last executing test programs:

5m33.476063224s ago: executing program 1 (id=1549):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165642, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa548a252a8891acd)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
lseek(r1, 0x0, 0x0)
write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000)

5m33.379651588s ago: executing program 1 (id=1550):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000640), 0x80000001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc0285628, &(0x7f0000000680)={0xffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) (async)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
ioctl$TIOCGPTPEER(r4, 0x5441, 0x7) (async)
mmap(&(0x7f0000091000/0x2000)=nil, 0x2000, 0x6, 0x12, r0, 0x57789000) (async, rerun: 64)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) (rerun: 64)

5m33.313704417s ago: executing program 1 (id=1551):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x1000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x1)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180), 0x4)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0)
syz_usb_connect(0x0, 0x56, &(0x7f0000001400)=ANY=[@ANYRES8, @ANYBLOB="ff015e76e114ad16456e1274e3d17771a01ecca64e0c1552c052c649cb67320927553e0527bf33c93de6ce16cc92115bda79087b6cab8a90175c6c22cf203f8cf3f8d9910c40d6e8d091c327519a60a95788db242ac0a9430e3ab2d4ff1d7e11c66bd12f6aa13fcabaed5027641a714fcda20f4a966e5b3d8bb3160cd938", @ANYRES32=r0, @ANYBLOB="23045b6c665883c872c4bfe2d98dc8262ae5afc0380e50f5d86ac0540fdb45f087411be9ec9d3610f12cd337d9c92893df8d2a6b0288a885b3b9f9d4379be0da51880e444c86a178e21e5f2855d366d94aa00bd18bee16513b78cb49d5b76350311e58c7ec0a518879adec109134dc56041ba2e616c12b789cb66527c4322bfc568a5284cd6171f5c13dc847e7af3d1874f51d94e3949319c600dde1f4548d60d5055359f937fbacd86468d169b76c04c3f2aecaeb828f580f36a3d784e5cde3c662a45715ca2a2928b904792b8df89090f2fa152f7adeb2a4b8aef61d08bfca1b5d", @ANYRESDEC=r0, @ANYBLOB="82c1c3342aa07a2d9eb51b2e37acabbeaf183a49073909f411c97c7fb5ecee89ac5100e501284fdea8ab35e5a9fb3ca071793654aae45ca4afea95edd61359efe4ead64148e77cdcfc6cba8562a91798c671536555103d04f31f96fed72b3b9ab427d7c44fd5ab630f1a2675bf87e7", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="ef82714baa653aec568ece8198a7e005bb697c545c9573c8b5c00d868320c81230289c7fb5bbbd40eaaf1a72891e737d8f65993f4501d0b1abf359ec1ed8f962d29617fd17fcb62113c0a43f5807d85dab0535e5a68515bf4d8d3f", @ANYRES64], 0x0)
munmap(&(0x7f0000012000/0x4000)=nil, 0x4000)
write(r0, &(0x7f0000000400)="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", 0x1f000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x3}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, &(0x7f0000000180)=""/90, &(0x7f0000000200)=0x5a)

5m30.064279291s ago: executing program 1 (id=1559):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x40, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000080), 0x7f03)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
fanotify_mark(0xffffffffffffffff, 0x110, 0x1, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x760, 0x103382)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r3=>0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x2, r3})
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x153a40, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendfile(r4, r1, 0x0, 0x7fffefff)
r5 = syz_clone(0xc0000111, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r5}, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x89100)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000280)={@desc={0x1, 0x0, @desc3}})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x41, 0x0)
write$cgroup_freezer_state(r8, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
move_mount(0xffffffffffffffff, 0x0, r7, &(0x7f0000000080)='./mnt\x00', 0x116)
socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x111, 0x4, 0x0, &(0x7f0000000000))
ioctl$FITHAW(r2, 0xc0045878)

5m29.955931575s ago: executing program 1 (id=1560):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x18, 0xa, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000040)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f0000000300)="170000000200020000ffbe8c5ee17688a2003300030100000065fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf780aa738061f15003901dee2a75f61000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f03d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa", 0xb8)
fallocate(r5, 0x0, 0x9c, 0xbdcd)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0xb)
ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffff9, 0xc4cf, 0x7, "0441120887e87fcb0100", 0x4, 0x200})
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="f3a50f09cbd0640f01c4660f38817ac5baf80c66b814370f8766efbafc0cb000ef0f01c40f07568000048e3665660ff5649ff082622463baf80c66b8b8ba8a8966efbafc0cec8ed8", 0x48}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
setreuid(0x0, r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x4000010, r0, 0x2000)

5m29.492141484s ago: executing program 1 (id=1561):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x48543)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0xa, 0x6, 0x8}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x7, 0x0, 0xdededede}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffe)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, <r5=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
personality(0xbe4e602dc9e6c1d3) (async, rerun: 32)
uname(&(0x7f0000000040)=""/138) (async, rerun: 32)
fstat(r6, &(0x7f0000000440)) (async)
r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x283a2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0x12) (async)
ioctl$SNDCTL_DSP_GETIPTR(r7, 0x800c5011, &(0x7f0000000140)) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x82103, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @local}, 0x1, 0x0, 0x0, 0x0, 0x3ff, &(0x7f00000002c0)='veth0_to_bond\x00', 0x4, 0x5faa, 0x5}) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (rerun: 64)

5m29.371968404s ago: executing program 32 (id=1561):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x48543)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0xa, 0x6, 0x8}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x7, 0x0, 0xdededede}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffe)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, <r5=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
personality(0xbe4e602dc9e6c1d3) (async, rerun: 32)
uname(&(0x7f0000000040)=""/138) (async, rerun: 32)
fstat(r6, &(0x7f0000000440)) (async)
r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x283a2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0x12) (async)
ioctl$SNDCTL_DSP_GETIPTR(r7, 0x800c5011, &(0x7f0000000140)) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x82103, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @local}, 0x1, 0x0, 0x0, 0x0, 0x3ff, &(0x7f00000002c0)='veth0_to_bond\x00', 0x4, 0x5faa, 0x5}) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (rerun: 64)

3m40.180099399s ago: executing program 2 (id=2290):
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)
chmod(&(0x7f0000000040)='./file0\x00', 0x12c)

3m40.148195854s ago: executing program 2 (id=2292):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0xe, 0xc0})
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
sendfile(r2, r1, 0x0, 0x7fffefff)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$BLKCRYPTOPREPAREKEY(r3, 0xc040128b, &(0x7f0000000200)={&(0x7f0000000140)="29c3f381ba0fb62cca8c35f40ee3474367e79dac2b90bfffd6d193", 0x1b, &(0x7f00000001c0)=""/6, 0x6})
fadvise64(r2, 0x9, 0x9, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800", @ANYBLOB="9cc54109"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4)
sendfile(r1, r1, 0x0, 0x7ffff000)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0]})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000240)={<r7=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={r7, 0xff}, &(0x7f0000000300)=0x8)
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000080)={r6, 0x0, 0x3ff, 0x3, 0x0, [], [0x7, 0x8, 0xe, 0x67cd0d8e], [0x3, 0x5, 0x149, 0xfffffff8], [0x785, 0x5, 0x3, 0x1]})

3m39.1671533s ago: executing program 2 (id=2300):
syz_usb_disconnect(0xffffffffffffffff) (async)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000040)={{0x2, 0x0, 0x80, {0x6000, 0x100000, 0x1}}, "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", "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"})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000020c0)={0x0, @reserved}) (async)
lseek(r0, 0xacc, 0x3)
r1 = dup(r0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x1, 0xf85, &(0x7f0000002180)={{0x12, 0x1, 0x300, 0x64, 0x1a, 0x41, 0x10, 0x856, 0xac26, 0x2c43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf73, 0x4, 0x76, 0x2, 0x60, 0xb, [{{0x9, 0x4, 0x71, 0x6, 0x0, 0xef, 0xfd, 0xd0, 0x1, [@generic={0x1c, 0x22, "988de4598bda0243a68ff24ed876f98494a08f4858f56e8c7ef4"}, @generic={0xe0, 0x9, "b9fef2e0e67f2601aeabef14ac0cfa2b8fd8cd020d1846c667859a46c92e0ac39eb455efd1116193f39186a2db78f46920de3362aacdac701cc6b6660c2a949b424b3a3d6a3be7670573d94b4bb944415a9e6f71843fca248d74971139402bc0709f2a3e9b859176820f29ce09999bb537f4c26877f9abd0adebb3357d881a9fb71c761c7ac3bff16f02a781d5d53500b0cd134242c84dc0c760c894778adfb7c79b0e28b595e08abc452c45bda44f7a443dd9e2db16e3c7c8b711fac305fe1a525dee28d0b4c8ff13cfa280aa284b4bd3d73e584af6a33ad1d97d650195"}]}}, {{0x9, 0x4, 0x74, 0x1, 0x9, 0xff, 0x4, 0x3a, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x1}, [@extension_unit={0xb, 0x24, 0x8, 0x2, 0x1, 0x4, "183d7b54"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x3, 0x6, 0x7}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0x2, "f501ea"}]}, @hid_hid={0x9, 0x21, 0x0, 0x6e, 0x1, {0x22, 0x375}}], [{{0x9, 0x5, 0x4, 0x8, 0x400, 0xff, 0x9, 0x4, [@generic={0x4d, 0x0, "29e4d7147aba1c3f83008194029d140952075fdab034d3cffaa32fcb6b3e8b750a523da234cbd11272bdc599a5f51231855ce2b6f6ff3ad5be3efe5b8e4bf7804f7048d2a801289f229ced"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x9, 0x1, 0xb, [@generic={0x18, 0x7, "0c01ea764ba4c3638dd29bb2106ae108167c2315bd67"}, @generic={0x67, 0x5, "784dcc3110a7d55ceb0b7bb1526fc6b8fd5078df877084881918db0cbe1e7fd125304accef0b664c0e08a9a55608cf5a20ebcd3e8cfdf9823b08c2b1e25ccbe1a03ca4f200e690ee5816b170c19d77608ae006927868b09bbf4d43598d4aec8aaa29e2883a"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x77, 0xd, 0x81, [@generic={0xd2, 0x23, "2f44e84f47bd424642b6a7ac1a455d740dc5dcfbe68f9108c6c2406824abfef05915953d7020e2732d780e64a3c7d89a10c53fb9e9c769f4a256ecdcd5a025070e794074e525bccb982f6ae462c16cdb0b7c71248ec6261e6af37552077a45288567357392c297cb0007e9efa94a77ea2d54a8baeaf29207dd861fb81e17b1ae02b61e67769de5d9a6e82b8d8c26da9ebb998f3ba8c3d52bab5561977ddca27078b94a0a43de92439a6712c6c602b716143b7a9faadb95925fbec3445faec30c9ce217603369d17f5ddee1f28f24f39a"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x24fb3204df6c40ce, 0xd, 0x9, 0x9, [@generic={0xdd, 0x2, "b14cd26cb59828b62498081ac3e0ea8fdfa901c970fb6b79986accb160d1a11e6a9547896c2e5aa0e5532d6a06574669a5561d6ead3d55d9353e31f1aa1d4c8d3a0e344a13c7c35029cb7a4208e8e16ac5689dc0dbe3aebf9570dc563427a42283927b44006dff6cff6587928dd71a97f17b76cb695bea3c05e810cc14ea1e9899bacf74798dca3bdda72ea8a6053624d5f72b33c53b09052641540c8673d2007fca608244a641e3c918243131a741cce51399796d014134c86452c6ab420add22570b2e54dde75dca9f9961b5c781f543911bcdf053fa06e217f1"}]}}, {{0x9, 0x5, 0x8e, 0x3, 0x10, 0x1, 0x5, 0xe}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x3, 0x9, 0x4}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x53, 0x6, 0x3, [@generic={0x30, 0x3, "1650583d8799a1a3fa7d6309d5b31907f8273c4f445f7a2e923b00076c646c8d71cb50bd8b4224a6191aaae4069a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5c}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x2, 0xff, 0x8}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x8, 0x46, 0x5, [@generic={0x85, 0xb, "de98ee31aa3f50b41aa2f955e5d14d74ea104ce21c29b02e84aed5ced919be012fa3bf99dfec7ca680771db89007d576847f7f5052e1ee913145b952849f949a2f636819a2b92ac9f6f1c5e28757e7fc940ec74714405eb8591ff1ca6ddea81e950df81370d9eaffee6d810cdfcbb5206fce27057127bb04a8d375d62241ce26aa1758"}]}}]}}, {{0x9, 0x4, 0x79, 0x4, 0xb, 0xff, 0xff, 0xff, 0x9, [@hid_hid={0x9, 0x21, 0xff, 0xfc, 0x1, {0x22, 0x81e}}], [{{0x9, 0x5, 0x7, 0x1, 0x400, 0xfa, 0xa, 0x9, [@generic={0xe2, 0x9, "b8452a095369d61b3e2c09fb3bc10a54ee79abf730a41ac377f0252290de7c809b77d5282766be5216a1b9b771a5f0a8f08a4d49d5114fbe686827d3152d673f431b8214fa9f969cf2830dc944fa20299330c490c2797c1d91158207f220db6149eaded4ff5b130eb616929a5eb6dc28c51d5f9b5a20f9a8b526c11c38f5880a9e47fa874d03e760dba672f6c41135f74acead4052f6805e4ad6483d57d27a864a73ecd050f5992f2c35c628a0bd7c44ff155d54c9295a0103877ab85a952a924f02b3d33f948f1e4c00c7cdcec5e3a70db89570f7cb31914ce85a279d0b3347"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x32, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x7}, @generic={0x7d, 0xf, "1b4ff2ae0723992a092c1ab81bcbc4fbf204ba6366c6bf7a0e46283cf5ae3432aef362f0bc34c503051e66ee386f137338adb92432a5596083c19f4dd5d2113a379d3042e8846048e0f8e5b1e06f88b17bd4b6fb3d8c224b04a40ec3a6f976a2f40b6386fb8ab5f24a730dabd048a3763bb10e1ce27f4f0c51b247"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0xdb, 0xc5, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x800}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x8, 0xa8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}]}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x6, 0x1, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x69, 0x5}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x7f, 0x4, 0x1}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x2, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x49, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0xfff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3a7, 0x8, 0xe9, 0x8, [@generic={0xd2, 0xa, "8c5d1628bf20b4b991a4649b7eee43039b5f02a967ed72d8a041416ee50c9de48d12e455e3baa37c812b1148784de63f6313068d00a9087d2eb45bd98e511ae6e996a9ac0e8f509e119820b93c4b900dce858f231cdbc86d499df17d4b670c23164a6e9f8a7eb28629f32df576da639405a13a0dce3d222bb23fad9fc933b74fbad9e60a66f9fb2c4ed9e5fd879cd2455b844a1235861e75e38239b4f9405362b8e08f44bb87261996733870518f0fa3479f2f832657256f36117be6a606cdb68581ad9d5549b67ebd217899dcf3f938"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xb, 0x3, 0xda}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x7, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xff81}]}}, {{0x9, 0x5, 0x3, 0x1e, 0x20, 0xde, 0x9, 0x1, [@generic={0x8e, 0x1c, "70d76691c60d08224898195c787cf8f781909bd2bc45694be002ae5668d9dbcb238c0d44f348badfeca5f82e46571d6d41664384ca9a3a0427e9d69bf51d749144a11f854686712aa895adbf4003ca26f9fe7bc8ee20cf2a324a1896f25d5f28cd6f6ea2a800aa92d0eb69cae4a07a1ba957f4a835dcbe67294adca90dd2e7827f580a847c0f37d8cd93cb3d"}]}}]}}, {{0x9, 0x4, 0xa1, 0x7, 0x10, 0xb1, 0x2, 0xe0, 0x3, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "cb707e84"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfff, 0x5, 0x40}, {0x6, 0x24, 0x1a, 0xbe1, 0x22}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x4, 0xf8, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0xa, 0x2, 0x99}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x3, 0xf, 0x9, 0xcd, 0x40}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "1b34924f8b"}, {0x5, 0x24, 0x0, 0x28}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7fff, 0x1ff, 0x4}, [@obex={0x5, 0x24, 0x15, 0x80}, @dmm={0x7, 0x24, 0x14, 0x5, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xe5, 0x7}, @obex={0x5, 0x24, 0x15, 0xafb}, @obex={0x5, 0x24, 0x15, 0xc}, @acm={0x4}]}], [{{0x9, 0x5, 0x5, 0x10, 0x400, 0x2, 0x9, 0xb, [@generic={0x72, 0x22, "258618c032b5cd8459a62c22b3ea3cf10688ddec652abd432dfb48fb1e91a40612775c4a7ecf3ba5456e8279d99dd4418cacf0e063fa73877daa83dc497ec10ecd95b923467e6ecc715a873fb9764fdbb1df042f937c2cad22f652ed6523c9936c9e30b181449be043db2797917d78c3"}, @generic={0xa5, 0x5, "bdda11d097db5f16ae235fbdf5ff19a551ca2a667774ffefa13c103be15e56736dd0b4135ee24c7213b4150be3bca39c91a46e4e437e67f35cdeca4e018a902073882e686914651e051e0cb43516661c589856c2020d48f5aeed27b0db356e8e542c7e8cbe0f62c4a263fc511f08d9b90aa8f2b9dadc8a7bfa74e0c1a07a8220c34530d49ca616e822caaaa0f920e745b45d4c199051a04f07e101e0ffce713c1f8013"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x268, 0xc, 0xe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xffff}, @generic={0xbf, 0x638790b608c26bee, "8424f92e52182bed2b1881266743f6cee68e4b7d85eb02de8e5974d61f8a8dd46ccb0ac3804994ac86e5c244ec36faffdd4858a807995befad72907a7ec1010168d305a0ffd2b903988ba7c7b6013134272e37479a9ab7a710f4df9711987a2d0d1eb238b2bc0bc164ceb5cff23605c9f410e380763c1e4b2373bcaf62d5104fcce223fdd016f6447c945f8f5fc52ddbefb9015aacd396eae8dfd53e6ed22ae526ebb4b828edb80002a37fdfcac6b343490d6cdc349f37bac4e0e11b95"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x8, 0x0, 0x7, [@generic={0x17, 0x3, "250cc68ea36aad82c8b038cc168ad22f3f8e748787"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x0, 0xfd, 0x7d, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x9c5}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x0, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x5, 0x5, 0x7, [@generic={0x94, 0xd, "466736f46b31211e61d59291b9f427cf0e4421826380f82fe08dba92d52103aed3de2d2037cd834f5b3663b75d700e3ea8823849eb44f869ee3f54d5599bfa41e2d70ea8f137341db86a0dc60ff15e6dd9a5c94fb2f46848407b78d1fe8f8d3110ec7ec18954a5113f49660b818f04a7406c2da098a513833a46f30b4201b7c6131a5087d4f78cb22e0effb1a70850486bd7"}, @generic={0x6d, 0xd, "b762ea0930cb3a1bd019bdaf402a9ac3ba9e3eb1c5d5aa028b1f54a0e55bff1f4c7d40a64c62e7994276645a6f7f46eb572d6710c569b3c8c07489157bb725c99b083c24c84ddddc29e456ac1869b9ac2fd9fa1c507062817aecfbae367cbc8ee36bc3d9c1253abdc0645c"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x6, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x8}]}}, {{0x9, 0x5, 0x89, 0x9, 0x20, 0x9, 0x8, 0x0, [@generic={0xa1, 0xc, "c1e0818cc65d9a9440d4c15266c9c4918823e6b0f6e819c1011a4711496f9ffd633f3fbf80a9b0df0d4f0f0e8582047211558beb6278668837e10b67c6adefe7ed291512206558013789ae0dba73df6a9c713c7ddd4dcf373eb9c9d8c286079e5b118517d708b2e749e2ec013f5a96ddb072b86451692a37846d3b7f52159e439a10a6125904b818a75f84f05cde4b9cf3e694846841968602472e53476ba1"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x0, 0x7, 0x87}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x9, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x7, 0x8, 0x3e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1000}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x2, 0x81, 0x80}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x2a, 0x32, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}, @generic={0xa8, 0x6, "9848a2851dbaf071beca1ddf6c5acbcf55458ffdf73f55d069138726a570488a455b615d995c45dccaab01b96df8ee4fa7c61ae88059b9d697a68dd7c34f6a887648cc98fef6dfa36e2543c3fd2f0633401d20d727f4cc3311736ae4c66fbc5742e75c827cf3bbc319cf0e02aad6452c6db894072dbf4befc2c13722066c576ce712fe23bdf8e079af6e501bc41e66bc3acec6196b99a6f81bdc152edc457c7f6bb0fc957caa"}]}}, {{0x9, 0x5, 0x9, 0x18, 0x238, 0x6, 0x65, 0x9, [@generic={0xe3, 0xd, "038cfd3c7b244f3c1e86d2fea30aa195d2fb20f358e553c135b52f22d4500ee7cc4a99d0d3b137820231c04faa9d2d71803257f9f6ab28473208bbb7436ea50f17a5add2a19c363360e327f5e2cc9ddb77a914140965ca92307ff6ee03d79f0058626bbde18879d802a9016627bb85fd505f09daf2927f435044a576db2dc6ea81f9854bb8d2efd4224d07f336cdf006e53451491b173d56f241e77e085c11971f01446430cbd95db6e983e90fae7288736a5687f6aff13e8c9ba91cecbcfe253a4e336e00e9c18cd6f08f6808daaeea2b8706d40116a3f5a5cc4fb6c74008b79f"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x4, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x71, 0xb, 0x40, [@generic={0xc6, 0xb, "8a83426395b1c77ba204f8ab56f7abd472bfdffd608b54f341ccfd0eb0c7a8b1e2a900de20b951102255f107bd2a2440e94a28cee555052994df424908add93fedc11dd4f7d2ffda0f1f9aea06d825063f526398d3de785f1cac93625493674d4bc1fffd4bd585364442e9ad98f0dd6b51f699ebf2078e29c83e60cbb6a8ad686816d87ccbbaad2145c0dcc73cc3e4f3f26e5fa7d9e4af31482e3377c48a57a2a5efa1d6e204c07a3ad139084bce6ec8028e16995ec47b3d802f4129930d9639262a9e62"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe}]}}]}}]}}]}}, &(0x7f00000033c0)={0xa, &(0x7f0000003140)={0xa, 0x6, 0x110, 0x1c, 0x7, 0x1, 0x10, 0x8}, 0xfd, &(0x7f0000003180)={0x5, 0xf, 0xfd, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x60, "85ab7d7737ae6170fb5a22afc8727913"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x3, 0x3ff}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x4, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x5, 0xf000, 0x4, [0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x3c, 0x4, 0xd8, 0x0, 0x9}, @generic={0xbb, 0x10, 0x8e41b47797628dec, "b9d27e4f216944b5913cd6f739bded205ab3bc225041645d668dc947f3466438223127031951d7069609a37db294112815eb7a6e2419a846b697c2b84ece4edccdc6ed60d94bc68fa95ec77b4f9a15fd6f37e0ace37843e85873428546317bfea90d2cae5fbccaee6ea61e23b786d6148a40983a3b8881928f7ee6f7fb24b286c2cfad50d7ae6012f114203c400034d32a64bdd89bb93b207f6d944330b9fa0489c6d8e9b0262ff70636fe092170edbfadcf9d91aaf5501a"}]}, 0x3, [{0x72, &(0x7f0000003280)=@string={0x72, 0x3, "c5479bbc36db762ed403805bfb8bea849089fc54a54052523ed7a35188f73ff7c2b5278a0aa741ed17a979da80f68b99d0799674701412ad355f7b93bee546e89e0e240c1c00d43e901909edb750108df6f228d67f12b275fdac02ddfed6f5859272579ef5a6cfe93241c9b8846332e6"}}, {0x44, &(0x7f0000003300)=@string={0x44, 0x3, "87cfcff9856fff207cf97d4ebf4a5bab573661dc8d39a905215f27b3fe0d16f421d79ed61e314f4e6851329ed678aa091ab42f47b1b05b02581fa5f6f73c293c6dd7"}}, {0x4, &(0x7f0000003380)=@lang_id={0x4, 0x3, 0x340a}}]}) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003440), r1)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000003540)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003500)={&(0x7f0000003480)={0x44, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000035c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000003680)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x3c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14044000}, 0xc081) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000037c0)={&(0x7f00000036c0)=[0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003700)=[0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003740)=[0x0], &(0x7f0000003780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000003800)={r5, 0xfffffffe, 0x3, 0xf, 0x3, 0x8, 0x6})
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000003840)={0x3, 0x9, 0x4, 0x10000, 0x8, {0x0, 0xea60}, {0x3, 0x8, 0xfc, 0x2, 0x2, 0x5, "07f40314"}, 0x80000000, 0x4, {}, 0xa, 0x0, r1}) (async)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000038c0)={0xfffffff8, {{0xa, 0x4e21, 0x5, @loopback, 0x10}}}, 0x88) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000003a80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003a40)={&(0x7f00000039c0)={0x4c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x41)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000003b80)={r6, 0x1, &(0x7f0000003ac0)=[0x4], &(0x7f0000003b00)=[0x5, 0xbca, 0x995d, 0x4, 0x80, 0x7, 0x0, 0x1, 0x4, 0x5], &(0x7f0000003b40)=[0xf, 0xa, 0x9]}) (async)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003c40)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000003d40)=0xe8)
sendmsg$netlink(r0, &(0x7f00000056c0)={&(0x7f0000003bc0)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005680)=[{&(0x7f0000003c00)={0x40, 0x34, 0x400, 0x70bd27, 0x25dfdbfd, "", [@generic="f8f3f3544e822ebe95a9b3dab771a46ef064b0d1efdbfbbc7b3019fa72b6aff9522f57b69fd29b90", @typed={0x5, 0xf0, 0x0, 0x0, @str='\x00'}]}, 0x40}, {&(0x7f0000003d80)={0x139c, 0x27, 0x514dc7721f009f27, 0x70bd26, 0x25dfdbfb, "", [@typed={0x7, 0xa1, 0x0, 0x0, @str='#*\x00'}, @generic="c42371ea34d8a1fb1120f5c317706cc9a4ad12f208cffa4189f06c72e08edfab3e5be09218c31148e337b2ec036960a33df8e3e0e283255634b68ffd5025b46f7ccee42c33c5044aca709f96ce389900f608d3f957ac9c51475fe0b56aab4141b2f1fa8558c80aac663b6af2ef95158b882ae35e87ec5e", @nested={0x8, 0x12a, 0x0, 0x1, [@nested={0x4, 0xd9}]}, @generic="cfd77def437975eced6316e5b04476950831", @generic="b0fdb1673e00fa61a26c380c6c8cb818eeffaec87edccd6b9a19bbefbb7d733d08b58af7bc8a95762cb743ecc32fcf7363a1bef9a1cb8651d4dee8c92bc8fda4b162c0d761ebd460240e832f22fba5cd5b8a43d16c865a34cc94667fe4350ae88943f4fa897122f1ce25f23caf29a75c58159a6fad4545a372a4f76f85d4890d630258acf4139fd2d34fefe97601684017f8453896d5e2ab60d50372508865575ba9092dff2fd264c0f94550ef5e0c54cbc5b9637fedea13ab781c87b795ed75cba05d8f40c452b3227bd749ae82478fdb018c00fdcd772b1b663f761c39d55783fe839c94ffcc4525061bd28d05b4", @typed={0xc, 0x91, 0x0, 0x0, @u64=0x2}, @nested={0x62, 0xe4, 0x0, 0x1, [@generic="e9bfa5fd51bb58c29f7e803140ec1d99c18e4185ec869f095affe855c43cf52685053e1bd5772994b0d308971484ac73b95378d98cfec4107f6c406a896c63473a54c1f09806b0430520807e13fec5f5d390ec0a7e2c791ecc28", @nested={0x4, 0x10f}]}, @nested={0x1194, 0x133, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @uid=r7}, @generic="31e37a29905a1d75c189d1d4ebb78fc0bd6b2557b1d6776538123e1e2070900e030ef00cbfca2bc78dee906a5e71b423fe4621fa42900a0d12fcd3c2496f49140a324e9792507ed673cfc16b25107b1309b355e39e920616e3122b3778cb9a6ae994d822f46c0c38bcae4858b409095c244aa586204e871221b74be1f862bf4295fc5404b0a014", @generic="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", @generic="08e965e599b6e03ab1e3a0a134ea5c28f6c5ce43d7fca78c9708e19e491e530695d799419360d8384765bc1f56f92185795766542c22a0eb582a4f6e23d382c3c61eda267ac4954f1a712ae9632bb50bcc5ea62b181bc8cc929896cd4bb8d576521c5a42cbac1fb1188d80f02e3a36f53fc8dc8f0cbe0291f238736b6dbc1ead1bba649e5e66690f2df74d37ca0932ce18383a04dd6b0d893372dccf0eb0fe7f2f5ab09ac9ce5d46c6b8b0e13a7c96f90e49838e2b84aaaa429be7f572779cedea2bc27bd7c18323b90ce17e20a8afa52ec20602c8f1f550a60261b964eb5b74831372ba16ed5d9a78", @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x80000000}, @typed={0xf, 0x93, 0x0, 0x0, @str='/dev/nvram\x00'}]}]}, 0x139c}, {&(0x7f0000005140)={0x304, 0x21, 0x4, 0x70bd2d, 0x25dfdbfb, "", [@generic="fb", @typed={0x2f, 0xd, 0x0, 0x0, @binary="2593afc74e1817d0f52b5ce222ab4d0c43cebded4c76f613fd05bb5920733cfa511da89a5bbef0e1dc7852"}, @generic="766d43faf76a99697b8f9c3851f3a3501c93605e9c8c334183", @typed={0x85, 0xba, 0x0, 0x0, @binary="eef8cecdf02dcd0bf58c9e179b42510476c5b2aab7bdf79d8665938324400372ea3546c845721a97980308cd073b5e2acc1ed4a6d28ec09ed09f5aeae644dd95de08ecfa45a99a9b12d1d49d3bf0f35069b7d15433285f4c1c7657352d3a3dad4cc449d3d6ee773727363978b568220c0cd4fdc1a058b9b703032bfb8dda211ded"}, @nested={0xf7, 0x75, 0x0, 0x1, [@nested={0x4, 0x17}, @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xff34}, @typed={0x4, 0x7}, @nested={0x4, 0x13e}, @generic="a6f535dbdbacb3e6f50b0313dd2e3c79d091208c33b9d91fdfdb8c66bbb737c974d8d190ab2cc954c7e39d0e13fa4a3e18dab603e15f632315aa8936360b97c040480c", @typed={0xc, 0xd1, 0x0, 0x0, @u64=0xb1f}, @nested={0x4, 0xc1}, @generic="94f192cbb02684f8fc4172546994fb63b2919052900913c657a2628ab1996d8a58ac13a9c9091e0c684423c269a1f2d5329f36e9808e522644dd39bddca674e49ca54cbefee0e71ab232fe1b1a56588bed240264f99eeb216d05760f081864db0a47d71e3fee45a2e857da10461937de3ccbacc25a14da3be78fcfb5fb95e69172915f5d18242e51"]}, @typed={0x8, 0xe4, 0x0, 0x0, @u32}, @nested={0x11e, 0x139, 0x0, 0x1, [@typed={0x79, 0x90, 0x0, 0x0, @binary="acef54d98e65e973b84f211311fa89be7e3c359521b8337ac7b85bd79691a39ec64dc834a6a9118c31f286f90cbc4646c1f8957905c8850cb63e1fcffa030fe38f626008a42361531ac1b64956141609484d8c15d73c20107030a0f803238eca1da3c9d5158fa2d1f1f6c83ce7dce3ef3958f0d703"}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0xa1f}, @generic="293dbc4f14127766474f24f3226eba57b73ce5c207adee56105ccb3aeffd2a1aaec2d3035488d1654a9a5518f412aa84a5e3e9ef138c8092dca743c8176e6a079c18c939b14a0775253c1b794568bc80eac98694519ce4b91e16e8276f6c19ca56a1157fe261aac42872adb0e877380a15d83e4bdba77c656d44f637fab762295e39cfee2e71f84ccfdd6ce78faac615d49a"]}]}, 0x304}, {&(0x7f0000005480)={0x1cc, 0x1c, 0x200, 0x70bd28, 0x25dfdbfc, "", [@generic="441781496f7b41921acc82e1f91ae7a33f8f441ef4f274", @nested={0x1a3, 0xd, 0x0, 0x1, [@generic="b0f8e201dcccc158ea72682bb7c32053a87c87f4d728a00af28e78708efc6fc4146c5d5574af147a42de6eebef9c814716196ff4f90e7c18ed6dda4b75e1547cc0152b82aa03ace982ec0c4600aa30c865c55f3553b0bbab0153dc161bdf73c8d54bef857f6b57974eacf20e20f4c4b59f10e5bbeda00a3d8698588cd88ee5afe318c2ee290561cca9c8667b6b4f16b83a313e7ffb5a3ecdba9ab36a04cfaf3b37", @generic="c38280e133172c907d8fd3407e8a0f6ed9f42dd6", @typed={0xb, 0x39, 0x0, 0x0, @str='batadv\x00'}, @typed={0x8, 0x3ffb, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="f2965146431f508dbeca0507514057a5093b7dcdf42e92ad4296ba066aac34722ecb452afd811b78b03dd8725e65f6b1bf31605d6d32e0d96e0eeee4e4e650b4860ee994c4f4d0cbaa7d256fb2235dd240cff394c0e39a30da263d5023932135bb67604d1d748d3145cb7bae263ab4a090d51c1539d29956bc28723a8d9f9a3aabcdee1fb4971958cb56e437910fa0841413c86fad0d4f272c31657fca48fad5ac6a033ed635d4d63a31a980bc9eb26bcf146ac260728374213ba9150801a1beef3c3c6a1a4a914f6fd9be482763cb232bb810106c7b"]}]}, 0x1cc}], 0x4, 0x0, 0x0, 0x24000040}, 0x40000)
ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000005700)=0x7)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000005740)=@sack_info={0x0, 0x3, 0x9}, 0xc)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000005780), 0xc000, 0x0)
bind$netlink(r2, &(0x7f00000057c0)={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) (async)
r9 = socket$isdn_base(0x22, 0x3, 0x0)
fsetxattr(r9, &(0x7f0000005800)=@random={'system.', '/\x00'}, &(0x7f0000005840)=',\\\"[}]$-\x00', 0x9, 0x1)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000005880)={0x7, 0x0, 0x6, {0x5, 0x5d, 0xffff33e8, 0x1}})
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000058c0)=0x3) (async)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r8, 0x4004af77, &(0x7f0000005900)=0x8000)

3m38.039900988s ago: executing program 2 (id=2304):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f0000000200)='./file0/file0\x00', 0xb)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x341342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000000000007100000000000000410f221f48b891000000000000000f23c00f21f835030000000f23f8c4225d3bedc4c2fd17b3363e000066b886000f00d866b81f018ee0470f01e5460f01cfc7442400f58f0000c744240209170000c7442406000000000f01142466baa100edc31e0000000000000020000000000000007203000000000000b6000000000000000a000000000040004200000000000000c46179594d00c443f548e52f0f1561c8f3a666ba210066ed410f30c463815f282d66ba200066ed0f30260fc7a9f9ffffffc33200000000000000180000000000000040090000000000001e000000000000002000000000000000d109000000000000ffffff7f000000001e000000000000002000000000000000ed02000000000000080000000000000046000000000000002000000000000000020000000000000004000000000000001e000000000000002000000000000000710b000000000000070000000000000014000000000000001800000000000000feffffff0800000014000000000000001800000000000000000000006c0000003200000000000000180000000000000000000000000000000a00000000000000590000000000000042a5df510066baf80cb8cc0a7688ef66bafc0cec0f22410f21b50f01310f7444fb4e450f01c5b9800000c00f3235010000000f3066baf80cb8e45f9484ef66bafc0c66b8201e66efc31400000000000000180000000000000000000000ff0f00000000000000000000180000000000000009000000000000000000000000000000180000000000000001000000000000001400000000000000180000000000000004000000030000001400000000000000180000000000000001000080030000001e000000000000002000000000000000c20d000000000000b3e90000000000001e0000000000000020000000000000007b0100000000000000000000000000001e000000000000002000000000000000740300000000000010000000000000003200000000000000180000000000000053090000000000001e000000000000002000000000000000850300000000000001000000000000001e0000000000000020000000000000000909000000000000050000000000000032000000000000001800000000000000f009000000000000000000000000000018000000000000000200000000000000"], 0x36c})
ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000003c0)={0x7fff, 0x3})
sendfile(r2, r2, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)

3m37.953987892s ago: executing program 2 (id=2306):
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x58, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x48, 0x0, 0x0, 0x1, [@typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b"]}]}, 0x58}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000)

3m37.474301547s ago: executing program 2 (id=2309):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000740)={&(0x7f0000000080)=@llc={0x1a, 0x207, 0x2, 0x2, 0x38, 0x7, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="1108e812a913b80e0e2848a93851d89962f606ac9922714e143768e7b023044b7e2a08211d469eacb01122c5a27f5b95a95f0cb502f6c49e6cdd1012351e1a3cd6bbc731203c5fec9b415e9ce1ab50a7d0e6e193a0d07c9fa8a7dd5a0bbedbe747ad815e9deb8077c449ec435841f2556ec3f5c073acb06b1196e0f03fc08162f3cb1431ed0b510884b63342ee09ae8f19b71f2497e1d075c45029154950cbb47bd037", 0xa3}], 0x1, &(0x7f0000000240)=[{0xc8, 0x18a, 0x4, "cd07038c21b3422bbd2f7c16f412150c7b361460b46e52fed10291b3a164c4106574165e85a7ae5deb78d20e5c9dbe56872f717b1a4213e7d4c14fe6224453947151d2e47ce4aed15fd72706314f7d51cd408bd667fe250d77b02074a84c2e661f945a37a8a155169f3ed7edcad2091e4632ccd60b9cd133017ceebbf93ccfba59c48a22f359829421debba3c765eb36be534367fee3c2f3a1d24fa91ce4eff2e75e176818c0bcf7e6af5a5111a87985a5"}, {0x80, 0xff, 0xffff3ea4, "16e201944bc479a5aecc213af1e990e694fcde517a28f0b9986128fa116e33e0f169d1c16e337b29ddd710449c8c16b75feb6c693907caebc751fca97a795a18350af23393c6f84b2f029960acb8de3988477ad7982cce31227f93c47f96381153da10663e0a7d23fb0805dd07ad"}, {0xf0, 0x107, 0x4, "5f3d9809e6f4c1adf3c7998d2dfa3f5211ca3a0f74160d8fbcb1fbd70c0d21bc685c28866638b9f8b1d8a813242eb6e9549ff993a8a1ab5a3f8471ad76c47e79f6a2d952f1a29cad2176c175586a2c60eabfbd58089fc5dd30ff41b74617010526cc0f7844b7655192158807a5d5fad197b2db37bcc5f8a801f68760115012959148a561fdabcaead3b9a2c64a0bb781d81a158ea670d9cc1bc6f4235aed44d43b582b2deff4e0558500d9ef64af470bf56f1cf02c31ab93cd8caa2f5d4fdfcbd1aebef1d83c5c9257089249c444c6a5d20eff7d081765db8ffa54"}, {0x78, 0x101, 0xe, "8ea49ade5bc8d8ed4f93164aa7f56ca18919d89043a92d142bb315bf25029f8fa32a9510da41ac63028fdb0dd037e0a13416c9b69ff38aa9579bfd2ff8813ac8da96bf3d1c8b4e39deebe5731c997b44352ec6385c81762d87ece5539bf76cb211cf55e2f7"}, {0xc0, 0x117, 0x8, "f823dc93f1dcb76b5100213aa6e09c5b33362e02e3be9bf5e960dc4dd241c7c10832911decf005cbe37282b7268484ea2c183c5b2e2f016667b2d368366f3407ca101da08fad631c3fb8fdc6d50fca762b3291a5e9e77ddc8266b3f6fbf393db2a9ea8c968d8d226a3e9de451839d51b2492f1e4f4c2f01a46c57b2b00d09951c101feb56beede40d262905892521036867bbe918f9fa3f090b7b7c2d8b778b106f98b82ec5884b99186b0bc105c1628"}, {0x108, 0x104, 0x6, "03c45a5bb11857ef8e97ff4ae20c972a548b85884a91f8d63e08fd4966ebd5d959355ddbb05f7350221197d649597f5b5d7fa9f2b3d28d98103f2d7767ff9a288ff2c25b48ca2283d1808145098b0081a68ad2972ab15eeceb76201fd6f7be62ca5c491af7a9ebefe729daf0ccbcb151bd04d4397981baba0a3a31111ebbb537117c4ace2530456b9cad09a4f47fdf5e54adba2711d0b4eb86df15e7188f7c2978bb1fddae90535b31d35d30ff7ee1a932c26f3fabf82cbcb431d00dadcdf83a9bb97dd5fecdc325887944051303b0d70e208cfe7c643c95bba17cb5f995c1aa7ca6e639c3e903a142b2b4e98ce7c5cb0f"}, {0x60, 0x10a, 0xfffffffd, "07ccc487f5cdac3c8ec1bc1a1f9d1af74e56f027a0c2b532980eabaef721e0c38fa8b26a3853098d9faf6c88d093e674356ed676761fc47dfb15ee17eb006c5fae37a91271a8269e5f555ca671a082d6"}], 0x4d8}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000)

3m37.324976156s ago: executing program 33 (id=2309):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000740)={&(0x7f0000000080)=@llc={0x1a, 0x207, 0x2, 0x2, 0x38, 0x7, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="1108e812a913b80e0e2848a93851d89962f606ac9922714e143768e7b023044b7e2a08211d469eacb01122c5a27f5b95a95f0cb502f6c49e6cdd1012351e1a3cd6bbc731203c5fec9b415e9ce1ab50a7d0e6e193a0d07c9fa8a7dd5a0bbedbe747ad815e9deb8077c449ec435841f2556ec3f5c073acb06b1196e0f03fc08162f3cb1431ed0b510884b63342ee09ae8f19b71f2497e1d075c45029154950cbb47bd037", 0xa3}], 0x1, &(0x7f0000000240)=[{0xc8, 0x18a, 0x4, "cd07038c21b3422bbd2f7c16f412150c7b361460b46e52fed10291b3a164c4106574165e85a7ae5deb78d20e5c9dbe56872f717b1a4213e7d4c14fe6224453947151d2e47ce4aed15fd72706314f7d51cd408bd667fe250d77b02074a84c2e661f945a37a8a155169f3ed7edcad2091e4632ccd60b9cd133017ceebbf93ccfba59c48a22f359829421debba3c765eb36be534367fee3c2f3a1d24fa91ce4eff2e75e176818c0bcf7e6af5a5111a87985a5"}, {0x80, 0xff, 0xffff3ea4, "16e201944bc479a5aecc213af1e990e694fcde517a28f0b9986128fa116e33e0f169d1c16e337b29ddd710449c8c16b75feb6c693907caebc751fca97a795a18350af23393c6f84b2f029960acb8de3988477ad7982cce31227f93c47f96381153da10663e0a7d23fb0805dd07ad"}, {0xf0, 0x107, 0x4, "5f3d9809e6f4c1adf3c7998d2dfa3f5211ca3a0f74160d8fbcb1fbd70c0d21bc685c28866638b9f8b1d8a813242eb6e9549ff993a8a1ab5a3f8471ad76c47e79f6a2d952f1a29cad2176c175586a2c60eabfbd58089fc5dd30ff41b74617010526cc0f7844b7655192158807a5d5fad197b2db37bcc5f8a801f68760115012959148a561fdabcaead3b9a2c64a0bb781d81a158ea670d9cc1bc6f4235aed44d43b582b2deff4e0558500d9ef64af470bf56f1cf02c31ab93cd8caa2f5d4fdfcbd1aebef1d83c5c9257089249c444c6a5d20eff7d081765db8ffa54"}, {0x78, 0x101, 0xe, "8ea49ade5bc8d8ed4f93164aa7f56ca18919d89043a92d142bb315bf25029f8fa32a9510da41ac63028fdb0dd037e0a13416c9b69ff38aa9579bfd2ff8813ac8da96bf3d1c8b4e39deebe5731c997b44352ec6385c81762d87ece5539bf76cb211cf55e2f7"}, {0xc0, 0x117, 0x8, "f823dc93f1dcb76b5100213aa6e09c5b33362e02e3be9bf5e960dc4dd241c7c10832911decf005cbe37282b7268484ea2c183c5b2e2f016667b2d368366f3407ca101da08fad631c3fb8fdc6d50fca762b3291a5e9e77ddc8266b3f6fbf393db2a9ea8c968d8d226a3e9de451839d51b2492f1e4f4c2f01a46c57b2b00d09951c101feb56beede40d262905892521036867bbe918f9fa3f090b7b7c2d8b778b106f98b82ec5884b99186b0bc105c1628"}, {0x108, 0x104, 0x6, "03c45a5bb11857ef8e97ff4ae20c972a548b85884a91f8d63e08fd4966ebd5d959355ddbb05f7350221197d649597f5b5d7fa9f2b3d28d98103f2d7767ff9a288ff2c25b48ca2283d1808145098b0081a68ad2972ab15eeceb76201fd6f7be62ca5c491af7a9ebefe729daf0ccbcb151bd04d4397981baba0a3a31111ebbb537117c4ace2530456b9cad09a4f47fdf5e54adba2711d0b4eb86df15e7188f7c2978bb1fddae90535b31d35d30ff7ee1a932c26f3fabf82cbcb431d00dadcdf83a9bb97dd5fecdc325887944051303b0d70e208cfe7c643c95bba17cb5f995c1aa7ca6e639c3e903a142b2b4e98ce7c5cb0f"}, {0x60, 0x10a, 0xfffffffd, "07ccc487f5cdac3c8ec1bc1a1f9d1af74e56f027a0c2b532980eabaef721e0c38fa8b26a3853098d9faf6c88d093e674356ed676761fc47dfb15ee17eb006c5fae37a91271a8269e5f555ca671a082d6"}], 0x4d8}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000)

1m29.968499165s ago: executing program 4 (id=2708):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = dup(r0)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000080)={0x10, 0xf, {0x54, 0x40, 0x6, {0x9, 0xfbff}, {0x8, 0x9}, @ramp={0x81, 0xa, {0xd09, 0xb, 0x8, 0x80}}}, {0x51, 0x0, 0x8, {0x9, 0x401}, {0x5, 0x1}, @period={0x59, 0x1000, 0x0, 0x7, 0x6, {0x1, 0x6, 0x5, 0x9}, 0x2, &(0x7f0000000040)=[0x8, 0x9]}}})
write$FUSE_DIRENTPLUS(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b19430d3a49c249f9d81d1ef249de6f19f96a005acb50a85ff0b240"], 0xa8)
ioctl$COMEDI_SETRSUBD(r1, 0x6410)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000cbfc04204c05c306b86d0102030109021b000100000000090460fd01baafd1e3c2b103306be153ecaf"], 0x0)

1m28.534586421s ago: executing program 4 (id=2721):
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0)

1m28.464110936s ago: executing program 4 (id=2722):
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x25, 0xbc, 0x86, 0x20, 0x4e8, 0xff30, 0x34ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x40, 0x0, 0x14, [{{0x9, 0x4, 0xe9, 0xfa, 0x0, 0xf7, 0xef, 0xb4, 0x5}}]}}]}}, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0xac)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

1m27.119187986s ago: executing program 4 (id=2723):
r0 = gettid()
r1 = getpgid(r0)
prlimit64(r1, 0xe, &(0x7f0000000180)={0x4, 0x2}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r2, r2, 0x0, 0x7ffff000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0)
getpid()
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x1}}}, 0x7)
r5 = mq_open(&(0x7f0000000140)='\x00', 0x40, 0xca, &(0x7f0000000200)={0x8000, 0x4, 0x10, 0x5})
mq_notify(r5, &(0x7f0000000240)={0x0, 0x17, 0x1, @tid=r1})

1m26.138385416s ago: executing program 4 (id=2724):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x16)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
write(r0, &(0x7f0000000400)="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", 0x1f000)

1m25.824199166s ago: executing program 4 (id=2726):
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = msgget$private(0x0, 0x589)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000000040)=0xe8)
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
r8 = semget$private(0x0, 0x0, 0x4)
semctl$SEM_STAT_ANY(r8, 0x4, 0x14, &(0x7f0000000680))
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x8000000, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xffffffffffffffdd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r6, r7, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x13, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
r11 = getpid()
r12 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa000, 0xb)
recvfrom$inet_nvme(r12, &(0x7f0000000440)=""/243, 0xf3, 0x40, &(0x7f0000000540)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis256-aesni)\x00'}, 0x80)
syz_pidfd_open(r11, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r12, 0xc0945662, &(0x7f00000005c0)={0xfffff253, 0x0, '\x00', {0x0, @bt={0x0, 0x3, 0x1, 0x0, 0x6, 0x2, 0x8, 0x2, 0x1bac, 0x6, 0x4, 0x0, 0x81, 0xff, 0x0, 0x21, {0x1aa545b6, 0xbbe8}, 0x49, 0x1}}})
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000380)={{0x2, r3, r4, r6, r9, 0x6}, 0x0, 0x0, 0x5, 0x5, 0x13, 0x1, 0x5, 0x2, 0x55f, 0x401, r10, r11})
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
ioctl$SIOCGSTAMP(r1, 0x8906, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
r14 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$clear(0x7, r14)
preadv2(r13, &(0x7f0000000380), 0x0, 0x3, 0x101, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), 0x4)
sendfile(r0, r0, 0x0, 0x7ffff000)

1m25.562142084s ago: executing program 34 (id=2726):
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = msgget$private(0x0, 0x589)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000000040)=0xe8)
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
r8 = semget$private(0x0, 0x0, 0x4)
semctl$SEM_STAT_ANY(r8, 0x4, 0x14, &(0x7f0000000680))
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x8000000, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xffffffffffffffdd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r6, r7, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0x13, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
r11 = getpid()
r12 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xa000, 0xb)
recvfrom$inet_nvme(r12, &(0x7f0000000440)=""/243, 0xf3, 0x40, &(0x7f0000000540)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis256-aesni)\x00'}, 0x80)
syz_pidfd_open(r11, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r12, 0xc0945662, &(0x7f00000005c0)={0xfffff253, 0x0, '\x00', {0x0, @bt={0x0, 0x3, 0x1, 0x0, 0x6, 0x2, 0x8, 0x2, 0x1bac, 0x6, 0x4, 0x0, 0x81, 0xff, 0x0, 0x21, {0x1aa545b6, 0xbbe8}, 0x49, 0x1}}})
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000380)={{0x2, r3, r4, r6, r9, 0x6}, 0x0, 0x0, 0x5, 0x5, 0x13, 0x1, 0x5, 0x2, 0x55f, 0x401, r10, r11})
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
ioctl$SIOCGSTAMP(r1, 0x8906, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
r14 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$clear(0x7, r14)
preadv2(r13, &(0x7f0000000380), 0x0, 0x3, 0x101, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), 0x4)
sendfile(r0, r0, 0x0, 0x7ffff000)

1m16.128932234s ago: executing program 0 (id=2791):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x72000, 0x0) (async)
r1 = getuid()
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00')
mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000003880)={0x100002, 0x70, 0x80000, {r2}}, 0x20) (async)
sendmsg$nl_netfilter(r0, &(0x7f0000000900)={&(0x7f00000006c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x190, 0x1, 0x9, 0x301, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x6}, [@nested={0x67, 0x5a, 0x0, 0x1, [@generic="ad7f6cd2b2cecdbb0d0c8006583b828a4b9e058d7b15853c6ec340e572a9e3baad88b8f9a926bce2e0c6147d504fffcec77cefeb2dc6ba76811a669f96dc910a024e56b1461c291addd037430220e6", @typed={0x4, 0x137}, @nested={0x4, 0x2f}, @nested={0x4, 0xf2}, @nested={0x4, 0x91}, @typed={0x4, 0x98}]}, @typed={0x8, 0xf8, 0x0, 0x0, @pid}, @typed={0x8, 0xa3, 0x0, 0x0, @uid=r1}, @generic="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", @nested={0x4, 0x34}]}, 0x190}, 0x1, 0x0, 0x0, 0x8080}, 0xd0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r3, r3, 0x0, 0x7ffff000)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r4, &(0x7f0000000600)=[{&(0x7f0000000180)="c47ad3d3735ed8d6973bab8fb9deff669978276167ffd8cca37a504ddcad52f49edaf414bbb98f1796998c9464b8400b1d4d954babac29e45fc7be06e568c7a6bd12ba1e006557f30014f9326337a985a3d7fe2bd1986818cd983130b9af2bfad92deefd08bea24577afac35e3ecd9845c6bb6923d08e2ad81aee52d24bba44c5cdd1020dd79be9e23c7b9608c8f8fd0a63ec324ec8345d1e1e29c589e2b6764d1f29b0c6e4db830ce680b6f36246aa63a4d32806f2161823fdadf4fc387a14f9641d57b716dd3a37762bc6dc4dead38e2c65af778a6f9c71368e63b7f6be2f157a88d0ac26bd20291cd9516c785a2", 0xef}, {&(0x7f0000000280)="fdba4848ebeab909a0238899cb461c43f61363466b343c5aa5f53d3045cb646a8d56836978c29aa3d766fbadf1d8da51d0fe8bbaaa253544d164684db4271abbae75ba70ea6b509b4bc6a92a479700c08c96bd20a62bb428e5d99336c32462ef5a6b5c84f1620c3f06a1af6c51288bddf3c7206370d1dd2079483936883a9bdbe6d9dcaecc03fca53da27ecce165bcce803f29033631005578f8fd79896f360b02016e5d6f76336e2c53082b2b07397511649642432e6b9af0a3d431", 0xbc}, {&(0x7f0000000340)="e49def8e6dec7377733fbe5ca066c941a926bfa3ea6e3307b053587ad0578033341427add403717d5d98b7524a6a91dc4bd94327861ba9c6622258d7daf6fb92070ea620dc935c26a6362440da23ad235085f906024b69134b5b53a86dfebd5012074110f85fbd196b39457f666dabef36ff7975d593b07f898709156ab24380f2b00c236cd29d3cce800bf062ab02cb27f0efc822a98f346a0770ed9fbeaa472dce3b2badefdb45a3269310f325889e35c2cdca355b889db7cebf80aed2eaa1b3", 0xc1}, {&(0x7f0000000440)="f930144b2e6e56f68c2a27148ff0a1936bc5629d8839a25abed8feb2521a2beb52e895f8be5b5e60c51f4781f0290366c550708a2da18f8bb2b1cfdf37a0e2fcfe5a11c79dcaa952ff2be5bdafe1a5ae30b2642224a823ab3525c335f83c64c88698efe2ecde78131e1db35d4354f1a06c72263837bd2547e21a10cf9f70c6c66d57fd8c62bbc1843f3fc7ee2d137df4d90c62c531166d48aa815efa56d0f51a67848a43f29b1edb4abc94fe258e78afe49cd720d6d8fd242d9f4f71492e78206e9ca61966c406", 0xc7}, {&(0x7f00000000c0)="0aeb0dfc7277f66e646bd2e54790923c76bfc8e23837b40c6298d58e900ab8e5dbed3e40328197e12c36ea9864c355bf89f22c8c463642f7f52b751ec96d7287ac3c71b1ca15711e65581c92d7a4aab345e2c305ab117ed716fee84e", 0x5c}, {&(0x7f0000000540)="56d8bf3fe9d74c927e9dbede98ef9424e98236dc5c868758285caf90cf50fbdcda3cacd2ffc1466ccf383140e504dfdb39c7c1a489be547a33ae095fc627ef8c9be191b5376568feb798445be5dcf19d8d54be6044c34f10e3a595648bc65073e95486e00306080a9bc2977c0590f290ce00ac8b1ca1eae04c84d504ef720daf73c207201574df889b8c3b964a15ef32caf0c8124d3b4cb2551a34b98e2b478ebe", 0xa1}], 0x6) (async)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x1}}}, 0x7)

1m16.06358988s ago: executing program 0 (id=2793):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000006000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f0000000040)={0x1, <r4=>0xffffffffffffffff}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x100000})
close_range(r0, r4, 0x0) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0)
bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd}, 0xc) (async)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) (async, rerun: 64)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64)
ioctl$VT_RESIZEX(r6, 0x4bfb, &(0x7f0000000240)={0x9, 0x3f00}) (async, rerun: 64)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) (rerun: 64)
r7 = socket$xdp(0x2c, 0x3, 0x0)
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0xbd9fff, 0x1000, 0x6}, 0xffd6) (async, rerun: 64)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) (rerun: 64)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002cbd7000ffdbdf250200b85f12697300000c000380080005000a010101"], 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64)
read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, <r10=>0x0}, 0x2020) (rerun: 64)
write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0xfffffffc, 0xffffffffc4e984a0, 0x2}}, 0x50)
syz_fuse_handle_req(r9, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (rerun: 64)
ioctl$EVIOCGPROP(r11, 0xc0046686, 0x0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (rerun: 32)

1m15.981910244s ago: executing program 0 (id=2795):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x80b00)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0xfffffffe})
r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
sendfile(r3, r3, 0x0, 0x7ffff000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x4000})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000063e000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x63, 0x0, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x0, 0x9f6a364b3fac2a63, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)

1m15.792160397s ago: executing program 0 (id=2798):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) (rerun: 64)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)

1m15.714962754s ago: executing program 0 (id=2799):
creat(&(0x7f0000001380)='./file0\x00', 0x4)

1m15.023691544s ago: executing program 0 (id=2804):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000180))
ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000000c0)="7b0fb804b864be2c41be924cdee8475cc3904ec84f2d6c231d4ae67cd0760fcd1e2d0d3d49640cf631b65838a65bffe7c129b9d46569a93416c6fd6baeb0dd32dd4771634d580d02cfeb1e6f32b1f8368f4e457c5326dda59b7ce107b21877449ffc1a0934db5145b4071edc9f2be66a29677c1b9f452e8ce8612446ecdecf6dc5593e9049ec69ed954e412179383857c0429c9cced62478f65e381d6b6f09d8af60e5567cc586f82881")
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

1m14.713039928s ago: executing program 35 (id=2804):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000180))
ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000000c0)="7b0fb804b864be2c41be924cdee8475cc3904ec84f2d6c231d4ae67cd0760fcd1e2d0d3d49640cf631b65838a65bffe7c129b9d46569a93416c6fd6baeb0dd32dd4771634d580d02cfeb1e6f32b1f8368f4e457c5326dda59b7ce107b21877449ffc1a0934db5145b4071edc9f2be66a29677c1b9f452e8ce8612446ecdecf6dc5593e9049ec69ed954e412179383857c0429c9cced62478f65e381d6b6f09d8af60e5567cc586f82881")
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

12.270790617s ago: executing program 6 (id=3257):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1400000013000100000000000000000007"], 0x14}], 0x1}, 0x0) (async)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0)

12.183506899s ago: executing program 6 (id=3259):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000cbfc04204c05c306b86d0102030109021b000100000000"], 0x0)

10.885713317s ago: executing program 6 (id=3270):
creat(&(0x7f0000001380)='./file0\x00', 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
recvmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/177, 0xb1}], 0x3}, 0x8000006}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f00000009c0)=""/4125, 0x101d}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000006c0)=""/233, 0xe9}], 0x7}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x24}], 0x5, 0x12002, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x1, 0x1, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)

9.908013495s ago: executing program 6 (id=3275):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = accept4$phonet_pipe(r0, 0x0, 0x0, 0x80800)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0x101)
writev(r2, &(0x7f0000000140)=[{}, {&(0x7f00000000c0)="2bc3603996a34b477ff9e61d08297a7ee76c6cb9c5be3d5bfca761624ffc97676fb004b282e0105d51c4c9affb7cbb98e7329e6504a1ac1e0aa917f32ecc3089667968a8eac3", 0x46}], 0x2)
read$FUSE(r2, &(0x7f0000003000)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffff7})
ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0x1c7, 0x3, 0x7, 0x2, 0x9d1, 0x3, "839dbacbffb7f03f9700", 0x2, 0x7, 0x6, 0x8, 0x4, 0x2f, 0x5})
r6 = getpgid(r3)
ptrace(0x11, r6)

9.842161813s ago: executing program 6 (id=3276):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x5b)
sendfile(r0, r1, &(0x7f0000000080)=0x7fffffff, 0x7ffff000)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x418000, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x5b) (async)
sendfile(r0, r1, &(0x7f0000000080)=0x7fffffff, 0x7ffff000) (async)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x418000, 0x0) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)

9.551460081s ago: executing program 6 (id=3279):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x19e172f08959ac6e, 0x10001, 0x47}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x19e172f08959ac6e, 0x10001, 0x47}, 0x2c)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0)

9.35658976s ago: executing program 36 (id=3279):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x19e172f08959ac6e, 0x10001, 0x47}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x19e172f08959ac6e, 0x10001, 0x47}, 0x2c)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0)

7.346223339s ago: executing program 3 (id=3297):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x88, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x6a, 0x33, @beacon={{{}, {0xde1}}, 0x3, @default, 0x4001, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xf8, 0x97, 0x0, 0x2}}, @void, @val={0x5, 0x3, {0x0, 0x37, 0x2}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0xf30, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xf6}}, @void}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x76, &(0x7f0000000080)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0x6388f000)
open$dir(&(0x7f0000000000)='.\x02\x00', 0x50000, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0x2, 0x0, 0xffffff95})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

5.98544646s ago: executing program 7 (id=3308):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003900010324bd70e7bacc669e02fa"], 0x14}}, 0x4000000)
ioctl$KIOCSOUND(r5, 0x4b2f, 0x100000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000)

2.67893917s ago: executing program 3 (id=3318):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x44, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x44}}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd26, 0x24dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc041}, 0x696993e76e9ec852)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x80)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8015}, 0x40488c0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
madvise(&(0x7f00000ed000/0x2000)=nil, 0x2000, 0x10)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r6, 0x29, 0x7, 0x0, &(0x7f0000000140))
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x80)
socket$key(0xf, 0x3, 0x2)
r8 = socket$inet6(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback}, {}, {0x0, 0x0, 0x6e}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in=@multicast2, 0x4d6, 0x6c}, 0x0, @in=@private, 0x0, 0x1, 0x3, 0x4, 0x8}}, 0xe8)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.430418186s ago: executing program 3 (id=3321):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x40, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r1=>0x0})
r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000000)=""/96)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x2f, 0x1, 0x7f, 0x1ff, 0x9, @remote, @remote, 0x80, 0x7, 0x7}})

2.323745247s ago: executing program 3 (id=3324):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x0, 0x9], [0x0, 0x0, 0x4]})
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00'})
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x40, 0x8}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x1, 0x8, 0xe5, 0xff, 0x2}, 0x155, &(0x7f0000000080)={0x5, 0xf, 0x155, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0xa}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0x1e, 0x53, [0xc0ff, 0xc00f]}, @generic={0xe9, 0x10, 0xa, "d7c9714bb18a24864a1c9d0844ed85dc290bffd834604e8a52f0ff3cce922ad3d6a09f2776e150fe84e3f660becee1cf66a2f2370b49b13230bffa99148596ee8e0b9efa446d7502e1c29ae303e4efa24816a584099bc5faba5ead5ddc60e43de7241e383ef2836ba5668df5f6d60ab74ee4d0d7126f32f5247f75e81c88f107d5b8b7ca113e16e98f7773714990089c1c289bf69a5e27c4921163e85eab32cf5cb84cf02cc2903142ad7b7cb6afbc574b3418c2399921d1a185a31db75858a9802083ce338994cd745ce061a5c31f141bebd7ae0efa68d4d9fc8f46407ea4c5778651169cb1"}, @generic={0x2b, 0x10, 0x4, "7360dc57db4a51719cb3b6d1147792929b0f231b85c409df1c3c806a5af54f0ed7040dbc3f46abe8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xfc, 0x5f, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d7aac4f9e4c58d1bbb85916c333b02d5"}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1009}}]})

1.553763889s ago: executing program 8 (id=3328):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x405, 0xac00)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x80000)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
write$cgroup_pid(r4, &(0x7f0000000180), 0x12)
setuid(0xee01)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000014d564b"])
sendmmsg$inet(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000a40)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x40)
mount(&(0x7f00000000c0)=@filename='./file0/file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)

1.359253259s ago: executing program 8 (id=3331):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x1d, &(0x7f00000008c0), 0x4)
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './cgroup\x00'}, 0x6e)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r2 = fcntl$dupfd(r1, 0x0, r1)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
getpriority(0x2, 0x0)
r4 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x0, 0x0)
sendmsg$AUDIT_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x300, 0x70bd26, 0x25dfdbfe, {0x6, 0x0, 0x0, r4, 0x7, 0x80, 0x5, 0x2, 0x0, 0xf1, 0xd7}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

1.273735354s ago: executing program 5 (id=3332):
ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
socket(0x40000000015, 0x805, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x8)

1.21906674s ago: executing program 7 (id=3333):
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) (async)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async)

1.123798733s ago: executing program 5 (id=3334):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047105bc79e0b9971bcbedac0eead49dbecf96eebb1fd", 0x4b}], 0x1)
r0 = syz_open_dev$sg(&(0x7f0000001600), 0xbd, 0x22c01)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="b86f064e808941ae5ef916548d6806422a4de4dfb1c8d7bdec1d6128a17229e8570a6d54940945253f7668f90d3686062d4217e1fc7a8dbbc7432be1178d34b537e93aa2c6078b322e20cda2d2007f3db9aea051acaccaa1b3ee33e4277d6730c18463a8c96723001f9de4a2783e0fe2737fc38035995df9697bc99887d6d61c01adf1f5a913009a8b0c47efd4afbd76002a169406b34bfae7f03a79f9a7f6af9195c6836a32ffd3a6f22b485912c3126bd72c975edd1976f5e0ec8127110c23fb48d91b6666f0469d528c724ab39a"]) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
rseq(0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) (async, rerun: 32)
syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async)
syz_io_uring_setup(0x3c5e, &(0x7f0000000600)={0x0, 0xf177, 0x100, 0x4, 0x3c4}, 0x0, 0x0) (async, rerun: 64)
r1 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) (async)
getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000040))
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800600) (async, rerun: 32)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) (rerun: 32)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000000c0)={r4, 0x1000, {0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x11b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb02d5d53b0f93e0e50bbf20000000005f8a654e14dc7c4cc6020004003b3acc9f02cd3eac8be6cfb53406ac3da657b0f1081d00", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x2, 0x9]}}) (async, rerun: 64)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x200000000000000) (rerun: 64)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002340)="6507060082762422f9a302dd5ddbd0cc97b8afb765d58b4137e8b350a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x40) (async, rerun: 32)
syz_io_uring_submit(0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) (async)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r6 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r7=>0x0})
sendmmsg$inet6(r6, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff0a010102", @ANYRES32=r7, @ANYRES8=r1], 0x28}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000800)="548ce919bd8eac5bef0ce2fe3871706f782e46f9c2cf60eec59813c2d9d4b154a80e8c496f67d789b7a8cb72c54a8ec1670a14228f25801db0e2e82ec5754394bb7104421d70f898f5f0ee190f417bd31f6aa8813c912da87d62094534383fdc7792b8491893eddf3fd8034f55a828d771c06d39f7a44ae7ad39b24df27913d2c8f4c4f1fe01f00e749e9182c2478dfa55299086ef0c38d8172c309cd1e4b40613c76de26d640936", 0xa8}, {&(0x7f0000000500)="db032fbc389832602ecad1ff9259062691b3d375c9e0b300ef46717170ce8b24ccc72738bd5a2bb824ae5203b1e501dee5bcc9400586f707d1ebe7b071f9ba1632cde37dc198c3bb69930bf008f6b4b27c047c00", 0x54}, {&(0x7f0000000200)="afbd45738dcc327b19968e81454fa11cbfe11f56e21be9e61fb4a57f0da2addf609faf39579d963062e96a8e2222c16da6875ff64a", 0x35}, {&(0x7f00000008c0)="f4281cde5f7437a1d84f6d361b45a7c1b8804eb8755c5af0616c8ace9548055e12e4fa6b732a5babd06e2306b3a6b86eef9cc3c82bb3b249bb3fc224c9ca3b45461b355ab585ad46ca86799829f5a574fc0876655006273a2f9a89167a3c5625504e8f15be05f6f4b94a67dbefb75cdf70cd355edf52545212ccc315e93a30776c1661b8def2cc80a98fc5347e99f0dad781202d60e3221623281ccea2266ab19fc96e6cb2631358bf6b9bb528c704d80cc7ff5615afa812b6288d85907ec16dcfc80ba288f2d5d0f15772f9ec1f33b2130799d74a697451158685377ab40f77", 0xe0}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="300000000000000029000000370000003babad3fd5df4b00000000000000010300a9000000000000000107000000000000000000000024000000000000002900000032000000fe80000000000000000000000008000b", @ANYRES32=r7, @ANYBLOB="c24eed226a8dfffb007179e927e474ce0876c143e935ba33b6b6f37215cd07398b4094e8cf7bd9b6e25105140600000000000000a101e6a72529750800136b749d02ca640d89cbb94153"], 0x58}}], 0x2, 0x4180) (async, rerun: 32)
getrandom(&(0x7f0000000240)=""/273, 0x111, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xfffffffffffffe1f, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRES16=r6, @ANYRESOCT=r4, @ANYRES64], 0xc0}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000180), 0xfefc) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r8, 0x0)

1.117722256s ago: executing program 8 (id=3335):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in6=@empty, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in6=@private0, 0x20, 0x6c}, @in=@multicast1, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) (async)
r1 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000060a0b040000000000000000020000002c000480280001800b0001006c6f6f6b75700000180002800900010073797a3000000000080002400000000d0900010073797a30000000000900029222eafc7f2d1da30d9c0c6709820073797a3200007f1c9364f91fff83010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="0003000009000000", 0x8) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc004ae02, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r9)
socket$vsock_stream(0x28, 0x1, 0x0)
recvfrom(r9, 0x0, 0x0, 0x12021, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async)
ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f0000000240))
ioctl$KVM_XEN_HVM_CONFIG(r12, 0xc048aec8, 0x0) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r10, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x82000008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xa0, r13, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ecb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x273}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x90}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x2, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed9bebbbd, 0xa0011, r8, 0x52fbb000)

1.087535419s ago: executing program 7 (id=3336):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async)
bind$alg(r1, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x80000) (async)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25ffdbf8, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0080}, 0x8015)
sendmsg$xdp(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)="c3c24583f644d88e74a7388defdac05e49283a6a6c000bcf37df7964ad9b6bb4e7db5984408bea8dbde8999b940953565dea62f8", 0x34}, {&(0x7f00000006c0)="91d4b47d601a8959b10dd153543e5fb4c958d652d4be6c00d6bced6ded194f54e1cdcd6a14c9ca47fdfd98ca02c67da62f5d02f9037bd557432e3c875a537ed0da850f0e29ee547d8934f0cfc1c6f388aae1d7da478b35b6cd5970fa2ee0fa06b7b3bd3a3959", 0x66}, {&(0x7f0000000740)="3d79ce5459e039d3835d8edcd462a37e7bcd0b2260553f8b0ea6a82af40815606dbe01178dcaab62ec8d3d4b3064e466973bff216910dec0673bb5c0b0def6cf3e405bc1aa4bdf6430539441cd8b7fe87814a96985bc29abc735fbea2272d152342e1d9e2b6b38c1367b10a8446caf94693d0629442e11c43790468fd65f72ea764d4bb69e6ad3fb22b08dbe86b65853ea73b5aba4c9221e22a000d0476de9e99dd605006ef344134b819bfa496ff14075e2e65b4392be92d788a87f486f0d2400903207cfd2ad598e8c188172e01a578850a2850e369217f36bde75d2dee39182", 0xe1}, {&(0x7f0000000840)="39e3786d124ec314e778a039f3a6db209e95bd8f9a1ae738d3fafb1fd5c5a162e70084569b9743bbcfd93e244f90d7b10ca03503326e620260ad0610a2922273238a0add04d98ac770493cf386a019bd86353c7702480de819510e8e5fcd7be9c2f13d16b63d5df4aec5a65aa2b426e51d5f9651ad54d4ca0a3f6a0be68e7644625fc106773c6b9784451b74f49cfedc11724957c7c8725286dd6b2b18a4d0", 0x9f}, {&(0x7f0000000900)="20b2ade59710cab5bce428552d017b48860b66109003243dafff86752d023685644484b92bc8e535edeca8929ad0201a1a2baa52eac609f172f248647927081144d0a28918bf8808b547e09908d9b5416ff9d3d4dd6a7cc24bc0b47ff92dc3404ad5c01a03fc8be862134caca2f3c883927947d1c5ca50d3d8abd911e69cff9f1dc3eb8745deb73a70ad48538b3a620f10773ef194d6cc34e12e40e9117247853414892801598125df7641007e2f51912d76b068ae104b9b611b8a81239d2c9ad436b680edd40033382d90801bb7ea", 0xcf}, {&(0x7f0000000380)="7787a90f6dc11b90156f1d22b28c240297cb196c43b312b9d63f42848a418deb963752e17fccf57eaf2479ec419f54425d2909", 0x33}], 0x6, 0x0, 0x0, 0x8841}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4}) (async)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4})
ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000080)=""/95)
futex_waitv(&(0x7f0000001740)=[{0xf, 0x0, 0x6}], 0x1, 0x0, 0x0, 0x1)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
unshare(0x22020600)
ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) (async)
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0)
personality(0x5400004) (async)
personality(0x5400004)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r7 = socket$kcm(0x2d, 0x2, 0x0)
personality(0x200000)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, 0x0, &(0x7f00000001c0)=0xb00)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7})
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r6, 0x7dfff000) (async)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r6, 0x7dfff000)

956.086272ms ago: executing program 5 (id=3337):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xb9, 0x9c, 0x0, 0x1, [@nested={0x8, 0x13a, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @generic="46e16f7519cabb74e75f5284a7644ee2669cf260d7ee8a72b1d2136dd2cf8f62ab5e0a5db5c620d94653ffcf494387a7cace4f6db5809d7bfd444c39f08538cf4ab4867900a34e58819453bee4b96fc4da12184791474d35fe57ec181883bcd4803ca788a4adfedaaf47763633fea932df1a5ecc8e402f4288d8b2085e457fcdfcac92fab90e27f24d8a1494fb4e35fe93ff248cd58762e1ca3a5ba1c5"]}, @generic="b7b86d126d136b69478a408c8a3294c0eb"]}, 0xe0}], 0x1}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000180)="02030c65420002eaff00ab5d71ac", 0xe, 0x44854, &(0x7f0000000140)={0x11, 0x7, r3}, 0x14)
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0)

362.587895ms ago: executing program 5 (id=3338):
mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006f808050ae500c4"], 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800) (async)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)

362.146576ms ago: executing program 8 (id=3339):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x2, 0xeeef0000, 0x2000, &(0x7f0000ff3000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000200)=0x5, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001"], 0xe4}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
sendto$inet6(r4, &(0x7f00000001c0)="a6e2", 0x2, 0x840, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x1)
socket$netlink(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)="139ed2dfc26847582389b0ae170ed557bef828faae60f06cb51e5b42ec871ddbae49648880d5354e3451613defd510a22b967089890f30ccef03", 0x3a}], 0x1)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x2010, 0xffffffffffffffff, 0xfffff000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
unshare(0x2040400)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000400), &(0x7f0000000440)=0x4)
ptrace(0x10, r6)
ptrace$setopts(0x4206, r6, 0x7df, 0x0)

312.069905ms ago: executing program 7 (id=3340):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0)
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="01000000020000000000006bb55a06630bf7c045f94cd97703942b", 0x1b, 0xffffffffffffffff)
ioprio_set$uid(0x3, 0x0, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="e370d6", 0x3}], 0x1)

311.538066ms ago: executing program 7 (id=3341):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0xfffffffe)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x2)

310.920409ms ago: executing program 7 (id=3342):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x44e7c0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)

310.602757ms ago: executing program 8 (id=3343):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x57789000)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00')
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x8241)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

308.77714ms ago: executing program 3 (id=3344):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"63149625", 0x7, 0x6, 0x4, 0x7ff, 0x7, "aee066dd11381c2c11d0a23400d01a", "433dcce3", "5f2af8a3", "00004e04", ["3bac8fdb37c40f949a4ea247", "035c3ebb6dad5785d67277e5", "130500000083a7aed89b00", "469da9437656a6f31ac3fe05"]})
mkdir(&(0x7f0000000040)='./file0\x00', 0x174)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)

297.887177ms ago: executing program 8 (id=3345):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x100000000000f7)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000008c0)={<r5=>0x0})
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000000c0)={0x0, 0x3, 0xe0, 0x0, 0x2, 0x3, &(0x7f0000000000)='\r\n'})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000009c0)={r5, &(0x7f0000000900)=""/154})
r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000b00), 0x20000, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f00000001c0)={<r8=>0x0, 0x0, r7})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000b80)={r8})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r7, 0xc010641d, &(0x7f0000000d00)={r5, &(0x7f0000000c40)=""/140})
ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000000)={r5, 0x2})
sendfile(r1, r0, 0x0, 0x7fffefff)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r9, &(0x7f00000005c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24)
sendfile(r0, r0, 0x0, 0x7ffff000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000240)=[{0x8, 0x8, 0xa, 0x8}, {0x40, 0x7, 0x0, 0x7}, {0x5, 0x9, 0x81, 0x5}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x48050)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_int(r10, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f00000002c0)=ANY=[], 0x8)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'})
r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000b00), 0x20000, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f0000000300))
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r12, 0xc01064c1, &(0x7f0000000b80)={r8})

297.482254ms ago: executing program 3 (id=3346):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r0, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r2, 0xa4717000)

187.44087ms ago: executing program 5 (id=3347):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0)
execve(&(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000400)={[&(0x7f0000000200)='cbq\x00', &(0x7f0000000240)='&\x00', &(0x7f0000000280)='./\\/\x00', &(0x7f00000002c0)=')!^\x00', &(0x7f0000000300)='nl80211\x00']}, &(0x7f0000000700)={[&(0x7f0000000440)='/dev/rnullb0\x00', &(0x7f0000000480)='cbq\x00', &(0x7f00000004c0)=')\x1f\x00', &(0x7f0000000500)='/dev/rnullb0\x00', &(0x7f0000000540)='\x00', &(0x7f00000005c0)='batadv\x00', &(0x7f0000000640)=')\x00', &(0x7f00000006c0)='@\x00']})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd26, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x800)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x5, "ff000000000000000000000000000200"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0))
ioctl$TCSETA(r6, 0x5406, &(0x7f0000000200)={0xfffe, 0x80, 0xe000, 0xb3, 0x17, "041000"})
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x4)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56)
connect$inet(r7, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
sendmmsg(r7, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000)
close(r7)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r4, 0x20c, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000057}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)={0x20, r8, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0xffffffff, 0x75}}}}}, 0x20}}, 0x20000000)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x78, r8, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x50}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x511}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x1a, 0xbe, "9a4b879b074aac4dd101dd84a85d6143f49c1c971924"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x1, 0x1}, {0x12}, {0x36}, {0x6c, 0x1}, {0x2}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x40, 0x28, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xffe0}, {0x9, 0xb}, {0x7, 0xffe0}}, [@c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x1, 0x2, 0x2, 0x8, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)

0s ago: executing program 5 (id=3348):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x102, 0x0, 0x1a449, 0x3, 0x40000003, 0x4000000, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x7, 0xfffffff8]})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$P9_RLERRORu(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYRES64], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04063120"], 0x7)
read(r0, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x71)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0)

kernel console output (not intermixed with test programs):

vice number 72
[  506.459157][ T6016] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  506.502790][ T6016] usb 4-1: device descriptor read/8, error -71
[  506.628698][ T6016] usb usb4-port1: unable to enumerate USB device
[  508.053375][ T5862] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  508.228343][ T2968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.325797][ T2968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.429736][ T2968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.481731][  T986] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  508.558900][ T2968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.640890][  T986] usb 4-1: Using ep0 maxpacket: 32
[  508.665240][  T986] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  508.683668][  T986] usb 4-1: config 0 has no interface number 0
[  508.705310][  T986] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  508.754660][  T986] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  508.771972][ T2968] bridge_slave_1: left allmulticast mode
[  508.788533][ T2968] bridge_slave_1: left promiscuous mode
[  508.795513][  T986] usb 4-1: config 0 interface 85 has no altsetting 0
[  508.813467][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.823459][  T986] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  508.845748][  T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.853986][  T986] usb 4-1: Product: syz
[  508.864265][ T2968] bridge_slave_0: left allmulticast mode
[  508.882271][  T986] usb 4-1: Manufacturer: syz
[  508.887135][ T2968] bridge_slave_0: left promiscuous mode
[  508.893988][T15024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  508.895270][  T986] usb 4-1: SerialNumber: syz
[  508.908515][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.909071][T15024] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  508.924961][T15024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  508.935992][T15024] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  508.936452][  T986] usb 4-1: config 0 descriptor??
[  508.955478][T15024] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  509.128923][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  509.141340][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  509.152556][ T2968] bond0 (unregistering): Released all slaves
[  509.190339][T15021] /dev/rnullb0: Can't open blockdev
[  509.220493][  T986] appletouch 4-1:0.85: Failed to read mode from device.
[  509.251036][  T986] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[  509.292702][ T2968] tipc: Left network mode
[  509.297655][  T986] usb 4-1: USB disconnect, device number 71
[  509.483974][T15023] chnl_net:caif_netlink_parms(): no params data found
[  509.519821][ T2968] hsr_slave_0: left promiscuous mode
[  509.529118][ T2968] hsr_slave_1: left promiscuous mode
[  509.543617][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  509.573696][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  509.584639][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  509.595037][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  509.611897][ T2968] veth1_macvtap: left promiscuous mode
[  509.621115][ T2968] veth0_macvtap: left promiscuous mode
[  509.627185][ T2968] veth1_vlan: left promiscuous mode
[  509.632645][ T2968] veth0_vlan: left promiscuous mode
[  509.836079][T15056] fuse: Unknown parameter ''
[  509.871080][ T2968] team0 (unregistering): Port device team_slave_1 removed
[  509.888677][ T2968] team0 (unregistering): Port device team_slave_0 removed
[  509.935235][ T5862] usb 1-1: new low-speed USB device number 51 using dummy_hcd
[  509.945766][ T5947] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  510.019051][T15023] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.026560][T15023] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.036353][T15023] bridge_slave_0: entered allmulticast mode
[  510.046478][T15023] bridge_slave_0: entered promiscuous mode
[  510.054173][T15023] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.061679][T15023] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.070334][T15023] bridge_slave_1: entered allmulticast mode
[  510.077422][T15023] bridge_slave_1: entered promiscuous mode
[  510.104913][T15023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.116598][T15023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.116994][ T5947] usb 6-1: device descriptor read/64, error -71
[  510.151497][T15023] team0: Port device team_slave_0 added
[  510.157616][ T5862] usb 1-1: No LPM exit latency info found, disabling LPM.
[  510.167280][ T5862] usb 1-1: config 1 interface 0 altsetting 195 endpoint 0x1 is Bulk; changing to Interrupt
[  510.179161][T15023] team0: Port device team_slave_1 added
[  510.185719][ T5862] usb 1-1: config 1 interface 0 altsetting 195 endpoint 0x82 is Bulk; changing to Interrupt
[  510.204439][ T5862] usb 1-1: config 1 interface 0 has no altsetting 0
[  510.222542][T15023] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.229598][T15023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.260167][T15023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.274573][T15023] batman_adv: batadv0: Adding interface: batadv_slave_1
[  510.283101][T15023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.310324][T15023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  510.372393][T15023] hsr_slave_0: entered promiscuous mode
[  510.381899][T15023] hsr_slave_1: entered promiscuous mode
[  510.397725][ T5947] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  510.545569][ T5947] usb 6-1: device descriptor read/64, error -71
[  510.552319][T15023] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  510.562052][T15023] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  510.578147][T15023] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  510.589726][T15023] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  510.653590][T15023] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.663582][ T5878] Bluetooth: hci0: command 0x0405 tx timeout
[  510.674915][ T5947] usb usb6-port1: attempt power cycle
[  510.689923][T15023] 8021q: adding VLAN 0 to HW filter on device team0
[  510.703806][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.711089][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.726965][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.734205][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.939257][T15105] /dev/rnullb0: Can't open blockdev
[  511.003656][T15023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.050758][ T5947] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  511.082586][ T5947] usb 6-1: device descriptor read/8, error -71
[  511.176080][ T5874] Bluetooth: hci2: command tx timeout
[  511.336285][ T5947] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  511.372148][ T5947] usb 6-1: device descriptor read/8, error -71
[  511.415177][T15023] veth0_vlan: entered promiscuous mode
[  511.437180][T15023] veth1_vlan: entered promiscuous mode
[  511.490962][T15023] veth0_macvtap: entered promiscuous mode
[  511.501780][T15023] veth1_macvtap: entered promiscuous mode
[  511.512172][ T5947] usb usb6-port1: unable to enumerate USB device
[  511.536686][T15023] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.564666][T15023] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.598367][   T61] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.611158][   T61] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.626792][   T61] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  511.636595][   T61] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.744453][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.771057][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.834584][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.853358][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.516256][ T5947] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  512.613650][ T5862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  512.625068][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.633653][ T5862] usb 1-1: Product: 䓂뗛娲묳㷓潒｛馮䍭狜뼄驍ﮒ㣞ꡮณ皼ଡ଼ᾮ䴋꼄휫颠䌖೷峇⑝彰꒸뇳ࠟ证⌱䐎锡蚦魤謖烟陞签㩏쇾啕≊䧘囏呩뺉꜎犱ⳬ怜蚌赶痭脃䠜핹ⴡᾖ羰ⴎ䲢뾵勉莊䞂̕鏹写쭚켋懴闌婅㇩焉㏟爘꺞藇筨쑭඿䭎㱋蟇ㄧ픙ↆ㼱쨶ぴ鱈ᗲ㟾
[  512.658943][T15159] tipc: Failed to remove unknown binding: 66,1,1/0:2711696462/2711696464
[  512.674260][ T5862] usb 1-1: can't set config #1, error -71
[  512.682975][T15159] tipc: Failed to remove unknown binding: 66,1,1/0:2711696462/2711696464
[  512.684395][ T5862] usb 1-1: USB disconnect, device number 51
[  512.697969][ T5947] usb 7-1: Using ep0 maxpacket: 8
[  512.704874][ T5947] usb 7-1: config 1 has an invalid interface number: 234 but max is 2
[  512.714573][ T5947] usb 7-1: config 1 has an invalid interface number: 179 but max is 2
[  512.726443][ T5947] usb 7-1: config 1 has an invalid interface number: 242 but max is 2
[  512.734843][ T5947] usb 7-1: config 1 has no interface number 0
[  512.743902][ T5947] usb 7-1: config 1 has no interface number 1
[  512.751850][ T5947] usb 7-1: config 1 has no interface number 2
[  512.757996][ T5947] usb 7-1: config 1 interface 234 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  512.769466][ T5947] usb 7-1: config 1 interface 179 altsetting 2 endpoint 0xE has an invalid bInterval 109, changing to 7
[  512.781826][ T5947] usb 7-1: config 1 interface 179 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  512.790703][  T986] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  512.793322][ T5947] usb 7-1: config 1 interface 234 has no altsetting 0
[  512.810192][ T5947] usb 7-1: config 1 interface 179 has no altsetting 0
[  512.818035][T15160] /dev/rnullb0: Can't open blockdev
[  512.825213][ T5947] usb 7-1: config 1 interface 242 has no altsetting 0
[  512.834883][ T5947] usb 7-1: New USB device found, idVendor=18ef, idProduct=e025, bcdDevice=7b.fb
[  512.845612][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.853625][ T5947] usb 7-1: Product: ꈐꁐ纫參妀ህ⨇騍さﶅ쫮뎀쭏䐵瞢
[  512.861993][ T5947] usb 7-1: Manufacturer: ꉀ⫱ᠪ蠹㥛℠즔㳞ۚꭠꗑ৥ꘉ䧦伸쌋殛䶮턯хꌹ鎡࢞誖倁开ꨆ꠷遲藋ᒶ
[  512.877863][ T5947] usb 7-1: SerialNumber: 㠊
[  512.976969][  T986] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  512.992846][  T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  513.009577][  T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  513.025124][T15170] sctp: [Deprecated]: syz.0.2744 (pid 15170) Use of struct sctp_assoc_value in delayed_ack socket option.
[  513.025124][T15170] Use struct sctp_sack_info instead
[  513.029411][T15169] fuse: Bad value for 'fd'
[  513.045705][  T986] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  513.059872][  T986] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  513.071655][  T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.095698][  T986] usb 4-1: config 0 descriptor??
[  513.331938][ T5947] cp210x 7-1:1.234: cp210x converter detected
[  513.362348][ T5947] cp210x 7-1:1.234: failed to get vendor val 0x370b size 1: -71
[  513.403854][ T5874] Bluetooth: hci2: command tx timeout
[  513.427719][ T5947] cp210x 7-1:1.234: querying part number failed
[  513.547622][  T986] waltop 0003:172F:0502.0026: item fetching failed at offset 0/3
[  513.579726][  T986] waltop 0003:172F:0502.0026: probe with driver waltop failed with error -22
[  513.715574][ T5947] usb 7-1: cp210x converter now attached to ttyUSB0
[  513.732799][ T5947] cp210x 7-1:1.179: cp210x converter detected
[  513.740678][ T5947] cp210x 7-1:1.179: failed to get vendor val 0x370b size 1: -71
[  513.860221][ T5947] cp210x 7-1:1.179: querying part number failed
[  513.872214][ T5947] usb 7-1: cp210x converter now attached to ttyUSB1
[  513.901175][ T5947] cp210x 7-1:1.242: cp210x converter detected
[  513.930531][ T5947] cp210x 7-1:1.242: failed to get vendor val 0x370b size 1: -71
[  513.946440][ T5947] cp210x 7-1:1.242: querying part number failed
[  513.963069][ T5947] usb 7-1: cp210x converter now attached to ttyUSB2
[  513.984895][ T5947] usb 7-1: USB disconnect, device number 2
[  514.029996][ T5947] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  514.037484][   T43] usb 4-1: USB disconnect, device number 72
[  514.056225][ T5947] cp210x 7-1:1.234: device disconnected
[  514.084333][ T5947] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  514.109472][ T5947] cp210x 7-1:1.179: device disconnected
[  514.119486][ T5947] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2
[  514.129352][ T5947] cp210x 7-1:1.242: device disconnected
[  514.291356][T15193] /dev/rnullb0: Can't open blockdev
[  514.317128][T15198] /dev/rnullb0: Can't open blockdev
[  514.337004][T15200] /dev/rnullb0: Can't open blockdev
[  514.430402][T15201] /dev/rnullb0: Can't open blockdev
[  514.653899][T15212] netlink: 'syz.3.2758': attribute type 29 has an invalid length.
[  514.663193][ T5947] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  514.665664][T15212] netlink: 'syz.3.2758': attribute type 29 has an invalid length.
[  514.680668][T15212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2758'.
[  514.692491][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2758'.
[  514.702811][T15212] /dev/rnullb0: Can't open blockdev
[  514.747846][   T43] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  514.761065][T15216] /dev/rnullb0: Can't open blockdev
[  514.823140][ T5947] usb 7-1: Using ep0 maxpacket: 32
[  514.830341][ T5947] usb 7-1: config 0 has an invalid interface number: 96 but max is 0
[  514.838930][ T5947] usb 7-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config
[  514.851813][ T5947] usb 7-1: config 0 has no interface number 0
[  514.859719][ T5947] usb 7-1: config 0 interface 96 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  514.874821][ T5947] usb 7-1: config 0 interface 96 has no altsetting 0
[  514.883637][T15225] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  514.884319][ T5947] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  514.892151][T15225] /dev/rnullb0: Can't open blockdev
[  514.899910][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.910953][   T43] usb 1-1: Using ep0 maxpacket: 8
[  514.915217][ T5947] usb 7-1: Product: syz
[  514.922658][   T43] usb 1-1: config index 0 descriptor too short (expected 8192, got 52)
[  514.924262][ T5947] usb 7-1: Manufacturer: syz
[  514.934094][   T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  514.937800][ T5947] usb 7-1: SerialNumber: syz
[  514.957806][ T5947] usb 7-1: config 0 descriptor??
[  514.967120][   T43] usb 1-1: config 0 has no interfaces?
[  514.975119][   T43] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  514.984608][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.993155][   T43] usb 1-1: Product: syz
[  514.997563][   T43] usb 1-1: Manufacturer: syz
[  515.002471][   T43] usb 1-1: SerialNumber: syz
[  515.014375][   T43] usb 1-1: config 0 descriptor??
[  515.120207][T15233] /dev/rnullb0: Can't open blockdev
[  515.182867][ T5947] port100 7-1:0.96: NFC: Could not find bulk-in or bulk-out endpoint
[  515.204966][ T5947] usb 7-1: USB disconnect, device number 3
[  515.251222][   T43] usb 1-1: USB disconnect, device number 52
[  515.627718][ T5874] Bluetooth: hci2: command tx timeout
[  516.322765][T15277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2778'.
[  516.758546][ T5930] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  516.790676][   T43] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  516.918969][ T5930] usb 1-1: Using ep0 maxpacket: 32
[  516.926048][ T5930] usb 1-1: config 0 has an invalid interface number: 96 but max is 0
[  516.934803][ T5930] usb 1-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config
[  516.945326][ T5930] usb 1-1: config 0 has no interface number 0
[  516.951663][ T5930] usb 1-1: config 0 interface 96 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  516.965837][ T5930] usb 1-1: config 0 interface 96 has no altsetting 0
[  516.973925][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  516.985620][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  516.998630][ T5930] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  517.008211][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.016685][ T5930] usb 1-1: Product: syz
[  517.021083][ T5930] usb 1-1: Manufacturer: syz
[  517.026034][   T43] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  517.035301][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.043445][ T5930] usb 1-1: SerialNumber: syz
[  517.048589][   T43] usb 6-1: Product: syz
[  517.053734][ T5930] usb 1-1: config 0 descriptor??
[  517.058757][   T43] usb 6-1: Manufacturer: syz
[  517.063471][   T43] usb 6-1: SerialNumber: syz
[  517.070447][   T43] usb 6-1: config 0 descriptor??
[  517.078762][   T43] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress ca
[  517.297403][ T5930] port100 1-1:0.96: NFC: Could not find bulk-in or bulk-out endpoint
[  517.329408][ T5930] usb 1-1: USB disconnect, device number 53
[  517.386880][T15300] syzkaller1: entered promiscuous mode
[  517.392706][T15300] syzkaller1: entered allmulticast mode
[  517.438838][T15302] /dev/rnullb0: Can't open blockdev
[  517.591274][   T43] usb 6-1: USB disconnect, device number 27
[  517.614748][T14845] udevd[14845]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  517.742642][ T6016] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  517.847185][T15310] autofs: Bad value for 'fd'
[  517.852078][ T5874] Bluetooth: hci2: command tx timeout
[  517.858254][T15310] /dev/rnullb0: Can't open blockdev
[  517.907497][ T6016] usb 4-1: Using ep0 maxpacket: 32
[  517.920035][ T6016] usb 4-1: config 0 has an invalid interface number: 112 but max is 0
[  517.928873][ T6016] usb 4-1: config 0 has no interface number 0
[  517.933798][T15320] /dev/rnullb0: Can't open blockdev
[  517.939724][ T6016] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=91.32
[  517.953855][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.962269][ T6016] usb 4-1: Product: syz
[  517.966503][ T6016] usb 4-1: Manufacturer: syz
[  517.972155][ T6016] usb 4-1: SerialNumber: syz
[  517.978349][ T6016] usb 4-1: config 0 descriptor??
[  517.988276][ T6016] gspca_main: conex-2.14.0 probing 0572:0041
[  518.726471][ T5862] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  518.898232][ T5862] usb 6-1: Using ep0 maxpacket: 32
[  518.913701][ T5862] usb 6-1: config 0 has an invalid interface number: 96 but max is 0
[  518.943042][ T5862] usb 6-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config
[  518.998080][ T5862] usb 6-1: config 0 has no interface number 0
[  519.019679][ T5862] usb 6-1: config 0 interface 96 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  519.063737][ T5862] usb 6-1: config 0 interface 96 has no altsetting 0
[  519.095408][ T5862] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  519.117424][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.148857][ T5862] usb 6-1: Product: syz
[  519.158961][ T5862] usb 6-1: Manufacturer: syz
[  519.170263][ T5862] usb 6-1: SerialNumber: syz
[  519.222406][ T5862] usb 6-1: config 0 descriptor??
[  519.454903][ T5862] port100 6-1:0.96: NFC: Could not find bulk-in or bulk-out endpoint
[  519.493377][ T5862] usb 6-1: USB disconnect, device number 28
[  519.796914][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  519.805976][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  519.813752][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  519.822078][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  519.830349][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  520.296969][T15361] chnl_net:caif_netlink_parms(): no params data found
[  520.497642][T15361] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.507874][T15361] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.516423][T15361] bridge_slave_0: entered allmulticast mode
[  520.530233][T15361] bridge_slave_0: entered promiscuous mode
[  520.549549][T15361] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.557227][T15361] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.565131][T15361] bridge_slave_1: entered allmulticast mode
[  520.580878][T15361] bridge_slave_1: entered promiscuous mode
[  520.647141][T15361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.664204][T15361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.754305][T15361] team0: Port device team_slave_0 added
[  520.798643][T15361] team0: Port device team_slave_1 added
[  520.868110][T15361] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.875211][T15361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.908882][T15361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.922477][T15361] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.931399][T15361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.966539][ T5878] Bluetooth: hci0: SCO packet for unknown connection handle 4
[  520.967111][T15361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.987216][ T6016] usb 4-1: USB disconnect, device number 73
[  521.012343][T15388] input: syz1 as /devices/virtual/input/input58
[  521.125577][T15361] hsr_slave_0: entered promiscuous mode
[  521.140865][T15361] hsr_slave_1: entered promiscuous mode
[  521.163159][T15361] debugfs: 'hsr0' already exists in 'hsr'
[  521.171356][T15361] Cannot create hsr debugfs directory
[  521.393876][T15361] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  521.410165][T15361] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  521.430796][T15361] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  521.442018][T15361] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  521.555952][T15361] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.580653][T15361] 8021q: adding VLAN 0 to HW filter on device team0
[  521.598119][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.605349][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.633676][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.640951][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.654828][ T5947] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  521.720011][T15361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  521.740250][T15361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  521.881490][ T5947] usb 7-1: Using ep0 maxpacket: 32
[  521.888303][ T5947] usb 7-1: config 0 has an invalid interface number: 96 but max is 0
[  521.911614][ T5947] usb 7-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config
[  521.929752][ T5947] usb 7-1: config 0 has no interface number 0
[  521.938019][ T5947] usb 7-1: config 0 interface 96 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  521.953092][ T5947] usb 7-1: config 0 interface 96 has no altsetting 0
[  521.962949][ T5947] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  521.974695][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.990273][ T5947] usb 7-1: Product: syz
[  521.994522][ T5947] usb 7-1: Manufacturer: syz
[  522.009851][ T5947] usb 7-1: SerialNumber: syz
[  522.015907][ T5947] usb 7-1: config 0 descriptor??
[  522.026323][T15361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.045035][ T5878] Bluetooth: hci1: command tx timeout
[  522.162253][ T5930] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  522.243873][ T5947] port100 7-1:0.96: NFC: Could not find bulk-in or bulk-out endpoint
[  522.272439][ T5947] usb 7-1: USB disconnect, device number 4
[  522.307710][T15361] veth0_vlan: entered promiscuous mode
[  522.325418][T15361] veth1_vlan: entered promiscuous mode
[  522.331651][ T5930] usb 6-1: Using ep0 maxpacket: 32
[  522.339293][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  522.361318][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  522.396642][T15361] veth0_macvtap: entered promiscuous mode
[  522.404569][ T5930] usb 6-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99
[  522.429404][T15361] veth1_macvtap: entered promiscuous mode
[  522.436376][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.455640][ T5930] usb 6-1: Product: syz
[  522.468920][T15361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  522.477032][ T5930] usb 6-1: Manufacturer: syz
[  522.483838][ T5930] usb 6-1: SerialNumber: syz
[  522.500989][T15361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  522.517596][ T2968] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.530195][ T5930] usb 6-1: config 0 descriptor??
[  522.551769][ T2968] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.582697][ T2968] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.601550][ T2968] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.670389][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.689129][T15447] /dev/rnullb0: Can't open blockdev
[  522.694751][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.712051][T15445] tipc: Started in network mode
[  522.717687][T15445] tipc: Node identity 4, cluster identity 4711
[  522.723973][T15445] tipc: Node number set to 4
[  522.735356][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.750266][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.762157][T15416] /dev/rnullb0: Can't open blockdev
[  522.775426][   T43] usb 6-1: USB disconnect, device number 29
[  522.856032][T15453] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2805'.
[  522.900440][T15458] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2805'.
[  523.403562][T15491] /dev/rnullb0: Can't open blockdev
[  523.432445][   T43] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  523.626265][   T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  523.639544][   T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  523.652116][   T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  523.669531][   T43] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  523.679156][   T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.696659][   T43] usb 8-1: config 0 descriptor??
[  523.861586][ T5862] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  523.939748][T15479] /dev/rnullb0: Can't open blockdev
[  523.955169][ T5930] usb 8-1: USB disconnect, device number 2
[  524.116793][ T5862] usb 7-1: Using ep0 maxpacket: 32
[  524.131072][ T5862] usb 7-1: config index 0 descriptor too short (expected 256, got 36)
[  524.147001][ T5862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  524.174671][ T5862] usb 7-1: config 0 has no interfaces?
[  524.191776][   T43] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  524.192386][ T5862] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  524.234470][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.242491][ T5862] usb 7-1: Product: syz
[  524.251697][ T5862] usb 7-1: Manufacturer: syz
[  524.256363][ T5862] usb 7-1: SerialNumber: syz
[  524.262371][ T5862] usb 7-1: config 0 descriptor??
[  524.268936][ T5878] Bluetooth: hci1: command tx timeout
[  524.352789][   T43] usb 4-1: Using ep0 maxpacket: 8
[  524.361031][   T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  524.376309][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.398627][   T43] usb 4-1: Product: syz
[  524.402827][   T43] usb 4-1: Manufacturer: syz
[  524.408687][   T43] usb 4-1: SerialNumber: syz
[  524.419818][   T43] usb 4-1: config 0 descriptor??
[  524.496104][T15501] program syz.6.2833 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  524.646603][   T43] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  524.700941][ T5862] usb 7-1: USB disconnect, device number 5
[  524.792634][T15532] QAT: failed to copy from user.
[  524.879399][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  524.892890][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  524.966319][T15541] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2841'.
[  524.990696][T15541] cgroup: Unknown subsys name 'appraise'
[  525.014496][T15541] loop8: detected capacity change from 0 to 8
[  525.029744][T14831] Dev loop8: unable to read RDB block 8
[  525.046856][T14831]  loop8: unable to read partition table
[  525.059821][T14831] loop8: partition table beyond EOD, truncated
[  525.070618][T15543] /dev/rnullb0: Can't open blockdev
[  525.102052][T15541] Dev loop8: unable to read RDB block 8
[  525.108869][T15541]  loop8: unable to read partition table
[  525.127110][T15541] loop8: partition table beyond EOD, truncated
[  525.145032][T15541] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  525.251156][ T5947] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  525.429954][T15555] /dev/rnullb0: Can't open blockdev
[  525.462293][T15554] tipc: Started in network mode
[  525.470638][T15554] tipc: Node identity aa17b7dca0e6, cluster identity 4711
[  525.485492][T15554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.509919][T15549] tipc: Resetting bearer <eth:syzkaller0>
[  525.538843][T15503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2835'.
[  525.555678][   T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  525.567351][   T43] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  525.576161][   T43] usb 4-1: media controller created
[  525.623771][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  525.703181][T15549] tipc: Disabling bearer <eth:syzkaller0>
[  525.714296][   T43] i2c i2c-1: Added multiplexed i2c bus 2
[  525.729304][   T43] rtl2830 1-0010: Realtek RTL2830 successfully attached
[  525.747138][   T43] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))...
[  525.774783][   T43] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered.
[  525.843688][   T43] DVB: Unable to find symbol mxl5005s_attach()
[  525.866193][T15572] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  525.990558][T15574] /dev/rnullb0: Can't open blockdev
[  526.147001][   T43] usb 4-1: USB disconnect, device number 74
[  526.210013][T15587] /dev/rnullb0: Can't open blockdev
[  526.489161][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2853'.
[  526.491483][T15602] /dev/rnullb0: Can't open blockdev
[  526.498521][ T5878] Bluetooth: hci1: command tx timeout
[  526.506135][T15600] netlink: 160 bytes leftover after parsing attributes in process `syz.7.2853'.
[  526.519213][T15600] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2853'.
[  526.529085][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2853'.
[  526.681492][T15612] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  526.688808][ T5974] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  526.690714][T15612] /dev/rnullb0: Can't open blockdev
[  526.703353][T15613] /dev/rnullb0: Can't open blockdev
[  526.866060][ T5974] usb 7-1: too many configurations: 25, using maximum allowed: 8
[  526.874794][ T5974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.888852][ T5974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  526.899911][ T5974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.910360][ T5974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  526.921863][ T5974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.932906][ T5974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  526.943384][ T5974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.954739][ T5974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  526.965998][ T5974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.978003][ T5974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  526.988087][ T5974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.995249][   T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  526.998989][ T5974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  527.018956][T15620] /dev/rnullb0: Can't open blockdev
[  527.021287][ T5974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  527.035912][ T5974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  527.050896][ T5974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  527.062672][ T5974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  527.076346][ T5974] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  527.085898][ T5974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.094523][ T5974] usb 7-1: Product: syz
[  527.098894][ T5974] usb 7-1: Manufacturer: syz
[  527.104096][ T5974] usb 7-1: SerialNumber: syz
[  527.911155][   T10] usb 7-1: USB disconnect, device number 6
[  528.041955][ T5974] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  528.138265][   T24] usb 4-1: Using ep0 maxpacket: 16
[  528.146735][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.160022][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  528.177248][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  528.187036][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  528.197359][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  528.211807][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  528.217239][ T5974] usb 8-1: Using ep0 maxpacket: 16
[  528.221102][   T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  528.234232][   T24] usb 4-1: Manufacturer: syz
[  528.240047][ T5974] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  528.250799][ T5974] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  528.251356][   T24] usb 4-1: config 0 descriptor??
[  528.269445][ T5974] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  528.280333][ T5974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.301650][ T5974] usb 8-1: Product: syz
[  528.302022][ T5878] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  528.306081][ T5974] usb 8-1: Manufacturer: syz
[  528.317412][ T5878] Bluetooth: hci0: SCO packet for unknown connection handle 201
[  528.318852][ T5974] usb 8-1: SerialNumber: syz
[  528.331983][   T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  528.491228][   T10] usb 7-1: Using ep0 maxpacket: 32
[  528.498348][   T10] usb 7-1: config 0 has an invalid interface number: 96 but max is 0
[  528.509343][   T10] usb 7-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config
[  528.519744][   T10] usb 7-1: config 0 has no interface number 0
[  528.526092][   T10] usb 7-1: config 0 interface 96 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  528.539469][   T10] usb 7-1: config 0 interface 96 has no altsetting 0
[  528.544796][   T24] rc_core: IR keymap rc-hauppauge not found
[  528.549234][   T10] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  528.554820][   T24] Registered IR keymap rc-empty
[  528.562160][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.569352][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.576909][   T10] usb 7-1: Product: syz
[  528.587000][   T10] usb 7-1: Manufacturer: syz
[  528.592018][   T10] usb 7-1: SerialNumber: syz
[  528.605192][   T10] usb 7-1: config 0 descriptor??
[  528.608904][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.633109][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  528.648917][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input59
[  528.664789][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.694855][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.726514][ T5878] Bluetooth: hci1: command tx timeout
[  528.726935][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.759232][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.780079][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.801984][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.834113][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.834153][   T10] port100 7-1:0.96: NFC: Could not find bulk-in or bulk-out endpoint
[  528.855474][   T10] usb 7-1: USB disconnect, device number 7
[  528.863666][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.897670][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.930875][   T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  528.970932][   T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  528.991416][   T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  529.349306][ T5974] usb 8-1: 0:2 : does not exist
[  529.368146][   T10] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[  529.387793][ T5974] usb 8-1: USB disconnect, device number 3
[  529.410788][T14831] udevd[14831]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  529.471551][T15679] /dev/rnullb0: Can't open blockdev
[  529.535056][   T30] audit: type=1400 audit(1756307083.720:7860): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=15682 comm="syz.5.2880"
[  529.581249][   T30] audit: type=1326 audit(1756307083.767:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15684 comm="syz.6.2881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fedf8ebe9 code=0x0
[  529.643406][T15687] @: renamed from vlan0 (while UP)
[  529.689388][ T5878] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  529.698364][T15694] /dev/rnullb0: Can't open blockdev
[  529.698904][ T5878] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  530.098422][ T6016] usb 4-1: USB disconnect, device number 75
[  530.288496][   T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  530.448340][   T24] usb 8-1: Using ep0 maxpacket: 32
[  530.466528][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.489341][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.521471][   T24] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  530.532663][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.545081][   T24] usb 8-1: config 0 descriptor??
[  530.568287][   T24] hub 8-1:0.0: USB hub found
[  530.771419][   T24] hub 8-1:0.0: 1 port detected
[  530.793992][T15714] Malformed UNC in devname
[  530.793992][T15714] 
[  530.800823][T15714] CIFS: VFS: Malformed UNC in devname
[  530.964779][T15727] /dev/rnullb0: Can't open blockdev
[  530.970431][T15726] /dev/rnullb0: Can't open blockdev
[  531.026047][ T5974] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  531.113973][ T6016] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  531.199725][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.210789][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  531.224033][ T5974] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  531.233266][   T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  531.240833][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.250743][ T5974] usb 4-1: config 0 descriptor??
[  531.286063][ T6016] usb 6-1: unable to get BOS descriptor or descriptor too short
[  531.294590][ T6016] usb 6-1: not running at top speed; connect to a high speed hub
[  531.303592][ T6016] usb 6-1: config 7 has an invalid interface number: 2 but max is 0
[  531.312171][ T6016] usb 6-1: config 7 has no interface number 0
[  531.318431][ T6016] usb 6-1: config 7 interface 2 has no altsetting 0
[  531.327408][ T6016] usb 6-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=15.2a
[  531.337937][ T6016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.346092][ T6016] usb 6-1: Product: syz
[  531.350387][ T6016] usb 6-1: Manufacturer: syz
[  531.355020][ T6016] usb 6-1: SerialNumber: syz
[  531.410941][   T10] usb 7-1: Using ep0 maxpacket: 16
[  531.417835][   T10] usb 7-1: config index 0 descriptor too short (expected 65521, got 18)
[  531.426295][   T10] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  531.434454][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  531.446911][   T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  531.456500][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.464588][   T10] usb 7-1: Product: syz
[  531.468797][   T10] usb 7-1: Manufacturer: syz
[  531.473442][   T10] usb 7-1: SerialNumber: syz
[  531.480942][   T10] r8152-cfgselector 7-1: Unknown version 0x0000
[  531.487306][   T10] r8152-cfgselector 7-1: config 0 descriptor??
[  531.697835][ T5974] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0
[  531.705621][ T5974] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0
[  531.715156][ T5974] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0
[  531.727707][ T5974] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0
[  531.735056][ T5974] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0
[  531.753320][ T5974] cm6533_jd 0003:0D8C:0022.0027: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  531.758194][ T6016] gspca_main: sunplus-2.14.0 probing 052b:1803
[  531.779331][ T6016] gspca_sunplus: reg_r err -71
[  531.784396][ T6016] sunplus 6-1:7.2: probe with driver sunplus failed with error -71
[  531.795116][ T6016] usb 6-1: USB disconnect, device number 32
[  532.123703][   T10] r8152-cfgselector 7-1: Unknown version 0x0000
[  532.132572][   T10] r8152-cfgselector 7-1: bad CDC descriptors
[  532.142306][   T10] r8152-cfgselector 7-1: USB disconnect, device number 8
[  532.149494][   T24] hub 8-1:0.0: hub_hub_status failed (err = -32)
[  532.155858][   T24] hub 8-1:0.0: config failed, can't get hub status (err -32)
[  532.173199][   T24] usbhid 8-1:0.0: can't add hid device: -32
[  532.179244][   T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -32
[  532.214084][   T24] usb 8-1: USB disconnect, device number 4
[  532.496232][T15735] kvm: pic: non byte read
[  532.500813][T15735] kvm: pic: non byte read
[  532.505459][T15735] kvm: pic: non byte read
[  533.012217][T15751] /dev/rnullb0: Can't open blockdev
[  533.218773][ T6016] usb 4-1: reset high-speed USB device number 76 using dummy_hcd
[  533.336174][   T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  533.485993][   T24] usb 7-1: device descriptor read/64, error -71
[  533.549083][T15755] infiniband syz1: set active
[  533.586970][T15755] infiniband syz1: added syz_tun
[  533.721639][T15755] RDS/IB: syz1: added
[  533.742708][   T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  533.771836][T15755] smc: adding ib device syz1 with port count 1
[  533.779615][T15755] smc:    ib device syz1 port 1 has pnetid 
[  533.803822][ T3006] Bluetooth: hci3: Frame reassembly failed (-84)
[  533.817035][T15760] Bluetooth: hci3: Frame reassembly failed (-84)
[  533.909416][   T24] usb 7-1: device descriptor read/64, error -71
[  534.031485][   T24] usb usb7-port1: attempt power cycle
[  534.394961][   T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  534.433558][   T24] usb 7-1: device descriptor read/8, error -71
[  534.615364][T15765] openvswitch: netlink: Key 24 has unexpected len 2 expected 4
[  534.790807][   T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  534.812489][   T24] usb 7-1: device descriptor read/8, error -71
[  534.931046][   T24] usb usb7-port1: unable to enumerate USB device
[  534.973572][ T5930] usb 4-1: USB disconnect, device number 76
[  535.911782][T15780] /dev/rnullb0: Can't open blockdev
[  535.988565][ T5874] Bluetooth: hci3: command 0x1003 tx timeout
[  535.994958][ T5878] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  536.543477][T15788] /dev/rnullb0: Can't open blockdev
[  536.847457][T15808] binder: Bad value for 'max'
[  537.011742][T15816] rdma_rxe: rxe_newlink: failed to add syz_tun
[  537.027168][   T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  537.187015][   T10] usb 4-1: device descriptor read/64, error -71
[  537.250604][ T5974] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  537.429293][ T5974] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  537.454030][ T5974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.462058][ T5974] usb 8-1: Product: syz
[  537.469926][   T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  537.479233][ T5974] usb 8-1: Manufacturer: syz
[  537.496695][ T5974] usb 8-1: SerialNumber: syz
[  537.507966][ T5974] usb 8-1: config 0 descriptor??
[  537.517133][ T5974] gspca_main: sq905c-2.14.0 probing 2770:9052
[  537.635626][   T10] usb 4-1: device descriptor read/64, error -71
[  537.737702][ T5974] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  537.754702][   T10] usb usb4-port1: attempt power cycle
[  537.761924][ T5974] sq905c 8-1:0.0: Get version command failed
[  537.770048][ T5974] sq905c 8-1:0.0: probe with driver sq905c failed with error -71
[  537.779951][ T5974] usb 8-1: USB disconnect, device number 5
[  537.817436][ T5947] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  537.996476][ T5947] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  538.009369][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.024487][ T5947] usb 6-1: config 0 descriptor??
[  538.128113][   T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  538.160162][   T10] usb 4-1: device descriptor read/8, error -71
[  538.428624][   T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  538.464439][   T10] usb 4-1: device descriptor read/8, error -71
[  538.589014][   T10] usb usb4-port1: unable to enumerate USB device
[  538.758706][ T5862] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  538.911087][ T5862] usb 8-1: device descriptor read/64, error -71
[  538.936614][ T5947] pegasus 6-1:0.0: can't reset MAC
[  538.947974][ T5947] pegasus 6-1:0.0: probe with driver pegasus failed with error -5
[  538.970015][ T5947] usb 6-1: USB disconnect, device number 33
[  539.186449][ T5862] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  539.306424][ T5947] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  539.346763][ T5862] usb 8-1: device descriptor read/64, error -71
[  539.464740][ T5862] usb usb8-port1: attempt power cycle
[  539.475385][ T5947] usb 6-1: Using ep0 maxpacket: 8
[  539.482668][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  539.493464][ T5947] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 200
[  539.512826][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  539.524019][ T5947] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  539.534120][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  539.548827][ T5947] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  539.558954][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.572889][ T5947] usb 6-1: config 0 descriptor??
[  539.579108][T15841] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  539.818297][ T5947] usb 6-1: USB disconnect, device number 34
[  539.828120][ T5862] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  539.871041][ T5862] usb 8-1: device descriptor read/8, error -71
[  540.072628][T15845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2935'.
[  540.130174][ T5862] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  540.160992][ T5862] usb 8-1: device descriptor read/8, error -71
[  540.289035][ T5862] usb usb8-port1: unable to enumerate USB device
[  540.308123][T15850] netlink: 'syz.6.2937': attribute type 10 has an invalid length.
[  540.317791][T15850] bridge0: port 3(macsec0) entered blocking state
[  540.324840][T15850] bridge0: port 3(macsec0) entered disabled state
[  540.331654][T15850] macsec0: entered allmulticast mode
[  540.337296][T15850] veth1_macvtap: entered allmulticast mode
[  540.345531][T15850] macsec0: entered promiscuous mode
[  540.351127][T15850] bridge0: port 3(macsec0) entered blocking state
[  540.357674][T15850] bridge0: port 3(macsec0) entered forwarding state
[  540.365331][T15852] nbd_handle_cmd: 2 callbacks suppressed
[  540.365352][T15852] block nbd6: Attempted send on invalid socket
[  540.378234][T15852] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  540.384408][ T6016] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  540.395600][T15852] hpfs: hpfs_map_sector(): read error
[  540.466068][T15856] /dev/rnullb0: Can't open blockdev
[  540.509584][T15861] /dev/rnullb0: Can't open blockdev
[  540.517776][T15858] /dev/rnullb0: Can't open blockdev
[  540.544731][ T6016] usb 4-1: device descriptor read/64, error -71
[  540.579066][T15868] /dev/rnullb0: Can't open blockdev
[  540.743803][T15874] rdma_rxe: rxe_newlink: failed to add syz_tun
[  540.758517][   T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  540.812059][ T6016] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  540.918997][   T24] usb 6-1: Using ep0 maxpacket: 16
[  540.926105][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  540.935900][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  540.945828][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  540.955655][ T6016] usb 4-1: device descriptor read/64, error -71
[  540.962011][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  540.974942][   T24] usb 6-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97
[  540.984141][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.992283][   T24] usb 6-1: Product: syz
[  540.996615][   T24] usb 6-1: Manufacturer: syz
[  541.001206][   T24] usb 6-1: SerialNumber: syz
[  541.007631][   T24] usb 6-1: config 0 descriptor??
[  541.014245][   T24] omninet 6-1:0.0: ZyXEL - omni.net usb converter detected
[  541.023225][   T24] usb 6-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[  541.080821][ T6016] usb usb4-port1: attempt power cycle
[  541.227954][ T5862] usb 6-1: USB disconnect, device number 35
[  541.236520][ T5862] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[  541.247722][ T5862] omninet 6-1:0.0: device disconnected
[  541.443082][ T6016] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  541.465302][ T6016] usb 4-1: device descriptor read/8, error -71
[  541.523298][T15877] /dev/rnullb0: Can't open blockdev
[  541.531760][T15879] ptm ptm2: ldisc open failed (-12), clearing slot 2
[  541.721186][ T6016] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  541.753798][ T6016] usb 4-1: device descriptor read/8, error -71
[  541.871060][ T6016] usb usb4-port1: unable to enumerate USB device
[  542.149267][ T5947] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  542.288024][ T5947] usb 8-1: device descriptor read/64, error -71
[  542.544727][ T5947] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  542.683662][ T5947] usb 8-1: device descriptor read/64, error -71
[  542.779258][T15889] netlink: 'syz.5.2951': attribute type 1 has an invalid length.
[  542.802419][ T5947] usb usb8-port1: attempt power cycle
[  543.197049][ T5947] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  543.234973][ T5947] usb 8-1: device descriptor read/8, error -71
[  543.498031][ T5947] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  543.520794][ T5947] usb 8-1: device descriptor read/8, error -71
[  543.638757][ T5947] usb usb8-port1: unable to enumerate USB device
[  543.689184][ T5874] Bluetooth: hci3: command 0x1003 tx timeout
[  543.695491][ T5878] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  543.778962][T15906] /dev/rnullb0: Can't open blockdev
[  544.138335][ T6206] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  544.288072][ T6206] usb 7-1: device descriptor read/64, error -71
[  544.547757][ T6206] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  544.654229][ T6016] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  544.698238][ T6206] usb 7-1: device descriptor read/64, error -71
[  544.833613][ T6016] usb 4-1: Using ep0 maxpacket: 32
[  544.841248][ T6206] usb usb7-port1: attempt power cycle
[  544.842773][T15923] binder: 15922:15923 ioctl 400c620e 200000000080 returned -22
[  544.853089][ T6016] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  544.875871][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.899450][ T6016] usb 4-1: config 0 descriptor??
[  544.913592][ T6016] gspca_main: nw80x-2.14.0 probing 055f:d001
[  545.159253][T15933] /dev/rnullb0: Can't open blockdev
[  545.218431][ T6206] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  545.251634][ T6206] usb 7-1: device descriptor read/8, error -71
[  545.298822][T15939] 9p: Unknown parameter 'defcontext'
[  545.507288][ T6206] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  545.539851][ T6206] usb 7-1: device descriptor read/8, error -71
[  545.667982][ T6206] usb usb7-port1: unable to enumerate USB device
[  545.719640][T15953] serio: Serial port ptm0
[  545.730773][ T6016] gspca_nw80x: reg_w err -71
[  545.735691][ T6016] nw80x 4-1:0.0: probe with driver nw80x failed with error -71
[  545.755543][ T6016] usb 4-1: USB disconnect, device number 85
[  545.777514][T15957] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  545.915277][T15963] /dev/rnullb0: Can't open blockdev
[  546.104454][T15970] /dev/rnullb0: Can't open blockdev
[  546.245383][ T6016] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  546.416390][ T6016] usb 4-1: Using ep0 maxpacket: 8
[  546.422879][ T6016] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  546.433620][ T6016] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  546.447792][ T6016] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  546.458758][ T6016] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  546.468648][ T6016] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  546.480026][ T6016] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  546.492207][ T6016] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  546.502038][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.510048][ T6016] usb 4-1: Product: syz
[  546.514852][ T6016] usb 4-1: Manufacturer: syz
[  546.519560][ T6016] usb 4-1: SerialNumber: syz
[  546.553291][T15994] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  546.563843][T15994] gfs2: error -5 reading superblock
[  546.999727][ T6016] usb 4-1: USB disconnect, device number 86
[  547.027749][T14831] udevd[14831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  547.091604][T16013] block nbd5: Attempted send on invalid socket
[  547.104648][T16013] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  547.128182][T16013] SQUASHFS error: Failed to read block 0x0: -5
[  547.139138][T16013] unable to read squashfs_super_block
[  547.149326][T16017] /dev/rnullb0: Can't open blockdev
[  547.176028][T16018] block nbd5: Attempted send on invalid socket
[  547.190021][T16018] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  547.214659][T16018] SQUASHFS error: Failed to read block 0x0: -5
[  547.221659][T16018] unable to read squashfs_super_block
[  547.333030][T16026] rdma_rxe: rxe_newlink: failed to add syz_tun
[  547.417795][T16028] /dev/rnullb0: Can't open blockdev
[  547.609206][T16044] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  547.617547][T16044] /dev/rnullb0: Can't open blockdev
[  547.720680][T16056] /dev/rnullb0: Can't open blockdev
[  547.849431][ T5930] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  547.988475][ T5930] usb 4-1: device descriptor read/64, error -71
[  548.095526][ T6206] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  548.170301][ T5947] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  548.245192][ T6206] usb 6-1: device descriptor read/64, error -71
[  548.251673][ T5930] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  548.334845][ T5947] usb 8-1: config 0 has an invalid interface number: 133 but max is 0
[  548.343510][ T5947] usb 8-1: config 0 has no interface number 0
[  548.349628][ T5947] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  548.365940][ T5947] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  548.376849][ T5947] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.386548][ T5947] usb 8-1: Product: syz
[  548.391402][ T5947] usb 8-1: Manufacturer: syz
[  548.399154][ T5947] usb 8-1: SerialNumber: syz
[  548.409989][ T5947] usb 8-1: config 0 descriptor??
[  548.969783][ T5947] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected
[  548.981604][ T5947] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81
[  548.990856][ T5947] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1
[  549.001225][ T5947] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2
[  549.010796][ T5947] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  549.027276][ T5947] usb 8-1: USB disconnect, device number 14
[  549.051250][ T5947] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  549.078786][ T5947] keyspan 8-1:0.133: device disconnected
[  549.326402][T16090] misc userio: The device must be registered before sending interrupts
[  549.330070][ T5930] usb 4-1: device descriptor read/64, error -71
[  549.337856][T16090] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3016'.
[  549.362197][T16090] xfrm0: entered promiscuous mode
[  549.367438][T16090] xfrm0: entered allmulticast mode
[  549.381224][T16090] fuse: Bad value for 'fd'
[  549.400245][ T6206] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  549.475407][ T5930] usb usb4-port1: attempt power cycle
[  549.532648][T16095] rdma_rxe: rxe_newlink: failed to add syz_tun
[  549.539973][ T6206] usb 6-1: device descriptor read/64, error -71
[  549.668240][ T6206] usb usb6-port1: attempt power cycle
[  549.838902][ T5930] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  549.887930][ T5930] usb 4-1: device descriptor read/8, error -71
[  550.042635][ T6206] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  550.066511][ T6206] usb 6-1: device descriptor read/8, error -71
[  550.149021][ T5930] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  550.170892][ T5930] usb 4-1: device descriptor read/8, error -71
[  550.288678][ T5930] usb usb4-port1: unable to enumerate USB device
[  550.320150][ T6206] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  550.353973][ T6206] usb 6-1: device descriptor read/8, error -71
[  550.471466][ T6206] usb usb6-port1: unable to enumerate USB device
[  550.479283][T16112] program syz.6.3023 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  550.666078][T16119] block nbd6: Attempted send on invalid socket
[  550.672416][T16119] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  550.684374][T16119] FAT-fs (nbd6): unable to read boot sector
[  550.724116][T16124] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  550.742932][T16124] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3026'.
[  550.864739][T16130] overlayfs: maximum fs stacking depth exceeded
[  550.890698][T16130] overlayfs: maximum fs stacking depth exceeded
[  550.908546][T16130] overlayfs: maximum fs stacking depth exceeded
[  551.024676][T16137] /dev/rnullb0: Can't open blockdev
[  551.095137][T16139] rdma_rxe: rxe_newlink: failed to add syz_tun
[  551.291833][ T5878] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  551.754205][T16163] /dev/rnullb0: Can't open blockdev
[  551.828222][   T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  551.988686][   T24] usb 7-1: device descriptor read/64, error -71
[  552.086008][   T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  552.173678][T16178] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3041'.
[  552.234543][   T10] usb 8-1: device descriptor read/64, error -71
[  552.255947][   T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  552.405571][   T24] usb 7-1: device descriptor read/64, error -71
[  552.431953][T16181] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  552.443472][T16181] exFAT-fs (loop5): unable to read boot sector
[  552.450176][T16181] exFAT-fs (loop5): failed to read boot sector
[  552.456537][T16181] exFAT-fs (loop5): failed to recognize exfat type
[  552.526329][   T24] usb usb7-port1: attempt power cycle
[  552.592200][T16184] sctp: [Deprecated]: syz.5.3044 (pid 16184) Use of struct sctp_assoc_value in delayed_ack socket option.
[  552.592200][T16184] Use struct sctp_sack_info instead
[  552.715944][   T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  552.865634][   T10] usb 8-1: device descriptor read/64, error -71
[  552.898066][   T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  552.930308][   T24] usb 7-1: device descriptor read/8, error -71
[  552.983511][   T10] usb usb8-port1: attempt power cycle
[  553.104679][T16187] sctp: [Deprecated]: syz.3.3045 (pid 16187) Use of int in max_burst socket option deprecated.
[  553.104679][T16187] Use struct sctp_assoc_value instead
[  553.186356][   T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  553.211747][   T24] usb 7-1: device descriptor read/8, error -71
[  553.334094][T16193] rdma_rxe: rxe_newlink: failed to add syz_tun
[  553.343495][   T24] usb usb7-port1: unable to enumerate USB device
[  553.357697][   T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  553.390632][   T10] usb 8-1: device descriptor read/8, error -71
[  553.647375][   T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  553.668387][   T10] usb 8-1: device descriptor read/8, error -71
[  553.785913][   T10] usb usb8-port1: unable to enumerate USB device
[  553.838774][   T24] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  553.999326][   T24] usb 6-1: Using ep0 maxpacket: 8
[  554.007929][   T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  554.016845][   T24] usb 6-1: config 0 has no interface number 0
[  554.023544][   T24] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  554.035322][   T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  554.046561][   T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  554.057903][   T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  554.067186][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.085663][   T24] usb 6-1: config 0 descriptor??
[  554.091238][T16205] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  554.104692][   T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  554.357086][ T5947] usb 6-1: USB disconnect, device number 40
[  554.858594][T16215] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  554.869219][T16215] /dev/rnullb0: Can't open blockdev
[  554.966959][T16216] "syz.6.3057" (16216) uses obsolete ecb(arc4) skcipher
[  554.977825][T16222] dlm: no locking on control device
[  555.175025][T16235] rdma_rxe: rxe_newlink: failed to add syz_tun
[  555.694505][   T30] audit: type=1326 audit(1756307108.180:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16255 comm="syz.5.3065" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bce78ebe9 code=0x0
[  555.892298][ T5947] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  556.031284][ T5947] usb 4-1: device descriptor read/64, error -71
[  556.288112][ T5947] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  556.448498][ T5947] usb 4-1: device descriptor read/64, error -71
[  556.566350][ T5947] usb usb4-port1: attempt power cycle
[  556.588773][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3067'.
[  556.940342][ T5947] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  556.973272][ T5947] usb 4-1: device descriptor read/8, error -71
[  557.057082][T16285] syz1: rxe_newlink: already configured on syz_tun
[  557.145913][T16289] MTD: Couldn't look up '/dev/md0': -2
[  557.230187][ T5947] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  557.240315][T16291] /dev/rnullb0: Can't open blockdev
[  557.272813][ T5947] usb 4-1: device descriptor read/8, error -71
[  557.325114][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3080'.
[  557.359723][T16300] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3080'.
[  557.392452][ T5947] usb usb4-port1: unable to enumerate USB device
[  557.605673][T16310] /dev/rnullb0: Can't open blockdev
[  557.773869][T16313] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  557.780518][T16313] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  557.833281][T16313] vhci_hcd vhci_hcd.0: Device attached
[  558.169194][T16319] hpfs: Unknown parameter '~orec
very'
[  558.257418][T16321] syzkaller0: entered promiscuous mode
[  558.274159][T16321] syzkaller0: entered allmulticast mode
[  558.323192][T16321] syzkaller1: entered promiscuous mode
[  558.339596][T16321] syzkaller1: entered allmulticast mode
[  558.512575][ T5974] usb 45-1: new high-speed USB device number 2 using vhci_hcd
[  558.575435][T16314] vhci_hcd: connection reset by peer
[  558.610826][   T36] vhci_hcd: stop threads
[  558.615113][   T36] vhci_hcd: release socket
[  558.649768][T16324] /dev/rnullb0: Can't open blockdev
[  558.651833][   T36] vhci_hcd: disconnect device
[  559.161930][ T6016] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  559.282585][   T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  559.357486][ T6016] usb 6-1: Using ep0 maxpacket: 32
[  559.379390][ T6016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.407007][ T6016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.435277][ T6016] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  559.451783][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.482241][ T6016] usb 6-1: config 0 descriptor??
[  559.485118][   T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  559.511589][   T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  559.550029][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  559.587192][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  559.614114][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  559.651635][   T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  559.667714][   T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  559.700242][   T10] usb 4-1: Product: syz
[  559.704599][   T10] usb 4-1: Manufacturer: syz
[  559.732389][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  559.737746][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  559.749578][T16336] rdma_rxe: rxe_newlink: failed to add syz_tun
[  559.769086][   T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  559.785247][   T10] cdc_wdm 4-1:1.0: Unknown control protocol
[  559.965367][ T6016] ft260 0003:0403:6030.0028: unknown main item tag 0x7
[  560.084740][   T10] usb 7-1: new low-speed USB device number 21 using dummy_hcd
[  560.177809][ T6016] ft260 0003:0403:6030.0028: chip code: 6424 8183
[  560.239920][   T24] usb 4-1: USB disconnect, device number 95
[  560.277454][   T10] usb 7-1: Invalid ep0 maxpacket: 16
[  560.392160][ T6016] ft260 0003:0403:6030.0028: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[  560.427103][   T10] usb 7-1: new low-speed USB device number 22 using dummy_hcd
[  560.598276][   T10] usb 7-1: Invalid ep0 maxpacket: 16
[  560.607246][ T6016] ft260 0003:0403:6030.0028: failed to retrieve status: -32, no wakeup
[  560.608200][   T10] usb usb7-port1: attempt power cycle
[  560.619285][ T6016] ft260 0003:0403:6030.0028: failed to retrieve status: -32
[  560.994022][   T10] usb 7-1: new low-speed USB device number 23 using dummy_hcd
[  561.037445][   T10] usb 7-1: Invalid ep0 maxpacket: 16
[  561.106795][T16355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  561.126390][T16355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  561.197021][   T10] usb 7-1: new low-speed USB device number 24 using dummy_hcd
[  561.219221][   T10] usb 7-1: Invalid ep0 maxpacket: 16
[  561.224975][   T10] usb usb7-port1: unable to enumerate USB device
[  561.304387][ T6016] usb 6-1: reset high-speed USB device number 41 using dummy_hcd
[  561.332609][T16358] /dev/rnullb0: Can't open blockdev
[  561.406836][T16362] /dev/rnullb0: Can't open blockdev
[  561.418524][T16363] /dev/rnullb0: Can't open blockdev
[  561.611936][T16369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  561.621784][T16369] /dev/rnullb0: Can't open blockdev
[  561.773207][T16373] syz1: rxe_newlink: already configured on syz_tun
[  561.858409][T16380] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  561.949758][T16388] syzkaller1: entered promiscuous mode
[  561.955674][T16388] syzkaller1: entered allmulticast mode
[  562.033374][T16389] can0 (unregistered): slcan off ttyprintk.
[  562.042021][ T6206] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  562.053811][T16389] sp0: Synchronizing with TNC
[  562.237889][ T6206] usb 4-1: config 0 has an invalid interface number: 172 but max is 0
[  562.256124][ T6206] usb 4-1: config 0 has no interface number 0
[  562.262743][ T6206] usb 4-1: New USB device found, idVendor=413c, idProduct=4004, bcdDevice=51.20
[  562.275563][ T6206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.299144][ T6206] usb 4-1: config 0 descriptor??
[  562.551369][T16377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.563358][T16377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.590010][   T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  562.607639][ T6206] usb 4-1: USB disconnect, device number 96
[  562.686532][T16430] /dev/rnullb0: Can't open blockdev
[  562.705904][T16430] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  562.769255][   T10] usb 8-1: Using ep0 maxpacket: 32
[  562.782449][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  562.801101][   T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  562.815710][   T10] usb 8-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  562.840548][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.857912][   T10] usb 8-1: Product: syz
[  562.862109][   T10] usb 8-1: Manufacturer: syz
[  562.878119][   T10] usb 8-1: SerialNumber: syz
[  562.889550][   T10] usb 8-1: config 0 descriptor??
[  563.038199][ T6206] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[  563.077403][T16455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.114722][ T5947] usb 8-1: USB disconnect, device number 19
[  563.118411][T16455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.186604][ T6206] usb 4-1: device descriptor read/64, error -71
[  563.339664][T16475] syz1: rxe_newlink: already configured on syz_tun
[  563.453933][ T6206] usb 4-1: new full-speed USB device number 98 using dummy_hcd
[  563.603552][ T6206] usb 4-1: device descriptor read/64, error -71
[  563.609937][  T986] usb 7-1: new low-speed USB device number 25 using dummy_hcd
[  563.721392][ T6206] usb usb4-port1: attempt power cycle
[  563.753172][  T986] usb 7-1: device descriptor read/64, error -71
[  563.956414][ T5974] vhci_hcd: vhci_device speed not set
[  563.999305][ T5930] usb 8-1: new low-speed USB device number 20 using dummy_hcd
[  564.010136][  T986] usb 7-1: new low-speed USB device number 26 using dummy_hcd
[  564.084749][ T6206] usb 4-1: new full-speed USB device number 99 using dummy_hcd
[  564.128159][ T6206] usb 4-1: device descriptor read/8, error -71
[  564.148950][  T986] usb 7-1: device descriptor read/64, error -71
[  564.178172][ T5930] usb 8-1: unable to get BOS descriptor or descriptor too short
[  564.188213][ T5930] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  564.197346][ T5930] usb 8-1: config 0 has no interface number 0
[  564.203750][ T5930] usb 8-1: config 0 interface 105 altsetting 10 endpoint 0xE is Bulk; changing to Interrupt
[  564.214254][ T5930] usb 8-1: config 0 interface 105 has no altsetting 0
[  564.223958][ T5930] usb 8-1: string descriptor 0 read error: -22
[  564.230679][ T5930] usb 8-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  564.236450][T16495] /dev/rnullb0: Can't open blockdev
[  564.239925][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.242772][ T5930] usb 8-1: config 0 descriptor??
[  564.260394][T16490] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  564.268861][  T986] usb usb7-port1: attempt power cycle
[  564.277748][ T5930] usb 8-1: Found UVC 0.00 device <unnamed> (1943:2250)
[  564.284689][ T5930] usb 8-1: No valid video chain found.
[  564.291187][ T5930] go7007 8-1:0.105: Sensoray 2250 found
[  564.298228][ T5930] go7007 8-1:0.105: probe with driver go7007 failed with error -12
[  564.398066][ T6206] usb 4-1: new full-speed USB device number 100 using dummy_hcd
[  564.428301][ T6206] usb 4-1: device descriptor read/8, error -71
[  564.490308][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3124'.
[  564.499331][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3124'.
[  564.544998][ T6206] usb usb4-port1: unable to enumerate USB device
[  564.556234][T16490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.573271][T16490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.601670][ T6206] usb 8-1: USB disconnect, device number 20
[  564.641883][  T986] usb 7-1: new low-speed USB device number 27 using dummy_hcd
[  564.656735][T16507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.683079][T16507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.700376][  T986] usb 7-1: device descriptor read/8, error -71
[  564.726423][T16510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.737382][T16510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.751395][T16511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.766040][T16511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.785381][T16511] block nbd7: Attempted send on invalid socket
[  564.791969][T16511] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  564.803082][T16511] EXT4-fs (nbd7): unable to read superblock
[  564.891982][T16515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.907842][T16515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.922226][T16515] netlink: 'syz.5.3131': attribute type 4 has an invalid length.
[  564.932492][ T5878] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  565.027866][  T986] usb 7-1: new low-speed USB device number 28 using dummy_hcd
[  565.049807][  T986] usb 7-1: device descriptor read/8, error -71
[  565.069147][ T6206] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  565.165166][  T986] usb usb7-port1: unable to enumerate USB device
[  565.229673][ T6206] usb 8-1: device descriptor read/64, error -71
[  565.499113][ T6206] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  565.646250][ T6206] usb 8-1: device descriptor read/64, error -71
[  565.766610][ T6206] usb usb8-port1: attempt power cycle
[  566.127504][ T6206] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  566.150617][ T6206] usb 8-1: device descriptor read/8, error -71
[  566.373997][  T986] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  566.416358][ T6206] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  566.443795][ T6206] usb 8-1: device descriptor read/8, error -71
[  566.547709][  T986] usb 4-1: Using ep0 maxpacket: 32
[  566.571562][ T6206] usb usb8-port1: unable to enumerate USB device
[  566.580369][  T986] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  566.601839][  T986] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  566.613342][  T986] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  566.623856][  T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.632355][  T986] usb 4-1: Product: syz
[  566.636639][  T986] usb 4-1: Manufacturer: syz
[  566.646194][  T986] usb 4-1: SerialNumber: syz
[  566.656055][  T986] usb 4-1: config 0 descriptor??
[  566.689350][T16521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.702077][T16521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.772333][T16524] rdma_rxe: rxe_newlink: failed to add syz_tun
[  566.846966][ T6016] usb 6-1: device descriptor read/64, error -110
[  566.882827][ T5947] usb 4-1: USB disconnect, device number 101
[  567.100798][ T6016] usb 6-1: reset high-speed USB device number 41 using dummy_hcd
[  567.243122][ T6016] usb 6-1: device descriptor read/64, error -32
[  567.470907][T16527] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  567.479569][T16527] /dev/rnullb0: Can't open blockdev
[  567.497133][ T6016] usb 6-1: reset high-speed USB device number 41 using dummy_hcd
[  567.528593][ T6016] usb 6-1: device descriptor read/8, error -32
[  567.785628][ T6016] usb 6-1: reset high-speed USB device number 41 using dummy_hcd
[  567.817603][   T10] usb 4-1: new low-speed USB device number 102 using dummy_hcd
[  567.818804][ T6016] usb 6-1: device descriptor read/8, error -32
[  567.980462][   T10] usb 4-1: config 0 has an invalid interface number: 168 but max is 0
[  567.990058][ T6016] raw-gadget.0 gadget.5: failed to queue suspend event
[  567.998854][   T10] usb 4-1: config 0 has no interface number 0
[  568.013727][   T10] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8
[  568.037808][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.060080][   T10] usb 4-1: config 0 descriptor??
[  568.069378][   T10] lan78xx 4-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported
[  568.093827][   T10] lan78xx 4-1:0.168: probe with driver lan78xx failed with error -5
[  568.149756][   T24] usb 6-1: USB disconnect, device number 41
[  568.167915][   T24] raw-gadget.0 gadget.5: failed to queue reset event
[  568.255851][   T24] raw-gadget.0 gadget.5: failed to queue resume event
[  568.294280][   T10] usb 4-1: USB disconnect, device number 102
[  568.335895][   T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  568.506158][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  568.513803][   T24] raw-gadget.0 gadget.5: failed to queue reset event
[  568.555325][ T6206] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  568.591122][   T24] raw-gadget.0 gadget.5: failed to queue resume event
[  568.638313][T16546] /dev/rnullb0: Can't open blockdev
[  568.673377][   T24] usb 6-1: device descriptor read/64, error -32
[  568.726416][ T6206] usb 8-1: Using ep0 maxpacket: 32
[  568.758761][ T6206] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[  568.767664][ T6206] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.778165][ T6206] usb 8-1: config 0 has no interface number 0
[  568.790308][ T6206] usb 8-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  568.805201][   T24] raw-gadget.0 gadget.5: failed to queue suspend event
[  568.814740][   T24] raw-gadget.0 gadget.5: failed to queue reset event
[  568.821551][ T6206] usb 8-1: config 0 interface 196 has no altsetting 0
[  568.857307][ T6206] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  568.867323][ T6206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.886864][ T6206] usb 8-1: Product: syz
[  568.891432][ T6206] usb 8-1: Manufacturer: syz
[  568.904005][   T24] raw-gadget.0 gadget.5: failed to queue resume event
[  568.910939][ T6206] usb 8-1: SerialNumber: syz
[  568.922621][ T6206] usb 8-1: config 0 descriptor??
[  568.933236][ T6206] ipheth 8-1:0.196: Unable to find alternate settings interface
[  568.985167][   T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  568.993408][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  569.003064][   T24] raw-gadget.0 gadget.5: failed to queue reset event
[  569.007299][T16559] sit0: entered promiscuous mode
[  569.024874][T16559] netlink: 'syz.6.3146': attribute type 1 has an invalid length.
[  569.033022][T16559] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3146'.
[  569.090900][   T24] raw-gadget.0 gadget.5: failed to queue resume event
[  569.166444][   T24] usb 6-1: device descriptor read/64, error -32
[  569.168614][T16573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.189619][   T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  569.200393][T16573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  569.221762][T16579] /dev/rnullb0: Can't open blockdev
[  569.249584][T16581] /dev/rnullb0: Can't open blockdev
[  569.279140][T16583] /dev/rnullb0: Can't open blockdev
[  569.294312][   T24] raw-gadget.0 gadget.5: failed to queue suspend event
[  569.301522][   T24] usb usb6-port1: attempt power cycle
[  569.307370][   T24] raw-gadget.0 gadget.5: failed to queue disconnect event
[  569.315353][   T24] raw-gadget.0 gadget.5: failed to queue reset event
[  569.337895][T16588] /dev/rnullb0: Can't open blockdev
[  569.369737][   T10] usb 4-1: Using ep0 maxpacket: 32
[  569.376827][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  569.388521][   T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  569.391327][   T24] raw-gadget.0 gadget.5: failed to queue resume event
[  569.399850][   T10] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  569.407413][   T24] raw-gadget.0 gadget.5: failed to queue reset event
[  569.428115][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.437939][   T10] usb 4-1: Product: syz
[  569.442139][   T10] usb 4-1: Manufacturer: syz
[  569.449103][   T10] usb 4-1: SerialNumber: syz
[  569.456375][   T10] usb 4-1: config 0 descriptor??
[  569.646288][   T24] raw-gadget.0 gadget.5: failed to queue resume event
[  569.683571][ T6016] usb 4-1: USB disconnect, device number 103
[  569.711823][   T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  569.731927][ T6206] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  569.731999][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  569.747011][   T24] usb 6-1: device descriptor read/8, error -32
[  569.882143][   T24] raw-gadget.0 gadget.5: failed to queue suspend event
[  569.889513][   T24] raw-gadget.0 gadget.5: failed to queue reset event
[  569.913754][ T6206] usb 7-1: Using ep0 maxpacket: 16
[  569.921885][ T6206] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  569.933724][ T6206] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  569.942913][ T6206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.951116][ T6206] usb 7-1: Product: syz
[  569.955289][ T6206] usb 7-1: Manufacturer: syz
[  569.961639][ T6206] usb 7-1: SerialNumber: syz
[  569.967196][   T24] raw-gadget.0 gadget.5: failed to queue resume event
[  569.974548][ T6206] usb 7-1: config 0 descriptor??
[  569.980756][ T6206] hub 7-1:0.0: bad descriptor, ignoring hub
[  569.986680][ T6206] hub 7-1:0.0: probe with driver hub failed with error -5
[  569.996047][ T6206] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  570.013028][ T6206] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2
[  570.035341][T14831] udevd[14831]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  570.054521][   T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  570.074316][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  570.081819][   T24] usb 6-1: device descriptor read/8, error -32
[  570.202396][   T24] raw-gadget.0 gadget.5: failed to queue suspend event
[  570.210890][   T24] usb usb6-port1: unable to enumerate USB device
[  570.309604][ T6206] usb 7-1: USB disconnect, device number 29
[  570.514051][   T24] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[  570.695254][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[  570.704064][   T24] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  570.716936][   T24] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  570.728510][   T24] usb 4-1: config 1 interface 0 has no altsetting 0
[  570.740238][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40
[  570.749381][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.757377][   T24] usb 4-1: Product: syz
[  570.762724][   T24] usb 4-1: Manufacturer: syz
[  570.767322][   T24] usb 4-1: SerialNumber: syz
[  570.773865][T16597] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  571.176351][ T5947] usb 8-1: USB disconnect, device number 25
[  571.187998][   T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input62
[  571.205056][ T5222] bcm5974 4-1:1.0: could not read from device
[  571.213334][ T5222] bcm5974 4-1:1.0: could not read from device
[  571.222781][ T5222] bcm5974 4-1:1.0: could not read from device
[  571.224000][   T24] usb 4-1: USB disconnect, device number 104
[  571.237781][ T5222] bcm5974 4-1:1.0: could not read from device
[  571.245254][   T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  571.255006][T16608] can0: slcan on ptm0.
[  571.375301][T16607] can0 (unregistered): slcan off ptm0.
[  571.401664][   T10] usb 7-1: device descriptor read/64, error -71
[  571.667669][ T5878] Bluetooth: hci1: command tx timeout
[  571.674472][   T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  571.831606][   T10] usb 7-1: device descriptor read/64, error -71
[  571.956892][   T10] usb usb7-port1: attempt power cycle
[  572.332792][   T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  572.374131][   T10] usb 7-1: device descriptor read/8, error -71
[  572.404056][T16653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.418116][T16653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  572.432608][T16655] /dev/rnullb0: Can't open blockdev
[  572.641009][   T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  572.664886][   T10] usb 7-1: device descriptor read/8, error -71
[  572.745732][T16672] usb usb9: usbfs: process 16672 (syz.7.3171) did not claim interface 0 before use
[  572.794230][   T10] usb usb7-port1: unable to enumerate USB device
[  572.869183][T16682] /dev/rnullb0: Can't open blockdev
[  572.964250][T16684] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3175'.
[  573.248878][T16706] binder: 16705:16706 ioctl c0306201 200000000080 returned -14
[  573.300146][T16715] netlink: 'syz.5.3183': attribute type 1 has an invalid length.
[  573.444581][   T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  573.560713][   T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  573.626497][   T10] usb 8-1: Using ep0 maxpacket: 32
[  573.633394][   T10] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  573.653636][   T10] usb 8-1: config 0 has no interface number 0
[  573.664217][   T10] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  573.673560][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.683110][   T10] usb 8-1: Product: syz
[  573.687427][   T10] usb 8-1: Manufacturer: syz
[  573.696633][   T10] usb 8-1: SerialNumber: syz
[  573.705377][   T10] usb 8-1: config 0 descriptor??
[  573.716143][   T10] smsc95xx v2.0.0
[  573.721148][   T24] usb 4-1: Using ep0 maxpacket: 32
[  573.727654][   T24] usb 4-1: config 0 has an invalid interface number: 96 but max is 0
[  573.736453][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  573.747802][   T24] usb 4-1: config 0 has no interface number 0
[  573.754487][   T24] usb 4-1: config 0 interface 96 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  573.768225][   T24] usb 4-1: config 0 interface 96 has no altsetting 0
[  573.776890][   T24] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  573.786442][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.794450][   T24] usb 4-1: Product: syz
[  573.799264][   T24] usb 4-1: Manufacturer: syz
[  573.803873][   T24] usb 4-1: SerialNumber: syz
[  573.825480][   T24] usb 4-1: config 0 descriptor??
[  573.839366][   T24] port100 4-1:0.96: NFC: Could not find bulk-in or bulk-out endpoint
[  573.922813][T16727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  573.930231][   T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  573.932272][T16727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.957480][   T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  573.975083][   T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  573.986447][   T10] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71
[  573.997300][   T10] usb 8-1: USB disconnect, device number 26
[  574.003077][T16732] /dev/rnullb0: Can't open blockdev
[  574.007115][T14831] udevd[14831]: setting mode of /dev/bus/usb/008/026 to 020664 failed: No such file or directory
[  574.019389][T14831] udevd[14831]: setting owner of /dev/bus/usb/008/026 to uid=0, gid=0 failed: No such file or directory
[  574.054418][ T5947] usb 4-1: USB disconnect, device number 105
[  574.195975][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3193'.
[  574.314736][T16750] /dev/rnullb0: Can't open blockdev
[  574.514543][   T10] usb 8-1: new low-speed USB device number 27 using dummy_hcd
[  574.538180][T16755] /dev/rnullb0: Can't open blockdev
[  574.650938][T16766] /dev/rnullb0: Can't open blockdev
[  574.656941][T16767] /dev/rnullb0: Can't open blockdev
[  574.675445][   T10] usb 8-1: Invalid ep0 maxpacket: 32
[  574.789939][T16777] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3205'.
[  574.805063][T16777] unsupported nlmsg_type 40
[  574.825950][   T10] usb 8-1: new low-speed USB device number 28 using dummy_hcd
[  574.994593][   T10] usb 8-1: Invalid ep0 maxpacket: 32
[  575.000393][   T10] usb usb8-port1: attempt power cycle
[  575.368885][   T10] usb 8-1: new low-speed USB device number 29 using dummy_hcd
[  575.462537][   T10] usb 8-1: Invalid ep0 maxpacket: 32
[  575.604110][   T10] usb 8-1: new low-speed USB device number 30 using dummy_hcd
[  575.625730][   T10] usb 8-1: Invalid ep0 maxpacket: 32
[  575.633653][   T10] usb usb8-port1: unable to enumerate USB device
[  575.860212][  T986] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  576.031623][  T986] usb 7-1: Using ep0 maxpacket: 32
[  576.041139][  T986] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  576.055457][  T986] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  576.065096][  T986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.073227][  T986] usb 7-1: Product: syz
[  576.080227][  T986] usb 7-1: Manufacturer: syz
[  576.089065][  T986] usb 7-1: SerialNumber: syz
[  576.097481][  T986] usb 7-1: config 0 descriptor??
[  576.104916][  T986] port100 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  576.327381][   T24] usb 7-1: USB disconnect, device number 34
[  576.713107][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3213'.
[  577.468866][T16816] /dev/rnullb0: Can't open blockdev
[  577.833274][T16831] /dev/rnullb0: Can't open blockdev
[  577.932040][T16837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  577.946169][T16837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.170320][ T5974] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  578.352078][ T5974] usb 4-1: Using ep0 maxpacket: 32
[  578.359682][ T5974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  578.377274][ T5974] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  578.390948][ T5974] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  578.400744][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.409553][ T5974] usb 4-1: Product: syz
[  578.413857][ T5974] usb 4-1: Manufacturer: syz
[  578.418580][ T5974] usb 4-1: SerialNumber: syz
[  578.428772][ T5974] usb 4-1: config 0 descriptor??
[  578.665813][   T24] usb 4-1: USB disconnect, device number 106
[  578.702966][T16847] /dev/rnullb0: Can't open blockdev
[  578.881817][T16857] /dev/rnullb0: Can't open blockdev
[  578.908860][T16859] /dev/rnullb0: Can't open blockdev
[  578.973257][T16861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.987032][T16861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.996811][T16863] 8021q: VLANs not supported on nr0
[  579.171538][T16873] program syz.7.3237 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  579.183408][T16873] /dev/rnullb0: Can't open blockdev
[  579.232214][T16879] /dev/rnullb0: Can't open blockdev
[  579.286831][T16883] /dev/rnullb0: Can't open blockdev
[  579.398549][T16885] netlink: 'syz.3.3242': attribute type 2 has an invalid length.
[  579.413396][T16885] /dev/rnullb0: Can't open blockdev
[  579.485812][  T986] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  579.657763][  T986] usb 8-1: Using ep0 maxpacket: 32
[  579.681260][  T986] usb 8-1: unable to get BOS descriptor or descriptor too short
[  579.701020][  T986] usb 8-1: config 1 has an invalid interface number: 48 but max is 0
[  579.709147][  T986] usb 8-1: config 1 has no interface number 0
[  579.728334][  T986] usb 8-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64
[  579.744082][  T986] usb 8-1: config 1 interface 48 has no altsetting 0
[  579.759380][  T986] usb 8-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=f3.9e
[  579.776876][  T986] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.806768][  T986] usb 8-1: Product: syz
[  579.810979][  T986] usb 8-1: Manufacturer: syz
[  579.815621][  T986] usb 8-1: SerialNumber: syz
[  579.841773][T16878] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  579.849483][ T5974] usb 4-1: new full-speed USB device number 107 using dummy_hcd
[  580.022318][ T5974] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  580.038242][ T5974] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  580.059329][ T5974] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  580.074122][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  580.093113][ T5974] usb 4-1: SerialNumber: syz
[  580.109886][  T986] ti_usb_3410_5052 8-1:1.48: TI USB 3410 1 port adapter converter detected
[  580.111304][ T5974] cdc_ether 4-1:1.0: skipping garbage
[  580.132788][ T5974] usb 4-1: bad CDC descriptors
[  580.141487][ T5974] usb-storage 4-1:1.0: USB Mass Storage device detected
[  580.142613][  T986] usb 8-1: USB disconnect, device number 31
[  580.151874][ T5974] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  580.168610][T16895] /dev/rnullb0: Can't open blockdev
[  580.330563][T16887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.345973][T16887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  580.363514][ T5974] usb 4-1: USB disconnect, device number 107
[  580.979357][T16910] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  580.985941][T16910] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  581.273984][T16914] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3253'.
[  581.299527][T16914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  581.331744][T16915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.355665][T16915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.382468][T16914] /dev/rnullb0: Can't open blockdev
[  581.650039][T16919] syzkaller1: entered promiscuous mode
[  581.655696][T16919] syzkaller1: entered allmulticast mode
[  581.726622][T16927] block nbd6: Attempted send on invalid socket
[  581.732855][T16927] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  581.742028][T16927] hpfs: hpfs_map_sector(): read error
[  581.961170][T16947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.970319][T16947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.074248][ T5947] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  582.127530][ T6016] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  582.159618][  T986] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  582.234534][ T5947] usb 7-1: Using ep0 maxpacket: 32
[  582.242143][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.252949][ T5947] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  582.265708][ T5947] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8
[  582.274863][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.283331][ T5947] usb 7-1: Product: syz
[  582.287523][ T5947] usb 7-1: Manufacturer: syz
[  582.287923][ T6016] usb 4-1: Using ep0 maxpacket: 8
[  582.292283][ T5947] usb 7-1: SerialNumber: syz
[  582.299182][ T6016] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  582.303287][ T5947] usb 7-1: config 0 descriptor??
[  582.312524][ T6016] usb 4-1: config 179 has no interface number 0
[  582.321686][  T986] usb 8-1: Using ep0 maxpacket: 16
[  582.327223][ T6016] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  582.338942][ T6016] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  582.351672][ T6016] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  582.363913][  T986] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11
[  582.373965][ T6016] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  582.385494][  T986] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  582.395462][ T6016] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  582.408866][  T986] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  582.418597][  T986] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 31017, setting to 1024
[  582.430068][ T6016] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  582.439661][  T986] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024
[  582.450009][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.458824][  T986] usb 8-1: config 1 interface 0 has no altsetting 0
[  582.466460][  T986] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  582.475687][  T986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.477120][T16943] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  582.490916][  T986] ums-sddr09 8-1:1.0: USB Mass Storage device detected
[  582.539514][ T5947] usb 7-1: USB disconnect, device number 35
[  582.708314][  T986] scsi host1: usb-storage 8-1:1.0
[  582.747628][  T986] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input63
[  583.023354][ T5947] usb 4-1: USB disconnect, device number 108
[  583.023386][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  583.038690][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  583.180530][T16973] /dev/rnullb0: Can't open blockdev
[  583.306043][  T986] usb 8-1: USB disconnect, device number 32
[  583.329920][T16977] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  584.020555][ T5947] usb 4-1: new full-speed USB device number 109 using dummy_hcd
[  584.193507][ T5947] usb 4-1: unable to get BOS descriptor or descriptor too short
[  584.217016][ T5947] usb 4-1: not running at top speed; connect to a high speed hub
[  584.233528][ T5947] usb 4-1: config 6 has an invalid interface number: 150 but max is 0
[  584.260260][ T5947] usb 4-1: config 6 has an invalid interface association descriptor of length 2, skipping
[  584.273922][ T5947] usb 4-1: config 6 has no interface number 0
[  584.280416][ T5947] usb 4-1: config 6 interface 150 altsetting 3 endpoint 0x6 has an invalid bInterval 0, changing to 4
[  584.291580][ T5947] usb 4-1: config 6 interface 150 has no altsetting 0
[  584.300719][ T5947] usb 4-1: New USB device found, idVendor=12d1, idProduct=76d8, bcdDevice=5d.76
[  584.309993][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.318610][ T5947] usb 4-1: Product: syz
[  584.324602][ T5947] usb 4-1: Manufacturer: syz
[  584.329276][ T5947] usb 4-1: SerialNumber: syz
[  584.432065][ T1019] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.517728][ T1019] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.606945][ T1019] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.673029][  T986] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  584.697010][ T1019] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.778600][ T5947] usb 4-1: USB disconnect, device number 109
[  584.835830][  T986] usb 8-1: Using ep0 maxpacket: 8
[  584.848041][  T986] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  584.878825][  T986] usb 8-1: config 0 has no interface number 0
[  584.891145][  T986] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  584.902420][ T1019] macsec0: left allmulticast mode
[  584.917709][  T986] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  584.935602][ T1019] veth1_macvtap: left allmulticast mode
[  584.943376][T16996] siw: device registration error -23
[  584.952788][ T1019] macsec0: left promiscuous mode
[  584.958248][ T1019] bridge0: port 3(macsec0) entered disabled state
[  584.963213][  T986] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  584.989803][ T1019] bridge_slave_1: left allmulticast mode
[  584.997928][  T986] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  585.003886][ T1019] bridge_slave_1: left promiscuous mode
[  585.019244][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  585.028842][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  585.036012][  T986] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  585.036122][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  585.056652][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.063960][  T986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.073428][ T1019] bridge_slave_0: left allmulticast mode
[  585.080246][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  585.083534][  T986] usb 8-1: config 0 descriptor??
[  585.087401][ T1019] bridge_slave_0: left promiscuous mode
[  585.099935][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  585.130663][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.147517][T17002] /dev/rnullb0: Can't open blockdev
[  585.149666][  T986] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  585.312773][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  585.347822][   T30] audit: type=1326 audit(1756307135.912:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16991 comm="syz.7.3278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598a18ebe9 code=0x0
[  585.369747][    C1] vkms_vblank_simulate: vblank timer overrun
[  585.395741][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  585.425674][ T1019] bond0 (unregistering): Released all slaves
[  585.498008][  T986] usb 8-1: USB disconnect, device number 33
[  585.504004][    C1] ldusb 8-1:0.55: usb_submit_urb failed (-19)
[  585.554066][T17024] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  585.561175][T17024] /dev/rnullb0: Can't open blockdev
[  585.640212][T17019] /dev/rnullb0: Can't open blockdev
[  585.769078][T17041] /dev/rnullb0: Can't open blockdev
[  585.870868][ T1019] hsr_slave_0: left promiscuous mode
[  585.887841][ T1019] hsr_slave_1: left promiscuous mode
[  585.898147][ T1019] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  585.905731][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0
[  585.914148][ T1019] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  585.921881][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1
[  585.933162][ T1019] veth1_macvtap: left promiscuous mode
[  585.940015][ T1019] veth0_macvtap: left promiscuous mode
[  585.947468][ T1019] veth1_vlan: left promiscuous mode
[  585.952769][ T1019] veth0_vlan: left promiscuous mode
[  586.102513][ T1019] team0 (unregistering): Port device team_slave_1 removed
[  586.113700][ T1019] team0 (unregistering): Port device team_slave_0 removed
[  586.153360][T17054] netlink: 'syz.3.3293': attribute type 19 has an invalid length.
[  586.254287][T16997] chnl_net:caif_netlink_parms(): no params data found
[  586.364958][T16997] bridge0: port 1(bridge_slave_0) entered blocking state
[  586.372094][T16997] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.379814][T16997] bridge_slave_0: entered allmulticast mode
[  586.392597][T16997] bridge_slave_0: entered promiscuous mode
[  586.401437][T16997] bridge0: port 2(bridge_slave_1) entered blocking state
[  586.412194][T16997] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.422210][T16997] bridge_slave_1: entered allmulticast mode
[  586.429495][T16997] bridge_slave_1: entered promiscuous mode
[  586.460929][T16997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  586.487078][T16997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  586.518677][T17074] ./file0: Can't lookup blockdev
[  586.541047][T16997] team0: Port device team_slave_0 added
[  586.569737][T16997] team0: Port device team_slave_1 added
[  586.605077][T17081] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3296'.
[  586.633163][T16997] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.643725][T16997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.670246][T16997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.688754][T16997] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.697092][T16997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.725740][T16997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  586.779379][T16997] hsr_slave_0: entered promiscuous mode
[  586.786878][T16997] hsr_slave_1: entered promiscuous mode
[  586.893378][T17091] /dev/rnullb0: Can't open blockdev
[  586.917429][T17093] /dev/rnullb0: Can't open blockdev
[  586.927293][T16997] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  586.941445][T16997] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  586.963623][T16997] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  586.985675][T16997] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  587.004615][ T5862] usb 4-1: new low-speed USB device number 110 using dummy_hcd
[  587.023685][T17098] 9p: Bad value for 'wfdno'
[  587.148913][T16997] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.166139][ T5862] usb 4-1: device descriptor read/64, error -71
[  587.169621][T16997] 8021q: adding VLAN 0 to HW filter on device team0
[  587.208486][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.215740][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.259604][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.266981][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  587.326222][ T5874] Bluetooth: hci2: command tx timeout
[  587.337847][T17121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  587.364488][T17121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.453748][ T5862] usb 4-1: new low-speed USB device number 111 using dummy_hcd
[  587.503285][T17130] netlink: 'syz.5.3302': attribute type 21 has an invalid length.
[  587.529256][T17130] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3302'.
[  587.569179][T16997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  587.605183][ T5862] usb 4-1: device descriptor read/64, error -71
[  587.650465][  T986] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  587.721390][ T5862] usb usb4-port1: attempt power cycle
[  587.956214][T16997] veth0_vlan: entered promiscuous mode
[  588.005616][T16997] veth1_vlan: entered promiscuous mode
[  588.039623][T17170] netlink: 'syz.7.3308': attribute type 11 has an invalid length.
[  588.049736][T16997] veth0_macvtap: entered promiscuous mode
[  588.064950][T16997] veth1_macvtap: entered promiscuous mode
[  588.070840][T17170] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3308'.
[  588.097971][T16997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  588.105406][ T5862] usb 4-1: new low-speed USB device number 112 using dummy_hcd
[  588.120096][T16997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  588.139243][ T5862] usb 4-1: device descriptor read/8, error -71
[  588.140539][ T2968] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.154936][ T2968] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.166301][ T2968] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.176869][ T2968] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  588.237560][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.249946][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.269998][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.278991][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.342674][ T5974] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  588.394941][ T5862] usb 4-1: new low-speed USB device number 113 using dummy_hcd
[  588.419489][ T5862] usb 4-1: device descriptor read/8, error -71
[  588.510374][T17193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.516389][T17194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  588.524912][ T5974] usb 8-1: config index 0 descriptor too short (expected 65183, got 72)
[  588.544365][ T5862] usb usb4-port1: unable to enumerate USB device
[  588.551792][T17193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.563667][ T5974] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  588.579358][ T5974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.589380][ T5974] usb 8-1: Product: syz
[  588.593572][ T5974] usb 8-1: Manufacturer: syz
[  588.601910][ T5974] usb 8-1: SerialNumber: syz
[  588.623790][ T5974] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  588.641390][ T5862] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  588.875150][T17170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.894133][T17170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.908065][T17170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.925316][T17170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.944000][T17170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.965343][T17170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  589.616799][ T5874] Bluetooth: hci2: command 0x041b tx timeout
[  590.652890][ T5974] usb 8-1: USB disconnect, device number 34
[  590.661250][ T5862] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  590.673614][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  590.679937][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  590.740384][ T5862] ath9k_htc: Failed to initialize the device
[  590.754827][ T5974] usb 8-1: ath9k_htc: USB layer deinitialized
[  590.870616][T17202] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  590.912509][T17202] /dev/rnullb0: Can't open blockdev
[  590.931561][   T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.122361][ T5974] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  591.287582][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.299271][ T5974] usb 8-1: Using ep0 maxpacket: 32
[  591.313947][ T5974] usb 8-1: config index 0 descriptor too short (expected 241, got 72)
[  591.333197][ T5974] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  591.367963][ T5974] usb 8-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da
[  591.387631][ T5974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.412418][ T5974] usb 8-1: config 0 descriptor??
[  591.427021][ T5974] mos7840 8-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected
[  591.439141][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.481039][T17218] /dev/rnullb0: Can't open blockdev
[  591.537504][   T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.596595][T17226] /dev/rnullb0: Can't open blockdev
[  591.713699][   T36] bridge_slave_1: left allmulticast mode
[  591.720007][   T36] bridge_slave_1: left promiscuous mode
[  591.727918][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.741363][   T36] bridge_slave_0: left allmulticast mode
[  591.753198][   T36] bridge_slave_0: left promiscuous mode
[  591.760754][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.760784][T17203] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  591.774305][T17203] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  591.780473][ T5878] Bluetooth: hci2: command 0x041b tx timeout
[  591.789067][T17203] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  591.795171][T17203] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  591.804800][T17203] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  591.814482][T17203] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  591.823365][T17203] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  591.833715][T17203] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  591.918024][   T36] dvmrp0 (unregistering): left allmulticast mode
[  591.924866][T17233] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  591.985582][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  591.996495][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  592.013762][   T36] bond0 (unregistering): Released all slaves
[  592.095483][ T6016] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  592.144731][   T36] tipc: Disabling bearer <udp:s>
[  592.146030][ T5974] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[  592.159786][   T36] tipc: Left network mode
[  592.167893][ T5974] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71
[  592.202705][ T5974] usb 8-1: USB disconnect, device number 35
[  592.225611][ T5974] mos7840 8-1:0.0: device disconnected
[  592.285194][ T6016] usb 4-1: Using ep0 maxpacket: 8
[  592.311716][ T6016] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023
[  592.327146][ T6016] usb 4-1: config 1 interface 0 has no altsetting 0
[  592.333140][T17249] syzkaller1: entered promiscuous mode
[  592.339266][ T6016] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  592.359532][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.380634][ T6016] usb 4-1: Product: Д
[  592.393375][T17249] syzkaller1: entered allmulticast mode
[  592.393699][ T6016] usb 4-1: Manufacturer: 䰊
[  592.424557][T17242] /dev/rnullb0: Can't open blockdev
[  592.431741][ T6016] usb 4-1: SerialNumber: э
[  592.462822][T17231] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  592.651204][T17266] sg_read: process 40 (syz.8.3331) changed security contexts after opening file descriptor, this is not allowed.
[  592.745245][ T6016] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 5 proto 1 vid 0x04B8 pid 0x0202
[  592.805992][T17266] /dev/rnullb0: Can't open blockdev
[  592.816205][T17274] /dev/rnullb0: Can't open blockdev
[  592.828212][T17276] /dev/rnullb0: Can't open blockdev
[  592.874454][ T6016] usb 4-1: USB disconnect, device number 114
[  592.925723][ T6016] usblp0: removed
[  592.957618][   T36] hsr_slave_0: left promiscuous mode
[  592.978692][   T36] hsr_slave_1: left promiscuous mode
[  592.988819][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  593.035623][T17294] /dev/rnullb0: Can't open blockdev
[  593.040517][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  593.065538][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.097058][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.149640][T17300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  593.173114][   T36] veth1_macvtap: left promiscuous mode
[  593.179660][T17304] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  593.188671][T17300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.189552][   T36] veth0_macvtap: left promiscuous mode
[  593.202682][T17304] /dev/rnullb0: Can't open blockdev
[  593.211258][   T36] veth1_vlan: left promiscuous mode
[  593.216671][   T36] 
@�: left promiscuous mode
[  593.435856][T17319] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  593.444473][T17319] /dev/rnullb0: Can't open blockdev
[  593.486027][ T5878] Bluetooth: hci4: command 0x0c1a tx timeout
[  593.516029][   T36] team0 (unregistering): Port device team_slave_1 removed
[  593.532737][   T36] team0 (unregistering): Port device team_slave_0 removed
[  593.582241][ T5862] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  593.760542][ T5862] usb 8-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[  593.812438][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[  593.849722][ T5862] usb 8-1: Product: syz
[  593.855241][T17336] /dev/rnullb0: Can't open blockdev
[  593.860813][ T5862] usb 8-1: SerialNumber: syz
[  593.878789][ T5862] usb 8-1: config 0 descriptor??
[  593.891052][T17336] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2
[  593.913565][ T5878] Bluetooth: hci0: command 0x0405 tx timeout
[  593.991882][T17340] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  594.000644][ T5878] Bluetooth: hci2: command 0x041b tx timeout
[  594.003810][T17340] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  594.003831][T17340] CPU: 0 UID: 0 PID: 17340 Comm: syz.5.3348 Not tainted syzkaller #0 PREEMPT(full) 
[  594.009952][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout
[  594.018225][T17340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  594.043648][T17340] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  594.049242][T17340] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3
[  594.069038][T17340] RSP: 0018:ffffc900045a7a40 EFLAGS: 00010206
[  594.075104][T17340] RAX: 0000000000000005 RBX: ffff8880777fb300 RCX: 0000000000080000
[  594.083168][T17340] RDX: ffffc9000b961000 RSI: 00000000000003b7 RDI: 00000000000003b8
[  594.091150][T17340] RBP: 0000000000000000 R08: ffff88814cfe912f R09: 1ffff110299fd225
[  594.099146][T17340] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028
[  594.107560][T17340] R13: dffffc0000000000 R14: ffff88814cfe9000 R15: dffffc0000000000
[  594.115719][T17340] FS:  00007f6bcf6de6c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000
[  594.124677][T17340] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  594.131381][T17340] CR2: 00007f6bcf6ddf98 CR3: 000000005729e000 CR4: 00000000003526f0
[  594.139369][T17340] Call Trace:
[  594.142637][T17340]  <TASK>
[  594.145559][T17340]  pcl818_detach+0x66/0xd0
[  594.149988][T17340]  comedi_device_detach_locked+0x175/0x750
[  594.155957][T17340]  ? security_capable+0x7e/0x2e0
[  594.160884][T17340]  comedi_unlocked_ioctl+0xcde/0x1020
[  594.166276][T17340]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  594.172118][T17340]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  594.177848][T17340]  ? __se_sys_futex+0x36f/0x400
[  594.182701][T17340]  ? __fget_files+0x3a0/0x420
[  594.187473][T17340]  ? __fget_files+0x2a/0x420
[  594.192056][T17340]  ? bpf_lsm_file_ioctl+0x9/0x20
[  594.196995][T17340]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  594.202805][T17340]  __se_sys_ioctl+0xf9/0x170
[  594.207410][T17340]  do_syscall_64+0xfa/0xfa0
[  594.212028][T17340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.218085][T17340]  ? clear_bhb_loop+0x60/0xb0
[  594.222751][T17340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.228655][T17340] RIP: 0033:0x7f6bce78ebe9
[  594.233081][T17340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  594.252681][T17340] RSP: 002b:00007f6bcf6de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  594.261097][T17340] RAX: ffffffffffffffda RBX: 00007f6bce9b5fa0 RCX: 00007f6bce78ebe9
[  594.269144][T17340] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  594.277105][T17340] RBP: 00007f6bce811e19 R08: 0000000000000000 R09: 0000000000000000
[  594.285086][T17340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  594.293042][T17340] R13: 00007f6bce9b6038 R14: 00007f6bce9b5fa0 R15: 00007fff5a679428
[  594.301025][T17340]  </TASK>
[  594.304041][T17340] Modules linked in:
[  594.309514][T17340] ---[ end trace 0000000000000000 ]---
[  594.352936][T17340] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  594.367267][T17340] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3
[  594.430507][T17340] RSP: 0018:ffffc900045a7a40 EFLAGS: 00010206
[  594.447924][   T36] IPVS: stop unused estimator thread 0...
[  594.454931][T17340] RAX: 0000000000000005 RBX: ffff8880777fb300 RCX: 0000000000080000
[  594.474998][T17342] 9pnet: p9_errstr2errno: server reported unknown error �@��������
[  594.489917][T17340] RDX: ffffc9000b961000 RSI: 00000000000003b7 RDI: 00000000000003b8
[  594.506315][ T5874] Bluetooth: hci0: unexpected event for opcode 0x2031
[  594.513486][T17340] RBP: 0000000000000000 R08: ffff88814cfe912f R09: 1ffff110299fd225
[  594.515063][ T5862] ldusb 8-1:0.0: Interrupt in endpoint not found
[  594.528239][T17340] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028
[  594.528260][T17340] R13: dffffc0000000000 R14: ffff88814cfe9000 R15: dffffc0000000000
[  594.528276][T17340] FS:  00007f6bcf6de6c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000
[  594.528292][T17340] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  594.560487][T17340] CR2: 00005591bcf1c950 CR3: 000000005729e000 CR4: 00000000003526f0
[  594.569159][T17340] Kernel panic - not syncing: Fatal exception
[  594.575712][T17340] Kernel Offset: disabled
[  594.580024][T17340] Rebooting in 86400 seconds..