last executing test programs:

13.976804306s ago: executing program 0 (id=239):
r0 = socket(0x28, 0x5, 0x0)
listen(r0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x511400)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x5386, &(0x7f0000000380))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0)
ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000000)=0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r1, 0x2000)

13.59119413s ago: executing program 0 (id=240):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x64, 0x80, 0x52, 0x8, 0x61d, 0xc120, 0x59b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x7, 0x0, 0x3, [{{0x9, 0x4, 0x33, 0x2, 0x0, 0x27, 0xe2, 0x88, 0x9}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0})
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)=ANY=[@ANYBLOB="01020000000000006162636465666768696a6b6c6d6e6f70"], 0x18, r1)
keyctl$search(0xa, r2, &(0x7f0000000080)='trusted\x00', &(0x7f0000000180)={'syz', 0x2}, r1) (async)
keyctl$search(0xa, r2, &(0x7f0000000080)='trusted\x00', &(0x7f0000000180)={'syz', 0x2}, r1)
keyctl$clear(0x7, r1)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$int_out(r4, 0x2a32, 0x0) (async)
ioctl$int_out(r4, 0x2a32, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}]}, 0x20}}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}]}, 0x20}}, 0x0)
munmap(&(0x7f0000012000/0x4000)=nil, 0x4000)
write(r0, &(0x7f0000001140)="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", 0x10d7)

12.329434422s ago: executing program 0 (id=249):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x32314241}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0x2a9, 0x0, 0xf})
rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000080)={0x34, 0x1, 0x100})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r3)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x12}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
socket$key(0xf, 0x3, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001400)={{0xcc, 0x2, 0x80, 0x178, 0x1d7, 0x0, 0xbd, 0x4}}, 0x20)
socket$alg(0x26, 0x5, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r6 = socket$kcm(0x2d, 0x2, 0x0)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r7, &(0x7f0000002200)={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc)
getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, 0x0, 0x0)
write(r5, &(0x7f0000000400)="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", 0x1f000)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
sendto$packet(r1, &(0x7f0000002240)="d3d86dad212b52a2cf07293cabbef3c94bd85ba410e8431a89762a0eb111d79e4758d51a3b40b505e9d47621d687e1be699295626eca85c3e21ac098d4df8567266909af6d58f4d97d8e77f186cdc648ca3c1f344bebf9b7aaa48afb45f79996373141e2090ec0859b8cf2b87155dee4e54987f3fc139f13c69e0aaa3d8b9c54f44797d061f3d6a0402c8f86849eb386d4bdc06c1ab2d44655c8fac513776821286a1c8ba41aca9eb4ff2894e25f95445e93e5f44b7002722d8ec738a771cd6a1583fa1842c58bb5befb4ff7f1d6df516c90793909fe", 0xd6, 0x24000034, &(0x7f0000002380)={0x11, 0x8, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14)
ptrace$getregset(0x4204, r8, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20})
fcntl$lock(r2, 0x5, &(0x7f0000000180)={0x2, 0x0, 0x2, 0xfffffffffffff800, r8})

12.087977568s ago: executing program 0 (id=251):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r2=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1)
umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
fadvise64(r0, 0x7, 0x1ff, 0x1)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000111400042abd7000fcdbdf25080003000200000008004b001300000008004a0002000000080000000300000008003e000400000008003e0004000000080001000200000008003e0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)

11.203216349s ago: executing program 0 (id=262):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x8, 0x4)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
close(r0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)

11.124402544s ago: executing program 1 (id=263):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xe0080, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x70}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x8ee4a000)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0))
eventfd(0x9)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180))
seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x2, 0xffffffffffffffff)
memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x40000)

11.094119881s ago: executing program 1 (id=264):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x2, 0xd})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0)
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
pipe(&(0x7f00000004c0)={<r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_open_dev$video(&(0x7f0000001840), 0x45f1, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x7f, @local, 0x8}, 0x1c)
getsockopt$inet6_opts(r5, 0x29, 0x1, 0x0, &(0x7f0000000280))
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000001880))
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0)
fcntl$setpipe(r2, 0x407, 0x401)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000d, 0x22052, r6, 0x5708e000)

11.051130815s ago: executing program 1 (id=265):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x120)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000400)='\x00\xd1\xd3\xe8\x1a\x82\x0e\xee\x8a\x94Ae\x92\xa55m\xa9m\xb4\x81P\xea\xe0\x84W\xfb\xc3\x0e\xce^~~1\x8c\xb2\xb4\xb2!\"\"o\xe6\\#\x9a@\x94/', 0x30, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x812, r2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
read$eventfd(r1, &(0x7f0000000040), 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000380)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x73, r5})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020301"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000001"], 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000140)=0x400, 0x4)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x14)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0xe)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x2)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000280)={0xfffd, 0xa, 0x8, 0x5, 0x13, "7821ac700fa1cfb8"})

10.916552843s ago: executing program 0 (id=266):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000a88000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r0, 0x25710000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x222240)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff)
r4 = userfaultfd(0x0)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x2000)=nil, 0x2000}})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/freeze_filesystems', 0x141000, 0x20)
finit_module(r6, 0x0, 0x3)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)

10.702736632s ago: executing program 32 (id=266):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000a88000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r0, 0x25710000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x222240)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff)
r4 = userfaultfd(0x0)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x2000)=nil, 0x2000}})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x31c000})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/freeze_filesystems', 0x141000, 0x20)
finit_module(r6, 0x0, 0x3)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)

10.095975836s ago: executing program 1 (id=271):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r2=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1)
umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
fadvise64(r0, 0x7, 0x1ff, 0x1)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000111400042abd7000fcdbdf25080003000200000008004b001300000008004a0002000000080000000300000008003e000400000008003e0004000000080001000200000008003e0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)

9.074004152s ago: executing program 1 (id=274):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r0, 0x401070c9, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ftruncate(r0, 0x800)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x100, 0x9000, 0x0, 0x0}], 0x1})
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0x863, 0x200, 0x0, 0x0}, {0x8, 0x400, 0x1000, &(0x7f00000003c0)="bdf0c62623e29077e8dab23bafbbaed4fc07cceb6e9b8a432297a35b5fcea10e758472d5ab0521b74d986c2388d7ae7de78448a69008772d5e4fc5bcde452cdbd66254426339f7775f62b0d4f63a522662b4f7260fdf4d3ac1ffd5ee442288e3f0820f4819f9867bfc67a284a915cec0fdca771cf07ee48c5f0461fe117cbadacc98cc985a75057187d0d8a91a8d5ca9bb5f7c6662acb2ed0d9719459eff691795f109e030f2be99eab451f6fe02d00cac75c7072f5e0acc728cc051775c02e145ee9e5d7f76fbff9dcf37e9149836b317b049f0c26c054953ba8cad0edced5234c97db24474cae17b193605a0e85da95dcaaced2dc68f6a0a73cdb45a62b63ee09a87a580cd1178cf7d0743276ecb18ac9cdc02c76d657217c2ff238b052ef284008357f9a6c6d0dfeccb35fb8296bc70e25a7d6532de2292ed2ecd1a091b506b8d0940a613c078c0c73fbf44e594c90d469dcfde3ef61343a9a0bd53516159c91cf187a4262847b88cc7c671c5f3408582bb622241368a9382c3a80e0ce53afc122786c4f589bebb01213a7842e451c143c216c92ce770cc1909a2e326fb1b51a6c8bd2040f4c0707faee3011e5c6454df717f022815072d003c9a2ad5e2653a6c54dec1d1690ba96d301c213755c5c3feb5e627da1b45aaa635d3d621049b464c5c6f942132761a479cbfe02a23fffeb9c396ffc46003a47e55089eae43d7a980f8ef573038be014c2367c7ddd0d503975e99016288c9cac4cf2c99c73f2dc6c9ad83b8bfa1070f2da1b90b421d3e1a22a0e059fbebbf12965453727a3b345826719dd147991fe7d32c54f848b9201f79fc53233d73309754f5f68b405451bad36cc0b26eb6dfeef6e4507802255d61950860222e694adf5be7269512d369c4f857676844f88323ffa54b80bc8accbf44b9b78f3b23e80d81bdff80a41dbab415852650c0a446d37ced00dd364c5dcf49cdd89c6d7bb6c0466df3068a014ce764288a7989a3126fd084e6aff995e030b288445ca55dc8100b6b4299db11225d90970f5b2d4ca3168250506132cbc0fbc3b2be1b460f3f0e348c3bbf4a41b9f10799f489be5d4bb7f675530a6ebbef4d7187274e61fdaa4bc29d9ac4c9bf16c3a2f5de10fd61269901aee4c4d07b56dd0fba70efbe08f4c29cdbb095f995520798d5e45524dc66d8489bf43cd02498fe04139e6460b1a493b48787b7af8699baa71e7c2034b542ae9f971d64575800ee97d6342d18e1cea1ee1a7055a7f4aa5ee5ec0207e9fe4837aa91e2a82ccf434b1e76bd9946668a7152ccc0559b0df65ac8845fca4fb3e3af4d4002e5146e2b0051e5646547d4e8ef733941513e8f157ac1d071fec5b53342870ddfb8f9ca87cea2c64bcbaf133794327992f3953391f357384d3ae66419ca3146e3847d2dd26620a7603c439d18bd1f2534765c4e1d66c380d2ff0f0780bebd188e591bae959862869c1d9fc68b4bf4909f28edd4f55ba14f49f9b76da7187bdebfd21a8f831479891cb92b420cccced58406c96bc2a3397f4e912135233c5f5cbbdab9f8930bcb2ed5a9b62881e52d503aa37fa8ce19f7f46bcf9d1fb2f0b61c4f6587848a31184020dfa9fd80077ecb31e4a4841fc99c1a8ff3ce20f1fb43a726b373e50eccfec546fef3a811df8bfe045de460286abdbc470432654d5e9ea6c5080ebb2c6f571ba89d3e804b37a543cc42396628ff6d1298d31b26c3ded4c3b243779cf1ab8222f3a06810948f2aada2f28c638e7f26092e8fc4333636397ef94e7d62f3d5ac0fc7885dce729b8831c688a237e1e8eb46f821e1897195aa1f026ac2b91e66349b1d407ac5c7c62cb11e185a6895fac1ecff26c0b1365cd0da4099bdcd05a7e4e6abee56807db283bd779be43ced14ac89e54a05cf598f1c1f36b7d189668555f89a94a1614357c89b1b051b72e99aa5c0b7930701df775a815ba85e6ff53fa01f42cccd486a748e51e119259e482d26f6501e40cf9682b56390015ffb612f830c0a4efbc3e38dd7f33d1f48c6eda6a2e21b6bda5a81597b803ad4817c5e2c7e5c21a7b6d6f802e6255d758fa876d38ed33cdc52802eeacfc2a8239b3954c0d5a140b0b4eac8b1f84419593821fad698852adc9fb1473e200d56cec2d0afadf6e3a375f54fa58803f9d3955c74bcbb5a0cda173c417ebfdb8a16daf7cd3833cd50ab3ff5c979e4cfec7040f9d834df36a69ae2f5ad084fd40b6a17e2e13738c00cb7af39f74669d563ced6cd4fc05ce032219253704baff96742f4c9b7a20dbb0cc628e81e8c78b450959305eef02a0528f8a99c211f016f56f437b4b10b4c2142dd575a924dd408faa9487c53ca968ee918fa3a7460e5534d23fba8a8b2c1b642af7c614d9c65573a695a6d219e9baed19e2c831eff43e992cdf617dcd1b8d5778cd1935c3fafaab523ba7c4f955620e92bbec669c7af1f358be5f91ad98f14afb2e5d9d388adb600a64ca8bb02f0db65940fd1a6e50b581ff78c3e46eef89bde831d85b090d33d246b3a2eea3b6c6a3de8d6db43ad432fc902e15189e314d602a9189788782303a8cd504120cca5466523c766b8a84ea78130e8dcea83b602294602f38a3c33fd76fef67b71615d42ef9b7be3702e7fe7cfb24c38c0246c6ca8ba7e61c50bd3e0bff0e42cab9f8e54b32ea7b159b33798b7bb584c235424c62268726f64e84cb28d6f4f9f4aabcc3821689e0890ef1eaf4994671582fbaf7d3ad86f7bb827e4a3cae9073896bc5f4a9b8db54cbadcb9858ef23ae3d3a7f49448663f8ec775c8de0598e968017776798d0b93d373d39930055d8229718e367663b6f80730de5600004eb0834247ff8665cdf3b570553e10470206470aea86fce5b38fd2b533bcfe953e40522ced90dbb6495e7706090b5477f9ecb78d16b9c88be49eacd34693698d3e9189c75c71e713defc99c67248e5abcc698995e0a2468616d8b22e6aa192c1db6809d6c01b3c2d06e6b33bc95d415345c0c72a1e5841e56491ca89f83279ba640ec0f57b7f7946bff7c0df85e75df79ae7b264de6cdf00f224702b3d822309f7b43080038bcb60055e2077b3bc571ca55131d6826cd8f0d1a1964ef9c4817d1f61b6d6dedbe19ecd2be0c667204be5bfb2bfdba3786c10c375d3d832900a1b21f729d4feac1c8cf20360adc8e51fd33c4d9b744d99b957e466262047dc94da4ddad6f4081d1f8f5ef06d671631a323fbf7593603fe4236e12e4152d6ac787aa16f28e6a598579a1237aed2f81d4fcc8c561d24e5c2086787ddbab6b6b3c17832753b4de437a2f44aab07748365c9f47338ab625671209af9b8cf217429498cf874248c86bb08db95e77e9739c2c08a4d1aaff7cf5cfabf4a8b96440e0682ac8e73aa0297889529bc3fd578cd27fc7c9cb597a3095282225e567f380388902b48db077e0a24d102c859dd1979e50454f1d49fb33706b41163f9e85cabb133551320c29334c55c746cb511c4cee19333ca5821db434a839c1d2ef1ec9948e03bc9eb5d5e6af82b9ab875ce870fca47c5736e1b7df9c4cf84ff616749fa7b728e22db97474086ba21f5edf7153ff7252841625cd1a38557f8ffd9a8944bbafb8d2b348d15964e99cfeb2de81d0b5b3a6ab48543cfda3ae1bedaa0fe239bd622e8b5f557949b5e5014fb5a508e50e6b91ffa5be6ca835a9b58ed51dce6ca836517a4f77bf362ddd6ed8eae29245f84704b933f7e0e1382a1bb6a689db1543858fecba0469d88aa13441ec291a050637e7b984501c0bb601479c868131c0b36b53b0e257df414f166611ef81df281e8335c94d171e72150abe8da7a8747ba0ca6e0bdfaab60cf7433baf71634b1baec047816da4be1eb76abc006373e0af7489cf8418a4d9d5abc914293dd0d76d4f7407b237b4f3bca49f81ebe29a10b0a33d43f7aa3ef1e08c425d5e21fd91b05519718e053b21ab319778bc38b3cf1dac0754489f7393bac85242523dfa010b5979fba3fea0f318e025f5d44bf061bae16765c62dd5a417cf6c6d3c13a4ec709baa95e365069a52d54b5347a217b976be5c106f9d04fefe7a3eaf9495ab9f2176ea7610ffe2d7ef1a413b81cd00000d1d8ff12bbbc2624a76b1db3f3193b95cea404e454e8c42b6091129b21d979485411dbb0f0d493e5f85d545f25d0dd9681d42b2873ba88d365358c5f1aee19911bca752bd0b85ef7a3292c40cf5812c0097a97f4fa6cf27abdc9337d468e5a43b73c9893ecc0dde369809f6700dbaf0b32f3c438add92d56f0dddef099131610fe642288572afa5a609c4bc0779b421bf10e87c51419572625bdd588cecb7c84cc38a7ab39a2e7e7df108ee341d5500ad26ef43f9cabd27c863021415315cc3a5896d369a69c497929b99c17d3124616e6f6dbeaca7e5b53064b7bc635288348427c48cc3acd97aa2be876ab217137ba8f900d036956a2f3753f9be9d3f2ef05ad13fbd3969d13c3cd8b73fee604ed0c5b0c43b398ff8b005e8829f754f13cd66cf18db9d9ac7d608ab0a50df67167c92e0d30d60bd79e164094b642b001b6a71ae7ecd01feeadeab13c231b0e431279158c15096b4ec6727a44e597a86c0a67f96279639540097a25d00d5240d82eaaa636b831d9ed8198437efa68d014f8bb41e72ed35d2acd4248563efde8b60697f932c0b65ac8121bab0b84253affe2fc2797ee45bfbf7a269a5878cd9e027c3670d1b0bd858484d25d8ad0941a7fe048536e6635c9ea492d381772b51e618ba0319911f6e5f6d814c221d85b41751e5149ba35558db99c64172b215ee50e44899ada942920ece84bc3a27339365e62127b04d597faa2924e789964bfc97302a59c4cce3abea5cea1c62de8b8beed209b22d268a591f24107f7255ceb32a3b84690154fc40a4351aab43fe5202f7209d3aff0132aa65bc785b92a8dff9d6af4cd15c149fcce4c6d9e8ec4f53feb0e44e451149fd1c592736edd98f7d8b0e302d90cfd47cd4b5a6c690b376c2e2bb92082bc82e6a9056cd379f698dd1f38adaa7a906d0fa28de6fe3378d4b658eb024722616f5e916fb8c0b545d74c547e4cc0ec77bf8ce9b1b23a37f0ced6be5cf946347309649c7e6367ee53fdf1d170ca8b123b18a6140ff7413a0a17080bc935728a0554216921e05039b00ee24ff683900f60d17f4a6fe5e0c221edb3ef29619210c24285cdcb07d4c75b5186b50f866935816f437243cd1e187e9adab7d595ad5b3b70b674d7071ff75b6245bcca04030691febc3223ed45475372eb9113b6ebfbc2d9e18a92a2ed7d922aea0792672d9863bcf37c80484e3cc4551460f18c6fa1e11194df99e1103b2902c2dc44d81ba0f094c837d15092d1f6078f4ccaedba6eca99b72079c8baf61ab14463a093834f8fec58f281a382130dadda8e20ef54c5617d3d2e913ad0af6f9bf0c49cfe7b5daf7778cae0362b3af92a6ef5c188b4b94ef022212abb2d5f08fd2016968aa4ec6a2b3a3e8afffbab6c4d65c1e56886cdfa6aeb043fdc3a89914915f0c2cfcc6bbdc50b7b3233fcfb4535331d4fd97fb7a74f173f0ae90c7a1a99bb52f2a69803e273000a5250d931522ce6a134efcfbca3e8a50d5d8dfb5730f14ff9186036dff44d669c6aaf1be21933bd8631e9564dc1c7544aecc0515c7275d0d1a0583f86d5560202777aeeb12006642165f57aa89c3954ee1f1297c6d52915ddd4f4320beeaf4b52856883d66812ba81c964743e72593a5a2a125889f652f2c2ef83334a841a5ec163cb736e36ffd174d5a966323fa316fe4d48293c3e"}], 0x2})
creat(&(0x7f0000000000)='./file0\x00', 0x1ea)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0)

8.718429581s ago: executing program 1 (id=277):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000010000000c00000060"], 0x14}, 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000010000000c00000060"], 0x14}, 0x800) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) (async)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) (async)

8.458355411s ago: executing program 33 (id=277):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000010000000c00000060"], 0x14}, 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdb) (async)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000010000000c00000060"], 0x14}, 0x800) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) (async)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) (async)

8.00738867s ago: executing program 3 (id=279):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x34, r5, 0x5, 0x4000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac09, 0xfac02, 0xd]}]]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x5c, r5, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x55218ee82691b355}, 0x20000800)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7}, 0x1c)
io_setup(0x6, &(0x7f0000000680)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r4, 0x0}])
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000000)=0x7a, 0x4)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f00000001c0)=0x4, 0x4)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r9, 0x89eb, &(0x7f0000000000)={0x9, 0x9, 0x4, 0x6, 0x7, 0x3, 0xc, "ffbfd3928fb53131be033908979a61179f97309e", "9453715b3e75f01018f816a3ebc9322aaa532ac5"})
sendto$inet(r7, &(0x7f0000000040)="02a13376a7ba83775427", 0xfffffffffffffedd, 0x16008015, 0x0, 0x0)
ioctl$sock_SIOCINQ(r7, 0x541b, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x4, 0x3}, 0x8)
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='selinuxfs\x00', 0x2260035, 0x0)

7.58082417s ago: executing program 3 (id=280):
mount(&(0x7f0000000040)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x10348d3, 0x0)

7.563815218s ago: executing program 3 (id=281):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x8000000, 0xe0000, 0x9, 0x3, 0x0, [{0x2, 0x3, 0x5, '\x00', 0x7}, {0xd, 0x7, 0x96, '\x00', 0x3}, {0xff, 0xf2, 0x3, '\x00', 0x5}, {0x17, 0xf8, 0x4, '\x00', 0xf4}, {0x5, 0xd, 0x4, '\x00', 0x9}, {0x0, 0xc, 0xb, '\x00', 0x8}, {0xb0, 0x1, 0x3, '\x00', 0x1}, {0x7, 0x5, 0x93, '\x00', 0xfd}, {0x1, 0x1, 0x5}, {0x75, 0x81, 0xd, '\x00', 0x7}, {0x0, 0x7, 0xb, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x9}, {0x6, 0x26, 0x7b, '\x00', 0xb}, {0x9, 0x6, 0x3}, {0x5, 0x10, 0x22, '\x00', 0xc}, {0xe, 0x1, 0x8, '\x00', 0x82}, {0x5, 0x2, 0xa6, '\x00', 0x9}, {0xf, 0xd, 0x9, '\x00', 0x68}, {0x7, 0x5, 0xe2, '\x00', 0x7}, {0x5, 0x8, 0x4, '\x00', 0x3}, {0x4, 0x7, 0x2, '\x00', 0x7}, {0x6, 0xa1, 0x4}, {0xf9, 0x70, 0xe, '\x00', 0x1c}, {0x76, 0x1, 0xff, '\x00', 0x10}]}})
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
unshare(0x2a020480)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xcb0a)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x5, 0x5fb, "61dce6241840"}})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}}, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r5, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
inotify_init1(0x0)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000)

5.663905514s ago: executing program 3 (id=287):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x38, r4, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0b, 0xfac05, 0xfac0c, 0xfac04]}]]}, 0x38}}, 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000017c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"22dd3fb97497021fa99774a26900a452"}}}}, 0xa0) (async)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00')
preadv(r7, &(0x7f0000002540)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x47fff, 0x6)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, 0xfffffffffffffffd) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) (async)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000400), &(0x7f0000000440)=0x4)
sigaltstack(&(0x7f00000000c0)={0x0, 0x80000002}, 0x0) (async)
connect$inet(r9, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async)
readv(r9, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x1) (async, rerun: 32)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async, rerun: 32)
shutdown(r9, 0x1) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async, rerun: 32)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r8, 0x4018aee3, &(0x7f0000000080)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000040)=0xffc})

5.147390513s ago: executing program 3 (id=290):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x57789000)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00')
syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYBLOB="e2"], 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.116627072s ago: executing program 2 (id=306):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r2=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3, r2, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000})
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x31, 0x25, 0xff, {0xc, @sctp_ip4_spec={@local, @empty, 0x4e21, 0x4e20}, {0x0, @multicast, 0x56bd, 0xf8d, [0x0, 0x4]}, @tcp_ip4_spec={@multicast1, @loopback, 0x4e23, 0x4e24, 0x3}, {0x0, @remote, 0x3, 0x3524, [0x3, 0xfffffff8]}, 0x0, 0x2}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r3, 0x2000)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc)

2.027311463s ago: executing program 3 (id=307):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c000280050001000000000008000840000095030400108008001540"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000006c0)={0x0, 0xf, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x1, 0x50, &(0x7f0000000740)="60de8165", 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0)
r4 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff8)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000002c0)={r4, 0xfffffe76, 0xfffffffffffffda7}, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='reiserfs\x00', 0x122006, &(0x7f0000000100)='/dev/rnullb0\x00')

1.776230557s ago: executing program 2 (id=309):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0)
read$msr(r1, &(0x7f0000034000)=""/102386, 0x18ff2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8000, 0xfffffffc, 0x1})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x2c39000)

1.708606997s ago: executing program 2 (id=311):
socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, 0x0, &(0x7f0000000040)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040045) (async)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r7, 0xa4717000)

1.618983277s ago: executing program 4 (id=313):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) (async)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8438, 0x60440)
ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000380)={0x8, "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"})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x2}], 0x1, 0x40800) (async)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0xfffffffffffffce8, &(0x7f0000000100)=[{&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40012040) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdc}, 0x1c) (async)
setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, 0x0, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) (async)
r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200000, 0x20)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0xe594, r7}, 0x0) (async)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x100, r8}, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.442111333s ago: executing program 4 (id=314):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x0, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0)

1.332109462s ago: executing program 2 (id=315):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}]}, @NFTA_CHAIN_USERDATA={0x74, 0xc, "a1dd6995153c6cb0ef4410808b523316cc3ffb121a43c6b66c19fd48451202b6f66d96fbbdb9d09f0e19097cd80253e0a1c7af02f5aeaa989da3576043d78854388ff9c2de01832127b5532e24c2614372954f592fdfade73a8b7efd5390926bff99d4aa186ebbbd95ed061076bfa49f"}]}], {0x14}}, 0xf8}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
madvise(&(0x7f0000d9c000/0x1000)=nil, 0x1000, 0x17)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1})
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r9 = accept(r7, 0x0, 0x0)
connect$unix(r9, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
close_range(r3, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

1.281395776s ago: executing program 4 (id=316):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x466a01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x57789000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
fsync(r1)
ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x9)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x40080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x76ce3ef7abf0d27e)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000c40)={"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"})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x9, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x108000)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000000))
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
userfaultfd(0x80001)
mlock(&(0x7f000083f000/0x4000)=nil, 0x4000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

725.971361ms ago: executing program 5 (id=317):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000180)=0x4)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x3c, r3, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x3c}}, 0x0)

636.704063ms ago: executing program 5 (id=318):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80b01, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2020)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00001d1000/0x400000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000)

631.243564ms ago: executing program 5 (id=319):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff)
madvise(&(0x7f0000256000/0x1000)=nil, 0x1000, 0xb)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
wait4(r1, 0x0, 0x40000000, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x7, 0x4, 0x1, 0x2b, 0x1c, 0x68, 0x0, 0x60, 0x33, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @local, {[@cipso={0x86, 0x6, 0x3}]}}}}, 0x2a)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0xff01, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

483.26223ms ago: executing program 2 (id=320):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @loopback, <r1=>0x0}, &(0x7f0000000040)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x7800, 0x8000, 0xfff, 0x7, {{0x16, 0x4, 0x2, 0x3f, 0x58, 0x68, 0x0, 0x9, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@ssrr={0x89, 0x27, 0x16, [@broadcast, @rand_addr=0x64010100, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x18}]}, @lsrr={0x83, 0x13, 0xa0, [@local, @broadcast, @multicast1, @empty]}, @ra={0x94, 0x4}, @generic={0x7, 0x6, "e5654ead"}]}}}}})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000140)={'nicvf0\x00', 0x9})
r3 = fanotify_init(0x10, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x6)
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000200)=[@rdmsr={0x32, 0x18, {0x3af}}, @wr_crn={0x46, 0x20, {0x3, 0x100000000}}, @uexit={0x0, 0x18, 0x39}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x14, 0x18, {0x0, 0xc383}}, @wrmsr={0x1e, 0x20, {0xa8b, 0x5}}, @code={0xa, 0x67, {"b9800000c00f3235001000000f3067450f01dfb9800000c00f3235004000000f30c4011572f541420f18d5470f1a64e59b0f01cfc7442400b1000000c744240206000000ff2c24f2470f988495bfb6bef0c4617de1f8"}}, @rdmsr={0x32, 0x18, {0x971}}, @wr_crn={0x46, 0x20, {0x2, 0x4}}, @code={0xa, 0x52, {"260f00d8c42265dd920e000000b9800000c00f3235004000000f300f01c266baf80cb89127598def66bafc0cec0fc76d00260f210543d2198fe978cb7db50fc729"}}, @rdmsr={0x32, 0x18, {0xa54}}, @cpuid={0x14, 0x18, {0x62ba8b56, 0x4}}, @wr_crn={0x46, 0x20, {0x3, 0x80000000}}, @code={0xa, 0x78, {"36660fc5dd00470f019e0048000066f3450fc7b16e2400004139850f000000c46251bb0e48b8a40d0000000000000f23c80f21f835080060000f23f866bad004b800000000ef66b81c008ec8b9000300000f3266baf80cb8d020998fef66bafc0cb804000000ef"}}, @code={0xa, 0x59, {"66ba6100ec66ba4200ecc482c1931cf266b878008ec80fed9f0040985bb9840b00000f32430f08b805000000b9002000000f01c1b965020000b800100000ba000000000f300f01dc"}}, @cpuid={0x14, 0x18, {0x2}}, @uexit={0x0, 0x18, 0x6}, @wr_crn={0x46, 0x20, {0x8}}, @rdmsr={0x32, 0x18, {0x614}}, @rdmsr={0x32, 0x18, {0xc0000082}}, @wr_crn={0x46, 0x20, {0x4, 0x3}}, @cpuid={0x14, 0x18, {0x8, 0x40}}, @wr_crn={0x46, 0x20, {0x3, 0xfff}}], 0x38a})
ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000600)={0xbd, "06635b2d48769eff81a16435f9ca13abc29c5300498c978094d1a7d48ac7a5415107d2344d0eabfae6a3a2ca1b15859b12a374c23fe2cd9ad9040440dffae6e3d0cdfc845220af2bab4065b0cb0c7aa35d4cb4c584dab726ccc2b05d50dd6d2c998f623160c1e7406a459954ecf85ecd912e25fd96be4e71bbb5f9b3f19e201d1ca3a054aa52f997082d55326234678873df8945b78181238f8fb68d5ec6fb98d9cd411160a2b825d70b338e68514eac2686b40eaf79d36d797e1dcb08"})
r6 = dup(0xffffffffffffffff)
write$binfmt_aout(r6, &(0x7f0000000700)={{0x108, 0x0, 0x1, 0x163, 0x83, 0x7f, 0x36a, 0x65}, "28034e25c5bb6a8f477466d751423183b4f1d7d30330a2fef64e2cde79b840e447855b0bb12b14c4a0bce2c521cf6aa6b651ae458c4dc78b8436dcdfe42830", ['\x00']}, 0x15f)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x19)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e23, 0x7, @mcast2, 0x8}}, 0x0, 0x0, 0x9, 0x0, "33f1dd0b396b4165f24e95488c6cc28d6c8c44f303dacfc5110d95ebb4c077b1d408d1b461cdb5ab8d649b53bb3c4d2522b133fa49d8d0bfc565a0d12fcf593b2e08b70b2424b999dca5dcfcfacd8967"}, 0xd8)
preadv(r3, &(0x7f0000002a40)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/157, 0x9d}], 0x3, 0x100, 0x3)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000002a80)={0x21, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18)
r7 = openat$cgroup_ro(r6, &(0x7f0000002ac0)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000002b00), &(0x7f0000002b40)=0x4)
ioctl$VIDIOC_QUERYCAP(r7, 0x80685600, &(0x7f0000002b80))
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x31)
fanotify_mark(r6, 0x2, 0x48001008, r6, &(0x7f0000002c00)='./file0\x00')
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r6, 0xc040563d, &(0x7f0000002c40)={0x1, 0x0, 0x101, 0x2, {0x2, 0x200, 0x34, 0x800}})
r8 = openat$cgroup_ro(r7, &(0x7f0000002c80)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
fanotify_init(0x4, 0x8000)
accept4$unix(r6, &(0x7f0000002cc0), &(0x7f0000002d40)=0x6e, 0x80000)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000002d80), &(0x7f0000002dc0)=0x14)
move_mount(r7, &(0x7f0000002e00)='./file0\x00', r6, &(0x7f0000002e40)='./file0\x00', 0x120)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000002e80)={0x4, 0x61d, 0x66d, 0x38, 0x400, 0xfffffffb})
write$midi(r7, &(0x7f0000002f00)="b7d8acf07fa3dbd760331ab3fff1bad62402e4d7cdc4a570717d7ae297e36ae6320f489e731c2b80d77ba00c313a6336d0b79292ea0620f34ff8dcafe619913eb565621f76f6178e74a221a747aa36a37d6300e8e0a792fa2998d1f30512273a1ddc965f6001630c007bab68e7de03008df2c377e485d0d5fa8ed1074f92b6700345", 0x82)

427.964305ms ago: executing program 2 (id=321):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2, 0xa, 0x81, 0x7, 0x19, 0x0, 0x70bd25, 0x25dfd3fd, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd28, 0x3501}, @sadb_address={0x3, 0x7, 0x47, 0x0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@private0, 0x2b, 0x14, 0x10}, @sadb_sa={0x2, 0x1, 0x4d5, 0x3, 0x1c, 0xc8, 0x2}, @sadb_key={0x9, 0x9, 0x1d0, 0x0, "53a4628e52503f15dc95642d3875d03315f442a5307b7028a3123098af0a0125420fa81cb8755fb7e10d2d99fa64a2831ea9a38cf38bcf96aaa8"}]}, 0xc8}}, 0x2000c001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)='hpfs\x00', 0x202086, 0x0)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020600000524060001052400a2000d240f01f9ffff5efdff08000006241a080008090581030004000000090401"], 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0xfe}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20048080)

296.673868ms ago: executing program 4 (id=322):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4f14, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x6, 0x100}}}}}}}}}, 0x4a) (async)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x2, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0)

213.066587ms ago: executing program 5 (id=323):
mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vxfs\x00', 0x20080c5, 0x0)

207.614862ms ago: executing program 4 (id=324):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4480, 0x0)

108.604737ms ago: executing program 4 (id=325):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
ioprio_set$pid(0x1, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
futex(&(0x7f0000000380), 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x2)
sendfile(r0, r0, 0x0, 0x7ffff000)

49.577376ms ago: executing program 5 (id=326):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="b6a5", 0x2, 0x20048004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x406f413, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1})
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8f, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x0, 0x3010}})
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000140))

0s ago: executing program 5 (id=327):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='cgroup.events\x00', 0x275a, 0x0) (async)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0xfffffffd, 0xcc7, 0xff7, 0x5c95239c, 0x1, 0x3ff, 0x6, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x10, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0xfffffffe, 0xffffeadb, 0x0, 0x3c, 0x0, 0x4, 0x2, 0xdffffffa]}) (async)
write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) (async)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ff2000/0xc000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x1c3, 0x19, 0x24, 0x14, 0x3})
r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0)
syz_usb_disconnect(r3) (async)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r3, 0x550c, 0x0) (async)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000009780)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000001300)=ANY=[@ANYBLOB="b000000000000000", @ANYRES16=r4, @ANYRESHEX, @ANYRESOCT=r6, @ANYRES32=r0, @ANYRESDEC=r6], 0xb0) (async)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/3, 0x1e000, 0x800}, 0x20) (async)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x0, r10}, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000bf2344ef695cac2100000000000a000000"], 0x14}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts.
[   64.522769][ T5849] cgroup: Unknown subsys name 'net'
[   64.650969][ T5849] cgroup: Unknown subsys name 'cpuset'
[   64.659203][ T5849] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.980919][ T5849] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.978947][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.988309][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.995764][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.001119][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.010174][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.017894][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.025296][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.033286][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.036292][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.040913][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.052208][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.055127][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.062078][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.076093][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.083702][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.083916][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.091090][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.098473][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.105967][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.119744][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.453739][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   68.463626][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   68.500589][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   68.580444][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   68.618344][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.625582][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.632967][ T5863] bridge_slave_0: entered allmulticast mode
[   68.639837][ T5863] bridge_slave_0: entered promiscuous mode
[   68.650960][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.658061][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.665586][ T5864] bridge_slave_0: entered allmulticast mode
[   68.672427][ T5864] bridge_slave_0: entered promiscuous mode
[   68.679924][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.687087][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.694374][ T5864] bridge_slave_1: entered allmulticast mode
[   68.701128][ T5864] bridge_slave_1: entered promiscuous mode
[   68.714637][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.721791][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.729092][ T5863] bridge_slave_1: entered allmulticast mode
[   68.735754][ T5863] bridge_slave_1: entered promiscuous mode
[   68.793955][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.801184][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.808344][ T5869] bridge_slave_0: entered allmulticast mode
[   68.816018][ T5869] bridge_slave_0: entered promiscuous mode
[   68.825320][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.836773][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.854160][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.865634][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.875044][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.882325][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.889572][ T5869] bridge_slave_1: entered allmulticast mode
[   68.896240][ T5869] bridge_slave_1: entered promiscuous mode
[   68.939106][ T5863] team0: Port device team_slave_0 added
[   68.953279][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.960561][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.967678][ T5858] bridge_slave_0: entered allmulticast mode
[   68.975189][ T5858] bridge_slave_0: entered promiscuous mode
[   68.990640][ T5863] team0: Port device team_slave_1 added
[   68.997397][ T5864] team0: Port device team_slave_0 added
[   69.005102][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.014345][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.021692][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.029469][ T5858] bridge_slave_1: entered allmulticast mode
[   69.036172][ T5858] bridge_slave_1: entered promiscuous mode
[   69.052107][ T5864] team0: Port device team_slave_1 added
[   69.069231][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.107016][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.114434][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.140554][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.152527][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.159789][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.185699][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.204233][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.211327][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.237410][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.260201][ T5869] team0: Port device team_slave_0 added
[   69.267719][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.277400][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.284760][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.310677][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.334807][ T5869] team0: Port device team_slave_1 added
[   69.342332][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.401756][ T5864] hsr_slave_0: entered promiscuous mode
[   69.407906][ T5864] hsr_slave_1: entered promiscuous mode
[   69.415612][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.422749][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.448807][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.469829][ T5863] hsr_slave_0: entered promiscuous mode
[   69.475936][ T5863] hsr_slave_1: entered promiscuous mode
[   69.482357][ T5863] debugfs: 'hsr0' already exists in 'hsr'
[   69.488108][ T5863] Cannot create hsr debugfs directory
[   69.502676][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.509911][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.536077][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.547983][ T5858] team0: Port device team_slave_0 added
[   69.555816][ T5858] team0: Port device team_slave_1 added
[   69.616532][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.623616][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.650306][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.675776][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.682804][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.708742][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.742810][ T5869] hsr_slave_0: entered promiscuous mode
[   69.749271][ T5869] hsr_slave_1: entered promiscuous mode
[   69.755241][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   69.761074][ T5869] Cannot create hsr debugfs directory
[   69.830849][ T5858] hsr_slave_0: entered promiscuous mode
[   69.836934][ T5858] hsr_slave_1: entered promiscuous mode
[   69.843038][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   69.848843][ T5858] Cannot create hsr debugfs directory
[   69.964708][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.982644][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.003208][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.025937][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.070080][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.079826][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.088825][   T51] Bluetooth: hci1: command tx timeout
[   70.100775][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.122163][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   70.152905][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.159848][   T51] Bluetooth: hci0: command tx timeout
[   70.159856][ T5865] Bluetooth: hci2: command tx timeout
[   70.168992][ T5865] Bluetooth: hci3: command tx timeout
[   70.178528][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.199787][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.209125][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.262045][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.272206][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.283894][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.293539][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.312062][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.341765][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   70.365016][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.372143][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.380946][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.388029][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.454934][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.475166][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.497756][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   70.518117][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.525287][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.545715][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   70.558274][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.567771][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.574951][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.603701][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.610857][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.620823][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.627910][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.676044][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   70.703628][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.710781][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.736440][ T5869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   70.748232][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.773452][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.780632][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.824603][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.947263][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.962085][ T5864] veth0_vlan: entered promiscuous mode
[   70.982306][ T5864] veth1_vlan: entered promiscuous mode
[   71.014556][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.061067][ T5863] veth0_vlan: entered promiscuous mode
[   71.072826][ T5864] veth0_macvtap: entered promiscuous mode
[   71.095488][ T5864] veth1_macvtap: entered promiscuous mode
[   71.112937][ T5869] veth0_vlan: entered promiscuous mode
[   71.121116][ T5863] veth1_vlan: entered promiscuous mode
[   71.143189][ T5869] veth1_vlan: entered promiscuous mode
[   71.161394][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.178303][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.190371][ T5863] veth0_macvtap: entered promiscuous mode
[   71.201394][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.215224][ T5863] veth1_macvtap: entered promiscuous mode
[   71.230958][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.241540][ T2971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.260128][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.268924][ T2971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.285709][ T2971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.295187][ T2971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.304853][ T5869] veth0_macvtap: entered promiscuous mode
[   71.317317][ T2971] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.326463][ T2971] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.336422][ T5869] veth1_macvtap: entered promiscuous mode
[   71.352543][ T2971] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.362321][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[   71.363707][ T2971] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.377416][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[   71.404130][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.428434][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.440036][ T5858] veth0_vlan: entered promiscuous mode
[   71.463010][ T3004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.473355][ T3004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.496787][ T3004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.505685][ T3004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.518019][ T5858] veth1_vlan: entered promiscuous mode
[   71.526577][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.535185][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.577624][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.591580][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.601348][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.604179][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.616574][ T5858] veth0_macvtap: entered promiscuous mode
[   71.634732][ T5858] veth1_macvtap: entered promiscuous mode
[   71.666630][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.683843][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.695289][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.704551][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.705458][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.726521][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.743289][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.797653][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.815517][ T5947] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[   71.823726][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.834062][ T5947] VFS: Can't find a romfs filesystem on dev rnullb0.
[   71.834062][ T5947] 
[   71.846132][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.859535][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.872134][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.881481][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   71.890179][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.900346][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   71.918057][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   71.930053][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   71.985284][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.014371][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.022963][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.040029][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.060003][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.068672][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.083744][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.096828][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.108071][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.129817][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.140556][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.151718][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.154272][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.159510][ T5865] Bluetooth: hci1: command tx timeout
[   72.171294][ T5953] program syz.3.5 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.184211][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.195487][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.218220][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.239171][ T5865] Bluetooth: hci3: command tx timeout
[   72.244632][ T5865] Bluetooth: hci2: command tx timeout
[   72.250563][ T5865] Bluetooth: hci0: command tx timeout
[   72.266805][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.277605][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.287541][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.295794][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.305079][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.314080][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.330518][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.343371][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.347405][ T5961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.371800][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.380669][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.389343][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.397193][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.406513][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.415567][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.423811][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.432835][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.440910][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.450056][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.457709][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.465862][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.475062][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.483627][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.492889][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.501781][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.511704][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.520408][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.535025][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.543750][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.553045][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.570306][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.579587][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.588318][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.596534][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.604735][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.614768][ T5947] overlay: filesystem on ./file0 not supported as upperdir
[   72.854778][ T5967] Zero length message leads to an empty skb
[   73.011064][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   73.811516][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.063292][ T5985] binder: Bad value for 'max'
[   74.107096][ T5987] /dev/rnullb0: Can't open blockdev
[   74.239171][ T5865] Bluetooth: hci1: command tx timeout
[   74.318887][ T5873] Bluetooth: hci2: command tx timeout
[   74.324368][   T51] Bluetooth: hci3: command tx timeout
[   74.330068][ T5865] Bluetooth: hci0: command tx timeout
[   74.368701][ T1219] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   74.528817][ T1219] usb 2-1: Using ep0 maxpacket: 8
[   74.540571][ T1219] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[   74.551268][ T1219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.561514][ T1219] usb 2-1: Product: syz
[   74.565791][ T1219] usb 2-1: Manufacturer: syz
[   74.572203][ T1219] usb 2-1: SerialNumber: syz
[   74.578552][ T1219] usb 2-1: config 0 descriptor??
[   74.786115][ T1219] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[   74.992712][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.019240][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.055469][ T5995] mmap: syz.0.16 (5995) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   75.101563][ T5998] exFAT-fs (rnullb0): invalid boot record signature
[   75.108307][ T5998] exFAT-fs (rnullb0): failed to read boot sector
[   75.115430][ T5998] exFAT-fs (rnullb0): failed to recognize exfat type
[   75.174440][ T6002] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   75.331645][ T6013] qnx4: no qnx4 filesystem (no root dir).
[   75.447644][ T6024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.511868][ T6030] hpfs: Bad magic ... probably not HPFS
[   75.634121][ T1219] usb write operation failed. (-71)
[   75.642563][ T1219] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   75.666354][ T1219] dvbdev: DVB: registering new adapter (Terratec H7)
[   75.680063][ T1219] usb 2-1: media controller created
[   75.686554][ T1219] usb read operation failed. (-71)
[   75.694189][ T1219] usb write operation failed. (-71)
[   75.709937][ T1219] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[   75.730258][ T1219] usb 2-1: USB disconnect, device number 2
[   75.831302][ T6044] /dev/rnullb0: Can't open blockdev
[   76.319445][ T5865] Bluetooth: hci1: command tx timeout
[   76.399341][ T5873] Bluetooth: hci2: command tx timeout
[   76.400095][   T51] Bluetooth: hci3: command tx timeout
[   76.404788][ T5865] Bluetooth: hci0: command tx timeout
[   76.611108][   T30] audit: type=1326 audit(1756276558.784:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7198ebe9 code=0x7ffc0000
[   76.633647][   T30] audit: type=1326 audit(1756276558.784:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fda7198ebe9 code=0x7ffc0000
[   76.668865][   T30] audit: type=1326 audit(1756276558.834:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7198ebe9 code=0x7ffc0000
[   76.693368][   T30] audit: type=1326 audit(1756276558.834:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7198ebe9 code=0x7ffc0000
[   76.719578][   T30] audit: type=1326 audit(1756276558.884:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fda7198ebe9 code=0x7ffc0000
[   76.743710][   T30] audit: type=1326 audit(1756276558.884:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda7192ade9 code=0x7ffc0000
[   76.767766][   T30] audit: type=1326 audit(1756276558.884:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda7192ade9 code=0x7ffc0000
[   76.794300][   T30] audit: type=1326 audit(1756276558.884:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda7192ade9 code=0x7ffc0000
[   76.819270][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.827554][   T30] audit: type=1326 audit(1756276558.884:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda7192ade9 code=0x7ffc0000
[   76.852144][   T30] audit: type=1326 audit(1756276558.884:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.3.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda7192ade9 code=0x7ffc0000
[   77.097465][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.107683][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   77.123012][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   77.132791][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   77.144636][    T9] usb 1-1: SerialNumber: syz
[   77.356269][ T6066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.367451][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.387643][ T6066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.398369][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.730158][ T6091] netlink: 666 bytes leftover after parsing attributes in process `syz.1.43'.
[   78.501174][ T6100] /dev/rnullb0: Can't open blockdev
[   78.666599][ T1219] hid-generic C98F:0003:0000.0001: item fetching failed at offset 0/2
[   78.679793][ T1219] hid-generic C98F:0003:0000.0001: probe with driver hid-generic failed with error -22
[   78.733780][ T6106] /dev/rnullb0: Can't open blockdev
[   79.278479][ T6115] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[   79.291435][ T6115] /dev/rnullb0: Can't open blockdev
[   79.484080][ T6123] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[   79.492258][ T6123] netlink: 'syz.1.53': attribute type 11 has an invalid length.
[   79.500246][ T6123] netlink: 224 bytes leftover after parsing attributes in process `syz.1.53'.
[   79.520160][ T1041] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96
[   79.551668][    T9] usb 1-1: 0:2 : does not exist
[   79.556648][    T9] usb 1-1: unit 5: unexpected type 0x0b
[   79.576275][    T9] usb 1-1: USB disconnect, device number 2
[   79.597266][ T6127] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.612194][ T6127] bond0: (slave rose0): Enslaving as an active interface with an up link
[   79.622646][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.639865][ T6130] warning: `syz.0.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.858448][ T6145] /dev/rnullb0: Can't open blockdev
[   80.519313][ T6168] syz.3.61 uses obsolete (PF_INET,SOCK_PACKET)
[   80.698716][ T5945] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   80.788790][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.828710][ T5945] usb 2-1: device descriptor read/64, error -71
[   80.950811][   T10] usb 4-1: config 0 has no interfaces?
[   80.958101][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   80.967832][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.012983][   T10] usb 4-1: Product: syz
[   81.017213][   T10] usb 4-1: Manufacturer: syz
[   81.038646][   T10] usb 4-1: SerialNumber: syz
[   81.049558][   T10] usb 4-1: config 0 descriptor??
[   81.070676][ T5945] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   81.093666][ T6199] /dev/rnullb0: Can't open blockdev
[   81.209112][ T5945] usb 2-1: device descriptor read/64, error -71
[   81.266989][ T6168] overlayfs: failed to resolve './file0': -2
[   81.318905][ T5945] usb usb2-port1: attempt power cycle
[   81.331473][   T10] usb 4-1: USB disconnect, device number 2
[   81.661826][ T5945] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   81.690115][ T5945] usb 2-1: device descriptor read/8, error -71
[   81.928876][ T5945] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   81.950197][ T5945] usb 2-1: device descriptor read/8, error -71
[   82.059779][ T5945] usb usb2-port1: unable to enumerate USB device
[   82.129149][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   82.178829][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   82.280271][    T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   82.292834][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.306014][    T9] usb 4-1: config 0 descriptor??
[   82.323192][    T9] cp210x 4-1:0.0: cp210x converter detected
[   82.352254][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.363641][   T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   82.374975][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.387948][   T10] usb 1-1: config 0 descriptor??
[   82.725009][    T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71
[   82.741190][    T9] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71
[   82.753667][    T9] cp210x 4-1:0.0: GPIO initialisation failed: -71
[   82.767332][    T9] usb 4-1: cp210x converter now attached to ttyUSB0
[   82.787861][    T9] usb 4-1: USB disconnect, device number 3
[   82.810369][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   82.834260][    T9] cp210x 4-1:0.0: device disconnected
[   82.888646][  T980] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   83.048854][  T980] usb 2-1: Using ep0 maxpacket: 8
[   83.058852][  T980] usb 2-1: config 1 interface 0 has no altsetting 0
[   83.067844][  T980] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[   83.082018][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.092636][  T980] usb 2-1: Product: syz
[   83.096847][  T980] usb 2-1: Manufacturer: syz
[   83.102022][  T980] usb 2-1: SerialNumber: syz
[   83.326744][  T980] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5
[   83.342160][ T5221] bcm5974 2-1:1.0: could not read from device
[   83.352860][ T5221] bcm5974 2-1:1.0: could not read from device
[   83.399828][  T980] usb 2-1: USB disconnect, device number 7
[   83.488702][ T5945] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   83.658867][ T5945] usb 3-1: Using ep0 maxpacket: 8
[   83.672267][ T5945] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[   83.681672][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.690145][ T5945] usb 3-1: Product: syz
[   83.694575][ T5945] usb 3-1: Manufacturer: syz
[   83.699570][ T5945] usb 3-1: SerialNumber: syz
[   83.708014][ T5945] usb 3-1: config 0 descriptor??
[   83.876137][ T6243] fuse: Bad value for 'rootmode'
[   84.200158][  T980] usb 3-1: USB disconnect, device number 2
[   84.512758][ T6258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.84'.
[   84.560519][ T6260] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[   84.567101][ T6260] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   84.575377][ T6260] vhci_hcd vhci_hcd.0: Device attached
[   84.585419][ T6260] vhci_hcd vhci_hcd.0: port 0 already used
[   84.619168][ T6261] vhci_hcd: connection closed
[   84.620183][ T2971] vhci_hcd: stop threads
[   84.630431][ T2971] vhci_hcd: release socket
[   84.634881][ T2971] vhci_hcd: disconnect device
[   84.696547][ T6273] =======================================================
[   84.696547][ T6273] WARNING: The mand mount option has been deprecated and
[   84.696547][ T6273]          and is ignored by this kernel. Remove the mand
[   84.696547][ T6273]          option from the mount to silence this warning.
[   84.696547][ T6273] =======================================================
[   84.731999][ T6273] /dev/rnullb0: Can't open blockdev
[   84.802584][ T6275] kvm: requested 6704 ns i8254 timer period limited to 200000 ns
[   84.840522][ T6275] kvm: requested 26819 ns i8254 timer period limited to 200000 ns
[   84.864707][ T6279] kvm: requested 6704 ns i8254 timer period limited to 200000 ns
[   85.004839][   T10] usbhid 1-1:0.0: can't add hid device: -71
[   85.019920][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   85.044404][   T10] usb 1-1: USB disconnect, device number 3
[   85.165214][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.182872][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.378850][ T5860] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   85.388751][ T5945] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   85.398117][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.407049][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.538658][ T5860] usb 3-1: Using ep0 maxpacket: 8
[   85.554667][ T5860] usb 3-1: config 0 has an invalid interface number: 150 but max is 0
[   85.558805][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   85.563350][ T5860] usb 3-1: config 0 has an invalid interface number: 112 but max is 0
[   85.581383][ T5860] usb 3-1: config 0 has an invalid interface number: 3 but max is 0
[   85.590930][ T5860] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 1
[   85.601595][ T5860] usb 3-1: config 0 has no interface number 0
[   85.607759][ T5860] usb 3-1: config 0 has no interface number 1
[   85.614241][ T5860] usb 3-1: config 0 has no interface number 2
[   85.621997][ T5860] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   85.635370][ T5860] usb 3-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30
[   85.648204][ T5860] usb 3-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104
[   85.663230][ T5860] usb 3-1: config 0 interface 150 has no altsetting 0
[   85.671878][ T5860] usb 3-1: config 0 interface 112 has no altsetting 0
[   85.680380][ T5860] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[   85.691216][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.704262][ T5860] usb 3-1: config 0 descriptor??
[   85.752902][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   85.763176][   T10] usb 1-1: config 2 has an invalid interface number: 254 but max is 0
[   85.771797][   T10] usb 1-1: config 2 has no interface number 0
[   85.782894][   T10] usb 1-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=c1.88
[   85.794729][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.803776][   T10] usb 1-1: Product: syz
[   85.808107][   T10] usb 1-1: Manufacturer: syz
[   85.815089][   T10] usb 1-1: SerialNumber: syz
[   86.053996][ T6298] cgroup: subsys name conflicts with all
[   86.155564][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.161987][ T5860] usb 3-1: string descriptor 0 read error: -71
[   86.164984][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.201579][ T5860] usb 3-1: USB disconnect, device number 3
[   86.304157][   T10] gspca_main: finepix-2.14.0 probing 04cb:0109
[   86.319593][   T10] usb 1-1: USB disconnect, device number 4
[   86.458730][ T5945] usb 2-1: device descriptor read/64, error -71
[   86.698699][ T5945] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   86.833074][ T6317] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[   86.858852][ T5945] usb 2-1: Using ep0 maxpacket: 32
[   86.866819][ T5945] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.888056][ T5945] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.907057][ T5945] usb 2-1: config 0 interface 0 has no altsetting 0
[   86.924198][ T5945] usb 2-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[   86.938682][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.949448][ T5945] usb 2-1: config 0 descriptor??
[   87.016996][ T6319] loop3: detected capacity change from 0 to 7
[   87.026954][ T6319] Dev loop3: unable to read RDB block 7
[   87.036133][ T6319]  loop3: unable to read partition table
[   87.042340][ T6319] loop3: partition table beyond EOD, truncated
[   87.059181][ T6319] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[   87.073388][ T6319] /dev/rnullb0: Can't open blockdev
[   87.073677][ T6317] VFS: Can't find a romfs filesystem on dev rnullb0.
[   87.073677][ T6317] 
[   87.311554][ T6332] /dev/rnullb0: Can't open blockdev
[   87.380962][ T5945] wacom 0003:056A:0057.0002: unknown main item tag 0x0
[   87.547089][ T6348] Bluetooth: MGMT ver 1.23
[   87.585114][ T5945] usb 2-1: USB disconnect, device number 9
[   87.691559][ T6351] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   87.705410][ T6351] block device autoloading is deprecated and will be removed.
[   88.055342][ T6358] /dev/rnullb0: Can't open blockdev
[   88.389936][ T5945] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   88.560306][ T5945] usb 1-1: Using ep0 maxpacket: 16
[   88.568995][ T5945] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   88.578066][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.599967][ T5945] usb 1-1: Product: syz
[   88.604185][ T5945] usb 1-1: Manufacturer: syz
[   88.612434][ T5945] usb 1-1: SerialNumber: syz
[   88.626734][ T5945] r8152-cfgselector 1-1: Unknown version 0x0000
[   88.637747][ T5945] r8152-cfgselector 1-1: config 0 descriptor??
[   88.713860][ T6380] Mount JFS Failure: -22
[   88.746707][ T6381] Mount JFS Failure: -22
[   89.008813][ T6386] capability: warning: `syz.3.123' uses deprecated v2 capabilities in a way that may be insecure
[   89.074604][ T5945] r8152-cfgselector 1-1: USB disconnect, device number 5
[   89.490006][ T6402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.131'.
[   89.508919][ T6402] tipc: Invalid UDP bearer configuration
[   89.508964][ T6402] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   89.524746][ T6402] netlink: 'syz.3.131': attribute type 4 has an invalid length.
[   89.825953][   T30] kauditd_printk_skb: 303 callbacks suppressed
[   89.825968][   T30] audit: type=1326 audit(1756276571.994:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6423 comm="syz.3.136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda7198ebe9 code=0x0
[   90.004535][ T6436] /dev/rnullb0: Can't open blockdev
[   90.228914][ T6453] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.141'.
[   90.259534][ T6453] /dev/rnullb0: Can't open blockdev
[   90.319912][ T6454] /dev/rnullb0: Can't open blockdev
[   90.434886][ T6459] evm: overlay not supported
[   90.491480][ T6460] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   90.523440][ T6460] block device autoloading is deprecated and will be removed.
[   90.799574][ T6472] capability: warning: `syz.2.146' uses 32-bit capabilities (legacy support in use)
[   91.088977][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   91.238700][   T10] usb 2-1: device descriptor read/64, error -71
[   91.479000][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   91.609660][   T10] usb 2-1: device descriptor read/64, error -71
[   91.655085][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'.
[   91.719316][   T10] usb usb2-port1: attempt power cycle
[   91.840287][   T24] cfg80211: failed to load regulatory.db
[   91.877724][ T6514] MTD: Couldn't look up './cgroup': -15
[   91.886487][ T6514] ./cgroup: Can't lookup blockdev
[   91.932008][ T6519] ntfs3(rnullb0): Primary boot signature is not NTFS.
[   91.940172][ T6519] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[   91.973584][ T6522] netlink: 200 bytes leftover after parsing attributes in process `syz.0.162'.
[   91.984060][ T6522] tc_dump_action: action bad kind
[   92.036893][ T6525] netlink: 96 bytes leftover after parsing attributes in process `syz.0.163'.
[   92.103723][ T6526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.163'.
[   92.117149][ T6526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.163'.
[   92.129794][ T6526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.163'.
[   92.350502][ T6528] /dev/rnullb0: Can't open blockdev
[   92.933221][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   92.959137][   T10] usb 2-1: device descriptor read/8, error -71
[   93.162734][ T6567] binder: 6566:6567 ioctl 9408 0 returned -22
[   93.199298][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   93.231371][   T10] usb 2-1: device descriptor read/8, error -71
[   93.340440][   T10] usb usb2-port1: unable to enumerate USB device
[   93.709986][ T6579] /dev/rnullb0: Can't open blockdev
[   94.098837][  T980] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   94.207360][ T6596] support for cryptoloop has been removed.  Use dm-crypt instead.
[   94.217503][ T6596] sctp: [Deprecated]: syz.3.182 (pid 6596) Use of int in max_burst socket option deprecated.
[   94.217503][ T6596] Use struct sctp_assoc_value instead
[   94.284990][  T980] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   94.298053][  T980] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   94.312177][  T980] usb 2-1: config 2 interface 0 has no altsetting 0
[   94.321609][  T980] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[   94.331094][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.339376][  T980] usb 2-1: Product: syz
[   94.343648][  T980] usb 2-1: Manufacturer: syz
[   94.348259][  T980] usb 2-1: SerialNumber: syz
[   94.425047][ T6600] program syz.2.184 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.526619][ T6607] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[   94.545133][ T6607] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   94.560407][ T6607] /dev/rnullb0: Can't open blockdev
[   94.831580][  T980] usb 2-1: USB disconnect, device number 14
[   94.948758][ T5860] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   95.069790][ T6619] tmpfs: Invalid uid '0x00000000ffffffff'
[   95.119851][ T5860] usb 3-1: Using ep0 maxpacket: 8
[   95.133213][ T5860] usb 3-1: unable to get BOS descriptor or descriptor too short
[   95.144160][ T5860] usb 3-1: config 1 interface 0 has no altsetting 0
[   95.164732][ T5860] usb 3-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40
[   95.176720][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.188219][ T5860] usb 3-1: Product: syz
[   95.192660][ T5860] usb 3-1: Manufacturer: syz
[   95.197384][ T5860] usb 3-1: SerialNumber: syz
[   95.423560][ T5860] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6
[   95.449727][ T5221] bcm5974 3-1:1.0: could not read from device
[   95.471554][ T5221] bcm5974 3-1:1.0: could not read from device
[   95.474712][ T5860] usb 3-1: USB disconnect, device number 4
[   95.489752][ T5221] bcm5974 3-1:1.0: could not read from device
[   95.539144][  T980] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   95.647883][ T6642] /dev/rnullb0: Can't open blockdev
[   95.653306][ T5915] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   95.688724][  T980] usb 4-1: Using ep0 maxpacket: 8
[   95.696747][  T980] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[   95.706367][  T980] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[   95.714975][  T980] usb 4-1: Product: syz
[   95.720257][  T980] usb 4-1: Manufacturer: syz
[   95.724877][  T980] usb 4-1: SerialNumber: syz
[   95.731751][  T980] usb 4-1: config 0 descriptor??
[   95.739176][  T980] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[   95.746622][ T6645] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[   95.753677][ T6645] /dev/rnullb0: Can't open blockdev
[   95.788709][ T5915] usb 1-1: device descriptor read/64, error -71
[   95.963290][ T6651] sctp: [Deprecated]: syz.2.200 (pid 6651) Use of int in max_burst socket option.
[   95.963290][ T6651] Use struct sctp_assoc_value instead
[   95.982729][ T6651] /dev/rnullb0: Can't open blockdev
[   96.049270][ T5915] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   96.146652][ T6660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.203'.
[   96.157766][ T6660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.203'.
[   96.208913][ T5915] usb 1-1: device descriptor read/64, error -71
[   96.328939][ T5915] usb usb1-port1: attempt power cycle
[   96.344959][  T980] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[   96.409281][ T5860] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   96.448796][   T24] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[   96.558680][ T5860] usb 2-1: Using ep0 maxpacket: 8
[   96.567353][ T5860] usb 2-1: unable to get BOS descriptor or descriptor too short
[   96.579104][ T5860] usb 2-1: string descriptor 0 read error: -22
[   96.585446][ T5860] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe
[   96.594628][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.610528][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[   96.620810][   T24] usb 3-1: config 0 has no interfaces?
[   96.630096][   T24] usb 3-1: language id specifier not provided by device, defaulting to English
[   96.650967][   T24] usb 3-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40
[   96.660097][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.668809][ T5915] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   96.670171][   T24] usb 3-1: config 0 descriptor??
[   96.709251][ T5915] usb 1-1: device descriptor read/8, error -71
[   96.811886][ T5860] asix 2-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   96.888240][  T980] usb 3-1: USB disconnect, device number 5
[   96.948885][ T5915] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   96.969233][ T5915] usb 1-1: device descriptor read/8, error -71
[   97.013642][ T6660] /dev/rnullb0: Can't open blockdev
[   97.021512][ T5860] asix 2-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   97.031682][ T5860] asix 2-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   97.042270][ T5860] asix 2-1:7.0: probe with driver asix failed with error -71
[   97.052671][ T5860] usb 2-1: USB disconnect, device number 15
[   97.079240][ T5915] usb usb1-port1: unable to enumerate USB device
[   98.304116][   T10] usb 4-1: USB disconnect, device number 4
[   98.452566][ T6679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.568956][ T6686] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[   98.588688][  T980] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   98.591881][ T6686] UDF-fs: Scanning with blocksize 4096 failed
[   98.603226][ T6690] FAULT_INJECTION: forcing a failure.
[   98.603226][ T6690] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   98.616539][ T6690] CPU: 0 UID: 0 PID: 6690 Comm: syz.1.213 Not tainted syzkaller #0 PREEMPT(full) 
[   98.616562][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   98.616572][ T6690] Call Trace:
[   98.616579][ T6690]  <TASK>
[   98.616585][ T6690]  dump_stack_lvl+0x189/0x250
[   98.616617][ T6690]  ? __pfx____ratelimit+0x10/0x10
[   98.616639][ T6690]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.616665][ T6690]  ? __pfx__printk+0x10/0x10
[   98.616688][ T6690]  ? __might_fault+0xb0/0x130
[   98.616718][ T6690]  ? rcu_is_watching+0x15/0xb0
[   98.616739][ T6690]  should_fail_ex+0x414/0x560
[   98.616772][ T6690]  _copy_from_user+0x2d/0xb0
[   98.616791][ T6690]  ___sys_sendmsg+0x158/0x2a0
[   98.616818][ T6690]  ? __pfx____sys_sendmsg+0x10/0x10
[   98.616859][ T6690]  ? __fget_files+0x2a/0x420
[   98.616879][ T6690]  ? __fget_files+0x3a0/0x420
[   98.616901][ T6690]  __x64_sys_sendmsg+0x19b/0x260
[   98.616927][ T6690]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   98.616957][ T6690]  ? __pfx_ksys_write+0x10/0x10
[   98.616975][ T6690]  ? rcu_is_watching+0x15/0xb0
[   98.616996][ T6690]  do_syscall_64+0xfa/0xfa0
[   98.617020][ T6690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.617038][ T6690]  ? clear_bhb_loop+0x60/0xb0
[   98.617057][ T6690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.617074][ T6690] RIP: 0033:0x7ffaead8ebe9
[   98.617102][ T6690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.617117][ T6690] RSP: 002b:00007ffaebc43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   98.617136][ T6690] RAX: ffffffffffffffda RBX: 00007ffaeafb5fa0 RCX: 00007ffaead8ebe9
[   98.617168][ T6690] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[   98.617180][ T6690] RBP: 00007ffaebc43090 R08: 0000000000000000 R09: 0000000000000000
[   98.617191][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.617202][ T6690] R13: 00007ffaeafb6038 R14: 00007ffaeafb5fa0 R15: 00007ffe8fdcba78
[   98.617224][ T6690]  </TASK>
[   98.832368][ T6679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.072020][ T6679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.138790][  T980] usb 1-1: Using ep0 maxpacket: 32
[   99.145268][  T980] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46
[   99.182338][  T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.211879][  T980] usb 1-1: config 0 descriptor??
[   99.266499][ T6679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.613963][ T3004] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.676937][ T1041] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.690350][ T6714] /dev/rnullb0: Can't open blockdev
[   99.718461][ T3568] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.730451][ T6714] /dev/rnullb0: Can't open blockdev
[   99.775984][ T3004] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.792430][  T980] usb 1-1: USB disconnect, device number 10
[   99.856910][ T6718] /dev/rnullb0: Can't open blockdev
[  100.071416][ T6728] FAULT_INJECTION: forcing a failure.
[  100.071416][ T6728] name failslab, interval 1, probability 0, space 0, times 1
[  100.128447][ T6728] CPU: 1 UID: 0 PID: 6728 Comm: syz.2.223 Not tainted syzkaller #0 PREEMPT(full) 
[  100.128475][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  100.128488][ T6728] Call Trace:
[  100.128495][ T6728]  <TASK>
[  100.128503][ T6728]  dump_stack_lvl+0x189/0x250
[  100.128537][ T6728]  ? __pfx____ratelimit+0x10/0x10
[  100.128563][ T6728]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.128595][ T6728]  ? __pfx__printk+0x10/0x10
[  100.128623][ T6728]  ? fs_reclaim_acquire+0x7d/0x100
[  100.128641][ T6728]  ? rcu_is_watching+0x15/0xb0
[  100.128663][ T6728]  ? __pfx___might_resched+0x10/0x10
[  100.128690][ T6728]  ? lock_acquire+0x5f/0x360
[  100.128707][ T6728]  should_fail_ex+0x414/0x560
[  100.128735][ T6728]  should_failslab+0xa8/0x100
[  100.128753][ T6728]  kmem_cache_alloc_node_noprof+0x76/0x390
[  100.128782][ T6728]  ? __alloc_skb+0x112/0x2d0
[  100.128808][ T6728]  __alloc_skb+0x112/0x2d0
[  100.128834][ T6728]  netlink_sendmsg+0x5c6/0xb30
[  100.128864][ T6728]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.128890][ T6728]  ? aa_sock_msg_perm+0xf1/0x1d0
[  100.128915][ T6728]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  100.128938][ T6728]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.128963][ T6728]  __sock_sendmsg+0x21c/0x270
[  100.128986][ T6728]  ____sys_sendmsg+0x505/0x830
[  100.129016][ T6728]  ? __pfx_____sys_sendmsg+0x10/0x10
[  100.129048][ T6728]  ? import_iovec+0x74/0xa0
[  100.129070][ T6728]  ___sys_sendmsg+0x21f/0x2a0
[  100.129099][ T6728]  ? __pfx____sys_sendmsg+0x10/0x10
[  100.129143][ T6728]  ? __fget_files+0x2a/0x420
[  100.129164][ T6728]  ? __fget_files+0x3a0/0x420
[  100.129191][ T6728]  __x64_sys_sendmsg+0x19b/0x260
[  100.129220][ T6728]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  100.129253][ T6728]  ? __pfx_ksys_write+0x10/0x10
[  100.129274][ T6728]  ? rcu_is_watching+0x15/0xb0
[  100.129296][ T6728]  do_syscall_64+0xfa/0xfa0
[  100.129323][ T6728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.129341][ T6728]  ? clear_bhb_loop+0x60/0xb0
[  100.129362][ T6728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.129379][ T6728] RIP: 0033:0x7efc6f18ebe9
[  100.129396][ T6728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.129412][ T6728] RSP: 002b:00007efc7000f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  100.129433][ T6728] RAX: ffffffffffffffda RBX: 00007efc6f3b5fa0 RCX: 00007efc6f18ebe9
[  100.129447][ T6728] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[  100.129458][ T6728] RBP: 00007efc7000f090 R08: 0000000000000000 R09: 0000000000000000
[  100.129470][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.129481][ T6728] R13: 00007efc6f3b6038 R14: 00007efc6f3b5fa0 R15: 00007ffd3b715fa8
[  100.129502][ T6728]  </TASK>
[  100.699820][ T6739] Can't find a SQUASHFS superblock on rnullb0
[  100.793247][ T6742] netlink: 'syz.1.228': attribute type 4 has an invalid length.
[  100.889505][ T6750] autofs: Bad value for 'fd'
[  100.894684][ T6750] tipc: Started in network mode
[  100.899775][ T6750] tipc: Node identity ac1414aa, cluster identity 4711
[  100.907132][ T6750] tipc: Enabled bearer <udp:s>, priority 10
[  100.916489][ T5915] IPVS: starting estimator thread 0...
[  100.935353][ T6752] netlink: 256 bytes leftover after parsing attributes in process `syz.0.231'.
[  100.954302][ T6750] XFS (rnullb0): Invalid superblock magic number
[  101.017854][ T6762] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  101.025129][ T6762] VFS: Can't find a romfs filesystem on dev rnullb0.
[  101.025129][ T6762] 
[  101.028699][ T6753] IPVS: using max 48 ests per chain, 115200 per kthread
[  101.138894][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  101.209069][ T5915] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  101.308781][   T24] usb 3-1: Using ep0 maxpacket: 8
[  101.322550][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  101.334171][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.352225][   T24] usb 3-1: Product: syz
[  101.361950][   T24] usb 3-1: Manufacturer: syz
[  101.369969][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  101.371186][   T24] usb 3-1: SerialNumber: syz
[  101.382178][ T5915] usb 4-1: config 0 has an invalid interface number: 155 but max is 1
[  101.392654][   T24] usb 3-1: config 0 descriptor??
[  101.400864][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.430356][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  101.451505][ T5915] usb 4-1: config 0 has no interface number 0
[  101.470563][ T5915] usb 4-1: config 0 interface 155 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[  101.501206][ T5915] usb 4-1: New USB device found, idVendor=041e, idProduct=4034, bcdDevice=c9.6b
[  101.519518][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.537768][ T5915] usb 4-1: Product: Ъ
[  101.542011][ T5915] usb 4-1: Manufacturer: 疐䂦ﱥ⺖컊戣훚ฬ民ⲅʎ櫡춹浂㺝ᤷ谆于칽妊툢睚
[  101.562619][ T5915] usb 4-1: SerialNumber: Ы
[  101.579264][ T5915] usb 4-1: config 0 descriptor??
[  101.613380][   T24] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  101.797410][ T5915] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4034
[  101.805030][ T5915] gspca_zc3xx: reg_w_i err -71
[  101.814555][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.830151][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.968838][    T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  101.987359][ T6797] /dev/rnullb0: Can't open blockdev
[  102.019324][  T980] tipc: Node number set to 2886997162
[  102.133992][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  102.142985][    T9] usb 1-1: not running at top speed; connect to a high speed hub
[  102.152867][    T9] usb 1-1: config 3 has an invalid interface number: 51 but max is 0
[  102.161116][    T9] usb 1-1: config 3 has no interface number 0
[  102.167303][    T9] usb 1-1: config 3 interface 51 has no altsetting 0
[  102.176722][    T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=59.b2
[  102.186266][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.196171][    T9] usb 1-1: Product: syz
[  102.208681][    T9] usb 1-1: Manufacturer: syz
[  102.213314][    T9] usb 1-1: SerialNumber: syz
[  102.270821][ T6809] netlink: 'syz.1.246': attribute type 6 has an invalid length.
[  102.437825][    T9] quatech2 1-1:3.51: Quatech 2nd gen USB to Serial Driver converter detected
[  102.442998][   T24] usb write operation failed. (-71)
[  102.451995][    T9] usb 1-1: qt2_attach - failed to power on unit: -71
[  102.452078][    T9] quatech2 1-1:3.51: probe with driver quatech2 failed with error -71
[  102.490567][   T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  102.503923][    T9] usb 1-1: USB disconnect, device number 11
[  102.513440][   T24] dvbdev: DVB: registering new adapter (Terratec H7)
[  102.533442][   T24] usb 3-1: media controller created
[  102.546098][   T24] usb read operation failed. (-71)
[  102.559737][   T24] usb write operation failed. (-71)
[  102.561639][ T5915] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  102.575129][ T5915] gspca_zc3xx 4-1:0.155: probe with driver gspca_zc3xx failed with error -71
[  102.575926][   T24] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  102.596503][ T5915] usb 4-1: USB disconnect, device number 5
[  102.703226][   T24] usb 3-1: USB disconnect, device number 6
[  103.012566][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.249'.
[  103.176110][ T6824] /dev/rnullb0: Can't open blockdev
[  103.297539][ T6829] /dev/rnullb0: Can't open blockdev
[  103.349063][ T5860] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  103.403540][ T6831] /dev/rnullb0: Can't open blockdev
[  103.429023][ T6833] /dev/rnullb0: Can't open blockdev
[  103.522261][ T5860] usb 3-1: config 0 has an invalid interface number: 156 but max is 1
[  103.538929][ T5860] usb 3-1: config 0 has no interface number 1
[  103.559791][ T5860] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  103.582904][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.605744][ T5860] usb 3-1: config 0 descriptor??
[  103.625910][ T5860] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  103.631128][ T6839] /dev/rnullb0: Can't open blockdev
[  103.648514][ T5860] usb 3-1: MIDIStreaming interface descriptor not found
[  103.701124][ T5860] gspca_main: spca561-2.14.0 probing abcd:cdee
[  103.713256][ T6842] sctp: [Deprecated]: syz.3.258 (pid 6842) Use of int in maxseg socket option.
[  103.713256][ T6842] Use struct sctp_assoc_value instead
[  103.798284][ T6842] /dev/rnullb0: Can't open blockdev
[  103.835157][ T5860] spca561 3-1:0.0: probe with driver spca561 failed with error -22
[  103.864975][ T5860] usb 3-1: USB disconnect, device number 7
[  103.897242][ T6846] /dev/rnullb0: Can't open blockdev
[  103.977687][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'.
[  104.044018][ T6851] /dev/rnullb0: Can't open blockdev
[  104.158763][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  104.266556][ T6861] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a)
[  104.290876][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[  104.320504][   T10] usb 4-1: Using ep0 maxpacket: 8
[  104.331973][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  104.341347][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.351474][   T10] usb 4-1: Product: syz
[  104.355682][   T10] usb 4-1: Manufacturer: syz
[  104.363199][   T10] usb 4-1: SerialNumber: syz
[  104.370602][   T10] usb 4-1: config 0 descriptor??
[  104.402447][   T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.475437][   T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.535714][   T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.577860][   T10] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  104.608403][   T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.779221][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.799099][   T59] bridge_slave_1: left allmulticast mode
[  104.818501][   T59] bridge_slave_1: left promiscuous mode
[  104.829903][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.842248][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.902032][   T59] bridge_slave_0: left allmulticast mode
[  104.923733][   T59] bridge_slave_0: left promiscuous mode
[  104.936375][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.087879][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.095880][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.113539][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.123548][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.134494][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.285093][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.302175][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.313607][   T59] bond0 (unregistering): Released all slaves
[  105.473348][   T10] usb write operation failed. (-71)
[  105.484601][   T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  105.498499][   T10] dvbdev: DVB: registering new adapter (Terratec H7)
[  105.512377][   T10] usb 4-1: media controller created
[  105.526922][   T10] usb read operation failed. (-71)
[  105.557567][   T10] usb write operation failed. (-71)
[  105.613444][   T10] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  105.634468][   T10] usb 4-1: USB disconnect, device number 6
[  105.694964][   T59] hsr_slave_0: left promiscuous mode
[  105.711604][   T59] hsr_slave_1: left promiscuous mode
[  105.717454][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.736962][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.747760][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.767298][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.794339][   T59] veth1_macvtap: left promiscuous mode
[  105.812072][   T59] veth0_macvtap: left promiscuous mode
[  105.817701][   T59] veth1_vlan: left promiscuous mode
[  105.830217][   T59] veth0_vlan: left promiscuous mode
[  105.909826][ T5945] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  106.083380][ T5945] usb 3-1: Using ep0 maxpacket: 16
[  106.092275][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  106.135331][ T5945] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  106.156199][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.186207][ T5945] usb 3-1: config 0 descriptor??
[  106.202927][ T5945] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  106.231878][ T6914] /dev/rnullb0: Can't open blockdev
[  106.245064][   T59] team0 (unregistering): Port device team_slave_1 removed
[  106.264519][   T59] team0 (unregistering): Port device team_slave_0 removed
[  106.427296][ T6880] chnl_net:caif_netlink_parms(): no params data found
[  106.541191][ T5221] bcm5974 3-1:0.0: could not read from device
[  106.556793][ T5945] usb 3-1: USB disconnect, device number 8
[  106.564109][ T5221] bcm5974 3-1:0.0: could not read from device
[  106.614222][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.624933][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.675766][ T6880] bridge_slave_0: entered allmulticast mode
[  106.702980][ T6880] bridge_slave_0: entered promiscuous mode
[  106.716872][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.741148][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.748372][ T6880] bridge_slave_1: entered allmulticast mode
[  106.769634][ T6880] bridge_slave_1: entered promiscuous mode
[  106.855630][ T6880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.877255][ T6880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.932819][ T6880] team0: Port device team_slave_0 added
[  106.950743][ T6880] team0: Port device team_slave_1 added
[  107.006900][ T6880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.014846][ T6880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.069871][ T6880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.112608][   T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.158382][ T6880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.188833][ T6880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.219007][ T5865] Bluetooth: hci0: command tx timeout
[  107.230338][ T6880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.268720][   T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.281366][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  107.292103][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  107.302134][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  107.314268][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  107.326936][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  107.357519][   T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.375906][ T6880] hsr_slave_0: entered promiscuous mode
[  107.382671][ T6880] hsr_slave_1: entered promiscuous mode
[  107.389252][ T6880] debugfs: 'hsr0' already exists in 'hsr'
[  107.395431][ T6880] Cannot create hsr debugfs directory
[  107.431210][   T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.622629][   T59] bridge_slave_1: left allmulticast mode
[  107.628354][   T59] bridge_slave_1: left promiscuous mode
[  107.638524][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.648791][   T59] bridge_slave_0: left allmulticast mode
[  107.654474][   T59] bridge_slave_0: left promiscuous mode
[  107.673210][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.814064][ T6963] exFAT-fs (rnullb0): invalid boot record signature
[  107.825832][ T6963] exFAT-fs (rnullb0): failed to read boot sector
[  107.852638][ T6963] exFAT-fs (rnullb0): failed to recognize exfat type
[  107.942442][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.962914][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.990139][   T59] bond0 (unregistering): Released all slaves
[  108.056270][ T6880] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  108.104019][   T59] tipc: Disabling bearer <udp:s>
[  108.109623][ T6880] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  108.116655][   T59] tipc: Left network mode
[  108.124222][ T6880] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  108.136706][ T6880] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  108.179405][ T6941] chnl_net:caif_netlink_parms(): no params data found
[  108.188681][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  108.323222][   T59] hsr_slave_0: left promiscuous mode
[  108.330530][   T59] hsr_slave_1: left promiscuous mode
[  108.340834][   T24] usb 4-1: Using ep0 maxpacket: 8
[  108.353903][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.371102][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.379606][   T24] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  108.391130][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.400739][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.408148][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.417784][   T24] usb 4-1: Product: syz
[  108.423486][   T24] usb 4-1: Manufacturer: syz
[  108.445521][   T24] usb 4-1: SerialNumber: syz
[  108.457449][   T59] veth1_macvtap: left promiscuous mode
[  108.466676][   T24] usb 4-1: config 0 descriptor??
[  108.477449][   T24] gspca_main: se401-2.14.0 probing 047d:5003
[  108.486816][   T59] veth0_macvtap: left promiscuous mode
[  108.493040][   T59] veth1_vlan: left promiscuous mode
[  108.498475][   T59] veth0_vlan: left promiscuous mode
[  108.672377][   T59] team0 (unregistering): Port device team_slave_1 removed
[  108.691779][   T59] team0 (unregistering): Port device team_slave_0 removed
[  108.797316][ T6993] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  108.933262][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.944598][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.952219][ T6941] bridge_slave_0: entered allmulticast mode
[  108.959646][ T6941] bridge_slave_0: entered promiscuous mode
[  108.967319][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.975105][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.982343][ T6941] bridge_slave_1: entered allmulticast mode
[  108.989701][ T6941] bridge_slave_1: entered promiscuous mode
[  109.053622][ T6880] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.084944][ T6941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.107058][ T6941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.135403][ T6880] 8021q: adding VLAN 0 to HW filter on device team0
[  109.184368][ T6941] team0: Port device team_slave_0 added
[  109.205834][ T6941] team0: Port device team_slave_1 added
[  109.233038][   T59] IPVS: stop unused estimator thread 0...
[  109.280641][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.280666][ T5865] Bluetooth: hci0: command tx timeout
[  109.287793][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.314302][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.321558][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.355582][ T6941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.366496][ T5865] Bluetooth: hci1: command tx timeout
[  109.373925][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.380987][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.407587][ T6941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.426111][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.433309][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.507145][ T6941] hsr_slave_0: entered promiscuous mode
[  109.524738][ T6941] hsr_slave_1: entered promiscuous mode
[  109.692719][   T24] gspca_se401: read req failed req 0x06 error -19
[  109.709576][   T24] usb 4-1: USB disconnect, device number 7
[  109.835053][ T6941] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  109.874266][ T6941] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  109.887089][ T6941] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  109.912088][ T6941] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  110.112154][ T6880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.134499][ T6941] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.186823][ T6941] 8021q: adding VLAN 0 to HW filter on device team0
[  110.208889][  T980] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  110.219775][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.226921][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.249448][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.256658][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.394181][  T980] usb 3-1: unable to get BOS descriptor or descriptor too short
[  110.404912][  T980] usb 3-1: not running at top speed; connect to a high speed hub
[  110.423896][  T980] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  110.438827][  T980] usb 3-1: config 0 has no interface number 0
[  110.450697][  T980] usb 3-1: config 0 interface 2 has no altsetting 0
[  110.461291][  T980] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=15.2a
[  110.473834][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.488767][ T5928] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  110.497825][  T980] usb 3-1: Product: syz
[  110.506336][ T6880] veth0_vlan: entered promiscuous mode
[  110.508961][  T980] usb 3-1: Manufacturer: syz
[  110.521762][  T980] usb 3-1: SerialNumber: syz
[  110.532057][  T980] usb 3-1: config 0 descriptor??
[  110.541519][ T6880] veth1_vlan: entered promiscuous mode
[  110.576453][ T6880] veth0_macvtap: entered promiscuous mode
[  110.596763][ T6880] veth1_macvtap: entered promiscuous mode
[  110.611208][ T6941] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.629125][ T5928] usb 4-1: device descriptor read/64, error -71
[  110.641689][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.653833][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.667134][ T3004] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.679961][ T3004] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.696853][ T3004] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.716762][ T3004] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.754973][ T7039] vxfs: WRONG superblock magic 00000000 at 1
[  110.762984][ T7039] vxfs: WRONG superblock magic 00000000 at 8
[  110.779794][ T7039] vxfs: can't find superblock.
[  110.800338][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.803966][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.816778][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.851399][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.879741][ T5928] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  110.888159][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.910552][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.912570][  T980] gspca_main: sunplus-2.14.0 probing 052b:1803
[  110.949223][  T980] gspca_sunplus: reg_r err -71
[  110.954086][  T980] sunplus 3-1:0.2: probe with driver sunplus failed with error -71
[  110.992327][  T980] usb 3-1: USB disconnect, device number 9
[  111.026707][ T5928] usb 4-1: device descriptor read/64, error -71
[  111.043005][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[  111.149619][ T5928] usb usb4-port1: attempt power cycle
[  111.155775][ T7096] vxfs: WRONG superblock magic 00000000 at 1
[  111.175740][ T7096] vxfs: WRONG superblock magic 00000000 at 8
[  111.183653][ T6941] veth0_vlan: entered promiscuous mode
[  111.198944][ T7096] vxfs: can't find superblock.
[  111.210534][ T6941] veth1_vlan: entered promiscuous mode
[  111.253940][ T6941] veth0_macvtap: entered promiscuous mode
[  111.268400][ T6941] veth1_macvtap: entered promiscuous mode
[  111.291070][ T7102] hpfs: Bad magic ... probably not HPFS
[  111.303189][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.329730][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.361080][ T5865] Bluetooth: hci0: command tx timeout
[  111.367141][   T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.382504][   T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.408952][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.432813][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.442307][ T5865] Bluetooth: hci1: command tx timeout
[  111.459583][ T5860] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  111.467258][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.480841][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.502504][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.519199][ T5928] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  111.527590][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.555244][ T5928] usb 4-1: device descriptor read/8, error -71
[  111.575699][ T7110] Can't find a SQUASHFS superblock on rnullb0
[  111.619409][ T5860] usb 3-1: Using ep0 maxpacket: 16
[  111.634711][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.656088][ T5860] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  111.676930][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.701656][ T5860] usb 3-1: config 0 descriptor??
[  111.704622][ T7115] FAT-fs (rnullb0): bogus number of reserved sectors
[  111.723966][ T7115] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  111.733927][ T7115] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004
[  111.799516][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  111.843056][ T5928] usb 4-1: device descriptor read/8, error -71
[  111.859293][   T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  111.969287][ T5928] usb usb4-port1: unable to enumerate USB device
[  112.048934][   T43] usb 5-1: Using ep0 maxpacket: 8
[  112.058383][   T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  112.068371][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.077967][   T43] usb 5-1: Product: syz
[  112.083263][   T43] usb 5-1: Manufacturer: syz
[  112.087977][   T43] usb 5-1: SerialNumber: syz
[  112.099668][   T43] usb 5-1: config 0 descriptor??
[  112.123582][ T5860] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  112.131199][ T5860] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  112.138313][ T5860] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  112.145506][ T5860] mcp2221 0003:04D8:00DD.0003: item fetching failed at offset 3/5
[  112.154378][ T5860] mcp2221 0003:04D8:00DD.0003: can't parse reports
[  112.162885][ T5860] mcp2221 0003:04D8:00DD.0003: probe with driver mcp2221 failed with error -22
[  112.312368][   T43] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  112.388281][ T5928] usb 3-1: USB disconnect, device number 10
[  112.513518][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.522298][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.932956][   T43] usb write operation failed. (-71)
[  112.950177][   T43] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  112.961428][   T43] dvbdev: DVB: registering new adapter (Terratec H7)
[  112.968173][   T43] usb 5-1: media controller created
[  112.978697][   T43] usb read operation failed. (-71)
[  112.994307][   T43] usb write operation failed. (-71)
[  113.009838][   T43] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  113.021881][ T7144] netlink: 4432 bytes leftover after parsing attributes in process `syz.2.303'.
[  113.033546][   T43] usb 5-1: USB disconnect, device number 2
[  113.115260][ T7149] omfs: Invalid superblock (0)
[  113.293788][ T7153] netlink: 92 bytes leftover after parsing attributes in process `syz.3.307'.
[  113.439117][ T5865] Bluetooth: hci0: command tx timeout
[  113.519637][ T5865] Bluetooth: hci1: command tx timeout
[  113.661194][ T5928] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  113.668954][  T980] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  113.820405][ T5928] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.840424][  T980] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  113.858685][ T5928] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.867757][  T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.885709][ T5928] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  113.897156][  T980] usb 4-1: config 0 descriptor??
[  113.908720][ T5928] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  113.930722][ T7182] block nbd4: Attempted send on invalid socket
[  113.936923][ T7182] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  113.946205][ T5928] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.946231][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.946250][ T5928] usb 6-1: Product: syz
[  113.946264][ T5928] usb 6-1: Manufacturer: syz
[  113.946277][ T5928] usb 6-1: SerialNumber: syz
[  113.982915][ T7182] SQUASHFS error: Failed to read block 0x0: -5
[  113.989256][ T7182] unable to read squashfs_super_block
[  114.167866][ T7158] netlink: 'syz.5.308': attribute type 4 has an invalid length.
[  114.175730][ T7158] netlink: 152 bytes leftover after parsing attributes in process `syz.5.308'.
[  114.189689][ T7158] : renamed from bond0 (while UP)
[  114.312050][ T5928] usb 6-1: 0:2 : does not exist
[  114.325722][ T5928] usb 6-1: USB disconnect, device number 2
[  114.346953][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.905689][ T7202] syzkaller1: entered promiscuous mode
[  114.915429][ T7202] syzkaller1: entered allmulticast mode
[  114.992364][ T7212] XFS (rnullb0): Invalid superblock magic number
[  115.118286][  T980] pegasus 4-1:0.0: can't reset MAC
[  115.131983][  T980] pegasus 4-1:0.0: probe with driver pegasus failed with error -5
[  115.160764][ T5928] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  115.184091][  T980] usb 4-1: USB disconnect, device number 12
[  115.262167][ T7225] /dev/rnullb0: Can't open blockdev
[  115.333362][ T7227] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  115.345303][ T7227] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  115.353745][ T7227] CPU: 0 UID: 0 PID: 7227 Comm: syz.5.327 Not tainted syzkaller #0 PREEMPT(full) 
[  115.362968][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  115.373057][ T7227] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  115.378645][ T7227] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3
[  115.398372][ T7227] RSP: 0018:ffffc90002e97a40 EFLAGS: 00010206
[  115.404486][ T7227] RAX: 0000000000000005 RBX: ffff888027df0280 RCX: ffff888027e65a00
[  115.412493][ T7227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802fa02800
[  115.420499][ T7227] RBP: 0000000000000000 R08: ffff88802fa0292f R09: 1ffff11005f40525
[  115.428507][ T7227] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028
[  115.436521][ T7227] R13: dffffc0000000000 R14: ffff88802fa02800 R15: dffffc0000000000
[  115.444540][ T7227] FS:  00007f357583f6c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000
[  115.453500][ T7227] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  115.460115][ T7227] CR2: 00007f357581ed58 CR3: 0000000060a34000 CR4: 00000000003526f0
[  115.468123][ T7227] Call Trace:
[  115.471430][ T7227]  <TASK>
[  115.474388][ T7227]  pcl818_detach+0x66/0xd0
[  115.478838][ T7227]  comedi_device_detach_locked+0x175/0x750
[  115.484676][ T7227]  ? security_capable+0x7e/0x2e0
[  115.489656][ T7227]  comedi_unlocked_ioctl+0xcde/0x1020
[  115.495075][ T7227]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  115.500915][ T7227]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  115.506596][ T7227]  ? do_futex+0x395/0x420
[  115.510967][ T7227]  ? __se_sys_futex+0x36f/0x400
[  115.515856][ T7227]  ? __fget_files+0x3a0/0x420
[  115.520564][ T7227]  ? __fget_files+0x2a/0x420
[  115.525188][ T7227]  ? bpf_lsm_file_ioctl+0x9/0x20
[  115.530156][ T7227]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  115.535998][ T7227]  __se_sys_ioctl+0xf9/0x170
[  115.540626][ T7227]  do_syscall_64+0xfa/0xfa0
[  115.545164][ T7227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.551263][ T7227]  ? clear_bhb_loop+0x60/0xb0
[  115.555971][ T7227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.561888][ T7227] RIP: 0033:0x7f357498ebe9
[  115.566326][ T7227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.585961][ T7227] RSP: 002b:00007f357583f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  115.594414][ T7227] RAX: ffffffffffffffda RBX: 00007f3574bb5fa0 RCX: 00007f357498ebe9
[  115.602420][ T7227] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004
[  115.610455][ T7227] RBP: 00007f3574a11e19 R08: 0000000000000000 R09: 0000000000000000
[  115.618468][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.626468][ T7227] R13: 00007f3574bb6038 R14: 00007f3574bb5fa0 R15: 00007ffc2d3c5ab8
[  115.634486][ T7227]  </TASK>
[  115.637534][ T7227] Modules linked in:
[  115.643467][ T7227] ---[ end trace 0000000000000000 ]---
[  115.657483][ T5865] Bluetooth: hci1: command tx timeout
[  115.676069][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.695468][ T5928] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  115.707072][ T5928] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  115.721592][ T5928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.731523][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.742583][ T5928] usb 3-1: Product: syz
[  115.747264][ T7227] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  115.753830][ T5928] usb 3-1: Manufacturer: syz
[  115.764606][ T7227] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3
[  115.785887][ T5928] usb 3-1: SerialNumber: syz
[  115.794822][ T7209] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  115.806680][ T5928] usb 3-1: bad CDC descriptors
[  115.814422][ T7227] RSP: 0018:ffffc90002e97a40 EFLAGS: 00010206
[  115.834345][ T7227] RAX: 0000000000000005 RBX: ffff888027df0280 RCX: ffff888027e65a00
[  115.853015][ T7227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802fa02800
[  115.884785][ T7227] RBP: 0000000000000000 R08: ffff88802fa0292f R09: 1ffff11005f40525
[  115.894587][ T7227] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028
[  115.904291][ T7227] R13: dffffc0000000000 R14: ffff88802fa02800 R15: dffffc0000000000
[  115.912657][ T7227] FS:  00007f357583f6c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000
[  115.923787][ T7227] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  115.930811][ T7227] CR2: 00007ffef2c9beb8 CR3: 0000000060a34000 CR4: 00000000003526f0
[  115.940570][ T7227] Kernel panic - not syncing: Fatal exception
[  115.946979][ T7227] Kernel Offset: disabled
[  115.951309][ T7227] Rebooting in 86400 seconds..