last executing test programs:

2m25.639846299s ago: executing program 3 (id=422):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf000000000000000000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x5, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34f0a87871305eb2}, 0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0)
recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f00000007c0)=""/251, 0xfb}, 0x10040)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece)
r7 = accept4(r3, 0x0, 0x0, 0x80000)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r8, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0xfe}, {}, @connect={{}, {0x0, 0x5}}}], 0x70)
write$P9_RREADDIR(r8, &(0x7f0000000300)={0x8b, 0x29, 0x1, {0x2, [{{0x10, 0x2, 0x4}, 0x6, 0x2, 0x8, './cgroup'}, {{0xc9, 0x1}, 0x3, 0x5, 0x8, './cgroup'}, {{0x4, 0x0, 0x6}, 0x5, 0x8, 0x8, './cgroup'}, {{0x80, 0x4, 0x4}, 0x4, 0xb8, 0x8, './cgroup'}]}}, 0x8b)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0})
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0)

2m24.716863409s ago: executing program 3 (id=433):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60b02, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x10010, r0, 0xe305)
syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
clock_gettime(0x0, &(0x7f0000000240)={<r1=>0x0, <r2=>0x0})
utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {r1, r2/1000+60000}})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0xff, @any, 0x0, 0x2}, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000006080)=""/4097, 0x1001}, {&(0x7f0000000000)=""/215, 0xd7}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002f00)=""/4107, 0x100b}, {&(0x7f0000001ac0)=""/4112, 0x1010}, {&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000001180)=""/35, 0x23}, {&(0x7f00000011c0)=""/158, 0x9e}], 0x5}, 0xf}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m24.619096258s ago: executing program 3 (id=435):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xdb) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="0eb8027dec000000070000000000000000"], 0x18}], 0x1}, 0x0) (async)
write$qrtrtun(0xffffffffffffffff, &(0x7f00000000c0), 0x0) (async)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80) (async)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1}) (async)
r8 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x101040) (async)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0) (async)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r3)
sendmsg$TIPC_NL_NET_SET(r9, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000001b80)={0x12a8, r10, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb98}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffffff80, @remote, 0x10}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_NODE={0x1010, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8239}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x618}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1fb}]}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x4040}, 0x48004) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r11, <r12=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r7, r12, 0x80, 0x5, 0x9, 0x20000000, {0x0, 0x1, 0x1c, 0xd, 0x5, 0x401, 0x0, 0xa, 0x0, 0x52, 0x8000, 0xffffff4c, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) (async)
ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000180)={r12, 0x28, 0x0, 0x102, 0x81, 0x5, 0x400000})
keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0)

2m24.561765745s ago: executing program 3 (id=436):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260)
socket$inet6(0xa, 0x1, 0x40fa)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbe000)
pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="c220e920ae1d947591bd4efd18860cb5ac878d79fa81200914b384f99744b39c42b3b6fbd8d45fd4d0ad5851db9c872c09215bd9e53df33443c26512be63c00fca37b5a2ff95c07462e70983099eecf7ea1a3504a29c952862cc84923729d74799c910a1895f2c3abae2bdef44162b471124471cdc284ee6a3896e0472f6b99654758e7793585c", 0x87}, {&(0x7f0000000140)="c70599c321c4e491d727685a722336ff18bb11132dc566", 0x17}], 0x2, 0x8, 0x2, 0x10)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00')
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0xf00, 0x0)
fanotify_mark(r7, 0x1, 0x10001011, r6, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x189)
read$FUSE(r7, &(0x7f00000024c0)={0x2020}, 0x2020)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x2)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000001280)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0})

2m23.553388785s ago: executing program 3 (id=443):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r1, 0xd6baf000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, r2, &(0x7f0000000140))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
set_mempolicy(0x4, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x4000000001, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000200), 0x47b7, 0x4100)
r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat(r6, &(0x7f0000000040)='./cgroup\x00', 0x42200, 0x35)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280)={<r7=>0xffffffffffffffff}, 0x0, {0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f00000003c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r7}}, 0x18)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000300)=[0x0], 0x0, 0xfffffffffffffffe, 0x0})
r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=ANY=[@ANYBLOB="bc0700002600010022bd7000fedbdf25ac0700800c00010002000000000000001103658045012180d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d38880800fa00", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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"], 0x7bc}], 0x1}, 0x0)
ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000180)={{&(0x7f00009e0000/0x4000)=nil, 0x4000}})
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[], 0xec}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FIOCLEX(r1, 0x5451)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, 0x0, 0x0)
mremap(&(0x7f000085f000/0x1000)=nil, 0x1000, 0x13000, 0x4, &(0x7f0000018000/0x13000)=nil)

2m23.251599904s ago: executing program 3 (id=445):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x1, 0xbfb, 0x1})
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="501c9e14a1923fcb7ac4fee3460d864677ceb5998c431360480193bbdc", 0x1d}], 0x1, &(0x7f0000000100)="de96ae360cefe1a44350dbbbb43c80d9d9aaf1648bdbb391dba1fa11b64baeadcd074a", 0x23, 0x51}, 0x20000000)
r3 = signalfd4(r0, &(0x7f0000000180)={[0x2]}, 0x8, 0x800)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000200)=0x4, 0x4)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000003c0))
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0xeeef0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000440)={<r7=>0x0, 0x7}, &(0x7f0000000480)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000004c0)={r7, 0x8b2, 0x4}, 0x8)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000500)={"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"})
sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x1409, 0x200, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x88000)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000a00))
syz_open_dev$sndctrl(&(0x7f0000000a40), 0x3, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x9c, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc51e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\xeb['}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004085}, 0x8000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000c40)={r7, @in6={{0xa, 0x4e20, 0x9, @private1, 0x4b4d}}, [0x7, 0x2, 0x9, 0x3, 0x5, 0x8, 0x7fffffffffffffff, 0xa, 0xc, 0x2, 0x1, 0x7, 0x5, 0x2824, 0x861]}, &(0x7f0000000d40)=0x100)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000d80)={[0x1, 0x8000000000000001, 0xfffffffffffffffb, 0x8b1b, 0x9, 0x1ff, 0x8000000000000000, 0x100000001, 0x8, 0x800, 0x2, 0xf, 0xfffffffffffffff9, 0x4, 0x7, 0x5], 0x0, 0x80000})
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r5)
sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x1ac, r10, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x301a}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xae, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @rand_addr=' \x01\x00', 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa79}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff65}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5ad}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x844400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x898e}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100))
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001140)={0x10001, 0x1, 0x80a0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000001180)=@null)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000011c0)=0x8)

2m23.009443221s ago: executing program 32 (id=445):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x1, 0xbfb, 0x1})
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="501c9e14a1923fcb7ac4fee3460d864677ceb5998c431360480193bbdc", 0x1d}], 0x1, &(0x7f0000000100)="de96ae360cefe1a44350dbbbb43c80d9d9aaf1648bdbb391dba1fa11b64baeadcd074a", 0x23, 0x51}, 0x20000000)
r3 = signalfd4(r0, &(0x7f0000000180)={[0x2]}, 0x8, 0x800)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000200)=0x4, 0x4)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000003c0))
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0xeeef0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000440)={<r7=>0x0, 0x7}, &(0x7f0000000480)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000004c0)={r7, 0x8b2, 0x4}, 0x8)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000500)={"19179e372cd492761dcdd3a925c8d917cec48bb8e6c206ff03fce74d8ee2d32e8c4d5eabbe17a02ab23c652c91f77f69b4a63a0cddf589a7acd443af2750f95f1305ae89c26a26857fe7729cf7ddd659b0761155973c7816e8958a39f91dfae83acda3346c42b046352e03ea34fc43af668693c56181a76821d63e201673ffa8f3a5ae47e9236da8694ded9605247c38b95cd8fb0f072ead3f07f84afd3278439bc65ba50cc1279c1347d8756a046767dbbec0e267c3273bcbe1109cf98868e31f436760c5244a19cf22055b779c65a6b217e6606583406744af8762207b00299aaa363e58587c8246d45e238e586f891a0300a0512959e5197029d5025c17193e302eae9267b038f43db75229e9c6186a6a333c4ccd66d1419792d28c6cd5605e4693405273061a5f4bfe7b096a63aa37b02bf459f5248f0b5780b5074dacbce98e7fe5fe4281645b3eafe5a93806440ec1d2b5d4d7cb0c5c3fe2f21e6a76cb595b5aafa7a0b4c72160333aa2eca5d576b753c5775944e6e505610a6c1b22f715f413df300fef25d013189953be6e3b754a8b57f87faa0da6bb8e0b1856f695e92cd2c52ce3f42f74f777409c39631a29a5d16f70f28a38f5c77d0555a0dccba63df8ef5e0c3994b580da1f7de8bcafe9eae7f7c822eac7efd6d2c51cebaa7d5bbcd8e188bfa6560bc35fb157e377e47fba1123205473c2445b15ec222150ca3f131f29781eae7d92cdc14b16f570f01e6ee8716bdf3c2153b67d1109508963cab5ce79bd8d06d23f20f7fefd5ff90a7697d4f851fd62e0527296b136d6a4cd9b62085aa47e57d4be8631785e8221129751d32feb30f3214012c188ce1c851f5cacf8fe8a664ee8da30e807bbf8824490e4134172ae9fb7c409adc21d761b3222d56211dc1883f7234a32f302ec85d69d5001f1d5b9b79bf913c23fe94c1d814023d34ec11f052af5195786e8efafa70bfb826901a5faddc4fe30705e96229de8cdda3eb22038bf66f8b2b202984f425139035a7005755a6af4a0f1937c90af549831d01a35cb5314dd6dd7e9982363d934b7e7e9b66de55e040e5de4cf2713abda5f1de547f087091dd080f18a892b8800f686eda05a795ea36abbd47ed9903485cfad95b5f90b445911f5ad6ff73b7bb11534fdfef44a81c7831779fe8894b5add52d51ce7fa8b5b195240aa560bfd09b025a84fe647044e75b33d5759c5f42c60066979c69e85ef765eb729534f08a90e944ccf0388f806c0275749158e08b232566b479c8ff03c284b62c812052e24ecabc0701a88f4fa4003940afa96f651d36ff33561e12d9a9f86c77f0912c4212d9a7268d2c616ad80c76f05fba090265aa2a0ab56d1b3df838d35c036c99553b935197f7061dc5c8031fce24906537651933695f2a456e828df4af01b806fae0ef2a50c543720fa3e8852ee02d0c"})
sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x1409, 0x200, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x88000)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000a00))
syz_open_dev$sndctrl(&(0x7f0000000a40), 0x3, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x9c, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc51e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\xeb['}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004085}, 0x8000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000c40)={r7, @in6={{0xa, 0x4e20, 0x9, @private1, 0x4b4d}}, [0x7, 0x2, 0x9, 0x3, 0x5, 0x8, 0x7fffffffffffffff, 0xa, 0xc, 0x2, 0x1, 0x7, 0x5, 0x2824, 0x861]}, &(0x7f0000000d40)=0x100)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000d80)={[0x1, 0x8000000000000001, 0xfffffffffffffffb, 0x8b1b, 0x9, 0x1ff, 0x8000000000000000, 0x100000001, 0x8, 0x800, 0x2, 0xf, 0xfffffffffffffff9, 0x4, 0x7, 0x5], 0x0, 0x80000})
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r5)
sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x1ac, r10, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x301a}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xae, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @rand_addr=' \x01\x00', 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa79}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff65}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5ad}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x844400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x898e}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100))
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001140)={0x10001, 0x1, 0x80a0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000001180)=@null)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000011c0)=0x8)

11.180531705s ago: executing program 0 (id=1558):
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
semtimedop(0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102389, 0x18ff5, 0x1000000300)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:4\t\n', @ANYRESHEX=r1], 0xa) (async)
ioprio_set$pid(0x1, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r3, r3, 0x0, 0x7ffff000)

10.261314368s ago: executing program 0 (id=1571):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x289000, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x173040, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000100)) (async, rerun: 32)
r3 = accept4$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @remote, @rose, 0x0, [@netrom, @netrom, @rose, @bcast, @remote, @bcast]}, &(0x7f0000000180)=0x40, 0x80000) (rerun: 32)
ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f00000001c0)={'syz_tun\x00', 0xa7}) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r5=>0x0, 0x4, 0x2, 0xfe, 0x4, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x17, 0x80, 0xfffffe36, 0xa717}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'gre0\x00', <r6=>0x0, 0x7, 0x8, 0x7fff, 0x8000, {{0x25, 0x4, 0x1, 0x2, 0x94, 0x65, 0x0, 0x4, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x47, 0x1, 0x7, [{@multicast2, 0xf}]}, @lsrr={0x83, 0xb, 0x71, [@empty, @private=0xa010101]}, @timestamp_addr={0x44, 0x4c, 0x7c, 0x1, 0xa, [{@empty, 0x2}, {@local, 0x4}, {@broadcast, 0x8}, {@multicast2, 0x4a59}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd3}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x64e878e0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@rand_addr=0x64010100, 0x1}]}, @timestamp={0x44, 0x8, 0xf1, 0x0, 0x4, [0x800]}, @end, @generic={0x82, 0x11, "e3ecff111e06fa33a9742bf06f3d2e"}]}}}}}) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) (async, rerun: 64)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=<r8=>0x0, &(0x7f0000000500)=0x4) (async, rerun: 64)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000580)=0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@dev, @private, <r10=>0x0}, &(0x7f0000000600)=0xc) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000640)={@ipv4={""/10, ""/2, @multicast2}, <r11=>0x0}, &(0x7f0000000680)=0x14) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'erspan0\x00', &(0x7f00000006c0)={'gre0\x00', <r12=>0x0, 0x40, 0x8000, 0x6, 0x3af, {{0x22, 0x4, 0x0, 0x1f, 0x88, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4c, 0xa7, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x1}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0x8001}, {@loopback, 0x9f65}, {@empty, 0x5}, {@rand_addr=0x64010102, 0x2}]}, @rr={0x7, 0xf, 0xd2, [@multicast2, @multicast2, @broadcast]}, @cipso={0x86, 0x18, 0x0, [{0x7, 0x6, "6d719022"}, {0x7, 0xc, "e75be64dcc15723fe703"}]}]}}}}}) (rerun: 32)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000e40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f00000007c0)={0x634, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x50, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "48528f0be33e4acf69bcb0f1c961414c7ea0ad01739559781c890aba3f87a63a4d665f65a750e5c1cae1be7e53844e4486182d92e34d530bdd1ea6a0d2"}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_WANTED={0x288, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x535}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, '/dev/dri/renderD128\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x8b, 0x5, "f99fe95be3707ff71aa4e5ab28b35a6368ca11db438786e8c04539f16065546f75b11a881bed4b25b4b5ef5936704d55a51f27c58cc27efc4d5cd4d5ce18b81e6e46877b5beccacb5039120bff6510289d89cb8f98c98f6479c542f385e2bc1c058f28cd7bb2e064be64133645d1c87c44e0c1a543c2a7608ae9494f542a1341e80bd62db4d7e7"}, @ETHTOOL_A_BITSET_VALUE={0x5b, 0x4, "64195383b907e86fc1b1888951cdbd8b9ed2701ba00bc960db982ec4896f206ebc2a21dd55fc4d75bb5d24d831342f28b16920f4ae2d7fdf24baa213aa05433c6b773a67bec76919b44cd1252477fbe1aed9adf02047a3"}, @ETHTOOL_A_BITSET_MASK={0xb3, 0x5, "231a2bd94dd1227e5512a80ff643c0bf34a3187d7b9190d7a3d6c7beb8296e8a1ea93ee958116571b256af7c5211a3f5edaa991b2993f74263969fccf25e0f5c39c10c62d2582aa83bf9e23c055fe5c8c8569387356359c3c6156ea4fb4ed40692ed5217c90578bf46b9b0829eb1000b996324164f3a8c7659bdbc096e4b93b1e620a2ba0b07d72802c432df9cb4959948ff3556f0ce76778935d13432e48ebee5f8f45fd92c8a1095f299927dda43"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x72, 0x4, "265cdc4c2431865dea6a26327ef180e8b4c4d64ee8e51c1974d140530b839b5d8f5bf2ed851c30bd75e4365d2231c73e1c8390657ca5f7bec59a9f375c64b4246228f924bb819146c9cb11287ade67bc1f9eb1844c18212da399199fc503389b30b919248e33a25fc8dd764a77b8"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x1ac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "61c6a99f"}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "307ab855e6b7c1177f7ab8059e529d4542f12f91cca34685f72a80b9f2b11db27e04506a84f27f6f83"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2bd}, @ETHTOOL_A_BITSET_MASK={0x61, 0x5, "ce14565ccc853226123c213fc6b152d29f221e40aa134279eff94efff9a3614c7329ea842eb7e496b8b101f94f4642be1a453b3dd94743ff5def0d8bd709aeee5594b36cd40910124953a61fcc2565acec79c7e1472064b6e46b1cf2db"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xef, 0x4, "4e53b7e40b80bc8ca3c956dd617cc873327d6c1f30d567975d692a765bb6399190177e0d185b7d9600a3b09410b67cb84b5e5fec6654cff03d399adfc95a21a98952e9f6346034f4e1c598407d2e6cdebd89434a1eba043558b8caa67c421eae429150dc401371fa6834f16a37a0018bca8dafa858505429f5eb935ab7dee91832db8606a5e60558b4b3abbbf39e0487d350e5cbdab2f607b9cb3c737d145edaadba81e2d56db28996dffbcf1f9e6550083ee2641e4a5118fc1332d93f16e20c71e9ba84a7b30c303a37ca8379274dd82a3331382070896d85002469868832a560d38dd17ec469f9818ee2"}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x634}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) (async)
ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000e80)={'syz_tun\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000ec0)=0x1b) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
syz_emit_vhci(&(0x7f0000000f00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) (rerun: 64)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r13, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r14, 0xa1c, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800, 0x42}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) (async, rerun: 64)
write$FUSE_NOTIFY_INVAL_ENTRY(r13, 0x0, 0x0) (rerun: 64)
r15 = syz_open_pts(0xffffffffffffffff, 0x129100)
ioctl$TIOCSTI(r15, 0x5412, &(0x7f0000001080)=0x3) (async)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000010c0)={0x5, 0x0, [{0x932, 0x0, 0x4}, {0xd90}, {0xa38, 0x0, 0x3ff000000}, {0x8b4, 0x0, 0x3}, {0xa18, 0x0, 0x5}]})

9.99399951s ago: executing program 0 (id=1572):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) (async)
mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='pipefs\x00', 0x30040, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="13"]}]}, 0x2c}], 0x1}, 0xcc000) (async)
sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x11c4, 0x31, 0x2, 0x70bd28, 0x25dfdbff, {0xc}, [@nested={0x1061, 0xb7, 0x0, 0x1, [@generic="613790df9a4cc7cdbd8e8884cc7cf10b7a5e08aa063c62b0e293dd1fe69e99ada45ceeb89af1923de980afe5333e76b17b2c5804608d021a4bc8a817fe3faa9d9777a8fc1889b974026a1647da164b0c9f86649582e5c13ffe72dcb96009b7ec129ac7704c4304c15bcbadc822d7541874754f49464d560ef3dbbc64654816151e9522abc5a87f7d39ab64e15c04f8bc5a04b44f0efcf406fa949af37e496922cff33ab7d242b3465e1e68371684f26724720f8c41ee7ec370767189c7a8ae7d8b4491eb6ce5402d7b7d6fa152656fe046025d42052928c6338f0fee384df53969018d1541032ae10f74816c6629ff636be1f0c177b8b46a8bb7c8d2a329edce1918624cd988afcc655dd7d13aa7ae8ba730cce215bcef99895e66777b763304b2267922a49696ccc10349947054f47ef98ec3055c82b230666271e72a5a01e763675dcf4490dc8605b41a6d003f7eb5b2bdc3d174827be9c84360cac3c40c75c2e042ff4c005105eda5cbf0791dc35bc271b8df5ba5f10e9b9beb0623f612bdd27ba629e9e786c14f21a5f7bab14ddb3d0b56b91bf53b92668c5d664208463fed31421864c398c25406677484eedfac74cc89035606f747292f224d9e79f4c3c7215d83601a5e4261f07cc589aa5f97c953ba95e54540cf2170f212fee492ff0eb4040587e57d9a4a6c8ab6b1e89bcdad89b7c0ee9ad6e6ea64e38377be8eef9b1c46af702389dcef5ea0b182b41f817454d8aea5dfb16fa9e56cb6ab807d31e3a41c517a0a9e2b39c9b88fa81c167839902601cc700aeae91a4f01bd2746766b9b60a9ea71f6b721378b8f6924fa16c511f4147b2188be8a015ec8c32f0ddfed439c5d1d3c50387750c82d47b5cf87d4ca8b483caeb13499cac4b28e12cb68b7b12a52d0eee3da8e4a811e459aa78dea2a7f06b6eb02d28af838a437644ee453e6086e42d56a3dfd7cd3377d8d15e6c652c6c5fd2602963530bfc77e3cdaf2463c3dd6465ac75213d6f84425f2926838166ba4d1b628511d1e54e10e9fc07d2debfe803e64c37a7b86524f17f7a0ed03c30412017ceb772fe46008ff1a0b6bc0e8408a03a1e13404539cf9086a26b261aaa9889defe7f95260e867593131aac605404493e60c2cec1887bf1b1a60c33340e6217aa2d0d1ba48b8f1dd9d567f79c6a56805f652195e6b87b62abd8ab2585c5dd7629edb826fea092eb956f3142e285dcd9c2beded1c62d3986f71bbb510ba25b21a0cd5da97dec844a37ab982ad4dec30dfd27a7337e25f35078391c4f77bb687d5831e493c0032ab7947810bf547fac39692720786a56539e3b51a01a216b77df1bebe32815d4797fc8a03d7c6095213c64f2cf03b002138e542989c63ff1c987c376963eefedd1c3a37af64e4df40548b58787872c3160f935b7bfd8983a51a7679f72906d8ed95575e378e1e46db69d69a3e407d9659e5f6dfc780374aeb9790fae80a6427a13a73fc2dedd4bf2e0aa2fc3249eace267112b9c9fafd819b258ad4b52e9ddf2b85a3ad196f7837466d06f83d1a3e45fe69d9786b030830869302dbdd3d7e42eefe75b8ac26ce9e0bcdfbeb7acbe0109c8ce2d8d8686807d602ad4e9a97d389187e19eda39e592c0b9fbcb8370ea44f6e7061b9f2f212d34fb9a1e9bd648e86e41c5d4df9fd5f5725a0f8cc3b4081c7909cd0745d471ce95c76e41e51fc09e46d2969f19508443e74d4b942f73683498a8e4dcc11d7a252518ec17783c5bb00b3b04bb0ab504e8e52ec875f12f8ae6f1c22b6e2c4998f63e5f6408e2a0370ab674d74e240cee391f2e8efe0b6f4a6da106b236d44fde1e50cd98fd83073713d5ed822d1d10ebc752032f1584dfce15d6bc62c056566043f63ffc0cb4d50683fb03511d236f6e6fc02d98a4d4f30b5ef2e427d449a1d337c4a47e9f2706cfe9f4efe84e4e32bec49ba8a35e410e1901a3cf7699b6b0ed17827a9bde2e5cd2cc977f5be13839f6ea84b6ae8b97a87af5a4833997ab0d7df3f4e86428c8af2575c414b0eb7386bb9b83b54b0f3021bcf153d0edae7ff5259bd2e873fd44eaa2b8bf649f3c4888c6f7ab7f8a1d20c6e5fdc7ddd9a25a6a6c26af18ee18f1c8e154b8e2e09064ebe258f8230603beabba81a36ba33dd75a2cb0516286fa6a94ef8e01b956938edbae18a267c89b395b1a8d6e54b038ee3e2e59a0ee4a6ae123752ed710cf527440b0633f8d228bbc96c749275431aba6d350dd80e9c6a5bbb3cfabe79a6fedc6a49454494ef583943c0137e4f44918cd0bf7a8c17785381775609a38586a1b4d3b8630fe520e12832ee03588445dd4b651b75d8e04b851eef75083154aff396893fcdff82c9a6ef2cd09b533a8aae870e812109ced63f9ee71867dbe0ece1b2e9290f25ad557e7fa7c93756c51ac379bb419c3f4c3e308d30815ebe13b2c7860ecef0658a2a73b9a02ebac718d922cb2cf193467d64463c69e0f8775b97ca3ec4ffd3ce09ad47199ec0de83bbefe7fcf961917548231a1da078428c3793072ddad5f9f0a50ff4aae72b16897ceb09c6800aa33d000a9adaaf9e9616ff4f3c99972721596fc8279de49581dc7cbed906ffe75d58c1b94aac81846c2842c1f4c50abbc35fc595fc7c536aab16e03089c375f9ac2a3bd47d823db46c7bccc326d15ab3516d74075809751d30190ea8f4e5b1b49e70e874f9129ca32b6130a716ae592190960ad2a4d21ad0d274f881b458fd8e7f30ff4394f33f94104c884c5ce57df57e23e358248ecf9d08961e5d317bd01ca5596d9747efeca568865449ffa6a5a78b57ca8123416ec09b9ab57d4e3295df46170f480c5986ccf832bdd6eda66b9a9adfb0651ec1c3193a40abf4117b15a33f21554c3ad10bf61c1fcec9a62068b21acdcaf8161d39708d7f9b117b077f33922877e5e4425512b70dd36faf9153ef855b36a2dca7490f7b14f39a75e33f5a9212e85157432bfae10f0b86c528c42476e08822f534672a9fa3e3769e6967d5c0da87353ba6cb4c4ac6ac4969777d5784d2a6c4871234e58a51c7cf5109b4404e60521bb56b40c70aa22603cf38f1b8e796421130c37e1136a1a54b6184e367fa9e33742d600e148e4c1bf65d1fa142d21320577dd8b453125f9019d82ca5f881959c36d99be5d8408d1cbf110534342c8b7a4fc07addeffeedcb329564c11a7f6ba34fa012b677f2f049a813d77262dfc8e1b5383829222032bc6b5dfc278da468b6ef0405d92af41a2d8ca7faa424c9ec77d4cce19b434de2399243626204f2660cfb85479e982ea131639789d570991c52ea9e847110d9cfe6f53bdb83e73602bf7cde46874186d6abbed839e212289cc02f6af603097d9cfff382bf89569abf03a34096ada9b6d636eaa3783e61c566e97be022d1e1d5c7b2b610e981219484dd419f37b1cafb8aa10369e931d699be2979b99a01c1a48760ff09ce204e10a9508cbdb147eb3979629a116c40a7c7bf332ff181caba2b6f7da4b9d3194e6d0de89ddaba8c20cfdf22b7eb33e0f665f69cf4404fb916f24e3610a5c3b9d2a4140074625c1e09502f94e1e0ef8651b18a3e4722bae389ecea71fe011165f193de0c75a978cc3a6fa87f1950dbf1a5b087c0da7ed3a2e2c113775f0777174a7e3784bfc3b88703c9a22c3938e809ed5cbce82f3cf4083932e41e7f962c681b88a8655e442551694396a6d49ba7751dc6e668de3ea25fc28231cbbc39eddd22347de8fa0176ec20284c66a514ea72a32465b71ac07a063b2952e7b2f122acd0893d4ccdbe363588eea837614864d9067cca27bae9e8462ddeef2416e6a843c3e9810f81bce594e2d1b00d2527cef3962e99cb45c125dbe78e1cef0003794201814ff56fd5bccd1581d8b9e71c372a9d2014d270b00e9f177296af74c09f732e57b71252608017c4b818510649967ba169e7263037e06e54aaf67af665c45680efe4ff6ba830cf71d607e1cf1da3533805b336894e5dcbdf9900c25745f5d3733a4cbe997663ace26fddd288643cab44d6f9864439a1a785f195d4c19efa038959ff0b8842f26cfa297c8d3257088f48e4695e9e976d48719c000204d0c33419857dd66ce318cd53dcafbd72b7de11a70fab52b4dc9cba390262dea90776ef640a30603d615e1234dc5bb57f3cc79245eddb28eb522f460f58d59e733dcb4b0f093c4706007129cd048aadfc50c9bb6c5fa9b17977c0ef127fd0a38fe4b1248e55323c0bdb6fcf92bdc507937942da08676bcad592a79ea2dc338ec9d09d58bf22fe5671a862d99ba11499185df2760dec8031cced6242bb4b19185ad469e48c4ab974e4e27fcca8cd0c908c62a56b1d402314f0ec72ebfae153ac9ba337f1c146ed511143da7d9abebcb7ad8b26ec396ad741fee92f7a9e31a5ee774b1e0f4f59d66ee8a058aaf8b48576b4b0254cb41397472d42257b58e59b7a8e43bdfa2326f0df071664a7b71a1b1953dfc168e5a14557544086fa8e66540fc5e9cf2990de936b156c63a083db2e9c169111644b21f2609c326a984418fbdb4baca5e21aee533a6c10a4988aa6fea93a1ab2e812f6711a85a85f33abffcf47e6e92debefea48a4b2f063e1185ee676b77a565548f30d4dfd85e2aaf8e5a578f9b526136445b439890bc72f8d4b1494d72daaa4d48949b9405aee8fb88ac52a80c1a0b65f8efc01edb18144146b583e3f28c800132516ff3509be665bc5bd0d9405a4a6ec6c3592e9adba886cd29a3ac8d2cdd412d5185e0120e3f2f0316d30784dfe5443f17c2aa27f00f332b782ab380dc7bf78367f07a5c90fac54ee2f7bdc7807a63c991303ef5e11965160c66a983197f6ffd75d792d64e24441b7dc725f49b335a33260dfcdb8ed696a6c39dc73029513ff8964d7a5b614e99119aff03b11959bbe4b2d7aa28f9e64c2c0a62e32543cedc7844cf1d2da5816348aa80279fd4fcc6e8fccdefe9e76b3105bbc42fec5fbd4fa9b3cfd814faa9de37b3c8f7e2e69bb5f79544bae5b971687539a24b4c0486c00406d9f8bb852d68863e987d1a279baae10d14fb9b183bc934237c27b4a7c0d1609407678aea193c4e40fe823f14d5756466221dba5d8512421cc5087d6e0ac0e58370b24904c5c659f61640b662a8df6102c8a0663f97e9404ca868e6ac30c41c422481704c2bc3e4bcfdd80a2f2530a31aa63ea2596b77a617fbbde82e425e65fad04f0624a0c78a50d620ecf23583ced286ebd07e27d03fd6f89fd8535ec9f7a745fc8fc328c9a105bb0289211e46cd6f74d78fd600c9e168f64a1605d49ae55925bbdc70bf74a5d3b3471f04f5f13b8635307378210304fa3fce23b65346eb3e7211e8499051a646b822cceee8bb28e065169e5ef2e78121853219093b4dd51d9f17d18f3dc2f832ee6d159a3635a547bdab03051dc7c860c23a1848b8bb11f2b57f819e52fbb63891eaca8356cf75eaef266dc8fb9f2aa5bc6637a46954b64935fa7bd4fd036c999c606ade944f2c391c017ebc0daa879343891b60bff173fca6ce4f5f2b109592f4b472f21239a3ec50ffa9949d627978a0f0649a306792030e06ca88cf17c376f13c18329d1911cf296b1aaebb6df12e0d534dca3352e554b298fa0fad3ae702ee7d6fcda79dd1ba516dec9ef65431cbc93beef528a1becde9d1687aab5fbce926cdda80699e2c25982bacf5e5c5810c8d46609e64e37713290b8ea7bc3c80cc2024595700867ce93b4d90bee03715341df85c1e2ee151765ab087ece804728025364b62b51ff0acc7b801c7db59cd5b1613b0d466be7", @generic="b40946856625898620f051f91a7dfd29f56fcdf68b78a588e3a77d3007335b2f41117973352e39d9f5cc36a50f9faf42bb3ed3d724d0ee4d874e19ea8460621d7969c2483d910006db0b71b910", @typed={0xd, 0x7f, 0x0, 0x0, @str='/dev/md0\x00'}]}, @typed={0x8, 0x14c, 0x0, 0x0, @uid=r4}, @nested={0x143, 0xe3, 0x0, 0x1, [@nested={0x4, 0x43}, @nested={0x4, 0xa2}, @generic="95ee2764ce2f9e959d7c749e313e9bc56b6de9fe99e0edf04217c73ef4f613ca66cea93bf73fa024c5826b942a70c72df4bf9758de378d1718f5b8f2411ea8fb199fe7a9287977872500f1c646016d25acdba1a3dc520fa49f60498db96bb1de0578ca033f54650ded1e381df83150151a613aed0cb7232659a4f05b460b91a267c29b4743eec05c67d6808579dc", @generic="f6b89b1005a939670a28aacf9257126d1e55c6513f1659a3c7ca37e0982884b748a70df2129b65bb93ec4bd156260aea20736852bf85192c7efb45af74d6ac94a5b803ab61fd13", @generic="d8b2077b926adc0f9149648f510b4064122139e671b5682e4dec489824895f9e240527ea190b46e693d3d168d3bcdc30d978f18010d7c368c85743bed66733d5f4648c486e371a7ca5b5f4d6f25186a603c197738bda0aab0b94", @typed={0x8, 0x97, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x11c4}, 0x1, 0x0, 0x0, 0x8001}, 0x40815)

9.125413093s ago: executing program 0 (id=1581):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcff7f00000000002100000005002000010000000a0001007770616e340b000009001f007068793100000000050020"], 0x3c}}, 0x400c040)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
mmap(&(0x7f0000659000/0x800000)=nil, 0x800000, 0xf411119ed8bebbbd, 0x20011, r4, 0xebe3b000)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000280)={0xf7ffffffffffff81, 0x6, 0x100000001, 0x8000000000a27, 0x2, 0x140000000000000, 0x80000000004, 0x7, 0x3fe})
mkdir(&(0x7f0000000080)='./file1\x00', 0x58)
creat(&(0x7f0000000080)='./file0\x00', 0xac)
syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640))
geteuid()
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000980))
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000b80))
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10, 0x80000)
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000c40))

8.237933464s ago: executing program 0 (id=1582):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a14000000400a050000000000000000000100000014000000000a010400000000000000000700004058000000180a0103000000000000000000000003380003802c0003801400010070696d726567310000000000000000001400010077673200000000000000000000000000080002400000045b0900020073797a3000000000140000001000010000000000000000000000000a"], 0xa8}}, 0x8000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1])
mprotect(&(0x7f000068d000/0x1000)=nil, 0x1000, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000))

7.897467097s ago: executing program 0 (id=1584):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
fallocate(r0, 0x8, 0x5, 0x401)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x40000004, 0x3, 0x9, 0x16, "00fffff6ffffff00000300"})
r4 = syz_open_pts(r3, 0x440)
dup3(r4, r3, 0x0)
close_range(r2, 0xffffffffffffffff, 0x400000000000000)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000)

3.984139263s ago: executing program 4 (id=1600):
r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0)
io_submit(0x0, 0x2000000000000258, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, r1}])
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x6c}, {&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000002800000229bd7000ffdb7876e471f11b4de9538cb2f871a537082a3091d3c652e106878e7466a09da01eb5c6c6e61f04c3b79329cfe22a278231d8ad6830dc268bb58e2fb5160d4e84bf79f73ba8bc1013300eeea1200d546f9f83390bf94b02e3bc902af6702c7b9913a9e64773f99ad3661370c4e9178f484c9602d86fa27878f6e119fd159fad1007aa02125513d5fa8f52cebe3260bf"], 0x9c}, {&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001600020029bd7000fbdbdf0100008a8007004900222b001008001600ffffffff04005d8004009d80"], 0x2c}], 0x3}, 0x24008001)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x52881, 0x0)
r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa0009058202400000"], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
sendfile(r4, r3, 0x0, 0x7fffefff)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x21a800, 0x0)
prlimit64(0x0, 0x8, &(0x7f0000000580)={0x8, 0x88}, 0x0)
r6 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, 0x0)
shmctl$SHM_LOCK(r6, 0xb)
sendfile(r3, r3, 0x0, 0x7ffff000)

3.561063625s ago: executing program 1 (id=1603):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
close(r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x120, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb54c, 0x5c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x4080)
syz_usb_connect(0x0, 0x17f, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x3f, 0x97, 0xae, 0x40, 0x1bc7, 0x1101, 0x20b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16d, 0x3, 0xc, 0x94, 0x40, 0xf, [{{0x9, 0x4, 0x5f, 0x1, 0x4, 0x4f, 0x62, 0x7b, 0x0, [@hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xfe4}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e63521"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x4, 0x1}, {0x6, 0x24, 0x1a, 0x81, 0x10}, [@acm={0x4, 0x24, 0x2, 0x6}]}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x3, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7}]}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x7, 0x9, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x40, 0x9, 0x8, [@generic={0x73, 0x24, "a3d22c202af806121ac82439fdbb6cb0ce3ae0c60b32627d118ca23e091f8406441cddac151e8eb7330b98787971fa052ba7a83aad3ec0e78259112b920130d654c67796f702b4d1013b797347768aedd49e03134e4eb83c514fde0c9c5649357a20cf7606f6701999d894a6c01dd851d0"}, @generic={0x14, 0x30, "bc896239e350750ef76e2df8e9d1972b2a4a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xf, 0x9, 0x10}}]}}, {{0x9, 0x4, 0x2b, 0x0, 0x3, 0x30, 0x65, 0xee, 0x0, [], [{{0x9, 0x5, 0x3, 0xff1922d5b049bd1e, 0x10, 0x5, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xb}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x3, 0x3, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x48, 0x10, 0x7f}}]}}, {{0x9, 0x4, 0x1, 0x1, 0x2, 0x6d, 0x32, 0x6d, 0x7, [], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x5, 0x7, 0x54, [@generic={0x28, 0x7, "8c8c8ee6ac0ef480f74e3859baf90c68f8756f64e5aaae1632d773134d3826ea82418e38ee99"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xf9, 0x40}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x36, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xffff}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x1, 0x10, 0xb, 0x20, 0x7}, 0x75, &(0x7f0000000340)={0x5, 0xf, 0x75, 0x5, [@generic={0x4b, 0x10, 0xa, "3975b71679bf56dcc3fbd179ff665d37384817333c359399272750399ce4543793128c0c3448bbbc8d731b29a0dfe5330810c6563eb815615181c75de7e45b3893f8daf4424ef87e"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "9a0326535002e0937253d632c7e1b585"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x4, 0x5}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x4}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x60c5}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x422}}]})
symlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00')
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000d00)=<r3=>0x0)
r4 = getegid()
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000d40), 0x2803, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = syz_clone(0x0, &(0x7f0000000d80)="1e118962e4199fbcaa0569e04ce5d29767472168a3d1c8bd37bed158aad28d7fd32d76ea4a6ca2726fa1fb3207e1b3caad27d92bc49244480d8947d67c0cd984deed83ec0ccc5ac71c5a9ca0f5ff341322e545ec09241a", 0x57, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)="55f9c18e73959f83f41715953e512e8ed3d9eaa2931621ec91988b534513a8b85990e8eb4b3e6df45480f662b23e13e4587f171190cb0d6aef20d1f7aa4f204c229ad08c5c815b1b76ddf931c9ee91e174587cb65a19c6fb1cfa671abc886d4f50525eecdd")
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000f00)={0x7ff, 0xf8, {}, {<r8=>0xee00}, 0x6, 0x3c2c})
r9 = getegid()
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000f40)={0x48, 0x5, 0x0, 0x0, <r10=>0xffffffffffffffff, 0x1})
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000fc0)=<r11=>0x0)
getresuid(&(0x7f0000001000)=<r12=>0x0, &(0x7f0000001040), &(0x7f0000001080)=<r13=>0x0)
stat(&(0x7f00000010c0)='./file0/file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
sendmsg$netlink(r1, &(0x7f00000012c0)={&(0x7f0000000500)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)=[{&(0x7f0000000540)={0x18, 0x3f, 0x2, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0xc4, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}]}, 0x18}, {&(0x7f0000000580)={0xc0, 0x15, 0x400, 0x70bd26, 0x25dfdbfc, "", [@generic="4a8ba4bfda98c8a334459f6f09be11657ee29868be9c0d6fcb40cfa80a10388193024af276db8d9155ca15fe8edaf4f7a4b458ce504dcf776997e84381dd66806b50655646ef39715294301f7825452460d9c554221b4dd1883d2bbc73b389fac525e159833baf5350fab5cb82d59a90aa48a713b8d264e6dd11170fdaae93848cca3a9509ae53f363ff6a65f69209930f9c101439af5a4ca46ae80f26205135948ec8444461e6a03ed9bed54c9f1d72"]}, 0xc0}, {&(0x7f0000000640)={0xe4, 0x32, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@generic="fed4d49f5616bfc3d2dc9bd2684a2d23171e976bcb72f82acd6acfa97f16e43775a3dc9636b0e14ecc491f9b051c19ac294da3a636f6566735e780943d911dadec9ee4ddb252202a4304a8c3200cf966432da32148518987c4c73ff7f74a31beb1ff3c25393e058e3fcd14079a4bd367b0294850b32caea1e00077be12f9199378b58fe2d48ea9e5a6bc2bac6d01e0ed4ce17ec3fb3304914ef113b16c9f5c16a6a8b66b1f0a8ce3f38fc0c423930e6c2209f18b11186a78143e632ab07317fe1d10c8d18f0979f6a06bd929c08646c9853809"]}, 0xe4}, {&(0x7f0000000740)={0x150, 0x1e, 0x600, 0x70bd2b, 0x25dfdbfc, "", [@typed={0xa, 0x96, 0x0, 0x0, @str='wlan1\x00'}, @generic="a2c728ce519ae83e44179f8f83ff242f521bb5", @typed={0xc, 0x83, 0x0, 0x0, @u64=0x3}, @generic="429b9d574da07bc9dabafb83265f4415299488621bbec19e317048c52c370511a165ee94446d623cb128b387a2d9c493cad39fbcc73dd8fd5f7fd4c652ffcab6ff8c71b6c18df26a990430d8b8ef2e208a7bcfd56e5c85be52534e588509d34855b07b3d12ebe378550a7d8b33c773d43a59024b3300a1a6091d8444fc75d4a2e1816ab4bbc847663a7357c0027ab052bb961bc9ab1cc47d5564000142e29da91518901f4d20600b1ea75456e40b0ba338cb130a6ed29768488c5b5dae84e1", @typed={0x8, 0x28, 0x0, 0x0, @fd=r1}, @generic="6daa0c8080aa95ce790d994ea11d1a9f157ebceac34c51217572bc83f7656469d42311c76973b30255a7f0b6b52b61c163396d8b2b12df99086942b9dd28fc1e9603d3737bf88c23e4aa9e"]}, 0x150}, {&(0x7f00000008c0)={0x2a0, 0x28, 0x8, 0x70bd28, 0x25dfdbfe, "", [@nested={0xf1, 0xd3, 0x0, 0x1, [@nested={0x4, 0x11e}, @nested={0x4, 0x46}, @generic="3daa67ce0e5663070b0f0d668c0a725c373101aba633164dfd739c490b5226a6f92bc6ddbc4e379b7951f99664be53a64542bd8301041470f68904008f2ff79082c30becb11c905232542ec3c5af3d33e446d48fecc8446641c5fd202d0eaced9c6b508ae99c5a944b7d7faacae93e11fff77a673b67d5859a6723fd1edbe7e55eeed2ece43dd598f89ae1bf85a92991497b25d7f30439b97b46db265b484123cc60d4efedef14e278d872db5b121ae717cee7e996b610e1", @generic="3d989218799ba6c6484befd73c94111a60dcee735af57f36bdc8e7c4b7b990b1645f20a562", @nested={0x4, 0x2b}, @typed={0x4, 0x16}]}, @nested={0xc8, 0xe4, 0x0, 0x1, [@nested={0x4, 0x5c}, @nested={0x4, 0x104}, @nested={0x4, 0x25}, @generic="09ac48034f5a81cea0a250180b3b3618376e621dd27b0b94bd4eb803a1e1ad4a91f3f9c9fbc05b7bfa1bd1a70b2208c28b48830290813dccdd63341df4e27ed8e903a664b76b289e17fdbed6b39697b07f4b71f25b9544f3ef3cdd4957ef4f23eb4484155b3d1ef14c9c36f96bb4c246fe8302fe8d914bbe08759c1952499a94fc866767e9782345dffb9027e0f683464473c45ba643757d6bca8c90b4e1eeb9940273007c3a6e208b09a684476ddf7ec56c5d6f1ef0c4f8"]}, @generic="59a6302149e3f2b45ca351aef8cc9d806fb0eaeaa7ff33807953a385a9300db562ef9f732da9045ad5e7b6a6e7d0b82ebc0d78eac11f0c64d8a57c654247903ad5f39d5de89d40f245d74a3387a611b491722a9a26a44de2d97b6aa4344db2885a0ac4acbc035ae88682c80be5b923c9588024ca0fb207a6282a8a517ed9b21b2f6e4e95bae039c183e8721179821b687ec7e33c2a4d5ee231055b6635595004902d153e9f18389e53c7f5f3514e40e0f44fb21b3b14971e480aa2692c892cc0e2850badc035e3d466dbaad0ba035b1847bb"]}, 0x2a0}, {&(0x7f0000000b80)={0xc8, 0x3c, 0x4, 0x70bd26, 0x25dfdbff, "", [@typed={0x14, 0xce, 0x0, 0x0, @ipv6=@mcast2}, @nested={0xa1, 0x69, 0x0, 0x1, [@generic="cf0428ae7f0178626daf52884b9140c3db4576f34b0cfc048f17026762e95a968ab4b8da9f87328ba744aa211e33a67d2465c9481dea675d1c158b9a956d632afa0120ec3952bd034bd86fd1364d1f6ba4abee7b6a52c15af21b4bdf6e6ee58789ee3eef60ac419e38403935eab0ba9b17579a3f6fcec8dee766c877ef3dafd277692047fb9679d09d863620bc992be5f6", @typed={0xc, 0x84, 0x0, 0x0, @u64=0x6}]}]}, 0xc8}], 0x6, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x30, 0x1, 0x1, [r0, r1, r10, r0, r0, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r14}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x108, 0x4080051}, 0x2000)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x68, r15, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="b5b712bfb5fb"}, @NL80211_ATTR_PMKID={0x14, 0x55, "55ed5ad3671cb6e39bd53a4bd425f520"}, @NL80211_ATTR_PMKID={0x14, 0x55, "b738eb1501ad625cae7ec4daf9c420db"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="9ddfd17c3598"}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x4080)
r16 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x10b002)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r16, 0xc0505405, &(0x7f00000014c0)={{0x3, 0x2, 0x9, 0x1, 0x6}, 0x7f, 0x81, 0xc})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000001540), 0x80, 0x0)
stat(&(0x7f0000001580)='./file0/file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, <r17=>0x0})
r18 = openat$cgroup_ro(r0, &(0x7f0000001640)='memory.events\x00', 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000001680)='./file0/file0\x00', &(0x7f00000016c0)='system.posix_acl_access\x00', &(0x7f0000001700)={{}, {0x1, 0x5}, [{0x2, 0x2, r17}, {0x2, 0x6, r13}, {0x2, 0x0, r17}, {0x2, 0x6, r13}], {0x4, 0x6}, [{0x8, 0x0, r14}], {0x10, 0x1}, {0x20, 0x4}}, 0x4c, 0x1)
fcntl$addseals(r0, 0x409, 0x1)
fchmodat(r0, &(0x7f0000001780)='./file0/file0\x00', 0x44)
syz_80211_join_ibss(&(0x7f00000017c0)='wlan1\x00', &(0x7f0000001800)=@default_ibss_ssid, 0x6, 0x2)
readlinkat(r18, &(0x7f0000001840)='./file0/file0\x00', &(0x7f0000001880)=""/179, 0xb3)

1.889831633s ago: executing program 2 (id=1610):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0xfffe, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}, 0x1c)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
sendfile(r3, r0, 0x0, 0x7fffefff)
fadvise64(r0, 0x9, 0x9, 0x2)
sendfile(r0, r0, 0x0, 0x7ffff000)

1.67813894s ago: executing program 1 (id=1611):
creat(&(0x7f0000000000)='./file0\x00', 0x1ea)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001540)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000019c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x40ad6ed0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x90)
mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x10820a4, 0x0)

1.561521806s ago: executing program 1 (id=1612):
mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='minix\x00', 0x100e470, 0x0)

1.501244125s ago: executing program 1 (id=1613):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000004, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x10, 0x1, 0x0, "0d3d4a3b5b7bc69a21cfb7f5eaac46dbe89b1347050000000000000002249341"})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0xffffe000)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x1d, 0x16, 0x400084, &(0x7f0000000ec0)})

1.093792849s ago: executing program 1 (id=1614):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4119, 0x1017}], 0x1, 0x300, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
r2 = socket$kcm(0x2, 0x1, 0x84)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000001580)={&(0x7f0000001100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f00000010c0)="17112bd130cf0d5a0403cf0358ab31", 0xf}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r1, 0x2000)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) (async)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') (async)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4119, 0x1017}], 0x1, 0x300, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async)
socket$kcm(0x2, 0x1, 0x84) (async)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000001580)={&(0x7f0000001100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f00000010c0)="17112bd130cf0d5a0403cf0358ab31", 0xf}], 0x1}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r1, 0x2000) (async)

773.844023ms ago: executing program 2 (id=1615):
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x668838eecb5c8d71, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000001, 0x12, r1, 0x4ebef000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './cgroup\x00'})
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x800080, &(0x7f0000000140)={'trans=virtio,', {[{@access_client}, {@cache_loose}, {@ignoreqv}, {@afid={'afid', 0x3d, 0x8}}, {@access_any}, {@loose}, {@cachetag={'cachetag', 0x3d, 'udf\x00'}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/rnullb0\x00'}}]}})

564.705218ms ago: executing program 4 (id=1616):
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = dup(r0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x7, 0x0, 0x0)
getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000040), &(0x7f00000000c0)=0x8)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0285628, &(0x7f0000000cc0))
set_mempolicy(0x3, &(0x7f0000000080)=0xffff, 0x9)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x16d342, 0x0)
munmap(&(0x7f0000012000/0x4000)=nil, 0x4000)
write(r3, &(0x7f0000000400)="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", 0x1f000)

500.634866ms ago: executing program 2 (id=1617):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) (async)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) (async)

201.410526ms ago: executing program 4 (id=1618):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x9)
ioprio_set$pid(0x1, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
setresuid(r1, r1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000000)=0xf, 0x4)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r3, r3, 0x0, 0x7ffff000)

200.200736ms ago: executing program 2 (id=1619):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x10010, r0, 0x57789000)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x410, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
munmap(&(0x7f000026d000/0x4000)=nil, 0x4000)
write$sysctl(r1, &(0x7f0000000000)='4\x00', 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

199.978324ms ago: executing program 1 (id=1620):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) (async)

165.505343ms ago: executing program 4 (id=1621):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000240)=0x8, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000280)={0x1, 0x0, 0x1ff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, <r5=>0xffffffffffffffff})
connect$netlink(r5, &(0x7f0000000380)=@unspec, 0xc)
ioctl$int_out(r2, 0x5460, &(0x7f00000003c0))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r4, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x4001)
flock(r5, 0xc)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r5)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r7, 0x700, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r8=>0x0, 0x40, 0x10, 0xfffffffe, 0x9000, {{0x3d, 0x4, 0x3, 0x0, 0xf4, 0x67, 0x0, 0xfd, 0x2f, 0x0, @remote, @empty, {[@timestamp={0x44, 0xc, 0x1b, 0x0, 0x4, [0x16b1, 0x81]}, @noop, @timestamp_prespec={0x44, 0x44, 0xb4, 0x3, 0x2, [{@multicast2, 0x7ff}, {@remote, 0xfffffff8}, {@rand_addr=0x64010102, 0x2}, {@local, 0x1}, {@multicast1, 0x2}, {@local, 0x3ff}, {@multicast2, 0x4}, {@multicast2, 0x7d}]}, @lsrr={0x83, 0x23, 0xe6, [@private=0xa010100, @local, @broadcast, @local, @local, @multicast2, @private=0xa010102, @loopback]}, @timestamp_addr={0x44, 0x3c, 0x43, 0x1, 0x5, [{@multicast1}, {@loopback, 0x10000}, {@rand_addr=0x64010101, 0x6d}, {@broadcast, 0x7f}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4e8b}, {@rand_addr=0x64010100, 0xffffff38}]}, @timestamp={0x44, 0x18, 0x7, 0x0, 0x9, [0x200, 0x5, 0x3, 0x8, 0x80000001]}, @rr={0x7, 0x17, 0xc2, [@loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101, @local, @rand_addr=0x64010100]}, @noop]}}}}})
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000800)={@empty, r8}, 0x14)
ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000000840))
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000880), r3)
rt_sigtimedwait(&(0x7f00000008c0)={[0x7]}, &(0x7f0000000900), &(0x7f0000000980), 0x8)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000009c0))
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r10, 0x50009417, &(0x7f0000000e00)={{r2}, r1, 0x12, @unused=[0x8, 0x4, 0x9, 0xffffffffffffffff], @name="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"})
sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x30, 0x1409, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000001f00)={0x1, 0x5, 0x1, 'queue1\x00', 0xffffffbe})
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x28, r4, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x4a}}}}}, 0x28}}, 0x1)
ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f00000020c0)={0x2, 0x0, 0x1, 0x2, 0x3, 0x1ff})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_GET(r11, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x60, r9, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x8000)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4480}, 0x194)

123.141092ms ago: executing program 2 (id=1622):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1ea)
fstat(r0, &(0x7f0000000040))
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x774)

5.561191ms ago: executing program 4 (id=1623):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) (async)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r1}) (async)
keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) (async)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0)

467.067Βµs ago: executing program 2 (id=1624):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='sysv\x00', 0x200000, 0x0)

0s ago: executing program 4 (id=1625):
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$vhost_msg_v2(r0, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000040)=""/219, 0xdb, &(0x7f0000000180)=""/36, 0x2, 0x2}}, 0x48) (async)
write$vhost_msg_v2(r0, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000040)=""/219, 0xdb, &(0x7f0000000180)=""/36, 0x2, 0x2}}, 0x48)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy(0x1, &(0x7f0000001080)=0xfff, 0xfff)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x85, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000)
r3 = socket(0x2, 0x1, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async)
r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
ioctl$NBD_DO_IT(r4, 0xab03)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0xffffc000)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
socket(0x10, 0x803, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000)

kernel console output (not intermixed with test programs):


[  158.942458][ T6015] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  159.042592][ T5964] usb 3-1: device descriptor read/64, error -71
[  159.152640][ T5964] usb usb3-port1: attempt power cycle
[  159.252415][ T6015] usb 5-1: Using ep0 maxpacket: 16
[  159.267720][ T6015] usb 5-1: config 0 has an invalid interface number: 111 but max is 0
[  159.292718][ T6015] usb 5-1: config 0 has no interface number 0
[  159.304710][ T6015] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66
[  159.320604][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.335646][ T6015] usb 5-1: Product: syz
[  159.345322][ T6015] usb 5-1: Manufacturer: syz
[  159.354327][ T6015] usb 5-1: SerialNumber: syz
[  159.372070][ T6015] usb 5-1: config 0 descriptor??
[  159.534016][ T5964] usb 3-1: new low-speed USB device number 34 using dummy_hcd
[  159.575077][ T5964] usb 3-1: device descriptor read/8, error -71
[  159.590389][ T6015] usb 5-1: USB disconnect, device number 16
[  160.339603][ T5964] usb 3-1: new low-speed USB device number 35 using dummy_hcd
[  161.172269][ T5964] usb 3-1: device descriptor read/8, error -71
[  161.292619][ T5964] usb usb3-port1: unable to enumerate USB device
[  161.812480][ T5964] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  161.986326][ T5964] usb 3-1: Using ep0 maxpacket: 16
[  162.004210][ T5964] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  162.032086][ T5964] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  162.032730][ T6015] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  162.075741][ T5964] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  162.098765][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.117063][ T5964] usb 3-1: Product: �泿��細�嫴ᙾ̅姷��셕冇�觉ܛ��뷋쑫�൯��裲��꾶�ᗫ�䢭�듡츓㥠�徸涆㸬�ᳩ䮱뉾
[  162.184912][ T6015] usb 1-1: device descriptor read/64, error -71
[  162.432442][ T6015] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  162.582460][ T6015] usb 1-1: device descriptor read/64, error -71
[  162.684583][ T5964] cdc_ncm 3-1:1.0: bind() failure
[  162.692615][ T6015] usb usb1-port1: attempt power cycle
[  162.700625][ T5964] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  162.717740][ T5964] cdc_ncm 3-1:1.1: bind() failure
[  162.730338][ T5964] usb 3-1: USB disconnect, device number 36
[  162.902534][  T980] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  163.042390][ T6015] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  163.063214][  T980] usb 5-1: Invalid ep0 maxpacket: 32
[  163.074833][ T6015] usb 1-1: device descriptor read/8, error -71
[  163.212571][  T980] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  163.322716][ T6015] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  163.339705][ T8514] netlink: 'syz.1.731': attribute type 1 has an invalid length.
[  163.341916][ T8515] netlink: 'syz.1.731': attribute type 1 has an invalid length.
[  163.363874][ T6015] usb 1-1: device descriptor read/8, error -71
[  163.392366][  T980] usb 5-1: Invalid ep0 maxpacket: 32
[  163.398595][  T980] usb usb5-port1: attempt power cycle
[  163.473742][ T6015] usb usb1-port1: unable to enumerate USB device
[  163.481386][ T8519] netlink: 830 bytes leftover after parsing attributes in process `syz.2.732'.
[  163.661809][ T8527] /dev/rnullb0: Can't open blockdev
[  163.748972][  T980] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  163.774629][  T980] usb 5-1: Invalid ep0 maxpacket: 32
[  163.902466][  T980] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  163.932935][  T980] usb 5-1: Invalid ep0 maxpacket: 32
[  163.938471][  T980] usb usb5-port1: unable to enumerate USB device
[  164.002396][ T2155] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  164.153664][ T2155] usb 3-1: config 0 has an invalid interface number: 106 but max is 0
[  164.162089][ T2155] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.176164][ T2155] usb 3-1: config 0 has no interface number 0
[  164.182272][ T2155] usb 3-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 43
[  164.193726][ T2155] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  164.207075][ T2155] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  164.218253][ T2155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.233848][ T2155] usb 3-1: config 0 descriptor??
[  164.239578][ T8531] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  164.254758][ T2155] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  164.776897][ T8550] Device name cannot be null; rc = [-22]
[  164.964017][   T12] usb 3-1: Failed to submit usb control message: -71
[  164.964308][ T5964] usb 3-1: USB disconnect, device number 37
[  164.970757][   T12] usb 3-1: unable to send the bmi data to the device: -71
[  165.011575][   T12] usb 3-1: unable to get target info from device
[  165.018231][   T12] usb 3-1: could not get target info (-71)
[  165.032365][   T12] usb 3-1: could not probe fw (-71)
[  165.151358][ T8564] /dev/rnullb0: Can't open blockdev
[  165.629214][ T8597] kAFS: unable to lookup cell '.,cΎϋL'
[  165.635498][ T8597] /dev/rnullb0: Can't open blockdev
[  165.644440][ T8599] MTD: Couldn't look up '/dev/rnullb0': -15
[  165.712781][ T8601] fuse: Unknown parameter 'fjuV�…4qηϊd'
[  165.981934][ T8618] ./file0: Can't lookup blockdev
[  165.983466][ T8616] binder: BINDER_SET_CONTEXT_MGR already set
[  166.004622][ T8616] binder: 8614:8616 ioctl 4018620d 200000004a80 returned -16
[  166.122850][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'.
[  166.142359][ T2155] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  166.152159][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'.
[  166.229574][ T8633] rdma_rxe: rxe_newlink: failed to add wlan1
[  166.267382][ T8633] /dev/rnullb0: Can't lookup blockdev
[  166.312431][ T2155] usb 1-1: Using ep0 maxpacket: 8
[  166.322134][ T2155] usb 1-1: config 9 has an invalid interface number: 12 but max is 0
[  166.332852][ T8637] netlink: 80 bytes leftover after parsing attributes in process `syz.1.772'.
[  166.335536][ T2155] usb 1-1: config 9 has no interface number 0
[  166.362547][ T2155] usb 1-1: config 9 interface 12 altsetting 183 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  166.387258][ T2155] usb 1-1: config 9 interface 12 has no altsetting 0
[  166.406162][ T2155] usb 1-1: New USB device found, idVendor=0c45, idProduct=6270, bcdDevice=70.82
[  166.416490][ T2155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.662359][ T2155] usb 1-1: Product: syz
[  166.666565][ T2155] usb 1-1: Manufacturer: syz
[  166.671165][ T2155] usb 1-1: SerialNumber: syz
[  166.792792][ T8646] IPVS: length: 86 != 8
[  166.914508][ T2155] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6270
[  166.977173][ T8649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.079209][ T8649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.169937][ T8649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.249636][ T8649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.269910][ T2155] gspca_sn9c20x: Write register 1000 failed -71
[  167.276558][ T2155] gspca_sn9c20x: Device initialization failed
[  167.283508][ T2155] gspca_sn9c20x 1-1:9.12: probe with driver gspca_sn9c20x failed with error -71
[  167.311436][ T2155] usb 1-1: USB disconnect, device number 41
[  167.343569][ T8653] /dev/rnullb0: Can't open blockdev
[  167.400468][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.445676][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.477586][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.515259][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.516509][ T8656] /dev/rnullb0: Can't open blockdev
[  167.892433][  T980] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  168.052381][  T980] usb 5-1: Using ep0 maxpacket: 16
[  168.066931][  T980] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  168.082445][  T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.100655][  T980] usb 5-1: Product: syz
[  168.105072][  T980] usb 5-1: Manufacturer: syz
[  168.110312][  T980] usb 5-1: SerialNumber: syz
[  168.439095][  T980] cdc_ncm 5-1:1.0: bind() failure
[  168.456022][  T980] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  168.474120][  T980] cdc_ncm 5-1:1.1: bind() failure
[  168.486867][  T980] usb 5-1: USB disconnect, device number 21
[  168.806367][ T8691] netlink: 36 bytes leftover after parsing attributes in process `syz.1.792'.
[  168.842434][ T5912] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  168.889108][ T8695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.794'.
[  168.992847][ T5912] usb 1-1: Using ep0 maxpacket: 8
[  169.253815][ T5912] usb 1-1: config index 0 descriptor too short (expected 12571, got 27)
[  169.262370][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.272539][ T5912] usb 1-1: config 0 has no interfaces?
[  169.279616][ T5912] usb 1-1: New USB device found, idVendor=0c45, idProduct=6270, bcdDevice=70.82
[  169.288834][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.296894][ T5912] usb 1-1: Product: syz
[  169.301077][ T5912] usb 1-1: Manufacturer: syz
[  169.305811][ T5912] usb 1-1: SerialNumber: syz
[  169.311881][ T5912] usb 1-1: config 0 descriptor??
[  169.520356][   T24] usb 1-1: USB disconnect, device number 42
[  169.642156][ T8707] Invalid source name
[  169.646967][ T8707] UBIFS error (pid: 8707): cannot open "/dev/rnullb0", error -22
[  169.932397][  T980] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  170.806667][ T8750] sctp: [Deprecated]: syz.4.811 (pid 8750) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.806667][ T8750] Use struct sctp_sack_info instead
[  171.094605][ T8754] MTD: Couldn't look up '/dev/rnullb0': -15
[  171.154986][ T8759] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  171.167486][ T8762] netlink: 48 bytes leftover after parsing attributes in process `syz.2.815'.
[  171.177994][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.815'.
[  171.202730][   T30] audit: type=1800 audit(1756697571.950:10): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.815" name="/" dev="sockfs" ino=21111 res=0 errno=0
[  171.643526][ T5912] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  171.802826][ T5912] usb 1-1: Using ep0 maxpacket: 8
[  171.814312][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short
[  171.834133][ T5912] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.853418][ T5912] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  171.876600][ T5912] usb 1-1: config 1 interface 0 has no altsetting 0
[  171.892375][  T980] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  171.902017][ T5912] usb 1-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.40
[  171.921315][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.932340][ T5912] usb 1-1: Product: syz
[  171.936521][ T5912] usb 1-1: Manufacturer: syz
[  171.951233][ T5912] usb 1-1: SerialNumber: syz
[  171.978419][   T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  172.023522][  T980] usb 3-1: device descriptor read/64, error -71
[  172.061408][   T30] audit: type=1800 audit(1756697572.810:11): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.822" name="rnullb0" dev="tmpfs" ino=667 res=0 errno=0
[  172.132379][   T43] usb 5-1: Using ep0 maxpacket: 16
[  172.140161][   T43] usb 5-1: unable to get BOS descriptor or descriptor too short
[  172.148549][  T980] usb usb3-port1: attempt power cycle
[  172.157316][   T43] usb 5-1: config 0 has an invalid interface number: 157 but max is 0
[  172.165896][   T43] usb 5-1: config 0 has an invalid interface number: 4 but max is 0
[  172.175195][   T43] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  172.196208][   T43] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  172.215677][   T43] usb 5-1: config 0 has no interface number 0
[  172.221779][   T43] usb 5-1: config 0 has no interface number 1
[  172.233881][   T43] usb 5-1: config 0 interface 157 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  172.257487][   T43] usb 5-1: too many endpoints for config 0 interface 4 altsetting 250: 82, using maximum allowed: 30
[  172.269121][   T43] usb 5-1: config 0 interface 4 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 82
[  172.283569][   T43] usb 5-1: config 0 interface 157 has no altsetting 0
[  172.290343][   T43] usb 5-1: config 0 interface 4 has no altsetting 0
[  172.301303][   T43] usb 5-1: New USB device found, idVendor=19d2, idProduct=1090, bcdDevice=b5.82
[  172.324407][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.332871][   T43] usb 5-1: Product: syz
[  172.337108][   T43] usb 5-1: Manufacturer: syz
[  172.341697][   T43] usb 5-1: SerialNumber: syz
[  172.358713][   T43] usb 5-1: config 0 descriptor??
[  172.502467][  T980] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  172.524240][  T980] usb 3-1: device descriptor read/8, error -71
[  172.968848][ T5912] hid (null): invalid report_count 58840
[  172.982328][ T5912] uclogic 0003:28BD:0078.000D: interface is invalid, ignoring
[  173.466784][ T5912] usb 1-1: USB disconnect, device number 43
[  174.787679][  T980] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  174.797534][   T43] option 5-1:0.157: GSM modem (1-port) converter detected
[  174.806240][   T43] hub 5-1:0.4: Invalid hub with more than one config or interface
[  174.824479][   T43] hub 5-1:0.4: probe with driver hub failed with error -22
[  174.842581][   T43] usb 5-1: USB disconnect, device number 22
[  174.852926][   T43] option 5-1:0.157: device disconnected
[  174.868536][ T8825] pvfs2: Unknown parameter '/'
[  174.879111][ T8824] pvfs2: Unknown parameter '/'
[  175.002567][  T980] usb 3-1: device not accepting address 41, error -71
[  175.012905][  T980] usb usb3-port1: unable to enumerate USB device
[  175.589622][   T30] audit: type=1804 audit(1756697576.340:12): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.841" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  175.592388][   T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  175.716300][ T8844] netlink: 'syz.2.844': attribute type 4 has an invalid length.
[  175.796150][   T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  175.805713][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.825820][   T43] usb 5-1: Product: syz
[  175.830047][   T43] usb 5-1: Manufacturer: syz
[  175.846091][   T43] usb 5-1: SerialNumber: syz
[  176.117466][ T8862] block nbd2: shutting down sockets
[  176.222366][ T5912] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  176.372410][ T5912] usb 1-1: Using ep0 maxpacket: 8
[  176.379969][ T8869] delete_channel: no stack
[  176.380881][ T5912] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  176.385646][ T8869] delete_channel: no stack
[  176.399119][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  176.412363][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  176.431737][ T5912] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  176.458735][ T5912] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  176.482493][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.709876][ T8859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.729862][ T8859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.765995][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'.
[  176.776518][ T5912] usb 1-1: usb_control_msg returned -71
[  176.782112][ T5912] usbtmc 1-1:16.0: can't read capabilities
[  176.816023][ T5912] usb 1-1: USB disconnect, device number 44
[  176.859907][   T43] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  176.866730][   T43] cdc_ncm 5-1:1.0: setting tx_max = 184
[  177.016164][ T8904] mmap: syz.2.860 (8904): VmData 37462016 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data.
[  177.118582][ T8911] MTD: Couldn't look up '/dev/rnullb0': -15
[  177.168738][ T8918] /dev/rnullb0: Can't lookup blockdev
[  177.289503][   T43] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  177.336830][   T43] usb 5-1: USB disconnect, device number 23
[  177.359345][   T43] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  177.372938][   T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  177.541946][   T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  177.562355][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  177.580612][   T24] usb 3-1: SerialNumber: syz
[  177.592931][   T24] usb 3-1: config 0 descriptor??
[  178.152445][   T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  178.333758][   T43] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  178.354102][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.379265][   T43] usb 5-1: config 0 descriptor??
[  178.388381][   T24] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e
[  178.411496][   T24] hackrf 3-1:0.0: Could not detect board
[  178.421374][ T8962] /dev/rnullb0: Can't open blockdev
[  178.422366][   T24] hackrf 3-1:0.0: probe with driver hackrf failed with error -71
[  178.458179][   T24] usb 3-1: USB disconnect, device number 42
[  178.610768][ T8946] Malformed UNC in devname
[  178.610768][ T8946] 
[  178.617745][ T8946] CIFS: VFS: Malformed UNC in devname
[  178.626178][   T43] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  178.640020][   T43] asix 5-1:0.0: probe with driver asix failed with error -71
[  178.657859][   T43] usb 5-1: USB disconnect, device number 24
[  178.849270][ T8982] syz.2.876(8982): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  178.905450][ T8982] /dev/rnullb0: Can't open blockdev
[  179.068540][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'.
[  179.170016][ T8998] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  179.183603][ T8998] /dev/rnullb0: Can't open blockdev
[  179.288645][ T9005] /dev/rnullb0: Can't open blockdev
[  179.316234][ T9007] /dev/rnullb0: Can't open blockdev
[  179.393004][ T9009] /dev/rnullb0: Can't open blockdev
[  179.543731][ T5912] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  179.672402][   T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  179.703743][ T5912] usb 1-1: config 4 has an invalid interface number: 110 but max is 0
[  179.712069][ T5912] usb 1-1: config 4 has no interface number 0
[  179.720579][ T5912] usb 1-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=73.f7
[  179.730965][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.739176][ T5912] usb 1-1: Product: syz
[  179.744520][ T5912] usb 1-1: Manufacturer: syz
[  179.749124][ T5912] usb 1-1: SerialNumber: syz
[  179.761063][ T5912] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state.
[  179.769962][ T5912] usb 1-1: setting power ON
[  179.775184][ T5912] dvb-usb: bulk message failed: -22 (2/0)
[  179.832382][   T43] usb 5-1: Using ep0 maxpacket: 16
[  179.843513][   T43] usb 5-1: config 0 has an invalid interface number: 32 but max is 0
[  179.861910][   T43] usb 5-1: config 0 has no interface number 0
[  179.869861][   T43] usb 5-1: config 0 interface 32 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.888240][   T43] usb 5-1: config 0 interface 32 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.898453][   T43] usb 5-1: config 0 interface 32 has no altsetting 0
[  179.905386][   T43] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  179.912379][ T5912] dvb-usb: bulk message failed: -22 (1/0)
[  179.914531][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.935396][   T43] usb 5-1: config 0 descriptor??
[  179.957832][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.968692][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.044126][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  180.075274][ T5912] dvbdev: DVB: registering new adapter (Mygica D689 DMB-TH)
[  180.102983][ T5912] usb 1-1: media controller created
[  180.135815][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.160314][ T5912] cxusb: set interface failed
[  180.167693][ T5912] dvb-usb: bulk message failed: -22 (3/0)
[  180.173702][ T5912] cxusb: clear tuner gpio failed
[  180.178792][ T5912] dvb-usb: no frontend was attached by 'Mygica D689 DMB-TH'
[  180.292585][ T2155] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  180.302404][ T5912] rc_core: IR keymap rc-d680-dmb not found
[  180.308232][ T5912] Registered IR keymap rc-empty
[  180.323826][ T5912] rc rc0: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  180.344164][ T5912] input: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input22
[  180.353946][   T43] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0
[  180.364078][   T43] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0
[  180.371169][   T43] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0
[  180.384680][   T43] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0
[  180.385229][ T5912] dvb-usb: schedule remote query interval to 100 msecs.
[  180.391849][   T43] corsair 0003:1B1C:1B34.000E: unknown main item tag 0x0
[  180.409343][   T43] corsair 0003:1B1C:1B34.000E: failed to start in urb: -90
[  180.432378][ T5912] usb 1-1: setting power OFF
[  180.432564][   T43] corsair 0003:1B1C:1B34.000E: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.4-1/input32
[  180.449755][ T5912] dvb-usb: bulk message failed: -22 (2/0)
[  180.462436][ T5912] dvb-usb: Mygica D689 DMB-TH successfully initialized and connected.
[  180.490363][ T2155] usb 3-1: Using ep0 maxpacket: 16
[  180.501111][ T5912] usb 1-1: USB disconnect, device number 45
[  180.518127][ T2155] usb 3-1: config 0 has an invalid interface number: 180 but max is 0
[  180.542173][ T2155] usb 3-1: config 0 has no interface number 0
[  180.556578][ T2155] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72
[  180.576528][   T43] usb 5-1: USB disconnect, device number 25
[  180.592919][ T2155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.601907][ T5912] dvb-usb: Mygica D689 DMB-TH successfully deinitialized and disconnected.
[  180.624157][ T2155] usb 3-1: Product: syz
[  180.630208][ T2155] usb 3-1: Manufacturer: syz
[  180.635225][ T2155] usb 3-1: SerialNumber: syz
[  180.651903][ T2155] usb 3-1: config 0 descriptor??
[  180.667213][ T2155] usb 3-1: bad CDC descriptors
[  180.878264][ T5912] usb 3-1: USB disconnect, device number 43
[  180.915039][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'.
[  180.964877][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.893'.
[  181.518808][ T9066] /dev/rnullb0: Can't open blockdev
[  181.609622][ T9070] pim6reg1: entered allmulticast mode
[  181.762497][ T5957] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  181.924414][ T5957] usb 5-1: config index 0 descriptor too short (expected 19492, got 36)
[  181.942350][ T5957] usb 5-1: config 0 has too many interfaces: 36, using maximum allowed: 32
[  181.956537][ T5957] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 36
[  181.976231][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  182.002964][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.022343][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  182.062527][ T5957] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  182.085448][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.103792][ T5957] usb 5-1: config 0 descriptor??
[  182.270094][ T9099] netlink: 45 bytes leftover after parsing attributes in process `syz.0.916'.
[  182.335603][ T9116] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  182.344276][ T9116] /dev/rnullb0: Can't open blockdev
[  182.531235][ T5957] lg-g15 0003:046D:C225.000F: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.4-1/input0
[  182.820507][ T5912] usb 5-1: USB disconnect, device number 26
[  183.242928][ T9132] /dev/rnullb0: Can't open blockdev
[  183.321228][ T9135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'.
[  183.340150][ T9135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'.
[  183.476058][ T9138] /dev/rnullb0: Can't open blockdev
[  183.574169][ T9142] block nbd4: Attempted send on invalid socket
[  183.609657][ T9142] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  183.641801][ T9142] EXT4-fs (nbd4): unable to read superblock
[  184.193921][ T9161] /dev/rnullb0: Can't open blockdev
[  184.749323][ T9187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.940'.
[  184.912783][   T43] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  185.054215][   T43] usb 1-1: device descriptor read/64, error -71
[  185.292548][   T43] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  185.424490][   T43] usb 1-1: device descriptor read/64, error -71
[  185.534350][   T43] usb usb1-port1: attempt power cycle
[  185.806826][ T9199] tipc: Enabled bearer <ib:ipvlan0>, priority 17
[  185.892502][   T43] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  185.922931][   T43] usb 1-1: device descriptor read/8, error -71
[  186.162456][   T43] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  186.193829][   T43] usb 1-1: device descriptor read/8, error -71
[  186.318308][   T43] usb usb1-port1: unable to enumerate USB device
[  186.978327][ T9218] /dev/rnullb0: Can't lookup blockdev
[  188.452649][ T9240] /dev/rnullb0: Can't open blockdev
[  188.485513][ T9242] befs: (nbd2): No write support. Marking filesystem read-only
[  188.516626][ T9242] block nbd2: Attempted send on invalid socket
[  188.536218][ T9242] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  188.603825][ T9245] vxcan0: tx address claim with dest, not broadcast
[  188.892441][ T2155] usb 1-1: new low-speed USB device number 50 using dummy_hcd
[  188.923356][ T9254] /dev/rnullb0: Can't open blockdev
[  189.053638][ T2155] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  189.062187][ T2155] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  189.072912][ T2155] usb 1-1: config 0 has no interface number 0
[  189.079028][ T2155] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  189.084458][ T9261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.963'.
[  189.110222][ T2155] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  189.130452][ T2155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.154286][ T2155] usb 1-1: config 0 descriptor??
[  189.613281][ T9266] loop8: detected capacity change from 0 to 8
[  189.647097][ T5850] Dev loop8: unable to read RDB block 8
[  189.674579][ T5850]  loop8: unable to read partition table
[  189.697929][ T5850] loop8: partition table beyond EOD, truncated
[  189.732641][ T9266] Dev loop8: unable to read RDB block 8
[  189.782793][ T9266]  loop8: unable to read partition table
[  189.799011][ T9266] loop8: partition table beyond EOD, truncated
[  189.814843][ T9266] loop_reread_partitions: partition scan of loop8 (ώθΆ«xό^>Ρΰ– ) failed (rc=-5)
[  189.907057][ T5957] usb 1-1: USB disconnect, device number 50
[  189.972342][   T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  189.988336][ T9275] random: crng reseeded on system resumption
[  190.080038][ T9279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.969'.
[  190.102454][   T43] usb 5-1: device descriptor read/64, error -71
[  190.342450][   T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  190.462787][ T9289] /dev/rnullb0: Can't lookup blockdev
[  190.483108][   T43] usb 5-1: device descriptor read/64, error -71
[  190.594686][   T43] usb usb5-port1: attempt power cycle
[  190.952489][   T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  190.992818][   T43] usb 5-1: device descriptor read/8, error -71
[  191.242918][   T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  191.281564][   T43] usb 5-1: device descriptor read/8, error -71
[  191.289781][ T5866] Bluetooth: hci3: command 0x0405 tx timeout
[  191.340494][ T9320] /dev/rnullb0: Can't open blockdev
[  191.412659][   T43] usb usb5-port1: unable to enumerate USB device
[  191.621313][ T9329] syzkaller1: entered promiscuous mode
[  191.628679][ T9329] syzkaller1: entered allmulticast mode
[  191.645692][ T9329] /dev/rnullb0: Can't open blockdev
[  191.690270][ T9333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.986'.
[  191.699638][ T9331] netlink: 60 bytes leftover after parsing attributes in process `syz.2.986'.
[  191.764946][ T9336] netlink: 19 bytes leftover after parsing attributes in process `syz.0.987'.
[  192.742551][   T43] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  193.043328][   T43] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  193.053735][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.061749][   T43] usb 1-1: Product: syz
[  193.073718][   T43] usb 1-1: Manufacturer: syz
[  193.078486][   T43] usb 1-1: SerialNumber: syz
[  193.084966][   T43] usb 1-1: config 0 descriptor??
[  193.202360][ T5957] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  193.365888][ T5957] usb 5-1: Using ep0 maxpacket: 8
[  193.374403][ T5957] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  193.385074][ T5957] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  193.398902][ T5957] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  193.411957][ T5957] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  193.424548][ T5957] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  193.437095][ T5957] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  193.446042][ T5957] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  193.457594][ T5957] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  193.471070][ T5957] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  193.482409][ T5957] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  193.507761][ T5957] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  193.515917][ T5957] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  193.531742][ T5957] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  193.547642][ T5957] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  193.571109][ T5957] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  193.609735][ T5957] usb 5-1: string descriptor 0 read error: -22
[  193.616683][ T5957] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  193.628538][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.644367][ T5957] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  193.846934][ T5912] usb 5-1: USB disconnect, device number 31
[  193.998825][ T9389] overlayfs: failed to clone upperpath
[  194.326690][ T1309] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  194.336763][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  194.343149][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  194.442852][   T30] audit: type=1804 audit(1756697595.200:13): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1008" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  194.534226][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'.
[  194.550170][ T9402] input: syz1 as /devices/virtual/input/input24
[  194.905346][   T30] audit: type=1804 audit(1756697595.660:14): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1015" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  194.935223][ T9419] fuse: Bad value for 'fd'
[  194.968855][   T24] usb 5-1: new low-speed USB device number 32 using dummy_hcd
[  195.122602][ T5912] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  195.123563][   T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  195.146026][   T24] usb 5-1: config 0 has no interface number 0
[  195.160962][   T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  195.183455][   T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  195.212351][   T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  195.232388][   T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  195.252351][   T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  195.272368][   T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  195.295709][   T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  195.313634][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.316420][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.337212][   T24] usb 5-1: config 0 descriptor??
[  195.342051][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0
[  195.352556][ T9400] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  195.361106][ T9400] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  195.361812][ T5912] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  195.380248][   T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  195.383370][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.422324][ T5912] usb 3-1: Product: syz
[  195.426604][ T5912] usb 3-1: Manufacturer: syz
[  195.441464][ T5912] usb 3-1: SerialNumber: syz
[  195.455234][ T5912] usb 3-1: config 0 descriptor??
[  195.476507][ T5912] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  195.495444][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  195.511509][ T5912] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  195.526520][   T43] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  195.531151][ T5912] usb 3-1: media controller created
[  195.538361][   T43] asix 1-1:0.0: probe with driver asix failed with error -71
[  195.559030][   T43] usb 1-1: USB disconnect, device number 51
[  195.582465][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  195.626828][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.655255][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.666345][ T5912] DVB: Unable to find symbol tda10046_attach()
[  195.692389][ T5912] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  195.701160][ T5912] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  195.763561][ T9431] gfs2: gfs2 mount does not exist
[  195.792624][ T5957] usb 5-1: USB disconnect, device number 32
[  195.817783][ T5957] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  195.926039][ T9437] /dev/rnullb0: Can't open blockdev
[  196.232497][ T5862] Bluetooth: hci3: unexpected event for opcode 0x2029
[  196.545769][ T9449] /dev/rnullb0: Can't open blockdev
[  196.759246][   T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  196.938335][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.949522][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.974485][   T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  197.002422][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.021117][   T10] usb 5-1: config 0 descriptor??
[  197.416322][ T9466] /dev/rnullb0: Can't open blockdev
[  197.437221][   T10] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  197.452571][   T10] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  197.469753][   T10] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  197.479781][   T10] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  197.492438][   T10] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  197.509836][   T10] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  197.522599][   T10] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  197.547845][   T10] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  197.581140][ T9474] deleting an unspecified loop device is not supported.
[  197.634280][ T9474] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  197.649930][   T10] cp2112 0003:10C4:EA90.0010: Part Number: 0x00 Device Version: 0x00
[  197.744441][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'.
[  197.880270][ T5912] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  197.948187][ T5912] usb 3-1: USB disconnect, device number 44
[  198.083806][   T10] cp2112 0003:10C4:EA90.0010: error requesting SMBus config
[  198.102434][   T10] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -71
[  198.114206][   T10] usb 5-1: USB disconnect, device number 33
[  198.292452][   T24] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  198.344486][ T9495] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1038'.
[  198.364611][ T9495] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  198.371578][ T9495] /dev/rnullb0: Can't open blockdev
[  198.455932][   T24] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  198.474714][   T24] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  198.508289][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  198.518400][   T24] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  198.538716][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.556719][   T24] usb 1-1: config 0 descriptor??
[  198.574104][ T9488] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  198.581363][   T30] audit: type=1804 audit(1756697599.330:15): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1039" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  199.036295][   T24] sony 0003:054C:024B.0011: item fetching failed at offset 0/2
[  199.065644][   T24] sony 0003:054C:024B.0011: parse failed
[  199.071381][   T24] sony 0003:054C:024B.0011: probe with driver sony failed with error -22
[  199.249769][   T24] usb 1-1: USB disconnect, device number 52
[  199.828061][ T9520] kernel read not supported for file /file1 (pid: 9520 comm: syz.0.1045)
[  199.898622][   T30] audit: type=1800 audit(1756697600.650:16): pid=9520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1045" name="file1" dev="mqueue" ino=24462 res=0 errno=0
[  200.243708][ T5862] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  200.252309][ T5862] Bluetooth: hci3: Injecting HCI hardware error event
[  200.259326][ T5862] Bluetooth: hci3: hardware error 0x00
[  200.673017][   T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  200.762596][ T9540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1051'.
[  200.845337][   T10] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  200.860176][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.878893][   T10] usb 5-1: config 0 descriptor??
[  201.051499][ T2155] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  201.072423][ T2155] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  201.088639][ T2155] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  201.109965][ T2155] hid-generic 0000:007F:FFFFFFFE.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  201.122100][ T9550] /dev/rnullb0: Can't open blockdev
[  201.167048][ T9549] fido_id[9549]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  201.237566][ T9558] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1056'.
[  201.307465][ T9560] input: syz0 as /devices/virtual/input/input25
[  201.317773][ T9533] /dev/rnullb0: Can't open blockdev
[  201.325921][   T10] usb 5-1: Cannot set MAC address
[  201.339646][   T10] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  201.371777][   T10] usb 5-1: USB disconnect, device number 34
[  201.542743][ T9566] ucma_write: process 745 (syz.2.1058) changed security contexts after opening file descriptor, this is not allowed.
[  201.698153][ T9569] nbd: must specify at least one socket
[  201.713850][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1059'.
[  201.733926][ T9569] netlink: 'syz.2.1059': attribute type 3 has an invalid length.
[  201.751189][ T9569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1059'.
[  201.909254][ T9572] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  201.930539][ T9572] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  201.953446][ T9573] /dev/rnullb0: Can't open blockdev
[  202.322361][ T5862] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  202.648879][ T9581] /dev/rnullb0: Can't lookup blockdev
[  202.866100][   T30] audit: type=1804 audit(1756697603.620:17): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1068" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  202.924724][ T9589] wlan1 speed is unknown, defaulting to 1000
[  203.212816][   T30] audit: type=1804 audit(1756697603.960:18): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1072" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  203.276548][ T5957] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  203.442416][ T5957] usb 5-1: Using ep0 maxpacket: 32
[  203.449717][ T5957] usb 5-1: config 0 has an invalid interface number: 211 but max is 0
[  203.459798][ T5957] usb 5-1: config 0 has no interface number 0
[  203.479729][ T5957] usb 5-1: config 0 interface 211 has no altsetting 0
[  203.491617][ T5957] usb 5-1: New USB device found, idVendor=2304, idProduct=022c, bcdDevice=3c.89
[  203.501438][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.520433][ T5957] usb 5-1: Product: syz
[  203.532386][ T5957] usb 5-1: Manufacturer: syz
[  203.537715][ T5957] usb 5-1: SerialNumber: syz
[  203.557558][ T5957] usb 5-1: config 0 descriptor??
[  203.610712][ T9619] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1076'.
[  203.776609][ T5957] dvb-usb: found a 'Pinnacle PCTV 2000e' in warm state.
[  203.786468][ T5957] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  203.810368][ T5957] dvbdev: DVB: registering new adapter (Pinnacle PCTV 2000e)
[  203.825028][ T5957] usb 5-1: media controller created
[  203.862500][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  203.956361][ T5957] DVB: Unable to find symbol dib7000p_attach()
[  203.972355][ T5957] dvb-usb: no frontend was attached by 'Pinnacle PCTV 2000e'
[  203.980843][ T9597] /dev/rnullb0: Can't open blockdev
[  203.995919][ T5957] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  204.025552][ T5957] dvbdev: DVB: registering new adapter (Pinnacle PCTV 2000e)
[  204.042187][ T5957] usb 5-1: media controller created
[  204.070884][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  204.183506][ T5957] DVB: Unable to find symbol dib7000p_attach()
[  204.200669][ T5957] dvb-usb: no frontend was attached by 'Pinnacle PCTV 2000e'
[  204.302409][ T5957] rc_core: IR keymap rc-dib0700-rc5 not found
[  204.308516][ T5957] Registered IR keymap rc-empty
[  204.325331][ T5957] dvb-usb: could not initialize remote control.
[  204.331608][ T5957] dvb-usb: Pinnacle PCTV 2000e successfully initialized and connected.
[  204.365120][ T5957] usb 5-1: USB disconnect, device number 35
[  204.433337][ T5957] dvb-usb: Pinnacle PCTV 2000e successfully deinitialized and disconnected.
[  205.844042][   T30] audit: type=1804 audit(1756697606.600:19): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1085" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  205.908122][ T9651] /dev/rnullb0: Can't lookup blockdev
[  205.969462][ T9653] overlay: ./file0 is not a directory
[  206.655953][ T9662] /dev/rnullb0: Can't open blockdev
[  207.196061][ T9680] /dev/rnullb0: Can't open blockdev
[  207.539379][   T30] audit: type=1804 audit(1756697608.290:20): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1103" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  208.130703][ T2155] usb 1-1: new low-speed USB device number 53 using dummy_hcd
[  208.196064][ T9721] netlink: 'syz.1.1109': attribute type 6 has an invalid length.
[  208.288652][ T2155] usb 1-1: device descriptor read/64, error -71
[  208.380220][ T9733] overlayfs: failed to resolve './file1': -2
[  208.423035][ T9737] /dev/rnullb0: Can't open blockdev
[  208.532345][ T2155] usb 1-1: new low-speed USB device number 54 using dummy_hcd
[  208.672348][ T2155] usb 1-1: device descriptor read/64, error -71
[  208.708807][ T9745] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1115'.
[  208.718592][ T9746] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1115'.
[  208.754581][ T9745] netlink: 'syz.4.1115': attribute type 3 has an invalid length.
[  208.763242][ T9745] netlink: 716 bytes leftover after parsing attributes in process `syz.4.1115'.
[  208.792483][ T2155] usb usb1-port1: attempt power cycle
[  209.132418][ T2155] usb 1-1: new low-speed USB device number 55 using dummy_hcd
[  209.164025][ T2155] usb 1-1: device descriptor read/8, error -71
[  209.402434][ T2155] usb 1-1: new low-speed USB device number 56 using dummy_hcd
[  209.432958][ T2155] usb 1-1: device descriptor read/8, error -71
[  209.543386][ T2155] usb usb1-port1: unable to enumerate USB device
[  210.034277][ T9771] delete_channel: no stack
[  210.038803][ T9771] delete_channel: no stack
[  210.122479][   T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  210.292079][   T43] usb 3-1: Using ep0 maxpacket: 16
[  210.304479][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10
[  210.316752][   T43] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  210.326149][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.341868][   T43] usb 3-1: config 0 descriptor??
[  210.379091][ T9786] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  210.613849][   T43] usbhid 3-1:0.0: can't add hid device: -71
[  210.626284][   T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  210.650541][   T43] usb 3-1: USB disconnect, device number 45
[  210.798673][ T9799] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1132'.
[  210.831627][ T9799] /dev/rnullb0: Can't open blockdev
[  210.848567][ T9801] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  211.169685][ T9809] /dev/rnullb0: Can't lookup blockdev
[  211.182450][   T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  211.323892][ T9817] netlink: 'syz.1.1139': attribute type 27 has an invalid length.
[  211.345205][ T9817] netlink: 'syz.1.1139': attribute type 1 has an invalid length.
[  211.362566][   T43] usb 3-1: Using ep0 maxpacket: 32
[  211.363362][ T9817] bridge0: port 1(bridge_slave_0) entered learning state
[  211.369754][   T43] usb 3-1: config 0 has an invalid interface number: 126 but max is 0
[  211.402376][   T43] usb 3-1: config 0 has no interface number 0
[  211.408503][   T43] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  211.432367][   T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  211.432788][   T43] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  211.462364][   T43] usb 3-1: config 0 interface 126 has no altsetting 0
[  211.483576][   T43] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  211.492710][ T5957] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  211.500709][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.509394][   T43] usb 3-1: Product: syz
[  211.513749][   T43] usb 3-1: Manufacturer: syz
[  211.518332][   T43] usb 3-1: SerialNumber: syz
[  211.525535][   T43] usb 3-1: config 0 descriptor??
[  211.534602][ T9803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  211.541825][ T9803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  211.562494][   T10] usb 1-1: device descriptor read/64, error -71
[  211.663883][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.674956][ T5957] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  211.684152][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.703041][ T5957] usb 5-1: config 0 descriptor??
[  211.812395][   T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  211.914617][ T5957] usbhid 5-1:0.0: can't add hid device: -71
[  211.926469][ T5957] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  211.942357][   T10] usb 1-1: device descriptor read/64, error -71
[  211.942919][ T5957] usb 5-1: USB disconnect, device number 36
[  211.963543][   T43] ir_usb 3-1:0.126: IR Dongle converter detected
[  212.052556][   T10] usb usb1-port1: attempt power cycle
[  212.165654][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.183781][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.204152][   T43] usb 3-1: IRDA class descriptor not found, device not bound
[  212.226896][   T43] usb 3-1: USB disconnect, device number 46
[  212.402418][   T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  212.422767][   T10] usb 1-1: device descriptor read/8, error -71
[  212.442427][ T5957] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  212.602371][ T5957] usb 5-1: Using ep0 maxpacket: 32
[  212.609544][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.621239][ T5957] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  212.630903][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.643586][ T5957] usb 5-1: config 0 descriptor??
[  212.658519][ T5957] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  212.672385][   T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  212.677027][ T5957] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  212.692739][   T10] usb 1-1: device descriptor read/8, error -71
[  212.802608][   T10] usb usb1-port1: unable to enumerate USB device
[  212.982360][ T6015] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  213.075001][   T43] usb 5-1: USB disconnect, device number 37
[  213.082212][   T43] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  213.145420][ T6015] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[  213.160653][ T6015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  213.184519][ T6015] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  213.194161][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.206929][ T6015] usb 3-1: config 0 descriptor??
[  213.216344][ T6015] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  213.300107][ T9849] gfs2: Unknown parameter '*]$#'
[  213.530466][   T30] audit: type=1804 audit(1756697614.280:21): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1155" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  214.273116][ T6015] usb 3-1: USB disconnect, device number 47
[  214.809404][ T9905] xt_HMARK: proto mask must be zero with L3 mode
[  214.954986][ T9911] netlink: 'syz.4.1168': attribute type 11 has an invalid length.
[  214.963059][ T9911] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1168'.
[  215.110943][   T30] audit: type=1804 audit(1756697615.860:22): pid=9917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1171" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  215.190432][ T9923] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1172'.
[  215.217047][ T9923] NCSI netlink: No device for ifindex 29216
[  215.238047][ T9923] /dev/rnullb0: Can't open blockdev
[  215.585500][   T30] audit: type=1804 audit(1756697616.340:23): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1180" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  215.906703][   T30] audit: type=1326 audit(1756697616.660:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9967 comm="syz.2.1185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f966478ebe9 code=0x0
[  215.979864][   T30] audit: type=1804 audit(1756697616.730:25): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1187" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  216.007785][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.017508][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.027531][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.036585][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.063318][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.071902][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.079762][ T5957] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  216.088103][ T9977] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  216.094631][ T9977] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  216.108310][ T9977] vhci_hcd vhci_hcd.0: Device attached
[  216.180315][ T9982] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1188'.
[  216.190796][ T9982] /dev/rnullb0: Can't open blockdev
[  216.222492][ T5957] usb 5-1: device descriptor read/64, error -71
[  216.352372][ T2155] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  216.372436][ T6015] usb 38-1: SetAddress Request (2) to port 0
[  216.378490][ T6015] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  216.462340][ T5957] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  216.523263][ T2155] usb 3-1: Using ep0 maxpacket: 8
[  216.534404][ T2155] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  216.552396][ T2155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.574014][ T2155] usb 3-1: config 0 descriptor??
[  216.591774][ T2155] hso 3-1:0.0: Can't find BULK IN endpoint
[  216.603955][ T5957] usb 5-1: device descriptor read/64, error -71
[  216.722611][ T5957] usb usb5-port1: attempt power cycle
[  217.074855][ T5957] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  217.102990][ T5957] usb 5-1: device descriptor read/8, error -71
[  217.104603][ T9995] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  217.353263][ T5957] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  217.383392][ T5957] usb 5-1: device descriptor read/8, error -71
[  217.434693][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880323c9400: rx timeout, send abort
[  217.502363][ T5957] usb usb5-port1: unable to enumerate USB device
[  217.929047][ T9995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  217.934772][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880323c9800: rx timeout, send abort
[  217.946203][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880323c9400: abort rx timeout. Force session deactivation
[  218.272333][ T5905] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  218.403281][ T5905] usb 1-1: device descriptor read/64, error -71
[  218.435694][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880323c8000: rx timeout, send abort
[  218.445970][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880323c9800: abort rx timeout. Force session deactivation
[  218.652350][ T5905] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  218.792334][ T5905] usb 1-1: device descriptor read/64, error -71
[  218.903075][ T5905] usb usb1-port1: attempt power cycle
[  218.925477][ T2155] usb 3-1: USB disconnect, device number 48
[  218.940666][ T9978] vhci_hcd: connection reset by peer
[  218.946058][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880323c8000: abort rx timeout. Force session deactivation
[  218.960711][   T12] vhci_hcd: stop threads
[  218.966135][   T12] vhci_hcd: release socket
[  218.970613][   T12] vhci_hcd: disconnect device
[  218.987892][T10013] /dev/rnullb0: Can't open blockdev
[  219.040057][T10017] syzkaller1: left promiscuous mode
[  219.045563][T10017] syzkaller1: left allmulticast mode
[  219.057578][T10017] /dev/sg0: Can't lookup blockdev
[  219.097291][T10021] /dev/rnullb0: Can't open blockdev
[  219.242500][ T5905] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  219.262998][ T5905] usb 1-1: device descriptor read/8, error -71
[  219.372344][ T2155] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  219.485032][T10026] netlink: 'syz.1.1202': attribute type 12 has an invalid length.
[  219.493011][T10026] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1202'.
[  219.502336][ T5905] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  219.532376][ T2155] usb 3-1: Using ep0 maxpacket: 8
[  219.538014][ T5905] usb 1-1: device descriptor read/8, error -71
[  219.552953][ T2155] usb 3-1: config 9 has an invalid interface number: 12 but max is 0
[  219.572324][ T2155] usb 3-1: config 9 has no interface number 0
[  219.578537][ T2155] usb 3-1: config 9 interface 12 altsetting 183 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  219.596429][T10031] trusted_key: syz.1.1204 sent an empty control message without MSG_MORE.
[  219.600216][ T2155] usb 3-1: config 9 interface 12 has no altsetting 0
[  219.609235][T10031] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1204'.
[  219.633674][ T2155] usb 3-1: New USB device found, idVendor=0c45, idProduct=6270, bcdDevice=70.82
[  219.652334][ T2155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.660717][ T5905] usb usb1-port1: unable to enumerate USB device
[  219.667431][ T2155] usb 3-1: Product: syz
[  219.675531][ T2155] usb 3-1: Manufacturer: syz
[  219.680147][ T2155] usb 3-1: SerialNumber: syz
[  219.871261][T10042] /dev/rnullb0: Can't lookup blockdev
[  219.905282][ T2155] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6270
[  219.932745][ T2155] gspca_sn9c20x: Write register 1000 failed -71
[  219.942340][ T2155] gspca_sn9c20x: Device initialization failed
[  219.948473][ T2155] gspca_sn9c20x 3-1:9.12: probe with driver gspca_sn9c20x failed with error -71
[  219.953921][T10046] netlink: 'syz.1.1210': attribute type 1 has an invalid length.
[  219.967748][T10046] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1210'.
[  219.994845][ T2155] usb 3-1: USB disconnect, device number 49
[  220.084618][   T30] audit: type=1326 audit(1756697620.840:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10047 comm="syz.1.1211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf85d8ebe9 code=0x0
[  220.164218][T10053] /dev/rnullb0: Can't open blockdev
[  220.502422][   T24] usb 5-1: new low-speed USB device number 42 using dummy_hcd
[  220.653703][   T24] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  220.662970][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.672798][   T24] usb 5-1: config 0 descriptor??
[  220.881002][   T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  220.904973][   T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  220.917717][   T24] asix 5-1:0.0: probe with driver asix failed with error -32
[  220.978286][T10082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.989941][T10082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.212746][   T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  221.374409][   T24] usb 3-1: Using ep0 maxpacket: 8
[  221.384606][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  221.407154][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  221.422387][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  221.436965][   T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.455475][   T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  221.456662][ T6015] usb 38-1: device descriptor read/8, error -110
[  221.472330][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.957238][   T43] usb 5-1: USB disconnect, device number 42
[  222.013498][ T6015] usb usb38-port1: attempt power cycle
[  222.452782][   T43] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  222.604176][   T43] usb 5-1: Using ep0 maxpacket: 8
[  222.614724][   T43] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  222.639473][   T43] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  222.642195][ T6015] usb usb38-port1: unable to enumerate USB device
[  222.684562][   T43] usb 5-1: config 0 has no interface number 0
[  222.824723][T10107] syz.0.1227 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  222.979704][   T43] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  223.006540][   T43] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  223.017938][   T43] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  223.030294][   T43] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  223.039618][   T43] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  223.100045][   T43] usb 5-1: Product: syz
[  223.104337][   T30] audit: type=1804 audit(1756697623.850:27): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1228" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  223.947408][   T43] usb 5-1: config 0 descriptor??
[  223.953485][T10096] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  223.988634][   T24] usb 3-1: usb_control_msg returned -71
[  224.007201][   T24] usbtmc 3-1:16.0: can't read capabilities
[  224.038181][   T24] usb 3-1: USB disconnect, device number 50
[  224.192429][T10126] /dev/rnullb0: Can't open blockdev
[  224.337305][T10135] netlink: 'syz.0.1238': attribute type 21 has an invalid length.
[  224.362409][T10135] netlink: 'syz.0.1238': attribute type 6 has an invalid length.
[  224.370500][T10135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1238'.
[  224.394372][T10135] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  224.574713][T10144] kvm: pic: non byte write
[  224.579410][T10144] kvm: pic: non byte write
[  224.589547][T10144] kvm: pic: non byte write
[  224.594851][T10144] kvm: pic: non byte write
[  224.605583][T10144] kvm: pic: non byte write
[  224.612696][T10144] kvm: pic: non byte write
[  224.620419][T10144] kvm: pic: non byte write
[  224.631276][T10144] kvm: pic: non byte write
[  224.993431][   T43] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input28
[  225.142373][ T6015] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  225.184509][    C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  225.194101][   T43] usb 5-1: USB disconnect, device number 43
[  225.292348][ T6015] usb 1-1: device descriptor read/64, error -71
[  225.532350][ T6015] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  225.662396][ T6015] usb 1-1: device descriptor read/64, error -71
[  225.772664][ T6015] usb usb1-port1: attempt power cycle
[  225.804103][T10157] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  225.811083][T10157] overlayfs: failed to set xattr on upper
[  225.816896][T10157] overlayfs: ...falling back to redirect_dir=nofollow.
[  225.832171][T10157] overlayfs: ...falling back to index=off.
[  225.848258][T10157] overlayfs: ...falling back to uuid=null.
[  225.870095][T10157] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  226.054387][T10170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1247'.
[  226.074021][T10167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1247'.
[  226.093260][T10167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1247'.
[  226.162343][ T6015] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  226.203896][ T6015] usb 1-1: device descriptor read/8, error -71
[  226.227703][T10173] /dev/rnullb0: Can't open blockdev
[  226.456061][ T6015] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  226.496420][ T6015] usb 1-1: device descriptor read/8, error -71
[  226.522467][  T980] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  226.612858][ T6015] usb usb1-port1: unable to enumerate USB device
[  226.673814][  T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.693689][  T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.711720][  T980] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  226.721179][  T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.741471][  T980] usb 3-1: config 0 descriptor??
[  226.862422][   T43] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  227.039377][T10198] fuse: Bad value for 'group_id'
[  227.046562][T10198] fuse: Bad value for 'group_id'
[  227.166622][  T980] hid_parser_main: 35 callbacks suppressed
[  227.166645][  T980] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0
[  227.180089][  T980] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0
[  227.189127][  T980] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0
[  227.203205][  T980] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0
[  227.210533][  T980] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0
[  227.218853][   T43] usb 5-1: device descriptor read/64, error -71
[  227.226103][  T980] hid-steam 0003:28DE:1142.0013: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  227.245774][   T30] audit: type=1804 audit(1756697628.000:28): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1261" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  227.436792][T10215] /dev/rnullb0: Can't open blockdev
[  227.482394][   T43] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  227.652356][   T43] usb 5-1: Using ep0 maxpacket: 8
[  227.663522][   T43] usb 5-1: config 231 has an invalid interface number: 6 but max is 0
[  227.671747][   T43] usb 5-1: config 231 has an invalid interface descriptor of length 6, skipping
[  227.702336][   T43] usb 5-1: config 231 has no interface number 0
[  227.709205][   T43] usb 5-1: config 231 interface 6 altsetting 76 has a duplicate endpoint with address 0x4, skipping
[  227.732425][   T43] usb 5-1: config 231 interface 6 altsetting 76 has a duplicate endpoint with address 0xF, skipping
[  227.752351][   T43] usb 5-1: config 231 interface 6 altsetting 76 endpoint 0xC has invalid wMaxPacketSize 0
[  227.772423][   T43] usb 5-1: config 231 interface 6 altsetting 76 has a duplicate endpoint with address 0x2, skipping
[  227.802351][   T43] usb 5-1: config 231 interface 6 altsetting 76 has 8 endpoint descriptors, different from the interface descriptor's value: 14
[  227.807427][T10220] MTD: Couldn't look up '/dev/rnullb0': -15
[  227.822356][   T43] usb 5-1: config 231 interface 6 has no altsetting 0
[  227.833756][   T43] usb 5-1: New USB device found, idVendor=05c6, idProduct=9066, bcdDevice=85.55
[  227.843756][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.862354][   T43] usb 5-1: Product: ��Ⲃ�䲣�㢶顼㸇�經蔱�땥�䃆溔샗ꅶ뢺Ի�༠�꾠�滰ᮒ�㠣�淴忦컗��㇣��狀䧿�⯧拋�딒⽫ॣ狼�
[  227.894884][   T43] usb 5-1: Manufacturer: Π­
[  227.899437][   T43] usb 5-1: SerialNumber: �췩�ᖗ��ﲂ셺����鬾堬�ﲠ櫽
[  228.132833][   T43] usb 5-1: USB disconnect, device number 45
[  228.896476][T10259] input: syz0 as /devices/virtual/input/input29
[  228.902933][   T43] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  228.922738][ T5862] Bluetooth: hci0: unexpected event for opcode 0x6402
[  229.070805][   T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  229.080134][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.089589][   T43] usb 1-1: Product: syz
[  229.094332][   T43] usb 1-1: Manufacturer: syz
[  229.098995][   T43] usb 1-1: SerialNumber: syz
[  229.113640][   T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  229.130910][ T5957] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  229.222355][ T6015] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  229.299992][   T24] usb 3-1: USB disconnect, device number 51
[  229.351907][T10271] /dev/rnullb0: Can't open blockdev
[  229.382523][ T6015] usb 5-1: Using ep0 maxpacket: 8
[  229.392686][ T6015] usb 5-1: config 9 has an invalid interface number: 12 but max is 0
[  229.404804][T10273] /dev/rnullb0: Can't open blockdev
[  229.410214][ T6015] usb 5-1: config 9 has no interface number 0
[  229.417187][ T6015] usb 5-1: config 9 interface 12 altsetting 183 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  229.431777][ T6015] usb 5-1: config 9 interface 12 has no altsetting 0
[  229.441429][ T6015] usb 5-1: New USB device found, idVendor=0c45, idProduct=6270, bcdDevice=70.82
[  229.459731][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.469611][ T6015] usb 5-1: Product: syz
[  229.475082][ T6015] usb 5-1: Manufacturer: syz
[  229.479973][ T6015] usb 5-1: SerialNumber: syz
[  229.702015][ T6015] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6270
[  229.712671][ T6015] gspca_sn9c20x: Write register 1000 failed -71
[  229.722554][ T6015] gspca_sn9c20x: Device initialization failed
[  229.732010][ T6015] gspca_sn9c20x 5-1:9.12: probe with driver gspca_sn9c20x failed with error -71
[  229.750781][ T6015] usb 5-1: USB disconnect, device number 46
[  229.831571][T10285] rdma_rxe: rxe_newlink: failed to add wlan1
[  229.849453][T10287] /dev/rnullb0: Can't lookup blockdev
[  229.966448][T10296] 9p: Bad value for 'rfdno'
[  229.971537][T10296] /dev/rnullb0: Can't lookup blockdev
[  230.005859][   T30] audit: type=1804 audit(1756697630.760:29): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1292" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  230.163156][ T5957] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  230.170430][ T5957] ath9k_htc: Failed to initialize the device
[  230.198579][ T5957] usb 1-1: ath9k_htc: USB layer deinitialized
[  230.279134][T10303] netlink: 'syz.4.1293': attribute type 1 has an invalid length.
[  230.343497][T10310] /dev/rnullb0: Can't open blockdev
[  230.355024][T10311] netlink: 'syz.4.1293': attribute type 37 has an invalid length.
[  230.642391][T10250] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  230.655479][   T24] usb 1-1: USB disconnect, device number 70
[  230.712646][ T5957] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  230.770614][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.783755][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.795392][T10326] netlink: 'syz.2.1299': attribute type 12 has an invalid length.
[  230.806238][T10326] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1299'.
[  230.865104][ T5957] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  230.878600][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.889982][ T5957] usb 5-1: Product: syz
[  230.903346][ T5957] usb 5-1: Manufacturer: syz
[  230.907977][ T5957] usb 5-1: SerialNumber: syz
[  230.919678][ T5957] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  230.936678][   T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  231.147436][T10347] netlink: 'syz.1.1305': attribute type 10 has an invalid length.
[  231.157120][T10347] macvlan0: entered promiscuous mode
[  231.200251][T10347] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  231.252359][   T43] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  231.336876][T10355] /dev/rnullb0: Can't open blockdev
[  231.402387][   T43] usb 3-1: Using ep0 maxpacket: 8
[  231.409300][   T43] usb 3-1: config 9 has an invalid interface number: 12 but max is 0
[  231.419895][   T43] usb 3-1: config 9 has no interface number 0
[  231.426408][   T43] usb 3-1: config 9 interface 12 altsetting 183 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  231.439514][   T43] usb 3-1: config 9 interface 12 has no altsetting 0
[  231.451398][   T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=6270, bcdDevice=70.82
[  231.464247][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.478852][   T43] usb 3-1: Product: syz
[  231.483546][   T43] usb 3-1: Manufacturer: syz
[  231.489593][   T43] usb 3-1: SerialNumber: syz
[  231.491274][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.514732][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.708410][   T43] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6270
[  231.717880][   T43] gspca_sn9c20x: Write register 1000 failed -71
[  231.722365][ T6015] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  231.724976][   T43] gspca_sn9c20x: Device initialization failed
[  231.740169][   T43] gspca_sn9c20x 3-1:9.12: probe with driver gspca_sn9c20x failed with error -71
[  231.757319][   T43] usb 3-1: USB disconnect, device number 52
[  231.862378][ T6015] usb 1-1: device descriptor read/64, error -71
[  232.013861][   T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  232.024311][   T24] ath9k_htc: Failed to initialize the device
[  232.059063][   T24] usb 5-1: ath9k_htc: USB layer deinitialized
[  232.123898][ T6015] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  232.182512][   T30] audit: type=1804 audit(1756697632.940:30): pid=10373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1315" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  232.272365][ T6015] usb 1-1: device descriptor read/64, error -71
[  232.335115][T10382] MTD: Couldn't look up '/dev/rnullb0': -15
[  232.382994][ T6015] usb usb1-port1: attempt power cycle
[  232.552347][ T2155] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  232.702362][ T2155] usb 3-1: Using ep0 maxpacket: 16
[  232.713141][ T2155] usb 3-1: config 0 has an invalid interface number: 61 but max is 0
[  232.721322][ T2155] usb 3-1: config 0 has an invalid descriptor of length 181, skipping remainder of the config
[  232.733045][ T6015] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  232.741169][ T2155] usb 3-1: config 0 has no interface number 0
[  232.747471][ T2155] usb 3-1: too many endpoints for config 0 interface 61 altsetting 215: 230, using maximum allowed: 30
[  232.758970][ T2155] usb 3-1: config 0 interface 61 altsetting 215 has 0 endpoint descriptors, different from the interface descriptor's value: 230
[  232.772557][ T6015] usb 1-1: device descriptor read/8, error -71
[  232.779258][ T2155] usb 3-1: config 0 interface 61 has no altsetting 0
[  232.786133][ T2155] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  232.795470][ T2155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.806390][ T2155] usb 3-1: config 0 descriptor??
[  232.879409][T10384] 9p: Bad value for 'rfdno'
[  233.032321][ T6015] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  233.063015][ T6015] usb 1-1: device descriptor read/8, error -71
[  233.173954][ T6015] usb usb1-port1: unable to enumerate USB device
[  233.287111][ T2155] usb 3-1: USB disconnect, device number 53
[  233.356089][ T5905] usb 5-1: USB disconnect, device number 47
[  233.465922][T10391] /dev/rnullb0: Can't lookup blockdev
[  233.471771][T10392] /dev/rnullb0: Can't lookup blockdev
[  233.705802][T10400] netlink: 'syz.1.1324': attribute type 1 has an invalid length.
[  233.713742][T10400] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1324'.
[  233.841711][T10408] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  234.816832][   T30] audit: type=1804 audit(1756697635.570:31): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1336" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  234.826910][T10437] /dev/rnullb0: Can't open blockdev
[  235.052555][T10455] /dev/rnullb0: Can't open blockdev
[  235.064177][T10455] block nbd2: Attempted send on invalid socket
[  235.077306][T10455] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[  235.087878][T10455] gfs2: error -5 reading superblock
[  235.103679][T10461] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  235.332501][T10463] /dev/sg0: Can't lookup blockdev
[  235.612636][   T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  235.752534][   T24] usb 5-1: device descriptor read/64, error -71
[  235.932530][ T5957] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  236.003569][   T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  236.074084][ T5957] usb 1-1: device descriptor read/64, error -71
[  236.097636][T10496] input: syz0 as /devices/virtual/input/input30
[  236.153816][   T24] usb 5-1: device descriptor read/64, error -71
[  236.189661][T10500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1357'.
[  236.232937][T10502] /dev/rnullb0: Can't lookup blockdev
[  236.262816][   T24] usb usb5-port1: attempt power cycle
[  236.275972][   T30] audit: type=1804 audit(1756697637.030:32): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1359" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  236.312804][ T5957] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  236.339379][T10508] MTD: Couldn't look up '/dev/rnullb0': -15
[  236.382356][ T5905] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  236.452638][ T5957] usb 1-1: device descriptor read/64, error -71
[  236.542323][ T5905] usb 3-1: Using ep0 maxpacket: 8
[  236.548631][ T5905] usb 3-1: config 9 has an invalid interface number: 12 but max is 0
[  236.556903][ T5905] usb 3-1: config 9 has no interface number 0
[  236.563097][ T5905] usb 3-1: config 9 interface 12 altsetting 183 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  236.573055][ T5957] usb usb1-port1: attempt power cycle
[  236.574290][ T5905] usb 3-1: config 9 interface 12 has no altsetting 0
[  236.587958][ T5905] usb 3-1: New USB device found, idVendor=0c45, idProduct=6270, bcdDevice=70.82
[  236.598200][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.606315][ T5905] usb 3-1: Product: syz
[  236.610466][ T5905] usb 3-1: Manufacturer: syz
[  236.616338][ T5905] usb 3-1: SerialNumber: syz
[  236.622419][   T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  236.654029][   T24] usb 5-1: device descriptor read/8, error -71
[  236.838199][ T5905] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6270
[  236.848348][ T5905] gspca_sn9c20x: Write register 1000 failed -71
[  236.854804][ T5905] gspca_sn9c20x: Device initialization failed
[  236.860921][ T5905] gspca_sn9c20x 3-1:9.12: probe with driver gspca_sn9c20x failed with error -71
[  236.876183][ T5905] usb 3-1: USB disconnect, device number 54
[  236.892653][   T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  236.913196][   T24] usb 5-1: device descriptor read/8, error -71
[  236.932405][ T5957] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  236.968424][ T5957] usb 1-1: device descriptor read/8, error -71
[  237.023595][   T24] usb usb5-port1: unable to enumerate USB device
[  237.156278][T10522] /dev/rnullb0: Can't lookup blockdev
[  237.226265][   T30] audit: type=1804 audit(1756697637.980:33): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1368" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  237.252411][ T5957] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  237.283894][ T5957] usb 1-1: device descriptor read/8, error -71
[  237.383789][T10536] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1371'.
[  237.406835][ T5957] usb usb1-port1: unable to enumerate USB device
[  237.645939][   T30] audit: type=1804 audit(1756697638.400:34): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1376" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  238.022357][ T5957] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  238.175199][ T5957] usb 3-1: unable to get BOS descriptor or descriptor too short
[  238.193286][ T5957] usb 3-1: config 7 has an invalid interface number: 140 but max is 1
[  238.212332][ T5957] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  238.230539][ T5957] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  238.239640][ T5957] usb 3-1: config 7 has an invalid interface number: 231 but max is 1
[  238.251634][ T5957] usb 3-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config
[  238.262253][ T5957] usb 3-1: config 7 has no interface number 0
[  238.269512][ T5957] usb 3-1: config 7 has no interface number 1
[  238.276048][ T5957] usb 3-1: config 7 interface 140 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  238.288415][ T5957] usb 3-1: config 7 interface 140 altsetting 4 has an endpoint descriptor with address 0x16, changing to 0x6
[  238.300390][ T5957] usb 3-1: config 7 interface 140 altsetting 4 has a duplicate endpoint with address 0x6, skipping
[  238.312898][ T5957] usb 3-1: config 7 interface 140 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[  238.327623][ T5957] usb 3-1: config 7 interface 140 altsetting 4 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  238.339570][ T5957] usb 3-1: config 7 interface 140 altsetting 4 endpoint 0x9 has invalid maxpacket 1608, setting to 1024
[  238.351930][ T5957] usb 3-1: config 7 interface 140 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  238.364878][ T5957] usb 3-1: config 7 interface 140 altsetting 4 has a duplicate endpoint with address 0x7, skipping
[  238.395664][ T5957] usb 3-1: config 7 interface 140 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[  238.427934][ T5957] usb 3-1: config 7 interface 231 altsetting 197 has an invalid descriptor for endpoint zero, skipping
[  238.435986][T10560] sctp: [Deprecated]: syz.4.1379 (pid 10560) Use of struct sctp_assoc_value in delayed_ack socket option.
[  238.435986][T10560] Use struct sctp_sack_info instead
[  238.459140][ T5957] usb 3-1: config 7 interface 231 altsetting 197 has 2 endpoint descriptors, different from the interface descriptor's value: 8
[  238.474280][ T5957] usb 3-1: config 7 interface 140 has no altsetting 0
[  238.481164][ T5957] usb 3-1: config 7 interface 231 has no altsetting 0
[  238.501321][ T5957] usb 3-1: Dual-Role OTG device on HNP port
[  238.508211][ T5957] usb 3-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=97.2a
[  238.517750][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.526222][ T5957] usb 3-1: Product: syz
[  238.530389][ T5957] usb 3-1: Manufacturer: syz
[  238.535359][ T5957] usb 3-1: SerialNumber: syz
[  238.543301][T10554] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  238.550736][T10554] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  238.732434][ T6015] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  238.768361][T10554] /dev/rnullb0: Can't open blockdev
[  238.778551][ T5957] usb 3-1: bad CDC descriptors
[  238.804202][ T5957] usb 3-1: USB disconnect, device number 55
[  238.893862][ T6015] usb 5-1: Using ep0 maxpacket: 8
[  238.901997][ T6015] usb 5-1: config 64 has an invalid descriptor of length 129, skipping remainder of the config
[  238.920260][ T6015] usb 5-1: config 64 has 0 interfaces, different from the descriptor's value: 1
[  238.931546][T10570] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.1383'.
[  238.933234][ T6015] usb 5-1: New USB device found, idVendor=0c45, idProduct=6270, bcdDevice=70.82
[  238.963654][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.982058][ T6015] usb 5-1: Product: syz
[  238.992215][ T6015] usb 5-1: Manufacturer: syz
[  239.007183][ T6015] usb 5-1: SerialNumber: syz
[  239.123825][ T5905] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  239.233437][ T6015] usb 5-1: USB disconnect, device number 52
[  239.263336][ T5905] usb 1-1: device descriptor read/64, error -71
[  239.281557][T10583] MTD: Couldn't look up '/dev/rnullb0': -15
[  239.339227][T10588] /dev/rnullb0: Can't open blockdev
[  239.502353][ T5905] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  239.610864][T10603] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  239.662359][ T5905] usb 1-1: device descriptor read/64, error -71
[  239.774669][ T5905] usb usb1-port1: attempt power cycle
[  239.862417][ T6015] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[  240.044315][   T30] audit: type=1804 audit(1756697640.800:35): pid=10613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1397" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  240.071904][ T6015] usb 3-1: config 0 has an invalid interface number: 157 but max is 0
[  240.082499][ T6015] usb 3-1: config 0 has no interface number 0
[  240.088643][ T6015] usb 3-1: config 0 interface 157 has no altsetting 0
[  240.102431][ T6015] usb 3-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=3b.1d
[  240.112859][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.122345][ T5905] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  240.131176][ T6015] usb 3-1: config 0 descriptor??
[  240.142980][ T5905] usb 1-1: device descriptor read/8, error -71
[  240.351952][T10603] /dev/rnullb0: Can't open blockdev
[  240.358330][ T6015] usb 3-1: USB disconnect, device number 56
[  240.402681][ T5905] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  240.423921][ T5905] usb 1-1: device descriptor read/8, error -71
[  240.533457][ T5905] usb usb1-port1: unable to enumerate USB device
[  240.728499][T10620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1399'.
[  240.748694][ T5862] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  240.749169][T10620] /dev/rnullb0: Can't open blockdev
[  241.172359][ T5905] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  241.242407][   T43] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  241.322499][ T5905] usb 3-1: Using ep0 maxpacket: 32
[  241.333354][ T5905] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  241.341722][ T5905] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  241.372949][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  241.381933][ T5905] usb 3-1: config 1 has no interface number 0
[  241.412351][ T5905] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  241.413348][   T43] usb 5-1: Using ep0 maxpacket: 16
[  241.423366][ T5905] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  241.443545][   T43] usb 5-1: descriptor type invalid, skip
[  241.459379][   T43] usb 5-1: descriptor type invalid, skip
[  241.465508][ T5905] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  241.482363][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.492621][   T43] usb 5-1: descriptor type invalid, skip
[  241.495644][ T5905] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  241.508519][   T43] usb 5-1: descriptor type invalid, skip
[  241.519460][   T43] usb 5-1: config 1 interface 0 altsetting 175 bulk endpoint 0x1 has invalid maxpacket 64
[  241.540041][   T43] usb 5-1: config 1 interface 0 has no altsetting 0
[  241.561163][   T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  241.581245][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.600555][   T43] usb 5-1: Product: syz
[  241.610657][   T43] usb 5-1: Manufacturer: syz
[  241.615810][   T43] usb 5-1: SerialNumber: syz
[  241.634789][T10628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  241.655552][T10634] /dev/rnullb0: Can't lookup blockdev
[  241.706855][ T5905] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  241.866521][T10628] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  241.925710][   T30] audit: type=1804 audit(1756697642.680:36): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1409" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  241.972085][T10646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.441434][   T43] usb 5-1: USB disconnect, device number 53
[  242.722453][ T6015] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  242.874802][   T43] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  243.037659][   T43] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de
[  243.051164][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.066322][   T43] usb 5-1: Product: syz
[  243.070571][   T43] usb 5-1: Manufacturer: syz
[  243.080679][   T43] usb 5-1: SerialNumber: syz
[  243.091788][   T43] usb 5-1: config 0 descriptor??
[  243.108893][   T43] ttusb_dec_send_command: command bulk message failed: error -22
[  243.116896][   T43] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22
[  243.458066][   T43] usb 5-1: USB disconnect, device number 54
[  243.946239][   T43] usb 3-1: USB disconnect, device number 57
[  243.966042][   T43] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  244.052730][T10685] /dev/rnullb0: Can't open blockdev
[  244.125263][T10698] /dev/rnullb0: Can't lookup blockdev
[  244.212952][T10708] 9p: Unknown parameter 'euid>00000000000000060928'
[  244.261100][T10707] /dev/rnullb0: Can't open blockdev
[  245.302471][   T43] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[  245.338490][   T30] audit: type=1804 audit(1756697646.090:37): pid=10742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1437" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  245.453778][   T43] usb 1-1: device descriptor read/64, error -71
[  245.468276][T10750] netlink: 'syz.1.1440': attribute type 27 has an invalid length.
[  245.692471][   T43] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[  245.842395][   T43] usb 1-1: device descriptor read/64, error -71
[  245.872356][ T2155] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  245.952574][   T43] usb usb1-port1: attempt power cycle
[  246.024306][ T2155] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.034592][ T2155] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  246.044494][ T2155] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  246.053789][ T2155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  246.061874][ T2155] usb 5-1: SerialNumber: syz
[  246.127872][   T30] audit: type=1804 audit(1756697646.880:38): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1447" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  246.213654][T10778] /dev/rnullb0: Can't open blockdev
[  246.316145][   T43] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[  246.342978][   T43] usb 1-1: device descriptor read/8, error -71
[  246.405909][ T2155] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  246.416891][ T2155] usb 5-1: MIDIStreaming interface descriptor not found
[  246.463228][ T2155] usb 5-1: USB disconnect, device number 55
[  246.587055][   T43] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  246.624037][   T43] usb 1-1: device descriptor read/8, error -71
[  246.635253][T10797] /dev/rnullb0: Can't open blockdev
[  246.732617][   T43] usb usb1-port1: unable to enumerate USB device
[  246.742621][   T30] audit: type=1804 audit(1756697647.500:39): pid=10803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1456" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  246.824926][T10807] 9p: Bad value for 'rfdno'
[  246.902371][ T5905] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  246.982405][ T2155] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  247.054968][ T5905] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  247.072652][ T5905] usb 3-1: config 0 has no interface number 0
[  247.078784][ T5905] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.122340][ T5905] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.132130][ T5905] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  247.152454][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.172922][ T5905] usb 3-1: config 0 descriptor??
[  247.187699][ T2155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.217059][ T2155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.242408][ T2155] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  247.258038][ T2155] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  247.268623][ T2155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.296064][ T2155] usb 5-1: config 0 descriptor??
[  247.306412][   T30] audit: type=1326 audit(1756697648.060:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.1.1463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf85d8ebe9 code=0x100000
[  247.329593][ T2155] hub 5-1:0.0: USB hub found
[  247.531445][ T2155] hub 5-1:0.0: 14 ports detected
[  247.536876][ T2155] hub 5-1:0.0: insufficient power available to use all downstream ports
[  247.607537][ T5905] uclogic 0003:28BD:0905.0014: Interface probing failed: -22
[  247.615443][ T5905] uclogic 0003:28BD:0905.0014: interface is invalid, ignoring
[  247.801870][T10799] netlink: 'syz.2.1453': attribute type 10 has an invalid length.
[  247.813170][T10799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.821645][T10799] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  247.864369][T10799] netlink: 'syz.2.1453': attribute type 10 has an invalid length.
[  247.872240][T10799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1453'.
[  247.876433][ T2155] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  247.904336][T10799] batadv0: entered promiscuous mode
[  247.909567][T10799] batadv0: entered allmulticast mode
[  247.922583][ T2155] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  247.952761][T10799] bond0: (slave batadv0): Releasing backup interface
[  247.970697][T10825] hfs: can't find a HFS filesystem on dev nullb0
[  247.973537][ T2155] usb 5-1: USB disconnect, device number 56
[  247.986692][T10799] bridge0: port 3(batadv0) entered blocking state
[  248.004167][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.014326][T10799] bridge0: port 3(batadv0) entered disabled state
[  248.035041][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.103091][   T43] usb 3-1: USB disconnect, device number 58
[  248.131228][T10829] /dev/rnullb0: Can't open blockdev
[  248.507429][ T5957] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  248.524316][   T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  248.533651][   T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  248.686682][ T5957] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  248.697852][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.718955][ T5957] usb 1-1: config 0 descriptor??
[  248.734460][ T5957] gspca_main: cpia1-2.14.0 probing 0813:0001
[  249.136720][ T5957] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  249.312377][T10873] /dev/rnullb0: Can't open blockdev
[  249.326639][T10874] /dev/rnullb0: Can't open blockdev
[  249.545869][T10879] /dev/rnullb0: Can't lookup blockdev
[  249.552828][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  249.623336][T10835] /dev/rnullb0: Can't open blockdev
[  249.671590][ T5957] gspca_cpia1: usb_control_msg 02, error -71
[  249.693411][ T5957] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  249.731417][ T5957] usb 1-1: USB disconnect, device number 87
[  249.770478][T10903] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  249.782853][T10903] /dev/rnullb0: Can't open blockdev
[  250.082605][ T6015] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  250.232487][ T6015] usb 3-1: Using ep0 maxpacket: 32
[  250.243646][ T6015] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.265588][ T6015] usb 3-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice= 8.b6
[  250.284688][ T6015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.302342][ T6015] usb 3-1: Product: syz
[  250.312632][ T6015] usb 3-1: Manufacturer: syz
[  250.319560][ T6015] usb 3-1: SerialNumber: syz
[  250.333308][ T6015] usb 3-1: config 0 descriptor??
[  250.350921][ T6015] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f
[  250.875893][T10945] /dev/rnullb0: Can't open blockdev
[  250.989184][   T30] audit: type=1804 audit(1756697651.730:41): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1500" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  251.073616][ T6015] gspca_sn9c20x: Write register 1001 failed -110
[  251.104861][ T6015] gspca_sn9c20x: Device initialization failed
[  251.111033][ T6015] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -110
[  251.147812][T10960] No control pipe specified
[  251.313229][ T6015] usb 3-1: USB disconnect, device number 59
[  251.412383][   T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  251.563510][   T24] usb 5-1: Using ep0 maxpacket: 32
[  251.576147][   T24] usb 5-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config
[  251.604400][   T24] usb 5-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5
[  251.617017][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.635329][   T24] usb 5-1: Product: syz
[  251.644060][   T24] usb 5-1: Manufacturer: syz
[  251.652489][   T24] usb 5-1: SerialNumber: syz
[  251.669017][   T24] pwc: Askey VC010 type 1 USB webcam detected.
[  252.252616][   T43] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  252.426736][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.442605][ T6015] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  252.452377][   T43] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  252.471567][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.502798][   T43] usb 3-1: config 0 descriptor??
[  252.584822][ T6015] usb 1-1: device descriptor read/64, error -71
[  252.832348][ T6015] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  252.924779][   T43] zydacron 0003:13EC:0006.0015: hidraw0: USB HID v0.01 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0
[  252.972516][ T6015] usb 1-1: device descriptor read/64, error -71
[  253.076968][   T30] audit: type=1804 audit(1756697653.830:42): pid=11006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1520" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  253.105212][ T6015] usb usb1-port1: attempt power cycle
[  253.477104][T11021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1515'.
[  253.481051][ T6015] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  253.524735][ T6015] usb 1-1: device descriptor read/8, error -71
[  253.683926][   T30] audit: type=1804 audit(1756697654.440:43): pid=11027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1526" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  253.773533][ T6015] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  253.804032][ T6015] usb 1-1: device descriptor read/8, error -71
[  253.926184][ T6015] usb usb1-port1: unable to enumerate USB device
[  254.070615][   T30] audit: type=1326 audit(1756697654.820:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf85d8ebe9 code=0x0
[  254.252927][   T24] pwc: send_video_command error -71
[  254.258167][   T24] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  254.274340][   T24] Philips webcam 5-1:76.0: probe with driver Philips webcam failed with error -71
[  254.293881][   T24] usb 5-1: USB disconnect, device number 57
[  255.017644][   T30] audit: type=1804 audit(1756697655.760:45): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1533" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  255.065561][  T980] usb 3-1: USB disconnect, device number 60
[  255.334768][T11056] wlan1 speed is unknown, defaulting to 1000
[  255.621605][T11063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1539'.
[  255.767180][ T1309] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  255.776517][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  255.783160][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  255.812410][  T980] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  255.848181][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'.
[  256.057109][  T980] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  256.069494][  T980] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  256.087655][T11075] netlink: 'syz.1.1543': attribute type 1 has an invalid length.
[  256.091297][  T980] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  256.116930][  T980] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  256.133920][  T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.152614][T11059] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  256.372352][   T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  256.381688][T11056] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1537'.
[  256.421794][T11056] unsupported nla_type 224
[  256.548339][   T24] usb 3-1: Using ep0 maxpacket: 8
[  256.579840][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.612434][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  256.655399][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  256.682839][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  256.702323][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  256.713290][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  256.713743][T11096] random: crng reseeded on system resumption
[  256.740889][  T980] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  256.758846][  T980] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input32
[  256.780990][   T24] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  256.824181][  T980] usb 1-1: USB disconnect, device number 92
[  256.830157][    C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  256.841593][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.860019][   T24] usb 3-1: Product: syz
[  256.865794][   T24] usb 3-1: Manufacturer: syz
[  256.882566][   T24] usb 3-1: SerialNumber: syz
[  256.883097][T11101] /dev/rnullb0: Can't lookup blockdev
[  256.897279][   T24] usb 3-1: config 0 descriptor??
[  256.920142][T11079] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  256.928864][T11103] /dev/rnullb0: Can't open blockdev
[  256.986679][T11105] ./cgroup: Can't lookup blockdev
[  257.596381][T11125] /dev/rnullb0: Can't open blockdev
[  257.828192][T11130] comedi comedi0: s526: I/O port conflict (0x3,64)
[  257.859975][T11131] comedi comedi0: s526: I/O port conflict (0x3,64)
[  258.036089][T11136] tipc: Started in network mode
[  258.041095][T11136] tipc: Node identity 00400000000000000000000000000001, cluster identity 4711
[  258.081031][T11136] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  258.097324][T11136] tmpfs: Unknown parameter 'quotaDDDDDD'
[  258.253704][   T24] rc_core: IR keymap rc-snapstream-firefly not found
[  258.281310][   T24] Registered IR keymap rc-empty
[  258.288808][   T24] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  258.311090][   T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33
[  258.324233][   T30] audit: type=1804 audit(1756697659.070:46): pid=11149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1569" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  258.342427][   T24] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34
[  258.419128][    C1] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  258.426727][   T24] usb 3-1: USB disconnect, device number 61
[  258.973231][   T30] audit: type=1804 audit(1756697659.730:47): pid=11179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1575" name="rnullb0" dev="tmpfs" ino=667 res=1 errno=0
[  259.514991][   T24] libceph: connect (1)[c::]:6789 error -101
[  259.521168][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  259.543575][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  259.551293][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  259.559728][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  259.567521][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  259.576425][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  259.648096][T11200] wlan1 speed is unknown, defaulting to 1000
[  259.655453][ T5957] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  259.782893][  T980] libceph: connect (1)[c::]:6789 error -101
[  259.789204][  T980] libceph: mon0 (1)[c::]:6789 connect error
[  259.796318][ T5957] usb 5-1: device descriptor read/64, error -71
[  259.935487][T11200] chnl_net:caif_netlink_parms(): no params data found
[  260.038464][T11200] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.052405][ T5957] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  260.062165][T11200] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.077424][T11200] bridge_slave_0: entered allmulticast mode
[  260.092426][T11200] bridge_slave_0: entered promiscuous mode
[  260.100379][T11200] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.109343][T11200] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.116848][T11200] bridge_slave_1: entered allmulticast mode
[  260.125533][T11200] bridge_slave_1: entered promiscuous mode
[  260.156260][T11200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.170869][T11200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.202325][ T5957] usb 5-1: device descriptor read/64, error -71
[  260.211470][T11200] team0: Port device team_slave_0 added
[  260.221284][T11200] team0: Port device team_slave_1 added
[  260.250016][T11200] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.260954][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.289631][T11200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.301927][T11200] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.310844][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.339298][   T24] libceph: connect (1)[c::]:6789 error -101
[  260.346366][T11197] ceph: No mds server is up or the cluster is laggy
[  260.354660][ T5957] usb usb5-port1: attempt power cycle
[  260.360305][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  260.369573][T11200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.443832][T11200] hsr_slave_0: entered promiscuous mode
[  260.453397][T11200] hsr_slave_1: entered promiscuous mode
[  260.455041][T11210] program syz.0.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  260.459691][T11200] debugfs: 'hsr0' already exists in 'hsr'
[  260.486004][T11200] Cannot create hsr debugfs directory
[  260.646931][T11200] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.725285][ T5957] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  260.753774][T11200] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.767301][ T5957] usb 5-1: device descriptor read/8, error -71
[  260.833517][T11200] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.873491][T11200] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.033481][ T5957] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  261.067035][T11200] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  261.082717][ T5957] usb 5-1: device descriptor read/8, error -71
[  261.102680][T11200] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  261.123262][T11200] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  261.134697][T11200] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  261.194262][ T5957] usb usb5-port1: unable to enumerate USB device
[  261.248786][T11200] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.266831][T11200] 8021q: adding VLAN 0 to HW filter on device team0
[  261.286375][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.293579][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.315830][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.323093][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.602426][ T5862] Bluetooth: hci4: command tx timeout
[  261.619084][T11200] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.655056][T11200] veth0_vlan: entered promiscuous mode
[  261.667378][T11200] veth1_vlan: entered promiscuous mode
[  261.693639][T11200] veth0_macvtap: entered promiscuous mode
[  261.710743][T11200] veth1_macvtap: entered promiscuous mode
[  261.728927][T11200] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.748751][T11200] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.835167][   T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.844854][ T1106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.857100][ T1106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.868479][ T1106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.958121][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.968342][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.010336][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.025936][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.308045][T11238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1586'.
[  262.328807][T11238] /dev/rnullb0: Can't open blockdev
[  262.410509][T11240] tmpfs: Bad value for 'nr_inodes'
[  262.523312][   T43] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  262.804959][   T43] usb 3-1: Using ep0 maxpacket: 16
[  262.811508][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.834543][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.042591][   T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  263.062372][   T43] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  263.071429][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.113763][   T43] usb 3-1: config 0 descriptor??
[  263.545238][   T43] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max
[  263.577145][   T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  263.609005][   T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  263.627864][   T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  263.652042][   T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  263.669626][   T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  263.684240][ T5862] Bluetooth: hci4: command tx timeout
[  263.695026][   T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  263.710210][   T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  263.726235][   T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  263.744372][T11257] could not allocate digest TFM handle cryptd(streebog512-generic)
[  263.745191][T11236] netlink: 'syz.2.1587': attribute type 21 has an invalid length.
[  263.753041][T11258] could not allocate digest TFM handle cryptd(streebog512-generic)
[  263.761257][   T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  263.786890][T11236] netlink: 'syz.2.1587': attribute type 5 has an invalid length.
[  263.799035][   T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  263.833995][T11236] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1587'.
[  263.852145][   T43] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0016/input/input35
[  263.910330][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'.
[  264.006080][   T43] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  264.069561][T11269] /dev/rnullb0: Can't open blockdev
[  264.070979][   T43] usb 3-1: USB disconnect, device number 62
[  264.135631][T11267] fido_id[11267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  264.631318][T11281] mkiss: ax0: crc mode is auto.
[  264.912355][   T43] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  265.081841][T11297] /dev/rnullb0: Can't open blockdev
[  265.100399][   T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.112818][   T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  265.127827][   T43] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  265.137678][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  265.147179][   T43] usb 5-1: SerialNumber: syz
[  265.302380][ T2155] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  265.368661][T11285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.387935][T11285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.464649][ T2155] usb 2-1: config 12 has an invalid interface number: 95 but max is 2
[  265.473089][ T2155] usb 2-1: config 12 has an invalid interface number: 43 but max is 2
[  265.491465][ T2155] usb 2-1: config 12 has no interface number 0
[  265.763258][ T5862] Bluetooth: hci4: command tx timeout
[  265.772644][ T2155] usb 2-1: config 12 has no interface number 2
[  265.778983][ T2155] usb 2-1: config 12 interface 95 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  265.832345][ T2155] usb 2-1: config 12 interface 95 altsetting 1 bulk endpoint 0xD has invalid maxpacket 32
[  265.865204][ T2155] usb 2-1: config 12 interface 95 altsetting 1 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  265.902326][ T2155] usb 2-1: config 12 interface 43 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[  265.935165][ T2155] usb 2-1: config 12 interface 43 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  265.972320][ T2155] usb 2-1: config 12 interface 43 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  266.002870][ T2155] usb 2-1: config 12 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  266.032337][ T2155] usb 2-1: config 12 interface 95 has no altsetting 0
[  266.039176][ T2155] usb 2-1: config 12 interface 1 has no altsetting 0
[  266.096102][ T2155] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1101, bcdDevice=20.b9
[  266.105605][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.122333][ T2155] usb 2-1: Product: syz
[  266.126546][ T2155] usb 2-1: Manufacturer: ΠΆ
[  266.131059][ T2155] usb 2-1: SerialNumber: syz
[  266.154804][T11299] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  266.431345][ T2155] option 2-1:12.95: GSM modem (1-port) converter detected
[  266.464419][ T2155] option 2-1:12.43: GSM modem (1-port) converter detected
[  266.479578][ T2155] option 2-1:12.1: GSM modem (1-port) converter detected
[  266.493961][ T2155] usb 2-1: USB disconnect, device number 29
[  266.520869][ T2155] option 2-1:12.95: device disconnected
[  266.535625][ T2155] option 2-1:12.43: device disconnected
[  266.555876][ T2155] option 2-1:12.1: device disconnected
[  267.614854][T11328] GUP no longer grows the stack in syz.1.1614 (11328): 200000004000-20000000a000 (200000002000)
[  267.647996][T11328] CPU: 1 UID: 0 PID: 11328 Comm: syz.1.1614 Not tainted syzkaller #0 PREEMPT(full) 
[  267.648025][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  267.648043][T11328] Call Trace:
[  267.648050][T11328]  <TASK>
[  267.648057][T11328]  dump_stack_lvl+0x189/0x250
[  267.648086][T11328]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.648107][T11328]  ? __pfx__printk+0x10/0x10
[  267.648127][T11328]  ? find_vma+0xe7/0x160
[  267.648148][T11328]  ? vma_is_secretmem+0xd/0x50
[  267.648170][T11328]  __get_user_pages+0x24d0/0x2ce0
[  267.648202][T11328]  get_user_pages_remote+0x2f1/0xad0
[  267.648223][T11328]  ? __pfx_mtree_load+0x10/0x10
[  267.648244][T11328]  ? __pfx_get_user_pages_remote+0x10/0x10
[  267.648262][T11328]  ? __access_remote_vm+0xa0/0x7d0
[  267.648281][T11328]  ? __access_remote_vm+0x367/0x7d0
[  267.648304][T11328]  __access_remote_vm+0x211/0x7d0
[  267.648326][T11328]  ? __pfx___access_remote_vm+0x10/0x10
[  267.648348][T11328]  ? alloc_pages_noprof+0xbe/0x190
[  267.648365][T11328]  proc_pid_cmdline_read+0x430/0x810
[  267.648397][T11328]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  267.648416][T11328]  ? bpf_lsm_inode_getlsmprop+0x10/0x10
[  267.648436][T11328]  ? security_file_permission+0x75/0x290
[  267.648453][T11328]  ? rw_verify_area+0x2a6/0x4d0
[  267.648469][T11328]  vfs_readv+0x5a7/0x850
[  267.648488][T11328]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  267.648508][T11328]  ? __pfx_vfs_readv+0x10/0x10
[  267.648531][T11328]  ? lock_release+0x4b/0x3e0
[  267.648549][T11328]  ? __fget_files+0x3a0/0x420
[  267.648566][T11328]  ? __fget_files+0x2a/0x420
[  267.648587][T11328]  __x64_sys_preadv+0x197/0x2a0
[  267.648605][T11328]  ? __pfx___x64_sys_preadv+0x10/0x10
[  267.648624][T11328]  ? rcu_is_watching+0x15/0xb0
[  267.648641][T11328]  do_syscall_64+0xfa/0xfa0
[  267.648662][T11328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.648677][T11328]  ? clear_bhb_loop+0x60/0xb0
[  267.648694][T11328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.648710][T11328] RIP: 0033:0x7f3c7a78ebe9
[  267.648733][T11328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.648747][T11328] RSP: 002b:00007f3c7b68e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  267.648766][T11328] RAX: ffffffffffffffda RBX: 00007f3c7a9c5fa0 RCX: 00007f3c7a78ebe9
[  267.648779][T11328] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003
[  267.648790][T11328] RBP: 00007f3c7a811e19 R08: 0000000000000000 R09: 0000000000000000
[  267.648799][T11328] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  267.648808][T11328] R13: 00007f3c7a9c6038 R14: 00007f3c7a9c5fa0 R15: 00007ffe92576538
[  267.648827][T11328]  </TASK>
[  267.919322][ T5862] Bluetooth: hci4: command tx timeout
[  268.001654][T11331] 9p: Unknown parameter 'loose'
[  268.014769][T11330] /dev/rnullb0: Can't open blockdev
[  268.127450][T11333] QAT: Invalid ioctl 1075883590
[  268.147527][T11333] QAT: Invalid ioctl 1075883590
[  268.174756][T11333] QAT: Invalid ioctl 1075883590
[  268.197742][T11333] QAT: Invalid ioctl 1075883590
[  268.217523][   T43] usb 5-1: 0:2 : does not exist
[  268.228696][   T43] usb 5-1: USB disconnect, device number 62
[  268.247962][T11333] QAT: Invalid ioctl 1075883590
[  268.283895][T11333] QAT: Invalid ioctl 1075883590
[  268.303422][T11333] QAT: Invalid ioctl 1075883590
[  268.308524][T11333] QAT: Invalid ioctl 1075883590
[  268.318753][T11333] QAT: Invalid ioctl 1075883590
[  268.329755][T11333] QAT: Invalid ioctl 1075883590
[  268.565825][T11354] /dev/rnullb0: Can't open blockdev
[  268.595778][T11356] /dev/rnullb0: Can't open blockdev
[  268.712407][T11359] block nbd4: Device being setup by another task
[  268.719276][ T5862] block nbd4: Receive control failed (result -107)
[  268.752867][T11359] ------------[ cut here ]------------
[  268.758386][T11359] WARNING: fs/buffer.c:1125 at bdev_getblk+0x580/0x660, CPU#1: syz.4.1625/11359
[  268.762375][ T6015] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  268.767979][T11359] Modules linked in:
[  268.779969][T11359] CPU: 1 UID: 0 PID: 11359 Comm: syz.4.1625 Not tainted syzkaller #0 PREEMPT(full) 
[  268.789635][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  268.800013][T11359] RIP: 0010:bdev_getblk+0x580/0x660
[  268.805499][T11359] Code: 26 fb ff ff e8 b1 77 78 ff 48 c7 c7 60 21 ba 8b 48 c7 c6 ae 71 ce 8d 4c 89 fa 4c 89 e9 e8 d8 4e df fe eb bd e8 91 77 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89
[  268.825373][T11359] RSP: 0018:ffffc900049076b0 EFLAGS: 00010293
[  268.831462][T11359] RAX: ffffffff8248573f RBX: ffff888148c90b98 RCX: ffff88805d6d8000
[  268.839473][T11359] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  268.847506][T11359] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000000
[  268.849698][T11213] syz.0.1584 (11213) used greatest stack depth: 18904 bytes left
[  268.855549][T11359] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888148c914f0
[  268.855564][T11359] R13: ffff888148c90b80 R14: 0000000000000200 R15: 1ffff11029192173
[  268.855575][T11359] FS:  00007f30230cf6c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000
[  268.855588][T11359] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  268.855599][T11359] CR2: 00007ffeaebeae80 CR3: 0000000054dea000 CR4: 00000000003526f0
[  268.855615][T11359] Call Trace:
[  268.855623][T11359]  <TASK>
[  268.855632][T11359]  ? rcu_is_watching+0x15/0xb0
[  268.915295][T11359]  __bread_gfp+0x89/0x3c0
[  268.919646][T11359]  udf_read_tagged+0xad/0xe00
[  268.924391][T11359]  ? submit_bio_noacct_nocheck+0x938/0xb50
[  268.930216][T11359]  ? bio_associate_blkg+0x6d/0x230
[  268.935484][T11359]  udf_check_anchor_block+0x99/0x550
[  268.940784][T11359]  ? udf_get_last_block+0x286/0x360
[  268.942430][ T6015] usb 2-1: device descriptor read/64, error -71
[  268.946138][T11359]  ? __pfx_udf_check_anchor_block+0x10/0x10
[  268.958708][T11359]  ? __bread_gfp+0x340/0x3c0
[  268.963470][T11359]  udf_load_vrs+0x6e3/0xf20
[  268.967989][T11359]  ? __pfx_udf_load_vrs+0x10/0x10
[  268.973404][T11359]  ? udf_get_last_session+0x100/0x200
[  268.978811][T11359]  ? __pfx_udf_get_last_session+0x10/0x10
[  268.985189][T11359]  ? __raw_spin_lock_init+0x45/0x100
[  268.990517][T11359]  udf_fill_super+0x5ad/0x17a0
[  268.995403][T11359]  ? __pfx_udf_fill_super+0x10/0x10
[  269.000617][T11359]  ? set_blocksize+0x21e/0x500
[  269.005449][T11359]  ? sb_set_blocksize+0x104/0x180
[  269.010488][T11359]  ? setup_bdev_super+0x4c1/0x5b0
[  269.015578][T11359]  get_tree_bdev_flags+0x40b/0x4d0
[  269.020966][T11359]  ? __pfx_udf_fill_super+0x10/0x10
[  269.026257][T11359]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  269.031904][T11359]  vfs_get_tree+0x8f/0x2b0
[  269.036475][T11359]  do_new_mount+0x2a2/0xa30
[  269.040996][T11359]  ? ns_capable+0x8a/0xf0
[  269.045427][T11359]  ? __pfx_do_new_mount+0x10/0x10
[  269.050629][T11359]  ? path_mount+0x61c/0xfe0
[  269.055308][T11359]  ? user_path_at+0x44/0x60
[  269.059896][T11359]  __se_sys_mount+0x317/0x410
[  269.064643][T11359]  ? __pfx___se_sys_mount+0x10/0x10
[  269.069951][T11359]  ? rcu_is_watching+0x15/0xb0
[  269.075105][T11359]  ? __x64_sys_mount+0x20/0xc0
[  269.079985][T11359]  do_syscall_64+0xfa/0xfa0
[  269.084779][T11359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.090860][T11359]  ? clear_bhb_loop+0x60/0xb0
[  269.095771][T11359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.101679][T11359] RIP: 0033:0x7f302218ebe9
[  269.106145][T11359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.125911][T11359] RSP: 002b:00007f30230cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  269.134481][T11359] RAX: ffffffffffffffda RBX: 00007f30223c5fa0 RCX: 00007f302218ebe9
[  269.142772][T11359] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[  269.150755][T11359] RBP: 00007f3022211e19 R08: 0000000000000000 R09: 0000000000000000
[  269.158907][T11359] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000
[  269.166966][T11359] R13: 00007f30223c6038 R14: 00007f30223c5fa0 R15: 00007fff7ecf60e8
[  269.175009][T11359]  </TASK>
[  269.178557][T11359] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  269.185929][T11359] CPU: 1 UID: 0 PID: 11359 Comm: syz.4.1625 Not tainted syzkaller #0 PREEMPT(full) 
[  269.195374][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  269.205432][T11359] Call Trace:
[  269.208699][T11359]  <TASK>
[  269.211625][T11359]  dump_stack_lvl+0x99/0x250
[  269.216206][T11359]  ? __asan_memcpy+0x40/0x70
[  269.220786][T11359]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.226057][T11359]  ? __pfx__printk+0x10/0x10
[  269.230661][T11359]  vpanic+0x281/0x750
[  269.234637][T11359]  ? __pfx__printk+0x10/0x10
[  269.239271][T11359]  ? __pfx_vpanic+0x10/0x10
[  269.243768][T11359]  ? is_bpf_text_address+0x292/0x2b0
[  269.249296][T11359]  ? is_bpf_text_address+0x26/0x2b0
[  269.254568][T11359]  panic+0xb9/0xc0
[  269.258281][T11359]  ? __pfx_panic+0x10/0x10
[  269.262706][T11359]  __warn+0x334/0x4c0
[  269.266682][T11359]  ? bdev_getblk+0x580/0x660
[  269.271260][T11359]  ? bdev_getblk+0x580/0x660
[  269.275835][T11359]  report_bug+0x2be/0x4f0
[  269.280155][T11359]  ? bdev_getblk+0x580/0x660
[  269.284855][T11359]  ? bdev_getblk+0x580/0x660
[  269.289438][T11359]  ? bdev_getblk+0x582/0x660
[  269.294017][T11359]  handle_bug+0x84/0x160
[  269.298244][T11359]  exc_invalid_op+0x1a/0x50
[  269.302902][T11359]  asm_exc_invalid_op+0x1a/0x20
[  269.307739][T11359] RIP: 0010:bdev_getblk+0x580/0x660
[  269.312962][T11359] Code: 26 fb ff ff e8 b1 77 78 ff 48 c7 c7 60 21 ba 8b 48 c7 c6 ae 71 ce 8d 4c 89 fa 4c 89 e9 e8 d8 4e df fe eb bd e8 91 77 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89
[  269.332550][T11359] RSP: 0018:ffffc900049076b0 EFLAGS: 00010293
[  269.338689][T11359] RAX: ffffffff8248573f RBX: ffff888148c90b98 RCX: ffff88805d6d8000
[  269.346647][T11359] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[  269.354600][T11359] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000000
[  269.362554][T11359] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888148c914f0
[  269.370594][T11359] R13: ffff888148c90b80 R14: 0000000000000200 R15: 1ffff11029192173
[  269.378553][T11359]  ? bdev_getblk+0x57f/0x660
[  269.383144][T11359]  ? rcu_is_watching+0x15/0xb0
[  269.387936][T11359]  __bread_gfp+0x89/0x3c0
[  269.392273][T11359]  udf_read_tagged+0xad/0xe00
[  269.397040][T11359]  ? submit_bio_noacct_nocheck+0x938/0xb50
[  269.402845][T11359]  ? bio_associate_blkg+0x6d/0x230
[  269.407943][T11359]  udf_check_anchor_block+0x99/0x550
[  269.413235][T11359]  ? udf_get_last_block+0x286/0x360
[  269.418413][T11359]  ? __pfx_udf_check_anchor_block+0x10/0x10
[  269.424293][T11359]  ? __bread_gfp+0x340/0x3c0
[  269.428868][T11359]  udf_load_vrs+0x6e3/0xf20
[  269.433371][T11359]  ? __pfx_udf_load_vrs+0x10/0x10
[  269.438381][T11359]  ? udf_get_last_session+0x100/0x200
[  269.443838][T11359]  ? __pfx_udf_get_last_session+0x10/0x10
[  269.449710][T11359]  ? __raw_spin_lock_init+0x45/0x100
[  269.454981][T11359]  udf_fill_super+0x5ad/0x17a0
[  269.459729][T11359]  ? __pfx_udf_fill_super+0x10/0x10
[  269.464907][T11359]  ? set_blocksize+0x21e/0x500
[  269.469656][T11359]  ? sb_set_blocksize+0x104/0x180
[  269.474663][T11359]  ? setup_bdev_super+0x4c1/0x5b0
[  269.479763][T11359]  get_tree_bdev_flags+0x40b/0x4d0
[  269.484894][T11359]  ? __pfx_udf_fill_super+0x10/0x10
[  269.490077][T11359]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  269.495695][T11359]  vfs_get_tree+0x8f/0x2b0
[  269.500109][T11359]  do_new_mount+0x2a2/0xa30
[  269.504776][T11359]  ? ns_capable+0x8a/0xf0
[  269.509103][T11359]  ? __pfx_do_new_mount+0x10/0x10
[  269.514110][T11359]  ? path_mount+0x61c/0xfe0
[  269.518594][T11359]  ? user_path_at+0x44/0x60
[  269.523089][T11359]  __se_sys_mount+0x317/0x410
[  269.527751][T11359]  ? __pfx___se_sys_mount+0x10/0x10
[  269.532949][T11359]  ? rcu_is_watching+0x15/0xb0
[  269.537698][T11359]  ? __x64_sys_mount+0x20/0xc0
[  269.542444][T11359]  do_syscall_64+0xfa/0xfa0
[  269.546936][T11359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.552994][T11359]  ? clear_bhb_loop+0x60/0xb0
[  269.557652][T11359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.563528][T11359] RIP: 0033:0x7f302218ebe9
[  269.567926][T11359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.587602][T11359] RSP: 002b:00007f30230cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  269.596005][T11359] RAX: ffffffffffffffda RBX: 00007f30223c5fa0 RCX: 00007f302218ebe9
[  269.603963][T11359] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[  269.611921][T11359] RBP: 00007f3022211e19 R08: 0000000000000000 R09: 0000000000000000
[  269.619889][T11359] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000
[  269.627854][T11359] R13: 00007f30223c6038 R14: 00007f30223c5fa0 R15: 00007fff7ecf60e8
[  269.635818][T11359]  </TASK>
[  269.641074][T11359] Kernel Offset: disabled
[  269.645397][T11359] Rebooting in 86400 seconds..