last executing test programs:

17m30.031516281s ago: executing program 3 (id=2533):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x45809000)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
landlock_restrict_self(r0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x800, 0x2, @rand_addr=' \x01\x00', 0x2}, 0x1c)
lsm_list_modules(0x0, &(0x7f0000001200)=0x50, 0x0)
socket(0x10, 0x3, 0x0)
r3 = timerfd_create(0x8, 0x80800)
ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000680)=0x200)

17m29.937407005s ago: executing program 3 (id=2534):
creat(&(0x7f0000001380)='./file1\x00', 0x4)
creat(&(0x7f0000001380)='./file0\x00', 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x85, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x323})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)

17m29.827673739s ago: executing program 3 (id=2535):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r1, 0x7, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8000}]}, 0x34}}, 0x4000010)
r2 = epoll_create1(0x0)
syz_clone3(&(0x7f0000001ec0)={0x100080, &(0x7f0000000000), &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100), {0x3f}, &(0x7f0000000140)=""/80, 0x50, &(0x7f00000001c0)=""/29, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r2}}, 0x58)
syz_clone3(&(0x7f0000000640)={0x10a809000, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=<r4=>0x0, {0x35}, &(0x7f0000001fc0)=""/108, 0x80, &(0x7f0000001f40)=""/83, 0x0}, 0x58)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sync_file_range(r5, 0x7fff, 0x6, 0x4)
syz_open_procfs(r4, 0x0)
setpgid(r3, r4)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000280)={<r6=>0x0, "1a5ebd8428af7c181af7e5ca62f14c56"})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001280)={0xe, 0x1, {0x4274e52a, @struct={0x10000, 0x5}, <r7=>0x0, 0x3ff, 0x5, 0x8000000000000001, 0x3afc, 0x6, 0x80, @usage=0xffff, 0x7000000, 0xfffffff8, [0x9, 0xfffffffffffffffe, 0xffffffffffff7fa0, 0xffffffff, 0x1, 0x3ff]}, {0x3, @usage=0x9, 0x0, 0x4, 0x3, 0x8001, 0x7, 0x8, 0x8, @struct={0xdf, 0x2}, 0xffff8c03, 0x1000, [0x7, 0xfce9, 0x3, 0x9, 0x8, 0xdce]}, {0x33, @usage=0x400, 0x0, 0x190, 0x0, 0x0, 0xc1ad, 0x0, 0x462, @usage=0x9, 0x348d2e2c, 0x7ff, [0xaf30, 0xffffffff, 0x2, 0xff, 0x101, 0xa5]}, {0x3, 0x7ff, 0xdc7e}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001680)={<r8=>0x0, 0x3, 0x0, [0x4, 0xfffffffffffffffa, 0xb6, 0x8, 0x26cc], [0x8, 0x5, 0x6, 0x3ff, 0x0, 0x3ea, 0x8, 0x1, 0xa, 0x5, 0x2, 0x3, 0x10, 0x2, 0x27f, 0x2, 0x8000, 0x9, 0x5fb, 0x61c8d4d5, 0x7, 0x1400000000000, 0x100000000, 0xd60f, 0x4, 0xe, 0x3, 0x6, 0x8, 0x100, 0x3800000, 0x800, 0xb3f7, 0x8000, 0xab, 0x7fffffff, 0x7, 0x4, 0x776b, 0x8000000000000001, 0xfffffffffffffff8, 0x9, 0x8000, 0x7ff, 0x4, 0x7, 0xfffffffffffffff9, 0x6, 0x10, 0xfffffffffffffbb6, 0x3f7c, 0xa0000000, 0x1, 0x7ff, 0xc, 0x4, 0x3ff, 0x5, 0x7, 0x7fffffff, 0xfffffffffffffffe, 0x6, 0x8, 0x2, 0x3ff, 0x10001, 0x9, 0xfffffffffffffffe, 0x8, 0x1bcf, 0xd87, 0x7, 0x101, 0xa415, 0xf, 0x0, 0x0, 0xffffffffffffffff, 0xea, 0xd, 0xa9, 0x5, 0xff, 0xf4c, 0x75c, 0xfff, 0x7, 0x7, 0xfffffffffffffff4, 0x8, 0x7fff, 0x0, 0x7, 0x9, 0x1a31, 0x8000000000000001, 0xfffffffffffeffff, 0x8, 0x7f, 0x6, 0x5, 0x5, 0x3, 0x0, 0xfffffffffffff4a1, 0xffffffff, 0x9, 0x8000000000000001, 0x3ea, 0x1fffc00000, 0x0, 0x3, 0xc, 0x1, 0x1, 0x7fff, 0x6, 0x3, 0x1, 0x7c17e98f, 0x80000000]})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r9, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="3789d91ea34966e29e35a8793f23db659590989d11b07d4a08dafcdfeb887aa8aa42ba9cfe6e23f629380fc9484afc8e330cd475f6cca9c966d6d91af6599a1e1ca4d72d7a0b204978f061066f48a3767ce512bd04faaf69e8d6780a42821ca14777b105142fd9ff644d85462efedcee1fc89ba37ef8f0f10d364af9b94dfba07b0403c3dd02b4ecf95a9f0d24bb7e199467e204574ab8534278e7d6f58b57d893241f6faed6a5e72e0269d7faa3a7df8048be525a1793c062a08ecb471eb42992", 0xc1}], 0x1}], 0x1, 0x40800)
recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000200)=""/157, 0x9d}], 0x2}, 0x2000)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001ac0)={0x0, 0x0, {0x6, @usage=0xb, r6, 0xffff, 0x4e9aaec, 0xfffffffffffffffc, 0x5, 0x222c6f62, 0x0, @struct={0x6}, 0x8, 0x4, [0x0, 0x9, 0xdd0, 0xc6e8, 0x0, 0x2]}, {0x0, @struct={0xae55, 0x8}, r7, 0x5, 0xc, 0x8000000000000000, 0x3, 0x3400000, 0x12, @usage=0x2, 0xe1ae, 0x128, [0x5, 0x1, 0x100, 0x6, 0xffffffffffff9276, 0x200]}, {0x0, @struct={0xff97, 0xe}, r8, 0x6, 0x4, 0xfffffffffffffe01, 0xa, 0x62e, 0xe1, @usage=0x4, 0x4, 0x552, [0x1, 0xb, 0x3ff, 0x80, 0x8]}, {0x4, 0x4, 0xfffffffffffffffc}})
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

17m29.413465435s ago: executing program 3 (id=2537):
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
unshare(0x60600)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000480)=""/218, 0xda})
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)

17m29.131630107s ago: executing program 3 (id=2539):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
write$sndseq(r1, &(0x7f0000000a00)=[{0x9, 0xc, 0x5, 0x5, @time={0x9, 0x5}, {0xf7, 0x6}, {0xf3, 0x6}, @quote={{0xf0, 0xff}, 0x80}}], 0x1c)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) (async)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r3 = dup(r2)
bind$rds(r3, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ec071, 0xffffffffffffffff, 0xd80fd000) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ec071, 0xffffffffffffffff, 0xd80fd000)

17m28.185472146s ago: executing program 3 (id=2543):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6004000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4002000097e95911a0ba0ad5ff946ffba877b78112f9593b5133696a2150ce9126e29da486a5c919f7c49ce45f0893f0a308972d0a47234155e82d29bbd58069cb9f3d677e7b4b978fe2b753741840916816fafdf1444598c0be6dde718b6205dbde419ae7", @ANYRES16=r2, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0)
ioctl$KDMKTONE(r3, 0x4b30, 0xfffffffffffffffe)
sendmsg$802154_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)="7f08eda6d67e4db32259119e972e85220d91b6", 0x13}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000084)
r5 = socket$inet(0x2, 0x3, 0x1)
shutdown(r5, 0x0)
recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0)

17m27.884459463s ago: executing program 32 (id=2543):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6004000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4002000097e95911a0ba0ad5ff946ffba877b78112f9593b5133696a2150ce9126e29da486a5c919f7c49ce45f0893f0a308972d0a47234155e82d29bbd58069cb9f3d677e7b4b978fe2b753741840916816fafdf1444598c0be6dde718b6205dbde419ae7", @ANYRES16=r2, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0)
ioctl$KDMKTONE(r3, 0x4b30, 0xfffffffffffffffe)
sendmsg$802154_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)="7f08eda6d67e4db32259119e972e85220d91b6", 0x13}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000084)
r5 = socket$inet(0x2, 0x3, 0x1)
shutdown(r5, 0x0)
recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0)

14m22.253622432s ago: executing program 2 (id=3630):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r0 = socket$phonet(0x23, 0x2, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000180)={0xfffc, 0x101, 0x100, 0x0, 0x97, 0x18, 0x36, "e75867a0aa45de1500", "004de35700"})
ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000300))
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000080)=0x1)

14m21.951329432s ago: executing program 2 (id=3632):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xf82}}, './file0\x00'})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4188aea7, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x200440, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xf82}}, './file0\x00'}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_SET_CPUID(r4, 0x4188aea7, 0x0) (async)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x200440, 0x0) (async)

14m21.669615233s ago: executing program 2 (id=3637):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x3, 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty=0xffffffff}, 0x10)

14m21.659895685s ago: executing program 2 (id=3638):
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r1, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008040)=[{{&(0x7f0000000080)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256-generic\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="f94bfb3d101fd5f52b50c6367decb920f7cb7c326275be61ab8f3b80a171e7c305c3c28002f7960043aeaee255f833d76c7d26ba4d0756aa6c184c8d90088fa10f16124885abc1f209a5a7682bb067a751a402fff5155fb06321c6e7e0177ce54138cf09c9a807a03c41568adbc4d4ca4c479867b9ae1b15fcfa24504d", 0x7d}, {&(0x7f0000002080)="5b07ee5558616b1fc3bea4126427d38ef56b17bd3e300c2e63e0f66398f615decf30a35a4a1bf10cdca803e01878c4f5e05fd05b4e0c064d9b22e4bf1d80a3cd69dd7e717941729748210e7178bb43106f8106cfacc7917e06c9cde06deafcba", 0x60}, {&(0x7f0000000240)="fcef9876357eefc88cb63dcb204d42605755218c2529cdb9b259a1cb8bf32bd7a8a91cfea2a1df908541cd2dde064ab4f5100310a8da47441360f5a6982cac2ad46249f2f3b46a86868dfa1e47a975a53af49a5db3ec81c811b794e629e7f35bfa9f30b35f3230bc90fac40f62614c4f623d108fbeb628000f50796bd16314375ef9318f05", 0x85}, {&(0x7f0000000300)="b27487c75a2f625fecd0ee57ad1bb78f2d426f7a8dab5e8c48a9c447d4a5cfb5fa4c8f574f50c71e5e247328fd75c5f81accde4ecc4312f024dcb5c152ec0b3361def4f74d1afc422b930ee948a318a6553d29228261a79a87427108bc755be797d37ee310a529c516371b0eae1e2bb7070ca7b45d697019fbc2548821e2aa2a668c83af65e7d15ff245c6bcbd0b351b65d97d7953ffb0e6f1f1cb47c7cfbbeaeab0d2388c6f", 0xa6}, {&(0x7f00000003c0)="ca820fbd17f95b57513224b8e538ae57b1db03b8d762e48d3ecc272b910dd431c78f37d5f1f427c188b2049e264d6639defc10b4979b93a8677eb8eab858eba6ae9de22a8c3a7d9663", 0x49}, {&(0x7f0000000440)="41372948bb987378b34111036c05954f551354bae8bbd1d7c4f81fd9403c2f7654630ea3ca2c8ef99243428495bae56286df4226ae7ecd59f656c22fead9683d25e14c938681f3b4ebe856114e7b679383ce38dc359d471ed78ba121ac21695b0afa96712f5f9779bac1e7bfb52dedafaa9735326356895d3712d9a277731306f70998ea93da615765d2010338509230a7d695733b81696e2298063a3b94c694e516b6454df4f7f407d91bbd853ea5", 0xaf}, {&(0x7f0000008180)}, {&(0x7f0000000500)="3574f372e3c2600107a4513fc2ba127b4ac3410728b5ad513a3af195e0b78b1337b89b98b2c024b85d46ae9d26575d51f23e21e9b1d5b048fd6b56b6ad570a4ad728ad7dad405d2510f586e1af89e9f11bd2914b25b8a063f2dc523caaf4c43c62c2e3b28f9ff17dffc8e1a5da08c4890029e80650cbbbf7ca84c9dd7a4f08e704573a42d94c3cf241fa7a37fb5812315f68fac6c3c2b92affd73d9a09d8fe11d57638601e734889afb6c58b3d9e6409b48a6b889c66b14d2b14248437de3b3a54df67cf569e8e8f1c8cc642b4005dff10dffe06574f9f0082f4758a91fedab16a5c88d581b5ad9005c8060f1b4abcb04a883e5adc", 0xf5}], 0x8}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000680)="1a5cb9e384e305fcfff6e56f93530dcbf5995933a507ad80e2e510abcc89b40e56bb1669cd7de8faec60640403153ea96c429c195104e0c72abf95557fec7e848e1a7f1edaa542bf10ff3ce926f97b0b4d49eab3b256e09835062c03d4aed8b16de9077f541bb1920366efcaabad74c5b55d36d53fcfc77901e5b24638e883b27d9e00e4634066187ca52ec99a95b058d60d924a6b99111fa55f2c7f19ef794891f2afd56149416204e8a406bd8658314ff5c1552324f2a0f3a1", 0xba}, {&(0x7f0000000740)="e4530ca9142a062a60acd4e3a66047bf5b73bbfdf1a022f9090d557f0036c4c17fe34f9feb1336a18852f9a0232a03151f8788918907729bfe36e92ce687ae943e18993fc3205123860aa7c8fe9017ba7ec82a4eff736f28d1d7fdf007d0002c1991b2415d", 0x65}, {&(0x7f00000007c0)="b9d35bcb30e813a8fc8731001aca3d44952d8e82a4d882f04ede3bb601a1a746f80678b8bd02fd7cfba6220cc6e4ab83a589be8ea2c4af2a1f597a963e1f28a5c8c45a960734a8250f9a6c7f6451439622d948b0b829049d43547d41716d8edb687939259d0f8de685a90adbeff322842a18ed2ded2c34f14b5eb0e15769731917bf6002853c74a0d128d17ae3caa8f295671ba54b96e210c20325", 0x9b}, {&(0x7f0000000880)="1707d68240e51e4148478a2d156e9e2a2f1367fda09e9e2bcc8839ee0b06d9a479344c", 0x23}, {&(0x7f00000008c0)="77be3cb7dfa8b21d729f9c4f16bb5a4d2ada53ba9161909adde9d45f555c756f376559c95638a4ccd4dc8e0ea60e794bbb2bdf02ff09893ac74f90a12d9c7f96ec8df25b45b39f5ce7994ca11122faccb2dc89338d850bb18527c51916e23c13a9a088ff6928f8664c29e5a1d4fe8939003761361603dcf04ac7b17fa47fa3fd3617bcf515f2d3cae427d626aba96b42d4bd5c34435682e931cf2c910f3aacb5bc3f4347af971a5ac3716ea29239ce7a1dfc0c6b14c489fac99865443a1729171425b0fd99a79b950ac054b24dc58c0559ea4d513e11d8fa38e6598499ce0a6ff74356d678615be971f3df80d768f32c5629cc", 0xf3}, {&(0x7f0000003540)="1653", 0x2}, {&(0x7f0000000ac0)="8e208a6ea54c3eee02c9b9eec73e450a7730e6bbbeb089180ce3ccc0ae7fd8e8bebe762a3ecf0933cd4a8734749586ab54b9d2c9774d5b59b9fd0503b93daf7604e3bb0a768796ad1a118ffb9c2a0ddb91f15407c45e564ab4f3cb0ab0ad386056c3b522307152491af94af6421b7336aa1db848fdc6d75eb53815de3e1da6e77be1098eda0a9d850391eb9b8d93508ea606cb4e26681d4388dd214b0194244feaad4e39769abf03019c8277d8358df67355b1", 0xb3}, {&(0x7f0000000b80)="e3b30abb6ca15101b10e5ae3f91d2618e0d99be31e4accd381ff960f503e9baabd", 0x21}, {&(0x7f0000000bc0)="3c311caaee22d6ceb1286421f2cc7c438c30deb0476970f6f674eb8f7a3c5da58724c0acf6497bcde4e4e7aa3f73a485f709d9d00eb76a11d53657cce36ea6c6f0", 0x41}, {&(0x7f0000000c40)="fd4bfacae294d634c27825a17e0bb31c3e40a7a7fa6a60186d79ff4373b7dc36436e13953be6efee93887822ffc6a9c33a8edd85a3dbcbd1c54429a3214d27a6832c875ec71811a30f41f924f5fdff77712fbdee088af6eb18", 0x59}], 0xa}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="f153ae7cd3270ba428626b6e81f13fbc850ff890defb1f329ba9a25fa520e8adcc2215aa6327197a255f95f0755df6ee437ad29ad576a6494c6fdde3eb2392c557b61874141202447975086656242eb62bf1d5063c8fbe4aef3faef26acdc7d9124ac43d57ab9bcb7b1d38ee1860b08ece1e5ec381ab4cfe36f000d85f9ddb29159fa55b0a3a8a5af0bc", 0x8a}, {&(0x7f0000000ec0)="d1e1cacd9a7f32f0e266579fd769e7450e50311d87dc01a7a4cde5bd36e85afcbd11bdc3359f58ddd7c04546a46ad07e76973500acccac1ea9b7811c916e9caa92901d5192b7ce954e", 0x49}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000058c0)=ANY=[@ANYBLOB="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"], 0x2130}}], 0x4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4105, 0x1009}, {&(0x7f0000000300)=""/234, 0xea}], 0x2}, 0x10020)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000001440)={0x8, 'xfrm0\x00', {'vcan0\x00'}, 0x8})
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)

14m21.237597531s ago: executing program 2 (id=3640):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r0 = socket$phonet(0x23, 0x2, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000180)={0xfffc, 0x101, 0x100, 0x0, 0x97, 0x18, 0x36, "e75867a0aa45de1500", "004de35700"})
ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000300))
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000080)=0x1)

14m21.144173707s ago: executing program 2 (id=3641):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000300)=0x2)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
sendfile(r6, r5, &(0x7f0000002700)=0x23, 0x1c)
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c292000", @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf250200000008000c0109000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="8fd297e430a29329b733b5a0c4066a44e10fa0ded50776f14b41a54ef78491022f0757ddaf10b5fdf724e7e508c3a534b4c45ad919762ff86582fa52905b8af6295345602346214f790e76e4ea26c7ae59e5eafe400c9e8152ef649d38c5757d5ec4d7b397696f1862e484d06130c73ec7a4bd088e9ccd097bf97205b27caadf9409259676c7de31cf3c40100bb28a1e442240d8e7b3c9752dc46970d7623f11b367b53f0f6c82ea57a10f8a29e63ae3b8945722e5f86d0620069a57d034001d815682a485ae5e", 0xc7, 0x4010, 0x0, 0x0)
socket$inet6(0xa, 0x800, 0x8)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0xffffffffffffffce)
listen(r1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x3, 0x4)

14m20.509531986s ago: executing program 1 (id=3647):
getgroups(0x3, &(0x7f00000018c0)=[0xee00, <r0=>0xee01, <r1=>0xffffffffffffffff])
setresgid(0x0, r1, r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x1, 0x2, 0x8, 0x300000000})
setgid(r1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x141482, 0x6)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000100)={@id={0x2, 0x0, @b}})
mount(&(0x7f0000000080)=@filename='./cgroup/file0\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='reiserfs\x00', 0x1200051, 0x0)

14m20.434033388s ago: executing program 1 (id=3648):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}], 0x2}, 0x1}], 0x1, 0x12022, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x2400c810}, 0x0)

14m20.309405789s ago: executing program 1 (id=3650):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0xfb, "b0a14dd8fd704bb2633dcbef3798a882d18a4cc5d3526498a4f872657b14c0bc86a890d2ded7709161177c3c3f321ca5cc9368e906d6649754efe77126d9d925a92d3e5050dd202697b0c96c2456a2754aa31c65d7d9ec72d9cda9a69b5c5cd25b6d196c636581c82cd8b3519aac1121988ea9406cbcd24c792ab9e13adc01b4c49a972a3ecc750ba7c3e5b68b24327ed71e567c116d439074709e46d2db781fd5140b90ffbbd6120583f81027cf467388f0cbf1efe51c43eb99010ab5c6ba7ca4707ff04669a445f77cf49d72a6238fe603d5eae4838df09913aaef8872bd1820912f8e0f71d4d46b9f26d95fcfd12f216adcf45e29ac577e3d79"}, &(0x7f0000000140)=0x11f)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e21, 0x7, @loopback, 0xd343}, {0xa, 0x4e21, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x0, {[0x5, 0xfffff801, 0x1ff, 0x1, 0x7, 0x4, 0x401, 0x40000000]}}, 0x5c)
getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x75)
r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/197, 0xc5}, 0x1)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000440)={0x3, @vbi={0x3, 0x0, 0x9, 0x20303159, [0xfffffff7, 0x3ff], [0xfff, 0xffffffff], 0x7e4bfe1ca3f2d40f}})
r3 = accept4$bt_l2cap(r1, &(0x7f0000000540)={0x1f, 0x0, @fixed}, &(0x7f0000000580)=0xe, 0x80000)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000005c0)={0x3, 0x500, 0x81, 0x81, 0xf, 0x2, 0xb802}, 0xc)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r2)
sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x180, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40040}, 0x804)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r2)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000900)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000980)={0x4, 0x9, 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'vxcan1\x00'})
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x110812, r2, 0x8000000)
syz_io_uring_setup(0x2c95, &(0x7f0000000a00)={0x0, 0xad3d, 0x80, 0x0, 0xf7, 0x0, r2}, &(0x7f0000000a80), &(0x7f0000000ac0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000b40)=@IORING_OP_MKDIRAT={0x25, 0x4, 0x0, r2, 0x0, &(0x7f0000000b00)='./file0\x00', 0x2, 0x0, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000b80)={0x2, 0x4e24, @multicast1}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/bus/input/devices\x00', 0x0, 0x0)
vmsplice(r8, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="359d6a20dfaab50fdc38400278a110922e70a36c4584b0a17378f19d1261fd2565d0972024f6c639032a387cbaae58c491d9e946a074b2ce759501aa10ce7e3616ba8bbed02fb6f1dab2d2fc48ad5c296bf8d25215a61b752bc54065005d42870d565fcdb214f85c735d6ab4496af879626a929e9877b35b920267d4c89d6d7051b5a8af4ecc2dcd97b4fa3c22031a4f115f7ece92697a5f29220bdc9c660fd65d", 0xa1}, {&(0x7f0000000cc0)="c12637e19a1006f3f5eb40b160", 0xd}, {&(0x7f0000000d00)="462e323c88a02c067b3c80d856610054ebe358083d1d6a9642c301f2e91fc5a40a3ee52414d4c0119372cc3cd75ef53b46badfd596ad558c01805be041d75049aaa82bbe9672ea0e9a755aaed21783edcc85d460f05d6fdfdeebb50c4538fc53bfddfcb344025031f01780d3ddbc61a36baf9634c3ee640474bc42aa731adc3080166b42fe0d50aa7cac3e5663c7b0a27eba715c6a82121890e2d52958bd7643457d", 0xa2}], 0x3, 0x1)
getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000e00), &(0x7f0000000e40)=0xc)
ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101)
request_key(&(0x7f0000000e80)='.request_key_auth\x00', &(0x7f0000000ec0)={'syz', 0x2}, &(0x7f0000000f00)='\xff\xff', 0xfffffffffffffffb)

14m20.235834171s ago: executing program 1 (id=3651):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[], 0x0) (async)
syz_usb_connect(0x1, 0x36, &(0x7f0000000300)=ANY=[], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000480)="d869af967b3d76ff238ea23117afece1fa2f6addcae955dfbde3ed4c6769f150f03fab0eb105003c8ddb3547d70ff2234ba27e0d55d2a0e31d66ae1d851553913b318eb632941ec7bbac73d2e195e67e41c94ecadf2ca5836a5379f45e890fca84366e5ed846b17ec5911334a4796c65d2f288768e6c820a877b5e10b58cab18fff888b9ca1a16643e67a6ae7e9a982e834631f0f0c340490be4b9f804b984ac67e8831eeee3265cc00da414c81b71a18dd5636e031cdf7d76eea30212b5cf4c8924b13402526661e53b3b21e8bd61255af595bfb8ac6b40b44739df2fd3", 0xde}], 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600001e42000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4) (async)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600001e42000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000})
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) (async)
ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socket$kcm(0x10, 0x2, 0x0) (async)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d80000001000", 0x6}], 0x1}, 0x20000880)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0001012000006fc1b7940797f16808000c018101000008000c0100004000"], 0x24}, 0x1, 0x0, 0x0, 0x6044884}, 0x2000c000) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0001012000006fc1b7940797f16808000c018101000008000c0100004000"], 0x24}, 0x1, 0x0, 0x0, 0x6044884}, 0x2000c000)

14m19.771161997s ago: executing program 1 (id=3654):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)
link(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00')
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000800)=0x8000000)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x189800, 0x4)
r3 = syz_open_dev$loop(&(0x7f0000000140), 0xffffffffffff7d4e, 0x82a00)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={<r4=>0x0}, &(0x7f00000001c0)=0xc)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001280)={'\x00', 0xfff7, 0x5, 0x7fffffff, 0x6, 0x7e, r4})
getdents(r2, &(0x7f0000000280)=""/4096, 0x1000)

14m19.625482523s ago: executing program 1 (id=3657):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000000c0)={0x1000000, 0x5})
ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
close(r5)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
write$cgroup_int(r5, 0x0, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x40011, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r0, 0xef52000)

14m5.9475754s ago: executing program 33 (id=3641):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000300)=0x2)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
sendfile(r6, r5, &(0x7f0000002700)=0x23, 0x1c)
ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c292000", @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf250200000008000c0109000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="8fd297e430a29329b733b5a0c4066a44e10fa0ded50776f14b41a54ef78491022f0757ddaf10b5fdf724e7e508c3a534b4c45ad919762ff86582fa52905b8af6295345602346214f790e76e4ea26c7ae59e5eafe400c9e8152ef649d38c5757d5ec4d7b397696f1862e484d06130c73ec7a4bd088e9ccd097bf97205b27caadf9409259676c7de31cf3c40100bb28a1e442240d8e7b3c9752dc46970d7623f11b367b53f0f6c82ea57a10f8a29e63ae3b8945722e5f86d0620069a57d034001d815682a485ae5e", 0xc7, 0x4010, 0x0, 0x0)
socket$inet6(0xa, 0x800, 0x8)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0xffffffffffffffce)
listen(r1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140)=0x3, 0x4)

14m4.424746449s ago: executing program 34 (id=3657):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000000c0)={0x1000000, 0x5})
ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
close(r5)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
write$cgroup_int(r5, 0x0, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x40011, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r0, 0xef52000)

3m58.757191728s ago: executing program 0 (id=8523):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x7fffffff, 0x0, 0x9, 0xffffffffffffb582, 0x80, 0x5, 0x0, 0x1}, &(0x7f0000000040)={0x4, 0x5, 0xffffffffffffffff, 0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x9}, &(0x7f0000000080)={0xf, 0xfffffffffffff800, 0x1, 0x4, 0x3c0, 0x1, 0x2, 0x5}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000340)={&(0x7f0000000180)={[0x7f]}, 0x8})
lsetxattr$system_posix_acl(&(0x7f0000000400)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x5}, {0x20, 0x4}}, 0x24, 0x3)
getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000200)=""/254, 0x4)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x202, 0x0) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x202, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000)
capset(&(0x7f0000000480)={0x20080522}, 0x0) (async)
capset(&(0x7f0000000480)={0x20080522}, 0x0)

3m58.601576273s ago: executing program 0 (id=8524):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x12c)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="5802009400140091d491323b473ac7050878b15418753629257f278925458db45602117fffefd7ff81000e226c1add024bf752e31ad096339c5e74a48d52a42b3ecb", 0x42}], 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) (async)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1])
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0)

3m58.482371294s ago: executing program 0 (id=8525):
chdir(&(0x7f0000000540)='./cgroup\x00')
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @thr={&(0x7f0000002a00)="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", &(0x7f00000003c0)="348149893a15fc3c224cc8d653d418d658fb3828fb3384f558cf9b946e1a7eb48e3399c30a9268cbfa97e1ab3a8afc4266a1ea15db873c20d1ccb830dd0f351ac2aad31485e5d9874793dfb63902bea1ec58fefe532ffd216d18027849c9aed9fc31b35b004e"}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0xee01, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x12020, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="9b5a08000000000000001c000000140001800800e2e20100000008000100", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x880)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000b9c3186789080790d72318000a3a"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000040)}, 0x80000003}], 0x3, 0x10000, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r7, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]})
read(r5, &(0x7f0000000100)=""/159, 0xfffffe5a)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r8, 0x40046207, 0x0)
mmap(&(0x7f00000dd000/0x1000)=nil, 0x1000, 0x3, 0x20000000ec071, r2, 0x1000000000000000)
recvmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/123, 0x7b}], 0x5, &(0x7f00000009c0)=""/88, 0x58}, 0x2}, {{&(0x7f0000000a40)=@alg, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000ac0)=""/87, 0x57}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f00000028c0)=""/77, 0x4d}, {&(0x7f0000002200)=""/84, 0x54}, {&(0x7f0000000d40)=""/116, 0x74}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/182, 0xb6}], 0x7, &(0x7f0000001f00)=""/81, 0x51}, 0x25b}, {{&(0x7f0000001f80)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002000)=""/247, 0xf7}, {&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000002200)}, {&(0x7f0000000bc0)}, {&(0x7f0000002100)=""/206, 0xce}, {&(0x7f0000002940)=""/134, 0x86}, {&(0x7f00000022c0)=""/227, 0xe3}], 0x7, &(0x7f0000002440)=""/213, 0xd5}, 0x6551}, {{&(0x7f0000002540)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000002700)=[{&(0x7f00000025c0)=""/152, 0x98}, {&(0x7f0000002680)=""/120, 0x78}], 0x2, &(0x7f0000002740)=""/57, 0x39}, 0x10000}], 0x4, 0x0, &(0x7f0000002880)={0x77359400})

3m57.113617176s ago: executing program 0 (id=8532):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f0000000480)='./file0\x00', 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x0) (async)
creat(&(0x7f0000001380)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)

3m56.992972619s ago: executing program 0 (id=8534):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000220000028000480240001800b0001007470726f7879000014000280080003400000000e08000140000000010900010073797a30000000000900020073797a32"], 0x7c}}, 0x40080)

3m55.781395583s ago: executing program 0 (id=8542):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r2, 0x1000) (async, rerun: 64)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async, rerun: 64)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x88100, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r4)
r5 = dup(r3) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000200)={{{0xb, 0x1}}, 0x40, 0x5, &(0x7f00000001c0)="01726bb9ad2ee84fd11d7cb6f998403232cf94f7784c0172f1880044998672d12d2721e9a71651949ce7e986d267177c9f2947c384a37520f470bd51711ae521"}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="040070800c001c00090000000000000008002e00", @ANYRES32=0x0, @ANYBLOB="2800de8008004a00", @ANYRES32=r7, @ANYBLOB="1c00328008000800f7ffffff0400888008002f00640101010400148067bc0ca816bfd690a5b2bc965f642f86fcbaa1ef938c5fa66781695122165b300ce9a004e74d8dd0acd8aea39f0cf5ea1f0400b880000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) (async, rerun: 64)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)

3m55.525564645s ago: executing program 35 (id=8542):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r2, 0x1000) (async, rerun: 64)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async, rerun: 64)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x88100, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r4)
r5 = dup(r3) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000200)={{{0xb, 0x1}}, 0x40, 0x5, &(0x7f00000001c0)="01726bb9ad2ee84fd11d7cb6f998403232cf94f7784c0172f1880044998672d12d2721e9a71651949ce7e986d267177c9f2947c384a37520f470bd51711ae521"}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="040070800c001c00090000000000000008002e00", @ANYRES32=0x0, @ANYBLOB="2800de8008004a00", @ANYRES32=r7, @ANYBLOB="1c00328008000800f7ffffff0400888008002f00640101010400148067bc0ca816bfd690a5b2bc965f642f86fcbaa1ef938c5fa66781695122165b300ce9a004e74d8dd0acd8aea39f0cf5ea1f0400b880000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) (async, rerun: 64)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)

2m29.229156801s ago: executing program 7 (id=9079):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x10e00, 0x0) (async, rerun: 64)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async, rerun: 64)
r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x80, 0x800)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r2, 0x1000) (async)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async)
r5 = dup(r3)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)

2m28.218963725s ago: executing program 7 (id=9086):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)={0x82, 0x40}, 0x18)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)={0x82, 0x40}, 0x18) (async)

2m28.101627929s ago: executing program 7 (id=9087):
chdir(0x0)
r0 = inotify_init()
inotify_add_watch(r0, 0x0, 0x991)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0)

2m28.089450605s ago: executing program 7 (id=9088):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
ioctl(r1, 0xe8, &(0x7f00000004c0)="be4bfebd820386ddf7dbfcfecacbad29c71e63a4afcdaeb35acdcbb3ae6fac02d461fc0f302c9a4b3824ed3c385c3fb975af52c9772f82ff271937056f9a48f3313269098ee4ba810657b275b0703dfcc5233fe3d7e779039905202ca822197ffed1f7e264b05e56246b52e1ce6b3cc41e396fb33fb7f58d65541c98cdf864a29dceef7e5a94529d7bed0733009d7daf2e72f082668340e545ff32f77d667888c27e01c5c4774752a451daf9f8b2eaa704bc47ffdc70ba9a45e9ee5209e069a6e68a3c8eaff099c327d7c6faf1574ceb0a597e7a4303426dce5e")
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169282, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241383160608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
connect$can_j1939(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x1411, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x20004040)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0)
writev(r3, &(0x7f0000000980)=[{&(0x7f0000000680)="986f4f0cf1aa12783eed4dea83f5af521387296077f77ea609e2ad9c8b6b4cfb83e4d938725bb7034f55b61b10254915d8aad39da88cb4dcb9f2d8d01f1cbeb65ead1de65f8550550aea5591025fba64d8b641f6fc2590efb6f3e0ffdb0f4edd131dab9beb6d125b1dc5f4b0be4c35d3a173672270442d4d05d4e3bd85e068ba48a3763733d4b42f6c91d3bfcd46", 0x8e}, {&(0x7f0000000740)="78dfef1141aa0704742ba9c6f45e35f789cbef9807764d02e566dcf195650fd3b24280f6af0b1ff65bff314f0b9aceb780b6b13b4e5aded1af3fe630ae23b2b535995642b222596ddb31d793781047bf06326c51129f9bbeec633f6f739c72b70c2a004165b61998793ce22254fe4bf0b63fd22a044bc3bc7a9622b17c4723bfc5099a4415984eb09b2d065f324878ca42092887912e8416a42ba0cdbed45589679f5a3ec90e2cb4c093b2e033642dec", 0xb0}, {&(0x7f0000000800)="37adade085dc0c57cff014a11b0f0b730acad7322376261aaf3bcf6ea38fabce5c504129bdae57829daafecc37a8704916d875465bba43a4df313cb73924b34d67707724ca6c4d6c7f04e12d7fc0eac9dc84afae281e7c7bc3898ebf9120327935fa2ffc10e5ddd1905130ede5e7228e166fce713f5a3251e74a13e053d6f5af4e551f69cf9e54084ba18a60b17418c2507ddbc0219cb927c9a5bbb2d203223ec7ed3c18eee2b1d9a274258810c20f84db382222b9468df194b7aed5994361dcecc85060cf5f35cf7ad347ef1befb735b3a5e53eab9547", 0xd7}, {&(0x7f0000000900)="36d97616bd42cdb19a0d3f011abed62f9f0f68e8daad3e1bec4ef27b55533f83f4ddf9acb029145a98bcbb6c1bc94d87744dbe0b905a5748bbb8caa5b926", 0x3e}, {&(0x7f0000000940)}], 0x5)
write$sequencer(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="9207e0fe08c0000000000000000000"], 0x10)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x640100ff}, @private1, @mcast2, 0x1, 0x3, 0x1, 0x0, 0x8, 0x2840000, r8})
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f0000000480)='./file0\x00', 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0/../file0\x00'})

2m28.003050519s ago: executing program 7 (id=9089):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003200600000008000140000000010800"], 0x80}}, 0x0)

2m27.713242245s ago: executing program 7 (id=9090):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000600)="580000001400ff2340834b80041d8c560211740fff00000058000b4824ca940417a3cd3639e431e8e2125f6400940f6a0325010ebc0000000000000080003228baf0fffeffe809005300fff5dd00000010000100220c1000", 0x58}], 0x1)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001180)={'erspan0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xfffffed1}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000000)=0x3c, 0x4)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100e0ff00000000000001000000"], 0x14}}, 0x0)
mbind(&(0x7f0000abe000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000001c0)=0x11b, 0x6, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa00e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa033}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x623ee769}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000011}, 0x10)

2m27.527827968s ago: executing program 36 (id=9090):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000600)="580000001400ff2340834b80041d8c560211740fff00000058000b4824ca940417a3cd3639e431e8e2125f6400940f6a0325010ebc0000000000000080003228baf0fffeffe809005300fff5dd00000010000100220c1000", 0x58}], 0x1)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001180)={'erspan0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xfffffed1}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000000)=0x3c, 0x4)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100e0ff00000000000001000000"], 0x14}}, 0x0)
mbind(&(0x7f0000abe000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000001c0)=0x11b, 0x6, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa00e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa033}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x623ee769}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000011}, 0x10)

35.808989768s ago: executing program 5 (id=9731):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "0038baac"}, @global=@item_012={0x1, 0x1, 0x1, "a5"}]}}, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1)
ioctl$TIOCGPTPEER(r6, 0x80140912, 0x8)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)

33.77272851s ago: executing program 5 (id=9743):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote, 0x4e22, 0x4, 'lblc\x00', 0x0, 0xfffffefc}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_clone3(&(0x7f00000003c0)={0x2c2888080, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0, {0x8}, &(0x7f00000001c0)=""/195, 0xc3, &(0x7f00000002c0)=""/136, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8}, 0x58)
sched_getaffinity(r3, 0x8, &(0x7f0000000440))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x80}, 0x90)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @private2, 0x9}, 0x1c)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0)
add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)

33.617389018s ago: executing program 5 (id=9744):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
ftruncate(r0, 0x3) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x81}], 0x1, 0x10002, 0x0) (async)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) (async)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_disconnect(r1) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000080)=0x3, 0x4)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000002a80)=""/120) (async)
r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0)
ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000000)={0x6, 0xfffffff8, 0x1da0, 0x0, 0x0, "42f46749a2ed195a14cc4951dc7e8e5aec7776", 0x100000, 0xfdfdffff}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) (async)
close(r4) (async)
socket$netlink(0x10, 0x3, 0x0)
preadv(r5, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='bdev\x00', 0x20c0c3, 0x0)

32.833725641s ago: executing program 5 (id=9749):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x0, 0x0, 0x0, 0x6})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xa)
close(r3)
r4 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000080))
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
sendfile(r2, r5, 0x0, 0x7)

32.773371406s ago: executing program 5 (id=9750):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000040))
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

32.673557832s ago: executing program 5 (id=9751):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045731, &(0x7f0000000000))
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=<r6=>0x0)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000300)=<r11=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10004000}, 0x4000001)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc008005}, 0x8800)

21.660710104s ago: executing program 4 (id=9803):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000003440)={0x14, 0x0, &(0x7f0000003400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000004ac0)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x18, @string={0x18, 0x3, "8ae1aab1b6bcd443641526ff925ffe10ec117a7acba5"}}, 0x0, 0x0, 0x0}, 0x0)
read(r0, &(0x7f0000000040)=""/163, 0xa3)

18.610671462s ago: executing program 4 (id=9824):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000fc0), 0x1, 0x2000)
ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000001140))
recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000002480)=""/4100, 0x1004}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f00000015c0)=""/192, 0xc0}], 0x5}}], 0x1, 0x40010122, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0, 0x40000}], 0x4}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0}}], 0x4, 0x40000121, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, &(0x7f0000000100)=""/40, 0x28)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
read$char_usb(r3, &(0x7f00000001c0)=""/84, 0x54)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

18.394962436s ago: executing program 8 (id=9827):
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x802)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x1)

18.328101906s ago: executing program 8 (id=9828):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x68001, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff7)
write$cgroup_subtree(r1, 0x0, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x20000)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000a40)=@assoc_value={r5, 0x5}, 0x8)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='bpf\x00', 0x0, 0x0)
rename(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00')

18.173532026s ago: executing program 8 (id=9829):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="344fb98d369c"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3})
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='jfs\x00', 0x0, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000040))

18.138812094s ago: executing program 8 (id=9830):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
ioctl$KVM_NMI(r3, 0xae9a)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@x86={0xff, 0xe, 0x7, 0x0, 0x9, 0x3, 0x7f, 0x9, 0x62, 0x81, 0x7, 0xc, 0x0, 0x3ff, 0x7, 0x7, 0x2, 0xcd, 0x1, '\x00', 0xe, 0x84})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x400448e4, &(0x7f0000000140))

18.090612649s ago: executing program 8 (id=9831):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4212, r1, 0x202, &(0x7f00000000c0)={0x0})
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0)

17.981595742s ago: executing program 8 (id=9832):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x59)
mknodat(r0, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
dup(r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r3, 0x400, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @remote}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x38}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file2\x00', &(0x7f0000000080)='befs\x00', 0x21004a, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x59) (async)
mknodat(r0, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async)
dup(r4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) (async)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r3, 0x400, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @remote}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x38}}, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file2\x00', &(0x7f0000000080)='befs\x00', 0x21004a, 0x0) (async)

17.072298768s ago: executing program 37 (id=9751):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045731, &(0x7f0000000000))
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=<r6=>0x0)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000300)=<r11=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10004000}, 0x4000001)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc008005}, 0x8800)

16.420133353s ago: executing program 6 (id=9838):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x51a195ce92f877aa, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000040))
r3 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)

16.24945355s ago: executing program 6 (id=9839):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
socket(0x40000000015, 0x5, 0x0) (async)
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)

16.243596645s ago: executing program 6 (id=9840):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f00001c0000/0x5000)=nil, 0x5000, 0x3000001, 0x22052, r0, 0x2000)
unshare(0x28000600)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0]})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000200)=[r2], 0x0, 0x0, 0x0})
r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @rose}, [@remote, @bcast, @netrom, @netrom, @bcast, @remote, @rose, @bcast]}, &(0x7f0000000040)=0x48, 0x80800)
accept4$ax25(r3, &(0x7f0000000300)={{0x3, @null}, [@bcast, @null, @bcast, @null, @netrom, @null, @null, @bcast]}, &(0x7f00000003c0)=0x48, 0x800)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000006fc0)=@req3={0x6, 0x101, 0x5, 0x8, 0x7, 0x9, 0xfffffff9}, 0x1c)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)})
r5 = socket$tipc(0x1e, 0x5, 0x0)
ppoll(&(0x7f0000000480)=[{r5, 0x9106}], 0x1, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r8 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r8)
prctl$PR_SET_PTRACER(0x59616d61, r8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "28370462b2834c7f", "07eb42637388c6aac91242f746132a73119000de73a5341dc576ee3e26dcc8c6", "75044950", "aac9204b911d5a07"}, 0x38)
connect$nfc_raw(r6, &(0x7f00000023c0)={0x27, 0x0, 0x0, 0x1}, 0x10)

16.095319685s ago: executing program 6 (id=9841):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x240c00, 0x0)
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000100)={0x5, 0x3, 0x191, 0x5, 0xaa99})

15.993644209s ago: executing program 6 (id=9842):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
creat(&(0x7f00000001c0)='./file1\x00', 0x9)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'pim6reg\x00', &(0x7f00000000c0)=@ethtool_rx_ntuple={0x35, {0x11, @tcp_ip4_spec={@broadcast, @local, 0x4e22, 0x4e24, 0x3}, @udp_ip4_spec={@local, @rand_addr=0x64010100, 0x4e23, 0x4e22, 0x9}, 0x8, 0x9, 0x3, 0x4a, 0xfffffffffffffffe}}})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
setpgid(0x0, r1)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

15.504664143s ago: executing program 4 (id=9843):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)

15.446450958s ago: executing program 4 (id=9844):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x529, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xe)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0xa, 0xa, 0xfffff000, 0x0, 0x10, <r2=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8)
getgroups(0x7, &(0x7f0000000440)=[0xee00, 0xee00, 0xee00, <r4=>0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0])
r5 = getpgrp(0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x24}}, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setreuid(0x0, r7)
r8 = getegid()
sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x148, 0x1f, 0x700, 0x70bd26, 0x25dfdbfb, "", [@nested={0x1f, 0x15, 0x0, 0x1, [@generic="415242cfe34c2142deec987b7257dd7c7395066714eec91fb2bb2e"]}, @nested={0xe3, 0x11, 0x0, 0x1, [@generic="9e0fc73c313011342d003a6823796878be43c886d7614dad75e04d27613b06e837f13760a1e819796b2bb86e849bf406e63bd1e7b5111a832bd97252e1ea180ea71166650b8d08fa8fc20f14a0eb0a7f62b324a1f17cffc34ad20ea2e1bf2fc3f9138e324edd04a5a251021576be7052083897a5c4e06f2dad52bc844601c0df561618d8e7e8d7d5365da7cc76bd27071a4755463c1ceba3e5dac4a82e68c42f2d2c3d55e6c032fb79fccde245336b222d462f157a9367ce9ae404fdd8e29c2197baf3b8fea8ef40ac2060", @typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="45c76f4646e3f749ab81e87216cef0ced3a1ca7fe317fe127ed449b08c9aca346ecbca587ecf97b9dc3964ac13caab01d49b"]}, 0x148}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}], 0x40, 0xa8001}, 0x44807)

15.187337995s ago: executing program 4 (id=9845):
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x1) (fail_nth: 1)

15.118868149s ago: executing program 4 (id=9846):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8c6a6728f0822698, 0x0) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r2 = dup(r1)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) (async, rerun: 32)
r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) (async)
madvise(&(0x7f0000146000/0x4000)=nil, 0x4000, 0x17) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00')
getdents64(r5, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
write$6lowpan_enable(r2, &(0x7f00000001c0)='1', 0x1) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r7) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2=0x80ee3600, @private=0x80ee3600}}}], 0x20}, 0x0) (async)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)

15.085121581s ago: executing program 6 (id=9847):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x0, 0x4})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x40, &(0x7f0000000380)=ANY=[])
syz_usb_control_io$hid(r5, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)

2.050326877s ago: executing program 38 (id=9832):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x59)
mknodat(r0, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
dup(r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r3, 0x400, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @remote}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x38}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file2\x00', &(0x7f0000000080)='befs\x00', 0x21004a, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x59) (async)
mknodat(r0, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async)
dup(r4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) (async)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, r3, 0x400, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @remote}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x38}}, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file2\x00', &(0x7f0000000080)='befs\x00', 0x21004a, 0x0) (async)

22.710128ms ago: executing program 39 (id=9847):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x0, 0x4})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x40, &(0x7f0000000380)=ANY=[])
syz_usb_control_io$hid(r5, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)

0s ago: executing program 40 (id=9846):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8c6a6728f0822698, 0x0) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r2 = dup(r1)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) (async, rerun: 32)
r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (rerun: 32)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) (async)
madvise(&(0x7f0000146000/0x4000)=nil, 0x4000, 0x17) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00')
getdents64(r5, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
write$6lowpan_enable(r2, &(0x7f00000001c0)='1', 0x1) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r7) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2=0x80ee3600, @private=0x80ee3600}}}], 0x20}, 0x0) (async)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)

kernel console output (not intermixed with test programs):

or with address 0xFF, changing to 0x8F
[ 1313.138906][T26027] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1313.155269][T26027] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1313.186315][T26027] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1313.195690][T26027] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1313.206983][T26027] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1313.219681][T26027] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1313.231479][T26027] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1313.243981][T26027] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1313.251665][T26027] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1313.264724][T26027] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1313.277749][T26027] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1313.290169][T26027] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1313.307785][T26027] usb 9-1: string descriptor 0 read error: -22
[ 1313.314459][T26027] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1313.327779][T26027] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1313.357637][T26027] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1313.422081][   T43] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1313.551444][ T1789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1313.566735][ T1789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1313.578082][ T1808] FAT-fs (nullb0): bogus number of reserved sectors
[ 1313.584866][ T1808] FAT-fs (nullb0): Can't find a valid FAT filesystem
[ 1313.600757][   T43] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1313.613496][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1313.622746][   T43] usb 5-1: Product: syz
[ 1313.627112][   T43] usb 5-1: Manufacturer: syz
[ 1313.632014][   T43] usb 5-1: SerialNumber: syz
[ 1313.638764][   T43] usb 5-1: config 0 descriptor??
[ 1313.647395][   T43] ch341 5-1:0.0: ch341-uart converter detected
[ 1313.780457][   T24] usb 9-1: USB disconnect, device number 3
[ 1314.087168][   T43] usb 5-1: failed to send control message: -71
[ 1314.094472][   T43] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1314.118249][   T43] usb 5-1: USB disconnect, device number 48
[ 1314.133026][   T43] ch341 5-1:0.0: device disconnected
[ 1315.121900][ T1840] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1315.128614][ T1840] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1315.185635][ T1843] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1315.251236][ T5870] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1315.410058][ T5870] usb 9-1: Using ep0 maxpacket: 8
[ 1315.418714][ T5870] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1315.428363][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1315.436523][ T5870] usb 9-1: Product: syz
[ 1315.440990][ T5870] usb 9-1: Manufacturer: syz
[ 1315.445624][ T5870] usb 9-1: SerialNumber: syz
[ 1315.454406][ T5870] usb 9-1: config 0 descriptor??
[ 1315.540069][T28907] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1315.663389][ T5870] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1315.693904][ T5870] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1315.710217][T28907] usb 5-1: Using ep0 maxpacket: 8
[ 1315.716380][ T5870] usb 9-1: USB disconnect, device number 4
[ 1315.729431][T28907] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1315.744246][T28907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1315.768402][T28907] usb 5-1: config 0 descriptor??
[ 1316.472672][ T1861] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[ 1316.481244][ T1861] UDF-fs: Scanning with blocksize 4096 failed
[ 1317.380293][   T92] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1317.407339][ T1848] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[ 1317.415313][ T1848] UDF-fs: Scanning with blocksize 4096 failed
[ 1317.422736][T28907] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1317.433655][T28907] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1317.444507][T28907] asix 5-1:0.0: probe with driver asix failed with error -71
[ 1317.457485][T28907] usb 5-1: USB disconnect, device number 49
[ 1317.510492][   T92] usb 9-1: device descriptor read/64, error -71
[ 1317.761943][   T92] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1317.900252][   T92] usb 9-1: device descriptor read/64, error -71
[ 1318.011389][   T92] usb usb9-port1: attempt power cycle
[ 1318.360196][   T92] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1318.382324][   T92] usb 9-1: device descriptor read/8, error -71
[ 1318.460121][   T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1318.612685][   T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 1318.622850][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1318.632022][   T92] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1318.634352][   T24] usb 5-1: config 0 descriptor??
[ 1318.649344][   T24] gspca_main: spca508-2.14.0 probing 8086:0110
[ 1318.660861][   T92] usb 9-1: device descriptor read/8, error -71
[ 1318.780609][   T92] usb usb9-port1: unable to enumerate USB device
[ 1318.827337][ T1896] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9166'.
[ 1318.860154][   T24] gspca_spca508: reg_read err -32
[ 1318.870182][   T24] gspca_spca508: reg_read err -32
[ 1318.894349][ T1888] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9163'.
[ 1318.903593][   T24] gspca_spca508: reg_read err -32
[ 1319.004390][ T1896] hsr_slave_1 (unregistering): left promiscuous mode
[ 1319.178086][   T24] gspca_spca508: reg_read err -71
[ 1319.189376][   T24] gspca_spca508: reg write: error -71
[ 1319.196567][   T24] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[ 1319.212836][   T24] usb 5-1: USB disconnect, device number 50
[ 1319.386706][ T1915] efs: device does not support 512 byte blocks
[ 1319.393737][ T1915] device does not support 512 byte blocks
[ 1319.393737][ T1915] 
[ 1319.448112][ T1917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9171'.
[ 1319.730122][   T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1319.891999][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1319.908077][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1319.918533][   T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1319.938545][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1319.962591][   T24] usb 6-1: config 0 descriptor??
[ 1320.053546][ T1935] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaa
[ 1320.188818][   T24] usbhid 6-1:0.0: can't add hid device: -71
[ 1320.211302][ T1943] /dev/nullb0: Can't open blockdev
[ 1320.217510][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1320.251616][   T24] usb 6-1: USB disconnect, device number 9
[ 1320.409781][ T1947] hfs: can't find a HFS filesystem on dev rnullb0
[ 1320.690621][   T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1320.804878][ T1953] hfs: can't find a HFS filesystem on dev rnullb0
[ 1320.863023][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1320.863057][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1320.863099][   T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1320.863145][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1320.866453][   T24] usb 6-1: config 0 descriptor??
[ 1321.285475][   T24] keytouch 0003:0926:3333.0052: fixing up Keytouch IEC report descriptor
[ 1321.327125][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0052/input/input95
[ 1321.473961][   T24] keytouch 0003:0926:3333.0052: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[ 1321.535308][   T24] usb 6-1: USB disconnect, device number 10
[ 1321.609898][ T1960] fido_id[1960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1321.732788][ T1919] /dev/rnullb0: Can't open blockdev
[ 1322.026892][ T1962] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1322.037856][ T1962] cramfs: wrong magic
[ 1322.264425][ T1965] openvswitch: netlink: IP tunnel dst address not specified
[ 1322.819105][ T1983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9193'.
[ 1322.959688][ T1988] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1323.044949][ T1987] overlayfs: missing 'lowerdir'
[ 1323.122878][ T1945] syz.8.9181: vmalloc error: size 8192000, failed to allocated page array size 16000, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1323.141390][ T1945] CPU: 1 UID: 0 PID: 1945 Comm: syz.8.9181 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) 
[ 1323.141416][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1323.141427][ T1945] Call Trace:
[ 1323.141437][ T1945]  <TASK>
[ 1323.141446][ T1945]  dump_stack_lvl+0x189/0x250
[ 1323.141481][ T1945]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1323.141500][ T1945]  ? __pfx__printk+0x10/0x10
[ 1323.141519][ T1945]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1323.141548][ T1945]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1323.141571][ T1945]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1323.141597][ T1945]  warn_alloc+0x214/0x310
[ 1323.141629][ T1945]  ? __pfx_warn_alloc+0x10/0x10
[ 1323.141659][ T1945]  ? __get_vm_area_node+0x28f/0x300
[ 1323.141683][ T1945]  ? vb2_vmalloc_alloc+0xef/0x340
[ 1323.141711][ T1945]  __vmalloc_node_range_noprof+0x67e/0x12f0
[ 1323.141771][ T1945]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1323.141792][ T1945]  ? vb2_vmalloc_alloc+0xef/0x340
[ 1323.141811][ T1945]  ? __get_vm_area_node+0x28f/0x300
[ 1323.141829][ T1945]  ? vb2_vmalloc_alloc+0xef/0x340
[ 1323.141848][ T1945]  __vmalloc_node_range_noprof+0x56a/0x12f0
[ 1323.141869][ T1945]  ? vb2_vmalloc_alloc+0xef/0x340
[ 1323.141911][ T1945]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1323.141934][ T1945]  ? __kasan_kmalloc+0x93/0xb0
[ 1323.141956][ T1945]  vmalloc_user_noprof+0xad/0xf0
[ 1323.141974][ T1945]  ? vb2_vmalloc_alloc+0xef/0x340
[ 1323.141993][ T1945]  vb2_vmalloc_alloc+0xef/0x340
[ 1323.142009][ T1945]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[ 1323.142025][ T1945]  __vb2_queue_alloc+0x9bf/0x15a0
[ 1323.142061][ T1945]  vb2_core_create_bufs+0x765/0xde0
[ 1323.142091][ T1945]  ? __pfx_vb2_core_create_bufs+0x10/0x10
[ 1323.142117][ T1945]  ? vb2_set_flags_and_caps+0x309/0x5f0
[ 1323.142150][ T1945]  vb2_create_bufs+0x5b9/0xae0
[ 1323.142183][ T1945]  ? __pfx_vb2_create_bufs+0x10/0x10
[ 1323.142212][ T1945]  ? v4l_sanitize_format+0x5d6/0x9f0
[ 1323.142258][ T1945]  v4l_create_bufs+0x193/0x2a0
[ 1323.142287][ T1945]  __video_do_ioctl+0xc9b/0xdb0
[ 1323.142317][ T1945]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1323.142348][ T1945]  video_usercopy+0x86e/0x14f0
[ 1323.142378][ T1945]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1323.142396][ T1945]  ? __pfx_video_usercopy+0x10/0x10
[ 1323.142426][ T1945]  ? __fget_files+0x2a/0x420
[ 1323.142455][ T1945]  ? __fget_files+0x2a/0x420
[ 1323.142478][ T1945]  ? __fget_files+0x3a0/0x420
[ 1323.142520][ T1945]  v4l2_ioctl+0x18a/0x1e0
[ 1323.142539][ T1945]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1323.142556][ T1945]  __se_sys_ioctl+0xfc/0x170
[ 1323.142580][ T1945]  do_syscall_64+0xfa/0x3b0
[ 1323.142600][ T1945]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1323.142624][ T1945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1323.142643][ T1945]  ? clear_bhb_loop+0x60/0xb0
[ 1323.142663][ T1945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1323.142681][ T1945] RIP: 0033:0x7f1cb9d8e929
[ 1323.142699][ T1945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1323.142712][ T1945] RSP: 002b:00007f1cbac64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1323.142731][ T1945] RAX: ffffffffffffffda RBX: 00007f1cb9fb5fa0 RCX: 00007f1cb9d8e929
[ 1323.142744][ T1945] RDX: 0000200000000340 RSI: 00000000c100565c RDI: 0000000000000003
[ 1323.142762][ T1945] RBP: 00007f1cb9e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 1323.142773][ T1945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1323.142783][ T1945] R13: 0000000000000000 R14: 00007f1cb9fb5fa0 R15: 00007ffe273b2ed8
[ 1323.142811][ T1945]  </TASK>
[ 1323.142852][ T1945] Mem-Info:
[ 1323.586284][ T1945] active_anon:12457 inactive_anon:3 isolated_anon:0
[ 1323.586284][ T1945]  active_file:7068 inactive_file:54767 isolated_file:0
[ 1323.586284][ T1945]  unevictable:769 dirty:100 writeback:0
[ 1323.586284][ T1945]  slab_reclaimable:6837 slab_unreclaimable:106415
[ 1323.586284][ T1945]  mapped:25695 shmem:5522 pagetables:2367
[ 1323.586284][ T1945]  sec_pagetables:0 bounce:0
[ 1323.586284][ T1945]  kernel_misc_reclaimable:0
[ 1323.586284][ T1945]  free:1172230 free_pcp:15096 free_cma:0
[ 1323.631695][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1323.646258][ T1945] Node 0 active_anon:49728kB inactive_anon:12kB active_file:28228kB inactive_file:218760kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:102748kB dirty:400kB writeback:0kB shmem:20552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14004kB pagetables:9104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1323.679861][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1323.717332][ T1945] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1323.749090][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1323.800036][ T1945] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1323.828891][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1323.931917][ T1945] lowmem_reserve[]: 0 2497 2498 2498 2498
[ 1323.937786][ T1945] Node 0 DMA32 free:762496kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49676kB inactive_anon:12kB active_file:28228kB inactive_file:217436kB unevictable:1540kB writepending:400kB present:3129332kB managed:2557540kB mlocked:4kB bounce:0kB free_pcp:48576kB local_pcp:20636kB free_cma:0kB
[ 1323.970122][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1324.010027][ T1945] lowmem_reserve[]: 0 0 1 1 1
[ 1324.014836][ T1945] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB
[ 1324.043886][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1324.084970][ T2017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9199'.
[ 1324.131073][ T2017] netlink: 'syz.5.9199': attribute type 1 has an invalid length.
[ 1324.142969][ T1945] lowmem_reserve[]: 0 0 0 0 0
[ 1324.147954][ T1945] Node 1 Normal free:3910968kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:308kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12512kB local_pcp:0kB free_cma:0kB
[ 1324.179020][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1324.197175][ T1945] lowmem_reserve[]: 0 0 0 0 0
[ 1324.204190][ T1945] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1324.246122][ T1945] Node 0 DMA32: 1136*4kB (UME) 678*8kB (ME) 1001*16kB (UME) 765*32kB (UME) 522*64kB (ME) 182*128kB (ME) 87*256kB (UME) 32*512kB (UME) 8*1024kB (ME) 5*2048kB (UM) 146*4096kB (M) = 762272kB
[ 1324.290090][ T1945] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1324.350470][T28907] usb 5-1: new low-speed USB device number 51 using dummy_hcd
[ 1324.354458][ T1945] Node 1 Normal: 183*4kB (UME) 37*8kB (UME) 41*16kB (UME) 255*32kB (UME) 109*64kB (UE) 25*128kB (UE) 12*256kB (UME) 6*512kB (UME) 6*1024kB (ME) 4*2048kB (UME) 945*4096kB (M) = 3911220kB
[ 1324.488180][ T1945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1324.510080][ T1945] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1324.519517][ T1945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1324.532247][T28907] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1324.544457][ T1945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1324.552588][T28907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1324.578898][T28907] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1324.594555][ T1945] 67359 total pagecache pages
[ 1324.599865][ T1945] 3 pages in swap cache
[ 1324.617858][T28907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1324.640006][ T1945] Free swap  = 124984kB
[ 1324.644258][ T1945] Total swap = 124996kB
[ 1324.645036][T28907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1324.648413][ T1945] 2097051 pages RAM
[ 1324.648426][ T1945] 0 pages HighMem/MovableOnly
[ 1324.648439][ T1945] 425688 pages reserved
[ 1324.648446][ T1945] 0 pages cma reserved
[ 1324.713517][T28907] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1324.726120][T28907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1324.737591][T28907] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1324.751513][T28907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1324.775909][T28907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1324.795700][T28907] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1324.803441][T28907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1324.828102][T28907] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1324.845262][T28907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1324.857154][T28907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1324.878671][T28907] usb 5-1: string descriptor 0 read error: -22
[ 1324.887458][T28907] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1324.905911][T28907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1324.969335][T28907] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1325.135896][ T2018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1325.162072][ T2018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1325.291639][   T30] audit: type=1804 audit(1750668144.847:9455): pid=2050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.9207" name="bus" dev="ramfs" ino=157283 res=1 errno=0
[ 1325.383283][T32302] usb 5-1: USB disconnect, device number 51
[ 1325.630093][   T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1325.792014][   T43] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[ 1325.807965][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1325.840315][   T43] usb 6-1: config 0 descriptor??
[ 1325.853598][   T43] gspca_main: sunplus-2.14.0 probing 055f:c420
[ 1326.052584][ T2053] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[ 1326.383012][   T43] gspca_sunplus: reg_w_riv err -110
[ 1326.388499][   T43] sunplus 6-1:0.0: probe with driver sunplus failed with error -110
[ 1327.866182][ T2083] x_tables: duplicate underflow at hook 1
[ 1328.291998][T26027] usb 6-1: USB disconnect, device number 11
[ 1329.420542][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1329.432115][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1329.441347][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1329.458023][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1329.468771][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1329.882080][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1329.977281][ T2141] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1330.009262][ T2141] cramfs: wrong magic
[ 1330.129795][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1330.165151][ T2119] orangefs_mount: mount request failed with -4
[ 1330.424355][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1330.573653][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1330.647670][ T2153] ntfs3(rnullb0): Primary boot signature is not NTFS.
[ 1330.679566][ T2153] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[ 1330.958189][ T2122] chnl_net:caif_netlink_parms(): no params data found
[ 1331.578562][ T2122] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1331.590275][ T5835] Bluetooth: hci4: command tx timeout
[ 1331.620333][ T2122] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1331.628139][ T2122] bridge_slave_0: entered allmulticast mode
[ 1331.680201][ T2122] bridge_slave_0: entered promiscuous mode
[ 1331.759362][ T2122] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1331.776288][ T2122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1331.813935][ T2122] bridge_slave_1: entered allmulticast mode
[ 1331.846886][ T2122] bridge_slave_1: entered promiscuous mode
[ 1331.892228][   T13] bridge_slave_1: left allmulticast mode
[ 1331.902933][   T13] bridge_slave_1: left promiscuous mode
[ 1331.950630][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1331.993422][   T13] bridge_slave_0: left allmulticast mode
[ 1331.999127][   T13] bridge_slave_0: left promiscuous mode
[ 1332.036682][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1332.118609][ T2195] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1332.139112][ T2195] /dev/rnullb0: Can't open blockdev
[ 1332.756636][T19393] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1332.824554][   T13] team0: Port device geneve1 removed
[ 1332.910872][T19393] usb 6-1: Using ep0 maxpacket: 32
[ 1332.919368][T19393] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1332.933042][T19393] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1332.958935][T19393] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1332.968378][T19393] usb 6-1: Product: syz
[ 1332.972799][T19393] usb 6-1: Manufacturer: syz
[ 1332.977455][T19393] usb 6-1: SerialNumber: syz
[ 1332.987202][T19393] usb 6-1: config 0 descriptor??
[ 1332.998295][ T2200] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1333.226134][ T2196] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 563
[ 1333.313055][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1333.329402][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1333.344425][   T13] bond0 (unregistering): Released all slaves
[ 1333.592671][   T13] tipc: Left network mode
[ 1333.623596][ T2122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1333.644085][ T5890] usb 6-1: USB disconnect, device number 12
[ 1333.671394][ T5835] Bluetooth: hci4: command tx timeout
[ 1333.725935][ T2122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1333.924712][ T2207] netlink: 'syz.8.9231': attribute type 29 has an invalid length.
[ 1333.971206][ T2207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1334.010195][ T2207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1334.048013][ T2122] team0: Port device team_slave_0 added
[ 1334.072773][ T2209] netlink: 'syz.8.9231': attribute type 29 has an invalid length.
[ 1334.132704][ T2122] team0: Port device team_slave_1 added
[ 1334.210110][   T43] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[ 1334.391781][   T43] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1334.406088][   T43] usb 9-1: not running at top speed; connect to a high speed hub
[ 1334.431570][   T43] usb 9-1: config 3 has an invalid interface number: 104 but max is 1
[ 1334.451297][   T43] usb 9-1: config 3 has an invalid interface number: 210 but max is 1
[ 1334.459569][   T43] usb 9-1: config 3 has no interface number 0
[ 1334.468427][   T43] usb 9-1: config 3 has no interface number 1
[ 1334.476781][   T13] hsr_slave_0: left promiscuous mode
[ 1334.509333][   T13] hsr_slave_1: left promiscuous mode
[ 1334.515513][   T43] usb 9-1: config 3 interface 104 has no altsetting 0
[ 1334.528963][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1334.536754][   T43] usb 9-1: config 3 interface 210 has no altsetting 0
[ 1334.548975][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1334.567202][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1334.578923][   T43] usb 9-1: New USB device found, idVendor=07b8, idProduct=4000, bcdDevice=11.ff
[ 1334.601323][   T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1334.609804][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1334.619664][   T43] usb 9-1: Product: syz
[ 1334.629784][   T43] usb 9-1: Manufacturer: syz
[ 1334.635821][   T43] usb 9-1: SerialNumber: syz
[ 1334.665846][   T13] veth0_macvtap: left promiscuous mode
[ 1334.673215][   T13] veth1_vlan: left promiscuous mode
[ 1334.678754][   T13] veth0_vlan: left promiscuous mode
[ 1335.180098][T28907] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[ 1335.280670][   T43] kaweth 9-1:3.104: Firmware present in device.
[ 1335.365074][T28907] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1335.388457][T28907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1335.399456][T28907] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1335.411905][T28907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1335.424104][T28907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1335.440024][T28907] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1335.447481][T28907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1335.458868][T28907] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1335.471935][T28907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1335.475929][ T2207] netlink: 500 bytes leftover after parsing attributes in process `syz.8.9231'.
[ 1335.483522][T28907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1335.510612][ T2207] unsupported nla_type 58
[ 1335.530036][T28907] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1335.537646][T28907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1335.553315][T28907] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1335.565533][T28907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1335.576760][T28907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1335.601471][T28907] usb 6-1: string descriptor 0 read error: -22
[ 1335.608130][T28907] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1335.620761][T28907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1335.673710][T28907] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1335.752039][ T5835] Bluetooth: hci4: command tx timeout
[ 1335.888210][ T2230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1335.905645][ T2230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1335.929287][T28907] usb 6-1: USB disconnect, device number 13
[ 1335.976313][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1336.082101][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1336.908189][ T2245] NILFS (rnullb0): couldn't find nilfs on the device
[ 1336.977973][ T2122] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1336.985340][ T2122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1337.011259][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1337.017822][ T2122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1337.040597][ T2223] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1337.050070][ T2223] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1337.060742][ T2223] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1337.079225][ T2122] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1337.086604][ T2122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1337.112584][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1337.130938][ T2122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1337.148300][ T2207] batadv_slave_0: entered promiscuous mode
[ 1337.187646][ T2247] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9237'.
[ 1337.191850][ T2241] netlink: 'syz.5.9236': attribute type 29 has an invalid length.
[ 1337.197544][ T2247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9237'.
[ 1337.247601][   T43] kaweth 9-1:3.104: Error reading configuration (-71), no net device created
[ 1337.273500][   T43] kaweth 9-1:3.104: probe with driver kaweth failed with error -5
[ 1337.358049][   T43] kaweth 9-1:3.210: Firmware present in device.
[ 1337.366812][   T43] kaweth 9-1:3.210: Error reading configuration (-71), no net device created
[ 1337.368737][ T2214] batadv_slave_0: left promiscuous mode
[ 1337.377076][   T43] kaweth 9-1:3.210: probe with driver kaweth failed with error -5
[ 1337.394806][   T43] usb 9-1: USB disconnect, device number 9
[ 1337.403755][ T2242] netlink: 'syz.5.9236': attribute type 29 has an invalid length.
[ 1337.412449][ T2243] netlink: 'syz.5.9236': attribute type 29 has an invalid length.
[ 1337.428426][ T2122] hsr_slave_0: entered promiscuous mode
[ 1337.448694][ T2122] hsr_slave_1: entered promiscuous mode
[ 1337.479333][ T2122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1337.519190][ T2122] Cannot create hsr debugfs directory
[ 1337.533524][ T2244] netlink: 'syz.5.9236': attribute type 29 has an invalid length.
[ 1337.825009][ T2257] /dev/rnullb0: Can't open blockdev
[ 1337.831116][ T5835] Bluetooth: hci4: command tx timeout
[ 1338.111708][ T2263] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9241'.
[ 1338.280172][T28907] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1338.390392][   T43] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1338.470524][T28907] usb 9-1: too many configurations: 33, using maximum allowed: 8
[ 1338.533573][T28907] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1338.543867][T28907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1338.552980][T28907] usb 9-1: Product: syz
[ 1338.557171][T28907] usb 9-1: Manufacturer: syz
[ 1338.558300][   T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1338.561824][T28907] usb 9-1: SerialNumber: syz
[ 1338.575483][T28907] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1338.605479][   T43] usb 6-1: config 0 has no interface number 0
[ 1338.612803][T32302] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1338.622082][   T43] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1338.622115][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1338.645913][   T43] usb 6-1: config 0 descriptor??
[ 1338.692356][   T43] cp210x 6-1:0.1: cp210x converter detected
[ 1338.781318][ T2122] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1338.806096][ T2122] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1338.829199][ T2122] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1338.852707][ T2122] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1339.009603][ T2122] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1339.069080][ T2122] 8021q: adding VLAN 0 to HW filter on device team0
[ 1339.078334][   T43] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32
[ 1339.100838][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1339.108005][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1339.143505][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1339.150740][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1339.316769][ T2122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1339.336890][ T2122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1339.348321][   T43] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1339.505137][   T43] usb 6-1: USB disconnect, device number 14
[ 1339.550938][   T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1339.747021][   T43] cp210x 6-1:0.1: device disconnected
[ 1339.750989][T28907] usb 9-1: USB disconnect, device number 10
[ 1339.772718][T32302] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 1339.779837][T32302] ath9k_htc: Failed to initialize the device
[ 1339.799741][T28907] usb 9-1: ath9k_htc: USB layer deinitialized
[ 1339.951172][ T2122] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1340.535891][ T2122] veth0_vlan: entered promiscuous mode
[ 1340.602211][ T2122] veth1_vlan: entered promiscuous mode
[ 1340.734099][ T2122] veth0_macvtap: entered promiscuous mode
[ 1340.763750][ T2122] veth1_macvtap: entered promiscuous mode
[ 1340.817129][ T2122] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1340.842482][ T2122] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1340.873100][ T2122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.885455][ T2122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.896505][ T2122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.905506][ T2122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1341.082608][ T2325] /dev/rnullb0: Can't open blockdev
[ 1341.090962][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1341.117488][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1341.165807][ T4058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1341.184665][ T4058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1341.330697][   T92] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1341.540172][   T92] usb 9-1: Using ep0 maxpacket: 8
[ 1341.970049][T28907] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[ 1342.121720][T25996] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1342.134062][T25996] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1342.142844][ T2345] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1342.149860][T25996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1342.149861][ T2345] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1342.191087][T25996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1342.210959][T25996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1342.468213][  T163] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1342.577615][  T163] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1342.707089][  T163] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1342.980568][  T163] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1343.337335][ T2341] chnl_net:caif_netlink_parms(): no params data found
[ 1343.348783][T28907] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1343.353466][  T163] bridge_slave_1: left allmulticast mode
[ 1343.362685][  T163] bridge_slave_1: left promiscuous mode
[ 1343.369488][T28907] usb 5-1: no configurations
[ 1343.375917][  T163] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1343.378514][T28907] usb 5-1: can't read configurations, error -22
[ 1343.393016][  T163] bridge_slave_0: left allmulticast mode
[ 1343.400737][  T163] bridge_slave_0: left promiscuous mode
[ 1343.407707][  T163] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1343.749402][  T163] team0: Port device geneve1 removed
[ 1343.993651][   T92] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1344.011164][   T92] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1344.026621][   T92] usb 9-1: can't read configurations, error -71
[ 1344.139165][  T163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1344.159438][  T163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1344.211986][  T163] bond0 (unregistering): Released all slaves
[ 1344.288277][ T2353] netlink: 'syz.4.9255': attribute type 29 has an invalid length.
[ 1344.315876][T25996] Bluetooth: hci1: command tx timeout
[ 1344.325464][ T2355] netlink: 'syz.4.9255': attribute type 29 has an invalid length.
[ 1344.336117][ T1686] IPVS: starting estimator thread 0...
[ 1344.388302][ T2353] NILFS (rnullb0): couldn't find nilfs on the device
[ 1344.430249][ T2358] netlink: 'syz.4.9255': attribute type 29 has an invalid length.
[ 1344.439058][  T163] tipc: Left network mode
[ 1344.481001][ T2367] IPVS: using max 52 ests per chain, 124800 per kthread
[ 1344.492179][ T2360] netlink: 'syz.4.9255': attribute type 29 has an invalid length.
[ 1344.669126][ T2372] binder: BINDER_SET_CONTEXT_MGR already set
[ 1344.683758][ T2372] binder: 2371:2372 ioctl 4018620d 200000000040 returned -16
[ 1344.713088][ T2372] binder: 2371:2372 ioctl 40046210 ffffffffffffffff returned -14
[ 1344.746427][ T2341] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1344.764364][ T2341] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1344.812665][ T2341] bridge_slave_0: entered allmulticast mode
[ 1344.838800][ T2341] bridge_slave_0: entered promiscuous mode
[ 1344.858385][ T2341] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1344.877543][ T2341] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1344.889394][ T2341] bridge_slave_1: entered allmulticast mode
[ 1344.908945][ T2341] bridge_slave_1: entered promiscuous mode
[ 1344.918885][ T2382] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1344.930318][ T2382] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1345.025019][ T2384] syz.8.9265: attempt to access beyond end of device
[ 1345.025019][ T2384] nbd8: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1345.048827][ T2384] SQUASHFS error: Failed to read block 0x0: -5
[ 1345.056401][ T2384] unable to read squashfs_super_block
[ 1345.105110][ T2387] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1345.112603][ T2387] VFS: Can't find a romfs filesystem on dev rnullb0.
[ 1345.112603][ T2387] 
[ 1345.415193][  T163] hsr_slave_0: left promiscuous mode
[ 1345.440379][  T163] hsr_slave_1: left promiscuous mode
[ 1345.446638][  T163] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1345.467944][  T163] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1345.481141][  T163] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1345.491993][T28907] usb 9-1: new low-speed USB device number 13 using dummy_hcd
[ 1345.500227][  T163] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1345.564779][  T163] veth1_macvtap: left promiscuous mode
[ 1345.581334][  T163] veth0_macvtap: left promiscuous mode
[ 1345.587038][  T163] veth1_vlan: left promiscuous mode
[ 1345.604472][  T163] veth0_vlan: left promiscuous mode
[ 1345.665530][T28907] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1345.694384][T28907] usb 9-1: config 0 has no interface number 0
[ 1345.714740][T28907] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1345.727261][ T2421] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1345.755174][T28907] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1345.760413][ T2421] /dev/rnullb0: Can't open blockdev
[ 1345.790319][T28907] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1345.825048][T28907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1345.854833][T28907] usb 9-1: config 0 descriptor??
[ 1345.870890][ T2393] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1345.892489][T28907] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1345.941893][   T92] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1346.089337][T28907] usb 9-1: USB disconnect, device number 13
[ 1346.095374][    C0] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1346.110119][   T92] usb 5-1: device descriptor read/64, error -71
[ 1346.227217][ T2437] /dev/rnullb0: Can't open blockdev
[ 1346.370117][   T92] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1346.395593][T25996] Bluetooth: hci1: command tx timeout
[ 1346.459354][ T2447] /dev/rnullb0: Can't open blockdev
[ 1346.542859][   T92] usb 5-1: device descriptor read/64, error -71
[ 1346.671435][   T92] usb usb5-port1: attempt power cycle
[ 1346.977053][  T163] team0 (unregistering): Port device team_slave_1 removed
[ 1347.050794][   T92] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1347.068870][  T163] team0 (unregistering): Port device team_slave_0 removed
[ 1347.087270][   T92] usb 5-1: device descriptor read/8, error -71
[ 1347.247525][ T2457] overlay: ./file0 is not a directory
[ 1347.260692][ T2457] /dev/rnullb0: Can't open blockdev
[ 1347.380431][   T92] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1347.394089][   T92] usb 5-1: device descriptor read/8, error -71
[ 1347.520649][T13875] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1347.530322][   T92] usb usb5-port1: unable to enumerate USB device
[ 1347.680355][T13875] usb 6-1: Using ep0 maxpacket: 8
[ 1347.692969][T13875] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1347.704245][T13875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1347.731614][T13875] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1347.738846][T13875] pvrusb2: **********
[ 1347.747727][T13875] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1347.758288][T13875] pvrusb2: Important functionality might not be entirely working.
[ 1347.767189][T13875] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1347.779488][T13875] pvrusb2: **********
[ 1347.931599][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1347.951370][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1347.968652][ T2341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1347.984849][ T2341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1348.064480][ T2344] pvrusb2: Invalid write control endpoint
[ 1348.241295][ T2344] pvrusb2: Invalid write control endpoint
[ 1348.247379][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1348.272816][ T2341] team0: Port device team_slave_0 added
[ 1348.283566][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1348.307004][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1348.326769][ T2344] pvrusb2: Device being rendered inoperable
[ 1348.340174][ T2341] team0: Port device team_slave_1 added
[ 1348.356963][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1348.380808][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1348.407268][ T2344] pvrusb2: Attached sub-driver cx25840
[ 1348.429167][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1348.450463][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1348.477977][T25996] Bluetooth: hci1: command tx timeout
[ 1348.518079][ T2341] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1348.526644][ T2341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1348.572977][ T2341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1348.617158][ T2341] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1348.630549][ T2341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1348.656644][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1348.716602][ T2341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1348.892270][ T2341] hsr_slave_0: entered promiscuous mode
[ 1348.912124][ T2341] hsr_slave_1: entered promiscuous mode
[ 1348.926516][ T2341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1348.944755][ T2341] Cannot create hsr debugfs directory
[ 1349.120179][ T5890] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1349.282814][ T5890] usb 5-1: too many configurations: 9, using maximum allowed: 8
[ 1349.334001][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1349.350195][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1349.379764][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1349.388290][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1349.398280][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1349.412919][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1349.428753][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1349.438185][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1349.483494][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1349.502001][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1349.519731][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1349.560201][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1349.575530][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1349.591190][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1349.622831][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1349.646529][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1349.663299][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1349.677528][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1349.686302][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1349.700078][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1349.728526][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1349.741612][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1349.780295][ T5890] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1349.810232][ T5890] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1349.828443][ T5890] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1349.856654][ T5890] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1349.910097][ T5890] usb 5-1: Product: syz
[ 1349.914323][ T5890] usb 5-1: Manufacturer: syz
[ 1349.918932][ T5890] usb 5-1: SerialNumber: syz
[ 1349.960963][ T5890] usb 5-1: config 0 descriptor??
[ 1349.987869][ T5890] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[ 1350.207642][   T24] usb 5-1: USB disconnect, device number 58
[ 1350.237743][   T24] yurex 5-1:0.0: USB YUREX #0 now disconnected
[ 1350.251046][ T5890] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[ 1350.279020][   T43] usb 6-1: USB disconnect, device number 15
[ 1350.418592][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1350.465740][ T5890] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1350.496258][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.521969][ T5890] usb 9-1: config 0 descriptor??
[ 1350.541680][ T2500] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[ 1350.558669][T25996] Bluetooth: hci1: command tx timeout
[ 1350.656438][ T2341] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1350.690653][ T2341] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1350.704867][ T2341] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1350.718349][ T2341] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1350.948925][ T2522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1350.987696][ T2341] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1350.993540][ T5890] elan 0003:04F3:0755.0053: unknown main item tag 0x0
[ 1351.022687][ T5890] elan 0003:04F3:0755.0053: item fetching failed at offset 3/5
[ 1351.050525][ T2341] 8021q: adding VLAN 0 to HW filter on device team0
[ 1351.078225][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1351.085481][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1351.090875][ T2522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1351.109410][ T5890] elan 0003:04F3:0755.0053: Hid Parse failed
[ 1351.127133][ T2522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1351.140289][ T5890] elan 0003:04F3:0755.0053: probe with driver elan failed with error -22
[ 1351.164984][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1351.172209][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1351.180244][T13875] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1351.205972][ T2522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1351.210086][ T5890] usb 9-1: USB disconnect, device number 14
[ 1351.383436][T13875] usb 5-1: config 0 has no interfaces?
[ 1351.410655][T13875] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[ 1351.420437][T13875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1351.437232][ T2522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1351.468035][ T2522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1351.477209][T13875] usb 5-1: config 0 descriptor??
[ 1351.492616][ T2544] NILFS (rnullb0): couldn't find nilfs on the device
[ 1351.726960][T28907] usb 5-1: USB disconnect, device number 59
[ 1351.857244][ T2341] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1352.002538][ T5890] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[ 1352.172116][ T5890] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1352.199036][ T5890] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1352.211004][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.219088][ T5890] usb 6-1: Product: syz
[ 1352.233635][ T5890] usb 6-1: Manufacturer: syz
[ 1352.238574][ T5890] usb 6-1: SerialNumber: syz
[ 1352.322061][ T2341] veth0_vlan: entered promiscuous mode
[ 1352.346807][ T2341] veth1_vlan: entered promiscuous mode
[ 1352.469416][ T2341] veth0_macvtap: entered promiscuous mode
[ 1352.507087][ T2341] veth1_macvtap: entered promiscuous mode
[ 1352.575093][ T2341] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1352.579739][ T2600] omfs: Invalid superblock (0)
[ 1352.614679][ T2341] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1352.663558][ T2341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.679649][ T2602] binder: 2601:2602 ioctl c00c620f 0 returned -14
[ 1352.682648][ T2341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.699269][ T2341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.708227][ T2341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.760936][   T43] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[ 1352.863870][ T5890] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 1352.888594][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1352.910468][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1352.953547][   T43] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1352.984447][   T43] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1353.006895][  T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1353.017017][  T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.025397][   T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1353.039096][   T43] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1353.041061][   T92] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1353.065744][   T43] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1353.077206][   T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1353.087417][   T43] usb 9-1: Product: syz
[ 1353.095800][   T43] usb 9-1: Manufacturer: syz
[ 1353.102136][   T43] usb 9-1: SerialNumber: syz
[ 1353.122659][   T43] usb 9-1: config 0 descriptor??
[ 1353.264668][   T92] usb 5-1: Using ep0 maxpacket: 8
[ 1353.271302][ T2563] affs: No valid root block on device md0
[ 1353.293478][   T92] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1353.315221][   T92] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1353.340262][   T92] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[ 1353.362231][   T92] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[ 1353.377944][   T92] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[ 1353.389608][   T92] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1353.409745][   T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1353.429368][   T92] hub 5-1:1.0: bad descriptor, ignoring hub
[ 1353.442838][   T92] hub 5-1:1.0: probe with driver hub failed with error -5
[ 1353.469257][   T92] cdc_wdm 5-1:1.0: skipping garbage
[ 1353.499073][   T92] cdc_wdm 5-1:1.0: skipping garbage
[ 1353.522983][   T92] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1354.029663][   T43] usb 9-1: USB disconnect, device number 15
[ 1355.800880][   T43] usb 5-1: USB disconnect, device number 60
[ 1355.956744][ T2680] /dev/rnullb0: Can't open blockdev
[ 1356.132893][ T2690] ieee802154 phy0 wpan0: encryption failed: -22
[ 1356.517464][ T2707] syz.8.9314: attempt to access beyond end of device
[ 1356.517464][ T2707] md0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1356.530496][ T2707] FAT-fs (md0): unable to read boot sector
[ 1356.987651][ T2725] Failed to get privilege flags for destination (handle=0x2:0x10)
[ 1357.580111][ T5890] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1357.592541][ T2738] zonefs (loop4) ERROR: Not a zoned block device
[ 1357.743528][ T5890] usb 9-1: Using ep0 maxpacket: 8
[ 1357.756757][ T5890] usb 9-1: config 1 interface 0 altsetting 178 endpoint 0x81 has an invalid bInterval 68, changing to 10
[ 1357.780116][ T5890] usb 9-1: config 1 interface 0 altsetting 178 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1357.800304][ T5890] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1357.823265][ T5890] usb 9-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40
[ 1357.852370][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1357.878626][ T5890] usb 9-1: Product: syz
[ 1357.887593][ T5890] usb 9-1: Manufacturer: syz
[ 1357.893265][ T5890] usb 9-1: SerialNumber: syz
[ 1358.407907][ T5890] usbhid 9-1:1.0: can't add hid device: -71
[ 1358.416534][ T5890] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[ 1358.432309][ T5890] usb 9-1: USB disconnect, device number 16
[ 1359.345913][ T2777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9334'.
[ 1359.701119][ T1686] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1359.800471][T28907] usb 6-1: USB disconnect, device number 16
[ 1359.830433][T28907] usblp0: removed
[ 1359.846919][ T2792] netlink: 'syz.8.9340': attribute type 12 has an invalid length.
[ 1359.865844][ T2792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9340'.
[ 1359.880179][ T1686] usb 5-1: Using ep0 maxpacket: 16
[ 1359.920396][ T1686] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1359.932102][ T1686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1359.944492][ T1686] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1359.954185][ T2792] ubi31: detaching mtd0
[ 1359.959196][ T1686] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1359.972564][ T1686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1359.981938][ T1686] usb 5-1: Product: syz
[ 1359.986184][ T1686] usb 5-1: Manufacturer: syz
[ 1359.987350][ T2792] ubi31: mtd0 is detached
[ 1359.993195][ T1686] usb 5-1: SerialNumber: syz
[ 1360.340088][T28907] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1360.421561][ T1686] usb 5-1: 0:2 : does not exist
[ 1360.470278][T28907] usb 6-1: device descriptor read/64, error -71
[ 1360.711325][T28907] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1360.852820][T28907] usb 6-1: device descriptor read/64, error -71
[ 1360.961630][T28907] usb usb6-port1: attempt power cycle
[ 1361.250754][ T1686] usb 5-1: 1:0: failed to get current value for ch 0 (-22)
[ 1361.295269][ T1686] usb 5-1: USB disconnect, device number 61
[ 1361.301564][T28907] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1361.331044][T28907] usb 6-1: device descriptor read/8, error -71
[ 1361.351924][T24963] udevd[24963]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1361.368992][T25996] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1361.380497][T25996] Bluetooth: hci0: Injecting HCI hardware error event
[ 1361.391825][ T5835] Bluetooth: hci0: hardware error 0x00
[ 1361.580080][T28907] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1361.600922][T28907] usb 6-1: device descriptor read/8, error -71
[ 1361.713608][T28907] usb usb6-port1: unable to enumerate USB device
[ 1361.817939][ T2822] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9347'.
[ 1362.015934][ T2825] syz.8.9348: attempt to access beyond end of device
[ 1362.015934][ T2825] md0: rw=4096, sector=2, nr_sectors = 2 limit=0
[ 1362.031420][ T2825] EXT4-fs (md0): unable to read superblock
[ 1362.090375][   T43] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1362.240244][   T43] usb 5-1: device descriptor read/64, error -71
[ 1362.500253][   T43] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1362.641400][   T43] usb 5-1: device descriptor read/64, error -71
[ 1362.761675][   T43] usb usb5-port1: attempt power cycle
[ 1363.100549][   T43] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1363.120949][   T43] usb 5-1: device descriptor read/8, error -71
[ 1363.326092][ T2883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1363.349522][T25996] Bluetooth: hci1: SCO packet for unknown connection handle 101
[ 1363.360412][   T43] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1363.437112][   T43] usb 5-1: device descriptor read/8, error -71
[ 1363.455082][ T2888] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9363'.
[ 1363.513574][ T5835] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1363.560981][   T43] usb usb5-port1: unable to enumerate USB device
[ 1364.876383][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1364.882859][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1364.903252][ T2926] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9374'.
[ 1365.400462][T13875] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1365.559163][ T2949] syz.6.9382: attempt to access beyond end of device
[ 1365.559163][ T2949] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1365.582594][ T1686] usb 9-1: new low-speed USB device number 17 using dummy_hcd
[ 1365.627793][ T2949] syz.6.9382: attempt to access beyond end of device
[ 1365.627793][ T2949] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0
[ 1365.675310][ T2949] Mount JFS Failure: -5
[ 1365.679559][ T2949] jfs_mount failed w/return code = -5
[ 1365.789059][ T1686] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1365.803374][ T1686] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1365.841106][ T1686] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1365.879075][ T1686] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1365.898715][ T2940] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1365.907710][ T1686] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1365.914728][ T2952] netlink: zone id is out of range
[ 1365.924402][ T2940] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1365.947390][ T1686] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1365.955343][ T1686] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1365.978058][ T2952] netlink: set zone limit has 4 unknown bytes
[ 1365.980117][ T1686] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1366.010324][ T1686] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1366.031704][ T1686] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1366.055780][ T1686] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1366.066226][ T1686] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1366.083430][ T1686] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1366.096927][ T1686] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1366.112357][ T1686] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1366.129717][ T1686] usb 9-1: string descriptor 0 read error: -22
[ 1366.140194][ T1686] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1366.149293][ T1686] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1366.203639][ T1686] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1366.412854][ T1686] usb 9-1: USB disconnect, device number 17
[ 1366.480706][ T2955] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1366.488542][ T2955] cramfs: wrong magic
[ 1366.561387][   T30] audit: type=1326 audit(1750668186.127:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2958 comm="syz.5.9386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f261e58e929 code=0x0
[ 1366.596158][ T2960] /dev/nullb0: Can't open blockdev
[ 1366.936028][ T2972] exFAT-fs (rnullb0): invalid boot record signature
[ 1366.943062][ T2972] exFAT-fs (rnullb0): failed to read boot sector
[ 1366.949413][ T2972] exFAT-fs (rnullb0): failed to recognize exfat type
[ 1367.320279][   T43] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1367.491594][   T43] usb 9-1: Using ep0 maxpacket: 32
[ 1367.498606][   T43] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[ 1367.523036][   T43] usb 9-1: config 0 has no interface number 0
[ 1367.532350][   T43] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1367.542790][   T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1367.569843][   T43] usb 9-1: Product: syz
[ 1367.574233][   T43] usb 9-1: Manufacturer: syz
[ 1367.578849][   T43] usb 9-1: SerialNumber: syz
[ 1367.606735][   T43] usb 9-1: config 0 descriptor??
[ 1367.618478][   T43] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1367.930781][   T43] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1367.946422][   T43] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1367.955825][    C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1367.982407][   T43] usb 9-1: USB disconnect, device number 18
[ 1368.030654][   T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1368.064445][   T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1368.091511][   T43] quatech2 9-1:0.51: device disconnected
[ 1368.140259][ T5890] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1368.302298][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1368.312774][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1368.323181][ T5890] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1368.332519][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1368.340711][ T5890] usb 5-1: SerialNumber: syz
[ 1368.480080][   T43] usb 9-1: new low-speed USB device number 19 using dummy_hcd
[ 1368.635499][   T43] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1368.643447][   T43] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1368.654487][   T43] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1368.668797][   T43] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1368.680366][   T43] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1368.701336][   T43] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1368.716429][   T43] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1368.728726][ T3014] gfs2: not a GFS2 filesystem
[ 1368.738916][   T43] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1368.752360][   T43] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1368.764126][   T43] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1368.777162][   T43] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1368.785050][   T43] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1368.803143][   T43] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1368.815626][   T43] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1368.827179][   T43] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1368.844054][   T43] usb 9-1: string descriptor 0 read error: -22
[ 1368.850520][   T43] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1368.859622][   T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1368.903561][   T43] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1369.096040][   T43] usb 9-1: USB disconnect, device number 19
[ 1369.273597][ T3029] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1369.287835][ T3029] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[ 1369.303201][ T3029] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1369.316614][ T3029] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[ 1369.405125][ T3037] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1369.413128][ T3037] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1369.427315][ T3037] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1369.434348][ T3037] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1369.590494][   T43] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1369.750378][   T43] usb 6-1: Using ep0 maxpacket: 8
[ 1369.765834][   T43] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1369.789124][   T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1369.800593][   T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1369.820387][   T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1369.837339][   T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1369.857313][   T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1369.867218][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1369.968676][ T3050] ufs: failed to set blocksize
[ 1369.979543][ T3052] ntfs3(rnullb0): Primary boot signature is not NTFS.
[ 1369.984870][ T3053] /dev/rnullb0: Can't open blockdev
[ 1369.987457][ T3052] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[ 1370.107877][   T43] usb 6-1: GET_CAPABILITIES returned 0
[ 1370.133306][   T43] usbtmc 6-1:16.0: can't read capabilities
[ 1370.166804][ T3060] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1370.172647][   T43] usb 6-1: USB disconnect, device number 21
[ 1370.196916][ T3058] binder: 3056:3058 ioctl c018620c 200000000640 returned -22
[ 1370.207550][ T3060] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1370.810088][   T43] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1370.887183][ T5890] usb 5-1: 0:2 : does not exist
[ 1370.918195][ T5890] usb 5-1: USB disconnect, device number 67
[ 1370.950184][T19393] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1370.966045][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1370.979609][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1370.984656][T24963] udevd[24963]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1370.996106][   T43] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1371.017334][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1371.031067][   T43] usb 6-1: config 0 descriptor??
[ 1371.123298][T19393] usb 9-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config
[ 1371.135068][T19393] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1371.149002][T19393] usb 9-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[ 1371.160212][T19393] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1371.173318][T19393] usb 9-1: config 0 descriptor??
[ 1371.194049][T19393] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1371.285516][   T43] usbhid 6-1:0.0: can't add hid device: -71
[ 1371.304108][   T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1371.334410][   T43] usb 6-1: USB disconnect, device number 22
[ 1371.395747][ T3082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1371.418847][ T3082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1371.437706][ T3101] program syz.5.9427 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1371.462077][ T3101] syz.5.9427: attempt to access beyond end of device
[ 1371.462077][ T3101] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 1371.697372][ T3117] syz.4.9430: attempt to access beyond end of device
[ 1371.697372][ T3117] loop4: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1372.214228][ T3138] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1372.222288][ T3138] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1372.293369][ T3142] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1372.314187][ T3142] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1372.815829][ T3164] Bluetooth: MGMT ver 1.23
[ 1372.940870][ T3173] batadv_slave_0: entered promiscuous mode
[ 1372.967263][ T3173] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1372.975089][ T3173] cramfs: wrong magic
[ 1372.981146][ T3172] batadv_slave_0: left promiscuous mode
[ 1373.744571][T13875] usb 9-1: USB disconnect, device number 20
[ 1374.104154][ T3202] /dev/rnullb0: Can't open blockdev
[ 1374.167503][ T3205] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.9456'.
[ 1374.256501][ T3207] devtmpfs: Too few inodes for current use
[ 1374.320078][   T43] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1374.480069][   T43] usb 5-1: Using ep0 maxpacket: 8
[ 1374.481850][   T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1374.505955][   T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1374.505990][   T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1374.535781][   T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1374.535843][   T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1374.535866][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1374.765478][   T43] usb 5-1: GET_CAPABILITIES returned 0
[ 1374.765535][   T43] usbtmc 5-1:16.0: can't read capabilities
[ 1375.089780][T28907] usb 5-1: USB disconnect, device number 68
[ 1375.140191][T19393] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1375.280127][T19393] usb 9-1: device descriptor read/64, error -71
[ 1375.520322][T19393] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 1375.632525][ T3231] binder: BC_ACQUIRE_RESULT not supported
[ 1375.638364][ T3231] binder: 3230:3231 ioctl c0306201 200000000580 returned -22
[ 1375.654039][ T3232] binder: BC_ACQUIRE_RESULT not supported
[ 1375.661429][T19393] usb 9-1: device descriptor read/64, error -71
[ 1375.670219][ T3232] binder: 3230:3232 ioctl c0306201 200000000580 returned -22
[ 1375.781014][T19393] usb usb9-port1: attempt power cycle
[ 1376.130101][T19393] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1376.150867][T19393] usb 9-1: device descriptor read/8, error -71
[ 1376.340364][   T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1376.390592][T19393] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 1376.420771][T19393] usb 9-1: device descriptor read/8, error -71
[ 1376.490371][   T43] usb 6-1: Using ep0 maxpacket: 32
[ 1376.497746][   T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1376.514045][   T43] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1376.523873][   T43] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1376.532760][T19393] usb usb9-port1: unable to enumerate USB device
[ 1376.539310][   T43] usb 6-1: Product: syz
[ 1376.544360][   T43] usb 6-1: Manufacturer: syz
[ 1376.549018][   T43] usb 6-1: SerialNumber: syz
[ 1376.560550][   T43] usb 6-1: config 0 descriptor??
[ 1376.566880][ T3251] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1376.799657][ T3251] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 563
[ 1376.843703][ T3259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9470'.
[ 1376.929888][ T3261] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1376.955985][ T3261] VFS: Can't find a romfs filesystem on dev rnullb0.
[ 1376.955985][ T3261] 
[ 1376.967317][T19393] usb 6-1: USB disconnect, device number 23
[ 1377.137940][ T3269] exFAT-fs (rnullb0): invalid boot record signature
[ 1377.160860][ T3269] exFAT-fs (rnullb0): failed to read boot sector
[ 1377.167258][ T3269] exFAT-fs (rnullb0): failed to recognize exfat type
[ 1377.218413][ T3271] Malformed UNC in devname
[ 1377.218413][ T3271] 
[ 1377.228277][ T3271] CIFS: VFS: Malformed UNC in devname
[ 1377.305247][ T3270] Process accounting resumed
[ 1377.625643][   T43] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 1377.716287][ T3284] syzkaller1: entered promiscuous mode
[ 1377.722146][ T3284] syzkaller1: entered allmulticast mode
[ 1377.793545][   T43] usb 5-1: Using ep0 maxpacket: 16
[ 1377.825614][   T43] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[ 1377.849851][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1377.876554][   T43] usb 5-1: config 0 has no interface number 0
[ 1377.895518][   T43] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1377.928688][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1377.944104][   T43] usb 5-1: Product: syz
[ 1377.948337][   T43] usb 5-1: Manufacturer: syz
[ 1377.959349][   T43] usb 5-1: SerialNumber: syz
[ 1377.993018][   T43] usb 5-1: config 0 descriptor??
[ 1378.050666][ T3303] syz.8.9483: attempt to access beyond end of device
[ 1378.050666][ T3303] nbd8: rw=4096, sector=2, nr_sectors = 2 limit=0
[ 1378.068263][ T3303] EXT4-fs (nbd8): unable to read superblock
[ 1378.211007][ T5890] usb 5-1: USB disconnect, device number 69
[ 1378.277232][ T3317] /dev/rnullb0: Can't open blockdev
[ 1378.417184][ T3326] /dev/rnullb0: Can't open blockdev
[ 1378.501207][ T3328] /dev/rnullb0: Can't open blockdev
[ 1378.661811][ T3333] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1378.672373][ T3333] /dev/rnullb0: Can't open blockdev
[ 1379.009331][ T3345] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1379.020471][T28907] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1379.024312][ T3345] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1379.170415][T28907] usb 5-1: Using ep0 maxpacket: 32
[ 1379.177621][T28907] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1379.197929][T28907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.216165][T28907] usb 5-1: config 0 descriptor??
[ 1379.347565][ T3352] netlink: 'syz.5.9499': attribute type 4 has an invalid length.
[ 1379.367888][ T3352] netlink: 'syz.5.9499': attribute type 4 has an invalid length.
[ 1379.387816][ T3352] NILFS (rnullb0): couldn't find nilfs on the device
[ 1379.425034][T28907] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1379.454270][T28907] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1379.472854][T28907] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1379.750139][   T30] audit: type=1326 audit(1750668199.297:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3365 comm="syz.8.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1cb9d8e929 code=0x7ffc0000
[ 1379.775399][   T30] audit: type=1326 audit(1750668199.307:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3365 comm="syz.8.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1cb9d8e929 code=0x7ffc0000
[ 1379.798690][   T30] audit: type=1326 audit(1750668199.307:9459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3365 comm="syz.8.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1cb9d8e929 code=0x7ffc0000
[ 1379.821693][   T30] audit: type=1326 audit(1750668199.357:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3365 comm="syz.8.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1cb9d8e929 code=0x7ffc0000
[ 1379.844829][   T30] audit: type=1326 audit(1750668199.357:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3365 comm="syz.8.9503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1cb9d8e929 code=0x7ffc0000
[ 1379.927279][ T3371] /dev/rnullb0: Can't open blockdev
[ 1380.171424][ T5890] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1380.340028][ T5890] usb 9-1: Using ep0 maxpacket: 32
[ 1380.348195][ T3379] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1380.372734][ T5890] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1380.382910][ T3379] cramfs: wrong magic
[ 1380.390194][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.398216][ T5890] usb 9-1: Product: syz
[ 1380.430231][ T5890] usb 9-1: Manufacturer: syz
[ 1380.434888][ T5890] usb 9-1: SerialNumber: syz
[ 1380.454570][ T5890] usb 9-1: config 0 descriptor??
[ 1380.487277][ T5890] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1380.720090][ T5890] gspca_stk1135: reg_w 0x3 err -71
[ 1380.726293][ T5890] gspca_stk1135: serial bus timeout: status=0x00
[ 1380.752657][ T5890] gspca_stk1135: Sensor write failed
[ 1380.758055][ T5890] gspca_stk1135: serial bus timeout: status=0x00
[ 1380.780368][ T5890] gspca_stk1135: Sensor write failed
[ 1380.790696][ T5890] gspca_stk1135: serial bus timeout: status=0x00
[ 1380.809733][ T5890] gspca_stk1135: Sensor read failed
[ 1380.830148][ T5890] gspca_stk1135: serial bus timeout: status=0x00
[ 1380.856531][ T5890] gspca_stk1135: Sensor read failed
[ 1380.882063][ T5890] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1380.889391][ T5890] gspca_stk1135: serial bus timeout: status=0x00
[ 1380.910122][ T5890] gspca_stk1135: Sensor read failed
[ 1380.915408][ T5890] gspca_stk1135: serial bus timeout: status=0x00
[ 1380.960529][ T5890] gspca_stk1135: Sensor read failed
[ 1380.965811][ T5890] gspca_stk1135: serial bus timeout: status=0x00
[ 1380.990598][ T5890] gspca_stk1135: Sensor write failed
[ 1380.996358][ T5890] gspca_stk1135: serial bus timeout: status=0x00
[ 1381.030082][ T5890] gspca_stk1135: Sensor write failed
[ 1381.035530][ T5890] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71
[ 1381.054355][ T5890] usb 9-1: USB disconnect, device number 25
[ 1381.193519][ T3414] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[ 1381.202503][ T3414] UDF-fs: Scanning with blocksize 4096 failed
[ 1381.222793][ T3416] syz.8.9516: attempt to access beyond end of device
[ 1381.222793][ T3416] md0: rw=4096, sector=2, nr_sectors = 2 limit=0
[ 1381.236554][ T3416] EXT4-fs (md0): unable to read superblock
[ 1382.591988][ T3453] /dev/rnullb0: Can't open blockdev
[ 1382.620496][    C1] vcan0: j1939_tp_rxtimer: 0xffff888024220800: rx timeout, send abort
[ 1382.629676][    C1] vcan0: j1939_tp_rxtimer: 0xffff888024223000: rx timeout, send abort
[ 1383.128819][    C1] vcan0: j1939_tp_rxtimer: 0xffff888024220800: abort rx timeout. Force session deactivation
[ 1383.141891][    C1] vcan0: j1939_tp_rxtimer: 0xffff888024223000: abort rx timeout. Force session deactivation
[ 1383.679400][ T3497] ntfs3(rnullb0): Primary boot signature is not NTFS.
[ 1383.692111][ T3497] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[ 1383.719648][ T3496] ntfs3(rnullb0): Primary boot signature is not NTFS.
[ 1383.726972][ T3496] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[ 1383.880292][ T5890] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1384.044054][ T5890] usb 9-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[ 1384.053470][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.062814][ T5890] usb 9-1: Product: syz
[ 1384.067029][ T5890] usb 9-1: Manufacturer: syz
[ 1384.077333][ T5890] usb 9-1: SerialNumber: syz
[ 1384.085297][ T5890] usb 9-1: config 0 descriptor??
[ 1384.228327][ T3508] Can't find a SQUASHFS superblock on rnullb0
[ 1385.225507][ T5890] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1385.250482][ T5890] asix 9-1:0.0: probe with driver asix failed with error -71
[ 1385.278437][ T5890] usb 9-1: USB disconnect, device number 26
[ 1385.514346][ T3516] Mount JFS Failure: -22
[ 1385.518943][ T3516] jfs_mount failed w/return code = -22
[ 1386.843420][ T3519] vivid-000: =================  START STATUS  =================
[ 1386.864040][ T3519] vivid-000: Test Pattern: 75% Colorbar
[ 1386.880886][ T3519] vivid-000: Fill Percentage of Frame: 4
[ 1386.886601][ T3519] vivid-000: Horizontal Movement: Move Right
[ 1386.908587][ T3519] vivid-000: Vertical Movement: Move Down Slow
[ 1386.924859][ T3519] vivid-000: OSD Text Mode: All
[ 1386.929790][ T3519] vivid-000: Show Border: false
[ 1386.940201][ T3519] vivid-000: Show Square: false
[ 1386.948132][ T3519] vivid-000: Sensor Flipped Horizontally: false
[ 1386.959406][ T3519] vivid-000: Sensor Flipped Vertically: false
[ 1386.970262][ T3519] vivid-000: Insert SAV Code in Image: true
[ 1386.988578][ T3519] vivid-000: Insert EAV Code in Image: false
[ 1387.012382][ T3519] vivid-000: Insert Video Guard Band: false
[ 1387.018454][ T3519] vivid-000: Reduced Framerate: false
[ 1387.055009][ T3519] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[ 1387.078574][ T3519] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[ 1387.100199][ T3519] vivid-000: Enable Capture Cropping: true grabbed
[ 1387.120155][ T3519] vivid-000: Enable Capture Composing: true grabbed
[ 1387.134317][ T3519] vivid-000: Enable Capture Scaler: true grabbed
[ 1387.141292][ T3519] vivid-000: Timestamp Source: End of Frame
[ 1387.147377][ T3519] vivid-000: Colorspace: SMPTE 170M
[ 1387.157731][ T3519] vivid-000: Transfer Function: Default
[ 1387.163718][ T3519] vivid-000: Y'CbCr Encoding: Default
[ 1387.169326][ T3519] vivid-000: HSV Encoding: Hue 0-179
[ 1387.179604][ T3519] vivid-000: Quantization: Default
[ 1387.185243][ T3519] vivid-000: Apply Alpha To Red Only: false
[ 1387.202874][ T3519] vivid-000: Standard Aspect Ratio: 14x9
[ 1387.209250][ T3519] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[ 1387.228394][ T3519] vivid-000: DV Timings: 640x480p59 inactive
[ 1387.239879][ T3519] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[ 1387.252148][ T3519] vivid-000: Maximum EDID Blocks: 256
[ 1387.257663][ T3519] vivid-000: Limited RGB Range (16-235): false
[ 1387.266421][ T3519] vivid-000: Rx RGB Quantization Range: Automatic
[ 1387.275403][ T3519] vivid-000: Power Present: 0x00000001
[ 1387.281252][ T3519] tpg source WxH: 720x576 (R'G'B)
[ 1387.286513][ T3519] tpg field: 4
[ 1387.290385][ T3519] tpg crop: (0,0)/64x64
[ 1387.294737][ T3519] tpg compose: (0,0)/16x16
[ 1387.299224][ T3519] tpg colorspace: 9
[ 1387.303374][ T3519] tpg transfer function: 7/7
[ 1387.308161][ T3519] tpg quantization: 1/1
[ 1387.313834][ T3519] tpg RGB range: 0/2
[ 1387.317803][ T3519] vivid-000: ==================  END STATUS  ==================
[ 1387.398343][ T3525] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[ 1387.400797][ T3527] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1387.431477][ T3527] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1387.628130][ T3531] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9555'.
[ 1387.936099][ T3539] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1387.943709][ T3539] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1388.044717][ T3541] syz_tun: entered allmulticast mode
[ 1388.063554][ T3541] dvmrp0: entered allmulticast mode
[ 1388.090441][T19393] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[ 1388.164354][ T3543] ISOFS: unsupported/invalid hardware sector size 4096
[ 1388.181635][ T3543] vxfs: WRONG superblock magic 00000000 at 1
[ 1388.188341][ T3543] vxfs: WRONG superblock magic 00000000 at 8
[ 1388.202083][ T3543] vxfs: can't find superblock.
[ 1388.244912][T19393] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1388.270118][T19393] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1388.282015][T19393] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1388.291375][T19393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1388.310541][T19393] usb 6-1: Product: syz
[ 1388.314787][T19393] usb 6-1: Manufacturer: syz
[ 1388.319408][T19393] usb 6-1: SerialNumber: syz
[ 1388.548330][ T3536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1388.562235][ T3536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1388.590201][ T3536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1388.601131][ T3536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1388.612244][ T3536] /dev/rnullb0: Can't open blockdev
[ 1388.622369][T19393] usb 6-1: 0:2 : does not exist
[ 1388.639226][T19393] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1388.675579][T19393] usb 6-1: USB disconnect, device number 24
[ 1388.730317][T24963] udevd[24963]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1389.178133][ T3549] /dev/rnullb0: Can't open blockdev
[ 1389.187183][ T3549] /dev/rnullb0: Can't open blockdev
[ 1389.524139][ T3560] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1389.915211][ T3577] /dev/rnullb0: Can't open blockdev
[ 1389.935104][ T3581] /dev/rnullb0: Can't open blockdev
[ 1389.942806][ T3583] /dev/rnullb0: Can't open blockdev
[ 1390.046356][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.052831][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.061568][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.081387][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.088381][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.094656][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.102400][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.108670][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.114772][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.122157][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.129329][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.135728][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.142617][ T3593] /dev/rnullb0: Can't open blockdev
[ 1390.148566][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.172634][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.179736][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.190845][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.198071][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.228326][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.238504][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.239594][ T3595] /dev/rnullb0: Can't open blockdev
[ 1390.251200][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.259155][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.265796][ T3598] /dev/rnullb0: Can't open blockdev
[ 1390.311624][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.317684][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.335108][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.341298][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.348733][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.355059][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.375413][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.387650][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.407800][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.421685][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.438507][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.449596][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.468773][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.483187][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.496092][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.514143][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.525391][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.533571][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.539688][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.546968][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.554072][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.561297][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.568299][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.575791][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.584478][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.611276][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.617081][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.623798][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.629637][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.642161][ T5835] Bluetooth: Wrong link type (-71)
[ 1390.644994][ T3611] /dev/rnullb0: Can't open blockdev
[ 1390.660519][ T3612] /dev/rnullb0: Can't open blockdev
[ 1390.685204][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.701529][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.718468][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.756578][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.762972][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.772365][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.778389][ T3616] /dev/rnullb0: Can't open blockdev
[ 1390.780752][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.791801][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.797967][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.825497][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.861173][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.867224][ T3591] /dev/rnullb0: Can't open blockdev
[ 1390.942925][ T3619] /dev/rnullb0: Can't open blockdev
[ 1391.073407][ T3624] /dev/rnullb0: Can't open blockdev
[ 1391.159283][ T3634] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1391.208709][ T3634] ptrace attach of "./syz-executor exec"[30147] was attempted by ""[3634]
[ 1391.470084][ T1686] usb 9-1: new full-speed USB device number 27 using dummy_hcd
[ 1391.640483][ T1686] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1391.649611][ T1686] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1391.694059][ T1686] usb 9-1: config 0 descriptor??
[ 1391.706780][ T1686] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1391.797102][ T3659] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9599'.
[ 1391.975430][   T30] audit: type=1326 audit(1750668211.537:9462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3663 comm="syz.4.9601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d1338e929 code=0x0
[ 1392.107038][ T3666] gfs2: not a GFS2 filesystem
[ 1392.127987][ T1686] gp8psk: usb out operation failed.
[ 1392.136612][ T1686] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1392.154176][ T1686] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1392.165698][ T3669] binder: 3668:3669 unknown command 0
[ 1392.178188][ T1686] usb 9-1: USB disconnect, device number 27
[ 1392.188283][ T3669] binder: 3668:3669 ioctl c0306201 200000000000 returned -22
[ 1392.442600][ T3673] FAT-fs (rnullb0): bogus logical sector size 64365
[ 1392.449259][ T3673] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1392.901537][ T3686] batadv_slave_0: entered promiscuous mode
[ 1393.024654][ T3686] batadv_slave_0: left promiscuous mode
[ 1393.151874][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9611'.
[ 1393.200123][ T3697] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1394.274549][ T3714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1394.538452][ T3716] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9618'.
[ 1394.620925][ T3720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9619'.
[ 1395.370570][ T1686] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1395.465257][ T3726] ptrace attach of "./syz-executor exec"[30147] was attempted by "./syz-executor exec"[3726]
[ 1395.532448][ T1686] usb 9-1: Using ep0 maxpacket: 32
[ 1395.543504][ T1686] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1395.575266][ T1686] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1395.594051][ T1686] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1395.620806][ T1686] usb 9-1: Product: syz
[ 1395.625075][ T1686] usb 9-1: Manufacturer: syz
[ 1395.632042][ T1686] usb 9-1: SerialNumber: syz
[ 1395.639625][ T1686] usb 9-1: config 0 descriptor??
[ 1395.648097][ T3724] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 1395.778570][ T3738] XFS (rnullb0): Invalid superblock magic number
[ 1395.994303][   T10] usb 9-1: USB disconnect, device number 28
[ 1396.080046][ T1686] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1396.254250][ T1686] usb 6-1: Using ep0 maxpacket: 8
[ 1396.262637][ T1686] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1396.276316][ T1686] usb 6-1: config 7 has an invalid interface number: 171 but max is 0
[ 1396.284747][ T1686] usb 6-1: config 7 has no interface number 0
[ 1396.294690][ T1686] usb 6-1: config 7 interface 171 has no altsetting 0
[ 1396.304545][ T1686] usb 6-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=c5.d2
[ 1396.315063][ T1686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.323239][ T1686] usb 6-1: Product: syz
[ 1396.327557][ T1686] usb 6-1: Manufacturer: syz
[ 1396.332302][ T1686] usb 6-1: SerialNumber: syz
[ 1396.652922][ T1686] usb 6-1: can't set first interface for hiFace device.
[ 1396.679871][ T1686] snd-usb-hiface 6-1:7.171: probe with driver snd-usb-hiface failed with error -5
[ 1396.699030][ T1686] usb 6-1: USB disconnect, device number 25
[ 1396.976292][ T3755] Mount JFS Failure: -22
[ 1396.981571][ T3755] jfs_mount failed w/return code = -22
[ 1396.989117][ T3757] ptrace attach of "./syz-executor exec"[2122] was attempted by "./syz-executor exec"[3757]
[ 1397.597459][ T3767] .: Can't lookup blockdev
[ 1397.870150][T19393] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1398.030126][T19393] usb 6-1: Using ep0 maxpacket: 32
[ 1398.036790][T19393] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1398.052435][T19393] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1398.061961][T19393] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1398.070503][T19393] usb 6-1: Product: syz
[ 1398.074709][T19393] usb 6-1: Manufacturer: syz
[ 1398.079325][T19393] usb 6-1: SerialNumber: syz
[ 1398.087881][T19393] usb 6-1: config 0 descriptor??
[ 1398.096982][ T3764] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1398.428098][T19393] usb 6-1: USB disconnect, device number 26
[ 1398.441100][ T3771] vxfs: WRONG superblock magic 00000000 at 1
[ 1398.447159][ T3771] vxfs: WRONG superblock magic 00000000 at 8
[ 1398.477991][ T3771] vxfs: can't find superblock.
[ 1398.618929][ T3773] XFS (rnullb0): Invalid superblock magic number
[ 1398.744022][ T3782] netlink: 260 bytes leftover after parsing attributes in process `syz.5.9637'.
[ 1398.863400][ T3787] ptrace attach of "./syz-executor exec"[30147] was attempted by "./syz-executor exec"[3787]
[ 1399.041901][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9642'.
[ 1399.052290][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9642'.
[ 1399.070584][ T3797] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9642'.
[ 1399.167198][ T3802] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1399.350235][T19393] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1399.500207][T19393] usb 9-1: Using ep0 maxpacket: 8
[ 1399.506857][T19393] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1399.516285][T19393] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1399.529224][T19393] usb 9-1: config 0 descriptor??
[ 1399.550165][   T43] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1399.700136][   T43] usb 6-1: Using ep0 maxpacket: 32
[ 1399.709158][   T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1399.729032][   T43] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1399.738544][   T43] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1399.749480][T19393] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1399.759622][   T43] usb 6-1: Product: syz
[ 1399.764358][   T43] usb 6-1: Manufacturer: syz
[ 1399.768999][   T43] usb 6-1: SerialNumber: syz
[ 1399.773924][T19393] asix 9-1:0.0: probe with driver asix failed with error -32
[ 1399.784567][   T43] usb 6-1: config 0 descriptor??
[ 1399.790592][ T3804] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1400.125108][   T92] usb 9-1: USB disconnect, device number 29
[ 1400.375174][   T43] usb 6-1: USB disconnect, device number 27
[ 1400.437562][ T3817] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1400.521924][ T3817] ptrace attach of "./syz-executor exec"[2122] was attempted by ""[3817]
[ 1400.611142][ T3820] exFAT-fs (rnullb0): invalid boot record signature
[ 1400.617799][ T3820] exFAT-fs (rnullb0): failed to read boot sector
[ 1400.692701][ T3822] /dev/rnullb0: Can't open blockdev
[ 1400.711893][ T3820] exFAT-fs (rnullb0): failed to recognize exfat type
[ 1401.553346][ T3854] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1401.636599][ T3854] ptrace attach of "./syz-executor exec"[1502] was attempted by ""[3854]
[ 1401.890256][   T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1402.054389][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1402.067342][   T10] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1402.086815][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1402.121503][   T10] usb 6-1: config 0 descriptor??
[ 1402.132693][   T10] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1402.410195][   T92] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1402.570192][   T92] usb 9-1: Using ep0 maxpacket: 32
[ 1402.576930][   T92] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1402.590462][   T92] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1402.599540][   T92] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1402.607800][   T92] usb 9-1: Product: syz
[ 1402.612088][   T92] usb 9-1: Manufacturer: syz
[ 1402.616722][   T92] usb 9-1: SerialNumber: syz
[ 1402.625732][   T92] usb 9-1: config 0 descriptor??
[ 1402.632344][ T3871] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 1402.964308][   T92] usb 9-1: USB disconnect, device number 30
[ 1403.093095][ T3883] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[ 1403.147100][   T10] gspca_sunplus: reg_w_riv err -71
[ 1403.170153][   T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[ 1403.190254][   T10] usb 6-1: USB disconnect, device number 28
[ 1403.403753][ T3901] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1403.427453][ T3901] ptrace attach of "./syz-executor exec"[2122] was attempted by ""[3901]
[ 1403.494570][ T3905] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9672'.
[ 1404.202587][ T3916] omfs: Invalid superblock (0)
[ 1404.240613][   T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1404.417073][   T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[ 1404.436208][   T10] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[ 1404.466029][   T10] usb 6-1: Product: syz
[ 1404.472944][   T10] usb 6-1: Manufacturer: syz
[ 1404.477657][   T10] usb 6-1: SerialNumber: syz
[ 1404.489208][   T10] usb 6-1: config 0 descriptor??
[ 1404.514661][ T3922] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1404.554332][ T3922] ptrace attach of "./syz-executor exec"[2341] was attempted by ""[3922]
[ 1404.835717][ T3927] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1404.890252][ T3927] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[ 1404.912599][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9676'.
[ 1404.930913][ T3927] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1404.937614][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9676'.
[ 1404.970244][ T3927] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[ 1405.327707][ T3945] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1405.350308][ T3945] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1405.414022][   T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1405.447777][   T10] asix 6-1:0.0: probe with driver asix failed with error -71
[ 1405.494314][   T10] usb 6-1: USB disconnect, device number 29
[ 1405.534346][ T3951] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1405.585454][ T3951] ptrace attach of "./syz-executor exec"[1502] was attempted by ""[3951]
[ 1405.596338][ T3952] sp0: Synchronizing with TNC
[ 1405.774025][ T3955] sp0: Synchronizing with TNC
[ 1406.317490][ T3983] netlink: 763 bytes leftover after parsing attributes in process `syz.8.9699'.
[ 1406.331896][ T3985] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1406.346459][ T3985] ptrace attach of "./syz-executor exec"[30147] was attempted by ""[3985]
[ 1406.763695][ T3998] dvmrp1: entered allmulticast mode
[ 1406.876255][ T4003] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[ 1406.900843][ T4003] UDF-fs: Scanning with blocksize 4096 failed
[ 1407.192746][ T4013] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1407.230327][ T4013] ptrace attach of "./syz-executor exec"[1502] was attempted by ""[4013]
[ 1407.513136][ T4018] netlink: 'syz.5.9711': attribute type 2 has an invalid length.
[ 1407.534136][ T4018] netlink: 'syz.5.9711': attribute type 1 has an invalid length.
[ 1407.565482][ T4018] netlink: 'syz.5.9711': attribute type 2 has an invalid length.
[ 1407.626972][ T4018] netlink: 'syz.5.9711': attribute type 1 has an invalid length.
[ 1407.635666][ T4018] netlink: 'syz.5.9711': attribute type 2 has an invalid length.
[ 1407.646166][ T4018] netlink: 'syz.5.9711': attribute type 1 has an invalid length.
[ 1407.658019][ T4018] netlink: 'syz.5.9711': attribute type 2 has an invalid length.
[ 1407.669787][ T4018] netlink: 'syz.5.9711': attribute type 1 has an invalid length.
[ 1407.686883][ T4018] netlink: 'syz.5.9711': attribute type 2 has an invalid length.
[ 1407.696328][ T4018] netlink: 'syz.5.9711': attribute type 1 has an invalid length.
[ 1408.330300][T19393] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1408.400108][T13875] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1408.481954][T19393] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1408.495014][T19393] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 43520, setting to 1024
[ 1408.506142][T19393] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1408.518124][T19393] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0
[ 1408.527411][T19393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1408.536708][T19393] usb 6-1: Product: syz
[ 1408.540968][T19393] usb 6-1: Manufacturer: syz
[ 1408.545567][T19393] usb 6-1: SerialNumber: syz
[ 1408.556454][T13875] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1408.560713][T19393] cdc_ncm 6-1:1.0: skipping garbage
[ 1408.577361][T13875] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1408.586988][T13875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1408.599587][T13875] usb 9-1: config 0 descriptor??
[ 1408.818181][T13875] usbhid 9-1:0.0: can't add hid device: -71
[ 1408.828383][T13875] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1408.840720][T13875] usb 9-1: USB disconnect, device number 31
[ 1409.270407][ T5890] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1409.420081][ T5890] usb 9-1: Using ep0 maxpacket: 16
[ 1409.426731][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1409.440272][ T5890] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[ 1409.455984][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1409.467471][ T5890] usb 9-1: config 0 descriptor??
[ 1409.566208][ T4028] gfs2: not a GFS2 filesystem
[ 1409.634092][T19393] cdc_ncm 6-1:1.0: bind() failure
[ 1409.652517][T19393] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1409.665772][T19393] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1409.682754][T19393] usbtest 6-1:1.1: probe with driver usbtest failed with error -71
[ 1409.710899][T19393] usb 6-1: USB disconnect, device number 30
[ 1409.737854][ T4042] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1409.749455][ T4042] ptrace attach of "./syz-executor exec"[30147] was attempted by ""[4042]
[ 1409.891369][ T5890] kye 0003:0458:5016.0054: control desc unexpectedly large
[ 1409.914988][ T5890] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0054/input/input98
[ 1409.936407][ T5890] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.0054/input/input99
[ 1410.072899][ T5890] kye 0003:0458:5016.0054: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0
[ 1410.820703][ T4068] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1410.826043][ T4071] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1410.836146][ T4068] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1410.856271][ T4071] ptrace attach of "./syz-executor exec"[30147] was attempted by "./syz-executor exec"[4071]
[ 1410.868213][ T4068] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1410.894441][ T4068] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1411.310323][   T10] usb 9-1: USB disconnect, device number 32
[ 1411.890059][T13875] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[ 1412.058355][T13875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1412.080338][T13875] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1412.113029][T13875] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[ 1412.125124][T13875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1412.137950][T13875] usb 6-1: config 0 descriptor??
[ 1412.149412][ T4091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1412.160478][   T92] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1412.252854][ T4106] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1412.293569][ T4106] ptrace attach of "./syz-executor exec"[2122] was attempted by "./syz-executor exec"[4106]
[ 1412.323599][   T92] usb 9-1: device descriptor read/64, error -71
[ 1412.526482][ T5835] Bluetooth: Wrong link type (-71)
[ 1412.590357][   T92] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1412.607096][T13875] logitech 0003:046D:CA04.0055: unbalanced delimiter at end of report description
[ 1412.618637][T13875] logitech 0003:046D:CA04.0055: parse failed
[ 1412.627954][T13875] logitech 0003:046D:CA04.0055: probe with driver logitech failed with error -22
[ 1412.741022][   T92] usb 9-1: device descriptor read/64, error -71
[ 1412.852230][   T92] usb usb9-port1: attempt power cycle
[ 1412.887974][ T4113] block device autoloading is deprecated and will be removed.
[ 1413.008784][   T43] usb 6-1: USB disconnect, device number 31
[ 1413.093366][ T4116] XFS (rnullb0): Invalid superblock magic number
[ 1413.200725][   T92] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1413.241629][   T92] usb 9-1: device descriptor read/8, error -71
[ 1413.428695][ T4129] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.9741'.
[ 1413.495327][   T92] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1413.531497][   T92] usb 9-1: device descriptor read/8, error -71
[ 1413.641170][   T92] usb usb9-port1: unable to enumerate USB device
[ 1413.743433][ T4142] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1413.763665][ T4142] ptrace attach of "./syz-executor exec"[2122] was attempted by "./syz-executor exec"[4142]
[ 1413.782240][ T4143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1413.794016][ T4143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1414.040307][   T92] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1414.200168][   T92] usb 6-1: Using ep0 maxpacket: 32
[ 1414.208769][   T92] usb 6-1: config index 0 descriptor too short (expected 65183, got 91)
[ 1414.217350][   T92] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1414.230568][   T92] usb 6-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice= 1.08
[ 1414.239668][   T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.248212][   T92] usb 6-1: Product: syz
[ 1414.252617][   T92] usb 6-1: Manufacturer: syz
[ 1414.257246][   T92] usb 6-1: SerialNumber: syz
[ 1414.271175][   T92] mos7840 6-1:1.0: missing endpoints
[ 1414.471723][ T4144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1414.481799][ T4144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1414.505517][   T92] usb 6-1: USB disconnect, device number 32
[ 1414.605097][ T4160] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1414.612557][ T4160] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1415.019039][ T4173] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1415.038411][ T4173] ptrace attach of "./syz-executor exec"[1502] was attempted by ""[4173]
[ 1415.367662][ T4182] input: syz0 as /devices/virtual/input/input100
[ 1415.438023][ T4182] exFAT-fs (rnullb0): invalid boot record signature
[ 1415.464647][ T4182] exFAT-fs (rnullb0): failed to read boot sector
[ 1415.510170][ T4182] exFAT-fs (rnullb0): failed to recognize exfat type
[ 1415.788245][ T4196] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1415.796758][ T4196] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1416.574753][ T4200] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1416.587658][ T4200] ptrace attach of "./syz-executor exec"[2341] was attempted by ""[4200]
[ 1416.911268][ T4209] random: crng reseeded on system resumption
[ 1417.229729][ T4224] erofs (device rnullb0): cannot find valid erofs superblock
[ 1417.830308][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1417.838259][   T92] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[ 1417.845821][   T92] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[ 1417.956437][ T4237] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1417.973309][ T4237] ptrace attach of "./syz-executor exec"[2122] was attempted by ""[4237]
[ 1418.025994][ T4239] tap0: tun_chr_ioctl cmd 1074025672
[ 1418.032123][ T4239] tap0: ignored: set checksum enabled
[ 1418.748254][ T4268] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1418.761043][ T4268] ptrace attach of "./syz-executor exec"[2122] was attempted by ""[4268]
[ 1419.110586][   T10] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1419.262743][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1419.273697][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1419.283460][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1419.300046][   T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1419.309191][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.317458][   T10] usb 9-1: Product: syz
[ 1419.321710][   T10] usb 9-1: Manufacturer: syz
[ 1419.326342][   T10] usb 9-1: SerialNumber: syz
[ 1419.334809][   T10] usb 9-1: config 0 descriptor??
[ 1419.760205][ T4274] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[ 1419.836810][   T43] usb 9-1: USB disconnect, device number 37
[ 1419.910276][T25996] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1419.923377][   T92] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[ 1419.929522][   T92] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[ 1422.161078][ T4296] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1422.179481][ T4296] ptrace attach of "./syz-executor exec"[2122] was attempted by ""[4296]
[ 1422.271073][    T9] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1422.353663][ T4300] /dev/nullb0: Can't open blockdev
[ 1422.432250][    T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1422.450135][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1422.472515][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1422.488415][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1422.511419][    T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1422.533860][    T9] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1422.550460][    T9] usb 9-1: Manufacturer: syz
[ 1422.561396][    T9] usb 9-1: config 0 descriptor??
[ 1422.991720][    T9] appleir 0003:05AC:8243.0056: unknown main item tag 0x0
[ 1422.999428][    T9] appleir 0003:05AC:8243.0056: No inputs registered, leaving
[ 1423.024608][    T9] appleir 0003:05AC:8243.0056: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0
[ 1423.127480][ T4305] kvm: user requested TSC rate below hardware speed
[ 1423.189621][   T43] usb 9-1: USB disconnect, device number 38
[ 1425.071527][ T4332] ptrace attach of "./syz-executor exec"[1502] was attempted by ""[4332]
[ 1426.315730][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1426.330408][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1426.407742][ T4362] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[ 1426.420254][ T4362] UDF-fs: Scanning with blocksize 4096 failed
[ 1426.497057][ T4365] ptrace attach of "./syz-executor exec"[1502] was attempted by ""[4365]
[ 1426.575288][ T4367] omfs: Invalid superblock (0)
[ 1427.052544][ T1686] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1427.212987][ T1686] usb 9-1: Using ep0 maxpacket: 32
[ 1427.229867][ T1686] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1427.244327][ T1686] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1427.254772][ T1686] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1427.267927][ T1686] usb 9-1: Product: syz
[ 1427.273045][ T1686] usb 9-1: Manufacturer: syz
[ 1427.277885][ T1686] usb 9-1: SerialNumber: syz
[ 1427.288844][ T1686] usb 9-1: config 0 descriptor??
[ 1427.295295][ T4370] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1427.645923][   T43] usb 9-1: USB disconnect, device number 39
[ 1427.847331][ T4386] FAT-fs (rnullb0): bogus number of reserved sectors
[ 1427.854317][ T4386] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[ 1428.041887][ T4392] ptrace attach of "./syz-executor exec"[1502] was attempted by ""[4392]
[ 1428.622520][ T4404] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9823'.
[ 1428.634655][ T4404] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9823'.
[ 1428.646335][ T4404] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9823'.
[ 1428.995884][ T4413] ptrace attach of "./syz-executor exec"[1502] was attempted by ""[4413]
[ 1429.165247][ T4418] Mount JFS Failure: -22
[ 1429.169532][ T4418] jfs_mount failed w/return code = -22
[ 1430.643361][ T4431] hfs: can't find a HFS filesystem on dev rnullb0
[ 1430.847803][ T4439] ptrace attach of "./syz-executor exec"[2341] was attempted by ""[4439]
[ 1431.084673][ T4447] omfs: Invalid superblock (0)
[ 1431.871178][ T4460] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1431.878397][ T4460] VFS: Can't find a romfs filesystem on dev rnullb0.
[ 1431.878397][ T4460] 
[ 1431.963015][ T4464] FAULT_INJECTION: forcing a failure.
[ 1431.963015][ T4464] name failslab, interval 1, probability 0, space 0, times 0
[ 1431.976712][ T4464] CPU: 1 UID: 0 PID: 4464 Comm: syz.4.9845 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) 
[ 1431.976737][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1431.976746][ T4464] Call Trace:
[ 1431.976754][ T4464]  <TASK>
[ 1431.976762][ T4464]  dump_stack_lvl+0x189/0x250
[ 1431.976794][ T4464]  ? __pfx____ratelimit+0x10/0x10
[ 1431.976823][ T4464]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1431.976842][ T4464]  ? __pfx__printk+0x10/0x10
[ 1431.976870][ T4464]  should_fail_ex+0x414/0x560
[ 1431.976898][ T4464]  should_failslab+0xa8/0x100
[ 1431.976923][ T4464]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1431.976945][ T4464]  ? report_access+0xd4/0x540
[ 1431.976967][ T4464]  report_access+0xd4/0x540
[ 1431.976985][ T4464]  ? yama_ptrace_access_check+0x7a/0xb20
[ 1431.977013][ T4464]  yama_ptrace_access_check+0x8b4/0xb20
[ 1431.977028][ T4464]  ? yama_ptrace_access_check+0x7a/0xb20
[ 1431.977046][ T4464]  security_ptrace_access_check+0xe5/0x290
[ 1431.977066][ T4464]  ptrace_attach+0x1eb/0x850
[ 1431.977089][ T4464]  ? find_get_task_by_vpid+0x1d/0x290
[ 1431.977116][ T4464]  __se_sys_ptrace+0x1bc/0x400
[ 1431.977140][ T4464]  ? __pfx___se_sys_ptrace+0x10/0x10
[ 1431.977165][ T4464]  ? do_syscall_64+0xbe/0x3b0
[ 1431.977185][ T4464]  do_syscall_64+0xfa/0x3b0
[ 1431.977200][ T4464]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1431.977224][ T4464]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1431.977241][ T4464]  ? clear_bhb_loop+0x60/0xb0
[ 1431.977261][ T4464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1431.977278][ T4464] RIP: 0033:0x7f3d1338e929
[ 1431.977294][ T4464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1431.977310][ T4464] RSP: 002b:00007f3d141f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065
[ 1431.977328][ T4464] RAX: ffffffffffffffda RBX: 00007f3d135b5fa0 RCX: 00007f3d1338e929
[ 1431.977340][ T4464] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010
[ 1431.977350][ T4464] RBP: 00007f3d141f7090 R08: 0000000000000000 R09: 0000000000000000
[ 1431.977361][ T4464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1431.977371][ T4464] R13: 0000000000000000 R14: 00007f3d135b5fa0 R15: 00007ffcdd6ec2e8
[ 1431.977399][ T4464]  </TASK>
[ 1441.684371][T28907] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1441.707862][T28907] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1441.729555][T28907] usb 5-1: USB disconnect, device number 70
[ 1487.754924][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1487.766381][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1549.194442][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1549.202243][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1574.793470][   T31] INFO: task kworker/0:2:92 blocked for more than 143 seconds.
[ 1574.801253][   T31]       Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0
[ 1574.808890][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1574.817614][   T31] task:kworker/0:2     state:D stack:20008 pid:92    tgid:92    ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1574.829712][   T31] Workqueue: events rfkill_op_handler
[ 1574.835220][   T31] Call Trace:
[ 1574.838513][   T31]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1574.841525][   T31]  __schedule+0x16f5/0x4d00
[ 1574.846574][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1574.852502][   T31]  ? schedule+0x165/0x360
[ 1574.856878][   T31]  ? __pfx___schedule+0x10/0x10
[ 1574.865168][   T31]  ? schedule+0x91/0x360
[ 1574.869454][   T31]  schedule+0x165/0x360
[ 1574.886321][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1574.902809][   T31]  __mutex_lock+0x724/0xe80
[ 1574.907366][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1574.913487][   T31]  ? __mutex_lock+0x51b/0xe80
[ 1574.918198][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[ 1574.924307][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1574.929456][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1574.937432][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1574.944611][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1574.953480][   T31]  ? kobject_uevent_env+0x36b/0x8c0
[ 1574.958737][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[ 1574.965134][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[ 1574.970403][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[ 1574.976141][   T31]  rfkill_set_block+0x1cf/0x440
[ 1574.981169][   T31]  rfkill_epo+0x7e/0x180
[ 1574.985426][   T31]  rfkill_op_handler+0x84/0x240
[ 1574.990440][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1574.996170][   T31]  process_scheduled_works+0xae1/0x17b0
[ 1575.002192][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1575.008210][   T31]  worker_thread+0x8a0/0xda0
[ 1575.012955][   T31]  kthread+0x70e/0x8a0
[ 1575.017075][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1575.022320][   T31]  ? __pfx_kthread+0x10/0x10
[ 1575.026931][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1575.032339][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1575.037569][   T31]  ? __pfx_kthread+0x10/0x10
[ 1575.042471][   T31]  ret_from_fork+0x3fc/0x770
[ 1575.047196][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1575.052530][   T31]  ? __switch_to_asm+0x39/0x70
[ 1575.057425][   T31]  ? __switch_to_asm+0x33/0x70
[ 1575.062237][   T31]  ? __pfx_kthread+0x10/0x10
[ 1575.066841][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1575.072656][   T31]  </TASK>
[ 1575.075841][   T31] INFO: task kworker/0:3:13875 blocked for more than 143 seconds.
[ 1575.084019][   T31]       Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0
[ 1575.091722][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1575.100487][   T31] task:kworker/0:3     state:D stack:20792 pid:13875 tgid:13875 ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1575.114798][   T31] Workqueue: events rfkill_global_led_trigger_worker
[ 1575.121611][   T31] Call Trace:
[ 1575.124897][   T31]  <TASK>
[ 1575.127817][   T31]  __schedule+0x16f5/0x4d00
[ 1575.132568][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1575.137796][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1575.144245][   T31]  ? schedule+0x165/0x360
[ 1575.148598][   T31]  ? __pfx___schedule+0x10/0x10
[ 1575.153596][   T31]  ? schedule+0x91/0x360
[ 1575.157862][   T31]  schedule+0x165/0x360
[ 1575.162210][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1575.167716][   T31]  __mutex_lock+0x724/0xe80
[ 1575.172364][   T31]  ? look_up_lock_class+0x74/0x170
[ 1575.177508][   T31]  ? __mutex_lock+0x51b/0xe80
[ 1575.182275][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[ 1575.188533][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1575.195457][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1575.201621][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1575.207378][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[ 1575.213552][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1575.219282][   T31]  process_scheduled_works+0xae1/0x17b0
[ 1575.224987][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1575.231134][   T31]  worker_thread+0x8a0/0xda0
[ 1575.235745][   T31]  ? __kthread_parkme+0x7b/0x200
[ 1575.240741][   T31]  kthread+0x70e/0x8a0
[ 1575.244821][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1575.249920][   T31]  ? __pfx_kthread+0x10/0x10
[ 1575.254565][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1575.259764][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1575.265033][   T31]  ? __pfx_kthread+0x10/0x10
[ 1575.269637][   T31]  ret_from_fork+0x3fc/0x770
[ 1575.274413][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1575.279548][   T31]  ? __switch_to_asm+0x39/0x70
[ 1575.284905][   T31]  ? __switch_to_asm+0x33/0x70
[ 1575.289720][   T31]  ? __pfx_kthread+0x10/0x10
[ 1575.294444][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1575.299255][   T31]  </TASK>
[ 1575.303471][   T31] INFO: task syz.5.9751:4161 blocked for more than 143 seconds.
[ 1575.311189][   T31]       Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0
[ 1575.318834][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1575.327570][   T31] task:syz.5.9751      state:D stack:25096 pid:4161  tgid:4161  ppid:30147  task_flags:0x400040 flags:0x00004004
[ 1575.339546][   T31] Call Trace:
[ 1575.342885][   T31]  <TASK>
[ 1575.345832][   T31]  __schedule+0x16f5/0x4d00
[ 1575.350397][   T31]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[ 1575.356458][   T31]  ? schedule+0x165/0x360
[ 1575.360856][   T31]  ? __pfx___schedule+0x10/0x10
[ 1575.365729][   T31]  ? schedule+0x91/0x360
[ 1575.370029][   T31]  schedule+0x165/0x360
[ 1575.374194][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1575.379645][   T31]  __mutex_lock+0x724/0xe80
[ 1575.384218][   T31]  ? kobject_put+0x43f/0x480
[ 1575.388818][   T31]  ? __mutex_lock+0x51b/0xe80
[ 1575.393563][   T31]  ? rfkill_unregister+0xc8/0x220
[ 1575.398602][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1575.403687][   T31]  ? __pfx_device_del+0x10/0x10
[ 1575.408572][   T31]  rfkill_unregister+0xc8/0x220
[ 1575.413525][   T31]  nfc_unregister_device+0x96/0x2a0
[ 1575.418738][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[ 1575.424550][   T31]  virtual_ncidev_close+0x56/0x90
[ 1575.429585][   T31]  __fput+0x44c/0xa70
[ 1575.433970][   T31]  task_work_run+0x1d1/0x260
[ 1575.438603][   T31]  ? __pfx_task_work_run+0x10/0x10
[ 1575.443789][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[ 1575.449267][   T31]  exit_to_user_mode_loop+0xec/0x110
[ 1575.455536][   T31]  do_syscall_64+0x2bd/0x3b0
[ 1575.460199][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1575.465413][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1575.471526][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1575.476208][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1575.482168][   T31] RIP: 0033:0x7f261e58e929
[ 1575.486589][   T31] RSP: 002b:00007ffe5dc6c818 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1575.495063][   T31] RAX: 0000000000000000 RBX: 00007f261e7b7ba0 RCX: 00007f261e58e929
[ 1575.503087][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1575.511124][   T31] RBP: 00007f261e7b7ba0 R08: 000000000000017c R09: 000000135dc6cb0f
[ 1575.519107][   T31] R10: 00007f261e7b7ac0 R11: 0000000000000246 R12: 000000000015991f
[ 1575.527139][   T31] R13: 00007f261e7b6080 R14: ffffffffffffffff R15: 00007ffe5dc6c930
[ 1575.535150][   T31]  </TASK>
[ 1575.538175][   T31] INFO: task syz.8.9832:4425 blocked for more than 144 seconds.
[ 1575.549461][   T31]       Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0
[ 1575.557258][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1575.566041][   T31] task:syz.8.9832      state:D stack:27208 pid:4425  tgid:4424  ppid:1502   task_flags:0x400040 flags:0x00004004
[ 1575.578075][   T31] Call Trace:
[ 1575.581401][   T31]  <TASK>
[ 1575.584346][   T31]  __schedule+0x16f5/0x4d00
[ 1575.588874][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1575.593788][   T31]  ? schedule+0x165/0x360
[ 1575.598136][   T31]  ? __pfx___schedule+0x10/0x10
[ 1575.603094][   T31]  ? schedule+0x91/0x360
[ 1575.607353][   T31]  schedule+0x165/0x360
[ 1575.611562][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1575.617120][   T31]  __mutex_lock+0x724/0xe80
[ 1575.621702][   T31]  ? __mutex_lock+0x51b/0xe80
[ 1575.626394][   T31]  ? rfkill_fop_open+0x12d/0x820
[ 1575.631381][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1575.636417][   T31]  ? __raw_spin_lock_init+0x45/0x100
[ 1575.641759][   T31]  ? __init_waitqueue_head+0xa9/0x150
[ 1575.647146][   T31]  rfkill_fop_open+0x12d/0x820
[ 1575.651954][   T31]  ? __pfx_rfkill_fop_open+0x10/0x10
[ 1575.657250][   T31]  misc_open+0x2b9/0x330
[ 1575.661670][   T31]  chrdev_open+0x4cc/0x5e0
[ 1575.666130][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1575.671142][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1575.676094][   T31]  do_dentry_open+0xdf3/0x1970
[ 1575.680927][   T31]  vfs_open+0x3b/0x340
[ 1575.685000][   T31]  ? path_openat+0x2ecd/0x3830
[ 1575.689750][   T31]  path_openat+0x2ee5/0x3830
[ 1575.694396][   T31]  ? arch_stack_walk+0xfc/0x150
[ 1575.699295][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1575.704318][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1575.710444][   T31]  do_filp_open+0x1fa/0x410
[ 1575.714961][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1575.719808][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1575.724880][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1575.729738][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1575.734148][   T31]  do_sys_openat2+0x121/0x1c0
[ 1575.738837][   T31]  ? __se_sys_futex+0x36f/0x400
[ 1575.743738][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1575.748952][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1575.754261][   T31]  __x64_sys_openat+0x138/0x170
[ 1575.759155][   T31]  do_syscall_64+0xfa/0x3b0
[ 1575.763715][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1575.769105][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1575.775263][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1575.780002][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1575.785903][   T31] RIP: 0033:0x7f1cb9d8e929
[ 1575.790425][   T31] RSP: 002b:00007f1cbac64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1575.798849][   T31] RAX: ffffffffffffffda RBX: 00007f1cb9fb5fa0 RCX: 00007f1cb9d8e929
[ 1575.806866][   T31] RDX: 0000000000040000 RSI: 0000200000000240 RDI: ffffffffffffff9c
[ 1575.814875][   T31] RBP: 00007f1cb9e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 1575.822912][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1575.831020][   T31] R13: 0000000000000000 R14: 00007f1cb9fb5fa0 R15: 00007ffe273b2ed8
[ 1575.839036][   T31]  </TASK>
[ 1575.842147][   T31] INFO: task syz.8.9832:4426 blocked for more than 144 seconds.
[ 1575.849803][   T31]       Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0
[ 1575.857583][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1575.866289][   T31] task:syz.8.9832      state:D stack:27784 pid:4426  tgid:4424  ppid:1502   task_flags:0x400040 flags:0x00004004
[ 1575.878253][   T31] Call Trace:
[ 1575.881601][   T31]  <TASK>
[ 1575.884543][   T31]  __schedule+0x16f5/0x4d00
[ 1575.889040][   T31]  ? __kasan_slab_free+0x62/0x70
[ 1575.894042][   T31]  ? security_file_open+0xb1/0x270
[ 1575.899171][   T31]  ? do_dentry_open+0x35e/0x1970
[ 1575.904161][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1575.909018][   T31]  ? schedule+0x165/0x360
[ 1575.913446][   T31]  ? __pfx___schedule+0x10/0x10
[ 1575.918322][   T31]  ? schedule+0x91/0x360
[ 1575.922627][   T31]  schedule+0x165/0x360
[ 1575.926808][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1575.932331][   T31]  __mutex_lock+0x724/0xe80
[ 1575.936846][   T31]  ? __mutex_lock+0x51b/0xe80
[ 1575.941870][   T31]  ? misc_open+0x51/0x330
[ 1575.946243][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1575.951721][   T31]  misc_open+0x51/0x330
[ 1575.955921][   T31]  chrdev_open+0x4cc/0x5e0
[ 1575.960617][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1575.965600][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1575.970984][   T31]  do_dentry_open+0xdf3/0x1970
[ 1575.975766][   T31]  vfs_open+0x3b/0x340
[ 1575.979817][   T31]  ? path_openat+0x2ecd/0x3830
[ 1575.984641][   T31]  path_openat+0x2ee5/0x3830
[ 1575.989248][   T31]  ? arch_stack_walk+0xfc/0x150
[ 1575.994222][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1575.999172][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.005302][   T31]  do_filp_open+0x1fa/0x410
[ 1576.009817][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1576.014725][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1576.019769][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1576.024673][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1576.029020][   T31]  do_sys_openat2+0x121/0x1c0
[ 1576.033733][   T31]  ? __se_sys_futex+0x36f/0x400
[ 1576.038609][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1576.043865][   T31]  ? __pfx___se_sys_futex+0x10/0x10
[ 1576.049077][   T31]  ? __pfx___se_sys_mount+0x10/0x10
[ 1576.054308][   T31]  __x64_sys_openat+0x138/0x170
[ 1576.059167][   T31]  do_syscall_64+0xfa/0x3b0
[ 1576.063714][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1576.068925][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.075425][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1576.080181][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.086088][   T31] RIP: 0033:0x7f1cb9d8e929
[ 1576.091594][   T31] RSP: 002b:00007f1cbac43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1576.100078][   T31] RAX: ffffffffffffffda RBX: 00007f1cb9fb6080 RCX: 00007f1cb9d8e929
[ 1576.108065][   T31] RDX: 0000000000002080 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 1576.118391][   T31] RBP: 00007f1cb9e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 1576.126531][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1576.134573][   T31] R13: 0000000000000000 R14: 00007f1cb9fb6080 R15: 00007ffe273b2ed8
[ 1576.142672][   T31]  </TASK>
[ 1576.145709][   T31] INFO: task syz.8.9832:4427 blocked for more than 144 seconds.
[ 1576.154613][   T31]       Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0
[ 1576.162602][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1576.171356][   T31] task:syz.8.9832      state:D stack:28120 pid:4427  tgid:4424  ppid:1502   task_flags:0x400040 flags:0x00004004
[ 1576.183454][   T31] Call Trace:
[ 1576.186752][   T31]  <TASK>
[ 1576.189674][   T31]  __schedule+0x16f5/0x4d00
[ 1576.194334][   T31]  ? __kasan_slab_free+0x62/0x70
[ 1576.199289][   T31]  ? security_file_open+0xb1/0x270
[ 1576.204490][   T31]  ? do_dentry_open+0x35e/0x1970
[ 1576.209434][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1576.214534][   T31]  ? schedule+0x165/0x360
[ 1576.218892][   T31]  ? __pfx___schedule+0x10/0x10
[ 1576.224154][   T31]  ? schedule+0x91/0x360
[ 1576.228432][   T31]  schedule+0x165/0x360
[ 1576.237477][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1576.243295][   T31]  __mutex_lock+0x724/0xe80
[ 1576.247817][   T31]  ? __mutex_lock+0x51b/0xe80
[ 1576.252649][   T31]  ? misc_open+0x51/0x330
[ 1576.256993][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1576.262193][   T31]  misc_open+0x51/0x330
[ 1576.266368][   T31]  chrdev_open+0x4cc/0x5e0
[ 1576.270830][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1576.275780][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1576.280817][   T31]  do_dentry_open+0xdf3/0x1970
[ 1576.285597][   T31]  vfs_open+0x3b/0x340
[ 1576.289654][   T31]  ? path_openat+0x2ecd/0x3830
[ 1576.294534][   T31]  path_openat+0x2ee5/0x3830
[ 1576.299143][   T31]  ? arch_stack_walk+0xfc/0x150
[ 1576.304196][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1576.309142][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.315297][   T31]  do_filp_open+0x1fa/0x410
[ 1576.319814][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1576.324834][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1576.329896][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1576.334912][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1576.339280][   T31]  do_sys_openat2+0x121/0x1c0
[ 1576.344261][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1576.349504][   T31]  ? exc_page_fault+0x76/0xf0
[ 1576.354283][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[ 1576.359611][   T31]  __x64_sys_openat+0x138/0x170
[ 1576.364644][   T31]  do_syscall_64+0xfa/0x3b0
[ 1576.369172][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1576.374443][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.380673][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1576.385359][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.391442][   T31] RIP: 0033:0x7f1cb9d8e929
[ 1576.395866][   T31] RSP: 002b:00007f1cbac22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1576.404390][   T31] RAX: ffffffffffffffda RBX: 00007f1cb9fb6160 RCX: 00007f1cb9d8e929
[ 1576.412419][   T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 1576.420529][   T31] RBP: 00007f1cb9e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 1576.428519][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1576.436535][   T31] R13: 0000000000000001 R14: 00007f1cb9fb6160 R15: 00007ffe273b2ed8
[ 1576.444585][   T31]  </TASK>
[ 1576.447619][   T31] INFO: task syz-executor:4432 blocked for more than 145 seconds.
[ 1576.455542][   T31]       Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0
[ 1576.463238][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1576.472073][   T31] task:syz-executor    state:D stack:27840 pid:4432  tgid:4432  ppid:1      task_flags:0x400040 flags:0x00004000
[ 1576.484315][   T31] Call Trace:
[ 1576.487610][   T31]  <TASK>
[ 1576.490596][   T31]  __schedule+0x16f5/0x4d00
[ 1576.495110][   T31]  ? __kasan_slab_free+0x62/0x70
[ 1576.500093][   T31]  ? security_file_open+0xb1/0x270
[ 1576.505223][   T31]  ? do_dentry_open+0x35e/0x1970
[ 1576.515007][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1576.519918][   T31]  ? schedule+0x165/0x360
[ 1576.525454][   T31]  ? __pfx___schedule+0x10/0x10
[ 1576.530688][   T31]  ? schedule+0x91/0x360
[ 1576.534962][   T31]  schedule+0x165/0x360
[ 1576.539108][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1576.544614][   T31]  __mutex_lock+0x724/0xe80
[ 1576.549132][   T31]  ? __mutex_lock+0x51b/0xe80
[ 1576.553892][   T31]  ? misc_open+0x51/0x330
[ 1576.558241][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1576.563313][   T31]  misc_open+0x51/0x330
[ 1576.567484][   T31]  chrdev_open+0x4cc/0x5e0
[ 1576.571967][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1576.576924][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1576.581911][   T31]  do_dentry_open+0xdf3/0x1970
[ 1576.586687][   T31]  vfs_open+0x3b/0x340
[ 1576.590803][   T31]  ? path_openat+0x2ecd/0x3830
[ 1576.595603][   T31]  path_openat+0x2ee5/0x3830
[ 1576.600254][   T31]  ? __pfx_css_rstat_updated+0x10/0x10
[ 1576.605750][   T31]  ? count_memcg_event_mm+0x21/0x260
[ 1576.611134][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1576.616079][   T31]  ? __pfx___up_read+0x10/0x10
[ 1576.620896][   T31]  ? do_user_addr_fault+0xbc1/0x1390
[ 1576.626203][   T31]  do_filp_open+0x1fa/0x410
[ 1576.630808][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1576.635667][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1576.640767][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1576.645629][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1576.650010][   T31]  do_sys_openat2+0x121/0x1c0
[ 1576.654695][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1576.659878][   T31]  ? fd_install+0x97/0x540
[ 1576.664368][   T31]  ? fd_install+0x30d/0x540
[ 1576.668884][   T31]  __x64_sys_openat+0x138/0x170
[ 1576.673790][   T31]  do_syscall_64+0xfa/0x3b0
[ 1576.678301][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1576.683577][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.689652][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1576.694363][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.700309][   T31] RIP: 0033:0x7fed1a18d211
[ 1576.704730][   T31] RSP: 002b:00007ffcec75af80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1576.713559][   T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fed1a18d211
[ 1576.721906][   T31] RDX: 0000000000000002 RSI: 00007fed1a211506 RDI: 00000000ffffff9c
[ 1576.729903][   T31] RBP: 00007fed1a211506 R08: 0000000000000000 R09: 00007fed1aeed6c0
[ 1576.738240][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[ 1576.746681][   T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[ 1576.754752][   T31]  </TASK>
[ 1576.757899][   T31] 
[ 1576.757899][   T31] Showing all locks held in the system:
[ 1576.765731][   T31] 1 lock held by khungtaskd/31:
[ 1576.772759][   T31]  #0: ffffffff8e33ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1576.782753][   T31] 4 locks held by kworker/0:2/92:
[ 1576.787781][   T31]  #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1576.799203][   T31]  #1: ffffc9000259fbc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1576.810326][   T31]  #2: ffffffff8f9fd0e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180
[ 1576.819851][   T31]  #3: ffff888030058100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[ 1576.829635][   T31] 2 locks held by getty/5592:
[ 1576.834352][   T31]  #0: ffff888030cde0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1576.844192][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1576.854379][   T31] 3 locks held by kworker/0:3/13875:
[ 1576.859676][   T31]  #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1576.870780][   T31]  #1: ffffc9000c0efbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1576.884395][   T31]  #2: ffffffff8f9fd0e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[ 1576.895826][   T31] 2 locks held by syz.5.9751/4161:
[ 1576.900984][   T31]  #0: ffff888030058100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[ 1576.910828][   T31]  #1: ffffffff8f9fd0e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[ 1576.921013][   T31] 2 locks held by syz.8.9832/4425:
[ 1576.926127][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1576.934624][   T31]  #1: ffffffff8f9fd0e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[ 1576.944690][   T31] 1 lock held by syz.8.9832/4426:
[ 1576.949698][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1576.958187][   T31] 1 lock held by syz.8.9832/4427:
[ 1576.963260][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1576.971792][   T31] 1 lock held by syz-executor/4432:
[ 1576.977001][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1576.985550][   T31] 1 lock held by syz.4.9846/4469:
[ 1576.990658][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1576.999142][   T31] 1 lock held by syz.6.9847/4474:
[ 1577.004207][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.012737][   T31] 1 lock held by syz-executor/4479:
[ 1577.017935][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.026430][   T31] 1 lock held by syz-executor/4485:
[ 1577.031685][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.040235][   T31] 1 lock held by syz-executor/4486:
[ 1577.045428][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.053906][   T31] 1 lock held by syz-executor/4500:
[ 1577.059103][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.067992][   T31] 1 lock held by syz-executor/4510:
[ 1577.073274][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.081799][   T31] 1 lock held by syz-executor/4512:
[ 1577.086999][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.095545][   T31] 1 lock held by syz-executor/4514:
[ 1577.101898][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.111637][   T31] 1 lock held by syz-executor/4528:
[ 1577.116869][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.125642][   T31] 1 lock held by syz-executor/4541:
[ 1577.131104][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.139591][   T31] 1 lock held by syz-executor/4543:
[ 1577.144823][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.153322][   T31] 1 lock held by syz-executor/4545:
[ 1577.158498][   T31]  #0: ffffffff8ebd4588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[ 1577.166988][   T31] 2 locks held by dhcpcd/4549:
[ 1577.171807][   T31]  #0: ffff888020f34258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[ 1577.181595][   T31]  #1: ffffffff8e344978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[ 1577.192858][   T31] 
[ 1577.195205][   T31] =============================================
[ 1577.195205][   T31] 
[ 1577.204639][   T31] NMI backtrace for cpu 0
[ 1577.204656][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) 
[ 1577.204677][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1577.204688][   T31] Call Trace:
[ 1577.204696][   T31]  <TASK>
[ 1577.204704][   T31]  dump_stack_lvl+0x189/0x250
[ 1577.204727][   T31]  ? __wake_up_klogd+0xd9/0x110
[ 1577.204760][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1577.204779][   T31]  ? __pfx__printk+0x10/0x10
[ 1577.204809][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1577.204835][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1577.204854][   T31]  ? _printk+0xcf/0x120
[ 1577.204876][   T31]  ? __pfx__printk+0x10/0x10
[ 1577.204897][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1577.204931][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1577.204954][   T31]  watchdog+0xfee/0x1030
[ 1577.204973][   T31]  ? watchdog+0x1de/0x1030
[ 1577.204997][   T31]  kthread+0x70e/0x8a0
[ 1577.205022][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1577.205037][   T31]  ? __pfx_kthread+0x10/0x10
[ 1577.205061][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1577.205082][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1577.205103][   T31]  ? __pfx_kthread+0x10/0x10
[ 1577.205124][   T31]  ret_from_fork+0x3fc/0x770
[ 1577.205142][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1577.205164][   T31]  ? __switch_to_asm+0x39/0x70
[ 1577.205182][   T31]  ? __switch_to_asm+0x33/0x70
[ 1577.205200][   T31]  ? __pfx_kthread+0x10/0x10
[ 1577.205221][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1577.205253][   T31]  </TASK>
[ 1577.205260][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1577.362031][    C1] NMI backtrace for cpu 1
[ 1577.362048][    C1] CPU: 1 UID: 0 PID: 23474 Comm: kworker/u8:9 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) 
[ 1577.362069][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1577.362080][    C1] Workqueue: bat_events batadv_nc_worker
[ 1577.362113][    C1] RIP: 0010:lock_release+0x8f/0x3e0
[ 1577.362136][    C1] Code: 44 02 00 00 65 8b 05 30 0d 22 11 85 c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 40 c0 92 41 83 bf ec 0a 00 00 00 0f 85 1e 02 00 00 <49> 81 3e 40 f3 83 93 0f 84 11 02 00 00 48 c7 44 24 20 00 00 00 00
[ 1577.362152][    C1] RSP: 0018:ffffc9000d55f9b8 EFLAGS: 00000246
[ 1577.362166][    C1] RAX: 0000000000000000 RBX: ffff888032cfcf00 RCX: da69b0ceefdc8a00
[ 1577.362177][    C1] RDX: 0000000000000000 RSI: ffffffff8be41920 RDI: ffffffff8be418e0
[ 1577.362189][    C1] RBP: fffffffffffffe38 R08: 0000000000000000 R09: ffffffff8b3add92
[ 1577.362201][    C1] R10: dffffc0000000000 R11: ffffffff8b3adcc0 R12: dffffc0000000000
[ 1577.362213][    C1] R13: ffffffff8b3add92 R14: ffffffff8e33ee60 R15: ffff888030195a00
[ 1577.362226][    C1] FS:  0000000000000000(0000) GS:ffff888125b1c000(0000) knlGS:0000000000000000
[ 1577.362239][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1577.362251][    C1] CR2: 000055aff55be168 CR3: 000000000e138000 CR4: 00000000003526f0
[ 1577.362265][    C1] DR0: 0000000000000000 DR1: 0000800000000000 DR2: 0000000000000000
[ 1577.362275][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1577.362286][    C1] Call Trace:
[ 1577.362293][    C1]  <TASK>
[ 1577.362304][    C1]  ? batadv_nc_worker+0xd2/0x610
[ 1577.362325][    C1]  batadv_nc_worker+0x28c/0x610
[ 1577.362347][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[ 1577.362366][    C1]  process_scheduled_works+0xae1/0x17b0
[ 1577.362394][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1577.362419][    C1]  worker_thread+0x8a0/0xda0
[ 1577.362437][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1577.362464][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1577.362485][    C1]  kthread+0x70e/0x8a0
[ 1577.362507][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1577.362524][    C1]  ? __pfx_kthread+0x10/0x10
[ 1577.362545][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1577.362565][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1577.362587][    C1]  ? __pfx_kthread+0x10/0x10
[ 1577.362607][    C1]  ret_from_fork+0x3fc/0x770
[ 1577.362625][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1577.362643][    C1]  ? __switch_to_asm+0x39/0x70
[ 1577.362662][    C1]  ? __switch_to_asm+0x33/0x70
[ 1577.362680][    C1]  ? __pfx_kthread+0x10/0x10
[ 1577.362700][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1577.362732][    C1]  </TASK>
[ 1577.363128][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1577.620824][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) 
[ 1577.632615][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1577.642662][   T31] Call Trace:
[ 1577.645935][   T31]  <TASK>
[ 1577.648858][   T31]  dump_stack_lvl+0x99/0x250
[ 1577.653535][   T31]  ? __asan_memcpy+0x40/0x70
[ 1577.658116][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1577.663307][   T31]  ? __pfx__printk+0x10/0x10
[ 1577.667897][   T31]  panic+0x2db/0x790
[ 1577.671795][   T31]  ? __pfx_panic+0x10/0x10
[ 1577.676197][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[ 1577.682003][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1577.687370][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[ 1577.693526][   T31]  watchdog+0x102d/0x1030
[ 1577.697853][   T31]  ? watchdog+0x1de/0x1030
[ 1577.702263][   T31]  kthread+0x70e/0x8a0
[ 1577.706331][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1577.710994][   T31]  ? __pfx_kthread+0x10/0x10
[ 1577.715578][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1577.720778][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1577.725973][   T31]  ? __pfx_kthread+0x10/0x10
[ 1577.730556][   T31]  ret_from_fork+0x3fc/0x770
[ 1577.735139][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1577.740242][   T31]  ? __switch_to_asm+0x39/0x70
[ 1577.745000][   T31]  ? __switch_to_asm+0x33/0x70
[ 1577.749753][   T31]  ? __pfx_kthread+0x10/0x10
[ 1577.754339][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1577.759111][   T31]  </TASK>
[ 1577.762551][   T31] Kernel Offset: disabled
[ 1577.766871][   T31] Rebooting in 86400 seconds..