last executing test programs:

18.513861936s ago: executing program 0 (id=112):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioprio_get$pid(0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400000000006eec00be00443c0100000000000000000000ffff7f000001ff02000000000000000000000000000104"], 0x7a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00006a2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000784000/0x2000)=nil)

18.297573599s ago: executing program 0 (id=114):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008020}, 0x40010) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r4=>0x0}) (rerun: 64)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000890}, 0x4004041) (async, rerun: 64)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) (async, rerun: 64)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async)
recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x4, 0x4)

18.233589183s ago: executing program 0 (id=115):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r1, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
flock(0xffffffffffffffff, 0xa)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2e9e00, 0x0)
fcntl$setflags(r4, 0x2, 0x0)
write(r4, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb)

18.134695459s ago: executing program 0 (id=116):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa)
r2 = fanotify_init(0xf00, 0x0)
fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r3 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x9, 0x4)
close(r3)

17.981559977s ago: executing program 0 (id=117):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a01010000000000000000010000042c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000028000000060a0104000000000008000b40000000020900010073797a3000000000140000001100010000000000000000000000000a00000000000000"], 0x90}}, 0x0) (async)
creat(&(0x7f0000001380)='./file0\x00', 0x0) (async)
r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
writev(r2, &(0x7f0000000540)=[{&(0x7f0000000100)="95ee989672657ed96a502c7fde52c660abf889e6831208a2c5ba5fbf8502b8b8d38fdc3c7ac9e3fd6157469fd7c887aadf60b5c2302cfbd9b8d2d16abb9a778c8716beac9a3f1a4c4d0be62f8d3724924c24c3052abdd1bcadcc0250392c85a1e2f083fcccf3a1d1ecd6b7972e1ff491387504e3ceb1fcead1", 0x79}, {&(0x7f0000000180)="2d0076c8b1818c870aa57b17b39951d975f15a97d3ba148fc990eedbb6e5d04531a6fa05c235508a4e20afa4bf1cd0a598582a99299f43830206b17172a0cf0cd4e64f49a33759706bf179d19472311fd0fc4ae4408ee4e3baa3f0e9d2f4d80eae4f072d371d1a13a33a8a789cc05ffcba2e651a386234cd99020f4a1bbfb9dd0c8a1692bf099fb0ec871302d01b605ae75b63da4f4454d0a03feb32dde47b440df50e231fdef7966194da47cfaa676d81d0fd5ee67c972f87c178ad150c00870660031c6142e3605dcade53b350569c2ea1fd264ff176ec246d904d101747b9ca4bb3ebb284c62057f08f49ddb61caaa2f2", 0xf2}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000280)="af7f3f86b1d6aca7ace75a0ad23efbdc8a6f38b3c4fd42ae183fec44e438f4426ce59f0b1f96791722e92013a7ff765bef2835f14eb8da0da71f871ac748c5af92c3fbdf95a7bc0a8049efe364a327e97da597e75cc1c825158fedbe6df573fee095644f557f5f5bb8ba072df59e189dc70bae3d668c013d98309e5644cb25e67d45ff55ca5593134878fb3fa60e2ade09e7a6468c39d209b129df230eb009bdb8ad5fc4f0f79fa038b84a6ce658c7cc75c97b63dfe377d14d8f25f22efcedac952bf2f1897cd6a4676227968866164bf2ea2b90", 0xd4}, {&(0x7f0000000380)="d2d5232d46be14c5892e16bd40b2be2277fe646f7e141a8a605a38e6304b67709e6170aafc9b8d93a88d432ef2046bd74dfa0b3ef99836aff3f62f9e7561", 0x3e}, {&(0x7f0000000480)="28cb62c3c2ee7daf0fd699d1eefaa0f56002d55caa8996161187223f044700dda5e2feaa5e472e4fb3196894316317d8e6713b440b48b8588610d153d6b530eaac03b95a05d15b9b", 0x48}, {&(0x7f0000000500)}], 0x7)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) (async)
keyctl$clear(0x7, r1) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)

17.867422017s ago: executing program 0 (id=119):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x900)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x100, 0x10f)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={0x0, 0x5, 0xfffffefb})
mkdir(&(0x7f0000000180)='./file0\x00', 0x8e)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="b0000000000000f7ffffffa94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100000000000000040000e5ff"], 0x24, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, 0x0, &(0x7f00000016c0))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000180)=0xc)
lchown(&(0x7f0000000000)='./cgroup\x00', r0, r8)

4.864948216s ago: executing program 3 (id=155):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="03dd"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0xfffffffffffffd77, &(0x7f0000000000)="00012c61020000001c11447298a9538f168516ff037f291e463685b0139216171afd0eafbd9c28d93b8b8fbdd59f3d473eb9d29d3de65dea17")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0x6, 0x52, {0x52, 0xd, "d0f9a58e45b9ce7b5408c069c4915817300785146e91c3d1547de3b5202f4ed59f5487b150e8301750f99224047f37ed91813f303184b757f5d339b4df5d73923b31cce7139ac5abbb8a738cd203b4fe"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x40, 0xa, 0xb5, "0d2622075d073b9974280d4d3ffe4669a2296d24aeaa2b21bdc78eab430133ccd699a1b4c637f0d4dbf87d6b763bbd3a4970081af5df1d68a63df06d66dc397c09aa1d013e7ac174871b4bfa240baa4d5eadaf629c72afa6a956b5f4fd549387feb07765aa2fcbc8169e3bd2361daeaa41aaaa6139ecc1604a55fbf4a30b608ffdd30b070ec2e9803bd9115b8c873e3af05225454fcf34ef0c33578d65ab1af371212308e04f0f54d9be118725246d8f5ff8914624"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x70, 0x3, 0x1, 0x9, 0xc, 0x7, 0xfc3, 0xbb, 0x6, 0x7, 0x0, 0x360a}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x3ff}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x84d}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}})

3.521564533s ago: executing program 1 (id=163):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064d1, &(0x7f0000000380)={0x6})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
close(r4)
writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r3, 0x0, &(0x7f000047b000/0x4000)=nil, 0x4000, 0x1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, <r6=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r6, 0x0, 0x2fff, 0x1, &(0x7f0000000240)='\x00', 0x4})
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, 0x0)
dup(0xffffffffffffffff)
r8 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)

3.426111158s ago: executing program 1 (id=164):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00')
read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020)
syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)

3.152292275s ago: executing program 3 (id=165):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x7, 0x6, 0xa, 0x14, 0x2, 0x5, 0x7, 0x1, 0x9, 0x3, 0x0, 0xa, 0x2a}, 0xe)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={<r2=>0x0, 0xf9d8}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={r2, 0x44, "4106ac70eb579fae6df18b2846421fbaf487656ea7abd151214ce148bb7ae77c59e931d336ed0a0f948da03a63d077fd6be5dc14fc9a8f746aa0db6f16cd00218ea633bf"}, &(0x7f0000000140)=0x4c) (async)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)={<r3=>r2, 0x44, "4106ac70eb579fae6df18b2846421fbaf487656ea7abd151214ce148bb7ae77c59e931d336ed0a0f948da03a63d077fd6be5dc14fc9a8f746aa0db6f16cd00218ea633bf"}, &(0x7f0000000140)=0x4c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @remote}}, 0x81, 0x6358}, 0x90)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={<r4=>0x0}, &(0x7f0000000280)=0x8)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000002c0)={0x7, 0x8401, 0x6, 0x4, <r6=>r4}, &(0x7f0000000300)=0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r8=>0x0, 0x2f, 0x5, 0x6, 0x200, 0x0, @loopback, @empty, 0x700, 0x7800, 0x0, 0xb}})
sendmsg$nl_route_sched_retired(r7, &(0x7f0000001300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40020084}, 0xc, &(0x7f00000012c0)={&(0x7f0000000440)=@deltclass={0xe78, 0x29, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x9, 0xffe3}, {0xa, 0x8}, {0x5, 0xe}}, [@c_atm={{0x8}, {0x9c, 0x2, [@TCA_ATM_HDR={0x22, 0x3, "c730154dbffb6d82b0d2c28020c974d2530dd27e9d93d40294022d35600c"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x9, 0x3, "4ca0987b40"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x2}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xfff1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xc}}, @TCA_ATM_HDR={0x30, 0x3, "9caeb01cd3290b5060c9203be696897b681236a61dc6ad3c9b93b2fe55d64444546a23df1cef35973d983ffa"}]}}, @c_cbq={{0x8}, {0x5c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x29, 0x2, 0xb, 0x6, 0x9, 0x6, 0x7bf3, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x1, 0x3, 0x6c6, 0x5, 0x7e0}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff2, 0xfff3}, 0x10, 0x3}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x2, 0x2, 0x8, 0x6, 0x2}}, @TCA_CBQ_RATE={0x10, 0x5, {0x2, 0x2, 0x844b, 0x6, 0x1, 0xffff4391}}]}}, @c_atm={{0x8}, {0x70, 0x2, [@TCA_ATM_HDR={0x1f, 0x3, "b7d318ba19b153a588cc49b8c202222b44eaa894449cee3c630164"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x7, 0x3, 'F\n9'}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_HDR={0x19, 0x3, "9bafb6afdc09208e0059fdcb88de84e6ceca553b67"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0xfff2}}]}}, @c_atm={{0x8}, {0x30, 0x2, [@TCA_ATM_HDR={0x2c, 0x3, "cd2055d94997b480d729cf4856c2c75e4259176a50774d5fde6d0af8fef01e3583845ba74c299a7b"}]}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0xfff3}, 0x6, 0x80000000}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x6, 0x77, 0x8, 0x3, 0x0, 0x7fffffff, 0x4, 0xaac, 0x0, 0x401, 0x1, 0x6, 0x4, 0x9, 0x80000000, 0x5, 0x6, 0x3, 0x7, 0x41, 0x7, 0x0, 0x9, 0xc3, 0x1000, 0x7, 0x5, 0x2, 0x458, 0x7fffffff, 0x7, 0x3, 0x6, 0x8, 0x6, 0x3, 0x5, 0xdbbf, 0x9, 0xfffffffc, 0x6, 0x401, 0x262, 0x7, 0x3, 0x3, 0x9, 0x1, 0x58, 0x7fffffff, 0x7, 0x8f, 0x9, 0x4, 0x0, 0x3, 0x80, 0x2, 0x3, 0xfffffc01, 0xd, 0x2, 0x0, 0x1000, 0x8, 0x1f5, 0x1, 0x9, 0x4, 0xffffffff, 0x5097, 0x0, 0x6, 0x7fffffff, 0x80000000, 0x1, 0x80, 0xf, 0x6, 0x4d, 0x2, 0x1, 0x0, 0x8c, 0x4, 0x2, 0x7, 0x3, 0x8001, 0x1, 0x5, 0x0, 0x6, 0x0, 0x3, 0x4, 0x1, 0x2, 0xf, 0x9, 0x5e, 0x80000000, 0x8, 0x9, 0x3, 0x9, 0xd, 0x4, 0x8, 0x5cfe, 0x7ff, 0x400, 0x6, 0x40, 0x5, 0x7f, 0x9300, 0x9, 0xfa, 0x2, 0x6, 0x0, 0x7, 0x5, 0x644, 0x6, 0x2, 0x9, 0xfffffffb, 0x7fff, 0x2, 0x8001, 0x1, 0x10000, 0x80000000, 0x4, 0x3, 0x6, 0x3, 0x3, 0x8, 0x0, 0x2, 0x4, 0x6, 0x9, 0x7fffffff, 0x1, 0x380000, 0x5, 0x0, 0x5, 0x6196, 0x3, 0x4, 0x0, 0xfffffffd, 0x5, 0xa, 0x6, 0x5, 0xfffffffc, 0x1, 0x9, 0x44, 0x8001, 0xffffffff, 0x6, 0x9129, 0x35cb, 0x8, 0x8000, 0x2, 0x100, 0xb5, 0x3, 0x3ff, 0x3, 0x3, 0x1, 0x8, 0x5, 0x7, 0x8, 0x7fffffff, 0x2, 0x9, 0x401, 0x4, 0x80, 0x8, 0x6, 0x5, 0xfffffe01, 0x5f25, 0x9, 0x5, 0x300000, 0x1400, 0x3, 0xa7d7, 0x7, 0x8, 0x8, 0x8, 0x4, 0xff, 0x7, 0x8851, 0x5, 0x401, 0x2, 0x2, 0x8, 0x7, 0x80000001, 0x4, 0x0, 0x7, 0xa, 0x5, 0x9, 0xd, 0x2, 0xd, 0x400, 0x3, 0x4, 0x2, 0x100400, 0x1, 0x5, 0x80, 0xb1d, 0xfffffff7, 0x0, 0xc, 0x235adda4, 0x401, 0x4, 0x1, 0x7, 0x1, 0x6, 0x122c, 0x1, 0x2, 0x5, 0x6, 0x24, 0x9, 0x2, 0x2, 0x0, 0x9]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x8, 0xb9, 0x1, 0x5, 0x80000001}}]}}, @c_cbq={{0x8}, {0x864, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x1d, 0xd}, 0x1, 0x9}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9d7b, 0x4, 0x9, 0x3, 0x40, 0x10001, 0x6, 0x10001, 0x9, 0xb9e, 0xfffffc01, 0x80000000, 0x61, 0x6, 0xc9, 0x6, 0x5, 0x0, 0x6, 0x7fff, 0x5, 0x3ff, 0x80000000, 0x8, 0x10000, 0x2, 0x4, 0xf5d, 0xfffffffe, 0x80000000, 0x0, 0x400, 0x9, 0xfffffced, 0xfffffffa, 0x1e1, 0x9, 0xfffffffd, 0x7f, 0x1, 0x8, 0x80000000, 0x7, 0xc, 0x0, 0x750, 0x9, 0x10, 0x6, 0x7, 0xfff, 0x61ca, 0x6, 0x0, 0x4, 0x5, 0xffffff2d, 0x776, 0x8, 0x100, 0x6, 0x0, 0x4, 0x5, 0x3, 0x1, 0x9, 0x280000, 0xf, 0x800, 0x6, 0x3c0, 0xe213, 0x7, 0x4, 0x7f, 0x9, 0x1, 0x3, 0xc047, 0x0, 0x3, 0x7, 0x1, 0x6cf, 0x1ff, 0x8, 0x8, 0x80, 0x9, 0x28c9, 0x8, 0x0, 0x7, 0x7, 0x100, 0x40000000, 0x200, 0x5, 0x5, 0x305, 0x3, 0x4, 0x101, 0x7fff, 0xba05, 0x7, 0xffffffff, 0xbb4, 0x9, 0xd07f, 0x6cf9, 0x7fffffff, 0x4, 0x2, 0x0, 0x5, 0xe50, 0x0, 0x7b, 0xfff, 0x7, 0xb93, 0x0, 0x6, 0x4, 0x1, 0xfffffffe, 0xffffffff, 0x7, 0xfffffffa, 0x4a, 0x4, 0xffffffff, 0x88e6, 0x720, 0xba3, 0x2, 0x5, 0xa, 0x1, 0x7fff, 0x8d6, 0x8, 0x0, 0x100, 0xb, 0x3, 0x7, 0x4ed, 0xde, 0x9, 0xfffffffd, 0x7, 0x2, 0x7, 0x40000, 0xffffffa1, 0x3, 0x9, 0x4, 0x7c, 0x2, 0x4a5b, 0x1, 0x4, 0x2, 0x5, 0x10001, 0x2a, 0x7b, 0xad, 0x10, 0x4, 0x19, 0x2, 0x7fffffff, 0x7, 0x5894, 0x0, 0x5f, 0x1000, 0xed000000, 0xb5400000, 0x3, 0x9, 0x1200000, 0x6, 0x4de, 0x6, 0x4, 0x2, 0x9, 0xc, 0x6, 0x6, 0xc6, 0x7, 0x9, 0xa2ef, 0x40, 0xf, 0x6, 0x5, 0x1, 0x9, 0xffffffff, 0x8, 0xfffffffd, 0x2, 0x7e5, 0x5, 0x6, 0x9464, 0xfffffe87, 0x16a, 0x8, 0x6, 0x7, 0xea, 0x1, 0x4, 0x7, 0x38c10921, 0x6, 0xd, 0x10, 0x5, 0x3, 0x6, 0x4, 0x5, 0x7, 0x4, 0x3, 0x6, 0x3, 0xf, 0x3, 0x3, 0x400, 0x3, 0x80000000, 0x5, 0x7, 0x7, 0x719a0342, 0x4, 0xffffff2b, 0xd, 0x9, 0x2d03, 0x4, 0x1, 0xc76, 0x8]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7, 0x800, 0x7ff, 0xfffffffe, 0xffff0001, 0xc, 0x1ff, 0x3, 0x8001, 0x10001, 0x3, 0x6, 0xa, 0xfb5, 0x3, 0x3, 0x2, 0x4, 0x9, 0x8, 0x101, 0x8, 0x9, 0x8, 0x3, 0x8, 0x61d, 0x6, 0x8, 0xfffffffe, 0x1, 0x7, 0x10000, 0x5, 0x6, 0x3f9c0000, 0x8, 0x94840, 0x4e81, 0x0, 0x1, 0x8, 0x1, 0x3, 0x8, 0xfffffff7, 0x6, 0x9, 0x1ff, 0x8, 0x3, 0xa, 0x9b87, 0x8, 0x28e, 0x7, 0xffffff01, 0x1, 0x8, 0x800, 0x80000001, 0x5037, 0xfe1, 0x98c, 0x4, 0xfffffff2, 0xffffffff, 0x5, 0xbe0, 0xa, 0x0, 0x1, 0xc, 0x0, 0x2, 0x302, 0x2, 0xffffff35, 0x4, 0x7, 0x866, 0x49c0, 0x2, 0xcf46, 0x3, 0x3, 0x1, 0x80000000, 0x1, 0x5, 0x1200, 0x9, 0x101, 0xd, 0x99ae, 0x4523, 0xfff, 0x101, 0x4, 0x6, 0x562c, 0x2, 0x6, 0x7e8, 0x1, 0x9, 0xb8a5, 0xc, 0x9, 0xae, 0x1cad, 0x5, 0x80000000, 0xfc7, 0x0, 0x5358, 0x2, 0x401, 0x40, 0x0, 0x2, 0x4, 0xff, 0x7, 0x10001, 0x0, 0x1ea, 0x8f, 0x400, 0x7f, 0x2, 0x6, 0x6, 0x8001, 0x8, 0x10000, 0x6, 0x6, 0x80, 0x3, 0x4, 0x1, 0x7f, 0x3, 0x8065, 0x8001, 0x9, 0x7, 0x0, 0xfffffffb, 0xffffffff, 0x1, 0x4, 0x0, 0x7, 0x58, 0x1, 0x4, 0xf4e, 0xfff, 0x11a4, 0x0, 0x3fc, 0x7, 0xd1c, 0x8, 0x1, 0x6ca5, 0x5, 0x5, 0x80, 0x6, 0x1, 0x8, 0x3, 0x1, 0x3f, 0x3, 0x4, 0x22, 0x3faa0d5a, 0x1, 0x0, 0x1, 0x8, 0x3, 0x7, 0xfffffff7, 0x0, 0x8, 0x6, 0x41b8ba66, 0x5, 0x101, 0x81, 0x8, 0xff1, 0x947f, 0xfffff0bf, 0xf, 0xf, 0xb7, 0x1ff, 0x1000, 0x1f, 0x8, 0x0, 0x8, 0x8, 0x4511, 0x50000, 0x5, 0x0, 0x8, 0x0, 0x400, 0x0, 0x80, 0x7ff, 0x0, 0x9, 0x3f, 0x1, 0x4, 0x5, 0x200, 0x401, 0x2, 0x2, 0x7, 0x1, 0xf, 0x9, 0x8, 0x6, 0x8, 0xbcee, 0xbb71, 0x9, 0x7fff, 0x9, 0x1, 0x7, 0x183, 0x3, 0x0, 0x0, 0x80000000, 0x5, 0x1, 0x6, 0x2, 0xfde, 0x7, 0x8, 0x4]}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x2, 0x6, 0x4, 0x1, 0xf8cc071}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x2, 0x6, 0xc, 0x4}}, @TCA_CBQ_RATE={0x10, 0x5, {0x10, 0x1, 0xc, 0x3ff, 0x1, 0x3aabc66c}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x32, 0x2, 0x9, 0x80, 0xb, 0x10, 0x0, 0x3ff}}]}}]}, 0xe78}, 0x1, 0x0, 0x0, 0x100}, 0x8800)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001340)={'syz0\x00', {0x2, 0x3, 0xfff6}, 0x2a, [0x9, 0x1, 0x80000000, 0x1d9, 0x401, 0x5, 0x2, 0x10, 0x7, 0x839b, 0x4, 0x6, 0x1, 0x8, 0x4, 0x4, 0x1, 0x800, 0xda, 0x10000, 0x6, 0x4, 0x0, 0x6, 0x251b, 0x7, 0x2, 0x7, 0x6, 0x8000, 0x1, 0x80000001, 0x6, 0xc8f, 0x8, 0x9, 0x1, 0x72, 0x800, 0x4, 0x7, 0x80000001, 0x80000000, 0xd52, 0x5, 0x1, 0x1, 0xfffffffd, 0x6, 0x5, 0x6, 0x3860fd9f, 0x3, 0x2, 0x7ff, 0x10001, 0x3, 0x4, 0x7, 0xb1, 0x8, 0x5, 0x3, 0x5], [0x8000, 0x4, 0x3, 0x100, 0x7, 0x5, 0x1, 0x5582eda3, 0x3, 0x81, 0x86, 0x999d, 0x7a63, 0x4a9, 0xa61, 0x10000, 0x2, 0x8f80, 0x5, 0x4, 0x0, 0x3, 0x3, 0xc4, 0x7, 0x7, 0xc9fe, 0x7, 0x80000001, 0x7a8d, 0x7fff, 0x9, 0xb, 0x2, 0x7, 0x5, 0x4, 0x3ff, 0x8, 0x3, 0x7fff, 0x598, 0x3, 0x4, 0x6a82, 0x1, 0x3ff, 0x8, 0x9, 0x3, 0x80000001, 0x7fff, 0x8, 0x20, 0x1, 0x40, 0x10001, 0x6, 0x2, 0x0, 0x1, 0xb, 0x40, 0x59c0], [0x41fb, 0x4, 0xf8, 0x40, 0x2, 0x0, 0x6, 0xe85, 0xfffffff5, 0x8, 0xffffff93, 0x6, 0xa2, 0x400, 0x5, 0xfffffffa, 0x2, 0x4, 0x1, 0x0, 0x6, 0x0, 0xa00000, 0x76, 0x8, 0x5, 0x7f, 0x2, 0xffff, 0x8, 0x1, 0x0, 0x6, 0x2, 0x100, 0x6, 0x7ff, 0x3, 0x400, 0x78c9, 0x90, 0x8, 0x3, 0x2, 0x6, 0x6, 0x7ad3, 0x2, 0x4, 0xffffffff, 0x6, 0x571c895a, 0x1000, 0x4, 0x59, 0x9, 0x4, 0x7f, 0x8, 0x291f, 0x10000, 0xd, 0x3aa, 0xffffffff], [0x0, 0x6, 0x7, 0x5, 0x0, 0x800, 0x3, 0x6, 0x89, 0x0, 0x10000000, 0x2, 0x7309, 0x5, 0x1ff, 0x10001, 0x44, 0x8, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x3, 0x200, 0x7fff, 0x6, 0x1, 0x1, 0x3, 0x4, 0x6, 0x8, 0x10001, 0x8, 0x2, 0x0, 0x1, 0xe, 0x6, 0x7, 0x6, 0x6, 0x4, 0x8, 0x7ff, 0x0, 0xe, 0x4, 0xfffffffc, 0x10000, 0x2, 0x8, 0x7fff, 0x8, 0x32b, 0x400, 0xa, 0x7, 0x700000, 0x68e6, 0x0, 0x1]}, 0x45c) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001340)={'syz0\x00', {0x2, 0x3, 0xfff6}, 0x2a, [0x9, 0x1, 0x80000000, 0x1d9, 0x401, 0x5, 0x2, 0x10, 0x7, 0x839b, 0x4, 0x6, 0x1, 0x8, 0x4, 0x4, 0x1, 0x800, 0xda, 0x10000, 0x6, 0x4, 0x0, 0x6, 0x251b, 0x7, 0x2, 0x7, 0x6, 0x8000, 0x1, 0x80000001, 0x6, 0xc8f, 0x8, 0x9, 0x1, 0x72, 0x800, 0x4, 0x7, 0x80000001, 0x80000000, 0xd52, 0x5, 0x1, 0x1, 0xfffffffd, 0x6, 0x5, 0x6, 0x3860fd9f, 0x3, 0x2, 0x7ff, 0x10001, 0x3, 0x4, 0x7, 0xb1, 0x8, 0x5, 0x3, 0x5], [0x8000, 0x4, 0x3, 0x100, 0x7, 0x5, 0x1, 0x5582eda3, 0x3, 0x81, 0x86, 0x999d, 0x7a63, 0x4a9, 0xa61, 0x10000, 0x2, 0x8f80, 0x5, 0x4, 0x0, 0x3, 0x3, 0xc4, 0x7, 0x7, 0xc9fe, 0x7, 0x80000001, 0x7a8d, 0x7fff, 0x9, 0xb, 0x2, 0x7, 0x5, 0x4, 0x3ff, 0x8, 0x3, 0x7fff, 0x598, 0x3, 0x4, 0x6a82, 0x1, 0x3ff, 0x8, 0x9, 0x3, 0x80000001, 0x7fff, 0x8, 0x20, 0x1, 0x40, 0x10001, 0x6, 0x2, 0x0, 0x1, 0xb, 0x40, 0x59c0], [0x41fb, 0x4, 0xf8, 0x40, 0x2, 0x0, 0x6, 0xe85, 0xfffffff5, 0x8, 0xffffff93, 0x6, 0xa2, 0x400, 0x5, 0xfffffffa, 0x2, 0x4, 0x1, 0x0, 0x6, 0x0, 0xa00000, 0x76, 0x8, 0x5, 0x7f, 0x2, 0xffff, 0x8, 0x1, 0x0, 0x6, 0x2, 0x100, 0x6, 0x7ff, 0x3, 0x400, 0x78c9, 0x90, 0x8, 0x3, 0x2, 0x6, 0x6, 0x7ad3, 0x2, 0x4, 0xffffffff, 0x6, 0x571c895a, 0x1000, 0x4, 0x59, 0x9, 0x4, 0x7f, 0x8, 0x291f, 0x10000, 0xd, 0x3aa, 0xffffffff], [0x0, 0x6, 0x7, 0x5, 0x0, 0x800, 0x3, 0x6, 0x89, 0x0, 0x10000000, 0x2, 0x7309, 0x5, 0x1ff, 0x10001, 0x44, 0x8, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x3, 0x200, 0x7fff, 0x6, 0x1, 0x1, 0x3, 0x4, 0x6, 0x8, 0x10001, 0x8, 0x2, 0x0, 0x1, 0xe, 0x6, 0x7, 0x6, 0x6, 0x4, 0x8, 0x7ff, 0x0, 0xe, 0x4, 0xfffffffc, 0x10000, 0x2, 0x8, 0x7fff, 0x8, 0x32b, 0x400, 0xa, 0x7, 0x700000, 0x68e6, 0x0, 0x1]}, 0x45c)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000017c0))
r9 = msgget(0x3, 0x200)
r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000001840))
lstat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0))
openat2$dir(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x218000, 0x40, 0x8}, 0x18) (async)
r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x218000, 0x40, 0x8}, 0x18)
faccessat(r11, &(0x7f00000019c0)='./file0\x00', 0x50)
r12 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
read$alg(r12, &(0x7f0000001a00)=""/82, 0x52)
msgctl$IPC_RMID(r9, 0x0) (async)
msgctl$IPC_RMID(r9, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001a80)={r6, 0x100, 0xd, 0x8b, 0x3, 0x9206}, &(0x7f0000001ac0)=0x14) (async)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001a80)={<r13=>r6, 0x100, 0xd, 0x8b, 0x3, 0x9206}, &(0x7f0000001ac0)=0x14)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000001b00)={r6, 0x6}, &(0x7f0000001b40)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001b80)={r4, 0xc677, 0x6, 0x4, 0x40, 0x9, 0x4, 0x7, {r13, @in={{0x2, 0x4e22, @local}}, 0x979, 0x7, 0x4, 0x2, 0x5}}, &(0x7f0000001c40)=0xb0)
r14 = open_tree(r11, &(0x7f0000001c80)='./file0\x00', 0x1800)
setsockopt$MRT6_INIT(r14, 0x29, 0xc8, &(0x7f0000001cc0), 0x4) (async)
setsockopt$MRT6_INIT(r14, 0x29, 0xc8, &(0x7f0000001cc0), 0x4)
setsockopt$MRT_TABLE(r14, 0x0, 0xcf, &(0x7f0000001d00)=0xfd, 0x4) (async)
setsockopt$MRT_TABLE(r14, 0x0, 0xcf, &(0x7f0000001d00)=0xfd, 0x4)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000001d40)={[0x5, 0x5, 0x392, 0x6, 0xfffffffffffffffc, 0xb, 0x6, 0x7ff, 0x0, 0x8, 0xa3, 0x3, 0x9, 0x1, 0x3, 0x1], 0x1111d00c, 0x802})

2.993617852s ago: executing program 3 (id=166):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000900)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/212, 0xfe65, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r1=>0xee01, 0xffffffffffffffff}}, './cgroup\x00'})
quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000080)=@nullb, r1, 0x0)

2.958200119s ago: executing program 3 (id=167):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33)
sendfile(r0, r0, 0x0, 0x7ffff000)

2.569252898s ago: executing program 32 (id=119):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x900)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x100, 0x10f)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={0x0, 0x5, 0xfffffefb})
mkdir(&(0x7f0000000180)='./file0\x00', 0x8e)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="b0000000000000f7ffffffa94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100000000000000040000e5ff"], 0x24, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1})
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1})
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, 0x0, &(0x7f00000016c0))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000180)=0xc)
lchown(&(0x7f0000000000)='./cgroup\x00', r0, r8)

2.564197705s ago: executing program 3 (id=169):
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000))
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000340), 0x1, 0x2)
ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000380)={0xf08e, "6d1fefd38ba962e1e7cbb24efc1cf15d1ce11083507f41dc0d8b38788691dd80", 0x48ba8c8cd3d3bf42})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000)
prctl$PR_SET_VMA(0x53564d5f, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x0, 0x2f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1ffffb}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000440)=""/257, 0x101}, {&(0x7f0000003a80)=""/4101, 0x1005}, {&(0x7f0000000580)=""/226, 0xe2}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x10000ff}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/139, 0x8b}, {0x0}, {&(0x7f0000001a00)=""/4116, 0x1014}, {&(0x7f0000006080)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/98, 0x62}], 0x5}, 0x4}, {{0x0, 0x0, 0x0}, 0x20008}], 0x8, 0x206, 0x0)
r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8)
mremap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f000050e000/0x1000)=nil)
clock_gettime(0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
clock_gettime(0x0, &(0x7f0000000080)={<r9=>0x0, <r10=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000140)={{r7, r8+10000000}, {r9, r10+60000000}}, &(0x7f0000000280))
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

1.881420025s ago: executing program 1 (id=171):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000002c0)={<r2=>0x0, 0xa5, "5aaa9073b16f2dbdb73856e474f98b231fc0d0ef0d26967368003ab9672b6b87622f9f24c52136d76e4bc5fe4476f77ca039ad9906e04d49d029ed36ba58502a8366f23955e6030a7bb5cd61ad82b53d5f7572952c86fe956631707b463f19313efa4ecf7ca34ed5e06a2ac505eeb4a14259503aaf3517e1b4789ff5e9f3bbdb23cd169ab456b846330f450f0af2223d585d58a1ccd21f03643096fe5ec96e62fb786111ac"}, &(0x7f0000000140)=0xad)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x0, &(0x7f00000000c0)}, &(0x7f0000000380)=0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x9, 0x0, 0x0, 0xfffffffe})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
write(r7, &(0x7f0000000040)="cb", 0xfffffdef)
setsockopt$sock_int(r7, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000064d0100000000000500000000000000"])
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x2, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x40, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f0000000000)=0x3, 0x4)

1.867616078s ago: executing program 2 (id=172):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
r1 = syz_io_uring_complete(0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x1) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mremap(&(0x7f00006a2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004a6000/0x2000)=nil) (async)
r2 = socket$key(0xf, 0x3, 0x2)
dup(r2)

1.617054768s ago: executing program 2 (id=173):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
sendfile(r0, r0, &(0x7f0000000140)=0x6, 0x1) (async)
sendfile(r0, r0, &(0x7f0000000140)=0x6, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007105"])
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async)
bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f00000002c0)=""/57, 0x39}, {0x0}], 0x3, &(0x7f0000005240)=""/221, 0xdd}, 0x4}], 0x1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r6, 0xf5, "40c4db", "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"}}, 0x110)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b3cec98cbc9632e437fb01dc1a2142eefdab0f46ebdebbc7828b33acfa4791ddda14d97a523fc973", 0x28}], 0x1}, 0x40845) (async)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b3cec98cbc9632e437fb01dc1a2142eefdab0f46ebdebbc7828b33acfa4791ddda14d97a523fc973", 0x28}], 0x1}, 0x40845)

1.567972747s ago: executing program 3 (id=174):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616d00010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000030100c0"])
ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
close_range(r3, r3, 0x2)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)

1.248817781s ago: executing program 1 (id=175):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0)
preadv(r0, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000100)={0x9, 0x100, 0x4, {0xb, 0xffffffff, 0x7, 0xfff}})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008c18e29ab4459a565dba03dc5fe915d0c03c6c2d980ae28276336aaf777287d8829674178453876f663e027983a60cc6bc9254680b2b330aa6ec8a636fc81d4de20d1a6"], 0x40}, 0xc004)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000100))
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
write$binfmt_aout(r4, 0x0, 0xff2e)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x10, 0x4}, {0x2006, 0xe7a}}]}}, 0x11)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x40480e5}, 0x480c1)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)

1.001449302s ago: executing program 1 (id=176):
r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000a80)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, 0x0}])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf2501000000000000000b"], 0x28}, 0x1, 0x0, 0x0, 0x4000006}, 0x40)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r6)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x2, 0x1, 0xffff, 0x3, 0x1ff, 0x2d, 0x200005d7, {0x0, @in={{0x2, 0x4e22, @empty}}, 0x8, 0x80000000, 0x23, 0x800000d, 0x800000e}}, &(0x7f00000000c0)=0xb0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000100)=0x80000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f0000002dc0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000140)={@my=0x1})
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
sendmmsg$inet6(r7, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

683.980666ms ago: executing program 2 (id=177):
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179f42f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000000000003000000000000001000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0xffffffffffffffff)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0)

552.159672ms ago: executing program 2 (id=178):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f000092e000/0x4000)=nil, 0x4000, 0x3000002, 0x1010, r0, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

401.764972ms ago: executing program 2 (id=179):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

308.1375ms ago: executing program 2 (id=180):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket(0x2a, 0xa, 0xffffffff)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_rsp={{0x18, 0xfb, 0xa}, {0x1, 0x2, 0x7ff, 0x406, [0xfffb]}}}}, 0x17)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
syz_emit_vhci(0x0, 0xe)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xfffa, 0xffe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}]}, &(0x7f0000000540)=0x10)
r3 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r3, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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"])
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x0, 0x80000001, 0x349}, 0x10)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setreuid(0x0, 0xee00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r4, 0x2000)

0s ago: executing program 1 (id=181):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0809050c0c"], 0xb)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0809050c0c"], 0xb) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts.
[   71.353560][ T5820] cgroup: Unknown subsys name 'net'
[   71.489415][ T5820] cgroup: Unknown subsys name 'cpuset'
[   71.498413][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.162805][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.905382][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.915104][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.937251][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.952825][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.956158][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.960756][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.975716][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.983854][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.991820][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.996276][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.999317][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.007119][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.013407][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.020843][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.028197][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.035125][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.041793][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.048609][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.062268][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.073779][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.547714][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   77.597472][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   77.670736][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   77.741866][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   77.820739][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.829148][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.836914][ T5838] bridge_slave_0: entered allmulticast mode
[   77.844090][ T5838] bridge_slave_0: entered promiscuous mode
[   77.859464][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.866681][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.873781][ T5834] bridge_slave_0: entered allmulticast mode
[   77.880907][ T5834] bridge_slave_0: entered promiscuous mode
[   77.898447][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.905583][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.912937][ T5838] bridge_slave_1: entered allmulticast mode
[   77.920138][ T5838] bridge_slave_1: entered promiscuous mode
[   77.942921][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.950106][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.957728][ T5834] bridge_slave_1: entered allmulticast mode
[   77.964710][ T5834] bridge_slave_1: entered promiscuous mode
[   78.052891][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.062235][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.070804][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.078795][ T5841] bridge_slave_0: entered allmulticast mode
[   78.085864][ T5841] bridge_slave_0: entered promiscuous mode
[   78.095778][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.119309][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.141068][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.148353][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.155601][ T5841] bridge_slave_1: entered allmulticast mode
[   78.163018][ T5841] bridge_slave_1: entered promiscuous mode
[   78.184782][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.233445][ T5834] team0: Port device team_slave_0 added
[   78.262902][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.270433][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.277789][ T5829] bridge_slave_0: entered allmulticast mode
[   78.284758][ T5829] bridge_slave_0: entered promiscuous mode
[   78.293676][ T5834] team0: Port device team_slave_1 added
[   78.312965][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.325769][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.336775][ T5838] team0: Port device team_slave_0 added
[   78.342933][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.350570][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.358024][ T5829] bridge_slave_1: entered allmulticast mode
[   78.365038][ T5829] bridge_slave_1: entered promiscuous mode
[   78.409133][ T5838] team0: Port device team_slave_1 added
[   78.417129][ T5841] team0: Port device team_slave_0 added
[   78.435035][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.442425][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.468523][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.493637][ T5841] team0: Port device team_slave_1 added
[   78.518578][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.525515][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.552121][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.587524][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.599929][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.617508][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.624478][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.650715][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.663649][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.670859][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.696833][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.749175][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.758814][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.786236][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.821552][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.828798][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.854994][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.873824][ T5829] team0: Port device team_slave_0 added
[   78.882280][ T5829] team0: Port device team_slave_1 added
[   78.893270][ T5834] hsr_slave_0: entered promiscuous mode
[   78.899912][ T5834] hsr_slave_1: entered promiscuous mode
[   79.011264][ T5838] hsr_slave_0: entered promiscuous mode
[   79.017816][ T5838] hsr_slave_1: entered promiscuous mode
[   79.023869][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   79.029970][ T5838] Cannot create hsr debugfs directory
[   79.042253][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.049610][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.075651][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.093153][ T5841] hsr_slave_0: entered promiscuous mode
[   79.099546][ T5841] hsr_slave_1: entered promiscuous mode
[   79.105498][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   79.111304][ T5841] Cannot create hsr debugfs directory
[   79.136544][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.143485][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.170483][ T5842] Bluetooth: hci3: command tx timeout
[   79.176064][ T5840] Bluetooth: hci1: command tx timeout
[   79.176698][ T5833] Bluetooth: hci0: command tx timeout
[   79.181674][ T5840] Bluetooth: hci2: command tx timeout
[   79.193103][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.370990][ T5829] hsr_slave_0: entered promiscuous mode
[   79.377579][ T5829] hsr_slave_1: entered promiscuous mode
[   79.383578][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   79.389864][ T5829] Cannot create hsr debugfs directory
[   79.632104][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.660843][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.679072][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.689316][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.738705][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.754247][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.765107][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.784574][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.846957][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.871031][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.884301][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.915360][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.997297][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.007465][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.021479][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.039603][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.099029][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.120384][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.149218][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   80.174759][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.181990][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.204327][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   80.219598][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.226730][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.263186][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.270402][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.299587][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.306863][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.322243][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.359514][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   80.399975][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.421595][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.428720][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.472472][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.479656][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.577117][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.645045][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   80.679863][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.687038][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.726623][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.733760][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.877695][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.948702][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.019604][ T5841] veth0_vlan: entered promiscuous mode
[   81.065966][ T5834] veth0_vlan: entered promiscuous mode
[   81.083159][ T5834] veth1_vlan: entered promiscuous mode
[   81.098339][ T5841] veth1_vlan: entered promiscuous mode
[   81.129498][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.169717][ T5834] veth0_macvtap: entered promiscuous mode
[   81.193646][ T5834] veth1_macvtap: entered promiscuous mode
[   81.221757][ T5841] veth0_macvtap: entered promiscuous mode
[   81.231902][ T5842] Bluetooth: hci3: command tx timeout
[   81.231937][ T5833] Bluetooth: hci0: command tx timeout
[   81.239682][ T5842] Bluetooth: hci1: command tx timeout
[   81.247475][ T5841] veth1_macvtap: entered promiscuous mode
[   81.249011][ T5840] Bluetooth: hci2: command tx timeout
[   81.293383][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.308615][ T5838] veth0_vlan: entered promiscuous mode
[   81.321137][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.340963][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.352411][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.361184][   T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.371491][   T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.395550][ T5838] veth1_vlan: entered promiscuous mode
[   81.402824][   T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.412012][   T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.433926][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.463327][   T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.481864][   T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.491761][   T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.507262][   T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.589928][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.599386][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.635223][ T5829] veth0_vlan: entered promiscuous mode
[   81.672418][ T5838] veth0_macvtap: entered promiscuous mode
[   81.685201][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.698059][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.707660][ T5829] veth1_vlan: entered promiscuous mode
[   81.718983][ T5838] veth1_macvtap: entered promiscuous mode
[   81.750726][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.774466][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.792332][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.824700][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.843506][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.861481][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.865722][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.920714][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.937789][ T5829] veth0_macvtap: entered promiscuous mode
[   81.955684][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.972950][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.994985][ T5829] veth1_macvtap: entered promiscuous mode
[   82.016926][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.055186][ T5922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.111642][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.157434][ T5925] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[   82.164273][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.290906][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.314223][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.352165][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.366938][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.376483][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.388745][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.428885][ T5933] syzkaller1: entered promiscuous mode
[   82.434452][ T5933] syzkaller1: entered allmulticast mode
[   82.475395][ T5933] syz.2.5 uses obsolete (PF_INET,SOCK_PACKET)
[   82.489302][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.499579][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.507650][ T5933] syzkaller1: left promiscuous mode
[   82.520291][ T5933] syzkaller1: left allmulticast mode
[   82.627954][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.635795][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.774345][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.810056][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.171234][ T5957] overlay: filesystem on ./bus not supported as upperdir
[   83.307141][ T5842] Bluetooth: hci0: command tx timeout
[   83.310314][ T5833] Bluetooth: hci1: command tx timeout
[   83.312629][ T5842] Bluetooth: hci3: command tx timeout
[   83.323792][ T5840] Bluetooth: hci2: command tx timeout
[   83.356499][  T974] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   83.382983][ T5969] Zero length message leads to an empty skb
[   83.415812][ T5971] exFAT-fs (rnullb0): invalid boot record signature
[   83.437860][ T5971] exFAT-fs (rnullb0): failed to read boot sector
[   83.444266][ T5971] exFAT-fs (rnullb0): failed to recognize exfat type
[   83.508918][  T974] usb 1-1: device descriptor read/64, error -71
[   83.534571][ T5976] 9pnet_fd: p9_fd_create_unix (5976): problem connecting socket: ./file0: -111
[   83.544095][ T5867] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   83.563654][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.570682][ T5978] sp0: Synchronizing with TNC
[   83.577929][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.604793][ T5978] =======================================================
[   83.604793][ T5978] WARNING: The mand mount option has been deprecated and
[   83.604793][ T5978]          and is ignored by this kernel. Remove the mand
[   83.604793][ T5978]          option from the mount to silence this warning.
[   83.604793][ T5978] =======================================================
[   83.639700][    C0] vkms_vblank_simulate: vblank timer overrun
[   83.726118][ T5867] usb 3-1: Using ep0 maxpacket: 16
[   83.735508][ T5867] usb 3-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config
[   83.757420][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   83.772838][ T5867] usb 3-1: New USB device found, idVendor=0554, idProduct=00b0, bcdDevice= 0.00
[   83.784093][  T974] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   83.819464][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.840068][ T5867] usb 3-1: config 0 descriptor??
[   83.861993][ T5867] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   83.947600][  T974] usb 1-1: device descriptor read/64, error -71
[   83.991892][   T30] audit: type=1800 audit(1751573934.804:2): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.17" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[   84.066042][  T974] usb usb1-port1: attempt power cycle
[   84.408912][  T974] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.436712][  T974] usb 1-1: device descriptor read/8, error -71
[   84.688744][  T974] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   84.736465][  T974] usb 1-1: device descriptor read/8, error -71
[   84.784538][ T6011] 9pnet_fd: Insufficient options for proto=fd
[   84.846705][  T974] usb usb1-port1: unable to enumerate USB device
[   85.335994][ T5830] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.386416][ T5842] Bluetooth: hci2: command tx timeout
[   85.386454][ T5835] Bluetooth: hci3: command tx timeout
[   85.391886][ T5840] Bluetooth: hci1: command tx timeout
[   85.397630][ T5833] Bluetooth: hci0: command tx timeout
[   85.489685][ T5830] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[   85.499213][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.509662][ T5830] usb 4-1: config 0 descriptor??
[   85.520318][ T5830] gspca_main: cpia1-2.14.0 probing 0813:0001
[   85.827533][ T5830] gspca_cpia1: usb_control_msg 05, error -71
[   85.839642][ T5830] gspca_cpia1: usb_control_msg 01, error -71
[   85.845946][ T5830] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[   85.857481][ T5830] usb 4-1: USB disconnect, device number 2
[   86.135843][ T6022] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   86.309959][ T5936] usb 3-1: USB disconnect, device number 2
[   86.422799][ T6032] XFS (rnullb0): Invalid superblock magic number
[   86.517042][    T9] cfg80211: failed to load regulatory.db
[   86.537668][   T30] audit: type=1326 audit(1751573937.354:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7ff7a618e929 code=0x0
[   86.559166][    C0] vkms_vblank_simulate: vblank timer overrun
[   86.757270][  T974] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[   86.926092][  T974] usb 3-1: Invalid ep0 maxpacket: 64
[   86.987394][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   87.080657][  T974] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[   87.136162][    T9] usb 1-1: device descriptor read/64, error -71
[   87.233241][ T6057] netlink: 44 bytes leftover after parsing attributes in process `syz.3.38'.
[   87.244528][ T6057] netlink: 'syz.3.38': attribute type 6 has an invalid length.
[   87.254588][  T974] usb 3-1: Invalid ep0 maxpacket: 64
[   87.260779][  T974] usb usb3-port1: attempt power cycle
[   87.266867][ T6057] netlink: 'syz.3.38': attribute type 5 has an invalid length.
[   87.277355][ T6057] netlink: 'syz.3.38': attribute type 4 has an invalid length.
[   87.386246][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   87.477989][ T6061] /dev/rnullb0: Can't open blockdev
[   87.489033][ T5934] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   87.556240][    T9] usb 1-1: device descriptor read/64, error -71
[   87.616544][  T974] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[   87.637604][  T974] usb 3-1: Invalid ep0 maxpacket: 64
[   87.649789][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   87.661394][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   87.674783][    T9] usb usb1-port1: attempt power cycle
[   87.680862][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   87.690672][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   87.703592][ T5934] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   87.713042][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.725144][ T5934] usb 4-1: config 0 descriptor??
[   87.776215][  T974] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[   87.798829][  T974] usb 3-1: Invalid ep0 maxpacket: 64
[   87.804373][  T974] usb usb3-port1: unable to enumerate USB device
[   88.026664][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   88.056928][    T9] usb 1-1: device descriptor read/8, error -71
[   88.141701][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.150820][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.211719][ T5934] usbhid 4-1:0.0: can't add hid device: -71
[   88.218120][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   88.231502][ T5934] usb 4-1: USB disconnect, device number 3
[   88.289464][ T6065] /dev/rnullb0: Can't open blockdev
[   88.296198][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   88.336797][    T9] usb 1-1: device descriptor read/8, error -71
[   88.466417][    T9] usb usb1-port1: unable to enumerate USB device
[   88.677781][ T5934] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   88.836015][ T5934] usb 4-1: Using ep0 maxpacket: 16
[   88.844303][ T5934] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   88.852482][ T5934] usb 4-1: config 0 has no interface number 0
[   88.860778][ T5934] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   88.869969][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.878003][ T5934] usb 4-1: Product: syz
[   88.882198][ T5934] usb 4-1: Manufacturer: syz
[   88.886857][ T5934] usb 4-1: SerialNumber: syz
[   88.895305][ T5934] usb 4-1: config 0 descriptor??
[   88.906613][ T5934] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   89.179626][ T5934] gspca_spca1528: reg_w err -71
[   89.196059][ T5934] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[   89.208390][ T5934] usb 4-1: USB disconnect, device number 4
[   89.643456][ T6071] /dev/rnullb0: Can't open blockdev
[   90.024482][ T6081] nfs: Unknown parameter 'defcontext'
[   90.196900][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   90.208667][ T6093] gfs2: not a GFS2 filesystem
[   90.356224][   T24] usb 4-1: Using ep0 maxpacket: 8
[   90.371576][   T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[   90.388969][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.399797][   T24] usb 4-1: Product: syz
[   90.404005][   T24] usb 4-1: Manufacturer: syz
[   90.407868][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.54'.
[   90.409566][   T24] usb 4-1: SerialNumber: syz
[   90.417533][  T974] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   90.434896][   T24] usb 4-1: config 0 descriptor??
[   90.434926][ T6102] ./cgroup: Can't lookup blockdev
[   90.459477][   T24] gspca_main: sonixj-2.14.0 probing 0c45:613a
[   90.605761][  T974] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   90.615002][  T974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.630519][  T974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[   90.644227][  T974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.665169][  T974] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   90.680333][  T974] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   90.696902][  T974] usb 1-1: Product: syz
[   90.701090][  T974] usb 1-1: Manufacturer: syz
[   90.724604][  T974] cdc_wdm 1-1:1.0: skipping garbage
[   90.731130][  T974] cdc_wdm 1-1:1.0: skipping garbage
[   90.737349][ T6109] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[   90.739125][ T6109] VFS: Can't find a romfs filesystem on dev rnullb0.
[   90.739125][ T6109] 
[   90.754717][  T974] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[   90.761050][  T974] cdc_wdm 1-1:1.0: Unknown control protocol
[   90.786058][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   90.947786][    T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   90.965994][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.987647][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   90.996825][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.021553][    T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   91.036405][    T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   91.045803][    T9] usb 3-1: Product: syz
[   91.052408][    T9] usb 3-1: Manufacturer: syz
[   91.072808][    T9] cdc_wdm 3-1:1.0: skipping garbage
[   91.081683][    T9] cdc_wdm 3-1:1.0: skipping garbage
[   91.090103][    T9] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[   91.097115][    T9] cdc_wdm 3-1:1.0: Unknown control protocol
[   91.202443][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE
[   91.218646][ T5830] usb 1-1: USB disconnect, device number 10
[   91.224011][ T5833] Bluetooth: hci2: Invalid connection link type handle 0x00c8
[   91.777633][  T974] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   91.782427][ T6131] /dev/rnullb0: Can't open blockdev
[   91.946125][  T974] usb 2-1: Using ep0 maxpacket: 16
[   91.956778][  T974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.972997][  T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   91.984360][  T974] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   92.001225][  T974] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   92.010313][  T974] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   92.018372][  T974] usb 2-1: Manufacturer: syz
[   92.029463][  T974] usb 2-1: config 0 descriptor??
[   92.210388][ T6138] Mount JFS Failure: -22
[   92.215349][ T6138] jfs_mount failed w/return code = -22
[   92.241239][ T6138] tipc: Started in network mode
[   92.246568][ T6138] tipc: Node identity a65bef352b38, cluster identity 4711
[   92.254133][ T6138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.264191][ T6138] syzkaller0: MTU too low for tipc bearer
[   92.273980][ T6138] tipc: Disabling bearer <eth:syzkaller0>
[   92.288556][ T6138] netlink: 68 bytes leftover after parsing attributes in process `syz.0.64'.
[   92.595096][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.604135][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.776110][ T5887] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   92.791656][   T24] gspca_sonixj: reg_w1 err -71
[   92.837071][   T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[   92.851126][   T24] usb 4-1: USB disconnect, device number 5
[   92.949841][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   92.961554][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   92.967381][ T6144] /dev/rnullb0: Can't open blockdev
[   92.973936][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   92.989833][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   93.002801][ T5887] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   93.011894][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.021821][ T5887] usb 1-1: config 0 descriptor??
[   93.373843][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'.
[   93.443450][ T5887] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max
[   93.486752][ T5887] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   93.579009][   T24] usb 3-1: USB disconnect, device number 7
[   93.823565][ T6159] ./cgroup.cpu/cgroup.procs: Can't lookup blockdev
[   93.942543][ T6161] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[   93.950936][ T6161] UDF-fs: Scanning with blocksize 4096 failed
[   94.573206][ T5934] usb 2-1: USB disconnect, device number 3
[   94.653757][ T6167] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[   94.661851][ T6167] UDF-fs: Scanning with blocksize 4096 failed
[   94.730492][   T30] audit: type=1326 audit(1751573945.544:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb678e929 code=0x7fc00000
[   94.905458][ T6174] deleting an unspecified loop device is not supported.
[   95.167241][ T5934] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   95.316092][ T5934] usb 2-1: Using ep0 maxpacket: 16
[   95.332050][ T5934] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   95.356698][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.365081][ T5934] usb 2-1: Product: syz
[   95.366041][ T5879] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   95.370337][ T5934] usb 2-1: Manufacturer: syz
[   95.381625][ T5934] usb 2-1: SerialNumber: syz
[   95.395244][ T5934] usb 2-1: config 0 descriptor??
[   95.530315][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short
[   95.545896][ T5879] usb 3-1: config 0 has an invalid interface number: 244 but max is 0
[   95.569950][ T5887] usb 1-1: USB disconnect, device number 11
[   95.585944][ T5879] usb 3-1: config 0 has no interface number 0
[   95.602772][ T5879] usb 3-1: config 0 interface 244 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8
[   95.623206][ T5879] usb 3-1: config 0 interface 244 has no altsetting 0
[   95.629352][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.643338][ T5879] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=81.b0
[   95.659504][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.670101][ T5879] usb 3-1: Product: syz
[   95.672284][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.698545][    T9] usb 2-1: USB disconnect, device number 4
[   95.704857][ T5879] usb 3-1: Manufacturer: syz
[   95.711800][ T5879] usb 3-1: SerialNumber: syz
[   95.728531][ T5879] usb 3-1: config 0 descriptor??
[   95.734370][ T6183] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   95.810342][ T6204] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[   95.820143][ T6204] cramfs: wrong magic
[   96.023984][ T5879] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[   96.036119][ T5879] usb 3-1: selecting invalid altsetting 0
[   96.045812][ T5879] usb 3-1: USB disconnect, device number 8
[   96.047414][ T2344] pvrusb2: Failed to submit write-control URB status=-19
[   96.066280][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   96.094594][ T2344] pvrusb2: Device being rendered inoperable
[   96.102780][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   96.122321][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   96.236203][ T5887] usb 1-1: Using ep0 maxpacket: 16
[   96.251831][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.281123][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   96.295429][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[   96.310390][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   96.345560][ T5887] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   96.354935][ T5887] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   96.363578][ T5887] usb 1-1: Manufacturer: syz
[   96.387074][ T5887] usb 1-1: config 0 descriptor??
[   96.416976][   T30] audit: type=1800 audit(1751573947.234:5): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.84" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   96.960160][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.973447][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.341890][ T6224] Mount JFS Failure: -22
[   97.366090][ T5887] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   97.516004][ T5887] usb 4-1: Using ep0 maxpacket: 16
[   97.524734][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.535808][ T5887] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[   97.544887][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.555996][ T5887] usb 4-1: config 0 descriptor??
[   97.969735][ T5887] steelseries 0003:1038:1410.0002: unknown main item tag 0x7
[   97.978844][ T5887] steelseries 0003:1038:1410.0002: item fetching failed at offset 4/5
[   97.987833][ T5887] steelseries 0003:1038:1410.0002: parse failed
[   97.994737][ T5887] steelseries 0003:1038:1410.0002: probe with driver steelseries failed with error -22
[   98.107745][ T5879] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   98.172133][ T6222] FAT-fs (rnullb0): bogus number of reserved sectors
[   98.194058][ T6222] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   98.221326][ T5887] usb 4-1: USB disconnect, device number 6
[   98.268376][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   98.280351][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   98.291360][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   98.301168][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   98.314883][ T5879] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   98.324490][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.336279][ T5879] usb 2-1: config 0 descriptor??
[   98.445996][   T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   98.607421][   T43] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   98.616172][   T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.627407][   T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   98.636602][   T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.649258][   T43] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   98.658407][   T43] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   98.666554][   T43] usb 3-1: Product: syz
[   98.670742][   T43] usb 3-1: Manufacturer: syz
[   98.680398][   T43] cdc_wdm 3-1:1.0: skipping garbage
[   98.685632][   T43] cdc_wdm 3-1:1.0: skipping garbage
[   98.693613][   T43] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   98.699755][   T43] cdc_wdm 3-1:1.0: Unknown control protocol
[   98.729191][ T5934] usb 1-1: USB disconnect, device number 12
[   98.748991][ T5879] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.776322][ T5879] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.784104][ T5879] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.795344][ T5879] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.814744][ T5879] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.829665][ T6230] overlay: ./file0 is not a directory
[   98.835573][ T5879] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.843732][ T5879] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.860820][ T5879] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.874743][ T6232] ntfs3(rnullb0): Primary boot signature is not NTFS.
[   98.886312][ T5879] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   98.894085][ T6232] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[   98.925285][ T5879] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   98.960410][ T6226] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.996186][ T6236] capability: warning: `syz.0.93' uses deprecated v2 capabilities in a way that may be insecure
[   99.017835][   T43] usb 2-1: USB disconnect, device number 5
[   99.050852][ T6237] fido_id[6237]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   99.156257][ T5879] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[   99.308245][ T5879] usb 4-1: not running at top speed; connect to a high speed hub
[   99.317562][ T5879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.327838][ T5879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   99.340036][ T5879] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   99.349301][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.357494][ T5879] usb 4-1: Product: 《
[   99.361759][ T5879] usb 4-1: Manufacturer: Ф
[   99.366370][ T5879] usb 4-1: SerialNumber: Й
[   99.395992][ T5934] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   99.550434][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   99.562264][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   99.573697][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   99.584872][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   99.603876][ T5934] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   99.613207][ T5879] usb 4-1: 0:2 : does not exist
[   99.616383][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.641616][ T5934] usb 1-1: config 0 descriptor??
[   99.694346][ T5879] usb 4-1: USB disconnect, device number 7
[   99.726755][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.926020][  T974] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  100.077358][ T5934] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max
[  100.092116][  T974] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  100.103835][  T974] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  100.120139][ T5934] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  100.143550][  T974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  100.160960][  T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64
[  100.197078][  T974] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  100.219289][  T974] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  100.236303][  T974] usb 2-1: Product: syz
[  100.240491][  T974] usb 2-1: Manufacturer: syz
[  100.270193][  T974] cdc_wdm 2-1:1.0: skipping garbage
[  100.275996][  T974] cdc_wdm 2-1:1.0: skipping garbage
[  100.281295][  T974] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  100.441177][ T5879] usb 1-1: USB disconnect, device number 13
[  100.535630][ T6259] /dev/rnullb0: Can't open blockdev
[  100.976136][ T5879] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  101.161486][ T5879] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  101.170471][ T5879] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.182517][ T5879] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  101.192185][ T5879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.218069][ T5879] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  101.238000][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  101.244771][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  101.251368][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  101.257993][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  101.264865][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  101.271482][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  101.277824][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  101.284438][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  101.291335][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  101.298032][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  101.304598][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  101.313199][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  101.313219][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  101.321274][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  101.321294][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  101.327896][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  101.327916][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  101.332022][    T9] usb 3-1: USB disconnect, device number 9
[  101.335058][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  101.366044][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  101.372105][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  101.381608][ T5879] usb 4-1: Product: syz
[  101.386556][ T5879] usb 4-1: Manufacturer: syz
[  101.396338][ T5879] cdc_wdm 4-1:1.0: skipping garbage
[  101.401705][ T5879] cdc_wdm 4-1:1.0: skipping garbage
[  101.408561][ T5879] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[  101.414476][ T5879] cdc_wdm 4-1:1.0: Unknown control protocol
[  101.458301][ T6273] /dev/rnullb0: Can't open blockdev
[  101.556105][  T974] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  101.738028][  T974] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  101.747969][  T974] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.760984][  T974] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  101.770104][  T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.876031][    T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  101.984776][  T974] usb 1-1: usb_control_msg returned -32
[  101.990548][  T974] usbtmc 1-1:16.0: can't read capabilities
[  102.028174][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  102.040574][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.051020][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  102.060098][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.070379][    T9] usb 3-1: config 0 descriptor??
[  102.339134][ T6278] usbtmc 1-1:16.0: usb_control_msg returned -32
[  102.508323][    T9] lua 0003:1E7D:2C2E.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0
[  102.633919][    T9] usb 1-1: USB disconnect, device number 14
[  102.719394][ T5879] usb 2-1: USB disconnect, device number 6
[  102.729831][ T6275] /dev/rnullb0: Can't open blockdev
[  102.764539][ T5887] usb 3-1: USB disconnect, device number 10
[  102.886827][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[  102.896897][ T6284] /dev/rnullb0: Can't open blockdev
[  102.953490][ T6286] /dev/rnullb0: Can't open blockdev
[  103.350820][   T30] audit: type=1326 audit(1751573954.164:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bb678e929 code=0x0
[  103.356038][ T5887] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  103.547586][ T5887] usb 2-1: config 2 has an invalid interface number: 78 but max is 3
[  103.566062][ T5887] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  103.581943][ T5887] usb 2-1: config 2 has an invalid interface number: 104 but max is 3
[  103.596170][ T5887] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  103.617949][ T5887] usb 2-1: config 2 has 3 interfaces, different from the descriptor's value: 4
[  103.644305][ T5887] usb 2-1: config 2 has no interface number 0
[  103.650849][ T5887] usb 2-1: config 2 has no interface number 1
[  103.666988][ T5887] usb 2-1: config 2 interface 2 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  103.686048][ T5887] usb 2-1: config 2 interface 2 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  103.710986][ T5887] usb 2-1: too many endpoints for config 2 interface 78 altsetting 10: 142, using maximum allowed: 30
[  103.752595][ T5887] usb 2-1: config 2 interface 78 altsetting 10 has a duplicate endpoint with address 0x2, skipping
[  103.777081][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[  103.783706][ T5887] usb 2-1: config 2 interface 78 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  103.813931][   T43] usb 4-1: USB disconnect, device number 8
[  103.824285][ T5887] usb 2-1: config 2 interface 78 altsetting 10 has 7 endpoint descriptors, different from the interface descriptor's value: 142
[  103.844375][ T5887] usb 2-1: config 2 interface 104 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  103.860384][ T5887] usb 2-1: config 2 interface 2 has no altsetting 0
[  103.867762][ T5887] usb 2-1: config 2 interface 78 has no altsetting 0
[  103.874571][ T5887] usb 2-1: config 2 interface 104 has no altsetting 0
[  103.884057][ T5887] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=7f.a4
[  103.894715][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.923135][ T5887] usb 2-1: Product: Ⰱ
[  103.932873][ T5887] usb 2-1: SerialNumber: 䀊
[  104.078503][ T6321] FAT-fs (rnullb0): bogus number of reserved sectors
[  104.085343][ T6321] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  104.326894][ T5887] usb 2-1: USB disconnect, device number 7
[  104.399896][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  105.001916][ T6326] binder_alloc: 6325: binder_alloc_buf size 65816 failed, no address space
[  105.011945][ T6326] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  105.376103][   T43] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  105.538033][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  105.552590][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.563896][   T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  105.574633][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.586001][    T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  105.592779][   T43] usb 2-1: config 0 descriptor??
[  105.767960][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  105.786195][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  105.798456][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  105.821039][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.835922][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.843927][    T9] usb 4-1: Product: syz
[  105.866174][    T9] usb 4-1: Manufacturer: syz
[  105.870792][    T9] usb 4-1: SerialNumber: syz
[  106.035444][   T43] lua 0003:1E7D:2C2E.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0
[  106.100351][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.109270][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.129809][    T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  106.150877][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  106.190151][    T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  106.207826][    T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  106.221659][    T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  106.234990][    T9] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5)
[  106.262040][    T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  106.267894][ T6329] gfs2: not a GFS2 filesystem
[  106.283213][    T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  106.288974][   T43] usb 2-1: USB disconnect, device number 8
[  106.311225][    T9] usb 4-1: USB disconnect, device number 9
[  106.367015][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.692408][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.713564][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.766048][  T974] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  106.926107][ T5887] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  106.946133][  T974] usb 3-1: Using ep0 maxpacket: 8
[  106.958807][  T974] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.974232][  T974] usb 3-1: config 0 interface 0 has no altsetting 0
[  106.982227][  T974] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[  107.001447][  T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.012381][  T974] usb 3-1: config 0 descriptor??
[  107.087689][ T5887] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  107.105943][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.116141][   T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  107.124812][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  107.134419][ T5887] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.159122][ T5887] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  107.171063][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  107.180768][ T5887] usb 4-1: Product: syz
[  107.184996][ T5887] usb 4-1: Manufacturer: syz
[  107.207342][ T5887] cdc_wdm 4-1:1.0: skipping garbage
[  107.212568][ T5887] cdc_wdm 4-1:1.0: skipping garbage
[  107.222269][ T5887] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  107.228495][ T5887] cdc_wdm 4-1:1.0: Unknown control protocol
[  107.295956][   T43] usb 2-1: Using ep0 maxpacket: 8
[  107.307450][   T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  107.315456][   T43] usb 2-1: config 0 has no interface number 0
[  107.335943][   T43] usb 2-1: config 0 interface 1 has no altsetting 0
[  107.344702][   T43] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  107.365953][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.373962][   T43] usb 2-1: Product: syz
[  107.378306][   T43] usb 2-1: Manufacturer: syz
[  107.382905][   T43] usb 2-1: SerialNumber: syz
[  107.396524][   T43] usb 2-1: config 0 descriptor??
[  107.409122][    C1] cdc_wdm 4-1:1.0: unknown notification 3 received: index 31353 len 50
[  107.450804][  T974] logitech 0003:046D:C286.0007: hidraw0: USB HID v0.03 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0
[  107.468060][  T974] logitech 0003:046D:C286.0007: no inputs found
[  107.603974][   T43] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  107.679141][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE
[  107.719052][  T974] usb 4-1: USB disconnect, device number 10
[  107.864863][    T9] usb 3-1: USB disconnect, device number 11
[  108.519708][    T9] usb 2-1: USB disconnect, device number 9
[  108.549782][ T6353] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.129'.
[  108.966932][  T974] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  109.038870][ T6366] netlink: 'syz.2.134': attribute type 27 has an invalid length.
[  109.076142][ T6371] mmap: syz.3.135 (6371) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  109.130444][  T974] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  109.151837][  T974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.176171][  T974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  109.185236][  T974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.221929][  T974] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  109.231513][  T974] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  109.327214][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.335547][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.516125][   T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  109.576811][  T974] usb 2-1: Product: syz
[  109.581050][  T974] usb 2-1: Manufacturer: syz
[  109.591400][  T974] cdc_wdm 2-1:1.0: skipping garbage
[  109.597394][  T974] cdc_wdm 2-1:1.0: skipping garbage
[  109.614208][  T974] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  109.620261][  T974] cdc_wdm 2-1:1.0: Unknown control protocol
[  109.688553][   T43] usb 4-1: Using ep0 maxpacket: 32
[  109.698391][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.712233][   T43] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  109.728907][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.762006][   T43] usb 4-1: config 0 descriptor??
[  109.779446][   T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  109.792449][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.083662][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE
[  110.151149][   T67] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.175039][   T67] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.207323][  T974] usb 2-1: USB disconnect, device number 10
[  110.230214][   T67] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.242774][   T67] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.136325][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  111.316491][   T24] usb 3-1: Using ep0 maxpacket: 16
[  111.338226][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.366001][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  111.385977][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  111.415948][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  111.435962][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.472933][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  111.485916][   T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  111.493956][   T24] usb 3-1: Manufacturer: syz
[  111.501774][   T24] usb 3-1: config 0 descriptor??
[  111.580388][   T43] gspca_vc032x: reg_r err -32
[  111.585145][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.590526][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.595835][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.602179][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.615965][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.627039][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.636479][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.641885][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.666185][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.671578][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.688483][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.693819][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.706142][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.711475][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.727879][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.740198][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.745559][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.752117][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.763061][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.771318][   T43] gspca_vc032x: I2c Bus Busy Wait 00
[  111.779011][   T43] gspca_vc032x: Unknown sensor...
[  111.784151][   T43] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  112.133066][ T6395] Mount JFS Failure: -22
[  112.256000][   T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  112.411174][   T43] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  112.420042][   T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.433987][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  112.445837][   T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.463448][   T43] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  112.475273][   T43] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  112.486479][   T43] usb 2-1: Product: syz
[  112.490714][   T43] usb 2-1: Manufacturer: syz
[  112.509505][   T43] cdc_wdm 2-1:1.0: skipping garbage
[  112.519765][   T43] cdc_wdm 2-1:1.0: skipping garbage
[  112.528118][   T43] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  112.534147][   T43] cdc_wdm 2-1:1.0: Unknown control protocol
[  112.618641][   T43] usb 4-1: USB disconnect, device number 11
[  112.986349][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  112.997381][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  113.007891][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE
[  113.024802][  T974] usb 2-1: USB disconnect, device number 11
[  113.200406][ T6408] /dev/rnullb0: Can't open blockdev
[  113.274302][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.144'.
[  113.284809][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.144'.
[  113.314116][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.144'.
[  113.446556][ T6416] /dev/rnullb0: Can't open blockdev
[  113.525924][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  113.657245][ T6422] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  113.664286][ T6422] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  113.838325][ T6427] XFS (rnullb0): Invalid superblock magic number
[  113.855968][   T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  114.006757][   T43] usb 4-1: device descriptor read/64, error -71
[  114.045967][   T24] rc_core: IR keymap rc-hauppauge not found
[  114.058664][   T24] Registered IR keymap rc-empty
[  114.083836][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.117490][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.147511][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  114.179753][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5
[  114.218504][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.236026][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.245977][   T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  114.256022][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.277302][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.296247][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.316597][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.336079][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.358652][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.376154][   T43] usb 4-1: device descriptor read/64, error -71
[  114.386935][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.406298][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  114.428152][   T24] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  114.439643][   T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  114.451912][   T24] usb 3-1: USB disconnect, device number 12
[  114.455988][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  114.488877][   T43] usb usb4-port1: attempt power cycle
[  114.606063][    T9] usb 2-1: device descriptor read/64, error -71
[  114.800861][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  114.855970][   T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  114.865955][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  114.889839][   T43] usb 4-1: device descriptor read/8, error -71
[  114.970022][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  114.981867][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  114.996601][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  115.005975][    T9] usb 2-1: device descriptor read/64, error -71
[  115.011138][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  115.027039][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  115.039590][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.051359][   T24] usb 3-1: config 0 descriptor??
[  115.116222][    T9] usb usb2-port1: attempt power cycle
[  115.152614][   T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  115.176658][   T43] usb 4-1: device descriptor read/8, error -71
[  115.281349][   T24] hid_parser_main: 6 callbacks suppressed
[  115.281372][   T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  115.301209][   T43] usb usb4-port1: unable to enumerate USB device
[  115.313376][   T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  115.325483][   T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  115.333145][   T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  115.344004][   T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  115.351765][   T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  115.362915][   T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  115.371387][   T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  115.382168][   T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  115.390329][   T24] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  115.408595][   T24] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  115.455968][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  115.501076][    T9] usb 2-1: device descriptor read/8, error -71
[  115.549096][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.560814][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.572093][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.584638][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.598677][   T24] usb 3-1: USB disconnect, device number 13
[  115.756132][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  115.786800][    T9] usb 2-1: device descriptor read/8, error -71
[  115.897484][    T9] usb usb2-port1: unable to enumerate USB device
[  116.405979][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  116.570239][    T9] usb 3-1: config 2 has an invalid interface number: 78 but max is 3
[  116.583115][    T9] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  116.604093][    T9] usb 3-1: config 2 has an invalid interface number: 104 but max is 3
[  116.628714][    T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  116.643639][    T9] usb 3-1: config 2 has 3 interfaces, different from the descriptor's value: 4
[  116.659588][    T9] usb 3-1: config 2 has no interface number 0
[  116.665768][    T9] usb 3-1: config 2 has no interface number 1
[  116.676590][    T9] usb 3-1: config 2 interface 2 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  116.691910][    T9] usb 3-1: config 2 interface 2 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  116.705223][    T9] usb 3-1: too many endpoints for config 2 interface 78 altsetting 10: 142, using maximum allowed: 30
[  116.723639][    T9] usb 3-1: config 2 interface 78 altsetting 10 has a duplicate endpoint with address 0x2, skipping
[  116.734751][    T9] usb 3-1: config 2 interface 78 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  116.752713][    T9] usb 3-1: config 2 interface 78 altsetting 10 has 7 endpoint descriptors, different from the interface descriptor's value: 142
[  116.773780][    T9] usb 3-1: config 2 interface 104 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  116.787259][    T9] usb 3-1: config 2 interface 2 has no altsetting 0
[  116.793877][    T9] usb 3-1: config 2 interface 78 has no altsetting 0
[  116.801064][    T9] usb 3-1: config 2 interface 104 has no altsetting 0
[  116.812064][    T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=7f.a4
[  116.831454][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.850406][    T9] usb 3-1: Product: Ⰱ
[  116.861157][    T9] usb 3-1: SerialNumber: 䀊
[  117.148790][    T9] usb 3-1: USB disconnect, device number 14
[  117.160815][  T974] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  117.339910][  T974] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  117.352092][  T974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.375970][  T974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  117.384950][  T974] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.402417][  T974] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  117.427084][  T974] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  117.435098][  T974] usb 4-1: Product: syz
[  117.465710][ T6456] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  117.473668][ T6456] UDF-fs: Scanning with blocksize 4096 failed
[  117.475978][  T974] usb 4-1: Manufacturer: syz
[  117.507429][  T974] cdc_wdm 4-1:1.0: skipping garbage
[  117.512660][  T974] cdc_wdm 4-1:1.0: skipping garbage
[  117.529496][  T974] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  117.535415][  T974] cdc_wdm 4-1:1.0: Unknown control protocol
[  117.809800][ T6460] process 'syz.2.159' launched './file0' with NULL argv: empty string added
[  117.984071][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE
[  118.014698][  T974] usb 4-1: USB disconnect, device number 16
[  118.212541][   T30] audit: type=1800 audit(1751573969.024:7): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.163" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  118.376026][ T5934] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  118.559115][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.575966][ T5934] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.596106][ T5830] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  118.597903][ T5934] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  118.629694][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.644337][ T5934] usb 3-1: Product: ఄ
[  118.654721][ T5934] usb 3-1: Manufacturer: ੾멦恹틓읉환貶庑챪ܚ证뀠諹挫ও맃尅ⲝ猢ᚱ顂葅砊욺正鿁␘뚵˙䕻댰㏃岌韫⑽ꚓ똪蘱㶞᧙쐩
[  118.705964][ T5934] usb 3-1: SerialNumber: 봅䫙䰿䞿嘗ꏼꎐ
[  118.786150][ T5830] usb 2-1: Using ep0 maxpacket: 16
[  118.812588][ T5830] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  118.826138][ T5830] usb 2-1: config 0 has no interface number 0
[  118.842501][ T5830] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  118.866671][ T5830] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  118.885923][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.904628][ T5830] usb 2-1: Product: syz
[  118.909201][ T5830] usb 2-1: Manufacturer: syz
[  118.913815][ T5830] usb 2-1: SerialNumber: syz
[  118.937483][ T5830] usb 2-1: config 0 descriptor??
[  118.980800][ T5934] usb 3-1: 0:2 : does not exist
[  119.026192][ T5934] usb 3-1: USB disconnect, device number 15
[  119.102068][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.145165][ T6473] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  119.196752][ T6473] VFS: Can't find a romfs filesystem on dev rnullb0.
[  119.196752][ T6473] 
[  119.230067][ T5830] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71
[  119.250700][ T5830] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71
[  119.279808][ T5830] usb 2-1: USB disconnect, device number 16
[  119.601616][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.621478][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.635319][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.648339][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.655965][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.464410][ T6488] chnl_net:caif_netlink_parms(): no params data found
[  120.536183][ T5934] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  120.578959][ T6515] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  120.596392][ T6515] VFS: Can't find a romfs filesystem on dev rnullb0.
[  120.596392][ T6515] 
[  120.651309][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.674091][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.691761][ T6488] bridge_slave_0: entered allmulticast mode
[  120.710419][ T5934] usb 4-1: Using ep0 maxpacket: 8
[  120.717344][ T6488] bridge_slave_0: entered promiscuous mode
[  120.744519][ T5934] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice= 0.6d
[  120.757209][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.765704][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.775747][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.788697][ T5934] usb 4-1: Product: syz
[  120.792880][ T5934] usb 4-1: Manufacturer: syz
[  120.798389][ T6488] bridge_slave_1: entered allmulticast mode
[  120.798510][ T5934] usb 4-1: SerialNumber: syz
[  120.817695][ T5934] usb 4-1: config 0 descriptor??
[  120.819753][ T6488] bridge_slave_1: entered promiscuous mode
[  120.827410][ T5934] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  120.895227][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.916254][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.980736][ T6488] team0: Port device team_slave_0 added
[  120.991926][ T6488] team0: Port device team_slave_1 added
[  121.090082][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.106443][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.165954][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.208419][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.223377][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.280741][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.460875][ T6488] hsr_slave_0: entered promiscuous mode
[  121.480175][ T6488] hsr_slave_1: entered promiscuous mode
[  121.492774][ T5833] Bluetooth: Unexpected continuation frame (len 18)
[  121.505155][ T6488] debugfs: 'hsr0' already exists in 'hsr'
[  121.511720][ T6488] Cannot create hsr debugfs directory
[  121.706111][ T5833] Bluetooth: hci4: command tx timeout
[  121.736138][ T5980] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  121.805528][ T5833] Bluetooth: hci2: unexpected cc 0x0c05 length: 5 > 1
[  121.810369][ T6488] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  121.821163][ T6531] FAT-fs (rnullb0): bogus number of reserved sectors
[  121.840584][ T6531] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  121.856408][ T6488] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  121.873052][ T6533] FAT-fs (rnullb0): bogus number of reserved sectors
[  121.883043][ T6533] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  121.895981][ T5980] usb 3-1: Using ep0 maxpacket: 16
[  121.903609][ T5980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.915022][ T6488] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  121.925319][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  121.953231][ T6488] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  121.960045][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  121.973785][ T5980] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  121.983454][    C0] ==================================================================
[  121.983469][    C0] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0
[  121.983506][    C0] Write of size 8 at addr ffff888022ebaa40 by task kworker/0:8/5980
[  121.983521][    C0] 
[  121.983541][    C0] CPU: 0 UID: 0 PID: 5980 Comm: kworker/0:8 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  121.983561][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  121.983573][    C0] Workqueue: usb_hub_wq hub_event
[  121.983607][    C0] Call Trace:
[  121.983614][    C0]  <IRQ>
[  121.983620][    C0]  dump_stack_lvl+0x189/0x250
[  121.983639][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  121.983658][    C0]  ? rcu_is_watching+0x15/0xb0
[  121.983674][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.983692][    C0]  ? rcu_is_watching+0x15/0xb0
[  121.983707][    C0]  ? lock_release+0x4b/0x3e0
[  121.983734][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  121.983752][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  121.983772][    C0]  print_report+0xd2/0x2b0
[  121.983795][    C0]  ? flush_tlb_func+0x23d/0x6c0
[  121.983814][    C0]  kasan_report+0x118/0x150
[  121.983835][    C0]  ? flush_tlb_func+0x23d/0x6c0
[  121.983858][    C0]  kasan_check_range+0x2b0/0x2c0
[  121.983884][    C0]  flush_tlb_func+0x23d/0x6c0
[  121.983908][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  121.983927][    C0]  ? sched_clock_cpu+0x74/0x430
[  121.983944][    C0]  ? rcu_is_watching+0x15/0xb0
[  121.983959][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  121.983980][    C0]  __flush_smp_call_function_queue+0x370/0xaa0
[  121.983999][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  121.984021][    C0]  __sysvec_call_function_single+0xa8/0x3d0
[  121.984044][    C0]  sysvec_call_function_single+0x9e/0xc0
[  121.984065][    C0]  </IRQ>
[  121.984071][    C0]  <TASK>
[  121.984077][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  121.984096][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  121.984116][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24
[  121.984131][    C0] RSP: 0018:ffffc90005326d00 EFLAGS: 00000283
[  121.984145][    C0] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: 0000000000100000
[  121.984157][    C0] RDX: ffffc90016eb1000 RSI: 000000000000ee3f RDI: 000000000000ee40
[  121.984168][    C0] RBP: ffffc90005326e50 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6
[  121.984181][    C0] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000
[  121.984193][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740
[  121.984214][    C0]  ? console_flush_all+0x13a/0xc40
[  121.984236][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  121.984260][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  121.984284][    C0]  console_unlock+0xc4/0x270
[  121.984302][    C0]  ? __pfx_console_unlock+0x10/0x10
[  121.984320][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  121.984344][    C0]  vprintk_emit+0x5b7/0x7a0
[  121.984362][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  121.984380][    C0]  ? __pfx_snprintf+0x10/0x10
[  121.984403][    C0]  dev_vprintk_emit+0x337/0x3f0
[  121.984424][    C0]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  121.984450][    C0]  dev_printk_emit+0xe0/0x130
[  121.984473][    C0]  ? __pfx_dev_printk_emit+0x10/0x10
[  121.984496][    C0]  ? __dev_printk+0x131/0x190
[  121.984517][    C0]  _dev_notice+0x10a/0x160
[  121.984539][    C0]  ? __pfx__dev_notice+0x10/0x10
[  121.984560][    C0]  ? rcu_is_watching+0x15/0xb0
[  121.984576][    C0]  ? trace_kmalloc+0x1f/0xd0
[  121.984592][    C0]  ? usb_get_configuration+0x1c4f/0x52c0
[  121.984620][    C0]  usb_get_configuration+0x315f/0x52c0
[  121.984667][    C0]  ? __pfx_usb_get_configuration+0x10/0x10
[  121.984696][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.984715][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.984737][    C0]  usb_new_device+0x146/0x16f0
[  121.984755][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  121.984780][    C0]  ? __pfx_usb_new_device+0x10/0x10
[  121.984796][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.984814][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.984836][    C0]  hub_event+0x2941/0x4a00
[  121.984880][    C0]  ? __pfx_hub_event+0x10/0x10
[  121.984899][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  121.984928][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.984946][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  121.984971][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  121.984997][    C0]  process_scheduled_works+0xae1/0x17b0
[  121.985035][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  121.985067][    C0]  worker_thread+0x8a0/0xda0
[  121.985085][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.985107][    C0]  ? __kthread_parkme+0x7b/0x200
[  121.985128][    C0]  kthread+0x70e/0x8a0
[  121.985149][    C0]  ? __pfx_worker_thread+0x10/0x10
[  121.985164][    C0]  ? __pfx_kthread+0x10/0x10
[  121.985184][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.985202][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.985222][    C0]  ? __pfx_kthread+0x10/0x10
[  121.985241][    C0]  ret_from_fork+0x3fc/0x770
[  121.985257][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  121.985274][    C0]  ? __switch_to_asm+0x39/0x70
[  121.985294][    C0]  ? __switch_to_asm+0x33/0x70
[  121.985313][    C0]  ? __pfx_kthread+0x10/0x10
[  121.985333][    C0]  ret_from_fork_asm+0x1a/0x30
[  121.985360][    C0]  </TASK>
[  121.985366][    C0] 
[  121.985374][    C0] Allocated by task 5838:
[  121.985382][    C0]  kasan_save_track+0x3e/0x80
[  121.985398][    C0]  __kasan_slab_alloc+0x6c/0x80
[  121.985414][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  121.985431][    C0]  copy_mm+0xdb/0x4b0
[  121.985446][    C0]  copy_process+0x1706/0x3c00
[  121.985461][    C0]  kernel_clone+0x21e/0x870
[  121.985477][    C0]  __x64_sys_clone+0x18b/0x1e0
[  121.985494][    C0]  do_syscall_64+0xfa/0x3b0
[  121.985515][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.985530][    C0] 
[  121.985535][    C0] Freed by task 6531:
[  121.985543][    C0]  kasan_save_track+0x3e/0x80
[  121.985557][    C0]  kasan_save_free_info+0x46/0x50
[  121.985579][    C0]  __kasan_slab_free+0x62/0x70
[  121.985595][    C0]  kmem_cache_free+0x18f/0x400
[  121.985612][    C0]  exit_mm+0x1da/0x2c0
[  121.985630][    C0]  do_exit+0x648/0x2300
[  121.985648][    C0]  do_group_exit+0x21c/0x2d0
[  121.985667][    C0]  get_signal+0x1286/0x1340
[  121.985690][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  121.985713][    C0]  exit_to_user_mode_loop+0x75/0x110
[  121.985736][    C0]  do_syscall_64+0x2bd/0x3b0
[  121.985757][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.985772][    C0] 
[  121.985776][    C0] The buggy address belongs to the object at ffff888022eba040
[  121.985776][    C0]  which belongs to the cache mm_struct of size 2584
[  121.985790][    C0] The buggy address is located 2560 bytes inside of
[  121.985790][    C0]  freed 2584-byte region [ffff888022eba040, ffff888022ebaa58)
[  121.985808][    C0] 
[  121.985812][    C0] The buggy address belongs to the physical page:
[  121.985820][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022ebeb80 pfn:0x22eb8
[  121.985837][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  121.985850][    C0] memcg:ffff888030a78481
[  121.985858][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  121.985881][    C0] page_type: f5(slab)
[  121.985896][    C0] raw: 00fff00000000040 ffff88801a84bb40 ffffea0001fc9800 dead000000000004
[  121.985912][    C0] raw: ffff888022ebeb80 00000000800b0009 00000000f5000000 ffff888030a78481
[  121.985927][    C0] head: 00fff00000000040 ffff88801a84bb40 ffffea0001fc9800 dead000000000004
[  121.985941][    C0] head: ffff888022ebeb80 00000000800b0009 00000000f5000000 ffff888030a78481
[  121.985957][    C0] head: 00fff00000000003 ffffea00008bae01 00000000ffffffff 00000000ffffffff
[  121.985971][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  121.985980][    C0] page dumped because: kasan: bad access detected
[  121.985992][    C0] page_owner tracks the page as allocated
[  121.985999][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3319320977, free_ts 0
[  121.986025][    C0]  post_alloc_hook+0x240/0x2a0
[  121.986043][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  121.986063][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  121.986085][    C0]  alloc_pages_mpol+0x232/0x4a0
[  121.986102][    C0]  allocate_slab+0x8a/0x370
[  121.986122][    C0]  ___slab_alloc+0xbeb/0x1410
[  121.986139][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  121.986156][    C0]  mm_alloc+0x23/0xd0
[  121.986168][    C0]  dma_resv_lockdep+0xb6/0x6a0
[  121.986188][    C0]  do_one_initcall+0x233/0x820
[  121.986206][    C0]  do_initcall_level+0x137/0x1f0
[  121.986228][    C0]  do_initcalls+0x69/0xd0
[  121.986248][    C0]  kernel_init_freeable+0x3d9/0x570
[  121.986269][    C0]  kernel_init+0x1d/0x1d0
[  121.986281][    C0]  ret_from_fork+0x3fc/0x770
[  121.986294][    C0]  ret_from_fork_asm+0x1a/0x30
[  121.986312][    C0] page_owner free stack trace missing
[  121.986318][    C0] 
[  121.986322][    C0] Memory state around the buggy address:
[  121.986332][    C0]  ffff888022eba900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  121.986342][    C0]  ffff888022eba980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  121.986353][    C0] >ffff888022ebaa00: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc
[  121.986362][    C0]                                            ^
[  121.986371][    C0]  ffff888022ebaa80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  121.986382][    C0]  ffff888022ebab00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  121.986391][    C0] ==================================================================
[  121.986407][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  121.986418][    C0] CPU: 0 UID: 0 PID: 5980 Comm: kworker/0:8 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  121.986438][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  121.986449][    C0] Workqueue: usb_hub_wq hub_event
[  121.986469][    C0] Call Trace:
[  121.986476][    C0]  <IRQ>
[  121.986484][    C0]  dump_stack_lvl+0x99/0x250
[  121.986502][    C0]  ? __asan_memcpy+0x40/0x70
[  121.986517][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.986536][    C0]  ? __pfx__printk+0x10/0x10
[  121.986560][    C0]  panic+0x2db/0x790
[  121.986577][    C0]  ? __pfx_panic+0x10/0x10
[  121.986595][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  121.986615][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.986633][    C0]  ? print_memory_metadata+0x314/0x400
[  121.986657][    C0]  ? flush_tlb_func+0x23d/0x6c0
[  121.986678][    C0]  check_panic_on_warn+0x89/0xb0
[  121.986700][    C0]  ? flush_tlb_func+0x23d/0x6c0
[  121.986720][    C0]  end_report+0x78/0x160
[  121.986739][    C0]  kasan_report+0x129/0x150
[  121.986759][    C0]  ? flush_tlb_func+0x23d/0x6c0
[  121.986783][    C0]  kasan_check_range+0x2b0/0x2c0
[  121.986805][    C0]  flush_tlb_func+0x23d/0x6c0
[  121.986829][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  121.986850][    C0]  ? sched_clock_cpu+0x74/0x430
[  121.986865][    C0]  ? rcu_is_watching+0x15/0xb0
[  121.986889][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  121.986910][    C0]  __flush_smp_call_function_queue+0x370/0xaa0
[  121.986929][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  121.986951][    C0]  __sysvec_call_function_single+0xa8/0x3d0
[  121.986975][    C0]  sysvec_call_function_single+0x9e/0xc0
[  121.986995][    C0]  </IRQ>
[  121.987002][    C0]  <TASK>
[  121.987009][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  121.987026][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  121.987048][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24
[  121.987062][    C0] RSP: 0018:ffffc90005326d00 EFLAGS: 00000283
[  121.987078][    C0] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: 0000000000100000
[  121.987091][    C0] RDX: ffffc90016eb1000 RSI: 000000000000ee3f RDI: 000000000000ee40
[  121.987103][    C0] RBP: ffffc90005326e50 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6
[  121.987116][    C0] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000
[  121.987129][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740
[  121.987151][    C0]  ? console_flush_all+0x13a/0xc40
[  121.987175][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  121.987199][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  121.987224][    C0]  console_unlock+0xc4/0x270
[  121.987243][    C0]  ? __pfx_console_unlock+0x10/0x10
[  121.987262][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  121.987286][    C0]  vprintk_emit+0x5b7/0x7a0
[  121.987304][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  121.987323][    C0]  ? __pfx_snprintf+0x10/0x10
[  121.987346][    C0]  dev_vprintk_emit+0x337/0x3f0
[  121.987368][    C0]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  121.987395][    C0]  dev_printk_emit+0xe0/0x130
[  121.987419][    C0]  ? __pfx_dev_printk_emit+0x10/0x10
[  121.987442][    C0]  ? __dev_printk+0x131/0x190
[  121.987464][    C0]  _dev_notice+0x10a/0x160
[  121.987486][    C0]  ? __pfx__dev_notice+0x10/0x10
[  121.987508][    C0]  ? rcu_is_watching+0x15/0xb0
[  121.987524][    C0]  ? trace_kmalloc+0x1f/0xd0
[  121.987541][    C0]  ? usb_get_configuration+0x1c4f/0x52c0
[  121.987569][    C0]  usb_get_configuration+0x315f/0x52c0
[  121.987613][    C0]  ? __pfx_usb_get_configuration+0x10/0x10
[  121.987643][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.987662][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.987684][    C0]  usb_new_device+0x146/0x16f0
[  121.987702][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  121.987727][    C0]  ? __pfx_usb_new_device+0x10/0x10
[  121.987743][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.987762][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.987784][    C0]  hub_event+0x2941/0x4a00
[  121.987824][    C0]  ? __pfx_hub_event+0x10/0x10
[  121.987843][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  121.987882][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.987900][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  121.987926][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  121.987952][    C0]  process_scheduled_works+0xae1/0x17b0
[  121.987989][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  121.988022][    C0]  worker_thread+0x8a0/0xda0
[  121.988039][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.988062][    C0]  ? __kthread_parkme+0x7b/0x200
[  121.988083][    C0]  kthread+0x70e/0x8a0
[  121.988103][    C0]  ? __pfx_worker_thread+0x10/0x10
[  121.988119][    C0]  ? __pfx_kthread+0x10/0x10
[  121.988138][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.988156][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.988176][    C0]  ? __pfx_kthread+0x10/0x10
[  121.988195][    C0]  ret_from_fork+0x3fc/0x770
[  121.988212][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  121.988229][    C0]  ? __switch_to_asm+0x39/0x70
[  121.988249][    C0]  ? __switch_to_asm+0x33/0x70
[  121.988269][    C0]  ? __pfx_kthread+0x10/0x10
[  121.988289][    C0]  ret_from_fork_asm+0x1a/0x30
[  121.988317][    C0]  </TASK>
[  121.988693][    C0] Kernel Offset: disabled