last executing test programs:

17m27.362231626s ago: executing program 32 (id=556):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4)

17m16.118726527s ago: executing program 33 (id=683):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16m30.912471328s ago: executing program 34 (id=924):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)

16m5.884323804s ago: executing program 35 (id=982):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
listen(r1, 0x80)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe401020301090212"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

15m58.968638522s ago: executing program 36 (id=1040):
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x8, {0x2, 0x3, 0x2, 0x4, 0x0, 0x0, 0xffffffff, 0x4, 0x100, 0x0, 0x0, r2, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
lseek(r3, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020)

15m57.431805028s ago: executing program 37 (id=1011):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000500))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e)

15m48.188728829s ago: executing program 38 (id=1062):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='cdg', 0x3)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0xc3d33000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

15m42.827373919s ago: executing program 39 (id=1074):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020)

15m27.705134319s ago: executing program 40 (id=1077):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB], 0x33)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x4, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x4004)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
sendto$netrom(r3, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48)

14m21.734899023s ago: executing program 2 (id=1388):
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)

14m21.624993883s ago: executing program 2 (id=1390):
semctl$GETVAL(0x0, 0x0, 0xc, 0x0)

14m21.578800079s ago: executing program 2 (id=1392):
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x4}}}, 0x7)

14m21.42871157s ago: executing program 2 (id=1395):
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

14m21.253556185s ago: executing program 2 (id=1397):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08092320", @ANYRES16=r0], 0xb)

14m20.971006892s ago: executing program 2 (id=1399):
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0xc804}, 0x814)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x16)

14m20.589100106s ago: executing program 41 (id=1399):
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0xc804}, 0x814)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x16)

11m40.10822571s ago: executing program 1 (id=2416):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000046"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000400000000010000000900010073797a30000000002c000000"], 0xa4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11m39.480142246s ago: executing program 1 (id=2421):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1100, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

11m38.547136036s ago: executing program 1 (id=2428):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pipe(&(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffff, 0x909f, 0x6667, 0x40000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0)

11m38.436491412s ago: executing program 1 (id=2429):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x19109b, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28b5281, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)

11m38.389671876s ago: executing program 1 (id=2430):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000046"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000400000000010000000900010073797a30000000002c000000"], 0xa4}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11m38.070897014s ago: executing program 1 (id=2431):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef)
read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0xfdef)

11m37.519105714s ago: executing program 42 (id=2431):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef)
read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0xfdef)

9m40.789792379s ago: executing program 4 (id=3135):
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m40.556261788s ago: executing program 4 (id=3136):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @hoplimit={{0x14}}, @hopopts={{0x140, 0x29, 0x36, {0x5e, 0x24, '\x00', [@pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xff9c, [0x6e, 0x8, 0x87, 0x2]}}, @jumbo={0xc2, 0x4, 0xe7}, @generic={0x8, 0xe3, "5b23ee96da0c829e73eacc40ed3b962336155ffdc14aa07d00000000a7ef42203f152ece05d20ef9699897b829f1d5dc3a79886af23370fb206674a55c7757c0ca22b5fec4679c1bd59147bfb9f5608240068e018ab18924ff5903506cad2b94132fa0ae46b26bdf7f5b0ebb4a38afb6eadf15b36ee4a8508648510bc83a7ff6548c896564ae35e0ca51cd7b66408221388e694fd1d520c837486bc3e6dc0e33496b4d2ba0f2c2bd5fbb8afb1cc91d6df9ba2c1a34ffc767f6b0d34c7500ec0ebcb7152782fbdd981d5e82daf56b97a61601aae936b214914d3207088b98a130c20000"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x8}}, @generic={0x1, 0x2, "2bdb"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x1a8}}], 0x1, 0x810)
futex(0x0, 0x204, 0x2, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="6f46c908341889a11ea3992276d5ab9e10824f9fcfb7f6d042618c6866e3801459b03d38ea918910602c461a2efae322fa6119ac242a51d6da28c74d466e336b26c77454129b8f099137cbe49f4f0d25a1887a2a71ab45b6bed147c61d2108915369d90861af6441ec422495a54e03b9b8a72989a44ab1eb127d8b935e45b14c721e41b0ae5a78be", 0x88}], 0x1, 0x0, 0x0, 0x84}], 0x1, 0x4040000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9m40.351430291s ago: executing program 4 (id=3137):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1)

9m40.271770438s ago: executing program 4 (id=3138):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
chdir(&(0x7f00000001c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)

9m40.124663768s ago: executing program 4 (id=3139):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)

9m39.230797116s ago: executing program 4 (id=3147):
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f00000002c0)='./file0\x00')
open(&(0x7f0000000040)='./file1\x00', 0x20037, 0x100)

9m24.169600793s ago: executing program 43 (id=3147):
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f00000002c0)='./file0\x00')
open(&(0x7f0000000040)='./file1\x00', 0x20037, 0x100)

7m36.102160204s ago: executing program 6 (id=3826):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
link(&(0x7f0000000580)='./file1\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7m35.975604402s ago: executing program 6 (id=3830):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000480)='./bus\x00', 0x87)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./bus\x00')

7m35.870751548s ago: executing program 6 (id=3832):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1)

7m35.711162123s ago: executing program 6 (id=3837):
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x403, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040))

7m35.335047566s ago: executing program 6 (id=3841):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)

7m34.382824836s ago: executing program 6 (id=3850):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020)
readv(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1)
write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x20000, 0x0, 0x0, 0x2}}, 0x48)

7m19.071739548s ago: executing program 44 (id=3850):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020)
readv(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1)
write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x20000, 0x0, 0x0, 0x2}}, 0x48)

5m26.452556968s ago: executing program 3 (id=4535):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x1, &(0x7f0000000780)="e0"}], 0x1})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000480)={0x20, 0xf, 0x7}, 0x0, 0x0, 0x0, 0x0})

5m23.695449997s ago: executing program 3 (id=4555):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x9, @empty, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r3, 0x4, 0xffff, 0x5, 0x5, 0x10c1, 0x3, 0x4, {r3, @in6={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}}, 0x80009, 0x9, 0x12, 0x8, 0x206}}, &(0x7f00000001c0)=0xb0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r0, 0x800)
accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e4f5256b1e4344d50a944ff67347cff6127e6ef12", 0x17}], 0x1}], 0x1, 0x40800)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

5m23.250007022s ago: executing program 3 (id=4560):
mkdir(&(0x7f0000000180)='./file0\x00', 0x1dc)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00')
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x59)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2)

5m23.039021275s ago: executing program 3 (id=4563):
setresgid(0xee00, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount$afs(&(0x7f0000000300), 0x0, &(0x7f0000000380), 0x18000, &(0x7f00000004c0)=ANY=[@ANYBLOB="666c6f636b6f63656c6c2c666c6f636b3d7374726963742c64796e2c736d61636b66736861743d002c726f6f74636f6e746578743d757365725f752c736d61636b66736861743d6374002c00000000000000000000000000000000002fc9cf85e81251a22845ff564fe0644660f657"])
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80001, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x1)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)

5m19.660763135s ago: executing program 3 (id=4581):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
getpriority(0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
creat(&(0x7f0000000000)='./file0\x00', 0x108)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28)
write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(r2, r0)

5m19.076664183s ago: executing program 3 (id=4583):
r0 = socket$inet6(0xa, 0x2, 0x11)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="36dadf0f01c2b88c0a8ee066b8a90000000f8f00000f21f866352000000c0f23f83e64dac12e2e2e0f01a600000f01c90f35818378002ea6ba4000ec", 0x3c}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x60, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff, 0x40, '\x00', 0x0, 0x5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

5m18.915363855s ago: executing program 45 (id=4583):
r0 = socket$inet6(0xa, 0x2, 0x11)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="36dadf0f01c2b88c0a8ee066b8a90000000f8f00000f21f866352000000c0f23f83e64dac12e2e2e0f01a600000f01c90f35818378002ea6ba4000ec", 0x3c}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x60, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff, 0x40, '\x00', 0x0, 0x5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

19.008744481s ago: executing program 8 (id=7925):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18.794621039s ago: executing program 8 (id=7928):
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
mknod(&(0x7f00000000c0)='./file0\x00', 0x40, 0x7fffffff)
r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc)
syz_usb_connect$cdc_ncm(0x4, 0x80, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x5, 0x70, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "796ec2bfdfb7"}, {0x5, 0x24, 0x0, 0x61a}, {0xd, 0x24, 0xf, 0x1, 0x316, 0x8000, 0x4, 0x1}, {0x6, 0x24, 0x1a, 0xfffd, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x5, 0xb9, 0x7, 0x0, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7f, 0x3, 0x37}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5175e20b3512bf7b, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x92, 0x3}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x0, 0x4, 0x4, 0x10, 0x69}, 0x48, &(0x7f0000000280)={0x5, 0xf, 0x48, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x5, 0x0, 0x51d7, [0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "175aecba3c6e864f80c1f80eca139936"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x65, 0x7, 0x4, 0x8, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "49a568da854e555ce98a09753e5385db"}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42c}}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x27, 0x100, 0x70bd29, 0x25dfdbfe, {0xa}, [@typed={0x8, 0x136, 0x0, 0x0, @u32=0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000004c0)={0x56, 0x1000, 0x645c, {0xb0, 0x7}, {0x200, 0x9}, @ramp={0x10, 0xd, {0x3, 0x1000, 0x80}}})
recvmmsg(r0, &(0x7f0000002e40)=[{{&(0x7f0000000500)=@alg, 0x80, &(0x7f0000001980)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/212, 0xd4}, {&(0x7f0000001680)=""/74, 0x4a}, {&(0x7f0000001700)=""/48, 0x30}, {&(0x7f0000001740)=""/250, 0xfa}, {&(0x7f0000001840)=""/100, 0x64}, {&(0x7f00000018c0)=""/146, 0x92}], 0x7, &(0x7f0000001a00)=""/119, 0x77}, 0x2}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001b00)=""/87, 0x57}, {&(0x7f0000001b80)=""/167, 0xa7}, {&(0x7f0000001c40)=""/35, 0x23}, {&(0x7f0000001c80)=""/47, 0x2f}, {&(0x7f0000001cc0)=""/65, 0x41}, {&(0x7f0000001d40)=""/234, 0xea}, {&(0x7f0000001e40)=""/173, 0xad}], 0x7, &(0x7f0000001f80)=""/42, 0x2a}, 0x9}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001fc0)=""/38, 0x26}, {&(0x7f0000002000)=""/189, 0xbd}, {&(0x7f00000020c0)=""/67, 0x43}, {&(0x7f0000002140)=""/214, 0xd6}, {&(0x7f0000002240)=""/27, 0x1b}], 0x5, &(0x7f0000002300)=""/236, 0xec}, 0x5}, {{&(0x7f0000002400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002480)=""/83, 0x53}, {&(0x7f0000002500)=""/153, 0x99}], 0x2, &(0x7f0000002600)=""/199, 0xc7}}, {{&(0x7f0000002700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002780)=""/164, 0xa4}], 0x1, &(0x7f0000002880)=""/104, 0x68}, 0x1}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002900)=""/62, 0x3e}, {&(0x7f0000002940)=""/48, 0x30}, {&(0x7f0000002980)=""/208, 0xd0}, {&(0x7f0000002a80)=""/238, 0xee}, {&(0x7f0000002b80)=""/115, 0x73}, {&(0x7f0000002c00)=""/155, 0x9b}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)=""/81, 0x51}], 0x8, &(0x7f0000002e00)=""/42, 0x2a}, 0x54}], 0x6, 0x100, &(0x7f0000002fc0)={0x0, 0x989680})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000003000)={0xfffffff5, [0x1, 0x6, 0x4], [{0x1, 0x80000001, 0x1, 0x0, 0x1}, {0x4, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x4e700000, 0x7fffffff, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x94, 0x0, 0x0, 0x1}, {0x7, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x40, 0xfffffffb}, {0xe, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7, 0x3ff, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x35000000, 0x0, 0x1, 0x1}, {0x5, 0x6ef2, 0x1, 0x0, 0x0, 0x1}, {0xf, 0x3, 0x1, 0x0, 0x0, 0x1}, {0xfffffffb, 0x3ff, 0x0, 0x1, 0x1}], 0x5})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000003100)=0x4, 0x4)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000031c0)={'erspan0\x00', &(0x7f0000003140)={'syztnl2\x00', <r5=>0x0, 0x0, 0x40, 0x5, 0x8001, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x67, 0x0, 0x3, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0xc9, 0x3, 0x0, [{@empty, 0x1}, {@rand_addr=0x64010100, 0x2}, {@local, 0x7}]}, @noop, @noop, @generic={0x44, 0xa, "8f59771e3ff6c0de"}]}}}}})
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000003200)={@loopback, 0x66, r5})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003240)={'wlan0\x00'})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000003280)={@loopback, @multicast2, 0x1, 0x7, [@dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, @broadcast, @private=0xa010100, @multicast1, @broadcast, @loopback]}, 0x2c)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
sendmsg$kcm(r3, &(0x7f0000003600)={&(0x7f00000032c0)=@pptp={0x18, 0x2, {0x1, @local}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003340)="7623b3d1cbc145ea050b3cf9ae0f0a78df6dafe5993d9e36d0c77ce3b4b9aa71fc5b7135ca7ba51fa408807df61785a9f1b66735b04ba9e54e77aab273eb7849d1f2de41564f582da62a7dde32a4ebe78dc1f836fe648612b9857b58b95c95373f48a5edd4736e727735061a7cc68cd582a5f535882a316e45f5c3ff3834d59b07", 0x81}, {&(0x7f0000003400)="7401b16bdd30c6db0680da87ef4e0b489fb4aa8398475ae37b4db3c487c42906f6b42ab6e57a2c0df328f7399dc1576272a5a790f28a73b604c22602267d93ffd2d29b7a6cbfba8b732590561c88ff0727e15c2b30d7dc15de7cbaf382d2366d8e57e0ff1740f53cd0563d3a78537238aabe9189ab4e3dd514cb138d90965b5e0663fd8ae30adb46c8d212b878232a95fcd14c3c91bfceaf90dcd9d70a5d04154ca06a482c3ca294b48110d48438d5248d957d7e179ce36e8206522e72258a8defa3e9c813", 0xc5}], 0x2, &(0x7f0000003540)=[{0x90, 0x1, 0x8, "21a42abb73e6dfba29211ce746a40c1e80e08c7bae584fd6d4be11bc89836909739c32a4c8b87d4316320ddfa180602349902c20f16a6a7db6db13aeba70335677119ac9e6fe347de6d4d9e15f70493b7c51d9c314c2e6d25f0cf0cd122edb52f445b482a1bdb741675d575be6f718f0cef89fef26aea64a903e7f46d75fddf7"}], 0x90}, 0x4050)
getpeername$tipc(r3, &(0x7f0000003640), &(0x7f0000003680)=0x10)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000003840)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003800)={&(0x7f0000003700)={0xe4, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003880))
r6 = dup(r3)
sendmsg$kcm(r6, &(0x7f0000003ec0)={&(0x7f00000038c0)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003940)="de6fa1da872823e1a1612b08c251225cba083532954fc2a8fce77e1645fed0c13d6693e119804cf2818d499c13e422cecd09efa77f", 0x35}, {&(0x7f0000003980)="40b48721a4c523315f2e730204f5b5d21c80ac20df25c5caaf4f81a51791e230aed8afff88d2cc40815adb77247d55b0dab185ac6ba4f3391b5bde1924f015e6f81043741a619b7623c9a4cdf1926bda8b34dfcd59dc9957fa46f5cf3fa3d79ffd56f19cad51680e3393dc567e4de4c238ac58952e06042670d762455acc6e3771de3cdf9c525f076c1bdb56dd", 0x8d}, {&(0x7f0000003a40)="ae452a7de446e61094348f4d3499ffe594221c550a0b70a44c90e9b181beac0b383c860f009875b9f43511a240aefa2a5a07c7737a911627b67f71cb5a14d665043fa4456b7268e890363f2049c840b47abf25b5efddd8105a6ec2b0e42af7b88381e7f48858388c674a80c10b7d98b5a10c72e752868859a096f4a301a0f5da022aff5ebb4d13fb77dbae38285cb30b21de7a2a2f8366aad54ce8fe1b83fc0ae0158ed1f67206d4cf4d27bb59ced2a657e210e8be65edc3549d4d321833192d8bab3203441c4ea35f98def699fb9b03e2630744233ba22126ec36068fcb27f5db16fe093fcdb5dba306aa3a2b4e9c1b9a8dc826b3a910a3", 0xf8}, {&(0x7f0000003b40)="49e7a491dab22d7b5a64e169490ab9ac4a7827a80ee7103489605f2c7d4bf240dcadc3fc8cf1329cf0d74465222032c6fc1af11d964f0b85bab41a177e090bb48b1c326b56c57cedd86c24a6d61c1544caf85a232c69d37c9f9a3d8756a07e8ee1715484c403ce6a5e64664e7c875829a40cf2eacf863b1ac5e7b65ff51a42c3284615e2c85e46d428db4635a4e4e4988916", 0x92}, {&(0x7f0000003c00)="88b4e95fff6882f26b19b535614c3d546c4de63c7b52df21b20b7e7d4ddd2cf9f25e2bd3d0c634443b632f413ca5c15433a17f23cde033bbcd4345cc1c93c159e113cdd6c8674dadd1d39ae3ec4fcdb7838e83e769e8055271a7924e9772fbd6ce8b1587dc0b0d37367f7dceb881ff76cc203934cba7e32bff5920b73afc8b8aebf6a195bcff578c12af869ddde3013442c6dd8d65f9b726c340c180808562fae2e2cf4a413f5399b5fc89454a", 0xad}, {&(0x7f0000003cc0)="43a7a0b3c0b84087566c500e578b69dd34015c8a2bcb2c12f2f86c2114f253d171935061e5804e1b8a30cbc37a713a18e720237469d50b9b0d7109ab62b9fd230c0c4b1a5d5c6f542b2ce404d640403cd025ba4eb9f2", 0x56}, {&(0x7f0000003d40)="55b0f29eed544eec2cf955d168501329aa39fffea100b8149202d61954633a8f75bb62", 0x23}], 0x7, &(0x7f0000003e00)=[{0xa0, 0x10a, 0x1, "bb243abfd55a6360a589d1aa5539d351c2e7476c126ec383e1728823dc63c589800cc23f9f5aef96feb9b36acf92db9e59a5add2947cdcec5c5d0cf9e2e0dd845e3bd69d8b275659dd08f799b86b37c94d8b38eb532a17351df9e6b20aa2b625f1a6209878e7e3974a0a00c9071bdd13fa46514ba77a3e10e1ec0e17f71bf69f6037b493e61a4ee30bcd545dd05c"}, {0x20, 0xff, 0x5, "b05cc06b951436cc9f42"}], 0xc0}, 0x50)
ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000003f00))
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003f80), r6)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000004080)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x8100800}, 0xc, &(0x7f0000004040)={&(0x7f0000003fc0)={0x48, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x64c2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8001)

18.164244464s ago: executing program 8 (id=7932):
read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, <r0=>0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2000, 0x100, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0, <r3=>0x0}, &(0x7f00000021c0)=0xc)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0xfffffffffffffffe, r0, {0x6, 0x1, 0x2, 0x22f6, 0x4, 0x4, {0x5, 0x4, 0x8, 0x5, 0x101, 0x89fc, 0x5, 0x6065, 0x1, 0x1000, 0x0, r2, r3, 0x4, 0x9}}}, 0x90)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
io_setup(0x3, &(0x7f00000022c0))
r5 = syz_open_dev$sndctrl(&(0x7f0000002300), 0xb, 0xa2000)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000002380)={{0x5, 0x2, 0x9, 0x2, 'syz0\x00', 0x5}, 0x3, 0x30, 0x400, r1, 0xa, 0x6, 'syz0\x00', &(0x7f0000002340)=['\\\x00', ']*.!\x87:.\x00', '\x00', ':\x1c)@-*-\x00', '#\x00', '\\\xc8[$\')\x00', '\x00', '\x00', '\x00', '.)]\'^.-$}\x00'], 0x29})
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_SET_NOTIFY(r6, 0x7cb, &(0x7f0000002500)={0x2, 0x6, 0x3})
r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002540), 0x400200, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r7, 0xc0206416, &(0x7f0000002580)={0x40, 0x5, 0x1, 0x5, 0x2, 0x8000})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0)
write$FUSE_INIT(r8, &(0x7f0000002600)={0x50, 0x0, r0, {0x7, 0x2b, 0x280000, 0x20, 0x6, 0x0, 0xff, 0x2c, 0x0, 0x0, 0x8, 0x3}}, 0x50)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000002680)={0x0, 'team_slave_1\x00', {0x4}, 0xfff5})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002700)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002740)={'team0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002780)={'ip6tnl0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002840)={'syztnl1\x00', &(0x7f00000027c0)={'syztnl2\x00', <r12=>0x0, 0x2f, 0x4, 0x6, 0x8e65, 0x13, @remote, @mcast1, 0x40, 0x7, 0x1, 0x7}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002900)={'syztnl0\x00', &(0x7f0000002880)={'gre0\x00', <r13=>0x0, 0x20, 0x10, 0x8, 0x7f, {{0x16, 0x4, 0x0, 0x2, 0x58, 0x67, 0x0, 0xa, 0x4, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x1b, 0xca, [@broadcast, @local, @local, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1f, 0xf6, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @broadcast, @broadcast, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x4a, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000002d00)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002940)={0x35c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x2bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7d, 0xff, 0x3, 0x5}, {0xff82, 0x2, 0x6, 0x4dc8e731}, {0x9, 0x5, 0x9, 0x5000}, {0x1, 0x4, 0x8, 0x4}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf0}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1, 0x10, 0x5, 0x2}, {0x47, 0x8, 0x8, 0x9}, {0x4, 0x9, 0x0, 0x9}, {0x2, 0x0, 0x6, 0x7fff}, {0x10, 0x51, 0x7, 0x1ff}, {0x401, 0xb4, 0x3, 0x1}, {0xf800, 0x6, 0x40, 0xd0c4}, {0x2, 0x8c, 0x0, 0x6}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}, {0x8, 0x6, r13}}}]}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
r14 = dup2(r8, 0xffffffffffffffff)
bind$alg(r14, &(0x7f0000002d40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
sendmsg$IPSET_CMD_HEADER(r8, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x24040000)
ioctl$SNDCTL_DSP_CHANNELS(r14, 0xc0045006, 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r14, 0xc01064b5, &(0x7f0000002f00)={&(0x7f0000002ec0)=[0x0, 0x0, <r15=>0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETENCODER(r14, 0xc01464a6, &(0x7f0000002f40)={0x0, 0x0, <r16=>0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000002fc0)={0x0, 0x0, <r17=>0x0, 0x0, 0x0, 0x5, &(0x7f0000002f80)=[0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_SETPLANE(r14, 0xc03064b7, &(0x7f0000003000)={r15, r16, r17, 0x10, 0xfffffffd, 0x270, 0x9, 0x4, 0x9, 0x1, 0x78, 0x2})
setsockopt$RDS_RECVERR(r14, 0x114, 0x5, &(0x7f0000003040)=0x1, 0x4)

17.91736477s ago: executing program 8 (id=7933):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0)

17.792029095s ago: executing program 8 (id=7934):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3)

17.31091367s ago: executing program 8 (id=7938):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
write$tcp_mem(r1, &(0x7f00000000c0)={0xc92, 0x20, 0x6, 0x20, 0x10000}, 0x48)

16.960686905s ago: executing program 46 (id=7938):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
write$tcp_mem(r1, &(0x7f00000000c0)={0xc92, 0x20, 0x6, 0x20, 0x10000}, 0x48)

4.065291833s ago: executing program 5 (id=8061):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x101, 0x0)
close(r2)

3.885991634s ago: executing program 5 (id=8063):
socket$nl_rdma(0x10, 0x3, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r1}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x4, r1, 0x30, 0x1, @ib={0x1b, 0x5, 0x6, {"973222d4ad4afd21296c12e6ad74fb8d"}, 0x6453, 0x1, 0x1}}}, 0xa0)

3.094032936s ago: executing program 5 (id=8074):
shmat(0x0, &(0x7f00001ad000/0x3000)=nil, 0xffffffffffffcfff)

2.966781604s ago: executing program 5 (id=8077):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = getpgid(0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_getfd(r1, r1, 0x0)
mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, &(0x7f0000000480))
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)

2.783745272s ago: executing program 5 (id=8081):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000880)="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", 0x43f}], 0x1, &(0x7f0000007e80)=ANY=[], 0x1270}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000003bc0)="d9a7c8", 0x3}], 0x1, &(0x7f0000006d40)=ANY=[], 0x1074}}], 0x2, 0x4c055)

2.546120703s ago: executing program 7 (id=8083):
unshare(0x2a020400)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

2.444669041s ago: executing program 5 (id=8084):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000180), 0x0, 0xffa2})

1.86730023s ago: executing program 47 (id=8084):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000180), 0x0, 0xffa2})

1.860546557s ago: executing program 7 (id=8086):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="080008000300000000001400000046ad0fc0006800006033"], 0xfce)

1.608851556s ago: executing program 9 (id=8088):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, r1})

1.440261034s ago: executing program 9 (id=8089):
socket$inet_sctp(0x2, 0x1, 0x84)
unshare(0x2c020400)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.266602232s ago: executing program 7 (id=8090):
unshare(0x22020600)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x0, {0xa, 0x4ea4, 0x9, @mcast1, 0x5}}, 0x24)

1.120989248s ago: executing program 0 (id=8091):
r0 = dup(0xffffffffffffffff)
write$UHID_INPUT(r0, &(0x7f0000000e00)={0xc, {"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", 0x1000}}, 0x1006)

1.061687363s ago: executing program 7 (id=8092):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)

950.241082ms ago: executing program 0 (id=8093):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'vxcan1\x00'}}, 0x1e)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10014)

728.716877ms ago: executing program 7 (id=8094):
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x1}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

728.529098ms ago: executing program 0 (id=8095):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x400})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

558.672084ms ago: executing program 0 (id=8096):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01040000000000000000020000000900020073790100000000000900010073797a3000"], 0x2c}}, 0x8004)

476.931278ms ago: executing program 9 (id=8097):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)

396.750357ms ago: executing program 7 (id=8098):
r0 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000005c0)={'dummy0\x00', &(0x7f0000000340)=@ethtool_rxnfc={0x29, 0x5, 0xb0fa, {0xd, @esp_ip4_spec={@broadcast, @broadcast, 0x800, 0x3}, {0x0, @empty, 0x10, 0x9c93, [0xffff9176, 0x4000009]}, @udp_ip4_spec={@private=0xa0100fd, @private=0xa010102, 0x4f24, 0x4e20, 0x18}, {0x0, @multicast, 0x6, 0x4, [0x101, 0x2]}, 0xfffffffffffffffc}}})

338.970604ms ago: executing program 0 (id=8099):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
utimensat(r1, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={{}, {0x77359400}}, 0x100)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x10000, @local, 0x3}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8)
socket$rds(0x15, 0x5, 0x0)
shutdown(r0, 0x1)

287.138611ms ago: executing program 9 (id=8100):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)="f10ec5575fa16c2b000000005f", 0xd}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
recvmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0)

117.586681ms ago: executing program 0 (id=8101):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4020, 0xfffffffe, @empty, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\t\x00', "ba0200"}, 0x28)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3)

116.638997ms ago: executing program 9 (id=8102):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f00000001c0)=""/129, &(0x7f0000000000)=0x81)

0s ago: executing program 9 (id=8103):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa)
fchmod(r0, 0x0)

kernel console output (not intermixed with test programs):

-1: Manufacturer: syz
[ 1080.677385][T14282] usb 9-1: SerialNumber: syz
[ 1080.685151][T14282] usb 9-1: config 0 descriptor??
[ 1080.697647][T24077] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1080.710702][T24077] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1080.733431][T14282] plusb 9-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.8-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ca:1a:c8:43:77:9c
[ 1080.769643][T24100] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5808'.
[ 1080.796250][T24100] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5808'.
[ 1081.074991][ T1023] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1081.497800][T24135] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1081.730870][T19178] usb 9-1: USB disconnect, device number 34
[ 1081.751367][T19178] plusb 9-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.8-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[ 1081.821445][T17628] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88804cafc000 (14)(usb0) start
[ 1081.868425][T17628] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88804cafc000 (9)(usb0) end
[ 1082.377225][T24172] Mount JFS Failure: -5
[ 1082.381831][T24172] jfs_mount failed w/return code = -5
[ 1084.190392][   T29] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1084.358219][   T29] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1084.382914][   T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.396661][   T29] usb 9-1: config 0 descriptor??
[ 1085.223491][   T29] pegasus 9-1:0.0: probe with driver pegasus failed with error -121
[ 1086.960569][T19178] usb 9-1: USB disconnect, device number 35
[ 1088.110900][ T1023] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1089.075456][T24453] netlink: 'syz.7.5930': attribute type 9 has an invalid length.
[ 1089.087041][T24453] netlink: 'syz.7.5930': attribute type 11 has an invalid length.
[ 1089.094914][T24453] netlink: 'syz.7.5930': attribute type 12 has an invalid length.
[ 1089.106726][T24453] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.5930'.
[ 1089.116200][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5930'.
[ 1091.959391][   T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1092.359432][T24587] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[ 1094.028714][T19178] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1094.195240][T19178] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1094.204479][T19178] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.216518][T19178] usb 9-1: config 0 descriptor??
[ 1094.829351][T24657] warn_alloc: 1 callbacks suppressed
[ 1094.829375][T24657] syz.5.6018: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1094.864065][T24657] CPU: 1 UID: 0 PID: 24657 Comm: syz.5.6018 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1094.864112][T24657] Tainted: [L]=SOFTLOCKUP
[ 1094.864123][T24657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1094.864140][T24657] Call Trace:
[ 1094.864150][T24657]  <TASK>
[ 1094.864161][T24657]  dump_stack_lvl+0xe8/0x150
[ 1094.864197][T24657]  warn_alloc+0x214/0x310
[ 1094.864240][T24657]  ? stack_trace_save+0x9c/0xe0
[ 1094.864287][T24657]  ? __pfx_warn_alloc+0x10/0x10
[ 1094.864335][T24657]  ? kasan_save_track+0x4f/0x80
[ 1094.864372][T24657]  ? kasan_save_track+0x3e/0x80
[ 1094.864408][T24657]  ? __kasan_kmalloc+0x93/0xb0
[ 1094.864431][T24657]  ? __kmalloc_cache_noprof+0x3e2/0x700
[ 1094.864468][T24657]  ? xskq_create+0x56/0x170
[ 1094.864510][T24657]  ? xsk_setsockopt+0x4dc/0x8d0
[ 1094.864535][T24657]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1094.864567][T24657]  ? __x64_sys_setsockopt+0x13f/0x1b0
[ 1094.864599][T24657]  ? do_syscall_64+0xec/0xf80
[ 1094.864636][T24657]  __vmalloc_node_range_noprof+0x134/0x16a0
[ 1094.864726][T24657]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1094.864772][T24657]  ? __kasan_kmalloc+0x93/0xb0
[ 1094.864803][T24657]  vmalloc_user_noprof+0xad/0xf0
[ 1094.864841][T24657]  ? xskq_create+0xbf/0x170
[ 1094.864872][T24657]  xskq_create+0xbf/0x170
[ 1094.864905][T24657]  xsk_init_queue+0xb0/0x110
[ 1094.864938][T24657]  xsk_setsockopt+0x4dc/0x8d0
[ 1094.864969][T24657]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1094.864998][T24657]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1094.865034][T24657]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1094.865070][T24657]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1094.865106][T24657]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1094.865136][T24657]  do_sock_setsockopt+0x17c/0x1b0
[ 1094.865176][T24657]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1094.865217][T24657]  do_syscall_64+0xec/0xf80
[ 1094.865251][T24657]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1094.865288][T24657]  ? trace_irq_disable+0x37/0x100
[ 1094.865317][T24657]  ? clear_bhb_loop+0x40/0x90
[ 1094.865348][T24657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1094.865375][T24657] RIP: 0033:0x7f8141d8f749
[ 1094.865399][T24657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1094.865423][T24657] RSP: 002b:00007f813fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1094.865450][T24657] RAX: ffffffffffffffda RBX: 00007f8141fe5fa0 RCX: 00007f8141d8f749
[ 1094.865470][T24657] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[ 1094.865487][T24657] RBP: 00007f8141e13f91 R08: 0000000000000004 R09: 0000000000000000
[ 1094.865503][T24657] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1094.865520][T24657] R13: 00007f8141fe6038 R14: 00007f8141fe5fa0 R15: 00007ffc1b7db168
[ 1094.865558][T24657]  </TASK>
[ 1094.865596][T24657] Mem-Info:
[ 1095.153598][T19178] pegasus 9-1:0.0: probe with driver pegasus failed with error -121
[ 1095.172814][T24657] active_anon:45816 inactive_anon:1 isolated_anon:0
[ 1095.172814][T24657]  active_file:10103 inactive_file:51122 isolated_file:0
[ 1095.172814][T24657]  unevictable:17169 dirty:289 writeback:0
[ 1095.172814][T24657]  slab_reclaimable:7737 slab_unreclaimable:113375
[ 1095.172814][T24657]  mapped:24905 shmem:38894 pagetables:2074
[ 1095.172814][T24657]  sec_pagetables:0 bounce:0
[ 1095.172814][T24657]  kernel_misc_reclaimable:0
[ 1095.172814][T24657]  free:1231867 free_pcp:20349 free_cma:0
[ 1095.221272][T24657] Node 0 active_anon:183264kB inactive_anon:4kB active_file:40412kB inactive_file:204264kB unevictable:67140kB isolated(anon):0kB isolated(file):0kB mapped:99620kB dirty:1156kB writeback:0kB shmem:154040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:14844kB pagetables:8048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1095.255650][T24657] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1095.288101][T24657] Node 0 DMA free:15296kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB
[ 1095.320646][T24657] lowmem_reserve[]: 0 2491 2492 2492 2492
[ 1095.328193][T24657] Node 0 DMA32 free:1013344kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:183064kB inactive_anon:4kB active_file:40412kB inactive_file:204264kB unevictable:67140kB writepending:1156kB zspages:664kB present:3129332kB managed:2551204kB mlocked:0kB bounce:0kB free_pcp:67016kB local_pcp:28832kB free_cma:0kB
[ 1095.363530][T24657] lowmem_reserve[]: 0 0 0 0 0
[ 1095.368437][T24657] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1095.405431][T24657] lowmem_reserve[]: 0 0 0 0 0
[ 1095.410249][T24657] Node 1 Normal free:3898196kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15008kB local_pcp:0kB free_cma:0kB
[ 1095.448047][T24657] lowmem_reserve[]: 0 0 0 0 0
[ 1095.453238][T24657] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB
[ 1095.472641][T24657] Node 0 DMA32: 1855*4kB (UME) 1192*8kB (UME) 2637*16kB (UME) 1324*32kB (UME) 794*64kB (UME) 468*128kB (UME) 343*256kB (UME) 164*512kB (UME) 32*1024kB (UM) 17*2048kB (UME) 137*4096kB (UM) = 1012748kB
[ 1095.494094][T24657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1095.508813][T24657] Node 1 Normal: 133*4kB (UE) 50*8kB (UME) 43*16kB (UME) 216*32kB (UME) 82*64kB (UME) 25*128kB (UME) 9*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 944*4096kB (M) = 3898196kB
[ 1095.528987][T24657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1095.538776][T24657] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1095.550161][T24657] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1095.563550][T24657] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1095.573790][T24657] 116518 total pagecache pages
[ 1095.578739][T24657] 2 pages in swap cache
[ 1095.584304][T24657] Free swap  = 124804kB
[ 1095.588726][T24657] Total swap = 124996kB
[ 1095.593198][T24657] 2097051 pages RAM
[ 1095.597193][T24657] 0 pages HighMem/MovableOnly
[ 1095.601990][T24657] 427480 pages reserved
[ 1095.606799][T24657] 0 pages cma reserved
[ 1096.821906][ T5909] usb 9-1: USB disconnect, device number 36
[ 1097.371476][T19178] usb 9-1: new low-speed USB device number 37 using dummy_hcd
[ 1097.523225][T19178] usb 9-1: config 7 has an invalid interface number: 252 but max is 0
[ 1097.531969][T19178] usb 9-1: config 7 has no interface number 0
[ 1097.538196][T19178] usb 9-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0
[ 1097.549725][T19178] usb 9-1: config 7 interface 252 has no altsetting 0
[ 1097.558888][T19178] usb 9-1: string descriptor 0 read error: -71
[ 1097.565629][T19178] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1097.575079][T19178] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.589907][T19178] usb 9-1: can't set config #7, error -71
[ 1097.608045][T19178] usb 9-1: USB disconnect, device number 37
[ 1097.730202][T24745] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6056'.
[ 1097.744541][T24745] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6056'.
[ 1098.760177][ T5909] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1098.910094][ T5909] usb 9-1: Using ep0 maxpacket: 16
[ 1098.917113][ T5909] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1098.927667][ T5909] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1098.939244][ T5909] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1098.948627][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.960381][ T5909] usb 9-1: Product: syz
[ 1098.964611][ T5909] usb 9-1: Manufacturer: syz
[ 1098.969323][ T5909] usb 9-1: SerialNumber: syz
[ 1099.189586][ T5909] usb 9-1: 0:2 : does not exist
[ 1099.215600][ T5909] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1099.305911][ T5909] usb 9-1: USB disconnect, device number 38
[ 1099.356527][T23936] udevd[23936]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1100.088641][T24858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6101'.
[ 1100.107385][T24858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6101'.
[ 1102.127328][T24953] fuse: Bad value for 'fd'
[ 1102.662934][T24974] fuse: Bad value for 'fd'
[ 1103.317753][T25000] fuse: Bad value for 'fd'
[ 1103.642605][T25012] overlayfs: failed to clone upperpath
[ 1104.106491][T19178] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1104.266385][T19178] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1104.282672][T19178] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1104.295383][T19178] usb 9-1: config 0 descriptor??
[ 1105.117727][T19178] pegasus 9-1:0.0: probe with driver pegasus failed with error -121
[ 1105.220898][T25068] /dev/nullb0: Can't lookup blockdev
[ 1105.782785][T25089] overlayfs: failed to clone upperpath
[ 1106.897666][ T5909] usb 9-1: USB disconnect, device number 39
[ 1109.013089][T14282] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 1109.107846][ T5909] IPVS: starting estimator thread 0...
[ 1109.175063][T14282] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1109.186148][T14282] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1109.195613][T14282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1109.203814][T25224] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1109.216660][T14282] usb 9-1: config 0 descriptor??
[ 1109.235762][T14282] pwc: Askey VC010 type 2 USB webcam detected.
[ 1109.640051][T14282] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1109.647947][T14282] pwc: recv_control_msg error -32 req 02 val 2700
[ 1109.658421][T14282] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1109.670144][T14282] pwc: recv_control_msg error -32 req 04 val 1000
[ 1109.678746][T14282] pwc: recv_control_msg error -32 req 04 val 1300
[ 1109.693512][T14282] pwc: recv_control_msg error -32 req 04 val 1400
[ 1109.700806][T14282] pwc: recv_control_msg error -32 req 02 val 2000
[ 1109.712041][T14282] pwc: recv_control_msg error -32 req 02 val 2100
[ 1109.719684][T14282] pwc: recv_control_msg error -32 req 04 val 1500
[ 1109.728474][T14282] pwc: recv_control_msg error -32 req 02 val 2500
[ 1109.736195][T14282] pwc: recv_control_msg error -32 req 02 val 2400
[ 1109.743932][T14282] pwc: recv_control_msg error -32 req 02 val 2600
[ 1109.751282][T14282] pwc: recv_control_msg error -32 req 02 val 2900
[ 1109.959798][T14282] pwc: recv_control_msg error -71 req 04 val 1100
[ 1109.968013][T14282] pwc: recv_control_msg error -71 req 04 val 1200
[ 1109.981592][T14282] pwc: Registered as video103.
[ 1110.002603][T14282] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input178
[ 1110.041776][T14282] usb 9-1: USB disconnect, device number 40
[ 1110.639999][T25279] bpf: Bad value for 'uid'
[ 1111.026068][T25302] netlink: 'syz.5.6289': attribute type 11 has an invalid length.
[ 1111.124490][T25311] netlink: 763 bytes leftover after parsing attributes in process `syz.7.6293'.
[ 1111.191962][ T5925] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1111.363767][ T5925] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1111.383681][ T5925] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1111.394696][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1111.409470][ T5925] usb 9-1: config 0 descriptor??
[ 1111.430743][ T5925] pwc: Askey VC010 type 2 USB webcam detected.
[ 1111.843349][ T5925] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1111.852112][ T5925] pwc: recv_control_msg error -32 req 02 val 2700
[ 1111.941200][ T5925] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1111.951090][ T5925] pwc: recv_control_msg error -32 req 04 val 1000
[ 1111.966134][ T5925] pwc: recv_control_msg error -32 req 04 val 1300
[ 1111.981568][ T5925] pwc: recv_control_msg error -32 req 04 val 1400
[ 1111.988931][ T5925] pwc: recv_control_msg error -32 req 02 val 2000
[ 1111.996244][ T5925] pwc: recv_control_msg error -32 req 02 val 2100
[ 1112.003903][ T5925] pwc: recv_control_msg error -32 req 04 val 1500
[ 1112.011294][ T5925] pwc: recv_control_msg error -32 req 02 val 2500
[ 1112.019700][ T5925] pwc: recv_control_msg error -32 req 02 val 2400
[ 1112.027148][ T5925] pwc: recv_control_msg error -32 req 02 val 2600
[ 1112.034252][ T5925] pwc: recv_control_msg error -32 req 02 val 2900
[ 1112.242490][ T5925] pwc: recv_control_msg error -71 req 04 val 1100
[ 1112.249424][ T5925] pwc: recv_control_msg error -71 req 04 val 1200
[ 1112.274620][ T5925] pwc: Registered as video103.
[ 1112.295524][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input179
[ 1112.331927][ T5925] usb 9-1: USB disconnect, device number 41
[ 1113.050492][ T1337] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1113.837539][T25412] fuse: Bad value for 'group_id'
[ 1113.856333][T25412] fuse: Bad value for 'group_id'
[ 1113.900913][T25415] overlayfs: failed to clone upperpath
[ 1113.989708][T19178] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1114.150110][T19178] usb 9-1: Using ep0 maxpacket: 16
[ 1114.162251][T19178] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1114.193698][T19178] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1114.210236][T19178] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1114.222103][T19178] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1114.233562][T19178] usb 9-1: Product: syz
[ 1114.238102][T19178] usb 9-1: Manufacturer: syz
[ 1114.245639][T19178] usb 9-1: SerialNumber: syz
[ 1114.334594][T25436] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6351'.
[ 1114.467294][T19178] usb 9-1: 0:2 : does not exist
[ 1114.488309][T19178] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1114.592080][T19178] usb 9-1: USB disconnect, device number 42
[ 1114.654283][T23936] udevd[23936]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1115.409040][T14282] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1115.560356][T14282] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1115.569519][T14282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1115.580805][T14282] usb 9-1: config 0 descriptor??
[ 1116.451087][T25514] syz.7.6387: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1116.467221][T25514] CPU: 1 UID: 0 PID: 25514 Comm: syz.7.6387 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1116.467258][T25514] Tainted: [L]=SOFTLOCKUP
[ 1116.467266][T25514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1116.467280][T25514] Call Trace:
[ 1116.467290][T25514]  <TASK>
[ 1116.467299][T25514]  dump_stack_lvl+0xe8/0x150
[ 1116.467333][T25514]  warn_alloc+0x214/0x310
[ 1116.467379][T25514]  ? stack_trace_save+0x9c/0xe0
[ 1116.467412][T25514]  ? __pfx_warn_alloc+0x10/0x10
[ 1116.467454][T25514]  ? kasan_save_track+0x4f/0x80
[ 1116.467487][T25514]  ? kasan_save_track+0x3e/0x80
[ 1116.467540][T25514]  ? __kasan_kmalloc+0x93/0xb0
[ 1116.467560][T25514]  ? __kmalloc_cache_noprof+0x3e2/0x700
[ 1116.467591][T25514]  ? xskq_create+0x56/0x170
[ 1116.467619][T25514]  ? xsk_setsockopt+0x4dc/0x8d0
[ 1116.467635][T25514]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1116.467656][T25514]  ? __x64_sys_setsockopt+0x13f/0x1b0
[ 1116.467699][T25514]  ? do_syscall_64+0xec/0xf80
[ 1116.467732][T25514]  __vmalloc_node_range_noprof+0x134/0x16a0
[ 1116.467792][T25514]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1116.467837][T25514]  ? __kasan_kmalloc+0x93/0xb0
[ 1116.467868][T25514]  vmalloc_user_noprof+0xad/0xf0
[ 1116.467900][T25514]  ? xskq_create+0xbf/0x170
[ 1116.467927][T25514]  xskq_create+0xbf/0x170
[ 1116.467956][T25514]  xsk_init_queue+0xb0/0x110
[ 1116.467984][T25514]  xsk_setsockopt+0x4dc/0x8d0
[ 1116.468012][T25514]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1116.468037][T25514]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1116.468070][T25514]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1116.468106][T25514]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1116.468138][T25514]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1116.468165][T25514]  do_sock_setsockopt+0x17c/0x1b0
[ 1116.468215][T25514]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1116.468255][T25514]  do_syscall_64+0xec/0xf80
[ 1116.468286][T25514]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.468310][T25514]  ? trace_irq_disable+0x37/0x100
[ 1116.468335][T25514]  ? clear_bhb_loop+0x40/0x90
[ 1116.468374][T25514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.468398][T25514] RIP: 0033:0x7f70e378f749
[ 1116.468421][T25514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1116.468441][T25514] RSP: 002b:00007f70e4612038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1116.468466][T25514] RAX: ffffffffffffffda RBX: 00007f70e39e5fa0 RCX: 00007f70e378f749
[ 1116.468484][T25514] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[ 1116.468499][T25514] RBP: 00007f70e3813f91 R08: 0000000000000004 R09: 0000000000000000
[ 1116.468514][T25514] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1116.468530][T25514] R13: 00007f70e39e6038 R14: 00007f70e39e5fa0 R15: 00007fffaf5adb88
[ 1116.468567][T25514]  </TASK>
[ 1116.748901][T25514] Mem-Info:
[ 1116.752066][T25514] active_anon:45941 inactive_anon:1 isolated_anon:0
[ 1116.752066][T25514]  active_file:10241 inactive_file:51130 isolated_file:0
[ 1116.752066][T25514]  unevictable:17169 dirty:234 writeback:0
[ 1116.752066][T25514]  slab_reclaimable:7703 slab_unreclaimable:113573
[ 1116.752066][T25514]  mapped:25206 shmem:38897 pagetables:2117
[ 1116.752066][T25514]  sec_pagetables:0 bounce:0
[ 1116.752066][T25514]  kernel_misc_reclaimable:0
[ 1116.752066][T25514]  free:1235925 free_pcp:15477 free_cma:0
[ 1116.798502][T25514] Node 0 active_anon:183764kB inactive_anon:4kB active_file:40964kB inactive_file:204296kB unevictable:67140kB isolated(anon):0kB isolated(file):0kB mapped:100824kB dirty:932kB writeback:0kB shmem:154052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:14912kB pagetables:8320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1116.831495][T25514] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1116.862853][T25514] Node 0 DMA free:15296kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB
[ 1116.893392][T25514] lowmem_reserve[]: 0 2491 2492 2492 2492
[ 1116.899465][T25514] Node 0 DMA32 free:1032000kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:183764kB inactive_anon:4kB active_file:40964kB inactive_file:204296kB unevictable:67140kB writepending:932kB zspages:664kB present:3129332kB managed:2551204kB mlocked:0kB bounce:0kB free_pcp:45496kB local_pcp:25204kB free_cma:0kB
[ 1116.933940][T25514] lowmem_reserve[]: 0 0 0 0 0
[ 1116.939201][T25514] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1116.968959][T25514] lowmem_reserve[]: 0 0 0 0 0
[ 1116.973858][T25514] Node 1 Normal free:3898196kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15008kB local_pcp:0kB free_cma:0kB
[ 1117.006321][T25514] lowmem_reserve[]: 0 0 0 0 0
[ 1117.011506][T25514] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB
[ 1117.025486][T25514] Node 0 DMA32: 1257*4kB (UME) 1373*8kB (UME) 3119*16kB (UME) 1080*32kB (UME) 888*64kB (UME) 508*128kB (UME) 346*256kB (UME) 164*512kB (UME) 32*1024kB (UM) 21*2048kB (UME) 137*4096kB (UM) = 1031804kB
[ 1117.048197][T25514] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1117.060758][T25514] Node 1 Normal: 133*4kB (UE) 50*8kB (UME) 43*16kB (UME) 216*32kB (UME) 82*64kB (UME) 25*128kB (UME) 9*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 944*4096kB (M) = 3898196kB
[ 1117.082561][T25514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1117.092367][T25514] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1117.109795][T25514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1117.138265][T25514] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1117.149341][T25514] 116667 total pagecache pages
[ 1117.154295][T25514] 2 pages in swap cache
[ 1117.158716][T25514] Free swap  = 124804kB
[ 1117.163073][T25514] Total swap = 124996kB
[ 1117.167342][T25514] 2097051 pages RAM
[ 1117.171375][T25514] 0 pages HighMem/MovableOnly
[ 1117.176234][T25514] 427480 pages reserved
[ 1117.180704][T25514] 0 pages cma reserved
[ 1117.975898][T14282] pegasus 9-1:0.0: setup Pegasus II specific registers
[ 1119.396847][T14282] pegasus 9-1:0.0: can't locate MII phy, using default
[ 1119.418673][T14282] pegasus 9-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, 56:d2:8e:fb:ea:a1
[ 1119.607718][T14282] usb 9-1: USB disconnect, device number 43
[ 1119.616709][T19193] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888032a0c000 (11)(eth13) start
[ 1119.659709][T19193] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888032a0c000 (3)(eth13) end
[ 1120.088649][T19193] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1120.740036][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1120.746660][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.860115][T25706] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6458'.
[ 1121.958422][T15116] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888076be4000 (11)(erspan0) start
[ 1121.977417][T15116] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888076be4000 (9)(erspan0) end
[ 1121.995401][T25714] fuse: Unknown parameter 'grou00000000000000000000'
[ 1122.007460][T15116] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888033962000 (11)(gretap0) start
[ 1122.036547][T15116] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888033962000 (4)(gretap0) end
[ 1122.628655][T25738] fuse: Unknown parameter 'grou00000000000000000000'
[ 1123.049976][T25758] fuse: Unknown parameter 'grou00000000000000000000'
[ 1123.532964][T25783] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1123.924153][   T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1123.999058][T25806] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1124.452485][ T5909] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 1124.624648][ T5909] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1124.646155][ T5909] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1124.661601][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1124.688341][ T5909] usb 9-1: config 0 descriptor??
[ 1124.711570][ T5909] pwc: Askey VC010 type 2 USB webcam detected.
[ 1125.073298][T25849] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6511'.
[ 1125.107210][ T5909] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1125.123586][ T5909] pwc: recv_control_msg error -32 req 02 val 2700
[ 1125.141009][ T5909] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1125.161293][ T5909] pwc: recv_control_msg error -32 req 04 val 1000
[ 1125.180751][ T5909] pwc: recv_control_msg error -32 req 04 val 1300
[ 1125.197933][ T5909] pwc: recv_control_msg error -32 req 04 val 1400
[ 1125.212685][ T5909] pwc: recv_control_msg error -32 req 02 val 2000
[ 1125.225792][ T5909] pwc: recv_control_msg error -32 req 02 val 2100
[ 1125.242710][ T5909] pwc: recv_control_msg error -32 req 04 val 1500
[ 1125.255593][T25855] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1125.264397][ T5909] pwc: recv_control_msg error -32 req 02 val 2500
[ 1125.281696][ T5909] pwc: recv_control_msg error -32 req 02 val 2400
[ 1125.303000][ T5909] pwc: recv_control_msg error -32 req 02 val 2600
[ 1125.311697][ T5909] pwc: recv_control_msg error -32 req 02 val 2900
[ 1125.534669][ T5909] pwc: recv_control_msg error -71 req 04 val 1100
[ 1125.590021][ T5909] pwc: recv_control_msg error -71 req 04 val 1200
[ 1125.608591][ T5909] pwc: Registered as video103.
[ 1125.624441][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input180
[ 1125.648759][ T5909] usb 9-1: USB disconnect, device number 44
[ 1126.027293][T25886] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1126.176249][T25893] Debayer B: =================  START STATUS  =================
[ 1126.207410][T25893] Debayer B: Debayer Mean Window Size: 3
[ 1126.217116][T25893] Debayer B: ==================  END STATUS  ==================
[ 1126.244552][T25896] netlink: 'syz.0.6526': attribute type 10 has an invalid length.
[ 1126.268980][T25896] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1126.786117][T25919] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1127.088226][   T30] audit: type=1400 audit(6308180217.094:14503): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=25929 comm="syz.8.6536"
[ 1127.288443][T25942] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1127.370539][   T29] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1127.500410][   T29] usb 9-1: device descriptor read/64, error -71
[ 1127.666639][T25956] fuse: Bad value for 'user_id'
[ 1127.672105][T25956] fuse: Bad value for 'user_id'
[ 1127.680078][T25956] overlayfs: failed to clone upperpath
[ 1127.689140][T25956] fuse: Bad value for 'user_id'
[ 1127.701645][T25956] fuse: Bad value for 'user_id'
[ 1127.750270][   T29] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1127.890596][   T29] usb 9-1: device descriptor read/64, error -71
[ 1128.000870][   T29] usb usb9-port1: attempt power cycle
[ 1128.339862][   T29] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1128.364265][   T29] usb 9-1: device descriptor read/8, error -71
[ 1128.609739][   T29] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 1128.641852][   T29] usb 9-1: device descriptor read/8, error -71
[ 1128.756590][   T29] usb usb9-port1: unable to enumerate USB device
[ 1130.010118][T26046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6584'.
[ 1132.067324][ T5925] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 1132.237482][ T5925] usb 9-1: Using ep0 maxpacket: 32
[ 1132.245026][ T5925] usb 9-1: config 0 has an invalid interface number: 231 but max is 0
[ 1132.267928][ T5925] usb 9-1: config 0 has no interface number 0
[ 1132.274116][ T5925] usb 9-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1132.307207][ T5925] usb 9-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[ 1132.342316][ T5925] usb 9-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[ 1132.363249][ T5925] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1132.373450][ T5925] usb 9-1: Product: syz
[ 1132.378151][ T5925] usb 9-1: Manufacturer: syz
[ 1132.384024][ T5925] usb 9-1: SerialNumber: syz
[ 1132.393887][ T5925] usb 9-1: config 0 descriptor??
[ 1132.413624][T26131] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1132.422196][T26131] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1132.448874][ T5925] plusb 9-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.8-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1a:4f:fc:ed:39:fc
[ 1132.653854][ T5925] usb 9-1: USB disconnect, device number 49
[ 1132.674238][ T5925] plusb 9-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.8-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[ 1132.690507][ T1147] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff8880357d8000 (11)(usb0) start
[ 1132.719263][ T1147] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff8880357d8000 (3)(usb0) end
[ 1133.468301][T26193] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6634'.
[ 1133.496332][T26193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6634'.
[ 1133.538211][T26196] netlink: 'syz.7.6638': attribute type 29 has an invalid length.
[ 1133.580412][T26196] netlink: 'syz.7.6638': attribute type 29 has an invalid length.
[ 1133.757890][T26207] fuse: Bad value for 'fd'
[ 1135.305145][ T5925] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 1135.467072][ T5925] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1135.477421][ T5925] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1135.487399][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.500186][ T5925] usb 9-1: config 0 descriptor??
[ 1135.510504][ T5925] pwc: Askey VC010 type 2 USB webcam detected.
[ 1135.914117][ T5925] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1135.926476][ T5925] pwc: recv_control_msg error -32 req 02 val 2700
[ 1135.933846][ T5925] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1135.942986][ T5925] pwc: recv_control_msg error -32 req 04 val 1000
[ 1135.953152][ T5925] pwc: recv_control_msg error -32 req 04 val 1300
[ 1135.962938][ T5925] pwc: recv_control_msg error -32 req 04 val 1400
[ 1135.971940][ T5925] pwc: recv_control_msg error -32 req 02 val 2000
[ 1135.979876][ T5925] pwc: recv_control_msg error -32 req 02 val 2100
[ 1135.988481][ T5925] pwc: recv_control_msg error -32 req 04 val 1500
[ 1136.000623][ T5925] pwc: recv_control_msg error -32 req 02 val 2500
[ 1136.009394][ T5925] pwc: recv_control_msg error -32 req 02 val 2400
[ 1136.016740][ T5925] pwc: recv_control_msg error -32 req 02 val 2600
[ 1136.024834][ T5925] pwc: recv_control_msg error -32 req 02 val 2900
[ 1136.235037][ T5925] pwc: recv_control_msg error -71 req 04 val 1100
[ 1136.249350][ T5925] pwc: recv_control_msg error -71 req 04 val 1200
[ 1136.270788][ T5925] pwc: Registered as video103.
[ 1136.284251][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input181
[ 1136.333203][ T5925] usb 9-1: USB disconnect, device number 50
[ 1136.610668][T26275] 9p: Bad value for 'rfdno'
[ 1137.277806][T26285] netlink: 'syz.7.6671': attribute type 2 has an invalid length.
[ 1137.856488][T26302] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6679'.
[ 1140.191782][ T5909] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1140.320679][T26389] fuse: Unknown parameter 'roo0000000100000'
[ 1140.342643][ T5909] usb 9-1: Using ep0 maxpacket: 16
[ 1140.349789][ T5909] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1140.371655][ T5909] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1140.386001][ T5909] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1140.396340][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1140.405589][ T5909] usb 9-1: Product: syz
[ 1140.409816][ T5909] usb 9-1: Manufacturer: syz
[ 1140.415631][ T5909] usb 9-1: SerialNumber: syz
[ 1140.633857][ T5909] usb 9-1: 0:2 : does not exist
[ 1140.662945][ T5909] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1140.724140][ T5909] usb 9-1: USB disconnect, device number 51
[ 1140.775437][T25604] udevd[25604]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1141.174515][T26414] netlink: 'syz.0.6720': attribute type 23 has an invalid length.
[ 1141.436572][T26422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6722'.
[ 1141.492467][ T5921] usb 9-1: new full-speed USB device number 52 using dummy_hcd
[ 1141.696134][ T5921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 65535, setting to 64
[ 1141.725038][ T5921] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1141.739283][ T5921] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1141.760890][ T5921] usb 9-1: Product: syz
[ 1141.765207][ T5921] usb 9-1: Manufacturer: syz
[ 1141.769850][ T5921] usb 9-1: SerialNumber: syz
[ 1141.787309][ T5921] usb 9-1: config 0 descriptor??
[ 1141.845766][T26418] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1141.863883][ T5921] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1141.869879][ T5921] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1141.893643][ T5921] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1142.065201][ T5921] usb 9-1: USB disconnect, device number 52
[ 1142.098120][T26449] udevd[26449]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1144.534802][T26525] netlink: 652 bytes leftover after parsing attributes in process `syz.7.6759'.
[ 1144.546160][T15116] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888034c7c000 (13)(netdevsim3) start
[ 1144.567000][T15116] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888034c7c000 (11)(netdevsim3) end
[ 1144.591755][T26519] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.814313][T17628] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88802975c000 (13)(netdevsim2) start
[ 1144.820823][T26519] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.866223][T17628] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88802975c000 (4)(netdevsim2) end
[ 1145.014308][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888029758000 (16)(netdevsim1) start
[ 1145.030865][T26519] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.038764][ T1147] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1145.058872][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888029758000 (12)(netdevsim1) end
[ 1145.195251][T26539] netlink: 'syz.7.6762': attribute type 1 has an invalid length.
[ 1145.218734][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff8880222d0000 (13)(netdevsim0) start
[ 1145.230583][T26519] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.258438][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff8880222d0000 (8)(netdevsim0) end
[ 1145.512487][   T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1145.555071][ T1147] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1145.593257][T17628] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1145.626298][T17628] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.266754][T26575] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6778'.
[ 1147.127165][ T5925] usb 9-1: new full-speed USB device number 53 using dummy_hcd
[ 1147.288957][ T5925] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1147.318027][ T5925] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1147.346283][ T5925] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1147.368266][ T5925] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1147.397090][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1147.422495][T26592] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1147.481093][T26611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6795'.
[ 1147.520348][T26611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6795'.
[ 1147.533880][T26611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6795'.
[ 1147.678895][ T5925] aiptek 9-1:17.0: Aiptek using 400 ms programming speed
[ 1147.721996][ T5925] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input182
[ 1147.804059][ T5925] usb 9-1: USB disconnect, device number 53
[ 1147.810358][    C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1149.048251][T26651] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6809'.
[ 1149.626050][T26670] syzkaller1: entered allmulticast mode
[ 1149.757705][T17628] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff8880904fc000 (15)(syzkaller1) start
[ 1149.789434][T17628] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff8880904fc000 (3)(syzkaller1) end
[ 1150.164931][ T5884] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[ 1150.347883][ T5884] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1150.358839][ T5884] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1150.368566][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.385484][ T5884] usb 9-1: config 0 descriptor??
[ 1150.399223][ T5884] pwc: Askey VC010 type 2 USB webcam detected.
[ 1150.512767][T26714] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6835'.
[ 1150.535816][T26714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6835'.
[ 1150.803146][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1150.815460][ T5884] pwc: recv_control_msg error -32 req 02 val 2700
[ 1150.834546][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1150.841993][ T5884] pwc: recv_control_msg error -32 req 04 val 1000
[ 1150.849529][ T5884] pwc: recv_control_msg error -32 req 04 val 1300
[ 1150.856951][ T5884] pwc: recv_control_msg error -32 req 04 val 1400
[ 1150.865016][ T5884] pwc: recv_control_msg error -32 req 02 val 2000
[ 1150.873062][ T5884] pwc: recv_control_msg error -32 req 02 val 2100
[ 1150.880208][ T5884] pwc: recv_control_msg error -32 req 04 val 1500
[ 1150.895164][ T5884] pwc: recv_control_msg error -32 req 02 val 2500
[ 1150.902521][ T5884] pwc: recv_control_msg error -32 req 02 val 2400
[ 1150.909997][ T5884] pwc: recv_control_msg error -32 req 02 val 2600
[ 1150.917388][ T5884] pwc: recv_control_msg error -32 req 02 val 2900
[ 1151.125288][ T5884] pwc: recv_control_msg error -71 req 04 val 1100
[ 1151.156522][ T5884] pwc: recv_control_msg error -71 req 04 val 1200
[ 1151.178969][ T5884] pwc: Registered as video103.
[ 1151.200389][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input183
[ 1151.244440][ T5884] usb 9-1: USB disconnect, device number 54
[ 1151.457743][   T30] audit: type=1326 audit(6308180241.480:14504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26731 comm="syz.0.6842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f2d38f749 code=0x0
[ 1152.064117][ T1023] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1152.733498][T26776] trusted_key: syz.7.6860 sent an empty control message without MSG_MORE.
[ 1153.409567][T26805] ������: renamed from vlan0 (while UP)
[ 1154.342154][ T5925] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[ 1154.492108][ T5925] usb 9-1: Using ep0 maxpacket: 8
[ 1154.501758][ T5925] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[ 1154.516209][ T5925] usb 9-1: config 179 has no interface number 0
[ 1154.531902][ T5925] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1154.555150][ T5925] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1154.569969][ T5925] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 100, changing to 10
[ 1154.584409][ T5925] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 33864, setting to 1024
[ 1154.597252][ T5925] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1154.616927][ T5925] usb 9-1: config 179 interface 65 has no altsetting 0
[ 1154.633605][ T5925] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1154.643331][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.660447][T26824] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1154.684474][ T5925] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input184
[ 1154.774870][ T5178] input input184: unable to receive magic message: -110
[ 1154.821530][ T5178] input input184: unable to receive magic message: -32
[ 1154.928781][ T5178] input input184: unable to receive magic message: -32
[ 1154.958775][ T5884] usb 9-1: USB disconnect, device number 55
[ 1154.958819][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1154.973112][    C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1155.901782][T19193] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1156.411026][   T29] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[ 1156.582537][   T29] usb 9-1: Using ep0 maxpacket: 16
[ 1156.589433][   T29] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1156.600292][   T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1156.630884][   T29] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1156.650489][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.669198][   T29] usb 9-1: Product: syz
[ 1156.673682][   T29] usb 9-1: Manufacturer: syz
[ 1156.678316][   T29] usb 9-1: SerialNumber: syz
[ 1156.918227][   T29] usb 9-1: 0:2 : does not exist
[ 1156.927889][   T29] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1156.988278][   T29] usb 9-1: USB disconnect, device number 56
[ 1157.036333][T25604] udevd[25604]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1157.294153][T26927] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6922'.
[ 1158.368572][T26973] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6939'.
[ 1160.178137][ T5925] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[ 1160.339766][ T5925] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1160.350201][ T5925] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1160.359567][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1160.370230][ T5925] usb 9-1: config 0 descriptor??
[ 1160.382213][ T5925] pwc: Askey VC010 type 2 USB webcam detected.
[ 1160.786024][ T5925] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1160.795206][ T5925] pwc: recv_control_msg error -32 req 02 val 2700
[ 1160.802922][ T5925] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1160.811914][ T5925] pwc: recv_control_msg error -32 req 04 val 1000
[ 1160.819567][ T5925] pwc: recv_control_msg error -32 req 04 val 1300
[ 1160.826889][ T5925] pwc: recv_control_msg error -32 req 04 val 1400
[ 1160.835471][ T5925] pwc: recv_control_msg error -32 req 02 val 2000
[ 1160.843537][ T5925] pwc: recv_control_msg error -32 req 02 val 2100
[ 1160.851388][ T5925] pwc: recv_control_msg error -32 req 04 val 1500
[ 1160.865817][ T5925] pwc: recv_control_msg error -32 req 02 val 2500
[ 1160.873684][ T5925] pwc: recv_control_msg error -32 req 02 val 2400
[ 1160.882298][ T5925] pwc: recv_control_msg error -32 req 02 val 2600
[ 1160.890488][ T5925] pwc: recv_control_msg error -32 req 02 val 2900
[ 1161.099663][ T5925] pwc: recv_control_msg error -71 req 04 val 1100
[ 1161.123618][ T5925] pwc: recv_control_msg error -71 req 04 val 1200
[ 1161.146647][ T5925] pwc: Registered as video103.
[ 1161.167548][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input185
[ 1161.217732][ T5925] usb 9-1: USB disconnect, device number 57
[ 1163.539171][T27152] 9p: Bad value for 'wfdno'
[ 1163.765841][ T5884] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[ 1163.929948][ T5884] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1163.955521][ T5884] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1163.976173][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.998775][ T5884] usb 9-1: config 0 descriptor??
[ 1164.018401][ T5884] pwc: Askey VC010 type 2 USB webcam detected.
[ 1164.414130][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1164.421785][ T5884] pwc: recv_control_msg error -32 req 02 val 2700
[ 1164.429237][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1164.436730][ T5884] pwc: recv_control_msg error -32 req 04 val 1000
[ 1164.444620][ T5884] pwc: recv_control_msg error -32 req 04 val 1300
[ 1164.452607][ T5884] pwc: recv_control_msg error -32 req 04 val 1400
[ 1164.459891][ T5884] pwc: recv_control_msg error -32 req 02 val 2000
[ 1164.467473][ T5884] pwc: recv_control_msg error -32 req 02 val 2100
[ 1164.474725][ T5884] pwc: recv_control_msg error -32 req 04 val 1500
[ 1164.481975][ T5884] pwc: recv_control_msg error -32 req 02 val 2500
[ 1164.489078][ T5884] pwc: recv_control_msg error -32 req 02 val 2400
[ 1164.496384][ T5884] pwc: recv_control_msg error -32 req 02 val 2600
[ 1164.503503][ T5884] pwc: recv_control_msg error -32 req 02 val 2900
[ 1164.711133][ T5884] pwc: recv_control_msg error -71 req 04 val 1100
[ 1164.718263][ T5884] pwc: recv_control_msg error -71 req 04 val 1200
[ 1164.736630][ T5884] pwc: Registered as video103.
[ 1164.756528][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input186
[ 1164.808097][ T5884] usb 9-1: USB disconnect, device number 58
[ 1165.308730][T27203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7036'.
[ 1166.593772][T19178] usb 9-1: new full-speed USB device number 59 using dummy_hcd
[ 1166.765499][T19178] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1166.775469][T19178] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.793342][T19178] usb 9-1: config 0 descriptor??
[ 1167.022001][T27239] netlink: 'syz.8.7054': attribute type 12 has an invalid length.
[ 1167.030134][T27239] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7054'.
[ 1167.138784][ T5884] usb 9-1: USB disconnect, device number 59
[ 1167.982760][ T5884] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[ 1168.142747][ T5884] usb 9-1: Using ep0 maxpacket: 16
[ 1168.149860][ T5884] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1168.172293][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1168.182392][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1168.201503][ T5884] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[ 1168.211038][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1168.224082][ T5884] usb 9-1: Product: syz
[ 1168.228319][ T5884] usb 9-1: Manufacturer: syz
[ 1168.235379][ T5884] usb 9-1: SerialNumber: syz
[ 1168.243428][ T5884] usb 9-1: config 0 descriptor??
[ 1168.258455][ T5884] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[ 1168.272566][ T5884] gspca_stv06xx: st6422 sensor detected
[ 1168.543096][ T5884] STV06xx 9-1:0.0: probe with driver STV06xx failed with error -71
[ 1168.569347][ T5884] usb 9-1: USB disconnect, device number 60
[ 1168.886703][ T5884] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[ 1169.062057][ T5884] usb 9-1: Using ep0 maxpacket: 16
[ 1169.078770][ T5884] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1169.097555][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1169.123276][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1169.139938][ T5884] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[ 1169.157008][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.166016][ T5884] usb 9-1: Product: syz
[ 1169.170364][ T5884] usb 9-1: Manufacturer: syz
[ 1169.175236][ T5884] usb 9-1: SerialNumber: syz
[ 1169.183987][ T5884] usb 9-1: config 0 descriptor??
[ 1169.198384][ T5884] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[ 1169.207757][ T5884] gspca_stv06xx: st6422 sensor detected
[ 1169.472251][ T5884] STV06xx 9-1:0.0: probe with driver STV06xx failed with error -71
[ 1169.498471][ T5884] usb 9-1: USB disconnect, device number 61
[ 1170.282257][ T5921] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[ 1170.441040][ T5921] usb 9-1: Using ep0 maxpacket: 32
[ 1170.458780][ T5921] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[ 1170.477499][ T5921] usb 9-1: config 0 has no interface number 0
[ 1170.493674][ T5921] usb 9-1: config 0 interface 184 has no altsetting 0
[ 1170.510146][ T5921] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1170.522542][ T5921] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.533071][ T5921] usb 9-1: Product: syz
[ 1170.537297][ T5921] usb 9-1: Manufacturer: syz
[ 1170.542498][ T5921] usb 9-1: SerialNumber: syz
[ 1170.567986][ T5921] usb 9-1: config 0 descriptor??
[ 1170.576635][ T5921] smsc75xx v1.0.0
[ 1171.181322][ T5921] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1171.192464][ T5921] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1171.588194][T27429] delete_channel: no stack
[ 1171.594235][T27429] delete_channel: no stack
[ 1171.602444][T27429] CIFS mount error: No usable UNC path provided in device string!
[ 1171.602444][T27429] 
[ 1171.615844][T27429] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1172.252063][T27444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7146'.
[ 1173.347110][T27470] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7158'.
[ 1173.371653][T27472] openvswitch: netlink: Missing valid actions attribute.
[ 1173.380989][T27472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1173.776888][ T5921] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[ 1173.790418][ T5921] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[ 1173.805936][ T5921] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[ 1173.816491][ T5921] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1173.839224][ T5921] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71
[ 1173.867571][ T5921] usb 9-1: USB disconnect, device number 62
[ 1173.987759][T27493] netlink: 'syz.0.7168': attribute type 10 has an invalid length.
[ 1174.020740][T27493] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1174.044154][T27492] netlink: 'syz.0.7168': attribute type 10 has an invalid length.
[ 1174.052088][T27493] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1174.058046][T27493] netlink: 'syz.0.7168': attribute type 10 has an invalid length.
[ 1174.083669][T27493] netlink: 'syz.0.7168': attribute type 10 has an invalid length.
[ 1174.098524][T27492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7168'.
[ 1174.109411][T27493] netlink: 'syz.0.7168': attribute type 10 has an invalid length.
[ 1174.119424][T27493] netlink: 'syz.0.7168': attribute type 10 has an invalid length.
[ 1174.126349][T27492] batadv0: entered promiscuous mode
[ 1174.143308][T27492] batadv0: entered allmulticast mode
[ 1174.190452][T27492] bond0: (slave batadv0): Releasing backup interface
[ 1174.207858][T27492] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1174.231126][T27493] batadv0: left promiscuous mode
[ 1174.245913][T27493] batadv0: left allmulticast mode
[ 1174.256638][T27493] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1174.266553][T27493] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1174.276395][T27493] netlink: 'syz.0.7168': attribute type 10 has an invalid length.
[ 1174.289434][ T5921] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[ 1174.305636][T27493] netlink: 'syz.0.7168': attribute type 10 has an invalid length.
[ 1174.316436][T27493] netlink: 'syz.0.7168': attribute type 10 has an invalid length.
[ 1174.324975][T27493] netlink: 'syz.0.7168': attribute type 10 has an invalid length.
[ 1174.438473][ T5921] usb 9-1: device descriptor read/64, error -71
[ 1174.492871][T27511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7177'.
[ 1174.690469][ T5921] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[ 1174.838215][ T5921] usb 9-1: device descriptor read/64, error -71
[ 1174.948331][ T5921] usb usb9-port1: attempt power cycle
[ 1175.015455][T27538] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[ 1175.298052][ T5921] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[ 1175.328364][ T5921] usb 9-1: device descriptor read/8, error -71
[ 1175.567806][ T5921] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[ 1175.588154][ T5921] usb 9-1: device descriptor read/8, error -71
[ 1175.699421][ T5921] usb usb9-port1: unable to enumerate USB device
[ 1177.007400][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1177.231496][T27617] tmpfs: Bad value for 'mpol'
[ 1177.360328][T14282] usb 9-1: new low-speed USB device number 67 using dummy_hcd
[ 1177.520082][T14282] usb 9-1: config 7 has an invalid interface number: 252 but max is 0
[ 1177.536694][T14282] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1177.559243][T14282] usb 9-1: config 7 has no interface number 0
[ 1177.566619][T14282] usb 9-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1177.587870][T14282] usb 9-1: config 7 interface 252 has no altsetting 0
[ 1177.619525][T14282] usb 9-1: string descriptor 0 read error: -71
[ 1177.625886][T14282] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1177.637809][T14282] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1177.654849][T14282] usb 9-1: can't set config #7, error -71
[ 1177.663921][T14282] usb 9-1: USB disconnect, device number 67
[ 1178.587636][T27683] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1179.645001][ T5884] usb 9-1: new high-speed USB device number 68 using dummy_hcd
[ 1179.814573][ T5884] usb 9-1: Using ep0 maxpacket: 8
[ 1179.821646][ T5884] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1179.830710][ T5884] usb 9-1: config 8 has an invalid interface number: 103 but max is 1
[ 1179.841367][ T5884] usb 9-1: config 8 has an invalid interface number: 179 but max is 1
[ 1179.849929][ T5884] usb 9-1: config 8 has no interface number 0
[ 1179.856256][ T5884] usb 9-1: config 8 has no interface number 1
[ 1179.862392][ T5884] usb 9-1: config 8 interface 103 has no altsetting 0
[ 1179.869318][ T5884] usb 9-1: config 8 interface 179 has no altsetting 0
[ 1179.878683][ T5884] usb 9-1: New USB device found, idVendor=2028, idProduct=d300, bcdDevice=31.12
[ 1179.887928][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.896968][ T5884] usb 9-1: Product: syz
[ 1179.901175][ T5884] usb 9-1: Manufacturer: syz
[ 1179.905901][ T5884] usb 9-1: SerialNumber: syz
[ 1180.148833][ T5884] usb 9-1: USB disconnect, device number 68
[ 1181.046380][   T29] usb 9-1: new low-speed USB device number 69 using dummy_hcd
[ 1181.223839][T27784] validate_nla: 56 callbacks suppressed
[ 1181.223861][T27784] netlink: 'syz.0.7294': attribute type 16 has an invalid length.
[ 1181.239127][   T29] usb 9-1: config 7 has an invalid interface number: 252 but max is 0
[ 1181.256898][   T29] usb 9-1: config 7 has no interface number 0
[ 1181.263143][   T29] usb 9-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1181.274597][T27784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7294'.
[ 1181.288704][   T29] usb 9-1: config 7 interface 252 has no altsetting 0
[ 1181.304120][   T29] usb 9-1: string descriptor 0 read error: -71
[ 1181.316377][   T29] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1181.329484][T27784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7294'.
[ 1181.335037][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.361691][   T29] usb 9-1: can't set config #7, error -71
[ 1181.375051][   T29] usb 9-1: USB disconnect, device number 69
[ 1181.895829][T27809] netlink: 'syz.8.7306': attribute type 16 has an invalid length.
[ 1182.005648][T27814] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7306'.
[ 1182.044477][T27814] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7306'.
[ 1182.132132][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.143640][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1183.244514][T27849] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[ 1183.244514][T27849] The task syz.5.7322 (27849) triggered the difference, watch for misbehavior.
[ 1184.048704][ T1023] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1184.591473][   T10] usb 9-1: new high-speed USB device number 70 using dummy_hcd
[ 1184.746078][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1184.756367][   T10] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1184.769523][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.793727][   T10] usb 9-1: config 0 descriptor??
[ 1185.224561][   T10] lenovo 0003:17EF:6047.0099: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0
[ 1185.535030][T27937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7359'.
[ 1185.706713][T27947] batadv_slave_1: entered promiscuous mode
[ 1185.736094][T27947] batadv_slave_1: left promiscuous mode
[ 1186.215541][T27892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1186.239307][T27892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1186.259057][T19178] usb 9-1: USB disconnect, device number 70
[ 1186.690486][   T30] audit: type=1326 audit(6308180276.744:14505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27980 comm="syz.5.7382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8141d8f749 code=0x0
[ 1187.231674][T27999] netlink: 'syz.7.7389': attribute type 16 has an invalid length.
[ 1187.261053][T27999] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7389'.
[ 1187.290186][T27997] overlayfs: failed to resolve './file1': -2
[ 1187.333201][   T29] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[ 1187.490385][   T29] usb 9-1: Using ep0 maxpacket: 16
[ 1187.504731][   T29] usb 9-1: config index 0 descriptor too short (expected 21284, got 36)
[ 1187.515260][   T29] usb 9-1: config 0 has too many interfaces: 149, using maximum allowed: 32
[ 1187.528222][   T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1187.560566][   T29] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 149
[ 1187.581592][   T29] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1187.593997][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1187.605242][   T29] usb 9-1: Product: syz
[ 1187.610162][   T29] usb 9-1: Manufacturer: syz
[ 1187.617926][   T29] usb 9-1: config 0 descriptor??
[ 1187.824662][T28023] netlink: 'syz.5.7398': attribute type 16 has an invalid length.
[ 1187.859524][   T29] usb 9-1: USB disconnect, device number 71
[ 1187.884666][ T8898] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1187.900693][T28023] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7398'.
[ 1188.335507][T28046] netlink: 'syz.5.7409': attribute type 16 has an invalid length.
[ 1188.376710][T28046] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7409'.
[ 1188.847176][T28070] netlink: 'syz.7.7419': attribute type 16 has an invalid length.
[ 1188.872976][T28073] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7421'.
[ 1188.951140][T28070] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7419'.
[ 1188.962183][T28070] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7419'.
[ 1189.502847][T28094] cgroup: release_agent respecified
[ 1189.671954][T28108] netlink: 'syz.0.7435': attribute type 16 has an invalid length.
[ 1190.418265][T28129] netlink: 'syz.0.7445': attribute type 16 has an invalid length.
[ 1191.229271][T28168] netlink: 'syz.0.7464': attribute type 27 has an invalid length.
[ 1191.627705][T19178] usb 9-1: new high-speed USB device number 72 using dummy_hcd
[ 1191.818225][T19178] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1191.829763][T19178] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1191.863907][T19178] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1191.882565][T19178] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.903133][T19178] usb 9-1: Product: syz
[ 1191.908537][T19178] usb 9-1: Manufacturer: syz
[ 1191.913226][T19178] usb 9-1: SerialNumber: syz
[ 1192.100004][T28215] fuse: Bad value for 'fd'
[ 1192.110890][T28215] netlink: 'syz.0.7484': attribute type 32 has an invalid length.
[ 1192.139693][T28179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1192.158836][T19178] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22
[ 1192.167162][T28179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1192.208142][T19178] usb 9-1: USB disconnect, device number 72
[ 1192.536548][T19178] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[ 1192.665848][T19178] usb 9-1: device descriptor read/64, error -71
[ 1192.890849][T28252] overlayfs: failed to clone upperpath
[ 1192.916088][T19178] usb 9-1: new high-speed USB device number 74 using dummy_hcd
[ 1192.957475][T28254] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7501'.
[ 1193.046019][T19178] usb 9-1: device descriptor read/64, error -71
[ 1193.159251][T19178] usb usb9-port1: attempt power cycle
[ 1193.428791][T28278] sctp: [Deprecated]: syz.0.7508 (pid 28278) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1193.428791][T28278] Use struct sctp_sack_info instead
[ 1193.527240][T19178] usb 9-1: new high-speed USB device number 75 using dummy_hcd
[ 1193.556144][T19178] usb 9-1: device descriptor read/8, error -71
[ 1193.795365][T19178] usb 9-1: new high-speed USB device number 76 using dummy_hcd
[ 1193.827014][T19178] usb 9-1: device descriptor read/8, error -71
[ 1193.955265][T19178] usb usb9-port1: unable to enumerate USB device
[ 1193.971337][T28294] openvswitch: netlink: Missing valid actions attribute.
[ 1193.982118][T28294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1194.194138][ T1023] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88806a2c0000 (11)(erspan0) start
[ 1194.238677][ T1023] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88806a2c0000 (4)(erspan0) end
[ 1194.264988][ T1023] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888046b10000 (7)(gretap0) start
[ 1194.285989][ T1023] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888046b10000 (4)(gretap0) end
[ 1195.157029][T17628] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88805baf0000 (11)(erspan0) start
[ 1195.175743][T17628] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88805baf0000 (4)(erspan0) end
[ 1195.195967][T17628] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888029800000 (10)(gretap0) start
[ 1195.249547][T17628] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888029800000 (4)(gretap0) end
[ 1195.732261][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7532'.
[ 1196.251686][T28341] netlink: 'syz.5.7537': attribute type 16 has an invalid length.
[ 1196.423004][T28348] xt_NFQUEUE: number of queues (63489) out of range (got 96768)
[ 1196.663208][ T5827] usb 9-1: new low-speed USB device number 77 using dummy_hcd
[ 1196.738843][T28366] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1196.826688][ T5827] usb 9-1: config 7 has an invalid interface number: 252 but max is 0
[ 1196.836009][ T5827] usb 9-1: config 7 has no interface number 0
[ 1196.842193][ T5827] usb 9-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0
[ 1196.859445][ T5827] usb 9-1: config 7 interface 252 has no altsetting 0
[ 1196.894355][T28372] netlink: 'syz.0.7550': attribute type 16 has an invalid length.
[ 1196.919762][T28372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7550'.
[ 1196.930829][T28372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7550'.
[ 1197.537957][T28401] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1198.225528][T28436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1198.488219][T28451] netlink: 'syz.7.7585': attribute type 16 has an invalid length.
[ 1198.497840][T28451] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7585'.
[ 1198.508442][T28451] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7585'.
[ 1198.740366][T28463] CIFS mount error: No usable UNC path provided in device string!
[ 1198.740366][T28463] 
[ 1198.750942][T28463] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1200.200279][T28463] : entered promiscuous mode
[ 1200.307734][ T5827] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1200.374933][ T5827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1200.418941][ T5827] usb 9-1: can't set config #7, error -71
[ 1200.436943][ T5827] usb 9-1: USB disconnect, device number 77
[ 1200.637664][T28482] netlink: 'syz.5.7596': attribute type 16 has an invalid length.
[ 1200.646878][T28482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7596'.
[ 1200.664573][T28482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7596'.
[ 1201.124324][T28495] fuse: Bad value for 'group_id'
[ 1201.129646][T28495] fuse: Bad value for 'group_id'
[ 1201.198937][T28504] openvswitch: netlink: Missing valid actions attribute.
[ 1201.206369][T28504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1201.250696][T28506] netlink: 'syz.0.7606': attribute type 16 has an invalid length.
[ 1201.260235][T28506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7606'.
[ 1201.272004][T28506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7606'.
[ 1201.423175][T28512] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7609'.
[ 1201.436128][T28512] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7609'.
[ 1201.921500][T28537] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 1, id = 0
[ 1202.292633][T28555] fuse: Bad value for 'group_id'
[ 1202.297616][T28555] fuse: Bad value for 'group_id'
[ 1202.481509][   T29] usb 9-1: new full-speed USB device number 78 using dummy_hcd
[ 1202.650855][   T29] usb 9-1: config 0 has an invalid interface number: 128 but max is 0
[ 1202.659169][   T29] usb 9-1: config 0 has no interface number 0
[ 1202.668152][   T29] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1202.678332][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1202.688143][   T29] usb 9-1: Product: syz
[ 1202.692820][   T29] usb 9-1: Manufacturer: syz
[ 1202.697461][   T29] usb 9-1: SerialNumber: syz
[ 1202.705497][   T29] usb 9-1: config 0 descriptor??
[ 1202.923044][T28553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1202.944847][T28553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1202.971241][T28553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1202.992402][T28553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1203.013574][T28553] openvswitch: netlink: Missing valid actions attribute.
[ 1203.020841][T28553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1203.440524][   T29] usb 9-1: Firmware version (0.0) predates our first public release.
[ 1203.453618][   T29] usb 9-1: Please update to version 0.2 or newer
[ 1203.538416][   T29] usb 9-1: USB disconnect, device number 78
[ 1204.442560][T28642] netlink: 'syz.0.7663': attribute type 1 has an invalid length.
[ 1204.470645][T28642] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7663'.
[ 1205.514371][T28692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7683'.
[ 1205.526207][T28692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7683'.
[ 1206.004311][T28715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7694'.
[ 1206.016016][T28715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7694'.
[ 1206.344672][T28733] overlayfs: failed to clone upperpath
[ 1206.354446][   T30] audit: type=1326 audit(6308180296.408:14506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28732 comm="syz.7.7702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70e378f749 code=0x0
[ 1206.436388][   T56] usb 9-1: new high-speed USB device number 79 using dummy_hcd
[ 1206.596460][   T56] usb 9-1: Using ep0 maxpacket: 16
[ 1206.604092][   T56] usb 9-1: config 1 interface 0 altsetting 37 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1206.615203][   T56] usb 9-1: config 1 interface 0 altsetting 37 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1206.628241][   T56] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1206.637918][   T56] usb 9-1: New USB device found, idVendor=046d, idProduct=4002, bcdDevice= 0.40
[ 1206.647294][   T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1206.655489][   T56] usb 9-1: Product: 윗糚謫驶ᖥ༲⢗ɹᑘꎳ萒亝ꃀ핾Îᬳ랣쿿鄜䱧첀ﷄ켝웘桨ҥ랄춰宙驿쏬톎䑾늚⣶薟ꕺ▍湮轂掻樓뜴◖礅ꣃ긮䴓hꋷే䚨轍枛웸錽퉭⯝煰ഫꓹ퓼ẽᄱ搓⡋톟䒔ꌑ藫Ⲿ沁댟逘㊻塻ᠯ凭ꥹ岸唏ퟷূ溍薥邹䵏ﲍഞ꧍䃯䔗뀣옝꾈掜덙
[ 1206.689553][   T56] usb 9-1: Manufacturer: ⿲먂낑鉆ଁﶈ䨸鰉馩눎믾뜨净䩾㜚奸骁⿇翊㉖创燃ꬪ辊存Ꞥ谭꽶⸓乯轪횛큨힗η覻⺒栞禊毫듳隷滶ថ槏㧙袑ಀ鳖䜂춀鵮ꓟ獌偰뽞봹㣩ꍁ依䪱䞤씙칤巛䍠鄲ﺠ䢋搩鹐ꐰ淚䵮蟙艎㞳꼳
[ 1206.716782][   T56] usb 9-1: SerialNumber: Е
[ 1207.456289][   T56] usbhid 9-1:1.0: can't add hid device: -71
[ 1207.479813][   T56] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[ 1207.525909][   T56] usb 9-1: USB disconnect, device number 79
[ 1207.625251][T28765] overlayfs: failed to clone upperpath
[ 1208.008779][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1208.021000][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1208.032585][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1208.040776][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1208.050949][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1208.362536][T10225] tipc: Resetting bearer <eth:syzkaller0>
[ 1208.672061][T28789] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1208.690892][T28789] overlayfs: missing 'lowerdir'
[ 1208.984815][   T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1210.114483][ T5144] Bluetooth: hci3: command tx timeout
[ 1211.691415][T28839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1211.730409][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88807691c000 (12)(syzkaller0) start
[ 1211.736924][T10225] tipc: Disabling bearer <eth:syzkaller0>
[ 1211.754277][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88807691c000 (8)(syzkaller0) end
[ 1212.001405][T28778] chnl_net:caif_netlink_parms(): no params data found
[ 1212.161153][T28778] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1212.179288][T28778] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1212.186934][ T5144] Bluetooth: hci3: command tx timeout
[ 1212.195196][T28778] bridge_slave_0: entered allmulticast mode
[ 1212.206132][T28778] bridge_slave_0: entered promiscuous mode
[ 1212.227866][T28778] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1212.235553][T28778] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1212.243406][T28778] bridge_slave_1: entered allmulticast mode
[ 1212.251632][T28778] bridge_slave_1: entered promiscuous mode
[ 1212.324337][T28778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1212.338140][T28778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1212.413889][T28778] team0: Port device team_slave_0 added
[ 1212.424001][T28778] team0: Port device team_slave_1 added
[ 1212.470026][T28778] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1212.477869][T28778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1212.507255][T28778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1212.535521][T28778] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1212.552215][T28778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1212.588855][T28778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1212.679266][T28778] hsr_slave_0: entered promiscuous mode
[ 1212.689748][T28778] hsr_slave_1: entered promiscuous mode
[ 1212.697907][T28778] debugfs: 'hsr0' already exists in 'hsr'
[ 1212.704945][T28778] Cannot create hsr debugfs directory
[ 1213.045500][T19193] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88802fd44000 (12)(eth3) start
[ 1213.064750][T28778] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1213.073975][T19193] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88802fd44000 (7)(eth3) end
[ 1213.171220][T28887] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7763'.
[ 1213.185509][T28887] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7763'.
[ 1213.195644][T19193] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888077ea4000 (12)(eth2) start
[ 1213.219694][T28778] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1213.237491][T19193] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888077ea4000 (7)(eth2) end
[ 1213.348903][T19193] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888032a0c000 (12)(eth1) start
[ 1213.373631][T28778] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1213.381994][T19193] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888032a0c000 (7)(eth1) end
[ 1213.459455][ T1147] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888034f94000 (12)(eth0) start
[ 1213.477145][T28778] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1213.478906][ T1147] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff888034f94000 (7)(eth0) end
[ 1213.645460][T28778] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1213.659013][T28778] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1213.669773][T28778] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1213.681559][T14282] usb 9-1: new full-speed USB device number 80 using dummy_hcd
[ 1213.689287][T28778] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1213.780769][T28778] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1213.810472][T28778] 8021q: adding VLAN 0 to HW filter on device team0
[ 1213.823323][T15116] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1213.830653][T15116] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1213.848869][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1213.856125][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1213.856157][T14282] usb 9-1: config 0 has an invalid interface number: 128 but max is 0
[ 1213.876644][T14282] usb 9-1: config 0 has no interface number 0
[ 1213.890471][T14282] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1213.900995][T14282] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1213.909928][T14282] usb 9-1: Product: syz
[ 1213.914952][T14282] usb 9-1: Manufacturer: syz
[ 1213.919664][T14282] usb 9-1: SerialNumber: syz
[ 1213.928523][T14282] usb 9-1: config 0 descriptor??
[ 1214.150739][T28897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1214.180614][T28897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1214.201366][T28897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1214.220112][T28897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1214.261806][ T5144] Bluetooth: hci3: command tx timeout
[ 1214.278108][T28778] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1214.648957][T14282] usb 9-1: Firmware version (0.0) predates our first public release.
[ 1214.671909][T14282] usb 9-1: Please update to version 0.2 or newer
[ 1214.737327][T28778] veth0_vlan: entered promiscuous mode
[ 1214.751967][T14282] usb 9-1: USB disconnect, device number 80
[ 1214.771091][T28778] veth1_vlan: entered promiscuous mode
[ 1214.928579][T28778] veth0_macvtap: entered promiscuous mode
[ 1214.945357][T28778] veth1_macvtap: entered promiscuous mode
[ 1214.977314][T28778] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1215.003143][T28778] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1215.026415][ T1023] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1215.046821][ T1023] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1215.074433][ T1023] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1215.098919][ T1023] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1215.242940][T15116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1215.268057][T15116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1215.376980][T15116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1215.419437][T15116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1215.908699][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1215.922152][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1215.931081][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1215.950399][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1215.965208][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1216.340019][ T5832] Bluetooth: hci3: command tx timeout
[ 1216.379356][T15116] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (32)(syz_tun) cookie=ffff88805d5bc000 (32)(syz_tun) start
[ 1216.420247][ T1147] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) start
[ 1216.436221][T15116] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (13)(syz1) rdma_ndev=ffff88805d5bc000 (24)(syz_tun) cookie=ffff88805d5bc000 (24)(syz_tun) end
[ 1216.469838][ T5891] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1216.489630][ T5827] syz1: Port: 1 Link DOWN
[ 1216.531388][ T1147] smc: removing ib device syz1
[ 1216.653056][ T5891] usb 6-1: config 35 has an invalid interface number: 6 but max is 3
[ 1216.663375][ T5891] usb 6-1: config 35 has an invalid interface number: 157 but max is 3
[ 1216.681975][ T5891] usb 6-1: config 35 has an invalid interface number: 5 but max is 3
[ 1216.702700][ T5891] usb 6-1: config 35 contains an unexpected descriptor of type 0x2, skipping
[ 1216.725248][ T5891] usb 6-1: config 35 contains an unexpected descriptor of type 0x1, skipping
[ 1216.759473][ T5891] usb 6-1: config 35 has an invalid descriptor of length 241, skipping remainder of the config
[ 1216.791790][ T5891] usb 6-1: config 35 has 3 interfaces, different from the descriptor's value: 4
[ 1216.826081][ T5891] usb 6-1: config 35 has no interface number 0
[ 1216.861598][ T5891] usb 6-1: config 35 has no interface number 1
[ 1216.886575][ T5891] usb 6-1: config 35 has no interface number 2
[ 1216.903675][ T5891] usb 6-1: config 35 interface 6 altsetting 153 has an invalid descriptor for endpoint zero, skipping
[ 1216.915576][ T5891] usb 6-1: config 35 interface 6 altsetting 153 endpoint 0x4 has invalid maxpacket 512, setting to 64
[ 1216.928149][ T5891] usb 6-1: config 35 interface 6 altsetting 153 endpoint 0xD has invalid wMaxPacketSize 0
[ 1216.944311][ T5891] usb 6-1: config 35 interface 157 altsetting 11 endpoint 0xF has invalid maxpacket 512, setting to 64
[ 1216.970019][ T5891] usb 6-1: config 35 interface 157 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[ 1216.999218][ T5891] usb 6-1: config 35 interface 157 altsetting 11 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 1217.012159][ T5891] usb 6-1: config 35 interface 157 altsetting 11 endpoint 0x8 has invalid maxpacket 512, setting to 64
[ 1217.025583][ T5891] usb 6-1: config 35 interface 157 altsetting 11 has a duplicate endpoint with address 0xC, skipping
[ 1217.039389][ T5891] usb 6-1: config 35 interface 5 altsetting 13 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1217.049649][ T5891] usb 6-1: config 35 interface 5 altsetting 13 has an invalid descriptor for endpoint zero, skipping
[ 1217.061971][ T5891] usb 6-1: config 35 interface 5 altsetting 13 has a duplicate endpoint with address 0xE, skipping
[ 1217.074104][ T5891] usb 6-1: config 35 interface 5 altsetting 13 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[ 1217.089365][ T5891] usb 6-1: config 35 interface 5 altsetting 13 has a duplicate endpoint with address 0x3, skipping
[ 1217.109331][ T5891] usb 6-1: config 35 interface 5 altsetting 13 has a duplicate endpoint with address 0xC, skipping
[ 1217.149369][ T5891] usb 6-1: config 35 interface 5 altsetting 13 has a duplicate endpoint with address 0xD, skipping
[ 1217.182064][ T5891] usb 6-1: config 35 interface 5 altsetting 13 has a duplicate endpoint with address 0xD, skipping
[ 1217.216705][ T5891] usb 6-1: config 35 interface 5 altsetting 13 has a duplicate endpoint with address 0xB, skipping
[ 1217.261073][ T5891] usb 6-1: config 35 interface 5 altsetting 13 has a duplicate endpoint with address 0x4, skipping
[ 1217.307205][ T5891] usb 6-1: config 35 interface 5 altsetting 13 has a duplicate endpoint with address 0x1, skipping
[ 1217.356032][ T5891] usb 6-1: config 35 interface 6 has no altsetting 0
[ 1217.389214][ T5891] usb 6-1: config 35 interface 157 has no altsetting 0
[ 1217.396227][ T5891] usb 6-1: config 35 interface 5 has no altsetting 0
[ 1217.427929][ T5891] usb 6-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=21.cf
[ 1217.447735][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.456319][ T5891] usb 6-1: Product: syz
[ 1217.461599][ T5891] usb 6-1: Manufacturer: ᢹ繗᙮酀䓮沢亨勢ૅ뻷ቌ먼䵦䐯뭇턮衞菌◴ౕ︺菍磟ꯜࣃꌧ泪楖강ꉗ䑜뎘㥚ꆕﯾ跾⭍븖흎䗺猢賀囩滆縸乧앐୴袕䬇㸢䘳޽൏帽㊢᥂ￚꁎﾦᘒ
[ 1217.490435][ T5891] usb 6-1: SerialNumber: syz
[ 1217.507060][T28968] chnl_net:caif_netlink_parms(): no params data found
[ 1217.768042][ T5891] usb 6-1: bad CDC descriptors
[ 1217.792532][ T5891] cdc_acm 6-1:35.6: Zero length descriptor references
[ 1217.808588][ T5891] cdc_acm 6-1:35.6: probe with driver cdc_acm failed with error -22
[ 1217.986600][T29012] netlink: 'syz.8.7801': attribute type 46 has an invalid length.
[ 1218.019307][ T5832] Bluetooth: hci4: command tx timeout
[ 1218.097118][T28968] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1218.128061][T28968] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1218.180980][T28968] bridge_slave_0: entered allmulticast mode
[ 1218.208198][T28968] bridge_slave_0: entered promiscuous mode
[ 1218.253323][T28968] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1218.278625][T28968] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1218.287745][T28968] bridge_slave_1: entered allmulticast mode
[ 1218.344876][T28968] bridge_slave_1: entered promiscuous mode
[ 1218.520078][T28968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1218.543302][T28968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1218.674887][T28968] team0: Port device team_slave_0 added
[ 1218.729848][T28968] team0: Port device team_slave_1 added
[ 1218.850817][T28968] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1218.866337][T28968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1218.878567][T28746] usb 9-1: new full-speed USB device number 81 using dummy_hcd
[ 1218.892994][T28968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1218.924405][T28968] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1218.932411][T28968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1218.963377][T28968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1219.080905][T28746] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1219.099734][T28746] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1219.111071][T28746] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1219.125519][T28746] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1219.135305][T28746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.148354][T28746] usb 9-1: Product: syz
[ 1219.152567][T28746] usb 9-1: Manufacturer: syz
[ 1219.174795][T28746] usb 9-1: SerialNumber: syz
[ 1219.200990][T29025] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1219.258247][T28968] hsr_slave_0: entered promiscuous mode
[ 1219.272059][T28968] hsr_slave_1: entered promiscuous mode
[ 1219.278833][T28968] debugfs: 'hsr0' already exists in 'hsr'
[ 1219.284602][T28968] Cannot create hsr debugfs directory
[ 1219.417965][T19178] usb 6-1: USB disconnect, device number 3
[ 1219.751248][T28746] cdc_ncm 9-1:1.0: bind() failure
[ 1219.822075][T28746] usbtest 9-1:1.1: probe with driver usbtest failed with error -71
[ 1219.851706][T28746] usb 9-1: USB disconnect, device number 81
[ 1219.868649][T19193] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1220.108080][ T5832] Bluetooth: hci4: command tx timeout
[ 1220.195046][ T1147] infiniband: Removed from hash: ib_dev=ffff888045b5c000 (0)(syz1) ndev=ffff88805d5bc000 (2)(syz_tun)
[ 1220.206746][T28968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.485040][T28968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.610432][ T1147] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888045b5c000 (0)(syz1) end
[ 1220.748713][T28968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1220.920973][T28968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1221.304472][T28968] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1221.335041][T28968] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1221.381631][T28968] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1221.409385][T28968] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1221.614207][T28968] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1221.672765][T28968] 8021q: adding VLAN 0 to HW filter on device team0
[ 1221.723868][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1221.731159][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1221.757996][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1221.765245][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1222.117839][T29115] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7838'.
[ 1222.175718][ T5832] Bluetooth: hci4: command tx timeout
[ 1222.384796][T28968] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1222.483223][T28968] veth0_vlan: entered promiscuous mode
[ 1222.504886][T28968] veth1_vlan: entered promiscuous mode
[ 1222.554122][T28968] veth0_macvtap: entered promiscuous mode
[ 1222.566650][T28968] veth1_macvtap: entered promiscuous mode
[ 1222.617884][T28968] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1222.634199][T29135] netlink: 'syz.8.7845': attribute type 1 has an invalid length.
[ 1222.643005][T28968] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1222.670451][ T3491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.702821][ T3491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.744181][ T3491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.784867][ T3491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.919434][T19193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1222.954028][T19193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1222.996677][T19193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1223.005352][T19193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1223.250402][T29152] ubi8: attaching mtd0
[ 1223.269186][T29152] ubi8: scanning is finished
[ 1223.273864][T29152] ubi8: empty MTD device detected
[ 1223.292789][T29152] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record
[ 1223.347858][ T5827] usb 9-1: new high-speed USB device number 82 using dummy_hcd
[ 1223.449458][T29152] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1223.497824][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1223.511052][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1223.523085][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1223.534436][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1223.542134][ T5827] usb 9-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00
[ 1223.542167][ T5827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.568343][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1223.612357][ T5827] usb 9-1: config 0 descriptor??
[ 1224.135564][ T5827] aquacomputer_d5next 0003:0C70:F012.009A: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.8-1/input0
[ 1224.256845][ T5832] Bluetooth: hci4: command tx timeout
[ 1224.356816][T15116] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.378547][T14282] usb 9-1: USB disconnect, device number 82
[ 1224.398734][T29154] chnl_net:caif_netlink_parms(): no params data found
[ 1224.482794][T15116] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.544417][ T5827] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1224.588757][T15116] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.718216][T15116] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.729365][ T5827] usb 6-1: Using ep0 maxpacket: 16
[ 1224.741718][T29154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1224.751671][T29154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1224.759145][ T5827] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1224.771046][T29154] bridge_slave_0: entered allmulticast mode
[ 1224.777105][ T5827] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1224.789107][T29154] bridge_slave_0: entered promiscuous mode
[ 1224.803415][ T5827] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1224.823427][T29154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1224.835404][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1224.843423][ T5827] usb 6-1: Product: syz
[ 1224.849275][T29154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1224.856690][T29154] bridge_slave_1: entered allmulticast mode
[ 1224.863725][ T5827] usb 6-1: Manufacturer: syz
[ 1224.868514][ T5827] usb 6-1: SerialNumber: syz
[ 1224.874966][T29154] bridge_slave_1: entered promiscuous mode
[ 1225.041137][T29154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1225.098748][T29154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1225.116173][ T5827] usb 6-1: 0:2 : does not exist
[ 1225.121161][ T5827] usb 6-1: unit 6 not found!
[ 1225.215866][ T5827] usb 6-1: USB disconnect, device number 4
[ 1225.237891][T29184] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7859'.
[ 1225.264257][T29184] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[ 1225.281336][T29033] udevd[29033]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1225.317066][T29154] team0: Port device team_slave_0 added
[ 1225.362165][T29154] team0: Port device team_slave_1 added
[ 1225.408359][T15116] bridge_slave_1: left allmulticast mode
[ 1225.415311][T15116] bridge_slave_1: left promiscuous mode
[ 1225.421144][T15116] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1225.431957][T15116] bridge_slave_0: left allmulticast mode
[ 1225.438081][T15116] bridge_slave_0: left promiscuous mode
[ 1225.444311][T15116] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1225.623709][ T5832] Bluetooth: hci1: command tx timeout
[ 1226.096382][T29212] Mount JFS Failure: -5
[ 1226.101211][T29212] jfs_mount failed w/return code = -5
[ 1226.249283][T15116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1226.261868][T15116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1226.275779][T15116] bond0 (unregistering): Released all slaves
[ 1226.369124][T29154] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1226.385253][T29154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1226.441259][T29154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1226.491252][T29154] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1226.500516][T29154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1226.527154][T29154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1226.672641][T29154] hsr_slave_0: entered promiscuous mode
[ 1226.679403][T29154] hsr_slave_1: entered promiscuous mode
[ 1226.687831][T29154] debugfs: 'hsr0' already exists in 'hsr'
[ 1226.695046][T29154] Cannot create hsr debugfs directory
[ 1226.735266][T29222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7872'.
[ 1226.753362][T15116] hsr_slave_0: left promiscuous mode
[ 1226.760016][T15116] hsr_slave_1: left promiscuous mode
[ 1226.767610][T15116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1226.775369][T15116] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1226.785158][T15116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1226.794548][T15116] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1226.813665][ T5827] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 1226.869671][T15116] veth1_macvtap: left promiscuous mode
[ 1226.885535][T15116] veth0_macvtap: left promiscuous mode
[ 1226.891262][T15116] veth1_vlan: left promiscuous mode
[ 1226.901223][T15116] veth0_vlan: left promiscuous mode
[ 1226.986870][ T5827] usb 1-1: Using ep0 maxpacket: 16
[ 1227.000391][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1227.023833][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1227.047520][ T5827] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1227.067991][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.088291][ T5827] usb 1-1: Product: syz
[ 1227.095848][ T5827] usb 1-1: Manufacturer: syz
[ 1227.117378][ T5827] usb 1-1: SerialNumber: syz
[ 1227.128549][T29229] Bluetooth: MGMT ver 1.23
[ 1227.336710][ T5827] usb 1-1: 0:2 : does not exist
[ 1227.345717][ T5827] usb 1-1: unit 6 not found!
[ 1227.382053][T22549] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 1227.404496][ T5827] usb 1-1: USB disconnect, device number 110
[ 1227.475540][T29033] udevd[29033]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1227.548075][T22549] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1227.558150][T22549] usb 6-1: config 0 has no interface number 0
[ 1227.588562][T22549] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1227.597757][T22549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.607758][T22549] usb 6-1: Product: syz
[ 1227.613341][T22549] usb 6-1: Manufacturer: syz
[ 1227.617979][T22549] usb 6-1: SerialNumber: syz
[ 1227.642551][T22549] usb 6-1: config 0 descriptor??
[ 1227.693791][ T5832] Bluetooth: hci1: command tx timeout
[ 1228.260154][T22549] usb 6-1: Firmware version (0.0) predates our first public release.
[ 1228.271866][   T10] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1228.284466][T22549] usb 6-1: Please update to version 0.2 or newer
[ 1228.424133][   T10] usb 1-1: device descriptor read/64, error -71
[ 1228.438034][T22549] usb 6-1: USB disconnect, device number 5
[ 1228.724592][   T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1228.875863][   T10] usb 1-1: device descriptor read/64, error -71
[ 1229.011272][   T10] usb usb1-port1: attempt power cycle
[ 1229.328832][T29154] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1229.356447][T29154] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1229.374452][   T10] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 1229.388124][T29154] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1229.405782][T29154] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1229.420367][   T10] usb 1-1: device descriptor read/8, error -71
[ 1229.638425][T29154] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1229.661800][   T10] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 1229.702350][   T10] usb 1-1: device descriptor read/8, error -71
[ 1229.712817][T29154] 8021q: adding VLAN 0 to HW filter on device team0
[ 1229.733727][T15116] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1229.741075][T15116] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1229.770387][ T5832] Bluetooth: hci1: command tx timeout
[ 1229.783224][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1229.790479][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1229.830819][   T10] usb usb1-port1: unable to enumerate USB device
[ 1230.485490][T29154] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1230.975968][T29154] veth0_vlan: entered promiscuous mode
[ 1231.022737][T29154] veth1_vlan: entered promiscuous mode
[ 1231.128228][T29154] veth0_macvtap: entered promiscuous mode
[ 1231.147425][T29154] veth1_macvtap: entered promiscuous mode
[ 1231.213541][T29154] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1231.250890][T29154] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1231.318161][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.363957][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.393801][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.451535][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1231.603162][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1231.637140][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1231.679993][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1231.705529][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1231.849339][ T5832] Bluetooth: hci1: command tx timeout
[ 1231.859360][   T56] usb 9-1: new low-speed USB device number 83 using dummy_hcd
[ 1232.020765][   T56] usb 9-1: config 7 has an invalid interface number: 252 but max is 0
[ 1232.030871][   T56] usb 9-1: config 7 has no interface number 0
[ 1232.037046][   T56] usb 9-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0
[ 1232.049295][   T56] usb 9-1: config 7 interface 252 has no altsetting 0
[ 1232.061905][   T56] usb 9-1: string descriptor 0 read error: -71
[ 1232.068274][   T56] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[ 1232.093171][   T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1232.132250][   T56] usb 9-1: can't set config #7, error -71
[ 1232.159846][   T56] usb 9-1: USB disconnect, device number 83
[ 1232.548560][   T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1232.704519][   T10] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1232.725000][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1232.750447][   T10] usb 8-1: config 0 descriptor??
[ 1233.157622][T29388] binder: 29387:29388 ioctl c0306201 200000000300 returned -22
[ 1233.609342][   T10] pegasus 8-1:0.0: probe with driver pegasus failed with error -32
[ 1234.887761][ T5827] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1235.008731][   T56] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[ 1235.059573][ T5827] usb 1-1: Using ep0 maxpacket: 32
[ 1235.067813][ T5827] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1235.084680][ T5827] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1235.097634][ T5827] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1235.109145][ T5827] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1235.125583][ T5827] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1235.135836][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.144311][ T5827] usb 1-1: Product: syz
[ 1235.148714][ T5827] usb 1-1: Manufacturer: syz
[ 1235.153343][ T5827] usb 1-1: SerialNumber: syz
[ 1235.171907][    C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1235.184386][   T56] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[ 1235.196474][ T5827] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input187
[ 1235.216991][   T56] usb 6-1: config 0 has no interface number 0
[ 1235.233029][   T56] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1235.244263][   T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.264564][   T56] usb 6-1: Product: syz
[ 1235.268910][   T56] usb 6-1: Manufacturer: syz
[ 1235.273731][   T56] usb 6-1: SerialNumber: syz
[ 1235.288517][   T56] usb 6-1: config 0 descriptor??
[ 1235.349444][T28468] usb 8-1: USB disconnect, device number 19
[ 1235.416678][ T5827] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1235.444754][ T5827]  (id 0x00)
[ 1235.583266][ T5827] rc_core: IR keymap rc-imon-pad not found
[ 1235.597879][ T5827] Registered IR keymap rc-empty
[ 1235.602898][ T5827] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1235.615281][ T5827] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1235.653075][ T5827] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0
[ 1235.669417][ T5827] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input188
[ 1235.714027][ T5827] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:115> initialized
[ 1235.785565][ T1023] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1235.908243][   T56] usb 6-1: Firmware version (0.0) predates our first public release.
[ 1235.930141][   T56] usb 6-1: Please update to version 0.2 or newer
[ 1235.976942][ T1023] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1236.043815][   T56] usb 6-1: USB disconnect, device number 6
[ 1236.059862][ T1023] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1236.168453][ T1023] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1236.352517][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1236.374990][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1236.385265][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1236.394813][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1236.403414][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1236.467712][ T1023] bridge_slave_1: left allmulticast mode
[ 1236.473507][ T1023] bridge_slave_1: left promiscuous mode
[ 1236.496580][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1236.508224][ T1023] bridge_slave_0: left allmulticast mode
[ 1236.515053][ T1023] bridge_slave_0: left promiscuous mode
[ 1236.521308][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1237.206445][T29463] usb 1-1: USB disconnect, device number 115
[ 1237.573310][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1237.637119][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1237.678327][ T1023] bond0 (unregistering): Released all slaves
[ 1237.881286][ T1023] tipc: Left network mode
[ 1238.452999][ T1023] hsr_slave_0: left promiscuous mode
[ 1238.470181][ T1023] hsr_slave_1: left promiscuous mode
[ 1238.485088][ T5832] Bluetooth: hci0: command tx timeout
[ 1238.494740][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1238.502178][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1238.529756][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1238.558770][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1238.628967][ T1023] veth1_macvtap: left promiscuous mode
[ 1238.647646][ T1023] veth0_macvtap: left promiscuous mode
[ 1238.658719][ T1023] veth1_vlan: left promiscuous mode
[ 1238.672516][ T1023] veth0_vlan: left promiscuous mode
[ 1239.573406][T29549] syz.7.7961 (29549): drop_caches: 2
[ 1240.349980][   T30] audit: type=1326 audit(6308180330.421:14507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29560 comm="syz.5.7966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a5418f749 code=0x0
[ 1240.563096][ T5832] Bluetooth: hci0: command tx timeout
[ 1240.775186][T29477] chnl_net:caif_netlink_parms(): no params data found
[ 1240.963417][   T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1241.244790][T29595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7975'.
[ 1241.394338][T29477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1241.417800][T29477] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1241.427293][T29477] bridge_slave_0: entered allmulticast mode
[ 1241.435607][T29477] bridge_slave_0: entered promiscuous mode
[ 1241.447712][T29477] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1241.464986][T29477] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1241.481415][T29477] bridge_slave_1: entered allmulticast mode
[ 1241.535719][T29477] bridge_slave_1: entered promiscuous mode
[ 1241.706434][T29477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1241.731601][T29477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1241.849062][T29477] team0: Port device team_slave_0 added
[ 1241.886371][T29477] team0: Port device team_slave_1 added
[ 1241.986144][T29477] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1242.005166][T29477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1242.061106][T29477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1242.084953][T29621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7985'.
[ 1242.109129][T29477] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1242.121993][T29477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1242.191937][T29477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1242.302681][T29625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7986'.
[ 1242.348774][T29477] hsr_slave_0: entered promiscuous mode
[ 1242.373166][T29477] hsr_slave_1: entered promiscuous mode
[ 1242.400368][T29477] debugfs: 'hsr0' already exists in 'hsr'
[ 1242.433602][T29477] Cannot create hsr debugfs directory
[ 1242.641767][ T5832] Bluetooth: hci0: command tx timeout
[ 1243.536538][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.548084][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1243.798839][T29477] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1243.844734][T29477] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1243.874377][T29477] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1243.900057][   T30] audit: type=1326 audit(6308180333.984:14508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29687 comm="syz.0.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86bdb8f749 code=0x7ffc0000
[ 1243.924859][T29477] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1243.932425][   T30] audit: type=1326 audit(6308180333.984:14510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29687 comm="syz.0.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86bdb8f749 code=0x7ffc0000
[ 1243.992398][   T30] audit: type=1326 audit(6308180333.984:14511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29687 comm="syz.0.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f86bdb8f749 code=0x7ffc0000
[ 1244.045558][   T30] audit: type=1326 audit(6308180333.984:14509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29687 comm="syz.0.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86bdb8f749 code=0x7ffc0000
[ 1244.080234][   T30] audit: type=1326 audit(6308180333.984:14512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29687 comm="syz.0.8004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f86bdb8f749 code=0x7ffc0000
[ 1244.208577][T29697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8005'.
[ 1244.238038][T29477] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1244.297738][T29477] 8021q: adding VLAN 0 to HW filter on device team0
[ 1244.347241][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1244.354563][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1244.386541][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1244.393805][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1244.649133][T29682] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1244.668210][T29682] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1244.698073][T29682] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1244.720262][ T5832] Bluetooth: hci0: command tx timeout
[ 1244.786973][T29682] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1244.842918][T29682] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1244.856934][T29682] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1244.889284][T29682] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1244.913160][T29682] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1244.934222][T29682] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1244.969227][T29682] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1244.983784][T29682] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1245.008920][T29682] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1245.068238][T29477] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1245.823106][T29477] veth0_vlan: entered promiscuous mode
[ 1245.865261][T29477] veth1_vlan: entered promiscuous mode
[ 1245.921936][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1245.930109][T29755] random: crng reseeded on system resumption
[ 1245.972863][T29477] veth0_macvtap: entered promiscuous mode
[ 1246.023680][T29477] veth1_macvtap: entered promiscuous mode
[ 1246.087850][T29477] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1246.115728][T29477] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1246.199810][T17628] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1246.249819][T17628] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1246.258609][T17628] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1246.314785][T29767] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8022'.
[ 1246.343115][T17628] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1246.475490][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1246.515712][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1246.670375][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1246.688515][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1246.809368][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1246.960250][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1247.038827][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1247.998282][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1248.215895][T29840] binfmt_misc: register: failed to install interpreter file ./file0
[ 1248.403394][T29846] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1248.442056][T29852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8051'.
[ 1248.474924][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8051'.
[ 1248.877879][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1249.038146][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1249.117559][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1250.089657][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1250.251080][T29934] pim6reg: entered allmulticast mode
[ 1250.273569][T29934] pim6reg: left allmulticast mode
[ 1250.826572][T19193] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1250.956408][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1251.088945][T19193] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1251.117366][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1251.198058][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1251.252335][T19193] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1251.513914][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1251.528129][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1251.541397][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1251.552284][T19193] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1251.565270][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1251.577866][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1251.841215][T15116] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1252.128530][T19193] bridge_slave_1: left allmulticast mode
[ 1252.134949][T19193] bridge_slave_1: left promiscuous mode
[ 1252.141197][T19193] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1252.159233][T19193] bridge_slave_0: left allmulticast mode
[ 1252.166097][T19193] bridge_slave_0: left promiscuous mode
[ 1252.172851][T19193] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1252.769981][T30007] program syz.9.8097 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1252.779583][T30007] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1253.198234][   T30] audit: type=1326 audit(6308180343.290:14513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30023 comm="syz.9.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6b38f749 code=0x7ffc0000
[ 1253.255726][T30017] 
[ 1253.258123][T30017] ======================================================
[ 1253.265178][T30017] WARNING: possible circular locking dependency detected
[ 1253.272246][T30017] syzkaller #0 Tainted: G             L     
[ 1253.278254][T30017] ------------------------------------------------------
[ 1253.285304][T30017] syz.0.8101/30017 is trying to acquire lock:
[ 1253.291415][T30017] ffffffff8ea2bc10 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0
[ 1253.301142][T30017] 
[ 1253.301142][T30017] but task is already holding lock:
[ 1253.308550][T30017] ffff88801fb4df20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x384/0x1600
[ 1253.317936][T30017] 
[ 1253.317936][T30017] which lock already depends on the new lock.
[ 1253.317936][T30017] 
[ 1253.328370][T30017] 
[ 1253.328370][T30017] the existing dependency chain (in reverse order) is:
[ 1253.337412][T30017] 
[ 1253.337412][T30017] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1253.345204][T30017]        lock_sock_nested+0x48/0x100
[ 1253.350539][T30017]        inet_shutdown+0x6a/0x390
[ 1253.355609][T30017]        nbd_mark_nsock_dead+0x2e9/0x560
[ 1253.361282][T30017]        recv_work+0x1b38/0x1c50
[ 1253.366260][T30017]        process_one_work+0x93a/0x15a0
[ 1253.371848][T30017]        worker_thread+0x9b0/0xee0
[ 1253.376999][T30017]        kthread+0x389/0x480
[ 1253.381622][T30017]        ret_from_fork+0x510/0xa50
[ 1253.386764][T30017]        ret_from_fork_asm+0x1a/0x30
[ 1253.392073][T30017] 
[ 1253.392073][T30017] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1253.399839][T30017]        __mutex_lock+0x187/0x1350
[ 1253.404993][T30017]        nbd_queue_rq+0x257/0xf10
[ 1253.410060][T30017]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[ 1253.416189][T30017]        __blk_mq_sched_dispatch_requests+0xdac/0x1570
[ 1253.423084][T30017]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1253.429631][T30017]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1253.435318][T30017]        blk_mq_dispatch_list+0xd0b/0xe00
[ 1253.441159][T30017]        blk_mq_flush_plug_list+0x469/0x550
[ 1253.447094][T30017]        __blk_flush_plug+0x3d3/0x4b0
[ 1253.452498][T30017]        __submit_bio+0x2d0/0x5a0
[ 1253.457645][T30017]        submit_bio_noacct_nocheck+0x2eb/0xa30
[ 1253.463825][T30017]        block_read_full_folio+0x7b7/0x830
[ 1253.469659][T30017]        filemap_read_folio+0x117/0x380
[ 1253.475336][T30017]        do_read_cache_folio+0x358/0x590
[ 1253.480997][T30017]        read_part_sector+0xb6/0x2b0
[ 1253.486315][T30017]        adfspart_check_ICS+0xa4/0xa50
[ 1253.491806][T30017]        bdev_disk_changed+0x75f/0x14b0
[ 1253.497389][T30017]        blkdev_get_whole+0x380/0x510
[ 1253.502795][T30017]        bdev_open+0x31e/0xd30
[ 1253.507590][T30017]        blkdev_open+0x457/0x600
[ 1253.512563][T30017]        do_dentry_open+0x785/0x14e0
[ 1253.517881][T30017]        vfs_open+0x3b/0x340
[ 1253.522508][T30017]        path_openat+0x2de0/0x3840
[ 1253.527661][T30017]        do_filp_open+0x1fa/0x410
[ 1253.532715][T30017]        do_sys_openat2+0x121/0x200
[ 1253.537941][T30017]        __x64_sys_openat+0x138/0x170
[ 1253.543346][T30017]        do_syscall_64+0xec/0xf80
[ 1253.548401][T30017]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.554847][T30017] 
[ 1253.554847][T30017] -> #6 (&cmd->lock){+.+.}-{4:4}:
[ 1253.562110][T30017]        __mutex_lock+0x187/0x1350
[ 1253.567258][T30017]        nbd_queue_rq+0xc8/0xf10
[ 1253.572222][T30017]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[ 1253.578319][T30017]        __blk_mq_sched_dispatch_requests+0xdac/0x1570
[ 1253.585199][T30017]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1253.591737][T30017]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1253.597495][T30017]        blk_mq_dispatch_list+0xd0b/0xe00
[ 1253.603333][T30017]        blk_mq_flush_plug_list+0x469/0x550
[ 1253.609282][T30017]        __blk_flush_plug+0x3d3/0x4b0
[ 1253.614692][T30017]        __submit_bio+0x2d0/0x5a0
[ 1253.619850][T30017]        submit_bio_noacct_nocheck+0x2eb/0xa30
[ 1253.626144][T30017]        block_read_full_folio+0x7b7/0x830
[ 1253.632011][T30017]        filemap_read_folio+0x117/0x380
[ 1253.637613][T30017]        do_read_cache_folio+0x358/0x590
[ 1253.643287][T30017]        read_part_sector+0xb6/0x2b0
[ 1253.648619][T30017]        adfspart_check_ICS+0xa4/0xa50
[ 1253.654233][T30017]        bdev_disk_changed+0x75f/0x14b0
[ 1253.659827][T30017]        blkdev_get_whole+0x380/0x510
[ 1253.665244][T30017]        bdev_open+0x31e/0xd30
[ 1253.670049][T30017]        blkdev_open+0x457/0x600
[ 1253.675110][T30017]        do_dentry_open+0x785/0x14e0
[ 1253.680444][T30017]        vfs_open+0x3b/0x340
[ 1253.685164][T30017]        path_openat+0x2de0/0x3840
[ 1253.690397][T30017]        do_filp_open+0x1fa/0x410
[ 1253.695457][T30017]        do_sys_openat2+0x121/0x200
[ 1253.700700][T30017]        __x64_sys_openat+0x138/0x170
[ 1253.706109][T30017]        do_syscall_64+0xec/0xf80
[ 1253.711179][T30017]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.717625][T30017] 
[ 1253.717625][T30017] -> #5 (set->srcu){.+.+}-{0:0}:
[ 1253.725267][T30017]        __synchronize_srcu+0x96/0x390
[ 1253.730853][T30017]        elevator_switch+0x12b/0x5f0
[ 1253.736163][T30017]        elevator_change+0x2cd/0x450
[ 1253.741481][T30017]        elevator_set_default+0x1af/0x2b0
[ 1253.747232][T30017]        blk_register_queue+0x34e/0x3f0
[ 1253.752804][T30017]        __add_disk+0x677/0xd50
[ 1253.757693][T30017]        add_disk_fwnode+0xfc/0x480
[ 1253.762938][T30017]        nbd_dev_add+0x717/0xae0
[ 1253.767917][T30017]        nbd_init+0x168/0x1f0
[ 1253.772634][T30017]        do_one_initcall+0x1f1/0x800
[ 1253.777974][T30017]        do_initcall_level+0x104/0x190
[ 1253.783474][T30017]        do_initcalls+0x59/0xa0
[ 1253.788359][T30017]        kernel_init_freeable+0x2a7/0x3d0
[ 1253.794200][T30017]        kernel_init+0x1d/0x1d0
[ 1253.799069][T30017]        ret_from_fork+0x510/0xa50
[ 1253.804207][T30017]        ret_from_fork_asm+0x1a/0x30
[ 1253.809523][T30017] 
[ 1253.809523][T30017] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[ 1253.817429][T30017]        __mutex_lock+0x187/0x1350
[ 1253.822588][T30017]        elevator_change+0x1b4/0x450
[ 1253.827914][T30017]        elevator_set_none+0x98/0x110
[ 1253.833307][T30017]        blk_mq_update_nr_hw_queues+0x5b4/0x1a80
[ 1253.839752][T30017]        nbd_start_device+0x17f/0xb10
[ 1253.845156][T30017]        nbd_ioctl+0x56e/0xe10
[ 1253.849975][T30017]        blkdev_ioctl+0x60e/0x710
[ 1253.855031][T30017]        __se_sys_ioctl+0xfc/0x170
[ 1253.860266][T30017]        do_syscall_64+0xec/0xf80
[ 1253.865324][T30017]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.871768][T30017] 
[ 1253.871768][T30017] -> #3 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[ 1253.880405][T30017]        blk_alloc_queue+0x52f/0x610
[ 1253.885721][T30017]        __blk_mq_alloc_disk+0x15c/0x340
[ 1253.891384][T30017]        nbd_dev_add+0x46c/0xae0
[ 1253.896352][T30017]        nbd_init+0x168/0x1f0
[ 1253.901074][T30017]        do_one_initcall+0x1f1/0x800
[ 1253.906397][T30017]        do_initcall_level+0x104/0x190
[ 1253.911890][T30017]        do_initcalls+0x59/0xa0
[ 1253.916776][T30017]        kernel_init_freeable+0x2a7/0x3d0
[ 1253.922528][T30017]        kernel_init+0x1d/0x1d0
[ 1253.927394][T30017]        ret_from_fork+0x510/0xa50
[ 1253.932538][T30017]        ret_from_fork_asm+0x1a/0x30
[ 1253.937859][T30017] 
[ 1253.937859][T30017] -> #2 (fs_reclaim){+.+.}-{0:0}:
[ 1253.945098][T30017]        fs_reclaim_acquire+0x72/0x100
[ 1253.950585][T30017]        __kmalloc_cache_noprof+0x40/0x700
[ 1253.956413][T30017]        cryptomgr_notify+0x85/0x930
[ 1253.961739][T30017]        notifier_call_chain+0x19d/0x3a0
[ 1253.967400][T30017]        blocking_notifier_call_chain+0x6a/0x90
[ 1253.973657][T30017]        crypto_alg_mod_lookup+0x3b1/0x5f0
[ 1253.979492][T30017]        crypto_alloc_tfm_node+0x13e/0x3f0
[ 1253.985326][T30017]        crypto_alloc_sync_skcipher+0x39/0xd0
[ 1253.991420][T30017]        rxkad_init+0x20/0xe0
[ 1253.996130][T30017]        rxrpc_init_security+0x72/0x120
[ 1254.001705][T30017]        af_rxrpc_init+0x121/0x2d0
[ 1254.006851][T30017]        do_one_initcall+0x1f1/0x800
[ 1254.012181][T30017]        do_initcall_level+0x104/0x190
[ 1254.017681][T30017]        do_initcalls+0x59/0xa0
[ 1254.022597][T30017]        kernel_init_freeable+0x2a7/0x3d0
[ 1254.028358][T30017]        kernel_init+0x1d/0x1d0
[ 1254.033241][T30017]        ret_from_fork+0x510/0xa50
[ 1254.038401][T30017]        ret_from_fork_asm+0x1a/0x30
[ 1254.043728][T30017] 
[ 1254.043728][T30017] -> #1 ((crypto_chain).rwsem){++++}-{4:4}:
[ 1254.051852][T30017]        down_read+0x47/0x2e0
[ 1254.056568][T30017]        blocking_notifier_call_chain+0x54/0x90
[ 1254.062840][T30017]        __crypto_register_alg+0x32b/0x3c0
[ 1254.068682][T30017]        crypto_register_alg+0x437/0x800
[ 1254.074344][T30017]        crypto_register_shashes+0x5a/0x100
[ 1254.080274][T30017]        do_one_initcall+0x1f1/0x800
[ 1254.085591][T30017]        do_initcall_level+0x104/0x190
[ 1254.091120][T30017]        do_initcalls+0x59/0xa0
[ 1254.096017][T30017]        kernel_init_freeable+0x2a7/0x3d0
[ 1254.101794][T30017]        kernel_init+0x1d/0x1d0
[ 1254.106693][T30017]        ret_from_fork+0x510/0xa50
[ 1254.111844][T30017]        ret_from_fork_asm+0x1a/0x30
[ 1254.117155][T30017] 
[ 1254.117155][T30017] -> #0 (crypto_alg_sem){++++}-{4:4}:
[ 1254.124748][T30017]        __lock_acquire+0x15a6/0x2cf0
[ 1254.130182][T30017]        lock_acquire+0x107/0x340
[ 1254.135233][T30017]        down_write+0x96/0x1f0
[ 1254.140026][T30017]        crypto_alg_mod_lookup+0x211/0x5f0
[ 1254.145862][T30017]        crypto_alloc_tfm_node+0x13e/0x3f0
[ 1254.151691][T30017]        tls_set_sw_offload+0xa33/0x1780
[ 1254.157340][T30017]        tls_setsockopt+0xefe/0x1600
[ 1254.162655][T30017]        do_sock_setsockopt+0x17c/0x1b0
[ 1254.168317][T30017]        __x64_sys_setsockopt+0x13f/0x1b0
[ 1254.174146][T30017]        do_syscall_64+0xec/0xf80
[ 1254.179198][T30017]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.185746][T30017] 
[ 1254.185746][T30017] other info that might help us debug this:
[ 1254.185746][T30017] 
[ 1254.196006][T30017] Chain exists of:
[ 1254.196006][T30017]   crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6
[ 1254.196006][T30017] 
[ 1254.209075][T30017]  Possible unsafe locking scenario:
[ 1254.209075][T30017] 
[ 1254.216550][T30017]        CPU0                    CPU1
[ 1254.221931][T30017]        ----                    ----
[ 1254.227313][T30017]   lock(sk_lock-AF_INET6);
[ 1254.231843][T30017]                                lock(&nsock->tx_lock);
[ 1254.238809][T30017]                                lock(sk_lock-AF_INET6);
[ 1254.245950][T30017]   lock(crypto_alg_sem);
[ 1254.250315][T30017] 
[ 1254.250315][T30017]  *** DEADLOCK ***
[ 1254.250315][T30017] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1254.258484][T30017] 1 lock held by syz.0.8101/30017:
[ 1254.263620][T30017]  #0: ffff88801fb4df20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x384/0x1600
[ 1254.273505][T30017] 
[ 1254.273505][T30017] stack backtrace:
[ 1254.279413][T30017] CPU: 1 UID: 0 PID: 30017 Comm: syz.0.8101 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1254.279438][T30017] Tainted: [L]=SOFTLOCKUP
[ 1254.279445][T30017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1254.279457][T30017] Call Trace:
[ 1254.279465][T30017]  <TASK>
[ 1254.279473][T30017]  dump_stack_lvl+0xe8/0x150
[ 1254.279494][T30017]  print_circular_bug+0x2e2/0x300
[ 1254.279515][T30017]  check_noncircular+0x12e/0x150
[ 1254.279536][T30017]  __lock_acquire+0x15a6/0x2cf0
[ 1254.279571][T30017]  ? crypto_alg_mod_lookup+0x211/0x5f0
[ 1254.279609][T30017]  lock_acquire+0x107/0x340
[ 1254.279636][T30017]  ? crypto_alg_mod_lookup+0x211/0x5f0
[ 1254.279661][T30017]  down_write+0x96/0x1f0
[ 1254.279689][T30017]  ? crypto_alg_mod_lookup+0x211/0x5f0
[ 1254.279708][T30017]  ? __pfx_down_write+0x10/0x10
[ 1254.279749][T30017]  ? crypto_larval_alloc+0x1bf/0x290
[ 1254.279768][T30017]  crypto_alg_mod_lookup+0x211/0x5f0
[ 1254.279788][T30017]  crypto_alloc_tfm_node+0x13e/0x3f0
[ 1254.279812][T30017]  tls_set_sw_offload+0xa33/0x1780
[ 1254.279837][T30017]  tls_setsockopt+0xefe/0x1600
[ 1254.279870][T30017]  ? __pfx_tls_setsockopt+0x10/0x10
[ 1254.279898][T30017]  ? __fget_files+0x2a/0x420
[ 1254.279919][T30017]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1254.279960][T30017]  ? sock_common_setsockopt+0x36/0xc0
[ 1254.279980][T30017]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1254.280001][T30017]  do_sock_setsockopt+0x17c/0x1b0
[ 1254.280027][T30017]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1254.280053][T30017]  do_syscall_64+0xec/0xf80
[ 1254.280077][T30017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.280095][T30017]  ? trace_irq_disable+0x37/0x100
[ 1254.280114][T30017]  ? clear_bhb_loop+0x40/0x90
[ 1254.280135][T30017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.280153][T30017] RIP: 0033:0x7f86bdb8f749
[ 1254.280172][T30017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1254.280188][T30017] RSP: 002b:00007f86bea17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1254.280208][T30017] RAX: ffffffffffffffda RBX: 00007f86bdde5fa0 RCX: 00007f86bdb8f749
[ 1254.280221][T30017] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003
[ 1254.280233][T30017] RBP: 00007f86bdc13f91 R08: 0000000000000028 R09: 0000000000000000
[ 1254.280245][T30017] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[ 1254.280257][T30017] R13: 00007f86bdde6038 R14: 00007f86bdde5fa0 R15: 00007ffce8b79188
[ 1254.280278][T30017]  </TASK>
[ 1254.295187][   T30] audit: type=1326 audit(6308180343.320:14514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30023 comm="syz.9.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fac6b38f749 code=0x7ffc0000
[ 1254.353206][ T5144] Bluetooth: hci2: command tx timeout
[ 1254.387065][   T30] audit: type=1326 audit(6308180343.320:14515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30023 comm="syz.9.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6b38f749 code=0x7ffc0000
[ 1254.826007][   T30] audit: type=1326 audit(6308180343.320:14516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30023 comm="syz.9.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6b38f749 code=0x7ffc0000
[ 1254.849938][   T30] audit: type=1326 audit(6308180343.320:14517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30023 comm="syz.9.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fac6b38f749 code=0x7ffc0000
[ 1254.912473][   T30] audit: type=1326 audit(6308180343.320:14518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30023 comm="syz.9.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6b38f749 code=0x7ffc0000
[ 1254.985644][   T30] audit: type=1326 audit(6308180343.320:14519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30023 comm="syz.9.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6b38f749 code=0x7ffc0000
[ 1255.009660][T19193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1255.038105][T19193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1255.063334][T19193] bond0 (unregistering): Released all slaves
[ 1255.577346][T19193] hsr_slave_0: left promiscuous mode
[ 1255.583550][T19193] hsr_slave_1: left promiscuous mode
[ 1255.605302][T19193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1255.621155][T19193] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1255.635919][T19193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1255.650445][T19193] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1255.681025][T19193] veth1_macvtap: left promiscuous mode
[ 1255.701128][T19193] veth0_macvtap: left promiscuous mode
[ 1255.706929][T19193] veth1_vlan: left promiscuous mode
[ 1255.712252][T19193] veth0_vlan: left promiscuous mode
[ 1256.072160][T19193] team0 (unregistering): Port device team_slave_1 removed
[ 1256.100875][T19193] team0 (unregistering): Port device team_slave_0 removed
[ 1256.507912][T19193] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1256.576149][T19193] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1256.655589][T19193] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1256.699879][T19193] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1256.791765][T19193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1256.862307][T19193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1256.926033][T19193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1256.974847][T19193] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.072573][T19193] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.117729][T19193] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.170807][T19193] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.230090][T19193] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1257.353594][T19193] bridge_slave_1: left allmulticast mode
[ 1257.359318][T19193] bridge_slave_1: left promiscuous mode
[ 1257.367445][T19193] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1257.380396][T19193] bridge_slave_0: left allmulticast mode
[ 1257.387035][T19193] bridge_slave_0: left promiscuous mode
[ 1257.396301][T19193] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1257.407047][T19193] bridge_slave_1: left allmulticast mode
[ 1257.412932][T19193] bridge_slave_1: left promiscuous mode
[ 1257.418665][T19193] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1257.429151][T19193] bridge_slave_0: left allmulticast mode
[ 1257.435345][T19193] bridge_slave_0: left promiscuous mode
[ 1257.441114][T19193] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1257.452488][T19193] bridge_slave_1: left allmulticast mode
[ 1257.458216][T19193] bridge_slave_1: left promiscuous mode
[ 1257.464800][T19193] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1257.474066][T19193] bridge_slave_0: left allmulticast mode
[ 1257.479838][T19193] bridge_slave_0: left promiscuous mode
[ 1257.489183][T19193] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1257.707382][T19193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1257.718205][T19193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1257.730108][T19193] bond0 (unregistering): Released all slaves
[ 1257.809521][T19193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1257.821040][T19193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1257.830950][T19193] bond0 (unregistering): Released all slaves
[ 1257.928175][T19193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1257.938534][T19193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1257.948272][T19193] bond0 (unregistering): Released all slaves
[ 1258.424013][T19193] hsr_slave_0: left promiscuous mode
[ 1258.430990][T19193] hsr_slave_1: left promiscuous mode
[ 1258.436934][T19193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1258.444613][T19193] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1258.454997][T19193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1258.462776][T19193] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1258.479055][T19193] hsr_slave_0: left promiscuous mode
[ 1258.485594][T19193] hsr_slave_1: left promiscuous mode
[ 1258.491941][T19193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1258.499461][T19193] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1258.507849][T19193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1258.516038][T19193] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1258.528320][T19193] hsr_slave_0: left promiscuous mode
[ 1258.534695][T19193] hsr_slave_1: left promiscuous mode
[ 1258.540906][T19193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1258.548344][T19193] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1258.557038][T19193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1258.564817][T19193] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1258.584809][T19193] veth1_macvtap: left promiscuous mode
[ 1258.590365][T19193] veth0_macvtap: left promiscuous mode
[ 1258.596520][T19193] veth1_vlan: left promiscuous mode
[ 1258.601925][T19193] veth0_vlan: left promiscuous mode
[ 1258.608308][T19193] veth1_macvtap: left promiscuous mode
[ 1258.614895][T19193] veth0_macvtap: left promiscuous mode
[ 1258.621850][T19193] veth1_vlan: left promiscuous mode
[ 1258.627189][T19193] veth0_vlan: left promiscuous mode
[ 1258.635260][T19193] veth1_macvtap: left promiscuous mode
[ 1258.641264][T19193] veth0_macvtap: left promiscuous mode
[ 1258.646928][T19193] veth1_vlan: left promiscuous mode
[ 1258.652737][T19193] veth0_vlan: left promiscuous mode
[ 1259.008424][T19193] team0 (unregistering): Port device team_slave_1 removed
[ 1259.040656][T19193] team0 (unregistering): Port device team_slave_0 removed
[ 1259.228376][T19193] team0 (unregistering): Port device team_slave_1 removed
[ 1259.241200][T19193] team0 (unregistering): Port device team_slave_0 removed
[ 1259.427222][T19193] team0 (unregistering): Port device team_slave_1 removed
[ 1259.467053][T19193] team0 (unregistering): Port device team_slave_0 removed