usb 3-1: Using ep0 maxpacket: 8
[  246.380304][   T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  246.392293][   T24] usb 3-1: config 0 has no interface number 0
[  246.410662][   T24] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  246.453285][   T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  246.490366][   T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  246.533390][   T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  246.565500][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.602084][   T24] usb 3-1: config 0 descriptor??
[  246.628043][ T9430] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  246.661198][   T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  246.877469][ T9437] binder: BC_ATTEMPT_ACQUIRE not supported
[  246.882157][ T9430] /dev/rnullb0: Can't open blockdev
[  246.888869][ T9437] binder: 9436:9437 ioctl c0306201 2000000001c0 returned -22
[  246.941575][ T5947] usb 3-1: USB disconnect, device number 38
[  247.031325][ T9440] /dev/rnullb0: Can't open blockdev
[  247.207937][ T9444] /dev/rnullb0: Can't open blockdev
[  247.631119][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'.
[  247.665045][ T9454] /dev/rnullb0: Can't open blockdev
[  248.149674][ T5924] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.196825][ T9459] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  248.264774][ T5924] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.474414][ T9466] /dev/rnullb0: Can't open blockdev
[  248.476378][ T5924] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.693934][ T5924] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.741994][ T9474] /dev/rnullb0: Can't open blockdev
[  248.948666][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  248.959790][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  248.971909][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  248.987175][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  248.996915][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  249.045398][ T5166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  249.061550][ T5166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  249.069341][ T5166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  249.084491][ T5166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  249.099696][ T5166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  249.358783][ T5924] bridge_slave_1: left allmulticast mode
[  249.380153][ T5924] bridge_slave_1: left promiscuous mode
[  249.402138][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.432819][ T5924] bridge_slave_0: left promiscuous mode
[  249.438829][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.777291][ T9518] /dev/rnullb0: Can't open blockdev
[  250.924390][   T30] audit: type=1800 audit(1754245740.671:68): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.896" name="bus" dev="tmpfs" ino=1236 res=0 errno=0
[  251.005137][ T5924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.018845][ T5924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.039111][ T5924] bond0 (unregistering): Released all slaves
[  251.201663][ T5845] Bluetooth: hci2: command tx timeout
[  251.774892][ T5924] hsr_slave_0: left promiscuous mode
[  251.838903][ T5924] hsr_slave_1: left promiscuous mode
[  251.863320][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.884538][ T5924] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.942839][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.978435][ T5924] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.046460][ T9561] /dev/rnullb0: Can't open blockdev
[  252.088710][ T5924] veth1_macvtap: left promiscuous mode
[  252.115711][ T5924] veth0_macvtap: left promiscuous mode
[  252.126140][ T5924] veth1_vlan: left promiscuous mode
[  252.146753][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'.
[  252.156151][ T5924] veth0_vlan: left promiscuous mode
[  252.239155][ T9567] /dev/rnullb0: Can't open blockdev
[  253.226941][ T5924] team0 (unregistering): Port device team_slave_1 removed
[  253.281538][ T5845] Bluetooth: hci2: command tx timeout
[  253.283441][ T5924] team0 (unregistering): Port device team_slave_0 removed
[  254.450993][ T5947] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  254.529408][ T9481] chnl_net:caif_netlink_parms(): no params data found
[  254.583408][ T9601] /dev/rnullb0: Can't open blockdev
[  254.611134][ T5947] usb 3-1: device descriptor read/64, error -71
[  254.749055][ T5924] IPVS: stop unused estimator thread 0...
[  254.865610][ T5947] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  254.952598][ T9618] /dev/rnullb0: Can't open blockdev
[  255.060994][ T5947] usb 3-1: device descriptor read/64, error -71
[  255.171509][ T5947] usb usb3-port1: attempt power cycle
[  255.251423][ T9632] /dev/rnullb0: Can't open blockdev
[  255.361080][ T5845] Bluetooth: hci2: command tx timeout
[  255.372298][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.379689][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.426078][ T9481] bridge_slave_0: entered allmulticast mode
[  255.455137][ T9481] bridge_slave_0: entered promiscuous mode
[  255.497995][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.514685][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.530159][ T9481] bridge_slave_1: entered allmulticast mode
[  255.550709][ T9481] bridge_slave_1: entered promiscuous mode
[  255.561029][ T5947] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  255.602532][ T5947] usb 3-1: device descriptor read/8, error -71
[  255.656012][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.710201][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.775472][ T9481] team0: Port device team_slave_0 added
[  255.788160][ T9481] team0: Port device team_slave_1 added
[  255.811149][ T5893] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  255.857131][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.867300][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.871047][ T5947] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  255.893347][    C0] vkms_vblank_simulate: vblank timer overrun
[  255.909076][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.924926][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.933067][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.960426][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.965162][ T5947] usb 3-1: device descriptor read/8, error -71
[  255.971578][ T5893] usb 2-1: Using ep0 maxpacket: 32
[  255.986738][ T5893] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  255.995646][ T5893] usb 2-1: config 0 has no interface number 0
[  256.014988][ T5893] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  256.036200][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.055137][ T5893] usb 2-1: Product: syz
[  256.059391][ T5893] usb 2-1: Manufacturer: syz
[  256.082080][ T5947] usb usb3-port1: unable to enumerate USB device
[  256.095794][ T5893] usb 2-1: SerialNumber: syz
[  256.124475][ T5893] usb 2-1: config 0 descriptor??
[  256.153594][ T5893] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  256.250326][ T9481] hsr_slave_0: entered promiscuous mode
[  256.273799][ T9481] hsr_slave_1: entered promiscuous mode
[  256.280857][ T9481] debugfs: 'hsr0' already exists in 'hsr'
[  256.287006][ T9481] Cannot create hsr debugfs directory
[  256.379871][ T5893] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  256.412968][ T5893] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  256.816135][ T9654] overlayfs: failed to resolve './file0': -2
[  256.907772][ T9481] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  256.938304][ T9481] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  256.950792][ T9481] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  256.973188][ T9481] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  257.103078][ T5893] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  257.220143][ T9481] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.258369][ T9481] 8021q: adding VLAN 0 to HW filter on device team0
[  257.283359][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.296223][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.313454][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  257.313763][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.329636][ T5893] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  257.336720][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.390641][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.396173][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.397967][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.434766][ T5893] usb 5-1: config 0 descriptor??
[  257.441160][ T5845] Bluetooth: hci2: command tx timeout
[  257.646827][ T9668] /dev/rnullb0: Can't open blockdev
[  258.093024][ T5893] usb 5-1: string descriptor 0 read error: -71
[  258.111966][ T5893] uclogic 0003:5543:3031.000A: failed retrieving string descriptor #200: -71
[  258.134670][ T5893] uclogic 0003:5543:3031.000A: failed retrieving pen parameters: -71
[  258.159182][ T5893] uclogic 0003:5543:3031.000A: failed probing pen v2 parameters: -71
[  258.188836][ T5893] uclogic 0003:5543:3031.000A: failed probing parameters: -71
[  258.194106][ T9481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.211628][ T5893] uclogic 0003:5543:3031.000A: probe with driver uclogic failed with error -71
[  258.265504][ T5893] usb 5-1: USB disconnect, device number 35
[  258.623216][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  258.635626][ T5893] usb 2-1: USB disconnect, device number 38
[  258.672548][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  258.719579][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  258.754931][ T5893] quatech2 2-1:0.51: device disconnected
[  259.137045][ T9706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.928'.
[  259.190766][ T9481] veth0_vlan: entered promiscuous mode
[  259.280011][ T9481] veth1_vlan: entered promiscuous mode
[  259.376472][ T9481] veth0_macvtap: entered promiscuous mode
[  259.404576][ T9481] veth1_macvtap: entered promiscuous mode
[  259.486073][ T9481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.577132][ T9713] mkiss: ax0: crc mode is auto.
[  259.584220][ T9481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.646447][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.665197][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.679110][ T9713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  259.720718][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.771316][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.945860][ T9730] /dev/rnullb0: Can't open blockdev
[  260.017212][ T9733] /dev/rnullb0: Can't open blockdev
[  260.287606][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.308362][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.415882][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.431106][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.511009][ T5848] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  260.704884][ T5848] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  260.751662][ T5848] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  260.780325][ T9743] can: request_module (can-proto-0) failed.
[  260.791188][ T5848] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  260.821170][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.851175][ T9737] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  260.874574][ T5848] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  261.094851][ T5848] usb 3-1: USB disconnect, device number 43
[  261.129131][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  261.135607][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  261.158847][ T9761] /dev/rnullb0: Can't open blockdev
[  261.162096][ T9762] /dev/rnullb0: Can't open blockdev
[  261.825022][ T9776] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.919013][ T9781] /dev/rnullb0: Can't open blockdev
[  261.945236][ T9780] /dev/rnullb0: Can't open blockdev
[  261.955603][ T9781] 9pnet_virtio: no channels available for device syz
[  262.512790][ T9793] /dev/rnullb0: Can't open blockdev
[  262.519259][ T9793] /dev/rnullb0: Can't open blockdev
[  262.544040][ T9793] /dev/rnullb0: Can't open blockdev
[  262.569764][ T9793] /dev/rnullb0: Can't open blockdev
[  262.589447][ T9793] /dev/rnullb0: Can't open blockdev
[  262.608854][ T9793] /dev/rnullb0: Can't open blockdev
[  262.628990][ T9793] /dev/rnullb0: Can't open blockdev
[  262.654949][ T9793] /dev/rnullb0: Can't open blockdev
[  262.672750][ T9793] /dev/rnullb0: Can't open blockdev
[  262.678742][ T9793] /dev/rnullb0: Can't open blockdev
[  262.711706][ T9793] /dev/rnullb0: Can't open blockdev
[  262.722794][ T9793] /dev/rnullb0: Can't open blockdev
[  262.728871][ T9793] /dev/rnullb0: Can't open blockdev
[  262.761797][ T9793] /dev/rnullb0: Can't open blockdev
[  262.767864][ T9793] /dev/rnullb0: Can't open blockdev
[  262.822268][ T9793] /dev/rnullb0: Can't open blockdev
[  262.828277][ T9793] /dev/rnullb0: Can't open blockdev
[  262.887751][ T9793] /dev/rnullb0: Can't open blockdev
[  262.903656][ T9793] /dev/rnullb0: Can't open blockdev
[  262.940863][ T9793] /dev/rnullb0: Can't open blockdev
[  262.947832][ T9793] /dev/rnullb0: Can't open blockdev
[  262.953826][ T5848] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  262.967722][ T9793] /dev/rnullb0: Can't open blockdev
[  262.982209][ T9793] /dev/rnullb0: Can't open blockdev
[  262.994258][ T9793] /dev/rnullb0: Can't open blockdev
[  263.000276][ T9793] /dev/rnullb0: Can't open blockdev
[  263.020304][ T9793] /dev/rnullb0: Can't open blockdev
[  263.028992][ T9793] /dev/rnullb0: Can't open blockdev
[  263.036288][ T9793] /dev/rnullb0: Can't open blockdev
[  263.052861][ T9793] /dev/rnullb0: Can't open blockdev
[  263.058911][ T9793] /dev/rnullb0: Can't open blockdev
[  263.065297][ T9793] /dev/rnullb0: Can't open blockdev
[  263.071463][ T9793] /dev/rnullb0: Can't open blockdev
[  263.077513][ T9793] /dev/rnullb0: Can't open blockdev
[  263.119046][ T5848] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  263.149389][ T5848] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.168149][ T5848] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  263.191494][ T9784] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  263.197567][ T9784] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  263.230964][ T5848] usb 3-1: config 1 has no interface number 1
[  263.257876][ T5848] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  263.296467][ T5848] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  263.353577][ T5848] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  263.372365][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.393397][ T5848] usb 3-1: Product: syz
[  263.403984][ T5848] usb 3-1: Manufacturer: syz
[  263.417011][ T5848] usb 3-1: SerialNumber: syz
[  263.578230][ T9813] /dev/rnullb0: Can't open blockdev
[  263.858606][ T9816] netlink: 'syz.5.950': attribute type 10 has an invalid length.
[  263.891163][ T9816] hsr_slave_0: entered allmulticast mode
[  263.898897][ T9816] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port
[  264.167877][ T5848] usb 3-1: No endpoint at altset 1, falling back to MIDI 1.0
[  264.191716][ T5848] usb 3-1: MIDIStreaming interface descriptor not found
[  264.291614][ T5848] usb 3-1: USB disconnect, device number 44
[  264.541088][ T7318] udevd[7318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  265.021023][ T5893] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  265.191058][ T5893] usb 6-1: Using ep0 maxpacket: 8
[  265.205144][ T5893] usb 6-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  265.216398][ T5893] usb 6-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  265.240971][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0
[  265.247769][ T5893] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  265.281246][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.305453][ T5893] usb 6-1: config 0 descriptor??
[  265.719442][ T5893] mcp2200 0003:04D8:00DF.000B: unknown main item tag 0x0
[  265.748033][ T5893] mcp2200 0003:04D8:00DF.000B: unknown main item tag 0x0
[  265.781234][ T5893] mcp2200 0003:04D8:00DF.000B: unknown main item tag 0x0
[  265.811840][ T5893] mcp2200 0003:04D8:00DF.000B: unknown main item tag 0x0
[  265.839454][ T5893] mcp2200 0003:04D8:00DF.000B: unknown main item tag 0x0
[  265.861965][ T5893] mcp2200 0003:04D8:00DF.000B: USB HID vff.ff Device [HID 04d8:00df] on usb-dummy_hcd.5-1/input0
[  266.324274][ T9868] 
[  266.326933][ T9868] ======================================================
[  266.333980][ T9868] WARNING: possible circular locking dependency detected
[  266.341033][ T9868] 6.16.0-next-20250731-syzkaller #0 Not tainted
[  266.347313][ T9868] ------------------------------------------------------
[  266.354432][ T9868] syz.4.958/9868 is trying to acquire lock:
[  266.360355][ T9868] ffff88801b6ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450
[  266.370727][ T9868] 
[  266.370727][ T9868] but task is already holding lock:
[  266.378121][ T9868] ffff888142f36c98 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00
[  266.387955][ T9868] 
[  266.387955][ T9868] which lock already depends on the new lock.
[  266.387955][ T9868] 
[  266.398406][ T9868] 
[  266.398406][ T9868] the existing dependency chain (in reverse order) is:
[  266.407455][ T9868] 
[  266.407455][ T9868] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}:
[  266.416086][ T9868]        lock_acquire+0x120/0x360
[  266.421313][ T9868]        blk_alloc_queue+0x538/0x620
[  266.426698][ T9868]        __blk_mq_alloc_disk+0x15c/0x340
[  266.432345][ T9868]        loop_add+0x411/0xad0
[  266.437040][ T9868]        loop_init+0xd9/0x170
[  266.441738][ T9868]        do_one_initcall+0x233/0x820
[  266.447057][ T9868]        do_initcall_level+0x104/0x190
[  266.452543][ T9868]        do_initcalls+0x59/0xa0
[  266.457423][ T9868]        kernel_init_freeable+0x334/0x4b0
[  266.463164][ T9868]        kernel_init+0x1d/0x1d0
[  266.468020][ T9868]        ret_from_fork+0x3fc/0x770
[  266.473147][ T9868]        ret_from_fork_asm+0x1a/0x30
[  266.478435][ T9868] 
[  266.478435][ T9868] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  266.485723][ T9868]        lock_acquire+0x120/0x360
[  266.490790][ T9868]        fs_reclaim_acquire+0x72/0x100
[  266.496280][ T9868]        kmem_cache_alloc_noprof+0x44/0x3c0
[  266.502217][ T9868]        __kernfs_iattrs+0xd9/0x320
[  266.507467][ T9868]        kernfs_iop_setattr+0xea/0x3f0
[  266.512966][ T9868]        notify_change+0xb33/0xe40
[  266.518131][ T9868]        do_truncate+0x1a4/0x220
[  266.523100][ T9868]        path_openat+0x306c/0x3830
[  266.528230][ T9868]        do_filp_open+0x1fa/0x410
[  266.533264][ T9868]        do_sys_openat2+0x121/0x1c0
[  266.538484][ T9868]        __x64_sys_openat+0x138/0x170
[  266.543872][ T9868]        do_syscall_64+0xfa/0x3b0
[  266.548921][ T9868]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.555389][ T9868] 
[  266.555389][ T9868] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  266.563974][ T9868]        validate_chain+0xb9b/0x2140
[  266.569622][ T9868]        __lock_acquire+0xab9/0xd20
[  266.574871][ T9868]        lock_acquire+0x120/0x360
[  266.580146][ T9868]        down_read+0x46/0x2e0
[  266.584926][ T9868]        kernfs_iop_getattr+0x9e/0x450
[  266.590407][ T9868]        vfs_getattr_nosec+0x2e1/0x430
[  266.595890][ T9868]        loop_assign_backing_file+0x222/0x400
[  266.602178][ T9868]        lo_ioctl+0x1860/0x1d00
[  266.607228][ T9868]        blkdev_ioctl+0x5a5/0x6d0
[  266.612267][ T9868]        __se_sys_ioctl+0xfc/0x170
[  266.617397][ T9868]        do_syscall_64+0xfa/0x3b0
[  266.622448][ T9868]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.628876][ T9868] 
[  266.628876][ T9868] other info that might help us debug this:
[  266.628876][ T9868] 
[  266.639475][ T9868] Chain exists of:
[  266.639475][ T9868]   &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#25
[  266.639475][ T9868] 
[  266.654122][ T9868]  Possible unsafe locking scenario:
[  266.654122][ T9868] 
[  266.661771][ T9868]        CPU0                    CPU1
[  266.667171][ T9868]        ----                    ----
[  266.672713][ T9868]   lock(&q->q_usage_counter(io)#25);
[  266.678210][ T9868]                                lock(fs_reclaim);
[  266.684744][ T9868]                                lock(&q->q_usage_counter(io)#25);
[  266.692667][ T9868]   rlock(&root->kernfs_iattr_rwsem);
[  266.698058][ T9868] 
[  266.698058][ T9868]  *** DEADLOCK ***
[  266.698058][ T9868] 
[  266.706205][ T9868] 3 locks held by syz.4.958/9868:
[  266.711246][ T9868]  #0: ffff888024fc4400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xfbf/0x1d00
[  266.720412][ T9868]  #1: ffff888142f36c98 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00
[  266.730625][ T9868]  #2: ffff888142f36cd0 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: lo_ioctl+0x17f2/0x1d00
[  266.741223][ T9868] 
[  266.741223][ T9868] stack backtrace:
[  266.747152][ T9868] CPU: 1 UID: 0 PID: 9868 Comm: syz.4.958 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) 
[  266.747175][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  266.747193][ T9868] Call Trace:
[  266.747201][ T9868]  <TASK>
[  266.747209][ T9868]  dump_stack_lvl+0x189/0x250
[  266.747241][ T9868]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.747265][ T9868]  ? __pfx__printk+0x10/0x10
[  266.747294][ T9868]  print_circular_bug+0x2ee/0x310
[  266.747317][ T9868]  check_noncircular+0x134/0x160
[  266.747342][ T9868]  validate_chain+0xb9b/0x2140
[  266.747363][ T9868]  ? tomoyo_path_perm+0x1e3/0x4b0
[  266.747388][ T9868]  __lock_acquire+0xab9/0xd20
[  266.747412][ T9868]  ? kernfs_iop_getattr+0x9e/0x450
[  266.747437][ T9868]  lock_acquire+0x120/0x360
[  266.747453][ T9868]  ? kernfs_iop_getattr+0x9e/0x450
[  266.747482][ T9868]  down_read+0x46/0x2e0
[  266.747499][ T9868]  ? kernfs_iop_getattr+0x9e/0x450
[  266.747524][ T9868]  kernfs_iop_getattr+0x9e/0x450
[  266.747551][ T9868]  vfs_getattr_nosec+0x2e1/0x430
[  266.747576][ T9868]  loop_assign_backing_file+0x222/0x400
[  266.747600][ T9868]  ? __pfx_loop_assign_backing_file+0x10/0x10
[  266.747621][ T9868]  ? schedule+0x91/0x360
[  266.747651][ T9868]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  266.747681][ T9868]  lo_ioctl+0x1860/0x1d00
[  266.747699][ T9868]  ? ktime_get+0x3e/0x1f0
[  266.747725][ T9868]  ? __pfx_lo_ioctl+0x10/0x10
[  266.747742][ T9868]  ? css_rstat_updated+0x23a/0x4f0
[  266.747766][ T9868]  ? __lock_acquire+0xab9/0xd20
[  266.747791][ T9868]  ? __lock_acquire+0xab9/0xd20
[  266.747811][ T9868]  ? __lock_acquire+0xab9/0xd20
[  266.747834][ T9868]  ? is_bpf_text_address+0x26/0x2b0
[  266.747854][ T9868]  ? is_bpf_text_address+0x292/0x2b0
[  266.747870][ T9868]  ? is_bpf_text_address+0x26/0x2b0
[  266.747887][ T9868]  ? kernel_text_address+0xa5/0xe0
[  266.747903][ T9868]  ? __kernel_text_address+0xd/0x40
[  266.747917][ T9868]  ? unwind_get_return_address+0x4d/0x90
[  266.747940][ T9868]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  266.747964][ T9868]  ? arch_stack_walk+0xfc/0x150
[  266.747992][ T9868]  ? stack_trace_save+0x9c/0xe0
[  266.748014][ T9868]  ? __pfx_stack_trace_save+0x10/0x10
[  266.748038][ T9868]  ? stack_depot_save_flags+0x40/0x860
[  266.748061][ T9868]  ? kasan_save_track+0x4f/0x80
[  266.748085][ T9868]  ? kasan_save_track+0x3e/0x80
[  266.748108][ T9868]  ? kasan_save_free_info+0x46/0x50
[  266.748127][ T9868]  ? __kasan_slab_free+0x5b/0x80
[  266.748151][ T9868]  ? kfree+0x18e/0x440
[  266.748175][ T9868]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  266.748190][ T9868]  ? security_file_ioctl+0xcb/0x2d0
[  266.748216][ T9868]  ? __se_sys_ioctl+0x47/0x170
[  266.748242][ T9868]  ? do_syscall_64+0xfa/0x3b0
[  266.748256][ T9868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.748282][ T9868]  ? __asan_memset+0x22/0x50
[  266.748303][ T9868]  ? blk_get_meta_cap+0x140/0x710
[  266.748323][ T9868]  ? __pfx_blk_get_meta_cap+0x10/0x10
[  266.748340][ T9868]  ? kasan_quarantine_put+0xdd/0x220
[  266.748366][ T9868]  ? blkdev_common_ioctl+0xff7/0x2550
[  266.748387][ T9868]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  266.748411][ T9868]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  266.748432][ T9868]  ? do_vfs_ioctl+0xbe8/0x1430
[  266.748448][ T9868]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  266.748468][ T9868]  ? __lock_acquire+0xab9/0xd20
[  266.748490][ T9868]  ? __pfx_lo_ioctl+0x10/0x10
[  266.748509][ T9868]  blkdev_ioctl+0x5a5/0x6d0
[  266.748529][ T9868]  ? __pfx_blkdev_ioctl+0x10/0x10
[  266.748546][ T9868]  ? __fget_files+0x2a/0x420
[  266.748569][ T9868]  ? bpf_lsm_file_ioctl+0x9/0x20
[  266.748593][ T9868]  ? __pfx_blkdev_ioctl+0x10/0x10
[  266.748611][ T9868]  __se_sys_ioctl+0xfc/0x170
[  266.748638][ T9868]  do_syscall_64+0xfa/0x3b0
[  266.748654][ T9868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.748671][ T9868]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  266.748688][ T9868]  ? clear_bhb_loop+0x60/0xb0
[  266.748707][ T9868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.748724][ T9868] RIP: 0033:0x7f614478eb69
[  266.748752][ T9868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.748767][ T9868] RSP: 002b:00007f61425f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  266.748786][ T9868] RAX: ffffffffffffffda RBX: 00007f61449b5fa0 RCX: 00007f614478eb69
[  266.748799][ T9868] RDX: 000000000000000b RSI: 0000000000004c06 RDI: 0000000000000006
[  266.748810][ T9868] RBP: 00007f6144811df1 R08: 0000000000000000 R09: 0000000000000000
[  266.748821][ T9868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.748833][ T9868] R13: 0000000000000000 R14: 00007f61449b5fa0 R15: 00007fffcada95b8
[  266.748853][ T9868]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  267.346860][ T9879] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  267.365922][ T9879] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  267.521167][    C0] blk_print_req_error: 26 callbacks suppressed
[  267.521190][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  267.556499][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.565844][    C0] buffer_io_error: 48 callbacks suppressed
[  267.565864][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  267.579745][    C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.588933][    C0] Buffer I/O error on dev loop7, logical block 1, async page read
[  267.596898][    C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.606406][    C0] Buffer I/O error on dev loop7, logical block 2, async page read
[  267.614346][    C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.623534][    C0] Buffer I/O error on dev loop7, logical block 3, async page read
[  267.631484][    C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.640822][    C0] Buffer I/O error on dev loop7, logical block 4, async page read
[  267.648758][    C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.658181][    C0] Buffer I/O error on dev loop7, logical block 5, async page read
[  267.666217][    C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.675508][    C0] Buffer I/O error on dev loop7, logical block 6, async page read
[  267.685963][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.695282][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  267.703347][    C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  267.712525][    C0] Buffer I/O error on dev loop7, logical block 1, async page read
[  267.720624][    C0] Buffer I/O error on dev loop7, logical block 2, async page read
[  268.196633][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.267307][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.295536][ T5848] usb 6-1: USB disconnect, device number 2
[  268.324114][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.400029][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.522856][   T13] bridge_slave_1: left allmulticast mode
[  268.528749][   T13] bridge_slave_1: left promiscuous mode
[  268.535497][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.545099][   T13] bridge_slave_0: left allmulticast mode
[  268.551284][   T13] bridge_slave_0: left promiscuous mode
[  268.557071][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.687931][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.701646][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.711634][   T13] bond0 (unregistering): Released all slaves
[  268.939456][   T13] hsr_slave_0: left promiscuous mode
[  268.946095][   T13] hsr_slave_1: left promiscuous mode
[  268.954719][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.965183][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.974598][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.983374][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.996671][   T13] veth1_macvtap: left promiscuous mode
[  269.002434][   T13] veth0_macvtap: left promiscuous mode
[  269.008059][   T13] veth1_vlan: left promiscuous mode
[  269.015090][   T13] veth0_vlan: left promiscuous mode
[  269.275496][   T13] team0 (unregistering): Port device team_slave_1 removed
[  269.301374][   T13] team0 (unregistering): Port device team_slave_0 removed
[  269.686076][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.752513][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.833946][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.878839][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.998623][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.057777][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.119364][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.190661][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.288376][   T13] bridge_slave_1: left allmulticast mode
[  270.295920][   T13] bridge_slave_1: left promiscuous mode
[  270.303155][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.312514][   T13] bridge_slave_0: left allmulticast mode
[  270.318385][   T13] bridge_slave_0: left promiscuous mode
[  270.327833][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.337810][   T13] bridge_slave_1: left allmulticast mode
[  270.344695][   T13] bridge_slave_1: left promiscuous mode
[  270.350458][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.365927][   T13] bridge_slave_0: left allmulticast mode
[  270.371809][   T13] bridge_slave_0: left promiscuous mode
[  270.377540][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.530358][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.540818][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.552770][   T13] bond0 (unregistering): Released all slaves
[  270.656373][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.666530][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.676357][   T13] bond0 (unregistering): Released all slaves
[  271.035430][   T13] hsr_slave_0: left promiscuous mode
[  271.045319][   T13] hsr_slave_1: left promiscuous mode
[  271.056112][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.064872][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.074053][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.082830][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.097092][   T13] hsr_slave_0: left promiscuous mode
[  271.104406][   T13] hsr_slave_1: left promiscuous mode
[  271.110432][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.118029][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.126225][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.135311][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.152001][   T13] veth1_macvtap: left promiscuous mode
[  271.157588][   T13] veth0_macvtap: left promiscuous mode
[  271.167583][   T13] veth1_vlan: left promiscuous mode
[  271.173894][   T13] veth0_vlan: left promiscuous mode
[  271.180741][   T13] veth1_macvtap: left promiscuous mode
[  271.187625][   T13] veth0_macvtap: left promiscuous mode
[  271.193671][   T13] veth1_vlan: left promiscuous mode
[  271.198990][   T13] veth0_vlan: left promiscuous mode
[  271.398523][   T13] team0 (unregistering): Port device team_slave_1 removed
[  271.424968][   T13] team0 (unregistering): Port device team_slave_0 removed
[  271.642020][   T13] team0 (unregistering): Port device team_slave_1 removed
[  271.668774][   T13] team0 (unregistering): Port device team_slave_0 removed