last executing test programs:

3m42.922504006s ago: executing program 1 (id=551):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'\x00', 0x2})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e)
r2 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040700c10f000000000000109022400010000d00009040000070300000009e136e0e060210000080122070009058103"], 0x0)
syz_usb_control_io(r3, 0x0, 0xfffffffffffffffe)
syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r0, &(0x7f0000000180), 0x0, 0x3, 0x561)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c)
socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
socket$packet(0x11, 0x2, 0x300)
sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x4040ae79, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r8, 0x0, 0x0)
setsockopt$sock_int(r8, 0x1, 0x31, &(0x7f0000000200)=0xc09, 0x4)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)

3m41.77835621s ago: executing program 1 (id=563):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = semget$private(0x0, 0x7, 0x3c0)
semop(r1, &(0x7f0000000140)=[{0x0, 0x6, 0x3800}, {0x2, 0xbf}, {0x4, 0xfffc}], 0x3) (async)
semctl$IPC_RMID(r1, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket(0x11, 0x800000003, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x804) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'wlan1\x00', {0x2}, 0x9}) (async)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="0f381d74876635010000000f3064660f38828e4258660f086766c744240012e93bf96766c744240201000000f4670f011c2466b9800000c00f32663500200000f20f1bfe0f01df66b8050000002e0494a90a000f01c40f019f09000f01c2", 0x5e}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x31d800, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

3m41.597493227s ago: executing program 1 (id=566):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
r1 = socket$inet6(0xa, 0x4, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async)
recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000000)=0x6, 0x4) (async)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008894)
bind$inet6(r1, 0x0, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0) (async)
preadv(r0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0) (async)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r5, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x60d3, 0x5}) (async)
r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async)
syz_usb_control_io(r6, 0x0, 0x0) (async)
syz_usb_control_io(r6, 0x0, 0x0) (async)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000000c0)={0x0, 0x31, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m41.403694969s ago: executing program 1 (id=568):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x6, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RLOCK(r5, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x1}, 0x8)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x26da2d2a}}]}})
dup2(r1, r2) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x12, r0, 0x6f7c4000)
ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000000)=""/172)

3m40.532232191s ago: executing program 1 (id=573):
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='cpuset\x00', 0x1200051, 0x0)

3m40.362787414s ago: executing program 1 (id=575):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mlock(&(0x7f0000245000/0x4000)=nil, 0x4000)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000)

3m29.656432875s ago: executing program 2 (id=643):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) (async)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r2, 0x4001af84, 0x0) (async)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRAWPHYS(r4, 0x4004480d, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x2, 0x0, 0x0, 0xa6, 0x4000, 0x3, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r5, &(0x7f0000001240)={0x50, 0x0, r6, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x107, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl(r7, 0x2275, 0x0) (async)
dup(r4)
r8 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4)
socket$packet(0x11, 0x2, 0x300) (async)
socket$phonet(0x23, 0x2, 0x1) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

3m29.653747093s ago: executing program 2 (id=645):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
fadvise64(r0, 0x94, 0x6e, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x10000, 0x0)
renameat2(r3, &(0x7f00000004c0)='./bus\x00', r2, &(0x7f0000000500)='./file0\x00', 0x0)
write$midi(r2, &(0x7f0000000100)="3bc37c7c2a577aebac94c61b08875f5317d953884b041cd3a9411ffe711a136c0f7b96011447857462fbf1f154c5c3157ef4b68e1f03662cc006366df03acf35a852a622280aac968c4dd7ed10953fe7f1fcd68151525171efe4b39cf5683ca2dcd049a89cd36393ad95816643c6abdca1cea85c8810d3b5df3d564bf84d3c07", 0x80)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8004)
mmap(&(0x7f00009ab000/0x1000)=nil, 0x1000, 0x3000001, 0x22052, r0, 0x2000)

3m29.65345779s ago: executing program 2 (id=646):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x70, 0xf0, 0x1c, 0x40, 0xfe9, 0xdb98, 0xad73, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x0, 0xe8, 0x6, 0x1d}}]}}]}}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
set_mempolicy(0x8006, 0x0, 0x5)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, <r1=>0x0}) (async)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) (async)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000)

3m28.541499031s ago: executing program 2 (id=656):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
r1 = dup2(r0, r0)
fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1160100c773a16c1ca43f8539f3d3289737f0371c72a964a0193b3e8772fd29f35239d20000000000000000f6ffffffffffffebffffff000000004000", "24431a1e77a68e174f000000000000000010e200"}})
pread64(r3, &(0x7f0000000000)=""/14, 0xe, 0xfffffffc)
prctl$PR_MCE_KILL(0x35, 0x1, 0x2)
preadv(r0, &(0x7f0000000080), 0x0, 0xffeffffd, 0x801005)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) (async)
dup2(r0, r0) (async)
fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (async)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1160100c773a16c1ca43f8539f3d3289737f0371c72a964a0193b3e8772fd29f35239d20000000000000000f6ffffffffffffebffffff000000004000", "24431a1e77a68e174f000000000000000010e200"}}) (async)
pread64(r3, &(0x7f0000000000)=""/14, 0xe, 0xfffffffc) (async)
prctl$PR_MCE_KILL(0x35, 0x1, 0x2) (async)
preadv(r0, &(0x7f0000000080), 0x0, 0xffeffffd, 0x801005) (async)

3m28.372745362s ago: executing program 2 (id=658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280))
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009042000010300000009210000000122070009058103"], 0x0)
r3 = syz_usb_connect(0x6, 0x4a1, &(0x7f0000000b40)={{0x12, 0x1, 0x300, 0xe9, 0xb4, 0x71, 0x30, 0xdb0, 0x6826, 0xfb07, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48f, 0x1, 0x3b, 0x5, 0x10, 0x3, [{{0x9, 0x4, 0xb8, 0xff, 0xc, 0x8, 0x54, 0xb1, 0x8, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf, 0x2, 0x5, 0x0, 'ap', "01"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x200, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0x6e, 0x1}, [@obex={0x5, 0x24, 0x15, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x151, 0x8, 0xab}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x9, 0x1}, @acm={0x4}, @mbim={0xc, 0x24, 0x1b, 0xff, 0x2, 0xc, 0x8, 0x5, 0x7}]}], [{{0x9, 0x5, 0x1, 0x8, 0x400, 0x7f, 0x40, 0x8, [@generic={0xad, 0x7, "b81c5f8da3fb9b0220fab31c4ee479ca4ad7d7c889191647d8611ba46fa56ca4525a769f7c97ee1fc2ab3fc8932834194b55ee9c65132eeccd1bece180cf9379080ce456e3d0a07444549e571d20f53c7ece6097286442283e980081f49a6f6f7a02fd630600b4964f65ced9330269833f6e6155355b9c40a2ba1f28b41c7b4e42a4cbce05af3e41be74efb490701107800949223d8440351c287cb2d67d4647505b791e2cb6dd23a8a253"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0xa9, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x6}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x5, 0x9, 0x80, [@generic={0x4a, 0xef02b4ccc10b4a78, "0654aabd98f332c87e20c24ee1b8cdffbd01bab98acb8c2d4bebd700fbac1868a7b04c741bf7fcb8ba29136e4e0f25a407cdfb758a4ef9a3141e7d2dc97b8e29a90d6486d90e567e"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x0, 0xc2, 0xa2, [@generic={0xcc, 0xa, "c1a5506fbac5e3caf93d4f69a0b1549cae31bef91de3ddbdc66187b3251917357157bce29abd7a4f44e3a2a36dd68937d750eebb588debd99a1a935af314f35bbb0c909b7ddf7d71847a1c859bd0338c8eea7145837c7729cc3dd2815f15b784bcf29f6801a6bfae53cb697d4529789a6d246e902531c6f2c5b1865e355f6b2ed660e8de5d39e64a8e3b21488abdbbddce5519446c161dcbcd24d3420ed27cecd08f0b648739bbf60f6ff7ea4e11401e46dcfb17433a62a5f8892569d2b61e76bcbabb1cfb90b04a1fc2"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x9, 0x2, [@generic={0x4e, 0x21, "01badc71825a36db5bc5ab190a4e8d5e60adb1a972cdba66f8abe55a417ab91800faa869457cd0c87c13e8ba49f0ebb22fa2a00699e7c8ea60c8c6f0a14aefb927f642c4f3a92c14cebc1cf0"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x9, 0x20, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x5fb8}]}}, {{0x9, 0x5, 0xea6cd24490b54e94, 0x4, 0x20, 0x2, 0xdb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x1}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x7, 0x2, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x59, 0xf}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x3, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x12, 0x5d6}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x8, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x3279}]}}, {{0x9, 0x5, 0x9, 0xbe0078bc1bdeb7e0, 0x3ff, 0x2, 0xe3, 0xc, [@generic={0xf9, 0x22, "8f39f7b4f63191399a31fd05c5210964c654c1c3ce42f0f505b92d24d6ecea1743377f94d0987721e205c2107c574268d776218475059e7842fbbecc3b3ed8cffa3fec04aa74fd5756e3768254ac8326e64efd4240e2b73d5c237d5174992f277353d0fb8d69703f480208c07f99626f579ae838b74cc44e5de718df452a71af896c97be5681d81abc026533fdbb3b560b3447b3856a95e4c59e4b066cf2f1880f12a66f53242c18c7a6861c6d841562d1df91bf2e356bc297cb4fefe3b0f8bd5072196fea5a08270b4c9eff27c03d862c69beefad12b8e115df943848a0f52b38150a08a34f7d302cc67f9c99f664f9bc6f2bd37923e2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0xdd9}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x4, 0x3, 0x5c, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x58e8}, @generic={0x74, 0x21, "4e4804a9ac862f8e78aa2b6d59d8ace5bd932073fdcebdbef29fdf7df39429e4782957d6eea17cf8b711c0e10b38f0dde5c3d9317edc073636aa9f5831c659691a3df0570b8363a86349bb3255649e714e89692b6a0d911ff2721b2b1fee09fb9462deda05dd2c9aa75844fbce4ee432123e"}]}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x110, 0x6, 0x9, 0x8, 0x40}, 0xffffffffffffffd5, &(0x7f0000000140)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x19, "32cb9b3d0a03000000000000001eea30"}, @ss_container_id={0x14, 0x10, 0x4, 0xfc, "86e6636568ad18c83be9343acefa97ad"}, @ptm_cap={0x3}]}, 0xa, [{0x20, &(0x7f0000000240)=@string={0x20, 0x3, "033b742b7908b524bd8bf7b0343dad5a788e2795a05588eca5261b2432f9"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}, {0xd7, &(0x7f0000000540)=@string={0xd7, 0x3, "95938531313985680f4f0bd0688973c0977a88ddad69fcbaa6518ca2174fcdbba5fbd482e0fb03a6d2b458f727691e5d8f1cc553e4a12904198acdc0765de5bc3740ed848d781377cf534acf6eb9b53252c9509fe63c19b572416849e54ce0c00ee190e6cb759901791c3149dd4ba03bfe822fa034d77fb74f9f4a719b827d9becbd3288ee14285f082570d23f783be5d56b1d9badc2d2cbe69dbbdffcd943d8f6af37e56f7e4ab23d42dc551e5fbce3d97d920830fb9628a99e5726058336b1da93cc2ee3af52617ad0461598d02a45e3172bcde5"}}, {0xd9, &(0x7f0000000640)=@string={0xd9, 0x3, "c6b24456ed27484fd973523a453c51274ae75d46f58f6f572360de404ab325ba3023c78277c7bdee355b8bc41de3cdf6b41e7257e8c45309899591a6b363ea58705b4c71efafff454b3a2bd6bb137640220d344275f4d512f3e99097f2f8c19982eb245334849bf6e12bd0a8f6a60ac9a57e65c604e7307ee4dcafd4aac75ddce7fd9817736261b88157c94912a9738e1e2726dc06bfde8fcca08285aaf38c96a201a97335228edc7b7ae6b2f5b98aef3f7c2f3575b3fc78f3f368328e6c5925628e8a0f2fcf4769391481e568f5282f850e09686604ae"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0xf, &(0x7f0000000440)=@string={0xf, 0x3, "3d70b8fc39c1c106183a6175f7"}}, {0xdb, &(0x7f0000000740)=@string={0xdb, 0x3, "6a64586deb23e2e87ee7eb1d8f9995c2f90220bf7e82399a7cf027ac91469242b36d71e1714c378cb547e04e377af8fdb0356430c1fbf3616aed59e1ab0d8d117ae56cabd36dae94f57b54b82353dc1784db04008c8ef3becf60a04a112db26b404caef2eb7370c542e0fb799f6ef0564ae29ced83fda8933e1884c3efdcbdb4e4bbe35c3a5ae8afe4bab97d2e55c3d884af34467cc403150de95913d6ace7b866228b34f9dc415f043246cc50c41ac03e75a9c164d9644f807e8950c641ee9928129292b1aba1ce5f88dbf9d215bcfff28d1a32ea3d667781"}}]})
syz_usb_control_io$hid(r3, &(0x7f0000000a80)={0x24, &(0x7f0000000980)={0x40, 0xe, 0xdd, {0xdd, 0x31, "1e676998cef4554927138f766e9a9ff18b2286d1901bbc58383843f0a64d11e12c4704c0fe6cece1f459a8556bd6920f4a25b4096701723e0594ea9fd5473fc2f3932f02713f8db14ad820841cfb3392928c79564e1c0ff1470a3f8dfc926583828a4965b317fd1c1e85673add77a5cdb633f39af1b0540649e4a4b9c0a303ecea54d7e0f7c12e73f642c4e6c3ff881d4ca0e9554d9d40720b44a75d86d389cca97d200085375c82a04b6fb57473029e8673e373362f6d738850065995bbc04c436b4608342955d28a7945166c35c046bd0c72d24f03b46a7fd457"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}, &(0x7f00000004c0), &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4d1, 0x1, 0x1, {0x22, 0xb0e}}}}, &(0x7f0000001200)={0xfffffffffffffcb7, &(0x7f0000001000)={0x20, 0x5, 0xdd, "084970a6251aa36982230d6673ac8691beaafb1527b6df2ff9f344937e22c5887b0451dee714b4bed75942cb6c1b8681f033e2a0de6d4d9cbd9e64ff696f874394773041866ecefe20bbb034eb23183d0bd9a5915f3060efae7486dcfc33d3b7c6061849b3081058c85d075ce9f8171acf176f6a0741684fb8c462c25c4fc9b694f4d01384cc1e3e36b0cbb07d31e71a94643310e44379509c0be0d754c699e70583017134073708c8732d6a77b60b327b6ba307560efa03abefc7bbc1da50faf711346d001644c429f55b0a5d711db24980d748bdfeea0a594d3139e5"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x25}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000001140)={0x20, 0x1, 0x4a, "12ced0bad1887242bb2c30d45e3b865018d1fb3ef10fb4e326ffa53e7e50c9da112ad4a4a0025b026eb569dab638c647cf3354bc7a001a2eb0777c955ac0105eb18d96e48f93b6831e5f"}, &(0x7f00000011c0)={0x20, 0x3, 0x1, 0x2}})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0, 0xfffffffffffffcb5}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000280)=0x3, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1, 0x0, 0xfffffffffffffe45}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0})
preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0xb9}], 0x1, 0x0, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_usb_control_io$cdc_ecm(r3, &(0x7f00000015c0)={0x14, &(0x7f00000014c0)={0x20, 0x23, 0x96, {0x96, 0x8, "ba6eb473049eeb8fa560a184ebd2687fbd51aa2c6009e5850ae5451c7be296aa67066368baa72fdab0632181294ee5bbfa2579d90b4a100ae7c6e26088feac4b4b72924ab89bded28f40612952df2e66c6b432142004dbbb7584f18676b6be31481b02ae5e4f16e34eaa8420cdc376edaf0d5c281407e2097f3bb9dc693ae36400be848c7133b53d07bed36a284b02e4b48e5b7b"}}, &(0x7f0000001580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001740)={0x1c, &(0x7f0000001600)={0x40, 0x17, 0xae, "7241bf6115b5eb5b2cfad0180ac77fa4836145ba42636bb08d9b31e59206416db3e2697fac98e4f1b16b5c09a5003896a712dc35ad6b954e3d86db8f622f6005415c5da4535ac80bf2068d03e2878628813a303b4a41b3d6f0855d8a68aeb42366b89023830460daff90a3aec6d7e0d1f6a9def5f789f6f6652ebf288540497bd3db16a3291c84e3def11fc1f1fa631a282d3a0fc30b98e189ebf7a277d5b51fe8a78a04bf728a0b10fbcb1f7764"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x76}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x3c}})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000001340)={0x14, &(0x7f0000001280)={0x20, 0x23, 0x64, {0x64, 0xa, "52741df88f3702f1741c4c738fc7d9b6b933fdeefe4870e5dabcef1cca3c0f337578727e2f541ec4bcfeb43c9455321b1aae05d4a8308aa43ef31d1c625ba2f1d2cecf0910a81e60be59bbff978e56f72ae6e633e477cd87f540794953e8a614440c"}}, &(0x7f0000001300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001480)={0x1c, &(0x7f0000001380)={0x20, 0x10, 0x54, "2a6f3c521bedf062691227d73ab0c44f6e46130d4907e5a231eb4a372e427999769e28fc12d13e396c51ee699167800781eecc2ab16b18947f9734663dca8ca2c8f1b4d843ae33162edffbfa278f0f5c580804db"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0xae}})

3m26.549409755s ago: executing program 2 (id=661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendto$packet(r1, 0x0, 0x0, 0x8040, &(0x7f0000000240)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}, 0x14)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000080)={0x1})
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='gfs2\x00', 0x208002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
sendto$packet(r1, 0x0, 0x0, 0x8040, &(0x7f0000000240)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}, 0x14) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async)
ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000080)={0x1}) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='gfs2\x00', 0x208002, 0x0) (async)

3m25.314263487s ago: executing program 32 (id=575):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mlock(&(0x7f0000245000/0x4000)=nil, 0x4000)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000)

3m11.370286671s ago: executing program 33 (id=661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendto$packet(r1, 0x0, 0x0, 0x8040, &(0x7f0000000240)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}, 0x14)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000080)={0x1})
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='gfs2\x00', 0x208002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
sendto$packet(r1, 0x0, 0x0, 0x8040, &(0x7f0000000240)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}, 0x14) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async)
ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000080)={0x1}) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='gfs2\x00', 0x208002, 0x0) (async)

54.664919703s ago: executing program 5 (id=1393):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="bd4d407f", @ANYRES16, @ANYBLOB="000829bd7000fbdbdf2512000000080039000100000008003a000900000005002a000100000005002e000100000005002d000100000008002b00ff0f"], 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040080)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1)

54.571535336s ago: executing program 5 (id=1394):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa5, 0x64, 0x98, 0x40, 0xc45, 0x628e, 0x57cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6a, 0x0, 0x0, 0x4, 0x4b, 0x70}}]}}]}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={r3, r3, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x1f, 0x8, 'syz1\x00'}) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x36, 0x0, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG(r5, 0x8008af73, &(0x7f0000000180)={0x0, 0x3b, ""/59}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
rt_sigaction(0x20002, &(0x7f0000001440)={0x0, 0x4, 0x0, {[0xf]}}, 0x0, 0x8, &(0x7f0000001480)) (async)
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r8 = dup(r7) (async)
syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) (async)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100))
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
openat(0xffffffffffffffff, &(0x7f0000004280)='.\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
r11 = socket(0x1, 0x803, 0x0) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x7, 0x0, 0x0) (async)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x11, 0x100, 0x70bd26, 0x4000, {0x3}}, 0xfffffe5c}, 0x1, 0x0, 0x0, 0x40080b0}, 0x404c000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000)

53.666530136s ago: executing program 5 (id=1406):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r2, r2, 0x0, 0x7ffff000)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)

52.775496487s ago: executing program 5 (id=1411):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165880, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4af4229551a474739b0e543c36ab0c6e21d3991315b5fe0a2cbaa7d9eaf6185cbbb4bfa0f942ae9993e973526312165e492c6171807e5427e7bded0ef25a2b3", 0x32}, 0x48, 0xffffffffffffffff)
keyctl$link(0x8, r1, r1) (async)
keyctl$link(0x8, r1, r1)
r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="fd0c5000188d394cfec61618a1c1172e96cba30d83e9e7340faf7df6a683523f418dba951d35c6d55bd526ce11ef04e223d1db4c26beb7135d7bb58eaf40af6ab6c740cfbd952eef1cf7673a912d586b2a3e7f", 0x53, 0xfffffffffffffffd)
r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbbbc5b", 0x7, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r4}, &(0x7f0000000180)=""/26, 0x1a, &(0x7f0000000200)={&(0x7f00000001c0)={'wp384\x00'}}) (async)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r4}, &(0x7f0000000180)=""/26, 0x1a, &(0x7f0000000200)={&(0x7f00000001c0)={'wp384\x00'}})
fadvise64(r0, 0x92, 0x5, 0x2) (async)
fadvise64(r0, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000)

52.41197093s ago: executing program 5 (id=1416):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x36, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000)

52.049304524s ago: executing program 5 (id=1419):
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x75, 0xb2, 0x1f, 0x40, 0x8086, 0xb63, 0xcaf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x3, 0xcc, 0xc8, 0xac, 0x0, [], [{{0x9, 0x5, 0x4, 0x4, 0x618, 0xd8, 0x3, 0x4, [@generic={0x9, 0x4, "4299d83e091515"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x83, 0x62, 0x82}}, {{0x9, 0x5, 0x12, 0x0, 0x20, 0x0, 0xa, 0xc, [@generic={0x7, 0x5, "e6ea3588e4"}]}}]}}]}}]}}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)

37.015267342s ago: executing program 34 (id=1419):
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x75, 0xb2, 0x1f, 0x40, 0x8086, 0xb63, 0xcaf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x3, 0xcc, 0xc8, 0xac, 0x0, [], [{{0x9, 0x5, 0x4, 0x4, 0x618, 0xd8, 0x3, 0x4, [@generic={0x9, 0x4, "4299d83e091515"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x83, 0x62, 0x82}}, {{0x9, 0x5, 0x12, 0x0, 0x20, 0x0, 0xa, 0xc, [@generic={0x7, 0x5, "e6ea3588e4"}]}}]}}]}}]}}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)

30.998326106s ago: executing program 6 (id=1526):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010e0240000000000000000001000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000380000001c0a050000000000000000000200000a0c00034000000000a8283fcc0900020073797a32000000000900010073797a30fabd249cedd49fc90b9f6b85099cd10a2963e55e07f0010269556b1e4a13942e27824c646af343adbd0f7e712f23e20abeace71a537ec3bcb04db67f000000000000009797e56c3c13db6d4e5ebc65cf4b143bfab2d7cf13a6b06c1851db7f41d83f03e8f1baaa7bb7a5a9fc"], 0x8c}}, 0x8080) (async)
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf257300000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x2400c0a0}, 0x40450) (async)
syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e38801060010000904"], 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003800), 0x2080, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$netlink(0x10, 0x3, 0x1c)
sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005e000d0025bd70000000000008000000010000000e"], 0x28}], 0x1}, 0x0) (async)
sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000040a0104000000000000000002002006090001"], 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x20008088) (async)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r11, 0x1, 0x0, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000})
syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000bfe000/0x400000)=nil) (async)
ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000003840)={0x15, 0x0, [{0x2, 0x25, 0x1, 0x1, 0xe9, 0x1, 0x5}]}) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)

30.943643952s ago: executing program 6 (id=1528):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syslog(0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x20000000)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x81c0, 0xf)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x208c, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
syslog(0x1, 0x0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
unshare(0x20000000) (async)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async)
openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x81c0, 0xf) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async)
mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x208c, 0x0) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async)

30.873605522s ago: executing program 6 (id=1529):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)=""/48, 0x30}], 0x1}, 0x62)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000007e0000000c002c1b0000000015000000"], 0x20}}, 0x4000054)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

30.718144296s ago: executing program 6 (id=1530):
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x77eacbc9514857e3, &(0x7f0000a00000/0x600000)=nil)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000000))
ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"})
r2 = syz_open_pts(r1, 0x20800)
dup3(r2, r1, 0x0)
io_setup(0x6, &(0x7f0000000540)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_submit(r3, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r4, 0x0}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0x4}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x1, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x1078, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x1, 0xfffffffffffffffe}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
open_tree(r9, &(0x7f0000000080)='./file0/file0\x00', 0x1000)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1)

30.149724634s ago: executing program 6 (id=1533):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x7)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0)
write$apparmor_exec(r1, &(0x7f0000000140)={'exec ', 'syzkaller1\x00'}, 0x10)
copy_file_range(r2, 0x0, r1, &(0x7f00000000c0)=0x100200, 0x400000, 0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000018c0))
lseek(r3, 0x1000, 0x1)
listen(r0, 0x8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='attr/prev\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x4)
mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x0, 0x0)

29.189445339s ago: executing program 6 (id=1538):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000007e0000000c002c1b0000000015000000"], 0x20}}, 0x4000054)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

29.09347018s ago: executing program 35 (id=1538):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000007e0000000c002c1b0000000015000000"], 0x20}}, 0x4000054)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

6.274396319s ago: executing program 0 (id=1692):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfs\x00', 0x2208080, 0x0)

6.247574204s ago: executing program 0 (id=1694):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r1=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {<r2=>0xffffffffffffffff, 0xee00}}, './file0\x00'})
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)={0x182c, 0x24, 0x1, 0x70bd22, 0x25dfdbfe, "", [@nested={0x181c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x2c1, 0x65, 0x0, 0x1, [@nested={0xf5, 0x124, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r0}, @nested={0x69, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x1c, 0x1e, 0x0, 0x1, [@nested={0xc, 0xd4, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57a27022ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed2344a4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x30}]}]}, @nested={0x13f2, 0x34, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x146, 0x0, 0x0, @pid=r1}, @typed={0x14, 0x147, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x28}}, @generic="0d6d72153d4d1a269e708e9ff782153b15bdc961e04bec214a77e3bedbd9e2fd28a9c45ec0e289910cfbe372d1afa50a67221e32bf0b90f345e279c7b3f7300480bcf00e9d", @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x122f, 0xa3, 0x0, 0x1, [@nested={0x4, 0xcd}, @generic="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", @generic="412ad206e599d7a737c97d178deefff236ba2f82e0c1d3427f6613130e4d092a", @typed={0xd1, 0x14f, 0x0, 0x0, @binary="5c671bc889c871181762274b78c1163d52bd0389285a00c611aa5f2bcce5fd29861b7e3e0e0751089e1e0598d035ad68562af61df60f68a887b839c4f33620481abe1bbdf0658aedacb03fa439c4c14b9ebba6dbe7cb132bf5a4fbe73ca3de60f0e1af992327c4896bdc8e05c362101fbd424bbb9d2469bea508cb3fc559ad5f7a05e1c8ea16d0a54dde04148a082534797ed7667dba6bc4af6f585df2713723d466367be2420a9c8201b154e2f7c47ae20e19a5bc8f21a6564cb66df5218c6a57e44f9fef08b99ba20552deb2"}, @generic="0c36560fce8047f10f9806c2e4773d6bd7a1300f795a6bd312dc9e89efa7fa39e4dcfd36ec674f", @nested={0x4, 0x13e}, @nested={0x4, 0x11}, @nested={0x4, 0x127}, @generic="e9352f2dd086c2f41fd3dba676938499eb1ea442fc29a8e09f157c8457437b2dfab4ac0d61d2b13835e6214663835c7b43ea44b7dc36f9c96fe768c0467f3bc34b5b0d7dedf13319a586ab402712f25d2f0c4d7826930e3aeeb3f2bfdc6b5a2505d5904386e9a588a6396e1c8029d804ee2d5bbcededdc16c5086be467158a2dcced2dfa7e985c2bb9bd56abc96995656b8d", @generic="a0d1b44644e712f046591ad3d46b43da27baae5c2999a15ffe8aa66a84855fcf48d2918c483495795232074d3183065fae5713363ce178f19b4cfc38ad1c98fa414c0ade5aac1324d74878245e89b7d93b78cfb82c8609d88dcbee85069ceffe6aef75adf04aca95d2f726ca591a"]}, @typed={0x8, 0xc1, 0x0, 0x0, @fd=r0}, @nested={0xf7, 0x4e, 0x0, 0x1, [@typed={0x4, 0x5e}, @typed={0x8, 0x118, 0x0, 0x0, @uid=r2}, @typed={0x8, 0xe7, 0x0, 0x0, @u32=0x4}, @generic="6f9c1b49ead38851356e7d17fcc0ae99bec68289db9ce7c86a781a076c2c9215da8753099f0ef171f9df19229f7a7f98cf971e468c7803b98c2f1761c3fca694175764a4553b01f63e3d93114ca6678007098913a741c775bd3b29d33dd35c5c99b17dad1351b8b0c2b8f63276b80b49856d5fb5de28162f3e43499f9aab952e01a2d48f223e7c05084504e00490a96ef04496deed282dbbf73ea13ef55148a10f9afbcc13bdde2d7dda279bd27d262cd345a141f50cd46e9ac2a5bb6d08c8fc3926464453f8e85e81c20e4023e25f17a0809df0f64b740008279e7692e830"]}, @generic="8619284384fdffd8e97a9a2e2463bcdc35ddf1994d79f2a6eb423cd3d94a27c5df3e3c1f08c212143f0ccaf5ec21738c65008205e27cdfe9adf8e37fe00de50c38182bb2ae2ff73d65f502fd42"]}, @nested={0x151, 0x76, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x7}, @generic="45e49df035ca3e1511b2d03e89c9c254104f6e", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x112}, @nested={0x69, 0x121, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="dd6bd77b5da6bb5285b3181026928cf10027116fd52ead1cc792fc621598f6f78bfa10e7fcfe5edec56cae74fc523cc23def9ad973065ca46abebd942423fed0dbfb631f048fc6d32cfcc22adc0348a9b0c20091ae85f67103c99e99237a574d05"]}, @generic="f0456535747b15e70e3b1e0827c3e8c3ca7710239259c6f0a0ad5c136073ab87021643c3ca285bd98186244d8cf0e3c2d947cea9a643f98d95ba39d918b5039f22dbc61b90167e1cdc4cc7c39c2a7c3a0a4d469d07e5b855", @generic="3463f5ed45c329f623b3a83de061691a5d5ae24b542dd38cdf2912ffefc9ba9e34309eb559b6ad91ab000bad5d941ac75df7510830cc33381b3e6fde47f0b1afda7d8b93f1eec61392d5938b73ffe6bad74289047d8c98c7cb17"]}]}]}, 0x182c}], 0x1}, 0x0)
r3 = msgget$private(0x0, 0x30)
msgsnd(r3, 0x0, 0xffffffffffffff8a, 0x800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x90)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r5, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="001408000000ebaa"], 0x0, 0x0, 0x0, 0x0, 0x0})
io_setup(0x4, 0x0)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r6, 0x57789000)
mount$overlay(0x0, 0x0, 0x0, 0x1001002, &(0x7f0000004180))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.276667366s ago: executing program 3 (id=1717):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$FIOCLEX(r0, 0x5451)
mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)

4.254526532s ago: executing program 3 (id=1718):
msgsnd(0x0, 0x0, 0x0, 0x800)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010)
io_setup(0x4, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
close_range(r2, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x57789000)
mount$overlay(0x0, 0x0, 0x0, 0x1001002, &(0x7f0000004180))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x9}}, 0x6}, 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendto$inet6(r6, &(0x7f0000000000)="12", 0x100000, 0x44000, 0x0, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x38, 0x1412, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0xfffffffffffffe24}, 0x1, 0x0, 0x0, 0x8000}, 0x8010)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x3c}}, 0x0)

3.758644556s ago: executing program 4 (id=1728):
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, 0x0, &(0x7f0000000040)) (async)
getpeername$packet(r1, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080))

3.67848815s ago: executing program 4 (id=1729):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
mremap(&(0x7f0000155000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000416000/0x3000)=nil)
sendfile(r0, r0, 0x0, 0x7ffff000)

3.189305209s ago: executing program 0 (id=1730):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0)
ftruncate(r1, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000000, 0x2012, r1, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e)

3.146381614s ago: executing program 0 (id=1731):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000b00), 0x10bd00, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0xa1, 0x3, 0x1000})
r1 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000001c0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x844)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000c00)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0600ed00440100004800ac00a11c79df2feafb0a79fa8d5b23fde47b5881963705b05ed901e2f7e265ef52ebe05fce37fd2cd664f7179305dd225d55e824b7c32c70fbb8ba473806e60c0cd26d1c92d0"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x5a, 0x140043})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x228740, 0x0)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106e051c01ec87773f00010902250001000000080904006d410300020009210500fc01220500090781030002010a07"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000780)={<r4=>0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0x0, 0x6, 0x4}, &(0x7f0000000840)=0x98)
setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000880)={r4, 0xe30, 0xbe, "b706f2a8c9a2dadaa97d64940f6f07f97d92a460295a0725c354317ecb42b99f98d19a9786af3e32152daea7c4fe224c0e5119e6524119a88fad7366fb777f4a9f17ba653f5bf9744b729fde5ddbf8e883cf3dbabbcb1bce450207f207340b5114bcc2f1c2fa6d4a33b8b618b074eeb8cd292f4760302ae0b39da47f634c6c6522ec230229a596b6f04687e239f782abb81ba36e586ae10765fecb9da198d442bb2602c82e427a249c2540f41325b44943bc8a90fc86409122ab064c196b"}, 0xc6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="65401c17dab81f710c1f34a22e3877ef7c436621f151ebb945c6fc3cafd11aeb26791de74b57a83021d5aeadaaeaa9af27cc7c3f8029549f0b1affc32aad63e9f1f5f9671ff7fa7573565019fa1472aac0b5ae256aa1b647b4ccbc0a02e8a6121fe5b42424bef9f3e25b67677770f73bfebbaae8bc279621bc307dee407dcdf2d3252bf41691fb9fb681735fea9c620996a7aec2c8715e2a6e18e2733689a967", 0xa0}, {&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe6aed24f77c513e80ec3b5dd887c2e06e962f824f5b806e51ff73a109", 0x6a}], 0x2}, 0x20048050)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/539, @ANYRES32=0x0, @ANYRES32=0x0], 0x232)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000b80)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x30a61a986694391d)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
mmap(&(0x7f00004e1000/0x3000)=nil, 0x3000, 0x300000b, 0x4000010, r5, 0x5708e000)

2.858388086s ago: executing program 4 (id=1733):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/217, 0xd9}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000680)=""/230, 0xe6}], 0x5, &(0x7f00000002c0)=""/9, 0x9}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000003060500000000000000000000000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000880)={<r7=>r0, 0x3, 0x8})
read$FUSE(r7, &(0x7f0000003800)={0x2020}, 0x2020) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x84}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x18, 0x24, [{0x9}, {0x0, 0x1}, {0xb}, {0x6}, {0x18, 0x1}, {0x45, 0x1}, {0x16, 0x1}, {0x9}, {0x60, 0x1}, {0x9, 0x1}, {0x1e}, {0x30, 0x1}, {0x30}, {0x1b, 0x1}, {0x1}, {0x3}, {0x6}, {0x24, 0x1}, {0x16, 0x1}, {0x1b, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) (async)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="1401000027000100000000000000000003"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000)

1.648288435s ago: executing program 7 (id=1736):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}})
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x7ff, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000008e80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0xfffffffffffffffc, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0x9, 0x8, 0x8000, 0x28001, r6, r7, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}})
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r2, 0x4001af84, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRAWPHYS(r8, 0x4004480d, 0x0)
dup(r8)
r9 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4)
socket$packet(0x11, 0x2, 0x300)
socket$phonet(0x23, 0x2, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x111000)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r10, 0x80585414, &(0x7f00000000c0))
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

1.416128711s ago: executing program 4 (id=1737):
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020)
ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000400))
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r1, 0xf648d000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x90000, 0xc)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
clock_gettime(0x0, &(0x7f0000000280))
clock_gettime(0x0, &(0x7f0000000340))
clock_gettime(0x0, &(0x7f0000000380))
clock_gettime(0x0, &(0x7f00000003c0)={<r5=>0x0, <r6=>0x0})
timer_settime(r4, 0x0, &(0x7f0000000200)={{}, {r5, r6+60000000}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10100, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.'])
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @remote})
sendto$netrom(0xffffffffffffffff, &(0x7f0000000100)="3648e1a01be8acfdfad08a51bd1c76fe244993e31b326104b7470fb5f3df24f96eaf470f54f77559ffe7eb4a2379581e8710f862a3c44a262454f57649547d38a551e24afe035d9a39baf36850fc39a90c4f9ee28a97d3cb755c63a5c4ddfbba2acbc274b2957ff0a940b9a048fe045a2fd5451a7929e325833a39d3bc70a0b82a30216c52cebf06fdd569fc2c718d0b7cbb3d5873785198f12c74174aba3ba1a9bbd5bf8325763a7ac6d290af794fa478e47661d4aa89a2c7ed88200c76f654baab5032f7e6c03aa1f17481f5f92709c3f024b514d6f67136f2cb", 0xdb, 0xc080, &(0x7f00000002c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
writev(r7, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f00006ce000/0x4000)=nil, 0x4000, 0x3, 0x10, r2, 0x0)

1.314523636s ago: executing program 7 (id=1738):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @local}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}})
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r2, 0x4001af84, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRAWPHYS(r5, 0x4004480d, 0x0)
dup(r5)
r6 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4)
socket$packet(0x11, 0x2, 0x300)
socket$phonet(0x23, 0x2, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

1.313703537s ago: executing program 4 (id=1739):
ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000000)={0x3c0, 0x30, 0x1000, 0x78, 0x3, 0x5, 0x5e, 0x1, {0x80000000, 0x200}, {0x4, 0x6, 0x1}, {0x4, 0x3, 0x1}, {0x8c, 0x0, 0x1}, 0x0, 0x0, 0x5, 0x81, 0x1, 0x3, 0x5, 0x5, 0xffff, 0x4, 0x8, 0x0, 0x0, 0x1, 0x3, 0x3})
r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xfffffffffffffff3, 0x90100)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r3, 0x0, 0x291a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audit_spool_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000017}, 0x48000)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000440))
syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r2)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000004c0)={0x1, r1})
bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e23, @multicast2}, 0x10)
syz_usb_connect(0x0, 0x4a8, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x7f, 0xac, 0x84, 0x40, 0x482, 0x101, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x496, 0x3, 0xb, 0xd, 0xb0, 0xf2, [{{0x9, 0x4, 0xdd, 0x9, 0x5, 0xbd, 0x63, 0xa, 0x4, [@hid_hid={0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x9cc}}, @uac_control={{0xa, 0x24, 0x1, 0x9}, [@extension_unit={0xa, 0x24, 0x8, 0x5, 0x3, 0x0, "a22f0c"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x2, 0x1, [0x8], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x0, 0x6, 0x7, 0x9, 0x1}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x1, 0x6, [0x1, 0xa, 0x6, 0x2, 0x1, 0x1], 0x7}]}], [{{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x40, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xf7, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x70}, @generic={0x81, 0x24, "b149daeb0a7df001f5eb52f925cb9bffc41686f870f04bfa98a89b94b8e97b1eb8ac91f88f88a742e5a7730dfe35af51b419559a23a14cf00e708b8fb34e90b6e3a1fad1016fc3b2fa487f0642c74241a5d8c364ab22adae0e4d332b4f22fde67fb0cd7af910b2437681908a09313b535f13550c50866992c25435fa54723a"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x2, 0x4, 0xc7, [@generic={0x9a, 0x10, "5e938e321449cd5e2035df1b22a15f238bd0d7c5c732aaa2db7e3414134e4b4fc920883bea2afb6f43500b44186164180ff49fcaab2792a4647a3b67509c151bd04716d853707f411ed6b1a36c6703762bcab3002a82a95baf93800debe7d0466f1e576966f57f145566e79fa91235ac01dddd336d6ce711f6d1fec398d28c6c78e6dcf803795f88449a7fb99ee6d450ea708b2052255ab2"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x8, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x0, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x4}, @generic={0x56, 0x7, "a3b15e2b7255abb6654cacae5402766e4c9b57c97c88d3df1445feee71896e344c8166166e56778408efdc9df6716e16248f898a4747dbaca4ff1c389afc03ad7c914662003e503549a97f5e4b1f890bd370cf24"}]}}]}}, {{0x9, 0x4, 0x70, 0x44, 0x6, 0x5f, 0xf, 0x4, 0x4, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "9c"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7f, 0x6, 0x8}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x85}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x8000, 0x4, 0x1, 0xb, 0x7}]}], [{{0x9, 0x5, 0x7, 0x2, 0x600, 0x1, 0x4, 0x9}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0xa, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x4f560dc1835acbe3, 0xff, 0x78, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x8}, @generic={0x67, 0x9, "24be5b392441a3829429d29da80d4c2890cc7d8af3936258bdaea4015b717bde71b40bee283f3198a39922d7f861f504c391d4009135dd1c02d4a4bc7603def92cbcc2b50ec87a0b0b75011b779bcec5c2ee45f79b9f7627a32eca5a65a4d594f6b5f80fb0"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x2, 0x2, 0x5}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0xd, 0x9, 0x7f, [@generic={0x42, 0x8, "761e669f0bd2940f8dcc164128aedada496fc9454a1e05510fe4e0f502e77f10802b92276988a5ede3c8b6b07ad55ed238025b17580b3f0b43797d6a41a76ec0"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x9, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}]}}]}}, {{0x9, 0x4, 0xf, 0x0, 0x3, 0x6d, 0x69, 0x2f, 0x9, [@generic={0x4e, 0x9, "359227400f016ff37a748314962168f5f27cc506c7099c45d796c67f92250f3ed2477af23a6624a99d626e611236550c820e96a33962c048990c0a2f9d74338540c131210e5cbf3e1ed972e1"}, @uac_as], [{{0x9, 0x5, 0x4b440267e5d9193a, 0x286bbfe99dc776d1, 0x20, 0x68, 0x83, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x6}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x0, 0xb, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0xa}, @generic={0xbf, 0xa, "9a76b0cc8746ca7f9c48420b39a38422d81a55cc959ea298dcd2a30261762ba4d729420adef8c06f92a8d04af75af2d2fc19d4e2bc2e3bb7e700f12d7baef8d48b72f3b4fe1060d6e5bcc228c7d24003741070b05a03a8c8e0cdf1a1f340cc426b72ead1eb298f03be61998d9515e8dec06b924a9a279b80235bed5ad41c1faeb06903a2ca1e301620fecf188e8397beb1fd8f0e5bfb4f273813a9ade3f0fc7b730194d2158e6af1f62bf981b4ed0134f22b472fff551cef9f387db1b0"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x1, 0x9c, 0x5}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x4, 0x2, 0x6, 0x10, 0x5}, 0x73, &(0x7f0000000a40)={0x5, 0xf, 0x73, 0x1, [@generic={0x6e, 0x10, 0x2, "d0e8f81c6b3ad352efb39fcda1feaf35dee20da4efa90f19d0b0ca986bb0251e9e6eab77433f03b739adeba19056ce7206d44f13892e1c9489bd6bac590358e5aa0aab7933ad9d1fcb386a3133269123979da4304dbd6350ef391f2c03214aedd8f9a4c0c516261da974d8"}]}, 0x3, [{0x37, &(0x7f0000000ac0)=@string={0x37, 0x3, "5e13d20c8ffb3c4255a766dfab34c6317886f4509ae239c7c53999e889b682493cd523fffdea667c09562a258c59eb1d7647bab40a"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x859}}, {0xfc, &(0x7f0000000b40)=@string={0xfc, 0x3, "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"}}]})
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r2)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c810}, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000e40), r2)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x90f520a7a8614d15}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, r6, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000fc0)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001000)=<r9=>0x0)
sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000001280)={&(0x7f0000000f40), 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1c4, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x200}, @NFC_ATTR_VENDOR_SUBCMD={0x8}, @NFC_ATTR_VENDOR_DATA={0x103, 0x1f, "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"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_DATA={0x34, 0x1f, "540d5158020605500f332437ffd9291e5fab5eefba3ce469ae064c7d857f0599fe54b8ed43298d5c0f1749cf88ea3281"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_DATA={0x40, 0x1f, "fd38140ce8d766ba24996cf329179107017a78bcf70597221e93cc7f220ccf72b7e11a18fbca6da28c71c00e798b7172fc33fb37e2f8401d00cbbab9"}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20004000}, 0x240400c1)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001300), r5)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r11, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'ip6erspan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r12, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x40, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x4040)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x60, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x16, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x1aa}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x9, 0x9}}}}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x250, 0x0, 0xa, 0x53, 0x30, 0x1}, 0x5, &(0x7f0000001580)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x40d}}, {0xd1, &(0x7f0000001600)=@string={0xd1, 0x3, "df43d24b7a73c0e3cf8efebaa4faa7baaaca6a3feafc24bb35ecfc60c35a9e710137daaae0110bc85f2637a432200bf396ed2d6c0936a22da3dc78723b6fc63b134dd16fe7a952dbe6f8b6ea4ba378cdf6f9d38c4fdeb659369e51f2cb8734e7359b2658850499a5a870d4fb97fa0cb0aa400f4efa4da1b90414935fb13184c15237da0c33fe26d63b1af5002a0983615d2d19791f118d28d945163186d1aae44ac26a2209e42ee957cee664c09df39304b5889ff6d169186d510442cecfdf402ca4d4244f3b0ebcc352edf1294052"}}, {0x2e, &(0x7f0000001700)=@string={0x2e, 0x3, "684edb601c42495c8c574bc530cbf27fa1d83abb112778cfc4bd17ca9799bbe5946108cf88a90aac4067b783"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x801}}]})
recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000001800)=@ieee802154, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001880)}], 0x1}, 0x1}, {{&(0x7f0000001900)=@nl=@proc, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001980)=""/180, 0xb4}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x2, &(0x7f0000002a80)=""/11, 0xb}}, {{&(0x7f0000002ac0)=@rc={0x1f, @none}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b40)=""/123, 0x7b}, {&(0x7f0000002bc0)=""/242, 0xf2}], 0x2, &(0x7f0000002d00)=""/27, 0x1b}, 0x6}, {{&(0x7f0000002d40)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002dc0)=""/104, 0x68}, {&(0x7f0000002e40)=""/110, 0x6e}, {&(0x7f0000002ec0)=""/15, 0xf}, {&(0x7f0000002f00)=""/2, 0x2}], 0x4}, 0x74}], 0x4, 0x2000, &(0x7f0000003080)={0x77359400})
recvmsg$unix(r0, &(0x7f0000003240)={&(0x7f00000030c0)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000003140)=""/37, 0x25}], 0x1, &(0x7f00000031c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x22)

1.094318721s ago: executing program 7 (id=1740):
r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
r1 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000)

1.088245969s ago: executing program 3 (id=1741):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x658e000)
r1 = socket$inet6_sctp(0xa, 0x3, 0x84)
getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, &(0x7f0000001680))
r2 = creat(&(0x7f0000000340)='./file0\x00', 0x101)
close(r2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x38011, r3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
clock_settime(0x0, &(0x7f0000009ac0))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

986.596594ms ago: executing program 7 (id=1742):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x101480, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800060000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty}, 0x1c)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100))
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000200)='hpfs\x00', 0x48002, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000)

986.32696ms ago: executing program 3 (id=1743):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.numa_stat\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x11, 0x800000003, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendfile(r1, r2, &(0x7f00000000c0)=0x9, 0xfffffffffffffffd)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

141.291298ms ago: executing program 7 (id=1744):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

95.785863ms ago: executing program 0 (id=1745):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)

37.515817ms ago: executing program 3 (id=1746):
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000))
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac)
syz_open_dev$video(&(0x7f0000000040), 0x8, 0x200000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r1, 0x60a, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1c}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x50)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x300, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

36.538547ms ago: executing program 7 (id=1747):
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) (async)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f0000000080)='./bus\x00')
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, 0x0, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async)
r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
openat(r6, &(0x7f0000000700)='./file0\x00', 0x10542, 0x4)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r7, &(0x7f00000006c0)='cpu.weight.nice\x00', 0x2, 0x0) (async)
openat$cgroup_int(r7, &(0x7f00000006c0)='cpu.weight.nice\x00', 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket(0x1d, 0x2, 0x7) (async)
socket(0x1d, 0x2, 0x7)

36.303ms ago: executing program 0 (id=1748):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
mremap(&(0x7f0000155000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000416000/0x3000)=nil)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e)
sendfile(r0, r0, 0x0, 0x7ffff000)

4.934226ms ago: executing program 3 (id=1749):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000200)={0x7, 0x3, &(0x7f0000000100)=[0x5, 0x2, 0x1], &(0x7f0000000140)=[0xee], &(0x7f0000000180)=[0xc, 0x100, 0x0, 0x5, 0x1, 0x3], &(0x7f00000001c0)=[0xe20, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 0x9332, 0xbf]})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) (async, rerun: 32)
read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, <r3=>0x0}, 0x2020) (async, rerun: 32)
read$FUSE(r2, &(0x7f0000002280)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000042c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
r5 = openat(r2, &(0x7f0000004500)='./file0\x00', 0xe141, 0xd2)
mount$binderfs(&(0x7f0000004540), &(0x7f0000004580)='./binderfs\x00', &(0x7f00000045c0), 0x211c02, &(0x7f0000004600)={[{@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x5}}, {@max={'max', 0x3d, 0x40}}, {@stats}, {@max={'max', 0x3d, 0x401}}, {@stats}], [{@euid_lt={'euid<', r4}}, {@subj_user={'subj_user', 0x3d, '/'}}]})
write$FUSE_INIT(r5, &(0x7f00000046c0)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x2b, 0x3878, 0x240030, 0x81, 0x5, 0x8, 0x5, 0x0, 0x0, 0x40, 0x4}}, 0x50) (async)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000004740)={0x80000, 0x0, [0x4fb, 0xe1, 0x5, 0x0, 0x4, 0x7, 0x1, 0x9]}) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000047c0), 0x2000, 0x0)
write$dsp(r6, &(0x7f0000004800)="91293c7fe3684d87fb09e2a319e6f672ed65df2c743ff10c4b22f895eb961ce305bcbcff9babbc815a62ac28c110d018f95946a18cf7096ae9889120a431ba80cb5943d536e67cad71bc16a4dacbcec3a6b75608f5f26a024e5e8be60f466a36d9ed698b829c2bb325ffddd5608f4d7fe00819f7a087866faf710c9300d19184dfa409d6ba3de78e57c6bb5e1487c0a1b3c0157414758804a0293c59007ab58333494bd04d3820d4bbcd1d1231e4948adc7318d385450ce6bf38b77d421c4fe24a94b10fbdea60df59a6d8322d4a652a77c93a2da0bb51", 0xd7) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000004900)={0x1, 0x9, 0x40}) (async)
listen(r5, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000004940)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000004a00)=[@text32={0x20, &(0x7f0000004980)="c744240006000000c7442402cd94ffffc7442406000000000f01142464f30f01310f2284f0802f8d66b837010f00d02e660f3820920f0000008fc8009e0100c744240041de0000c74424020c000000c7442406000000000f011424c4e3e10ca600000000df360f07", 0x68}], 0x1, 0x58, &(0x7f0000004a40)=[@cr0={0x0, 0x2}, @cstype0={0x4, 0xe}], 0x2)
link(&(0x7f0000004a80)='./file0\x00', &(0x7f0000004ac0)='./file0\x00')
ioctl$SNAPSHOT_S2RAM(r7, 0x330b)
socketpair(0x10, 0x80000, 0x8, &(0x7f0000004b00)={<r8=>0xffffffffffffffff}) (async)
open(&(0x7f0000004b40)='./file0\x00', 0x8480, 0x100)
socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000004c80)={&(0x7f0000004b80)="812ea8d987ee7ef614974543974cc37dec315106898373fdf7eacd540aa2c0d8ce4cb27511b6aac52bf3ff5368d62ce23627c1481aacdbe9cfc1c23bb8bb5b4a30957799b91725534675429ed596f93394ac00af61ae061ce984c95b50f68071abd1cc0ca4d2c0b563c45197709c3b52e75759148dfcf88c53f978bc1716af70bc43eafe7455a03e2f4b4a5cdb37420ad3affddcd3fdd51c8bd9abb049ad19e253ac455e074fad481a32c06e5a4c019c2efbfa2f4fdd55105601afcf3a199bf8fec03985a26408e5c7371be424a8f34dbf9296e3882ef8a579918d5ff59be21f", 0xe0, <r9=>0x0}) (rerun: 64)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000004cc0)={r9})
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000004d00)) (async, rerun: 64)
mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x4, 0x50, r7, 0xf) (async, rerun: 64)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r8, 0x4366f000)

0s ago: executing program 4 (id=1750):
r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
r1 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000)

kernel console output (not intermixed with test programs):

di comedi3: 8255: I/O port conflict (0x5c952399,4)
[  243.992959][ T9192] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  244.021137][ T9192] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  244.063972][ T9192] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  244.095292][ T9192] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  244.114333][ T9192] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  244.134619][ T9192] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  244.156222][ T9192] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  244.174018][ T9192] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  244.404902][ T5895] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  244.437488][ T5895] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  244.759305][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.770849][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.835422][ T9231] /dev/rnullb0: Can't open blockdev
[  244.958702][ T5895] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  245.113053][ T5895] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  245.122406][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.131987][ T5895] usb 6-1: config 0 descriptor??
[  245.138353][ T5895] cp210x 6-1:0.0: cp210x converter detected
[  245.228774][ T5932] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  245.355811][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.364774][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.399233][ T5932] usb 5-1: Using ep0 maxpacket: 16
[  245.406280][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short
[  245.414979][ T5932] usb 5-1: config 15 has an invalid interface number: 107 but max is 0
[  245.424027][ T5932] usb 5-1: config 15 has no interface number 0
[  245.430281][ T5932] usb 5-1: config 15 interface 107 has no altsetting 0
[  245.439053][ T5932] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=a7.8c
[  245.448323][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.456593][ T5932] usb 5-1: Product: syz
[  245.460821][ T5932] usb 5-1: Manufacturer: syz
[  245.465420][ T5932] usb 5-1: SerialNumber: syz
[  245.540148][ T5895] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  245.925890][ T9241] loop6: detected capacity change from 0 to 63
[  245.943162][ T9178] buffer_io_error: 8 callbacks suppressed
[  245.943180][ T9178] Buffer I/O error on dev loop6, logical block 0, async page read
[  245.964161][ T9241] Buffer I/O error on dev loop6, logical block 0, async page read
[  245.973022][ T9178] Buffer I/O error on dev loop6, logical block 0, async page read
[  245.983963][ T9241] Buffer I/O error on dev loop6, logical block 0, async page read
[  245.994641][ T9178] Buffer I/O error on dev loop6, logical block 0, async page read
[  246.007780][ T9241] Buffer I/O error on dev loop6, logical block 0, async page read
[  246.023085][ T9178] Buffer I/O error on dev loop6, logical block 0, async page read
[  246.037704][ T9178] Buffer I/O error on dev loop6, logical block 0, async page read
[  246.409696][ T9244] /dev/rnullb0: Can't open blockdev
[  246.463991][ T9246] fuse: Bad value for 'group_id'
[  246.471447][ T9246] fuse: Bad value for 'group_id'
[  246.581432][   T30] audit: type=1326 audit(1755560148.614:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.3.830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8e58ebe9 code=0x0
[  247.148713][ T9262] /dev/rnullb0: Can't open blockdev
[  247.621963][ T5895] usb 6-1: cp210x converter now attached to ttyUSB0
[  247.630724][ T5895] usb 6-1: USB disconnect, device number 3
[  247.999147][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  248.022527][ T5932] as10x_usb: device has been detected
[  248.029243][ T5895] cp210x 6-1:0.0: device disconnected
[  248.036076][ T5932] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  248.060100][ T5932] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  248.112827][ T9276] loop6: detected capacity change from 0 to 63
[  248.121837][ T5932] as10x_usb: error during firmware upload part1
[  248.132463][ T5932] Registered device Abilis Systems DVB-Titan
[  248.134708][ T5932] usb 5-1: USB disconnect, device number 12
[  248.156634][ T9272] Buffer I/O error on dev loop6, logical block 0, async page read
[  248.171897][ T5932] Unregistered device Abilis Systems DVB-Titan
[  248.179492][ T9272] Buffer I/O error on dev loop6, logical block 0, async page read
[  248.194950][ T5932] as10x_usb: device has been disconnected
[  248.311440][ T9284] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  248.599641][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.627839][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.672743][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'.
[  248.687674][ T9296] No control pipe specified
[  248.702494][ T9296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'.
[  248.712400][ T9296] /dev/rnullb0: Can't open blockdev
[  249.314521][ T9313] /dev/rnullb0: Can't open blockdev
[  249.960690][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.025096][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.159181][ T9341] fuse: Unknown parameter 'ff$rr�&�d'
[  250.186434][ T9343] /dev/rnullb0: Can't open blockdev
[  251.073129][ T9362] /dev/rnullb0: Can't open blockdev
[  251.277107][ T9372] /dev/rnullb0: Can't open blockdev
[  251.278222][ T9369] /dev/rnullb0: Can't open blockdev
[  251.405057][ T9377] /dev/rnullb0: Can't open blockdev
[  252.150548][ T9402] /dev/rnullb0: Can't open blockdev
[  252.163913][ T9402] netlink: 808 bytes leftover after parsing attributes in process `syz.4.879'.
[  252.345026][ T9410] /dev/rnullb0: Can't open blockdev
[  252.554417][ T9414] /dev/rnullb0: Can't open blockdev
[  253.140725][ T9427] /dev/rnullb0: Can't open blockdev
[  253.196577][ T9431] /dev/rnullb0: Can't open blockdev
[  253.281361][ T9436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.892'.
[  253.290427][ T9436] tipc: Invalid UDP bearer configuration
[  253.290474][ T9436] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  253.361566][ T9442] netlink: 228 bytes leftover after parsing attributes in process `syz.5.890'.
[  253.404670][ T9442] /dev/rnullb0: Can't open blockdev
[  253.437165][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.466296][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.529477][ T9444] fuse: Bad value for 'fd'
[  253.928792][ T9458] netlink: 'syz.0.897': attribute type 1 has an invalid length.
[  253.936490][ T9458] netlink: 208 bytes leftover after parsing attributes in process `syz.0.897'.
[  254.008327][ T9458] netlink: 'syz.0.897': attribute type 1 has an invalid length.
[  254.027103][ T9458] netlink: 'syz.0.897': attribute type 2 has an invalid length.
[  254.124763][ T9465] /dev/rnullb0: Can't open blockdev
[  255.148993][ T5910] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  255.288703][ T5910] usb 6-1: device descriptor read/64, error -71
[  255.530254][ T5910] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  255.669106][ T5910] usb 6-1: device descriptor read/64, error -71
[  255.779206][ T5910] usb usb6-port1: attempt power cycle
[  255.871950][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  255.879830][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  256.119091][ T5910] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  256.149281][ T5910] usb 6-1: device descriptor read/8, error -71
[  256.398934][ T5910] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  256.434812][ T5910] usb 6-1: device descriptor read/8, error -71
[  256.474335][ T9497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.485524][ T9497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.549078][ T5910] usb usb6-port1: unable to enumerate USB device
[  257.028733][ T5910] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  257.158764][ T5910] usb 5-1: device descriptor read/64, error -71
[  257.398690][ T5910] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  257.538718][ T5910] usb 5-1: device descriptor read/64, error -71
[  257.648952][ T5910] usb usb5-port1: attempt power cycle
[  257.916543][ T9508] /dev/rnullb0: Can't open blockdev
[  257.927984][ T9507] Device name not specified.
[  257.927984][ T9507] 
[  257.935900][ T9507] /dev/rnullb0: Can't open blockdev
[  257.998827][ T5910] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  258.029743][ T5910] usb 5-1: device descriptor read/8, error -71
[  258.231675][ T5932] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  258.278704][ T5910] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  258.299250][ T5910] usb 5-1: device descriptor read/8, error -71
[  258.410284][ T5910] usb usb5-port1: unable to enumerate USB device
[  258.421605][ T5932] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  258.434312][ T5932] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.444381][ T5932] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  258.457739][ T5932] usb 6-1: config 0 interface 0 has no altsetting 0
[  258.468362][ T5932] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  258.478991][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.489277][ T5932] usb 6-1: config 0 descriptor??
[  258.725598][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'.
[  258.735595][ T9512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.745611][ T9512] netlink: 48 bytes leftover after parsing attributes in process `syz.0.918'.
[  258.908810][ T5932] hid-alps 0003:044E:120C.0014: item fetching failed at offset 5/8
[  258.917306][ T5932] hid-alps 0003:044E:120C.0014: parse failed
[  258.934278][ T5932] hid-alps 0003:044E:120C.0014: probe with driver hid-alps failed with error -22
[  258.967196][ T9514] /dev/rnullb0: Can't open blockdev
[  259.502070][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.531851][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.952989][ T9529] /dev/rnullb0: Can't open blockdev
[  260.218737][ T5910] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  260.388901][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  260.395590][ T5910] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  260.404046][ T5910] usb 5-1: config 0 has no interface number 0
[  260.412145][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  260.421605][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.429752][ T5910] usb 5-1: Product: syz
[  260.434069][ T5910] usb 5-1: Manufacturer: syz
[  260.438775][ T5910] usb 5-1: SerialNumber: syz
[  260.445103][ T5910] usb 5-1: config 0 descriptor??
[  260.749041][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.758733][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.780954][ T5910] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  260.795737][ T5910] usb 5-1: No valid video chain found.
[  260.810729][ T5910] usb 5-1: USB disconnect, device number 17
[  260.816207][ T9544] /dev/rnullb0: Can't open blockdev
[  260.877418][ T9547] /dev/rnullb0: Can't open blockdev
[  260.886605][ T9547] /dev/rnullb0: Can't open blockdev
[  260.936428][ T9551] binder: 9550:9551 ioctl c00c620f 0 returned -14
[  260.947741][ T9551] Dead loop on virtual device ip6_vti0, fix it urgently!
[  261.019172][ T5910] usb 6-1: USB disconnect, device number 9
[  261.082123][ T9556] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  261.333969][ T9574] vxcan1: tx drop: invalid da for name 0x0000000000000001
[  261.343774][ T9574] /dev/rnullb0: Can't open blockdev
[  261.372338][ T9574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.418693][ T3093] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  261.578166][ T3093] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  261.595236][ T3093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.616595][ T3093] usb 5-1: config 0 descriptor??
[  262.226779][ T3093] ath6kl: mismatched byte count 0 vs. expected 12
[  262.237353][ T3093] ath6kl: Failed to init ath6kl core: -22
[  262.245541][ T3093] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22
[  262.437887][ T3093] usb 5-1: USB disconnect, device number 18
[  262.553141][ T9604] /dev/rnullb0: Can't open blockdev
[  262.935535][ T9621] netlink: 'syz.3.955': attribute type 27 has an invalid length.
[  262.971605][ T9623] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  263.054526][ T9636] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  263.088858][ T9636] /dev/rnullb0: Can't open blockdev
[  263.333236][ T9658] fuse: Bad value for 'user_id'
[  263.346443][ T9658] fuse: Bad value for 'user_id'
[  263.606750][ T9674] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  263.615704][ T9675] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  263.858727][ T5983] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  263.912852][ T9679] /dev/rnullb0: Can't open blockdev
[  264.026689][ T5983] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  264.039891][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.049047][ T5983] usb 6-1: config 0 descriptor??
[  264.164147][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.173086][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.660304][ T5983] ath6kl: mismatched byte count 0 vs. expected 12
[  264.667042][ T5983] ath6kl: Failed to init ath6kl core: -22
[  264.674627][ T5983] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22
[  264.861964][ T5983] usb 6-1: USB disconnect, device number 10
[  265.272038][ T9699] /dev/rnullb0: Can't open blockdev
[  265.549476][ T5932] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  265.699627][ T5910] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  265.700505][ T5932] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  265.715477][ T5932] usb 5-1: config 0 has no interface number 0
[  265.721627][ T5932] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  265.730699][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.740318][ T5932] usb 5-1: config 0 descriptor??
[  265.747268][ T5932] usb 5-1: selecting invalid altsetting 1
[  265.753444][ T5932] dvb_ttusb_budget: ttusb_init_controller: error
[  265.759879][ T5932] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  265.803152][ T5932] DVB: Unable to find symbol cx22700_attach()
[  265.825397][ T5932] DVB: Unable to find symbol tda10046_attach()
[  265.831720][ T5932] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  265.852920][ T5910] usb 6-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de
[  265.862420][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  265.871110][ T5910] usb 6-1: Product: syz
[  265.875289][ T5910] usb 6-1: Manufacturer: syz
[  265.880228][ T5910] usb 6-1: SerialNumber: syz
[  265.885848][ T5910] usb 6-1: config 0 descriptor??
[  265.893197][ T5910] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state.
[  265.901859][ T5910] dvb-usb: bulk message failed: -22 (4/0)
[  265.907632][ T5910] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  265.920579][ T5910] dvb-usb: bulk message failed: -22 (5/0)
[  265.926353][ T5910] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  265.937937][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  265.947697][ T5910] dvbdev: DVB: registering new adapter (Pinnacle 400e DVB-S USB2.0)
[  265.956090][ T5910] usb 6-1: media controller created
[  265.975235][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  265.992743][ T5910] usb 6-1: selecting invalid altsetting 3
[  265.998990][ T5910] ttusb2: set interface to alts=3 failed
[  266.040065][ T5910] DVB: Unable to find symbol tda10086_attach()
[  266.046279][ T5910] dvb-usb: no frontend was attached by 'Pinnacle 400e DVB-S USB2.0'
[  266.055299][ T5910] dvb-usb: bulk message failed: -22 (4/0)
[  266.064669][ T5910] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  266.075384][ T5910] dvb-usb: bulk message failed: -22 (5/0)
[  266.081394][ T5910] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  266.091874][ T5910] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully initialized and connected.
[  266.105274][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.118891][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.755425][ T5895] usb 6-1: USB disconnect, device number 11
[  266.772242][ T5895] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully deinitialized and disconnected.
[  266.841289][ T5910] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  266.852961][ T5910] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  267.297048][ T9720] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  267.304462][ T9720] /dev/rnullb0: Can't open blockdev
[  267.778834][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  267.796450][ T9744] /dev/rnullb0: Can't open blockdev
[  267.928749][    T9] usb 6-1: Using ep0 maxpacket: 32
[  267.935422][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.948693][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.959223][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  267.965867][    T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  267.975165][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.984317][    T9] usb 6-1: config 0 descriptor??
[  268.201125][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  268.207137][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  268.218871][    T9] usb 6-1: USB disconnect, device number 12
[  268.246433][ T9749] netlink: 'syz.5.990': attribute type 83 has an invalid length.
[  268.258226][ T9749] /dev/rnullb0: Can't open blockdev
[  268.327336][ T5932] usb 5-1: USB disconnect, device number 19
[  268.621497][ T9766] /dev/rnullb0: Can't open blockdev
[  268.721294][ T9770] /dev/rnullb0: Can't open blockdev
[  268.811152][ T9775] binder: 9771:9775 ioctl c01464a6 200000000540 returned -22
[  269.378711][   T43] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  269.541671][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.554117][   T43] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  269.564027][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.576047][ T9790] netlink: 'syz.4.1004': attribute type 21 has an invalid length.
[  269.583148][   T43] usb 6-1: config 0 descriptor??
[  269.585594][ T9790] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1004'.
[  269.807709][ T5932] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  269.821463][ T5932] hid-generic 0000:0000:0000.0016: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  269.924469][ T9807] /dev/rnullb0: Can't open blockdev
[  270.041581][   T43] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor
[  270.065840][   T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0017/input/input19
[  270.171565][   T43] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  270.628846][ T9824] No control pipe specified
[  270.641159][   T43] usb 6-1: USB disconnect, device number 13
[  270.663375][ T9828] /dev/rnullb0: Can't open blockdev
[  270.865791][ T9836] /dev/rnullb0: Can't open blockdev
[  271.584312][ T9862] /dev/rnullb0: Can't open blockdev
[  272.102503][ T9874] syzkaller1: entered promiscuous mode
[  272.108149][ T9874] syzkaller1: entered allmulticast mode
[  272.129847][ T9874] /dev/rnullb0: Can't open blockdev
[  272.283011][ T9890] /dev/rnullb0: Can't open blockdev
[  272.396038][    T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  272.573385][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  272.598105][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  272.612462][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  272.623907][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  272.641122][    T9] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  272.653012][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.663600][    T9] usb 5-1: Product: syz
[  272.667822][    T9] usb 5-1: Manufacturer: syz
[  272.674457][    T9] usb 5-1: SerialNumber: syz
[  272.684703][    T9] usb 5-1: config 0 descriptor??
[  272.696613][ T9881] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  272.715164][    T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20
[  272.803929][ T6537] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa8
[  272.915876][ T9881] /dev/rnullb0: Can't open blockdev
[  272.921921][ T5932] usb 5-1: USB disconnect, device number 20
[  273.088736][    T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  273.250733][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.260948][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  273.270761][    T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  273.280070][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  273.288482][    T9] usb 6-1: SerialNumber: syz
[  273.498052][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.512722][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.529942][    T9] usb 6-1: 0:2 : does not exist
[  273.551870][    T9] usb 6-1: USB disconnect, device number 14
[  273.595112][ T9172] udevd[9172]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  273.740759][ T9915] /dev/rnullb0: Can't open blockdev
[  274.474002][ T9931] /dev/rnullb0: Can't open blockdev
[  274.524148][ T9926] omfs: Invalid superblock (0)
[  274.540841][ T9934] Invalid ELF header magic: != ELF
[  275.008755][   T43] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  275.087989][ T9941] 9p: Unknown parameter 'tran`'
[  275.169904][   T43] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  275.182649][   T43] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 16, setting to 8
[  275.193377][   T43] usb 5-1: config 1 interface 0 has no altsetting 0
[  275.202140][   T43] usb 5-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.40
[  275.211334][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.220831][   T43] usb 5-1: Product: Љ
[  275.224945][   T43] usb 5-1: Manufacturer: 抚劃쳃㽡ꠛ듨襟⬓鎾앥坅䓇뒆鰦⪨⽼ᛙ鮒읆弗畫Գ윤耽佩喥嶰攱顕䬂੣瓕楂弯驁ᐻꔑ꺟烂얠聭襑齏﷙僨읯檣锊韬ꎧ萋ꉶ受㄰พ﴿䴓廳첤烽㳭ရ쉧똖쬔磥좛烣ଇ帚晴믮М轗究皞湤ꀬ쯵䢱媬샶﹎쾜Ῠଆ龝蛦萿ꪕ
[  275.256509][   T43] usb 5-1: SerialNumber: 瑈㻞
[  275.277023][ T9934] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  275.284789][ T9934] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  275.489682][ T9948] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1054'.
[  275.498968][ T9948] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1054'.
[  275.718157][   T43] usbhid 5-1:1.0: can't add hid device: -71
[  275.724481][   T43] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  275.737102][   T43] usb 5-1: USB disconnect, device number 21
[  275.742507][ T9952] /dev/rnullb0: Can't open blockdev
[  275.755663][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1055'.
[  276.199335][ T9966] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1060'.
[  276.538760][ T5932] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  276.688725][ T5932] usb 5-1: Using ep0 maxpacket: 16
[  276.695142][ T5932] usb 5-1: config 0 has no interfaces?
[  276.703100][ T5932] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  276.713056][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.721201][ T5932] usb 5-1: Product: syz
[  276.725434][ T5932] usb 5-1: Manufacturer: syz
[  276.730143][ T5932] usb 5-1: SerialNumber: syz
[  276.736590][ T5932] usb 5-1: config 0 descriptor??
[  276.800750][ T9977] batadv_slave_0: entered promiscuous mode
[  276.807816][ T9977] batadv_slave_0: left promiscuous mode
[  276.817280][ T9977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.826038][ T9977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.834979][ T9977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.843908][ T9977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.853564][ T9977] /dev/rnullb0: Can't open blockdev
[  276.860420][ T9977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.870008][ T9977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.951486][   T43] usb 5-1: USB disconnect, device number 22
[  277.076532][ T9982] netlink: 'syz.4.1065': attribute type 11 has an invalid length.
[  277.398996][ T5932] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  277.453088][ T9993] /dev/rnullb0: Can't open blockdev
[  277.571501][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.598756][ T5932] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=c0.c5
[  277.607848][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.630518][ T5932] usb 5-1: config 0 descriptor??
[  277.838569][ T5932] usb 5-1: string descriptor 0 read error: -71
[  277.850586][ T5932] hub 5-1:0.0: bad descriptor, ignoring hub
[  277.856616][ T5932] hub 5-1:0.0: probe with driver hub failed with error -5
[  277.883355][ T6438] usb 5-1: Failed to submit usb control message: -71
[  277.891644][ T5932] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  277.893614][ T6438] usb 5-1: unable to send the bmi data to the device: -71
[  277.917826][ T6438] usb 5-1: unable to get target info from device
[  277.926860][ T5932] usb 5-1: USB disconnect, device number 23
[  277.931530][ T6438] usb 5-1: could not get target info (-71)
[  277.947182][ T6438] usb 5-1: could not probe fw (-71)
[  277.957561][ T9999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.966372][ T9999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.086052][T10007] No control pipe specified
[  278.106533][T10007] /dev/rnullb0: Can't open blockdev
[  278.644393][T10024] comedi comedi3: comedi_config --init_data is deprecated
[  278.820480][T10032] random: crng reseeded on system resumption
[  278.853679][ T5983] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  278.909898][T10031] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1082'.
[  279.028810][ T5983] usb 5-1: Using ep0 maxpacket: 16
[  279.040104][ T5983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  279.063859][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  279.084795][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  279.103303][ T5983] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  279.116282][T10037] /dev/rnullb0: Can't open blockdev
[  279.121623][ T5983] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  279.150463][ T5983] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  279.160655][ T5983] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  279.169487][ T5983] usb 5-1: Manufacturer: syz
[  279.175832][ T5983] usb 5-1: config 0 descriptor??
[  279.459076][ T5983] rc_core: IR keymap rc-hauppauge not found
[  279.465035][ T5983] Registered IR keymap rc-empty
[  279.475299][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.510203][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.530565][ T5983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  279.559905][ T5983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21
[  279.589652][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.628341][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.678775][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.694806][T10048] tmpfs: Bad value for 'mpol'
[  279.708819][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.711198][T10048] /dev/rnullb0: Can't open blockdev
[  279.772770][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.798952][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.819650][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.839436][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.855076][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1079'.
[  279.866152][T10022] Dead loop on virtual device ip6_vti0, fix it urgently!
[  279.878204][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'.
[  279.889787][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.898513][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.928952][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.951991][ T5983] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  279.964680][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.975202][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.984740][ T5983] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  279.992846][ T5983] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  280.004955][T10063] netlink: 'syz.3.1090': attribute type 10 has an invalid length.
[  280.015383][ T5983] usb 5-1: USB disconnect, device number 24
[  280.021737][T10063] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1090'.
[  280.121060][ T5865] Bluetooth: hci2: unexpected event for opcode 0x1408
[  281.952798][T10075] fuse: Unknown parameter 'Urou�p_id'
[  282.022575][T10079] /dev/rnullb0: Can't open blockdev
[  282.884184][T10095] IPVS: length: 4096 != 24
[  283.048025][T10102] /dev/rnullb0: Can't open blockdev
[  283.128693][ T5983] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  283.172921][T10113] Invalid ELF header magic: != ELF
[  283.280031][ T5983] usb 6-1: Using ep0 maxpacket: 8
[  283.291465][ T5983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  283.308394][ T5983] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  283.317843][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.335760][ T5983] usb 6-1: config 0 descriptor??
[  283.552389][ T5983] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  283.912589][T10130] loop6: detected capacity change from 0 to 63
[  283.953849][ T5983] usb 6-1: USB disconnect, device number 15
[  283.963607][ T9172] buffer_io_error: 261 callbacks suppressed
[  283.963627][ T9172] Buffer I/O error on dev loop6, logical block 0, async page read
[  284.025964][ T9172] Buffer I/O error on dev loop6, logical block 0, async page read
[  284.055246][ T9172] Buffer I/O error on dev loop6, logical block 0, async page read
[  284.081446][ T9172] Buffer I/O error on dev loop6, logical block 0, async page read
[  284.101730][ T9172] Buffer I/O error on dev loop6, logical block 0, async page read
[  284.222267][T10135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.237706][T10135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.250934][T10135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.262451][T10135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.508697][ T5983] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  284.833737][T10147] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1119'.
[  284.850292][T10146] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  284.854231][ T5983] usb 5-1: device descriptor read/64, error -71
[  285.118790][ T5983] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  285.258732][ T5983] usb 5-1: device descriptor read/64, error -71
[  285.327166][T10162] tmpfs: Unknown parameter ''
[  285.390633][ T5983] usb usb5-port1: attempt power cycle
[  285.428226][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.466912][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.614176][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.623552][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.634151][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.644290][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.652994][T10168] /dev/rnullb0: Can't open blockdev
[  285.771191][ T5983] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  285.823252][ T5983] usb 5-1: device descriptor read/8, error -71
[  285.924502][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.935445][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.993633][T10180] /dev/rnullb0: Can't open blockdev
[  286.069537][ T5983] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  286.110552][ T5983] usb 5-1: device descriptor read/8, error -71
[  286.219255][ T5983] usb usb5-port1: unable to enumerate USB device
[  286.731828][T10205] [U] 
[  286.734657][T10205] [U] K{�
[  286.737727][T10205] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[  286.744687][T10205] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[  286.760414][T10205] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[  286.770870][T10205] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[  286.806823][T10205] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[  286.830378][T10205] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[  286.841537][T10205] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[  286.853127][T10205] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s851���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[  286.876388][    C1] vkms_vblank_simulate: vblank timer overrun
[  286.897883][T10205] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[  286.916637][T10205] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[  286.963986][T10205] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[  286.972512][T10205] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[  286.986166][T10205] [U] 22��Ʃ���x?0;3u�
[  286.990350][T10205] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[  287.015385][T10205] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[  287.024693][T10205] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[  287.033388][T10205] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[  287.039566][T10205] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[  287.051906][T10205] [U] �ec�
[  287.055041][T10205] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[  287.067621][    C1] vkms_vblank_simulate: vblank timer overrun
[  287.295318][T10203] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[  287.497167][T10223] /dev/rnullb0: Can't open blockdev
[  287.503580][T10224] /dev/rnullb0: Can't open blockdev
[  287.535799][T10223] /dev/rnullb0: Can't open blockdev
[  287.711728][T10237] netlink: 'syz.3.1148': attribute type 6 has an invalid length.
[  287.764342][T10239] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1149'.
[  287.835344][T10246] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  287.886137][T10249] /dev/rnullb0: Can't open blockdev
[  288.006329][T10258] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  288.083278][   T30] audit: type=1326 audit(1755560190.114:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.3.1158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8e58ebe9 code=0x0
[  288.296255][T10274] /dev/rnullb0: Can't open blockdev
[  288.301808][ T5983] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  288.458884][ T5983] usb 5-1: Using ep0 maxpacket: 16
[  288.477541][ T5983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.493980][ T5983] usb 5-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30
[  288.521849][ T5983] usb 5-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  288.555607][ T5983] usb 5-1: config 0 interface 0 has no altsetting 0
[  288.574447][ T5983] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  288.583865][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.593550][ T5983] usb 5-1: Product: syz
[  288.597892][ T5983] usb 5-1: Manufacturer: syz
[  288.602918][ T5983] usb 5-1: SerialNumber: syz
[  288.617479][ T5983] usb 5-1: config 0 descriptor??
[  288.912427][T10289] input: syz0 as /devices/virtual/input/input23
[  289.039745][ T5895] usb 5-1: USB disconnect, device number 29
[  289.098695][ T5983] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  289.196995][T10305] syz.0.1171: attempt to access beyond end of device
[  289.196995][T10305] md0: rw=0, sector=64, nr_sectors = 8 limit=0
[  289.216018][T10305] syz.0.1171: attempt to access beyond end of device
[  289.216018][T10305] md0: rw=0, sector=120, nr_sectors = 8 limit=0
[  289.260551][T10305] Mount JFS Failure: -5
[  289.274589][ T5983] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  289.295669][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.319839][ T5983] usb 6-1: Product: syz
[  289.324064][ T5983] usb 6-1: Manufacturer: syz
[  289.349190][ T5983] usb 6-1: SerialNumber: syz
[  289.379744][ T5983] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  289.396070][ T5931] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  289.603475][T10322] /dev/rnullb0: Can't open blockdev
[  290.326092][T10346] syz.0.1179: attempt to access beyond end of device
[  290.326092][T10346] md0: rw=0, sector=64, nr_sectors = 1 limit=0
[  290.365050][T10346] syz.0.1179: attempt to access beyond end of device
[  290.365050][T10346] md0: rw=0, sector=256, nr_sectors = 1 limit=0
[  290.406731][T10346] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  290.472208][T10346] syz.0.1179: attempt to access beyond end of device
[  290.472208][T10346] md0: rw=0, sector=512, nr_sectors = 1 limit=0
[  290.500326][ T5931] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  290.513742][T10346] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  290.526087][ T5931] ath9k_htc: Failed to initialize the device
[  290.548642][T10346] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[  290.564241][ T5931] usb 6-1: ath9k_htc: USB layer deinitialized
[  290.576459][T10346] UDF-fs: Scanning with blocksize 512 failed
[  290.637949][T10346] syz.0.1179: attempt to access beyond end of device
[  290.637949][T10346] md0: rw=0, sector=64, nr_sectors = 2 limit=0
[  290.683364][T10346] syz.0.1179: attempt to access beyond end of device
[  290.683364][T10346] md0: rw=0, sector=512, nr_sectors = 2 limit=0
[  290.699935][T10346] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  290.722606][T10346] syz.0.1179: attempt to access beyond end of device
[  290.722606][T10346] md0: rw=0, sector=1024, nr_sectors = 2 limit=0
[  290.737760][T10346] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  290.766381][T10346] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[  290.778962][T10346] UDF-fs: Scanning with blocksize 1024 failed
[  290.788181][ T5983] usb 6-1: USB disconnect, device number 16
[  290.797543][T10346] syz.0.1179: attempt to access beyond end of device
[  290.797543][T10346] md0: rw=0, sector=64, nr_sectors = 4 limit=0
[  290.813446][T10346] syz.0.1179: attempt to access beyond end of device
[  290.813446][T10346] md0: rw=0, sector=1024, nr_sectors = 4 limit=0
[  290.827764][T10346] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  290.837702][T10346] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  290.849878][T10346] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[  290.857600][T10346] UDF-fs: Scanning with blocksize 2048 failed
[  290.866933][T10346] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256
[  290.877909][T10363] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  290.887925][T10346] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512
[  290.898800][T10346] UDF-fs: warning (device md0): udf_load_vrs: No anchor found
[  290.910002][T10346] UDF-fs: Scanning with blocksize 4096 failed
[  290.916342][T10346] UDF-fs: warning (device md0): udf_fill_super: No partition found (1)
[  290.978825][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout
[  290.985382][    T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  290.992472][    T9] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  291.028834][ T5931] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  291.072976][T10374] /dev/rnullb0: Can't open blockdev
[  291.080568][T10374] /dev/rnullb0: Can't open blockdev
[  291.145673][T10381] /dev/rnullb0: Can't open blockdev
[  291.166801][T10381] input: syz1 as /devices/virtual/input/input24
[  291.181636][T10381] input: failed to attach handler leds to device input24, error: -6
[  291.186226][T10383] syzkaller1: entered promiscuous mode
[  291.207925][ T5931] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  291.217269][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.238202][T10383] syzkaller1: entered allmulticast mode
[  291.246073][ T5931] usb 5-1: Product: syz
[  291.255587][ T5931] usb 5-1: Manufacturer: syz
[  291.265961][ T5931] usb 5-1: SerialNumber: syz
[  291.281323][ T5931] usb 5-1: config 0 descriptor??
[  291.462767][T10396] /dev/rnullb0: Can't open blockdev
[  291.503449][T10398] /dev/rnullb0: Can't open blockdev
[  291.521083][ T5931] usb-storage 5-1:0.0: USB Mass Storage device detected
[  291.604188][ T5931] usb 5-1: USB disconnect, device number 30
[  291.794714][T10417] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  291.825523][T10422] /dev/rnullb0: Can't open blockdev
[  291.834117][T10422] kernel profiling enabled (shift: 8)
[  292.026159][T10437] loop6: detected capacity change from 0 to 63
[  292.052579][ T9172] Buffer I/O error on dev loop6, logical block 0, async page read
[  292.085260][ T9172] Buffer I/O error on dev loop6, logical block 0, async page read
[  292.121483][ T9172] Buffer I/O error on dev loop6, logical block 0, async page read
[  292.167892][ T9172] Buffer I/O error on dev loop6, logical block 0, async page read
[  292.185989][ T9172] Buffer I/O error on dev loop6, logical block 0, async page read
[  292.417413][T10461] No control pipe specified
[  292.418000][T10463] /dev/rnullb0: Can't open blockdev
[  292.792704][T10481] /dev/rnullb0: Can't open blockdev
[  292.922753][T10485] net veth1_virt_wifi ������: renamed from virt_wifi0
[  293.060327][    T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  293.069055][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout
[  293.076495][    T9] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  293.287528][T10500] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  293.350547][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'.
[  293.373849][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'.
[  294.283603][T10526] fuse: Bad value for 'fd'
[  294.377826][T10531] /dev/rnullb0: Can't open blockdev
[  294.384319][T10530] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  294.392654][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1225'.
[  294.401725][   T30] audit: type=1326 audit(1755560196.424:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.5.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54a938ebe9 code=0x7fc00000
[  294.426760][T10530] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  294.435398][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1225'.
[  294.455293][T10535] loop6: detected capacity change from 0 to 63
[  294.461827][T10530] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  294.464333][ T9272] Buffer I/O error on dev loop6, logical block 0, async page read
[  294.474690][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1225'.
[  294.482039][T10535] Buffer I/O error on dev loop6, logical block 0, async page read
[  294.491448][T10530] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  294.495894][ T9272] Buffer I/O error on dev loop6, logical block 0, async page read
[  294.504182][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1225'.
[  294.511317][T10535] Buffer I/O error on dev loop6, logical block 0, async page read
[  294.522479][T10530] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  294.529388][ T9272] Buffer I/O error on dev loop6, logical block 0, async page read
[  294.545723][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1225'.
[  294.555079][T10530] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  294.564682][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1225'.
[  294.576205][T10530] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  294.586775][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1225'.
[  294.597006][T10530] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  294.605015][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1225'.
[  294.614494][T10530] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  294.622897][T10530] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  295.138802][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout
[  295.144938][    T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  295.151177][    T9] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  297.218865][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout
[  297.224990][    T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  297.231218][    T9] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  299.299995][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout
[  301.378751][    T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  301.378803][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout
[  301.384894][    T9] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  301.487771][T10554] /dev/rnullb0: Can't open blockdev
[  301.758693][   T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  301.791446][T10577] validate_nla: 55 callbacks suppressed
[  301.791468][T10577] netlink: 'syz.5.1241': attribute type 2 has an invalid length.
[  301.806859][T10577] netlink: 'syz.5.1241': attribute type 1 has an invalid length.
[  301.918712][   T43] usb 5-1: Using ep0 maxpacket: 32
[  301.933718][   T43] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0
[  301.945974][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.955012][   T43] usb 5-1: Product: syz
[  301.963090][   T43] usb 5-1: Manufacturer: syz
[  301.967764][   T43] usb 5-1: SerialNumber: syz
[  301.977470][   T43] usb 5-1: config 0 descriptor??
[  301.985689][   T43] usb 5-1: ucan: probing device on interface #0
[  301.993695][   T43] usb 5-1: ucan: invalid EP count (0)
[  302.000775][   T43] usb 5-1: ucan: probe failed; try to update the device firmware
[  302.186795][T10560] /dev/rnullb0: Can't open blockdev
[  302.197885][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.208520][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.231360][   T43] usb 5-1: USB disconnect, device number 31
[  302.916321][T10623] __nla_validate_parse: 58 callbacks suppressed
[  302.916342][T10623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1256'.
[  303.125527][T10632] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  303.125527][T10632]    program syz.0.1260 not setting count and/or reply_len properly
[  303.312856][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.336393][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.600203][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  305.794949][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  305.816960][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  305.838932][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  305.914474][    T9] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  305.933839][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.963105][    T9] usb 6-1: Product: syz
[  305.967381][    T9] usb 6-1: Manufacturer: syz
[  306.006951][    T9] usb 6-1: SerialNumber: syz
[  306.051174][    T9] usb 6-1: config 0 descriptor??
[  306.094143][    T9] iguanair 6-1:0.0: probe with driver iguanair failed with error -12
[  306.105521][ T5931] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  306.453197][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.516470][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.600227][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.644298][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.361731][T10658] FAULT_INJECTION: forcing a failure.
[  307.361731][T10658] name failslab, interval 1, probability 0, space 0, times 1
[  307.388731][T10658] CPU: 1 UID: 0 PID: 10658 Comm: syz.0.1268 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) 
[  307.388762][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  307.388774][T10658] Call Trace:
[  307.388781][T10658]  <TASK>
[  307.388789][T10658]  dump_stack_lvl+0x189/0x250
[  307.388821][T10658]  ? __pfx____ratelimit+0x10/0x10
[  307.388843][T10658]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.388868][T10658]  ? __pfx__printk+0x10/0x10
[  307.388895][T10658]  ? __pfx___might_resched+0x10/0x10
[  307.388919][T10658]  ? lock_acquire+0x5f/0x360
[  307.388941][T10658]  should_fail_ex+0x414/0x560
[  307.388971][T10658]  should_failslab+0xa8/0x100
[  307.388992][T10658]  __kmalloc_noprof+0xcb/0x4f0
[  307.389011][T10658]  ? kfree+0x4d/0x440
[  307.389026][T10658]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  307.389055][T10658]  tomoyo_realpath_from_path+0xe3/0x5d0
[  307.389083][T10658]  ? tomoyo_domain+0xd9/0x130
[  307.389102][T10658]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  307.389124][T10658]  tomoyo_path_number_perm+0x1e8/0x5a0
[  307.389147][T10658]  ? lock_release+0x4b/0x3e0
[  307.389166][T10658]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  307.389196][T10658]  ? rcu_is_watching+0x15/0xb0
[  307.389221][T10658]  ? lock_release+0x4b/0x3e0
[  307.389240][T10658]  ? vfs_write+0x956/0xb30
[  307.389264][T10658]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  307.389295][T10658]  ? lock_release+0x4b/0x3e0
[  307.389318][T10658]  ? __fget_files+0x2a/0x420
[  307.389342][T10658]  ? __fget_files+0x3a0/0x420
[  307.389366][T10658]  ? __fget_files+0x2a/0x420
[  307.389391][T10658]  security_file_ioctl+0xcb/0x2d0
[  307.389414][T10658]  __se_sys_ioctl+0x47/0x170
[  307.389435][T10658]  do_syscall_64+0xfa/0x3b0
[  307.389457][T10658]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.389475][T10658]  ? clear_bhb_loop+0x60/0xb0
[  307.389495][T10658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.389513][T10658] RIP: 0033:0x7f1d2758ebe9
[  307.389529][T10658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.389546][T10658] RSP: 002b:00007f1d28338038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  307.389567][T10658] RAX: ffffffffffffffda RBX: 00007f1d277b5fa0 RCX: 00007f1d2758ebe9
[  307.389581][T10658] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 0000000000000007
[  307.389593][T10658] RBP: 00007f1d28338090 R08: 0000000000000000 R09: 0000000000000000
[  307.389605][T10658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.389616][T10658] R13: 00007f1d277b6038 R14: 00007f1d277b5fa0 R15: 00007ffefef12598
[  307.389636][T10658]  </TASK>
[  307.389644][T10658] ERROR: Out of memory at tomoyo_realpath_from_path.
[  307.724451][T10660] /dev/rnullb0: Can't open blockdev
[  307.762019][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'.
[  307.829314][T10665] /dev/rnullb0: Can't open blockdev
[  308.254217][    T9] usb 6-1: USB disconnect, device number 17
[  308.936185][T10684] fuse: Bad value for 'group_id'
[  308.955689][T10684] fuse: Bad value for 'group_id'
[  309.147383][T10693] /dev/rnullb0: Can't open blockdev
[  309.185217][T10698] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  309.195007][T10698] /dev/rnullb0: Can't open blockdev
[  309.218238][T10698] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  309.225622][T10698] /dev/rnullb0: Can't open blockdev
[  309.315200][T10706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.324824][ T5983] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  309.350864][T10706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.374905][T10706] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  309.383136][T10706] /dev/rnullb0: Can't open blockdev
[  309.446461][T10710] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1285'.
[  309.455953][T10709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1285'.
[  309.475122][T10710] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  309.490730][ T5983] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  309.508706][ T5983] usb 6-1: config 0 has no interface number 0
[  309.520658][ T5983] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  309.539297][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.552109][ T5983] usb 6-1: Product: syz
[  309.556321][ T5983] usb 6-1: Manufacturer: syz
[  309.561974][ T5983] usb 6-1: SerialNumber: syz
[  309.578523][ T5983] usb 6-1: config 0 descriptor??
[  309.801768][ T5983] usb 6-1: Found UVC 0.08 device syz (046d:0823)
[  309.808513][ T5983] usb 6-1: No valid video chain found.
[  309.815735][ T5983] usb 6-1: USB disconnect, device number 18
[  310.019188][    T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  310.201087][    T9] usb 5-1: config 1 has an invalid interface number: 4 but max is 2
[  310.218668][    T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  310.237602][    T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  310.257945][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  310.278201][    T9] usb 5-1: config 1 has no interface number 1
[  310.288420][    T9] usb 5-1: too many endpoints for config 1 interface 4 altsetting 250: 155, using maximum allowed: 30
[  310.318783][    T9] usb 5-1: config 1 interface 4 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 155
[  310.358642][    T9] usb 5-1: config 1 interface 4 has no altsetting 0
[  310.377274][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  310.397083][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.407193][    T9] usb 5-1: Product: я
[  310.417303][    T9] usb 5-1: Manufacturer: с
[  310.427422][    T9] usb 5-1: SerialNumber: 뻙뒢옍⚿ヹힸ稡饎ゾ껸ᰆ졀怳ⶁ䙳鷎녟ฉ砅춥埴槼牖蔑⎨ᄤ匊뇜瘆셅≥㥖븐⡸어
[  310.738409][    T9] usb 5-1: 0:2 : does not exist
[  310.794005][    T9] usb 5-1: USB disconnect, device number 33
[  310.905874][T10593] udevd[10593]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.448350][T10753] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  313.458460][T10753] /dev/rnullb0: Can't open blockdev
[  314.513367][T10786] /dev/rnullb0: Can't open blockdev
[  314.558672][ T5983] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  314.728826][ T5983] usb 6-1: Using ep0 maxpacket: 16
[  314.741780][ T5983] usb 6-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba
[  314.764287][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.789969][ T5983] usb 6-1: Product: syz
[  314.798913][ T5983] usb 6-1: Manufacturer: syz
[  314.803930][ T5983] usb 6-1: SerialNumber: syz
[  314.829044][ T5983] usb 6-1: config 0 descriptor??
[  315.052266][ T5983] snd-usb-hiface 6-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  315.105051][ T5983] usb 6-1: USB disconnect, device number 19
[  316.357587][T10814] /dev/rnullb0: Can't open blockdev
[  316.379296][T10813] /dev/rnullb0: Can't open blockdev
[  316.933385][T10828] tmpfs: Bad value for 'mpol'
[  316.945914][T10828] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  316.989112][T10829] /dev/rnullb0: Can't open blockdev
[  317.025847][T10833] /dev/rnullb0: Can't open blockdev
[  317.073082][T10837] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  317.079652][T10837] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  317.088029][T10837] vhci_hcd vhci_hcd.0: Device attached
[  317.095562][T10837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.104372][T10837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.300682][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.307367][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  317.317109][   T43] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  317.368728][ T5983] usb 40-1: SetAddress Request (2) to port 0
[  317.374837][ T5983] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  317.493276][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.504324][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.515885][   T43] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  317.520962][T10838] vhci_hcd: connection reset by peer
[  317.525431][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.540350][   T43] usb 6-1: config 0 descriptor??
[  317.545465][ T6537] vhci_hcd: stop threads
[  317.551624][ T6537] vhci_hcd: release socket
[  317.558517][ T6537] vhci_hcd: disconnect device
[  317.956189][   T43] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0
[  317.963791][   T43] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0
[  317.973519][   T43] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0018/input/input27
[  317.992613][   T43] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  318.144509][T10856] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  318.217193][  T981] usb 6-1: USB disconnect, device number 20
[  318.597255][T10869] /dev/rnullb0: Can't open blockdev
[  318.884897][T10877] /dev/rnullb0: Can't open blockdev
[  319.076875][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.089523][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.267118][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'.
[  319.528718][  T981] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  319.658405][T10894] /dev/rnullb0: Can't open blockdev
[  319.667347][T10895] /dev/rnullb0: Can't open blockdev
[  319.680017][  T981] usb 5-1: Using ep0 maxpacket: 16
[  319.692997][  T981] usb 5-1: unable to read config index 0 descriptor/start: -61
[  319.708176][  T981] usb 5-1: can't read configurations, error -61
[  319.843381][  T981] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  319.972584][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1352'.
[  320.008991][  T981] usb 5-1: Using ep0 maxpacket: 16
[  320.023293][  T981] usb 5-1: unable to read config index 0 descriptor/start: -61
[  320.035470][  T981] usb 5-1: can't read configurations, error -61
[  320.096764][  T981] usb usb5-port1: attempt power cycle
[  320.438795][  T981] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  320.459684][  T981] usb 5-1: Using ep0 maxpacket: 16
[  320.466654][  T981] usb 5-1: unable to read config index 0 descriptor/start: -61
[  320.476335][  T981] usb 5-1: can't read configurations, error -61
[  320.608900][  T981] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  320.640377][  T981] usb 5-1: Using ep0 maxpacket: 16
[  320.647262][  T981] usb 5-1: unable to read config index 0 descriptor/start: -61
[  320.661823][  T981] usb 5-1: can't read configurations, error -61
[  320.680915][  T981] usb usb5-port1: unable to enumerate USB device
[  320.837765][   T43] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  320.847234][   T43] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  320.958434][T10921] /dev/rnullb0: Can't open blockdev
[  321.515120][T10939] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached
[  321.548360][T10939] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1359'.
[  322.071981][T10944] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1360'.
[  322.084662][T10944] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1360'.
[  322.192697][T10947] blktrace: Concurrent blktraces are not allowed on rnullb0
[  322.204258][T10947] ./cgroup: Can't lookup blockdev
[  322.421761][ T5983] usb 40-1: device descriptor read/8, error -110
[  322.483965][T10951] tipc: Started in network mode
[  322.489187][T10951] tipc: Node identity 2, cluster identity 4711
[  322.496991][T10951] tipc: Node number set to 2
[  322.657008][T10960] fuse: Bad value for 'group_id'
[  322.672906][T10960] fuse: Bad value for 'group_id'
[  322.780006][T10963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.807559][T10963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.817410][ T5983] usb usb40-port1: attempt power cycle
[  322.826388][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'.
[  323.188735][ T5910] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  323.362273][ T5910] usb 6-1: Using ep0 maxpacket: 8
[  323.375102][T10985] /dev/rnullb0: Can't open blockdev
[  323.382907][ T5983] usb usb40-port1: unable to enumerate USB device
[  323.401595][ T5910] usb 6-1: config index 0 descriptor too short (expected 28277, got 36)
[  323.420088][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.424512][T10985] /dev/rnullb0: Can't open blockdev
[  323.437304][T10987] fuse: Bad value for 'group_id'
[  323.438806][ T5910] usb 6-1: config 0 has no interfaces?
[  323.447880][ T5910] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  323.448945][T10987] fuse: Bad value for 'group_id'
[  323.457109][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.488335][ T5910] usb 6-1: config 0 descriptor??
[  323.570457][T10994] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  323.577033][T10994] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  323.593320][T10994] vhci_hcd vhci_hcd.0: Device attached
[  323.626223][T10998] bio_check_eod: 5 callbacks suppressed
[  323.626242][T10998] syz.0.1377: attempt to access beyond end of device
[  323.626242][T10998] md0: rw=0, sector=0, nr_sectors = 1 limit=0
[  323.651937][T10998] FAT-fs (md0): unable to read boot sector
[  323.662437][T10995] vhci_hcd: connection closed
[  323.662736][ T6440] vhci_hcd: stop threads
[  323.672269][ T6440] vhci_hcd: release socket
[  323.676708][ T6440] vhci_hcd: disconnect device
[  323.989996][T10997] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  324.576941][T11010] /dev/rnullb0: Can't open blockdev
[  324.776363][T11015] /dev/rnullb0: Can't open blockdev
[  324.826710][T11021] fuse: Bad value for 'group_id'
[  324.832239][T11021] fuse: Bad value for 'group_id'
[  324.878800][ T5932] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  324.995519][T11027] netlink: 'syz.3.1389': attribute type 17 has an invalid length.
[  325.003880][T11027] netlink: 'syz.3.1389': attribute type 16 has an invalid length.
[  325.012082][T11027] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1389'.
[  325.030105][ T5932] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  325.039548][ T5932] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  325.050385][ T5932] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  325.061464][ T5932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  325.075387][ T5932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  325.090718][ T5932] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  325.095176][T11029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.100060][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  325.112872][T11029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.117927][ T5932] usb 5-1: Product: syz
[  325.128375][ T5932] usb 5-1: Manufacturer: syz
[  325.137457][ T5932] cdc_wdm 5-1:1.0: skipping garbage
[  325.143005][ T5932] cdc_wdm 5-1:1.0: skipping garbage
[  325.151995][ T5932] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  325.157911][ T5932] cdc_wdm 5-1:1.0: Unknown control protocol
[  325.342108][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  325.348747][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  325.355136][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  325.361766][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  325.368154][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  325.374773][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  325.381200][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  325.387812][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  325.394215][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  325.401004][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  325.407336][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  325.414218][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  325.420721][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  325.427426][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  325.433697][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  325.440309][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  325.446547][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  325.453158][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  325.459565][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  325.466279][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  325.473096][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  325.481973][ T5932] usb 5-1: USB disconnect, device number 38
[  325.826393][ T5932] usb 6-1: USB disconnect, device number 21
[  325.919511][T11035] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  325.926643][T11035] /dev/rnullb0: Can't open blockdev
[  326.292482][T11050] erofs (device nullb0): cannot find valid erofs superblock
[  326.311252][  T981] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  326.483167][  T981] usb 6-1: config 3 has an invalid interface number: 106 but max is 0
[  326.491686][  T981] usb 6-1: config 3 has no interface number 0
[  326.503457][  T981] usb 6-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=57.cc
[  326.514126][  T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.524748][  T981] usb 6-1: Product: syz
[  326.529787][  T981] usb 6-1: Manufacturer: syz
[  326.534523][  T981] usb 6-1: SerialNumber: syz
[  326.546117][  T981] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e
[  326.892679][  T981] gspca_sn9c20x: Write register 1000 failed -71
[  326.903489][  T981] gspca_sn9c20x: Device initialization failed
[  326.911433][  T981] gspca_sn9c20x 6-1:3.106: probe with driver gspca_sn9c20x failed with error -71
[  326.924987][  T981] usb 6-1: USB disconnect, device number 22
[  328.141049][T11101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.148978][T11103] /dev/rnullb0: Can't open blockdev
[  328.352047][T11112] random: crng reseeded on system resumption
[  328.472056][T11115] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  328.723424][   T30] audit: type=1326 audit(1755560230.754:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.3.1421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f8e58ebe9 code=0x0
[  328.879612][    T9] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  329.030470][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  329.040938][    T9] usb 5-1: config 6 has an invalid interface number: 128 but max is 3
[  329.049366][    T9] usb 5-1: config 6 has an invalid interface number: 145 but max is 3
[  329.057598][    T9] usb 5-1: config 6 has an invalid interface number: 69 but max is 3
[  329.065864][    T9] usb 5-1: config 6 has an invalid interface number: 216 but max is 3
[  329.074291][    T9] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  329.083097][    T9] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  329.091835][    T9] usb 5-1: config 6 has an invalid interface number: 87 but max is 3
[  329.099955][    T9] usb 5-1: config 6 has 5 interfaces, different from the descriptor's value: 4
[  329.108963][    T9] usb 5-1: config 6 has no interface number 0
[  329.115075][    T9] usb 5-1: config 6 has no interface number 1
[  329.121220][    T9] usb 5-1: config 6 has no interface number 2
[  329.127439][    T9] usb 5-1: config 6 has no interface number 3
[  329.133613][    T9] usb 5-1: config 6 has no interface number 4
[  329.139970][    T9] usb 5-1: config 6 interface 145 altsetting 8 endpoint 0xF has invalid maxpacket 62406, setting to 64
[  329.151135][    T9] usb 5-1: config 6 interface 145 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  329.162096][    T9] usb 5-1: config 6 interface 145 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64
[  329.173020][    T9] usb 5-1: config 6 interface 145 altsetting 8 has an endpoint descriptor with address 0xC4, changing to 0x84
[  329.185188][    T9] usb 5-1: config 6 interface 145 altsetting 8 endpoint 0x84 has an invalid bInterval 222, changing to 4
[  329.196556][    T9] usb 5-1: config 6 interface 145 altsetting 8 endpoint 0x84 has invalid maxpacket 16053, setting to 1023
[  329.207922][    T9] usb 5-1: config 6 interface 145 altsetting 8 endpoint 0x7 has invalid maxpacket 1024, setting to 1023
[  329.219243][    T9] usb 5-1: config 6 interface 145 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  329.230181][    T9] usb 5-1: config 6 interface 145 altsetting 8 endpoint 0x8 has invalid wMaxPacketSize 0
[  329.240273][    T9] usb 5-1: config 6 interface 145 altsetting 8 has a duplicate endpoint with address 0x4, skipping
[  329.251054][    T9] usb 5-1: config 6 interface 145 altsetting 8 endpoint 0x5 has invalid maxpacket 511, setting to 64
[  329.261977][    T9] usb 5-1: too many endpoints for config 6 interface 69 altsetting 95: 166, using maximum allowed: 30
[  329.272974][    T9] usb 5-1: config 6 interface 69 altsetting 95 has a duplicate endpoint with address 0xA, skipping
[  329.283708][    T9] usb 5-1: config 6 interface 69 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 166
[  329.297143][    T9] usb 5-1: config 6 interface 216 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  329.308126][    T9] usb 5-1: config 6 interface 216 altsetting 6 has a duplicate endpoint with address 0x5, skipping
[  329.318935][    T9] usb 5-1: config 6 interface 216 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[  329.329912][    T9] usb 5-1: config 6 interface 216 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[  329.340943][    T9] usb 5-1: config 6 interface 216 altsetting 6 has a duplicate endpoint with address 0xD, skipping
[  329.351747][    T9] usb 5-1: config 6 interface 216 altsetting 6 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  329.362807][    T9] usb 5-1: config 6 interface 216 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  329.373818][    T9] usb 5-1: config 6 interface 216 altsetting 6 has a duplicate endpoint with address 0xF, skipping
[  329.384614][    T9] usb 5-1: config 6 interface 216 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  329.395509][    T9] usb 5-1: config 6 interface 216 altsetting 6 has an endpoint descriptor with address 0x7D, changing to 0xD
[  329.407189][    T9] usb 5-1: config 6 interface 216 altsetting 6 has a duplicate endpoint with address 0xD, skipping
[  329.417922][    T9] usb 5-1: config 6 interface 216 altsetting 6 has a duplicate endpoint with address 0xD, skipping
[  329.428673][    T9] usb 5-1: config 6 interface 216 altsetting 6 has a duplicate endpoint with address 0xF, skipping
[  329.439517][    T9] usb 5-1: config 6 interface 216 altsetting 6 has 16 endpoint descriptors, different from the interface descriptor's value: 15
[  329.453087][    T9] usb 5-1: config 6 interface 87 altsetting 8 has a duplicate endpoint with address 0x3, skipping
[  329.464236][    T9] usb 5-1: config 6 interface 87 altsetting 8 has a duplicate endpoint with address 0xA, skipping
[  329.476160][    T9] usb 5-1: config 6 interface 128 has no altsetting 0
[  329.483235][    T9] usb 5-1: config 6 interface 145 has no altsetting 0
[  329.490058][    T9] usb 5-1: config 6 interface 69 has no altsetting 0
[  329.496755][    T9] usb 5-1: config 6 interface 216 has no altsetting 0
[  329.503642][    T9] usb 5-1: config 6 interface 87 has no altsetting 0
[  329.512365][    T9] usb 5-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=ab.39
[  329.521493][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.529643][    T9] usb 5-1: Product: 〉
[  329.534409][    T9] usb 5-1: Manufacturer: 䀁
[  329.539634][    T9] usb 5-1: SerialNumber: 希耟ﴡ醱꫓Ⓗ炶珈⁑舕읬秽簥ｩ캐ᶶ랱䴷ၾ朜鉌筯⎾ﴖ즲ⷛ粒㚩爡頞⤴힦廄㤷ퟕ퇺疞쒗Ꜹ珪蔅ᴺ躳沵ꡰ梫⒣ﬖ滑裊擤⽪ꈝ陟죏趢吘촟嫚裚記ጘ푗싡횐솽⾌柌ಅ藜
[  329.564842][    C0] vkms_vblank_simulate: vblank timer overrun
[  329.778223][T11117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.787167][T11117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.811950][T11117] /dev/rnullb0: Can't open blockdev
[  329.870665][    T9] usb 5-1: selecting invalid altsetting 3
[  329.876500][    T9] comedi comedi5: could not set alternate setting 3 in high speed
[  329.884586][    T9] usbduxsigma 5-1:6.128: driver 'usbduxsigma' failed to auto-configure device.
[  329.894620][    T9] usbduxsigma 5-1:6.128: probe with driver usbduxsigma failed with error -22
[  329.906100][    T9] usb 5-1: selecting invalid altsetting 3
[  329.911984][    T9] comedi comedi5: could not set alternate setting 3 in high speed
[  329.920964][    T9] usbduxsigma 5-1:6.145: driver 'usbduxsigma' failed to auto-configure device.
[  329.931072][    T9] usbduxsigma 5-1:6.145: probe with driver usbduxsigma failed with error -22
[  329.946732][    T9] usb 5-1: selecting invalid altsetting 3
[  329.952643][    T9] comedi comedi5: could not set alternate setting 3 in high speed
[  329.960519][    T9] usbduxsigma 5-1:6.69: driver 'usbduxsigma' failed to auto-configure device.
[  329.970954][    T9] usbduxsigma 5-1:6.69: probe with driver usbduxsigma failed with error -22
[  329.982845][    T9] usb 5-1: selecting invalid altsetting 3
[  329.989336][    T9] comedi comedi5: could not set alternate setting 3 in high speed
[  329.997250][    T9] usbduxsigma 5-1:6.216: driver 'usbduxsigma' failed to auto-configure device.
[  330.007329][    T9] usbduxsigma 5-1:6.216: probe with driver usbduxsigma failed with error -22
[  330.022535][    T9] usb 5-1: selecting invalid altsetting 3
[  330.028303][    T9] comedi comedi5: could not set alternate setting 3 in high speed
[  330.036919][    T9] usbduxsigma 5-1:6.87: driver 'usbduxsigma' failed to auto-configure device.
[  330.048316][    T9] usbduxsigma 5-1:6.87: probe with driver usbduxsigma failed with error -22
[  330.060025][    T9] usb 5-1: USB disconnect, device number 39
[  330.445414][T11128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1424'.
[  330.611582][T11146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.625495][T11146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.687101][T11148] tmpfs: Invalid uid '0x00000000ffffffff'
[  330.694976][T11148] /dev/rnullb0: Can't open blockdev
[  331.183510][T11150] /dev/rnullb0: Can't open blockdev
[  331.189133][T11151] /dev/rnullb0: Can't open blockdev
[  331.525051][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.539512][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.553206][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.563901][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.619221][T11165] /dev/rnullb0: Can't open blockdev
[  331.722380][T11178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.732569][T11178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.868692][    T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  333.004795][    T9] usb 5-1: device descriptor read/64, error -71
[  333.248940][    T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  333.382717][    T9] usb 5-1: device descriptor read/64, error -71
[  333.500497][    T9] usb usb5-port1: attempt power cycle
[  333.848752][    T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  333.880515][    T9] usb 5-1: device descriptor read/8, error -71
[  334.138784][    T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  334.163051][    T9] usb 5-1: device descriptor read/8, error -71
[  334.291611][    T9] usb usb5-port1: unable to enumerate USB device
[  334.816829][   T30] audit: type=1800 audit(1755560236.844:33): pid=11213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1448" name="bus" dev="tmpfs" ino=2127 res=0 errno=0
[  334.865652][T11215] /dev/rnullb0: Can't open blockdev
[  334.996721][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.007026][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.039523][T11237] /dev/rnullb0: Can't open blockdev
[  335.094215][T11243] /dev/rnullb0: Can't open blockdev
[  335.277319][T11259] affs: No valid root block on device nullb0
[  335.422357][T11269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.445134][T11270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1458'.
[  335.458959][T11269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.731926][T11274] /dev/rnullb0: Can't open blockdev
[  336.099048][ T5910] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  336.262719][T11281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.271736][T11281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.280850][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short
[  336.289245][ T5910] usb 5-1: not running at top speed; connect to a high speed hub
[  336.297877][ T5910] usb 5-1: config 252 has an invalid interface number: 127 but max is 0
[  336.307180][ T5910] usb 5-1: config 252 has no interface number 0
[  336.315313][ T5910] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=7b.44
[  336.324438][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.332478][ T5910] usb 5-1: Product: syz
[  336.336742][ T5910] usb 5-1: Manufacturer: syz
[  336.341689][ T5910] usb 5-1: SerialNumber: syz
[  336.732650][T11288] /dev/rnullb0: Can't open blockdev
[  336.756275][ T5910] snd_usb_variax 5-1:252.127: Line 6 Variax Workbench found
[  336.765376][ T5910] usb 5-1: selecting invalid altsetting 1
[  336.772294][ T5910] snd_usb_variax 5-1:252.127: set_interface failed
[  336.781727][ T5910] snd_usb_variax 5-1:252.127: Line 6 Variax Workbench now disconnected
[  336.785079][T11292] IPVS: length: 68 != 24
[  336.791944][ T5910] snd_usb_variax 5-1:252.127: probe with driver snd_usb_variax failed with error -22
[  336.807470][ T5910] usb 5-1: USB disconnect, device number 44
[  336.872587][T11299] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.1468'.
[  336.905578][T11301] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1469'.
[  337.548846][    T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  337.700658][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  337.712086][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.724082][    T9] usb 5-1: config 0 descriptor??
[  338.075212][T11302] syz.0.1469 (11302) used greatest stack depth: 17648 bytes left
[  338.139200][    T9] ath6kl: Unsupported hardware version: 0xc8979361
[  338.146019][    T9] ath6kl: Failed to init ath6kl core: -22
[  338.152970][    T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22
[  338.457885][T11319] /dev/rnullb0: Can't open blockdev
[  339.372238][T11325] /dev/rnullb0: Can't open blockdev
[  339.572222][T11329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.581104][T11329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.714248][T11334] /dev/rnullb0: Can't open blockdev
[  339.792115][T11329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.800925][T11329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.089286][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1486'.
[  340.103450][T11342] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  340.103450][T11342]    program syz.0.1486 not setting count and/or reply_len properly
[  340.364994][ T5917] usb 5-1: USB disconnect, device number 45
[  341.354538][   T30] audit: type=1326 audit(1755560243.384:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11357 comm="syz.4.1490" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ae4d8ebe9 code=0x0
[  341.618934][    T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  341.778833][    T9] usb 5-1: Using ep0 maxpacket: 16
[  341.787571][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  341.800684][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  341.813708][    T9] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  341.827187][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.835627][    T9] usb 5-1: Product: syz
[  341.841663][    T9] usb 5-1: Manufacturer: syz
[  341.846374][    T9] usb 5-1: SerialNumber: syz
[  341.860677][    T9] usb 5-1: config 0 descriptor??
[  341.873177][    T9] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected
[  341.895224][    T9] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  342.084221][    T9] usb 5-1: USB disconnect, device number 46
[  342.109645][    T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  342.139434][    T9] kobil_sct 5-1:0.0: device disconnected
[  342.538665][    T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  342.689005][    T9] usb 5-1: Using ep0 maxpacket: 8
[  342.705782][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  342.745333][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  342.762729][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  342.774303][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  342.791807][    T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  342.802416][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.816554][    T9] usb 5-1: Product: syz
[  342.822864][    T9] usb 5-1: Manufacturer: syz
[  342.832067][    T9] usb 5-1: SerialNumber: syz
[  342.843836][    T9] usb 5-1: config 0 descriptor??
[  342.861505][    C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  342.873880][    T9] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28
[  344.025284][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  344.038109][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  344.048140][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  344.056825][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  344.064406][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  344.091862][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  344.113300][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  344.120843][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  344.132705][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  344.140502][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  344.465514][ T6434] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.500702][T11383] /dev/rnullb0: Can't open blockdev
[  344.673821][ T6434] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.688393][T11388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.724989][T11388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.799060][ T6434] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.883703][ T6434] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.904631][T11377] chnl_net:caif_netlink_parms(): no params data found
[  345.079951][T11377] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.093585][T11377] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.106452][T11377] bridge_slave_0: entered allmulticast mode
[  345.122544][T11377] bridge_slave_0: entered promiscuous mode
[  345.138368][T11377] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.149263][T11377] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.156535][T11377] bridge_slave_1: entered allmulticast mode
[  345.164459][T11377] bridge_slave_1: entered promiscuous mode
[  345.175558][    T9] imon:send_packet: packet tx failed (-71)
[  345.193870][ T6434] bridge_slave_1: left allmulticast mode
[  345.201492][ T6434] bridge_slave_1: left promiscuous mode
[  345.207786][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.211828][    T9] imon 5-1:0.0: panel buttons/knobs setup failed
[  345.226240][ T6434] bridge_slave_0: left allmulticast mode
[  345.236566][ T6434] bridge_slave_0: left promiscuous mode
[  345.249268][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.298786][    T9] rc_core: IR keymap rc-imon-pad not found
[  345.304661][    T9] Registered IR keymap rc-empty
[  345.324458][    T9] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  345.359842][    T9] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  345.383635][    T9] imon:send_packet: packet tx failed (-71)
[  345.425010][    T9] imon 5-1:0.0: remote input dev register failed
[  345.446353][    T9] imon 5-1:0.0: imon_init_intf0: rc device setup failed
[  345.480913][    T9] imon 5-1:0.0: unable to initialize intf0, err 0
[  345.495465][    T9] imon:imon_probe: failed to initialize context!
[  345.511649][    T9] imon 5-1:0.0: unable to register, err -19
[  345.537007][ T6434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.554487][    T9] usb 5-1: USB disconnect, device number 47
[  345.597902][ T6434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  345.626212][ T6434] bond0 (unregistering): Released all slaves
[  345.655768][T11377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.710462][T11377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.831927][T11377] team0: Port device team_slave_0 added
[  345.841343][T11377] team0: Port device team_slave_1 added
[  345.947632][T11377] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.975232][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.014675][T11377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.026912][T11411] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  346.058895][T11377] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.065983][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.130365][T11377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.166595][ T6434] hsr_slave_0: left promiscuous mode
[  346.178697][ T5865] Bluetooth: hci5: command tx timeout
[  346.184955][ T6434] hsr_slave_1: left promiscuous mode
[  346.200498][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.209634][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.218523][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.226252][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.258353][ T6434] veth1_macvtap: left promiscuous mode
[  346.270299][ T6434] veth0_macvtap: left promiscuous mode
[  346.279902][ T6434] veth1_vlan: left promiscuous mode
[  346.285307][ T6434] veth0_vlan: left promiscuous mode
[  346.292453][T11426] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  346.577197][ T6434] team0 (unregistering): Port device team_slave_1 removed
[  346.618242][ T6434] team0 (unregistering): Port device team_slave_0 removed
[  346.904317][T11377] hsr_slave_0: entered promiscuous mode
[  346.918365][T11377] hsr_slave_1: entered promiscuous mode
[  346.924890][T11377] debugfs: 'hsr0' already exists in 'hsr'
[  346.940888][T11377] Cannot create hsr debugfs directory
[  346.987713][T11448] netlink: 'syz.4.1510': attribute type 1 has an invalid length.
[  347.158426][T11377] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  347.169839][T11377] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  347.271018][T11377] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  347.305982][T11377] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  347.321408][T11454] /dev/rnullb0: Can't open blockdev
[  347.494753][T11377] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.544182][T11377] 8021q: adding VLAN 0 to HW filter on device team0
[  347.582388][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.589621][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.593298][T11480] /dev/rnullb0: Can't open blockdev
[  347.636870][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.644069][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.837532][T11377] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.082637][T11377] veth0_vlan: entered promiscuous mode
[  348.096176][T11377] veth1_vlan: entered promiscuous mode
[  348.135639][T11377] veth0_macvtap: entered promiscuous mode
[  348.147219][T11377] veth1_macvtap: entered promiscuous mode
[  348.190040][T11377] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.217419][T11377] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.232964][ T6438] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.241893][ T6456] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.253119][ T6456] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.262099][ T6456] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.268698][ T5865] Bluetooth: hci5: command tx timeout
[  348.321765][ T6456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.347052][ T6456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.400659][ T6537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.423755][ T6537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.040688][T11513] orangefs_mount: mount request failed with -4
[  349.108726][  T981] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  349.165616][T11551] misc userio: No port type given on /dev/userio
[  349.235788][T11553] binder: 11552:11553 ioctl c0306201 200000000640 returned -22
[  349.244612][T11553] binder: 11552:11553 ioctl 7a0 200000000000 returned -22
[  349.282032][  T981] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[  349.295863][  T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  349.326650][  T981] usb 5-1: config 0 has no interface number 0
[  349.341476][  T981] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  349.364352][  T981] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  349.402456][  T981] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  349.416340][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.456093][  T981] usb 5-1: Product: syz
[  349.473331][  T981] usb 5-1: Manufacturer: syz
[  349.485238][  T981] usb 5-1: SerialNumber: syz
[  349.502400][  T981] usb 5-1: config 0 descriptor??
[  349.629828][T11560] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1526'.
[  349.699013][T11568] No control pipe specified
[  349.704267][T11568] /dev/rnullb0: Can't open blockdev
[  349.712596][T11569] No control pipe specified
[  349.717731][T11570] /dev/rnullb0: Can't open blockdev
[  350.121646][T11545] /dev/rnullb0: Can't open blockdev
[  350.131701][  T981] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71
[  350.157593][  T981] usb 5-1: USB disconnect, device number 48
[  350.338806][ T5865] Bluetooth: hci5: command tx timeout
[  351.048680][ T5917] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  351.188649][ T5917] usb 5-1: device descriptor read/64, error -71
[  351.424451][ T6537] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.444405][ T5917] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  351.474396][ T6537] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.524696][ T6537] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.595827][ T6537] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.606383][ T5917] usb 5-1: device descriptor read/64, error -71
[  351.645785][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  351.653121][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  351.661871][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  351.670232][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  351.677816][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  351.723330][ T5917] usb usb5-port1: attempt power cycle
[  351.746317][ T6537] bridge_slave_1: left allmulticast mode
[  351.753526][ T6537] bridge_slave_1: left promiscuous mode
[  351.759423][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.767688][ T6537] bridge_slave_0: left allmulticast mode
[  351.773846][ T6537] bridge_slave_0: left promiscuous mode
[  351.779655][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.871346][ T6537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.881652][ T6537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.891273][ T6537] bond0 (unregistering): Released all slaves
[  352.058478][T11600] chnl_net:caif_netlink_parms(): no params data found
[  352.081466][ T5917] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  352.135435][ T5917] usb 5-1: device descriptor read/8, error -71
[  352.212039][ T6537] hsr_slave_0: left promiscuous mode
[  352.224785][ T6537] hsr_slave_1: left promiscuous mode
[  352.233740][ T6537] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.242879][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.252505][ T6537] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.262659][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.275910][ T6537] veth1_macvtap: left promiscuous mode
[  352.281672][ T6537] veth0_macvtap: left promiscuous mode
[  352.287489][ T6537] veth1_vlan: left promiscuous mode
[  352.299070][ T6537] veth0_vlan: left promiscuous mode
[  352.388665][ T5917] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  352.425407][ T5917] usb 5-1: device descriptor read/8, error -71
[  352.460666][ T6537] team0 (unregistering): Port device team_slave_1 removed
[  352.475632][ T6537] team0 (unregistering): Port device team_slave_0 removed
[  352.544418][ T5917] usb usb5-port1: unable to enumerate USB device
[  352.578221][T11600] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.590081][T11600] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.597382][T11600] bridge_slave_0: entered allmulticast mode
[  352.605714][T11600] bridge_slave_0: entered promiscuous mode
[  352.615108][T11600] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.622659][T11600] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.630726][T11600] bridge_slave_1: entered allmulticast mode
[  352.637743][T11600] bridge_slave_1: entered promiscuous mode
[  352.666848][T11600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.682235][T11600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.717504][T11600] team0: Port device team_slave_0 added
[  352.737236][T11600] team0: Port device team_slave_1 added
[  352.799017][T11600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.806136][T11600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.845506][T11600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.893421][T11600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.906824][T11600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.933155][    C0] vkms_vblank_simulate: vblank timer overrun
[  352.949804][T11600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.008440][T11600] hsr_slave_0: entered promiscuous mode
[  353.020396][T11600] hsr_slave_1: entered promiscuous mode
[  353.027127][T11600] debugfs: 'hsr0' already exists in 'hsr'
[  353.033271][T11600] Cannot create hsr debugfs directory
[  353.230988][T11600] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  353.240935][T11600] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  353.253090][T11600] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  353.262591][T11600] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  353.356020][T11600] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.374670][T11600] 8021q: adding VLAN 0 to HW filter on device team0
[  353.397279][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.404451][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.445033][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.452237][ T6537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.701384][ T5872] Bluetooth: hci3: command tx timeout
[  353.708139][T11600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.867616][T11691] syz.4.1549: attempt to access beyond end of device
[  353.867616][T11691] md0: rw=0, sector=64, nr_sectors = 2 limit=0
[  353.885563][T11691] isofs_fill_super: bread failed, dev=md0, iso_blknum=16, block=32
[  354.131475][T11600] veth0_vlan: entered promiscuous mode
[  354.142579][T11600] veth1_vlan: entered promiscuous mode
[  354.175030][T11600] veth0_macvtap: entered promiscuous mode
[  354.185725][T11600] veth1_macvtap: entered promiscuous mode
[  354.203010][T11600] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.221906][T11600] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.236967][ T6438] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.260000][ T6438] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.284515][ T6438] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.296862][ T6438] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.334125][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.349351][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.376576][ T6434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.385800][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.545473][T11730] vivid-000: disconnect
[  354.555863][T11729] vivid-000: reconnect
[  354.710683][T11736] loop6: detected capacity change from 0 to 63
[  354.720773][T11736] buffer_io_error: 774 callbacks suppressed
[  354.720793][T11736] Buffer I/O error on dev loop6, logical block 0, async page read
[  354.734883][T11736] Buffer I/O error on dev loop6, logical block 0, async page read
[  354.744335][T11126] Buffer I/O error on dev loop6, logical block 0, async page read
[  354.753171][T11126] Buffer I/O error on dev loop6, logical block 0, async page read
[  354.763878][T11126] Buffer I/O error on dev loop6, logical block 0, async page read
[  354.772494][T11736] Buffer I/O error on dev loop6, logical block 0, async page read
[  354.780947][T11736] Buffer I/O error on dev loop6, logical block 0, async page read
[  354.789086][T11126] Buffer I/O error on dev loop6, logical block 0, async page read
[  354.797999][T11126] Buffer I/O error on dev loop6, logical block 0, async page read
[  354.806762][T11736] Buffer I/O error on dev loop6, logical block 0, async page read
[  355.309226][   T30] audit: type=1326 audit(1755560257.344:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.7.1556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c8cd8ebe9 code=0x0
[  355.778927][ T5865] Bluetooth: hci3: command tx timeout
[  357.868735][ T5865] Bluetooth: hci3: command 0x040f tx timeout
[  357.901015][T11765] /dev/rnullb0: Can't open blockdev
[  357.956487][T11771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.973777][T11771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.219503][T11779] /dev/rnullb0: Can't open blockdev
[  358.296389][T11783] /dev/rnullb0: Can't open blockdev
[  358.342365][T11786] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  358.350970][T11786] /dev/rnullb0: Can't open blockdev
[  358.371607][T11786] sd 0:0:1:0: device reset
[  358.475834][T11791] /dev/rnullb0: Can't open blockdev
[  358.841323][T11795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.870349][T11795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.589033][ T5917] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  359.603026][T11830] /dev/rnullb0: Can't open blockdev
[  359.713112][T11839] /dev/rnullb0: Can't open blockdev
[  359.760413][ T5917] usb 5-1: Using ep0 maxpacket: 8
[  359.772842][ T5917] usb 5-1: config 1 interface 0 has no altsetting 0
[  359.791937][ T5917] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  359.806845][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.815233][ T5917] usb 5-1: Product: syz
[  359.820967][ T5917] usb 5-1: Manufacturer: syz
[  359.829100][ T5917] usb 5-1: SerialNumber: syz
[  359.884811][T11848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.896390][T11848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.949672][ T5872] Bluetooth: hci3: command 0x040f tx timeout
[  360.083907][ T5917] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input31
[  360.102756][ T5222] bcm5974 5-1:1.0: could not read from device
[  360.111540][ T5222] bcm5974 5-1:1.0: could not read from device
[  360.115940][ T5917] usb 5-1: USB disconnect, device number 53
[  360.124710][ T5222] bcm5974 5-1:1.0: could not read from device
[  360.145289][ T5222] bcm5974 5-1:1.0: could not read from device
[  360.775724][T11866] /dev/rnullb0: Can't open blockdev
[  360.850281][T11878] /dev/rnullb0: Can't open blockdev
[  360.992312][T11889] /dev/rnullb0: Can't open blockdev
[  362.021329][ T5872] Bluetooth: hci3: command 0x040f tx timeout
[  362.139835][  T981] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  362.250319][T11935] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  362.258791][T11935] /dev/rnullb0: Can't open blockdev
[  362.310395][  T981] usb 5-1: Using ep0 maxpacket: 8
[  362.324919][  T981] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  362.338774][  T981] usb 5-1: config 0 has no interface number 0
[  362.360252][  T981] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  362.393135][  T981] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  362.424456][  T981] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  362.467179][  T981] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  362.496354][  T981] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  362.590582][  T981] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  362.600074][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.608098][  T981] usb 5-1: Product: syz
[  362.628647][  T981] usb 5-1: Manufacturer: syz
[  362.633293][  T981] usb 5-1: SerialNumber: syz
[  362.649550][  T981] usb 5-1: config 0 descriptor??
[  362.872698][  T981] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  362.961398][T11951] syzkaller1: entered promiscuous mode
[  362.967005][T11951] syzkaller1: entered allmulticast mode
[  363.074934][T11916] /dev/rnullb0: Can't open blockdev
[  363.082591][ T5917] usb 5-1: USB disconnect, device number 54
[  363.242355][T11955] netlink: 'syz.7.1604': attribute type 17 has an invalid length.
[  363.254661][T11955] netlink: 'syz.7.1604': attribute type 16 has an invalid length.
[  363.262990][T11955] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1604'.
[  363.801263][T11966] /dev/rnullb0: Can't open blockdev
[  363.833228][T11968] netlink: 'syz.4.1610': attribute type 1 has an invalid length.
[  363.843245][T11968] netlink: 'syz.4.1610': attribute type 1 has an invalid length.
[  363.853064][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'.
[  363.863983][T11968] bpf: Bad value for 'gid'
[  363.870117][T11968] /dev/rnullb0: Can't open blockdev
[  364.016372][T11977] /dev/rnullb0: Can't open blockdev
[  364.027536][T11977] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1614'.
[  364.194351][T11983] fuse: Bad value for 'user_id'
[  364.206305][T11983] fuse: Bad value for 'user_id'
[  364.475482][T11999] dvmrp17: entered allmulticast mode
[  364.555252][T12002] kvm: MONITOR instruction emulated as NOP!
[  364.571111][T12002] /dev/rnullb0: Can't open blockdev
[  365.002153][T12012] fuse: Unknown parameter 'user_i00000000000000000000'
[  365.024310][T12013] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1621'.
[  365.044929][T12015] /dev/rnullb0: Can't open blockdev
[  365.053705][T12015] loop6: detected capacity change from 0 to 2560
[  365.062101][T12015] buffer_io_error: 33050 callbacks suppressed
[  365.062119][T12015] Buffer I/O error on dev loop6, logical block 0, async page read
[  365.082514][T12015] Buffer I/O error on dev loop6, logical block 0, async page read
[  365.090999][T12015] Buffer I/O error on dev loop6, logical block 0, async page read
[  365.099226][T12015] Buffer I/O error on dev loop6, logical block 0, async page read
[  365.108156][T12015] Buffer I/O error on dev loop6, logical block 0, async page read
[  365.116665][T12015] Buffer I/O error on dev loop6, logical block 0, async page read
[  365.125965][T12015] Buffer I/O error on dev loop6, logical block 0, async page read
[  365.136490][T12015] Buffer I/O error on dev loop6, logical block 0, async page read
[  365.144902][T12015] ldm_validate_partition_table(): Disk read failed.
[  365.152593][T12015] Buffer I/O error on dev loop6, logical block 0, async page read
[  365.160875][T12015] Buffer I/O error on dev loop6, logical block 0, async page read
[  365.169330][T12015] Dev loop6: unable to read RDB block 0
[  365.175320][T12015]  loop6: unable to read partition table
[  365.181647][T12015] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  365.296324][    C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[  365.306555][    C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[  365.321506][    C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[  365.331698][    C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[  365.349221][    C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2
[  365.359303][    C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2
[  365.371249][    C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2
[  365.381277][    C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2
[  365.508213][T12019] /dev/rnullb0: Can't open blockdev
[  365.521647][T12019] /dev/rnullb0: Can't open blockdev
[  365.566975][T12023] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  365.577443][T12023] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1626'.
[  366.028832][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  366.037508][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  366.046345][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  366.055239][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  366.063765][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  366.072427][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  366.080987][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  366.168950][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  366.179128][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  366.574918][T12049] loop6: detected capacity change from 0 to 63
[  366.619224][T12055] fuse: Unknown parameter 'user_id00000000000000000000'
[  366.750231][T12060] /dev/rnullb0: Can't open blockdev
[  366.885102][T12072] netlink: 'syz.3.1636': attribute type 10 has an invalid length.
[  366.910963][T12072] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  366.937716][T12072] tmpfs: Cannot change global quota limit on remount
[  367.016846][T12076] bpf: Bad value for 'gid'
[  367.242435][T12093] /dev/rnullb0: Can't open blockdev
[  367.394631][T12101] fuse: Unknown parameter 'user_id00000000000000000000'
[  367.751551][T12104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.768324][T12104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.643733][T12131] cgroup: Invalid name
[  368.648911][T12131] /dev/rnullb0: Can't open blockdev
[  368.788390][T12098] syz.4.1643 (12098): drop_caches: 1
[  368.955274][T12152] fuse: Unknown parameter 'user_id00000000000000000000'
[  369.118352][T12157] /dev/rnullb0: Can't open blockdev
[  370.833704][T12192] fuse: Bad value for 'fd'
[  372.182508][T12217] fuse: Bad value for 'fd'
[  372.370872][T12229] overlay: ./file0 is not a directory
[  372.738166][T12240] fuse: Bad value for 'fd'
[  373.250320][T12250] /dev/rnullb0: Can't open blockdev
[  373.576501][T12261] /dev/rnullb0: Can't open blockdev
[  373.591356][T12260] /dev/rnullb0: Can't open blockdev
[  373.921881][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1688'.
[  373.931315][T12275] fuse: Unknown parameter '0x0000000000000004'
[  374.331999][T12288] /dev/rnullb0: Can't open blockdev
[  374.393449][T12291] netlink: 'syz.0.1694': attribute type 1 has an invalid length.
[  374.418954][T12291] netlink: 'syz.0.1694': attribute type 101 has an invalid length.
[  374.645960][T12308] fuse: Unknown parameter '0x0000000000000004'
[  375.219797][T12329] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  375.244183][T12329] /dev/rnullb0: Can't open blockdev
[  375.333657][T12335] fuse: Unknown parameter '0x0000000000000004'
[  375.338496][T12336] /dev/rnullb0: Can't open blockdev
[  375.355657][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1706'.
[  375.422559][T12338] raw_sendmsg: syz.3.1708 forgot to set AF_INET. Fix it!
[  375.748716][ T5910] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  375.898687][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  375.905683][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  375.916356][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  375.926216][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  375.936017][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  375.948536][ T5910] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97
[  375.961323][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.969661][ T5910] usb 5-1: Product: syz
[  375.973845][ T5910] usb 5-1: Manufacturer: syz
[  375.984584][ T5910] usb 5-1: SerialNumber: syz
[  375.989288][T12346] No control pipe specified
[  375.990176][T12346] /dev/rnullb0: Can't open blockdev
[  376.007669][ T5910] usb 5-1: config 0 descriptor??
[  376.015199][ T5910] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected
[  376.032333][ T5910] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[  376.117745][T12355] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  376.131723][T12355] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  376.191851][T12363] syz.3.1714: attempt to access beyond end of device
[  376.191851][T12363] loop3: rw=0, sector=64, nr_sectors = 8 limit=0
[  376.208771][T12363] syz.3.1714: attempt to access beyond end of device
[  376.208771][T12363] loop3: rw=0, sector=120, nr_sectors = 8 limit=0
[  376.230009][  T981] usb 5-1: USB disconnect, device number 55
[  376.232732][T12363] Mount JFS Failure: -5
[  376.250767][  T981] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[  376.264379][  T981] omninet 5-1:0.0: device disconnected
[  376.311357][T12369] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  376.318373][T12369] /dev/rnullb0: Can't open blockdev
[  376.420320][T12375] /dev/rnullb0: Can't open blockdev
[  376.466154][T12378] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1720'.
[  376.475419][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1720'.
[  376.753401][T12389] Malformed UNC in devname
[  376.753401][T12389] 
[  376.760196][T12389] CIFS: VFS: Malformed UNC in devname
[  376.804892][T12395] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  376.813624][T12395] /dev/rnullb0: Can't open blockdev
[  376.863775][T12402] /dev/rnullb0: Can't open blockdev
[  377.764124][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1733'.
[  377.998698][ T5917] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  378.158779][ T5917] usb 5-1: Using ep0 maxpacket: 32
[  378.168286][ T5917] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  378.181058][ T5917] usb 5-1: config 0 has no interface number 0
[  378.187216][ T5917] usb 5-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[  378.200844][ T5917] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  378.211138][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.219441][ T5917] usb 5-1: Product: syz
[  378.223818][ T5917] usb 5-1: Manufacturer: syz
[  378.228426][ T5917] usb 5-1: SerialNumber: syz
[  378.259541][ T5917] usb 5-1: config 0 descriptor??
[  378.278524][ T5917] smsc95xx v2.0.0
[  378.285008][ T5917] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  378.301605][ T5917] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22
[  378.481692][T12423] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1733'.
[  378.607408][ T5917] usb 5-1: USB disconnect, device number 56
[  378.742616][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.749637][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  379.051520][  T981] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  379.060478][  T981] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  379.101158][T12426] /dev/rnullb0: Can't open blockdev
[  379.308443][  T981] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  379.323773][T12428] fido_id[12428]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  379.330023][  T981] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  379.459653][T12432] /dev/rnullb0: Can't open blockdev
[  379.549030][ T5983] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  379.652820][T12447] /dev/rnullb0: Can't open blockdev
[  379.711019][ T5983] usb 5-1: config 11 has an invalid interface number: 221 but max is 2
[  379.728671][ T5983] usb 5-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config
[  379.739522][ T5983] usb 5-1: config 11 has 1 interface, different from the descriptor's value: 3
[  379.748502][ T5983] usb 5-1: config 11 has no interface number 0
[  379.755367][ T5983] usb 5-1: config 11 interface 221 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  379.769423][ T5983] usb 5-1: config 11 interface 221 has no altsetting 0
[  379.778368][ T5983] usb 5-1: New USB device found, idVendor=0482, idProduct=0101, bcdDevice= 1.00
[  379.788036][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.796419][ T5983] usb 5-1: Product: ㎇崱奊胢媨괹腻챬ꀮꅼ뜨嚭ꗟﯶ䱷Ἐ͛㑮뢾燯Ꙩ鶔ଣὒ彩㨍阉䓱웴㞶ㄘ䦼寢钒⧯ψࢵ笾⡨๻텢ᱲ䣿슈䲃윔樝⤟Ꚇꑝⵔ쭔ᐱܼ嶰㘖ӈ㋺⒩춤ᅡ㘄驋⾮஛惬෗჉㓹켓◕ꗦ칛閛᫊켸陓슓אּ昀Ꭲ蜙陌ଌ颦䃰ࡥ씽璘읋쓸劫⋩졡ꡗ㰤ꉼ武핰朸덹⾋疙捶鶂
[  379.832918][ T5983] usb 5-1: Manufacturer: ࡙
[  379.837615][ T5983] usb 5-1: SerialNumber: syz
[  380.055827][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.064779][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.079954][ T5983] usb-storage 5-1:11.221: USB Mass Storage device detected
[  380.089352][ T5983] usb-storage 5-1:11.221: Quirks match for vid 0482 pid 0101: 8
[  380.112316][ T5983] usb 5-1: USB disconnect, device number 57
[  380.430503][   T30] audit: type=1326 audit(1755560282.464:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.7.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8cd8ebe9 code=0x7fc00000
[  380.496236][T12452] /dev/rnullb0: Can't open blockdev
[  380.568354][T12454] /dev/rnullb0: Can't open blockdev
[  380.598988][T12462] overlay: filesystem on ./bus not supported as upperdir
[  380.688357][T12460] ==================================================================
[  380.696480][T12460] BUG: KASAN: slab-use-after-free in __se_sys_mremap+0xb33/0x1150
[  380.704852][T12460] Read of size 8 at addr ffff88805cb24058 by task syz.0.1748/12460
[  380.712769][T12460] 
[  380.715128][T12460] CPU: 0 UID: 0 PID: 12460 Comm: syz.0.1748 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) 
[  380.715152][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  380.715164][T12460] Call Trace:
[  380.715172][T12460]  <TASK>
[  380.715180][T12460]  dump_stack_lvl+0x189/0x250
[  380.715214][T12460]  ? __pfx_dump_stack_lvl+0x10/0x10
[  380.715252][T12460]  ? lock_release+0x4b/0x3e0
[  380.715277][T12460]  ? __virt_addr_valid+0x4a5/0x5c0
[  380.715297][T12460]  print_report+0xca/0x240
[  380.715316][T12460]  ? __se_sys_mremap+0xb33/0x1150
[  380.715339][T12460]  kasan_report+0x118/0x150
[  380.715362][T12460]  ? __se_sys_mremap+0xb33/0x1150
[  380.715389][T12460]  __se_sys_mremap+0xb33/0x1150
[  380.715422][T12460]  ? __pfx___se_sys_mremap+0x10/0x10
[  380.715455][T12460]  ? rcu_is_watching+0x15/0xb0
[  380.715476][T12460]  ? __x64_sys_mremap+0x20/0xc0
[  380.715501][T12460]  do_syscall_64+0xfa/0x3b0
[  380.715526][T12460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.715543][T12460]  ? clear_bhb_loop+0x60/0xb0
[  380.715563][T12460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.715581][T12460] RIP: 0033:0x7f1d2758ebe9
[  380.715599][T12460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.715614][T12460] RSP: 002b:00007f1d28338038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  380.715635][T12460] RAX: ffffffffffffffda RBX: 00007f1d277b5fa0 RCX: 00007f1d2758ebe9
[  380.715649][T12460] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000155000
[  380.715661][T12460] RBP: 00007f1d27611e19 R08: 0000200000416000 R09: 0000000000000000
[  380.715673][T12460] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  380.715684][T12460] R13: 00007f1d277b6038 R14: 00007f1d277b5fa0 R15: 00007ffefef12598
[  380.715703][T12460]  </TASK>
[  380.715710][T12460] 
[  380.901038][T12460] Allocated by task 12460:
[  380.905452][T12460]  kasan_save_track+0x3e/0x80
[  380.910134][T12460]  __kasan_slab_alloc+0x6c/0x80
[  380.914997][T12460]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  380.920454][T12460]  vm_area_alloc+0x24/0x140
[  380.924986][T12460]  mmap_region+0xdc7/0x20c0
[  380.929671][T12460]  do_mmap+0xc45/0x10d0
[  380.933825][T12460]  vm_mmap_pgoff+0x2a6/0x4d0
[  380.938419][T12460]  ksys_mmap_pgoff+0x51f/0x760
[  380.943180][T12460]  do_syscall_64+0xfa/0x3b0
[  380.947688][T12460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.953578][T12460] 
[  380.955902][T12460] Freed by task 12457:
[  380.959981][T12460]  kasan_save_track+0x3e/0x80
[  380.964676][T12460]  kasan_save_free_info+0x46/0x50
[  380.969712][T12460]  __kasan_slab_free+0x5b/0x80
[  380.974490][T12460]  slab_free_after_rcu_debug+0x129/0x2a0
[  380.980308][T12460]  rcu_core+0xca8/0x1770
[  380.984559][T12460]  handle_softirqs+0x283/0x870
[  380.989430][T12460]  __irq_exit_rcu+0xca/0x1f0
[  380.994025][T12460]  irq_exit_rcu+0x9/0x30
[  380.998270][T12460]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  381.003910][T12460]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  381.009893][T12460] 
[  381.012217][T12460] Last potentially related work creation:
[  381.017928][T12460]  kasan_save_stack+0x3e/0x60
[  381.022607][T12460]  kasan_record_aux_stack+0xbd/0xd0
[  381.027814][T12460]  kmem_cache_free+0x2f6/0x400
[  381.032672][T12460]  vms_complete_munmap_vmas+0x626/0x8a0
[  381.038221][T12460]  do_vmi_align_munmap+0x358/0x420
[  381.043421][T12460]  do_vmi_munmap+0x253/0x2e0
[  381.048105][T12460]  do_munmap+0xe1/0x140
[  381.052256][T12460]  mremap_to+0x2df/0x7a0
[  381.056506][T12460]  __se_sys_mremap+0xadf/0x1150
[  381.061360][T12460]  do_syscall_64+0xfa/0x3b0
[  381.065865][T12460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.071755][T12460] 
[  381.074086][T12460] The buggy address belongs to the object at ffff88805cb24000
[  381.074086][T12460]  which belongs to the cache vm_area_struct of size 256
[  381.088399][T12460] The buggy address is located 88 bytes inside of
[  381.088399][T12460]  freed 256-byte region [ffff88805cb24000, ffff88805cb24100)
[  381.102107][T12460] 
[  381.104431][T12460] The buggy address belongs to the physical page:
[  381.110844][T12460] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cb24
[  381.119689][T12460] memcg:ffff88802efce581
[  381.123928][T12460] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  381.131488][T12460] page_type: f5(slab)
[  381.135481][T12460] raw: 00fff00000000000 ffff88801bae2b40 ffffea0001463300 dead000000000005
[  381.144065][T12460] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88802efce581
[  381.152643][T12460] page dumped because: kasan: bad access detected
[  381.159055][T12460] page_owner tracks the page as allocated
[  381.164792][T12460] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11548, tgid 11548 (dhcpcd-run-hook), ts 349032218370, free_ts 349009122840
[  381.184968][T12460]  post_alloc_hook+0x240/0x2a0
[  381.189822][T12460]  get_page_from_freelist+0x21e4/0x22c0
[  381.195365][T12460]  __alloc_frozen_pages_noprof+0x181/0x370
[  381.201174][T12460]  alloc_pages_mpol+0x232/0x4a0
[  381.206114][T12460]  allocate_slab+0x8a/0x370
[  381.210639][T12460]  ___slab_alloc+0xbeb/0x1410
[  381.215374][T12460]  kmem_cache_alloc_noprof+0x283/0x3c0
[  381.220825][T12460]  vm_area_alloc+0x24/0x140
[  381.225328][T12460]  mmap_region+0xdc7/0x20c0
[  381.229833][T12460]  do_mmap+0xc45/0x10d0
[  381.233984][T12460]  vm_mmap_pgoff+0x2a6/0x4d0
[  381.238584][T12460]  ksys_mmap_pgoff+0x51f/0x760
[  381.243345][T12460]  do_syscall_64+0xfa/0x3b0
[  381.247871][T12460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.253764][T12460] page last free pid 15 tgid 15 stack trace:
[  381.259742][T12460]  __free_frozen_pages+0xbc4/0xd30
[  381.264864][T12460]  __tlb_remove_table+0x2d2/0x3b0
[  381.269890][T12460]  tlb_remove_table_rcu+0x85/0x100
[  381.275176][T12460]  rcu_core+0xca8/0x1770
[  381.279432][T12460]  handle_softirqs+0x283/0x870
[  381.284229][T12460]  run_ksoftirqd+0x9b/0x100
[  381.288745][T12460]  smpboot_thread_fn+0x542/0xa60
[  381.293697][T12460]  kthread+0x711/0x8a0
[  381.297793][T12460]  ret_from_fork+0x3f9/0x770
[  381.302475][T12460]  ret_from_fork_asm+0x1a/0x30
[  381.307260][T12460] 
[  381.309602][T12460] Memory state around the buggy address:
[  381.315233][T12460]  ffff88805cb23f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  381.323293][T12460]  ffff88805cb23f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  381.331354][T12460] >ffff88805cb24000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  381.339425][T12460]                                                     ^
[  381.346349][T12460]  ffff88805cb24080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  381.354428][T12460]  ffff88805cb24100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  381.362481][T12460] ==================================================================
[  381.389104][T12460] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  381.396352][T12460] CPU: 1 UID: 0 PID: 12460 Comm: syz.0.1748 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) 
[  381.407903][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  381.417993][T12460] Call Trace:
[  381.421276][T12460]  <TASK>
[  381.424213][T12460]  dump_stack_lvl+0x99/0x250
[  381.428816][T12460]  ? __asan_memcpy+0x40/0x70
[  381.433430][T12460]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.438637][T12460]  ? __pfx__printk+0x10/0x10
[  381.443246][T12460]  vpanic+0x281/0x750
[  381.447231][T12460]  ? preempt_schedule+0xae/0xc0
[  381.452082][T12460]  ? __pfx_vpanic+0x10/0x10
[  381.456586][T12460]  ? preempt_schedule_common+0x83/0xd0
[  381.462133][T12460]  ? preempt_schedule+0xae/0xc0
[  381.466986][T12460]  ? __pfx_preempt_schedule+0x10/0x10
[  381.472358][T12460]  panic+0xb9/0xc0
[  381.476083][T12460]  ? __pfx_panic+0x10/0x10
[  381.480512][T12460]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  381.486457][T12460]  ? __se_sys_mremap+0xb33/0x1150
[  381.491545][T12460]  check_panic_on_warn+0x89/0xb0
[  381.496505][T12460]  ? __se_sys_mremap+0xb33/0x1150
[  381.501540][T12460]  end_report+0x78/0x160
[  381.505796][T12460]  kasan_report+0x129/0x150
[  381.510308][T12460]  ? __se_sys_mremap+0xb33/0x1150
[  381.515349][T12460]  __se_sys_mremap+0xb33/0x1150
[  381.520220][T12460]  ? __pfx___se_sys_mremap+0x10/0x10
[  381.525527][T12460]  ? rcu_is_watching+0x15/0xb0
[  381.530294][T12460]  ? __x64_sys_mremap+0x20/0xc0
[  381.535161][T12460]  do_syscall_64+0xfa/0x3b0
[  381.539701][T12460]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.545784][T12460]  ? clear_bhb_loop+0x60/0xb0
[  381.550471][T12460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.556368][T12460] RIP: 0033:0x7f1d2758ebe9
[  381.560815][T12460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.580431][T12460] RSP: 002b:00007f1d28338038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  381.588848][T12460] RAX: ffffffffffffffda RBX: 00007f1d277b5fa0 RCX: 00007f1d2758ebe9
[  381.596822][T12460] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000155000
[  381.604791][T12460] RBP: 00007f1d27611e19 R08: 0000200000416000 R09: 0000000000000000
[  381.612760][T12460] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  381.620904][T12460] R13: 00007f1d277b6038 R14: 00007f1d277b5fa0 R15: 00007ffefef12598
[  381.628879][T12460]  </TASK>
[  381.632227][T12460] Kernel Offset: disabled
[  381.636888][T12460] Rebooting in 86400 seconds..