last executing test programs:

8m51.261945966s ago: executing program 2 (id=861):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000070601030000000000000000020000010500010007"], 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x44)
sendfile(r1, r1, 0x0, 0x7ffff000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000070601030000000000000000020000010500010007"], 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x44) (async)
sendfile(r1, r1, 0x0, 0x7ffff000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) (async)

8m51.014475666s ago: executing program 2 (id=865):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$TCFLSH(r2, 0x400455c8, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x760c, 0x9, 0x1ff, 0x8000, 0x3, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x40}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)

8m50.58124284s ago: executing program 2 (id=872):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0x6, 0x1000, 0x6e, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x2, 0x6, 0xb, 0x4, 0x7, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0x409, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0xfffffffe, 0x9, 0x4, 0x9, 0x8, 0x0, 0xef61, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x4, 0x5, 0x7fff, 0x2, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xff, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xfffffffd, 0xd, 0x4, 0x6d01, 0xc9d1, 0x9, 0x800000, 0x1fd, 0x80, 0x3, 0x400, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x800001, 0xffff, 0x3, 0x6, 0x1e, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x22, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xff7fffff, 0x95d, 0x5, 0x8, 0xc7, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9603, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x3]}, 0x45c)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000)

8m50.322215688s ago: executing program 2 (id=874):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000140)={0x10, 0x30, 0x3, {0x0, 0x0, {0x2, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000)

8m50.06596859s ago: executing program 2 (id=877):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") (async)
ptrace$setregs(0xd, r3, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853")
ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea76f2e4229349ee5d", 0x44}) (async)
ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc0ea76f2e4229349ee5d", 0x44})
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f00000041c0)={0x2020}, 0x2020) (async)
read$FUSE(r5, &(0x7f00000041c0)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x6000)
sendmsg$netlink(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000300)={0x4e8, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@nested={0x4d8, 0xb7, 0x0, 0x1, [@generic="4ad7606bc897d6047d3fa237a6b3471a558557cb26ff7919b0c88c43c63f0c92b4dcf5b0f2d1cdaa3bbd258c891fc025e961dff3d4b18a2391bfa2046e1617e5ae734ae14c98ffd0883d0f49abe4650d53e4181b0239e5ba8e28ad904dc9d43fd500008b7f442512aab2fb1738a17adca884c0f39bb65d57852b4ed13e550469e50c99e7fd4450f801631db2d86ef9da4d91c4bebaf1e0efed68e3c165c0c4e6163fe5b26c3537a07b41e7425ffdcbf17bffe4bf06763ce6", @nested={0xad, 0x33, 0x0, 0x1, [@generic="4ab88fcf4d92cea9f7c2a614c01e1e47114dff164ab0f56d9a6a97a0b22b2e37c4568a859bed91b6064131d52b678d51ae97503893b385b85f622e1742d39f7a2c478a2175a6920e8c0a9b54f646eb76e0a6cedf7b3e5159f9b43805c1a2c03b5b0de3c6e59f5bbcfdbeb65940f52be9a1bb541c5cfc8472b6c92f997f4c7f0222a7b4b5ed349f6c1ef2e8d37e6f6c091cb1793667cf5cd50533be2ea46ada8443a952975e3c879ae0"]}, @nested={0x28d, 0xce, 0x0, 0x1, [@generic="4d1a9a4523b3f30779785f774b0c06492cecabdb29bbf9862c5e174fbb4aafc9a35f3e2baf32b9db96f7e7697700f9004c46e06206994d8ca07c387ec9d4eaff93560fa4eb7b89dc7bb2a4793557a6d3e931a3cfe710b6c6d436504ee81867b92f931f25925a1249108a008bb6c00c172b90d6b1da2468ee4a8e4e35be44549aa1861c39035f6fa9a6f2ba2393fbd7a42730e34059c67b5160d2", @nested={0x4, 0x11}, @typed={0x8, 0x58, 0x0, 0x0, @pid=r3}, @generic="8d39be813f6404307950a8f8fcc67ad1887feef04ed8d0998b9cdcace96b50a28420db9c1bd471fdadc50b70157397a0fa2543f56f3dcc8f98c86056e3cc3def627acf0c97b5182b3e0fb9131c1906e06cdab3da2b4828b7ad670c5a02b71f87e920f7364161d38b65e841e12f74e9bb26a6fc372d202a81bc0452f7dbdaac59dfab0992bcbade27cad87dd57174a754d53d74bc75a86667133f34e1d4ff4f27dbe62dfe0edd15ffa71c5d19f26b46949cb2d077f86fa439affe6aaae4a0dca179c50e6658", @generic="a5800331ac584dfae117ef8f0586ac903b4e022a29695f4f01874a42b01f2d0b187f2a0701d48850003b67", @generic="367655b42fccdb86e1e35500d2aac6025018cffa9f422d81e907aa8ded7cdda254da3b0d72c9a87b622b3e77f02a5b686deae49c7ef811c579c9eef2c5be7f77427f81405e586e44367508eb0d89fa9317672e7c14a2c2d5e57f937e0c38d76b3a90e02d8c056951a8070a3d4547d0f5b5ff6da2425af6d46420610871763abf8bf0a69141769f91b55a78a43ac0c33ea25eb1ecf14c6ac0d60fcfe9998ffbc2b98e9cd24a9a74ecb9030c9181644be9de83ce4f41ca1137257c61c6991d246fd750052e2a91ccc982df050fed636dd6e66098ca2ecf96473664fe", @nested={0x4, 0x13c}, @nested={0x4, 0x3f}, @typed={0x8, 0x95, 0x0, 0x0, @fd=r4}, @typed={0x8, 0xee, 0x0, 0x0, @uid=r6}]}, @typed={0x10, 0xc, 0x0, 0x0, @str='/dev/uinput\x00'}, @generic="b2c8d77d4ab38d3bf655d4c7ed706740d798110127b42e52cae3fc848fbccd046c499d4bb45888dd235afdde00d183dea9eecd692c7d5004556422139fc19e232570775e30122e5da9fa7d9ceaad67dc757500f524b8bea11de28a34e0300a3ca035ca880261e86f642d75e3c86f9f8a07c722a7", @generic="4d39fc66a4ff2bdfb5ea1d88b2b5eb77cd1925d43200b9e5009e54c117d1a65cd16526d4c93caca22d72bd756def09177fde5e8b", @typed={0x8, 0x4f, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0xce, 0x0, 0x0, @uid=r7}]}]}, 0x4e8}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r8, 0x6f000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x9, 0x6}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000)

8m49.475746413s ago: executing program 2 (id=881):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0xf0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6b05}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
syz_usb_connect(0x5, 0xe4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501"], 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x300, 0x37, 0xd3, 0xdc, 0x8, 0x100d, 0xcb01, 0xbd29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0xe, 0xd0, 0x4, [{{0x9, 0x4, 0xe1, 0x1, 0x0, 0x76, 0xba, 0x95, 0x6}}]}}]}}, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000004d00)={0x14, 0x0, &(0x7f0000004cc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000006280)={0x14, 0x0, &(0x7f0000006240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000064c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "3ed082bcadc6076152f2032a86c9a080f08784d4d9e41dcbb2c0e1e34a9913405a845c8334098f4d568e"}}, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r4, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x4890)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0xa958fb92ff1b8e0a, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x41)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x11e, 0x82, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x6590000)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3)
socket$packet(0x11, 0x3, 0x300)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

8m34.420590278s ago: executing program 32 (id=881):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0xf0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6b05}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
syz_usb_connect(0x5, 0xe4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501"], 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x300, 0x37, 0xd3, 0xdc, 0x8, 0x100d, 0xcb01, 0xbd29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0xe, 0xd0, 0x4, [{{0x9, 0x4, 0xe1, 0x1, 0x0, 0x76, 0xba, 0x95, 0x6}}]}}]}}, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000004d00)={0x14, 0x0, &(0x7f0000004cc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000006280)={0x14, 0x0, &(0x7f0000006240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000064c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "3ed082bcadc6076152f2032a86c9a080f08784d4d9e41dcbb2c0e1e34a9913405a845c8334098f4d568e"}}, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r4, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x4890)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0xa958fb92ff1b8e0a, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x41)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x11e, 0x82, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x6590000)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3)
socket$packet(0x11, 0x3, 0x300)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

3m20.779954002s ago: executing program 1 (id=3248):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40041, 0x0)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000000c0)={0x6, 0x2, 0x1000})
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)

3m20.636910164s ago: executing program 1 (id=3250):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x5206, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, &(0x7f0000003080))
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)={0x44, 0x12, 0x9, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x24, 0xe, 0x0, 0x0, @binary="d84da481ad8c72442d706fc0502872331ce7ae3d9e046f6667439902c95ce99a"}]}, 0x44}], 0x1}, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x2c39000)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040))

3m20.523412573s ago: executing program 1 (id=3252):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000)
madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x401, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f16242413860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3m20.275878017s ago: executing program 1 (id=3256):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x5, 0x85, 0x1})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5, 0x7, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {<r1=>0xffffffffffffffff, 0xee00}}, './file0\x00'})
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r1, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB="67727071756f74615f696e6f64655f686172646c696d69743d362c00ebf125fbebe9a9b66de1341e54582aac03e7d383a8de70da0a3979d630e4524f4e0c"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
close(r0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xc)
creat(&(0x7f0000000140)='./file0\x00', 0x71)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)

3m20.230965756s ago: executing program 1 (id=3258):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93774000)
socket$netlink(0x10, 0x3, 0x2)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$isdn(0x22, 0x3, 0x25)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001500)={'gre0\x00', &(0x7f0000001400)={'syztnl2\x00', <r3=>0x0, 0x8000, 0x700, 0x279, 0x401, {{0x33, 0x4, 0x0, 0x9, 0xcc, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x3c, 0x3, 0x8, [{@empty, 0xb99a}, {@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x6}, {@local, 0x4}, {@empty, 0x6}, {@empty, 0x5}]}, @timestamp_addr={0x44, 0xc, 0x46, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}]}, @timestamp_prespec={0x44, 0x3c, 0xe0, 0x3, 0x5, [{@multicast2}, {@private=0xa010102}, {@broadcast, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010101, 0x9}, {@rand_addr=0x64010102}]}, @timestamp_prespec={0x44, 0x14, 0xb6, 0x3, 0x5, [{@loopback, 0x57}, {@multicast2, 0x7fffffff}]}, @timestamp={0x44, 0x18, 0x58, 0x0, 0x2, [0x7b8, 0x3, 0x7, 0x3, 0x5]}, @end, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x9, "dba7330f96cb64"}]}}}}})
sendmsg$inet(r2, &(0x7f0000001580)={&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000015c0)="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", 0x131}, {&(0x7f0000000280)="baca1d8a268dcbe1299a8845602afd959b0f479af2f939382b0a4a18a504261a50f2779e38db2d9b51c2a0b40c94d51dbca620650c41aad372cd89a4e7aea9bc1f1e25b4eff9220f1efd3df761e916c417082ed3dd3440b2a272833bebc37b57c331cf90eca3d6c490366f9be6b464ec5220e6b399576300020d2fee6fdc2f331123a49119be746b2bde45176122736eef", 0x91}, {&(0x7f0000000340)="5a4ad53d13f13802094c81509423a51fb43efcaf20ac3602b3b1dfc20f3f8b92a4dac2d3cff137e695b0928238dca7c4b6f9822f4ce7a44503b0c0f8d96f686500a29706442dadf3fe8099e4bda70298f56671a13c989b44170d21a6acd0c7b64d01cb0d320429581ccd08fcdcf867c9177c333a097de0e2c0bdf74d2b1e5a22dd93214ee9f7440524b5bbaafb123c80ec4de436b5f92c25c5852353d7f67ac37f51abfd4268b64cf707c250", 0xac}, {&(0x7f0000000400)="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", 0x1000}], 0x4, &(0x7f0000001540)=[@ip_pktinfo={{0xffffffffffffffcd, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x38}, 0x48000)
msgget(0x3, 0x208)
msgget(0x3, 0x4)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)

3m20.000092065s ago: executing program 1 (id=3262):
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='sysfs\x00', 0x122a808, 0x0)

3m19.759114678s ago: executing program 33 (id=3262):
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='sysfs\x00', 0x122a808, 0x0)

2m53.063276789s ago: executing program 3 (id=3440):
mount(&(0x7f0000000100)=@rnullb, 0x0, 0x0, 0x220000, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = getpid()
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mount(&(0x7f0000000100)=@rnullb, 0x0, 0x0, 0x220000, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async)
getpid() (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0) (async)
fcntl$setlease(r2, 0x400, 0x0) (async)
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async)

2m52.936170404s ago: executing program 3 (id=3441):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0)
syz_io_uring_setup(0x2a68, &(0x7f0000000500)={0x0, 0x79ba, 0x1008, 0x2, 0x155}, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
prctl$PR_SVE_SET_VL(0x32, 0x25ce1)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0xd7, 0x200000000000000, 0x404, 0x0, 0xffff, 0x1000, 0x10000000000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xffffffffffffffff, 0x8}, 0x0, 0x0)
mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r2, 0x0, &(0x7f0000000180))
lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./cgroup/file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2)
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0)
sendfile(r4, r0, 0x0, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000080)=""/101)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000100)={0x2, <r6=>r4, 'id1\x00'})
ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0)
r7 = geteuid()
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r8=>0x0}, &(0x7f00000001c0)=0xc)
fchown(r4, r7, r8)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x11003, r5}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000340)={0x0, 0xd6, &(0x7f0000000240)=""/214})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000380)={0x6, 0x6ed1c356, 0x1, 0x0, 0x2, [0x2, 0x5, 0x3, 0xffffffff]})
ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f00000003c0)=0xffffff2c)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04181742f04047aaaaaa8aaa102b913e015b995db4523c831e2e070a282f234c49cdb1a910a090785b1ec51934f128"], 0x1a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'})

2m51.978609316s ago: executing program 3 (id=3448):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002240)={'wlan0\x00'})
r4 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c)
setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f00000003c0)={0x1}, 0x8) (async, rerun: 64)
sendto$inet6(r4, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) (rerun: 64)
sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000006c0)={0x3c, r2, 0x1, 0x70bd2c, 0x259fdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x13, 0x2a, [@challenge={0x10, 0x1, 0x7b}, @ibss={0x6, 0x2, 0x7a7}, @mesh_chsw={0x76, 0x6, {0x2, 0x5, 0x37, 0x9}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async)
r5 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) (async)
setgroups(0x0, 0x0) (async)
getgroups(0x1, &(0x7f0000000080)=[<r6=>0xee00])
setregid(0x0, r6)
r7 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r9, 0x9}}, 0x10) (async)
close(r8)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) (async)
pread64(r7, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb)
syz_usb_connect$printer(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0xa, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0xaa, 0x5}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x8, 0x4, 0xa, 0x8, 0x8}, 0xdb, &(0x7f00000001c0)={0x5, 0xf, 0xdb, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa9, 0xa, 0x81, 0x6, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x11a8, 0x1100f, 0xe021, [0xc0, 0x0, 0xc0, 0xc000, 0x140, 0xc000]}, @generic={0x84, 0x10, 0x1, "9e5e48d8206724c25991075048a07bfdf128655605817d6f64f88eb3070060639bf07f5ea79c96072288d48ee603ef8dc131ebbae33bd4034f1600c55c2290a3ee1c96d06fa46f120aad39dca43edccff101e265535d63efd217ecfbb1186ccc9c6ce9583f634bab23d32df07f7ab8725ab80a146a2885f4658ceaae0d7d9a5765"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x52, 0xfd, 0x1, 0x1000, 0x2b}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x8, 0xff00, 0x300, [0xc000, 0x3f3f, 0xffa0]}]}, 0x6, [{0xf3, &(0x7f00000002c0)=@string={0xf3, 0x3, "858ed1d364c7847d6c441b915f20149fd68605b36523dd5d82b851fdc890e67dbcb91138071b64352d30c7fe7b304dbe734cf2419c928b997c335149ca1d8fbe3ae7f3b434e35a7d97ac00c36aea13c2e9d73c12fa8c0aab85b6346c0a3187461796d9047d99d2990438505f6ac72e4caa5e6b5ce3a2dd0eb264abd6c3bab39f6b4e57a2b6a224d3a6fe4350d1a3587774f8b9875f9d7394aa8f440d95635a44038bbfbafdf25ffaee2f94bd63152161b67961df9a4bcff86d8ea1b3e0a82d0867642d10cbe1c4b9b9b29fc8d51b7310d7c84d719d8af73c2174e2f7d18692538c2532eac461806ec9d10cfaf39bd6e091"}}, {0xce, &(0x7f00000003c0)=@string={0xce, 0x3, "0f9bbfd864cd22bdfa7c7a7bd6a36ad4cfc1314ee7c7fe69e9f2213af8c38d018ae6806dc7217d6725cf778797b848e1b8b058e08f00c410eed5a6ad3384f13ef9005eb09c999a16689552a899ec524ce8e032ebb4f0cdcc94969017f1519553932b339dffd1c21cfcf1640b8a523a0423f261b00633a4d102bf3a4e18f73ca06d183041a0cf5881f29bbd33ae4ef81e158e98f2ee38ae25dabb78fb8edffb91d239f4434a6e555a7edc351cb3d58878617fd8e807f234e0ad5056f61cf88b566adcb83a517b40e0364311e0"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2401}}, {0x1d, &(0x7f00000004c0)=@string={0x1d, 0x3, "1396186c92dc16e4fe8576840132387250677de3d316e41a7acf8e"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2809}}, {0x62, &(0x7f0000000540)=@string={0x62, 0x3, "5697c33982eca91de882bd7d01aa9fb8ab603285702157de28702058f0ca54f22b93dafbaba96eda8416ac065f8cfa0d55c18498a90a5331581022222109107d714a9966aec2ad43919fae9e5b14dd0aaf05253bcacd5263b6f00092bb82d468"}}]}) (async)
r10 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async)
r11 = syz_usb_connect$cdc_ecm(0x2, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x10, 0x18, 0x6, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "70bb"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xc1, 0x58c, 0x80}, [@mbim={0xc, 0x24, 0x1b, 0x10, 0x47, 0x40, 0xf, 0x9, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0xfffc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xe, 0x5, 0x1a}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf9, 0xe8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x3f, 0x2, 0xc}}}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x7, 0xe2, 0xfe, 0x40, 0x6}, 0x24, &(0x7f0000000840)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x67, 0x3, 0x40, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x76, "ccb119b24c187b85034704a198bead41"}]}, 0x5, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x413}}, {0x45, &(0x7f0000000900)=@string={0x45, 0x3, "b070d8716538075c141cc7ed8735b6055e43e74699096ba8e4bc9825237feb30360a5cb2b445f8af895a1bbeecc8f698547ba080a34675c8fd41890e65066302aee8ff"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x83e}}, {0xaa, &(0x7f00000009c0)=@string={0xaa, 0x3, "45a3f1af4963e69d7c771dd5c2f800e4d4d769d9d73de6412ce7b8e07f6598ab67e16eb7a398a660a4e95b70fabc5d8f18f2ab737bfebe0fbff6fd7fa196a1d0e363c68583ba4d200b6c0189b2d6dc8ca7cf56da107b992d8289474b02a4f6ce1e4705d73131de0178108de2ae17d1c0b43b9e47f06a123e7548c0cad480ed97903473ed9bb3ddd8129a2b1ff142462023dfb7c0c9524898eaabef4902897fffabb41d5334964874"}}]})
syz_usb_control_io$cdc_ecm(r11, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xc38, &(0x7f0000000340)=ANY=[@ANYBLOB="d4eca8448df7d15b35770acf7e09aa725b6d2d24db1fe4844fef7dd89bad1e1090f7d30952fec2a48a8baf97d7bab897637c00449d31d9bf4300edb594bda6fcc28048decb4ebfda99dfe2f03204ae202b3eb74de3e7b0ebb8dd18e8473e06f55f741db8832750089bc0cca5f53716e34e610968865f17682143725170bf2f0ebce3c616ea21c05f0444ecdfff23"]) (async, rerun: 32)
listxattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=""/37, 0x25) (async, rerun: 32)
syz_usb_control_io$printer(r5, 0x0, 0x0) (async, rerun: 64)
fadvise64(r0, 0x92, 0x5, 0x2) (rerun: 64)

2m51.82431786s ago: executing program 3 (id=3450):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
ioprio_set$pid(0x1, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000340)=0xe)
writev(r7, &(0x7f0000000300)=[{&(0x7f0000000500)="8f7ef9c44b95acdf26be5f11", 0xc}, {0x0}], 0x30)
listen(r3, 0x10001)
r8 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r8, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045)
connect$tipc(r8, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x2, 0x3}, 0x1}}, 0x10)
sendfile(r2, r2, 0x0, 0x7ffff000)

2m51.51469004s ago: executing program 3 (id=3454):
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4000000081, 0xfffffffffffffff9})
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) (async)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x1008000, 0x0, @value=0x7985})
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="bc5dfc7fbbbc5bfddb32bebd15e12cbe86c4b92e", 0x14, 0xfffffffffffffffe) (async)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)

2m50.354762115s ago: executing program 3 (id=3465):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008894)
bind$inet6(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0923deed", @ANYRES16=r3, @ANYBLOB="0108390000000800030000000000000000005b58ff7079aa16ad3385b31b011681f944d86817ec9303395143548670fa3e65f485e092b96ab9505a9256bc7c1ab4276f51a7be44d206481f4bbec149e4c91ad8a83e8473861efe32cb237b4be2ad5d31b06a50ef0ac2798165fec3c937b6194d694b4fba53c5c45e7fd64e8795dfefb9f97ee52ff7ee1e899499fbd05e503ca15ae053b2763b091c725f38f5aa7cae0046e067f0edb9d7fb3838428430977742d829b795752190b78e0757598a083bdcca17b0f52d75a7eec11c3e7194b9", @ANYRES32=r3, @ANYBLOB="10005a800c0000800500020099000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10)
r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r5, &(0x7f0000002a40)=[{{}, 0x9}], 0x1, 0x40002000, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
recvmmsg(r5, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
r9 = socket$kcm(0x2d, 0x2, 0x0)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
ioctl$IOMMU_VFIO_GET_API_VERSION(r10, 0x3b64)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000400)={<r11=>r7})
bind$xdp(r11, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
dup(r0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

2m50.171537117s ago: executing program 34 (id=3465):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008894)
bind$inet6(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0923deed", @ANYRES16=r3, @ANYBLOB="0108390000000800030000000000000000005b58ff7079aa16ad3385b31b011681f944d86817ec9303395143548670fa3e65f485e092b96ab9505a9256bc7c1ab4276f51a7be44d206481f4bbec149e4c91ad8a83e8473861efe32cb237b4be2ad5d31b06a50ef0ac2798165fec3c937b6194d694b4fba53c5c45e7fd64e8795dfefb9f97ee52ff7ee1e899499fbd05e503ca15ae053b2763b091c725f38f5aa7cae0046e067f0edb9d7fb3838428430977742d829b795752190b78e0757598a083bdcca17b0f52d75a7eec11c3e7194b9", @ANYRES32=r3, @ANYBLOB="10005a800c0000800500020099000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10)
r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r5, &(0x7f0000002a40)=[{{}, 0x9}], 0x1, 0x40002000, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
recvmmsg(r5, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
r9 = socket$kcm(0x2d, 0x2, 0x0)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
ioctl$IOMMU_VFIO_GET_API_VERSION(r10, 0x3b64)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000400)={<r11=>r7})
bind$xdp(r11, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
dup(r0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

1m14.235812865s ago: executing program 4 (id=4055):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0x6, 0x93, {0x93, 0xa, "fc738fca3fd1fd96e47abbcfc9fea5517c0e0680589d63985f5cb48282d4b0538f47c02939d12817aabcf6d4c6c4231e1c158f16083f34774fd056307fb71194a5a143716b4f5196d8c3a1b784b998247ca19e52b12519cee89a8f58067e9b3a327933befb3e95de301c635630eddbbb1ef32d17d38a384584a35e777444d1e905934cec0a058f797e12cabed382898eff"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x20, 0xf, 0x31, "288a80e38fcd35ae2e1c51897fee472d9037e71215ae6f33bb00e62ed06b019b9c675cfb19ba82c65f07fddf5cbf40a4b5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xd, 0x5, 0x800, 0x1, 0x1000, 0x1, 0x10, 0xffffffff, 0x6, 0x9, 0xfffe, 0xaef}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}})

1m11.431350501s ago: executing program 4 (id=4068):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x104)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x2, 0x0, [{0xf7f52004, 0x73, &(0x7f00000001c0)=""/115}, {0x2, 0xe4, &(0x7f0000000500)=""/228}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

1m11.393533065s ago: executing program 4 (id=4069):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000000c0))
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e000000000002a1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @remote}}}, 0x90)
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000)

1m11.255182762s ago: executing program 4 (id=4070):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000000000009d000040"])
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000180), 0x200000, &(0x7f0000000440)={[], [{@uid_eq={'uid', 0x3d, r5}}, {@hash}]})
syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4000, 0x0, 0x0, 0x0, 0xd0}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
read(r6, &(0x7f0000002340)=""/4096, 0x1002)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, &(0x7f00000001c0)=0xeeef0000)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)="0aa1", 0x2}], 0x1}, 0x41)
recvmsg(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40010041)
read(r8, &(0x7f0000000040)=""/98, 0x3a)
syz_usb_control_io$hid(r7, 0x0, 0x0)
r10 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
futimesat(r10, &(0x7f0000000280)='./file0\x00', 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0x9, "250156ba"}, @main=@item_4={0x3, 0x0, 0x9, "c9a46a31"}, @global=@item_012={0x1, 0x1, 0x1, ' '}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r11, r11, 0x0, 0x7ffff000)

1m7.953176324s ago: executing program 4 (id=4090):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
madvise(&(0x7f00003bf000/0x4000)=nil, 0x4000, 0xf)
mremap(&(0x7f000073e000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000a7f000/0x4000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
close(r1)
open$dir(&(0x7f0000000180)='./file0\x00', 0x24000, 0x80)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000111401002bbd0000fedbdf250800560028000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m7.59146232s ago: executing program 4 (id=4091):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000100)="e8", 0xff25)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r1, 0xf648d000)
madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m7.46863777s ago: executing program 35 (id=4091):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000100)="e8", 0xff25)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r1, 0xf648d000)
madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

5.07204184s ago: executing program 7 (id=4491):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async)
mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x208c, 0x0) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000003280)={0x44, r0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0c1}, 0x24000804) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

5.028681945s ago: executing program 7 (id=4492):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000180)={0x9a, 0x6, 0x5ae6fefe, 0xf})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
sendfile(r2, r2, 0x0, 0x5)
ioprio_get$pid(0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x4}, 0x4}, 0x80, 0x0}, 0x24000059)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x6)
ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, 0x0)
writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r8 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r8, &(0x7f0000000080), 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000007f00000000000000060a0b04000000000000000002000000300004802c000180080001006c6f670020000280110002402f6465762f726e756c6c623000000000080006400000003e0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x84}}, 0x40)
write(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0)
r10 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10)
setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
socket$unix(0x1, 0x1, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)

3.612708823s ago: executing program 5 (id=4503):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x214})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
waitid(0x0, r1, 0x0, 0x1000000, &(0x7f0000000200))
add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fea002ae797187ebfa9f216c998eb937235458bcf702c6ae803dfa6793c87e4471f181c01ac16cb88a61517b028928a8d3768eb6c7ffe91ec60acba2e36b0f517bc3469e9ab5a000c95300c7e59dfa32e844a00ababe920de9e0700a7a15450d9c090d2d2dff7170fd51617a78ca00", 0xc9, 0xfffffffffffffffe)
r2 = socket(0xa, 0x1, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f0000000080)={0x40, 0xb, 0x5, {0x5, 0xb, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x8)
r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0)
open_by_handle_at(r6, &(0x7f0000000380)=ANY=[@ANYRES8=r2], 0x40)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
sendfile(r7, r7, 0x0, 0x7ffff000)
r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
flock(r10, 0x1)
r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getpeername(r11, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x1, 0x11, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb00002b700000785d9600000500000000080000000000000000000100", "28090100bdb22d0000b420a1a93c52070000009b01177d3d458dd4992861ac000000000000000200", "90d05ee6b6480000000000b6c6c19d0000000002101300001f9238000700", [0x0, 0xfffffffffffffff8]}})

2.383016632s ago: executing program 0 (id=4504):
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ntfs3\x00', 0x200000, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080))
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000007e40)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r6)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000cc00}, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DROP_MASTER(r9, 0x641f)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r10, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c5}, 0x800)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000841}, 0x24000000)

2.267577175s ago: executing program 0 (id=4505):
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='befs\x00', 0x0, 0x0) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='befs\x00', 0x0, 0x0)

2.26637571s ago: executing program 0 (id=4506):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)
fadvise64(0xffffffffffffffff, 0x92, 0x5, 0x2)
r5 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000000)=0x9, 0x4)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x633a, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
recvfrom$inet6(r5, 0x0, 0x0, 0x40000020, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, 0xffffffffffffffff, 0x93771000)

1.851864525s ago: executing program 5 (id=4508):
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
r1 = gettid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={<r2=>0x0}, &(0x7f0000000400)=0xc)
r3 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0x9]}, 0x8, 0x1000)
syz_clone3(&(0x7f0000000780)={0x40050100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0xd}, &(0x7f0000000200)=""/16, 0x10, &(0x7f00000005c0)=""/157, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, r2], 0x8, {r3}}, 0x58)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r6, 0x801, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4ac7e3f40500"}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x44}}, 0x24004000)
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f00000002c0)={0x1, 0x1, 0xc})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_setup(0x0, &(0x7f0000000340))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0xbe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r10, 0x2000)
syz_kvm_setup_cpu$x86(r5, r9, &(0x7f000068d000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f77f00baf80c66b8e346728166efbafc0cb0b7ee0f22a60f019cc473652e672e64260f01c9660f845c0000000f06640f0866b8000000800f23c00f21f8663503000b000f23f865666e", 0x49}], 0x1, 0x86, &(0x7f00000000c0)=[@cstype0={0x4, 0xe}], 0x1)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r13)
sendmsg$NLBL_CIPSOV4_C_ADD(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r14, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c5"], 0x10c}}, 0x0)
bind$inet(r12, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010101}, 0x10)
connect$inet(r12, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
sendmmsg(r12, &(0x7f0000007fc0), 0x800001d, 0x0)

1.605770168s ago: executing program 7 (id=4509):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xff, 0xffffffff, 0x3, 0x4, 0x78, "04ad00", 0xa7e8, 0x3})
ioctl$TCXONC(r1, 0x540a, 0x2)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r0, 0xea5c000)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d000000ba7b00001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000090603000000000000000000010000020900020073797a3100000000100007800a0011003100"/60], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000005)
close(r2)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)

1.503361317s ago: executing program 7 (id=4510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000b00)=[{&(0x7f00000003c0)='l', 0x1}], 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2)
syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, 0x0, 0x5, 0x3)
write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}}, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x8001})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000)

1.338974464s ago: executing program 0 (id=4511):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x151b40, 0x0)
fadvise64(r0, 0x7, 0x1ff, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xda2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000000], [0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = dup(r2)
write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x1}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x4, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x5, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0xfffffff8, 0x8, 0x40000000, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x2, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x10000008, 0x5a, 0xffff2503, 0xa, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x4360, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0x1, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x100, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x7, 0x7fffffff, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0xd, 0x1, 0x7ff, 0xfffffff2, 0x1, 0x3, 0x7, 0x3, 0x3, 0x3016, 0xfffffffd, 0x5, 0xa1, 0xc, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x3, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x2, 0x4, 0x5, 0x3ff, 0x10001, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x0, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0xde, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
read$FUSE(r3, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @loopback, 0x5}, 0x1c)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x5)
ioctl$TCSETS(r1, 0x8926, &(0x7f00000000c0)={0xfffffdfd, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"})
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x151b40, 0x0) (async)
fadvise64(r0, 0x7, 0x1ff, 0x1) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async)
write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xda2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000000], [0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r2, 0x5501) (async)
dup(r2) (async)
write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x1}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x4, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x5, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0xfffffff8, 0x8, 0x40000000, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x2, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x10000008, 0x5a, 0xffff2503, 0xa, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x4360, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0x1, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x100, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x7, 0x7fffffff, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0xd, 0x1, 0x7ff, 0xfffffff2, 0x1, 0x3, 0x7, 0x3, 0x3, 0x3016, 0xfffffffd, 0x5, 0xa1, 0xc, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x3, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x2, 0x4, 0x5, 0x3ff, 0x10001, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x0, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0xde, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async)
read$FUSE(r3, 0x0, 0x0) (async)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @loopback, 0x5}, 0x1c) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x5) (async)
ioctl$TCSETS(r1, 0x8926, &(0x7f00000000c0)={0xfffffdfd, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"}) (async)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (async)

1.228225949s ago: executing program 7 (id=4512):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, r0, 0x105e6000)
sendto$inet(r1, &(0x7f0000000040)="d90c6af0b6eea5b753d0634bb3a5a841ae9f40cd6d5b798494f1dcfc030d7a153e76e86939e4acc01ba637e82fd2eac10597137a9e8bac9b69fe604359749f40efc5dcbf738484d39e971e98e92225730dac98a8ed5c5e5a50c9deab561d33d5341f4edd7af1ee", 0x67, 0x40, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
r2 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r2, 0x114, 0x271b, 0x0, &(0x7f0000000000)=0xfffffffffffffce5)

1.143412935s ago: executing program 7 (id=4513):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}) (async)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) (async)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4c, 0x9e, 0x58, 0x10, 0x545, 0x8080, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0x5c, 0xf, 0x46}}]}}]}}, 0x0)
ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) (async)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
setreuid(0x0, r2)
mmap(&(0x7f00000f7000/0x1000)=nil, 0x1000, 0x3000001, 0x22052, r0, 0x2000)

1.140374472s ago: executing program 0 (id=4514):
mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0xcc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6b05}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)

1.109064694s ago: executing program 0 (id=4515):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xff, 0x6}, 0x8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303d20422c02124070e702030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="401201000000b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000340)={0x40, 0xe, 0x1, 'l'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)={0x0, 0xc, 0x3, 'q\x00>'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x3})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}}, 0x4080)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xa9d0e000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

943.434118ms ago: executing program 6 (id=4517):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x48}}, 0x20000000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0)

942.754622ms ago: executing program 5 (id=4518):
set_mempolicy(0x8006, 0x0, 0x5)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0x4, 0x4, 0x3, 0x56, 0x2, 0x9, 0x9, r4}, &(0x7f0000000100)=0x20)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000)

922.627019ms ago: executing program 6 (id=4519):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r3, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r3, r3, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0xc4, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x18}}}}, [@NL80211_ATTR_IE={0x86, 0x2a, [@measure_req={0x26, 0x4d, {0xf, 0xe, 0x3, "ad689a7abb7461f8c7658e53c9ad103a28ba2f18ea6048b83ccef0d9dc0e0d5f2ddfbe8034a798a524110fbc2bc812b8e25cd4c619fc4bd56ba731c997b16330c4061851a1f422bebe6e"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6}, @measure_req={0x26, 0x26, {0xe, 0x7f, 0x2, "8ff7afe246a7767d5ec482f9261a1c42cb682f75ebde638795763d57a49cfdd81e42a0"}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x8}, 0x7, 0x8, @device_a, 0x9, 0x7fff, 0x8000}}]}]}, 0xc4}}, 0x44060)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='vxfs\x00', 0x28a046, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
creat(&(0x7f0000000280)='./file0\x00', 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) (async)
listen(r3, 0x3) (async)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async)
close_range(r3, r3, 0x0) (async)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0xc4, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x18}}}}, [@NL80211_ATTR_IE={0x86, 0x2a, [@measure_req={0x26, 0x4d, {0xf, 0xe, 0x3, "ad689a7abb7461f8c7658e53c9ad103a28ba2f18ea6048b83ccef0d9dc0e0d5f2ddfbe8034a798a524110fbc2bc812b8e25cd4c619fc4bd56ba731c997b16330c4061851a1f422bebe6e"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6}, @measure_req={0x26, 0x26, {0xe, 0x7f, 0x2, "8ff7afe246a7767d5ec482f9261a1c42cb682f75ebde638795763d57a49cfdd81e42a0"}}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x8}, 0x7, 0x8, @device_a, 0x9, 0x7fff, 0x8000}}]}]}, 0xc4}}, 0x44060) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='vxfs\x00', 0x28a046, 0x0) (async)

743.23583ms ago: executing program 6 (id=4520):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000001c0)={0x1, 0x4, 0x8, 0x40, @vifc_lcl_addr=@broadcast, @multicast1}, 0x10)
r3 = dup(r1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r3, 0x0)
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x4800000000000000, 0x4000, 0x40, 0x0, 0x10})
fadvise64(r0, 0x92, 0x5, 0x2)
mmap(&(0x7f00005ec000/0x1000)=nil, 0x1000, 0x700000a, 0x20810, r3, 0x937f1000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000001c0)={0x1, 0x4, 0x8, 0x40, @vifc_lcl_addr=@broadcast, @multicast1}, 0x10) (async)
dup(r1) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async)
syz_init_net_socket$ax25(0x3, 0x3, 0xcf) (async)
ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r3, 0x0) (async)
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)={0x4800000000000000, 0x4000, 0x40, 0x0, 0x10}) (async)
fadvise64(r0, 0x92, 0x5, 0x2) (async)
mmap(&(0x7f00005ec000/0x1000)=nil, 0x1000, 0x700000a, 0x20810, r3, 0x937f1000) (async)

687.420678ms ago: executing program 5 (id=4521):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x4001)
ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000000c0)=""/94)
listen(r1, 0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x210040, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x18, 0x11, r0, 0x8e62b000)
r4 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r4, 0x114, 0x271b, 0x0, &(0x7f0000000000)=0xfffffffffffffce5)

674.908424ms ago: executing program 5 (id=4522):
set_mempolicy(0x8006, 0x0, 0x5)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, <r1=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x1000000})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000)

623.241016ms ago: executing program 6 (id=4523):
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, 0x0}, 0x20000000) (async, rerun: 32)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000000)=""/245, &(0x7f00000003c0)=0xf5)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)

488.166724ms ago: executing program 6 (id=4524):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x102, 0x0)
sendfile(r1, r1, 0x0, 0x6)
ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f00000000c0))
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x6590000)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$packet(0x11, 0x3, 0x300)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x4000)
setresuid(r5, r5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x13)
quotactl_fd$Q_GETINFO(r2, 0xffffffff80000501, r5, &(0x7f0000000040))

160.859259ms ago: executing program 5 (id=4525):
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000040)='P')
pipe2$watch_queue(0x0, 0x80)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async)
syz_usb_disconnect(r1) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000040)='P') (async)
pipe2$watch_queue(0x0, 0x80) (async)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) (async)

0s ago: executing program 6 (id=4526):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r2, 0x100, 0x1)
getdents64(r2, 0x0, 0x4f)
madvise(&(0x7f00007c1000/0x2000)=nil, 0x2000, 0x15)
r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x80800)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x3, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x8, 0x0, 0xe, 0x312, 0x78, 0x9, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x4, 0x6, 0x7, 0xff, 0x20005, 0x5, 0x5f31, 0x4, 0x1000, 0x2, 0x2, 0xa, 0x4, 0x9, 0xb, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x2, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x4c2b, 0x5, 0xb, 0x4, 0x5, 0x4, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x12, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0x8, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xa8, 0x7, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x3, 0x9, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x69], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x2, 0x6, 0x7ffe, 0x8, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x3, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x2, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x2000)

kernel console output (not intermixed with test programs):

 6-1: SerialNumber: ᐉ
[  624.162984][  T121] usb 6-1: rejected 1 configuration due to insufficient available bus power
[  624.172124][  T121] usb 6-1: no configuration chosen from 1 choice
[  624.199486][ T5923] usb usb5-port1: attempt power cycle
[  624.300734][   T24] usb 7-1: USB disconnect, device number 40
[  624.561136][ T5923] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  624.583674][ T5923] usb 5-1: device descriptor read/8, error -71
[  624.842303][ T5923] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  624.869971][ T5923] usb 5-1: device descriptor read/8, error -71
[  624.987095][ T5923] usb usb5-port1: unable to enumerate USB device
[  625.224190][  T121] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  625.412871][  T121] usb 7-1: Using ep0 maxpacket: 16
[  625.426939][  T121] usb 7-1: unable to get BOS descriptor or descriptor too short
[  625.447341][  T121] usb 7-1: config 1 has an invalid interface number: 231 but max is 0
[  625.456150][  T121] usb 7-1: config 1 has no interface number 0
[  625.473226][  T121] usb 7-1: config 1 interface 231 has no altsetting 0
[  625.489606][  T121] usb 7-1: string descriptor 0 read error: -22
[  625.506783][  T121] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5
[  625.531658][  T121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.766150][  T121] usbtest 7-1:1.231: Linux gadget zero
[  625.782698][  T121] usbtest 7-1:1.231: high-speed {control in/out int-out} tests (+alt)
[  625.975048][T19393] /dev/rnullb0: Can't open blockdev
[  626.838880][  T121] usb 6-1: USB disconnect, device number 33
[  627.176398][T19406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3937'.
[  627.209032][T19406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3937'.
[  627.255912][  T121] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  627.283451][T19406] input: syz1 as /devices/virtual/input/input77
[  627.402829][T19408] /dev/rnullb0: Can't open blockdev
[  627.434695][  T121] usb 6-1: Using ep0 maxpacket: 32
[  627.452605][  T121] usb 6-1: config 0 has an invalid interface number: 20 but max is 0
[  627.466756][  T121] usb 6-1: config 0 has no interface number 0
[  627.487157][  T121] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  627.510003][  T121] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  627.518411][T19410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3939'.
[  627.534018][  T121] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  627.546611][  T121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.566000][  T121] usb 6-1: Product: syz
[  627.570299][  T121] usb 6-1: Manufacturer: syz
[  627.581063][  T121] usb 6-1: SerialNumber: syz
[  627.593083][  T121] usb 6-1: config 0 descriptor??
[  627.614705][T19403] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  627.624273][T19403] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  627.655141][  T121] usb-storage 6-1:0.20: USB Mass Storage device detected
[  627.681992][  T121] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  627.871650][T19403] /dev/rnullb0: Can't open blockdev
[  627.884157][  T121] scsi host1: usb-storage 6-1:0.20
[  627.934374][  T121] usb 6-1: USB disconnect, device number 34
[  628.025729][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3942'.
[  628.054195][T19426] /dev/rnullb0: Can't open blockdev
[  628.119722][T16836] usb 7-1: USB disconnect, device number 41
[  628.363430][T19448] netlink: 'syz.6.3947': attribute type 1 has an invalid length.
[  628.403936][T19448] netlink: 'syz.6.3947': attribute type 4 has an invalid length.
[  628.481658][T19448] /dev/rnullb0: Can't open blockdev
[  628.609419][T19459] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3951'.
[  628.626035][T19458] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3951'.
[  628.734688][T16836] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  628.885921][T19476] /dev/rnullb0: Can't open blockdev
[  628.905245][T16836] usb 6-1: Using ep0 maxpacket: 16
[  628.913430][T16836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  628.929891][T16836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  628.952116][T16836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  628.963315][T17151] usb 7-1: new full-speed USB device number 42 using dummy_hcd
[  628.978929][T16836] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  628.994637][T19482] /dev/rnullb0: Can't open blockdev
[  629.000829][T16836] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  629.028200][T16836] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  629.042336][T16836] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  629.061465][T16836] usb 6-1: Manufacturer: syz
[  629.067974][T16836] usb 6-1: config 0 descriptor??
[  629.159608][  T121] usb 1-1: new low-speed USB device number 53 using dummy_hcd
[  629.203996][T17151] usb 7-1: config 9 interface 0 altsetting 10 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  629.216441][T17151] usb 7-1: config 9 interface 0 has no altsetting 0
[  629.235876][T17151] usb 7-1: New USB device found, idVendor=147a, idProduct=e03e, bcdDevice= 8.f4
[  629.247552][T17151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.258775][T17151] usb 7-1: Product: syz
[  629.264565][T17151] usb 7-1: Manufacturer: syz
[  629.270257][T17151] usb 7-1: SerialNumber: syz
[  629.280744][T19463] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  629.349225][  T121] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  629.371202][  T121] usb 1-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  629.394173][  T121] usb 1-1: config 1 interface 0 has no altsetting 0
[  629.632328][T17151] usb 7-1: USB disconnect, device number 42
[  629.758409][T19490] sp0: Synchronizing with TNC
[  629.837302][T19491] sp0: Synchronizing with TNC
[  630.480016][ T5969] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  630.651921][ T5969] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  630.668592][ T5969] usb 7-1: config 0 has no interface number 0
[  630.680029][ T5969] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  630.694305][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.703184][ T5969] usb 7-1: Product: syz
[  630.721609][ T5969] usb 7-1: Manufacturer: syz
[  630.729719][ T5969] usb 7-1: SerialNumber: syz
[  630.768477][ T5969] usb 7-1: config 0 descriptor??
[  631.009200][T19493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.032304][T19493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.053819][T19493] /dev/rnullb0: Can't open blockdev
[  631.082474][ T5969] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  631.110619][ T5969] usb 7-1: USB disconnect, device number 43
[  631.919704][T16836] rc_core: IR keymap rc-hauppauge not found
[  631.925780][T16836] Registered IR keymap rc-empty
[  631.936837][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.013929][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.021574][  T121] usb 1-1: New USB device found, idVendor=24b8, idProduct=0040, bcdDevice= 0.40
[  632.056108][  T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.064208][  T121] usb 1-1: Manufacturer: ⠉
[  632.070883][T16836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  632.088940][  T121] usb 1-1: can't set config #1, error -71
[  632.097651][T16836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input78
[  632.116703][  T121] usb 1-1: USB disconnect, device number 53
[  632.145684][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.183945][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.216111][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.238709][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.274920][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.322552][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.354401][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.387243][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.409107][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.423230][T19531] /dev/rnullb0: Can't open blockdev
[  632.429066][T16836] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  632.451847][T16836] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  632.460685][T16836] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  632.476918][T16836] usb 6-1: USB disconnect, device number 35
[  632.833888][T16836] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  632.995006][T16836] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  633.014836][T16836] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  633.027398][T16836] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  633.037583][T16836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.045725][T16836] usb 6-1: Product: syz
[  633.050209][T16836] usb 6-1: Manufacturer: syz
[  633.055026][T16836] usb 6-1: SerialNumber: syz
[  633.299658][T19522] /dev/rnullb0: Can't open blockdev
[  633.309410][T16836] usb 6-1: 0:2 : does not exist
[  633.322629][T16836] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  633.364503][T16836] usb 6-1: USB disconnect, device number 36
[  633.405900][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  633.500066][T19544] 9pnet: p9_errstr2errno: server reported unknown error ��p��A���
��;
KZ�4
[  633.657943][T19555] netlink: 'syz.4.3980': attribute type 2 has an invalid length.
[  633.666366][T19555] netlink: 'syz.4.3980': attribute type 9 has an invalid length.
[  633.674599][T19555] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3980'.
[  633.693955][T19555] netlink: 'syz.4.3980': attribute type 2 has an invalid length.
[  633.704849][T19555] netlink: 'syz.4.3980': attribute type 9 has an invalid length.
[  633.713980][T19555] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3980'.
[  633.723463][ T5969] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[  633.903143][ T5969] usb 7-1: config 0 has an invalid interface number: 230 but max is 0
[  633.911991][ T5923] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  633.921563][ T5969] usb 7-1: config 0 has no interface number 0
[  633.928035][ T5969] usb 7-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  633.940256][ T5969] usb 7-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  633.951489][ T5969] usb 7-1: config 0 interface 230 has no altsetting 0
[  633.961088][ T5969] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  633.970578][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.981378][ T5969] usb 7-1: Product: syz
[  633.986450][ T5969] usb 7-1: Manufacturer: syz
[  633.991576][ T5969] usb 7-1: SerialNumber: syz
[  633.998655][ T5969] usb 7-1: config 0 descriptor??
[  634.006175][T19542] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  634.014708][T19542] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  634.024017][ T5969] ums-usbat 7-1:0.230: USB Mass Storage device detected
[  634.039038][ T5969] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  634.084065][ T5923] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  634.094082][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.102626][ T5923] usb 1-1: Product: syz
[  634.107032][ T5923] usb 1-1: Manufacturer: syz
[  634.111881][ T5923] usb 1-1: SerialNumber: syz
[  634.132751][ T5923] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  634.162578][ T5903] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  634.408056][ T5923] usb 1-1: USB disconnect, device number 54
[  634.446050][ T5969] ums-usbat 7-1:0.230: probe with driver ums-usbat failed with error -5
[  634.478819][ T5969] usb 7-1: USB disconnect, device number 44
[  634.595664][T19576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.605207][T19576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.868619][T16836] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  635.020090][T16836] usb 5-1: device descriptor read/64, error -71
[  635.287700][T16836] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  635.316140][ T5903] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  635.325826][ T5903] ath9k_htc: Failed to initialize the device
[  635.334519][ T5923] usb 1-1: ath9k_htc: USB layer deinitialized
[  635.433162][T16836] usb 5-1: device descriptor read/64, error -71
[  635.618539][T19597] syz.6.3992: attempt to access beyond end of device
[  635.618539][T19597] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0
[  635.634312][T19597] syz.6.3992: attempt to access beyond end of device
[  635.634312][T19597] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0
[  635.654628][T19597] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  635.672452][ T5923] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  635.682492][T19597] syz.6.3992: attempt to access beyond end of device
[  635.682492][T19597] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0
[  635.697894][T19597] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  635.709187][T19597] syz.6.3992: attempt to access beyond end of device
[  635.709187][T19597] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0
[  635.725341][T19597] syz.6.3992: attempt to access beyond end of device
[  635.725341][T19597] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0
[  635.738797][T19597] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  635.751435][T19597] syz.6.3992: attempt to access beyond end of device
[  635.751435][T19597] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0
[  635.772700][T19597] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  635.787126][T19597] syz.6.3992: attempt to access beyond end of device
[  635.787126][T19597] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0
[  635.800522][T19597] syz.6.3992: attempt to access beyond end of device
[  635.800522][T19597] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0
[  635.816064][T19597] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  635.826955][T19597] syz.6.3992: attempt to access beyond end of device
[  635.826955][T19597] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0
[  635.844285][T19597] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  635.854438][T19597] syz.6.3992: attempt to access beyond end of device
[  635.854438][T19597] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0
[  635.872431][ T5923] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  635.886305][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.897381][T19597] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  635.910445][ T5923] usb 1-1: config 0 descriptor??
[  635.921166][T19597] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  635.937932][ T5923] gspca_main: sunplus-2.14.0 probing 055f:c420
[  635.952993][T19597] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1)
[  636.503260][T16836] usb usb5-port1: attempt power cycle
[  636.806111][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3987'.
[  636.830862][ T5923] gspca_sunplus: reg_w_riv err -71
[  636.836110][ T5923] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  636.838082][T19610] /dev/rnullb0: Can't open blockdev
[  636.873273][ T5923] usb 1-1: USB disconnect, device number 55
[  636.893251][T16836] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  636.902229][T19616] /dev/rnullb0: Can't open blockdev
[  636.927591][T16836] usb 5-1: device descriptor read/8, error -71
[  636.986373][T19624] /dev/rnullb0: Can't open blockdev
[  637.006849][T19627] /dev/rnullb0: Can't open blockdev
[  637.120740][T19637] Bluetooth: MGMT ver 1.23
[  637.130091][T19637] /dev/rnullb0: Can't open blockdev
[  637.202442][T16836] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  637.234766][T16836] usb 5-1: device descriptor read/8, error -71
[  637.290588][T19639] /dev/rnullb0: Can't open blockdev
[  637.361937][ T5923] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  637.362206][T16836] usb usb5-port1: unable to enumerate USB device
[  637.521769][ T5923] usb 6-1: Using ep0 maxpacket: 16
[  637.530213][ T5923] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  637.543974][ T5923] usb 6-1: config 0 has no interface number 0
[  637.553226][ T5923] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  637.563079][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.571726][ T5923] usb 6-1: Product: syz
[  637.576172][ T5923] usb 6-1: Manufacturer: syz
[  637.580877][ T5923] usb 6-1: SerialNumber: syz
[  637.587501][ T5923] usb 6-1: config 0 descriptor??
[  637.599762][ T5923] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  637.756204][T16836] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  637.939015][T16836] usb 1-1: config index 0 descriptor too short (expected 69, got 36)
[  637.947587][T16836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  637.972204][T16836] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  637.981995][T16836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.990073][T16836] usb 1-1: Product: syz
[  637.994378][T16836] usb 1-1: Manufacturer: syz
[  637.999184][T16836] usb 1-1: SerialNumber: syz
[  638.012632][T16836] usb 1-1: config 0 descriptor??
[  638.025013][T16836] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  638.203885][ T5924] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  638.378054][ T5924] usb 5-1: config 1 has an invalid interface number: 6 but max is 2
[  638.386854][ T5924] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[  638.396936][ T5924] usb 5-1: config 1 has no interface number 3
[  638.403617][ T5924] usb 5-1: config 1 interface 6 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  638.417109][ T5924] usb 5-1: config 1 interface 6 has no altsetting 0
[  638.425812][ T5924] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  638.435041][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.443268][ T5924] usb 5-1: Product: Ы
[  638.447389][ T5924] usb 5-1: Manufacturer: Ѝ
[  638.452274][ T5924] usb 5-1: SerialNumber: 䊧얹싢묚탯Ἤ
[  638.598173][ T5969] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  638.686179][ T5924] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  638.711783][ T5924] usb 5-1: USB disconnect, device number 113
[  638.739376][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  638.747381][ T5969] usb 7-1: device descriptor read/64, error -71
[  638.791774][T16836] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110
[  638.798947][T16836] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  639.013104][T16836] usb 1-1: USB disconnect, device number 56
[  639.026856][ T5969] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  639.173783][ T5969] usb 7-1: device descriptor read/64, error -71
[  639.292398][ T5969] usb usb7-port1: attempt power cycle
[  639.398034][T16836] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  639.439220][ T5923] gspca_spca1528: reg_r err -71
[  639.450839][ T5923] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  639.462954][ T5923] usb 6-1: USB disconnect, device number 37
[  639.568672][T16836] usb 1-1: Using ep0 maxpacket: 32
[  639.575621][T16836] usb 1-1: config 0 has an invalid interface number: 239 but max is 0
[  639.585878][T16836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  639.597849][T16836] usb 1-1: config 0 has no interface number 0
[  639.607470][T16836] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  639.618821][T16836] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  639.632961][T16836] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  639.646753][T16836] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  639.658324][T16836] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  639.664834][ T5969] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  639.671908][T16836] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  639.691812][T16836] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  639.705077][T16836] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 58099, setting to 1024
[  639.717907][ T5969] usb 7-1: device descriptor read/8, error -71
[  639.719629][T16836] usb 1-1: config 0 interface 239 has no altsetting 0
[  639.734702][T16836] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  639.745922][T16836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.755348][T16836] usb 1-1: Product: syz
[  639.759566][T16836] usb 1-1: Manufacturer: syz
[  639.766303][T16836] usb 1-1: SerialNumber: syz
[  639.781793][T16836] usb 1-1: config 0 descriptor??
[  639.790010][T19662] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  639.798485][T19662] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  639.994592][ T5969] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  640.033292][T19662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.049811][ T5969] usb 7-1: device descriptor read/8, error -71
[  640.053523][T19662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.166123][ T5969] usb usb7-port1: unable to enumerate USB device
[  640.416721][T19685] /dev/rnullb0: Can't open blockdev
[  640.434612][ T1307] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  640.444538][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  640.451478][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  640.451689][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4019'.
[  640.561798][ T5862] Bluetooth: hci3: BCM: Reset failed (-71)
[  640.563270][T16836] usb 1-1: USB disconnect, device number 57
[  640.626996][T19691] /dev/rnullb0: Can't open blockdev
[  641.081823][ T5923] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  641.241642][ T5969] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  641.249527][ T5923] usb 6-1: Using ep0 maxpacket: 16
[  641.262023][ T5923] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  641.271423][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.279712][ T5923] usb 6-1: Product: syz
[  641.283965][ T5923] usb 6-1: Manufacturer: syz
[  641.288902][ T5923] usb 6-1: SerialNumber: syz
[  641.296189][ T5923] usb 6-1: config 0 descriptor??
[  641.423007][ T5969] usb 5-1: Using ep0 maxpacket: 16
[  641.430042][ T5969] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  641.442846][ T5969] usb 5-1: config 0 has no interface number 0
[  641.452664][ T5969] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  641.465722][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.474398][ T5969] usb 5-1: Product: syz
[  641.478863][ T5969] usb 5-1: Manufacturer: syz
[  641.483542][ T5969] usb 5-1: SerialNumber: syz
[  641.491712][ T5969] usb 5-1: config 0 descriptor??
[  641.501642][ T5969] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  641.536382][T19718] syzkaller1: entered promiscuous mode
[  641.542902][T19718] syzkaller1: entered allmulticast mode
[  641.554496][T19718] tmpfs: Bad value for 'mpol'
[  641.605095][T19721] /dev/rnullb0: Can't open blockdev
[  641.737123][ T5923] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  641.747610][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  641.758612][ T5923] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  641.767841][ T5923] usb 6-1: media controller created
[  641.792541][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  641.838677][  T982] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  641.953001][ T5923] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  641.961291][ T5923] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  642.009670][  T982] usb 1-1: Using ep0 maxpacket: 16
[  642.016097][  T982] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  642.027388][  T982] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3
[  642.038873][  T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  642.049832][  T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  642.060451][  T982] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  642.070357][  T982] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  642.086425][  T982] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  642.095946][T16836] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  642.105761][  T982] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  642.114350][  T982] usb 1-1: Manufacturer: syz
[  642.120513][  T982] usb 1-1: config 0 descriptor??
[  642.231039][T19707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.241478][T19707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.258408][T16836] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  642.267993][T16836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.276388][T16836] usb 7-1: Product: syz
[  642.280855][T16836] usb 7-1: Manufacturer: syz
[  642.285117][T19707] netlink: 'syz.5.4025': attribute type 6 has an invalid length.
[  642.285646][T16836] usb 7-1: SerialNumber: syz
[  642.289029][T16836] usb 7-1: config 0 descriptor??
[  642.310129][T16836] gspca_main: sunplus-2.14.0 probing 055f:c230
[  642.317884][T19707] /dev/rnullb0: Can't open blockdev
[  642.330713][T17151] usb 6-1: USB disconnect, device number 38
[  642.341531][T19718] /dev/rnullb0: Can't open blockdev
[  642.367562][T17151] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  642.377117][  T982] usb 1-1: USB disconnect, device number 58
[  642.489857][T19737] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  642.593235][T19739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4034'.
[  642.648984][ T5862] Bluetooth: hci0: command 0x0406 tx timeout
[  642.738222][T19732] /dev/rnullb0: Can't open blockdev
[  642.751193][T19745] /dev/rnullb0: Can't open blockdev
[  642.757949][T16836] gspca_sunplus: reg_r err -71
[  642.762858][T16836] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  642.773823][T16836] usb 7-1: USB disconnect, device number 49
[  643.238920][ T5969] gspca_spca1528: reg_r err -71
[  643.256815][ T5969] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71
[  643.303589][ T5969] usb 5-1: USB disconnect, device number 114
[  643.595103][T19766] tmpfs: Bad value for 'mpol'
[  643.683495][T16836] usb 7-1: new low-speed USB device number 50 using dummy_hcd
[  643.692448][T19768] /dev/rnullb0: Can't open blockdev
[  643.855406][T16836] usb 7-1: device descriptor read/64, error -71
[  643.963228][T19778] /dev/rnullb0: Can't open blockdev
[  644.050879][T19780] syz.0.4049(19780): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  644.071146][T19780] /dev/rnullb0: Can't open blockdev
[  644.131101][T16836] usb 7-1: new low-speed USB device number 51 using dummy_hcd
[  644.283941][T16836] usb 7-1: device descriptor read/64, error -71
[  644.381500][T19792] new mount options do not match the existing superblock, will be ignored
[  644.392124][T19792] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  644.397949][T16836] usb usb7-port1: attempt power cycle
[  644.399600][ T5923] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  644.439783][T19794] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  644.451465][T19794] /dev/rnullb0: Can't open blockdev
[  644.472274][ T5969] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  644.570772][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  644.582714][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  644.594127][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  644.606170][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  644.620818][ T5923] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  644.630668][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.642962][ T5923] usb 1-1: config 0 descriptor??
[  644.648621][T19785] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  644.655956][ T5969] usb 6-1: unable to get BOS descriptor or descriptor too short
[  644.667357][ T5969] usb 6-1: not running at top speed; connect to a high speed hub
[  644.677052][ T5969] usb 6-1: config 4 has an invalid interface number: 32 but max is 0
[  644.686947][ T5969] usb 6-1: config 4 has no interface number 0
[  644.695880][ T5969] usb 6-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  644.705551][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.714660][ T5969] usb 6-1: Product: syz
[  644.719246][ T5969] usb 6-1: Manufacturer: syz
[  644.724058][ T5969] usb 6-1: SerialNumber: syz
[  644.749470][  T982] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  644.760066][T16836] usb 7-1: new low-speed USB device number 52 using dummy_hcd
[  644.782044][T16836] usb 7-1: device descriptor read/8, error -71
[  644.909371][  T982] usb 5-1: Using ep0 maxpacket: 16
[  644.916341][  T982] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  644.924573][  T982] usb 5-1: config 0 has no interface number 0
[  644.933455][  T982] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  644.942770][  T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.950863][  T982] usb 5-1: Product: syz
[  644.959157][  T982] usb 5-1: Manufacturer: syz
[  644.963943][  T982] usb 5-1: SerialNumber: syz
[  644.970779][  T982] usb 5-1: config 0 descriptor??
[  644.980823][  T982] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  644.998814][ T5969] usb 6-1: Found UVC 0.02 device syz (17dc:0202)
[  645.006342][ T5969] usb 6-1: No valid video chain found.
[  645.013998][ T5969] usb 6-1: USB disconnect, device number 39
[  645.050048][T16836] usb 7-1: new low-speed USB device number 53 using dummy_hcd
[  645.093402][T16836] usb 7-1: device descriptor read/8, error -71
[  645.098243][ T5923] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  645.107401][ T5923] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  645.114994][ T5923] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  645.122729][ T5923] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  645.134222][ T5923] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  645.208315][T16836] usb usb7-port1: unable to enumerate USB device
[  645.397118][T16836] usb 1-1: USB disconnect, device number 59
[  645.577985][T19800] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4056'.
[  645.643408][T19802] openvswitch: netlink: IP tunnel dst address not specified
[  645.901089][T16836] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  646.065329][T16836] usb 6-1: Using ep0 maxpacket: 16
[  646.080454][T16836] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  646.090054][T16836] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  646.102990][T16836] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  646.121949][T16836] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  646.132023][T16836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.140986][T16836] usb 6-1: Product: syz
[  646.145582][T16836] usb 6-1: Manufacturer: syz
[  646.150331][T16836] usb 6-1: SerialNumber: syz
[  646.237453][T19815] /dev/rnullb0: Can't open blockdev
[  646.267023][T19815] autofs: Unknown parameter '��š'k�;yb*��7�q{����<�z4H�ޯ$�rGz�&���1��HhW�đ$>�9S˖�/'
[  646.278903][T19815] autofs: Unknown parameter '��š'k�;yb*��7�q{����<�z4H�ޯ$�rGz�&���1��HhW�đ$>�9S˖�/'
[  646.605479][T16836] usb 6-1: 0:2 : does not exist
[  646.695764][  T982] gspca_spca1528: reg_r err -71
[  646.706394][  T982] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71
[  646.717037][  T982] usb 5-1: USB disconnect, device number 115
[  647.040191][T19802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.049039][  T121] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  647.049386][T19802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.087109][T19802] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  647.214432][  T121] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  647.225114][  T121] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  647.235928][  T121] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  647.245183][T17151] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  647.253165][  T121] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  647.262184][  T121] usb 7-1: SerialNumber: syz
[  647.314255][T19802] Invalid source name
[  647.324863][T16836] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1)
[  647.342486][T19842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4069'.
[  647.360539][T16836] usb 6-1: USB disconnect, device number 40
[  647.385750][ T6801] udevd[6801]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  647.428867][T17151] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.450191][T17151] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.460405][T17151] usb 1-1: config 0 interface 0 has no altsetting 0
[  647.467718][T17151] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  647.477160][T17151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.494102][T17151] usb 1-1: config 0 descriptor??
[  647.571947][  T121] usb 7-1: 0:2 : does not exist
[  647.595505][  T121] usb 7-1: USB disconnect, device number 54
[  647.627726][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  647.756999][ T5903] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  647.847996][T19855] /dev/rnullb0: Can't open blockdev
[  647.895785][T19857] /dev/rnullb0: Can't open blockdev
[  647.940205][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.951785][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.961861][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  647.977087][ T5903] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  647.987462][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.004320][ T5903] usb 5-1: config 0 descriptor??
[  648.283666][T17151] usbhid 1-1:0.0: can't add hid device: -71
[  648.297873][T17151] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  648.318643][T17151] usb 1-1: USB disconnect, device number 60
[  648.444011][T19870] /dev/rnullb0: Can't open blockdev
[  648.453541][ T5903] plantronics 0003:047F:FFFF.002C: item 0 0 0 9 parsing failed
[  648.464985][ T5903] plantronics 0003:047F:FFFF.002C: parse failed
[  648.473073][ T5903] plantronics 0003:047F:FFFF.002C: probe with driver plantronics failed with error -22
[  648.498523][T19872] /dev/rnullb0: Can't open blockdev
[  648.582315][T19876] /dev/rnullb0: Can't open blockdev
[  648.589068][T19876] /dev/rnullb0: Can't open blockdev
[  648.621203][  T121] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  649.794783][T19890] /dev/rnullb0: Can't open blockdev
[  649.863978][T19892] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4086'.
[  650.178426][ T5903] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  650.329055][ T5903] usb 7-1: device descriptor read/64, error -71
[  650.594086][ T5903] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  650.652894][T19899] /dev/rnullb0: Can't open blockdev
[  650.695961][  T121] usb 6-1: Using ep0 maxpacket: 16
[  650.711228][T16836] usb 5-1: USB disconnect, device number 116
[  650.720364][  T121] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  650.729954][T19901] /dev/rnullb0: Can't open blockdev
[  650.730129][  T121] usb 6-1: config 0 has no interface number 0
[  650.744514][ T5903] usb 7-1: device descriptor read/64, error -71
[  650.753005][  T121] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  650.770430][  T121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.778584][  T121] usb 6-1: Product: syz
[  650.782865][  T121] usb 6-1: Manufacturer: syz
[  650.787607][  T121] usb 6-1: SerialNumber: syz
[  650.794264][  T121] usb 6-1: config 0 descriptor??
[  650.804861][  T121] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  650.872430][ T5903] usb usb7-port1: attempt power cycle
[  651.031553][ T5923] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  651.041135][T10198] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.114124][T10198] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.197422][T10198] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.209793][ T5923] usb 1-1: Using ep0 maxpacket: 32
[  651.219104][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  651.231983][ T5923] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  651.244400][ T5923] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  651.260091][ T5903] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  651.269414][ T5923] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  651.288460][T10198] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.301382][ T5923] usb 1-1: config 0 interface 0 has no altsetting 0
[  651.308227][ T5923] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  651.318335][ T5903] usb 7-1: device descriptor read/8, error -71
[  651.329867][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.343924][ T5923] usb 1-1: config 0 descriptor??
[  651.433875][T10198] bridge_slave_1: left allmulticast mode
[  651.453556][T10198] bridge_slave_1: left promiscuous mode
[  651.465657][T10198] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.476319][T10198] bridge_slave_0: left allmulticast mode
[  651.483150][T10198] bridge_slave_0: left promiscuous mode
[  651.489082][T10198] bridge0: port 1(bridge_slave_0) entered disabled state
[  651.562458][T19688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  651.572558][T19688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  651.582025][T19688] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  651.588726][ T5903] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  651.595477][T19688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  651.604881][T19688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  651.622475][ T5903] usb 7-1: device descriptor read/8, error -71
[  651.689855][T10198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  651.702294][T10198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  651.713316][T10198] bond0 (unregistering): Released all slaves
[  651.749390][ T5903] usb usb7-port1: unable to enumerate USB device
[  651.790896][ T5923] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0
[  651.798911][ T5923] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0
[  651.812751][ T5923] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x4
[  651.823785][ T5923] hid-thrustmaster 0003:044F:B65D.002D: item fetching failed at offset 3/5
[  651.843559][ T5923] hid-thrustmaster 0003:044F:B65D.002D: parse failed with error -22
[  651.852281][ T5923] hid-thrustmaster 0003:044F:B65D.002D: probe with driver hid-thrustmaster failed with error -22
[  652.033006][T10198] hsr_slave_0: left promiscuous mode
[  652.033641][T10198] hsr_slave_1: left promiscuous mode
[  652.043112][T10198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  652.043140][T10198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  652.047019][T10198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  652.047044][T10198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  652.054172][T10198] veth1_macvtap: left promiscuous mode
[  652.054235][T10198] veth0_macvtap: left promiscuous mode
[  652.054378][T10198] veth1_vlan: left promiscuous mode
[  652.054499][T10198] veth0_vlan: left promiscuous mode
[  652.248370][T17151] usb 1-1: USB disconnect, device number 61
[  652.319171][  T121] gspca_spca1528: reg_w err -71
[  652.325493][  T121] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  652.339483][  T121] usb 6-1: USB disconnect, device number 41
[  652.382131][T10198] team0 (unregistering): Port device team_slave_1 removed
[  652.394159][T10198] team0 (unregistering): Port device team_slave_0 removed
[  652.467783][T19903] chnl_net:caif_netlink_parms(): no params data found
[  652.537547][T19903] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.544904][T19903] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.553474][T19903] bridge_slave_0: entered allmulticast mode
[  652.560910][T19903] bridge_slave_0: entered promiscuous mode
[  652.570299][T19903] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.577833][T19903] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.586231][T19903] bridge_slave_1: entered allmulticast mode
[  652.594160][T19903] bridge_slave_1: entered promiscuous mode
[  652.622913][T19903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  652.636860][T19903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  652.671071][T19903] team0: Port device team_slave_0 added
[  652.682326][T19903] team0: Port device team_slave_1 added
[  652.717836][T19903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  652.724994][T19903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.751946][T19903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  652.764518][T19903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  652.771832][T19903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.797847][    C0] vkms_vblank_simulate: vblank timer overrun
[  652.804525][T19903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  652.908583][T19903] hsr_slave_0: entered promiscuous mode
[  652.917411][T19903] hsr_slave_1: entered promiscuous mode
[  653.165359][T19903] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  653.185654][T19903] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  653.206294][T19903] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  653.222353][T19903] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  653.335993][ T5969] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  653.353179][T19903] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.385018][T19903] 8021q: adding VLAN 0 to HW filter on device team0
[  653.407615][T10195] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.415046][T10195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  653.451729][T10195] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.459007][T10195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.519118][ T5969] usb 6-1: Using ep0 maxpacket: 8
[  653.540418][ T5969] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  653.563757][ T5969] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  653.572026][T19688] Bluetooth: hci2: command 0x0406 tx timeout
[  653.597126][ T5969] usb 6-1: Product: syz
[  653.601465][ T5969] usb 6-1: Manufacturer: syz
[  653.607087][ T5969] usb 6-1: SerialNumber: syz
[  653.615465][ T5969] usb 6-1: config 0 descriptor??
[  653.626709][ T5969] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  653.827113][   T51] Bluetooth: hci0: command tx timeout
[  653.857997][T19903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.179587][ T5969] gspca_zc3xx: reg_w_i err -110
[  654.187472][ T5969] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  654.274029][T19903] veth0_vlan: entered promiscuous mode
[  654.281995][T19993] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  654.322057][T19903] veth1_vlan: entered promiscuous mode
[  654.328203][   T30] audit: type=1326 audit(1755383158.834:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.6.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ad8ebe9 code=0x7ffc0000
[  654.368679][   T30] audit: type=1326 audit(1755383158.834:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.6.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ad8ebe9 code=0x7ffc0000
[  654.392958][   T30] audit: type=1326 audit(1755383158.862:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.6.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f310ad8ebe9 code=0x7ffc0000
[  654.409139][T19903] veth0_macvtap: entered promiscuous mode
[  654.443526][   T30] audit: type=1326 audit(1755383158.862:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.6.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ad8ebe9 code=0x7ffc0000
[  654.481983][T19903] veth1_macvtap: entered promiscuous mode
[  654.495218][   T30] audit: type=1326 audit(1755383158.862:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.6.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ad8ebe9 code=0x7ffc0000
[  654.505572][T19903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  654.545005][T19903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  654.561043][T10194] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.564972][   T30] audit: type=1326 audit(1755383158.862:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.6.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f310ad8ebe9 code=0x7ffc0000
[  654.580988][T10194] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.604472][   T30] audit: type=1326 audit(1755383158.862:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.6.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ad8ebe9 code=0x7ffc0000
[  654.630282][ T5969] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  654.636991][   T30] audit: type=1326 audit(1755383158.862:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.6.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f310ad8ebe9 code=0x7ffc0000
[  654.664693][T10194] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.672603][   T30] audit: type=1326 audit(1755383158.862:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.6.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310ad8ebe9 code=0x7ffc0000
[  654.676636][T10194] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.698879][   T30] audit: type=1326 audit(1755383158.862:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.6.4100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f310ad8ebe9 code=0x7ffc0000
[  654.789458][ T5969] usb 7-1: Using ep0 maxpacket: 32
[  654.794890][T10194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.805498][T10194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.810706][ T5969] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  654.827777][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.838703][ T5969] usb 7-1: Product: syz
[  654.840763][T10202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.851301][ T5969] usb 7-1: Manufacturer: syz
[  654.857548][ T5969] usb 7-1: SerialNumber: syz
[  654.864574][ T5969] usb 7-1: config 0 descriptor??
[  654.871678][T10202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  655.305431][T20030] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4103'.
[  655.316626][ T5969] airspy 7-1:0.0: Board ID: 00
[  655.321547][ T5969] airspy 7-1:0.0: Firmware version: u�H[D��}:�"	
[  655.335142][T20030] /dev/rnullb0: Can't open blockdev
[  655.386933][T20034] /dev/rnullb0: Can't open blockdev
[  655.435711][T20036] /dev/rnullb0: Can't open blockdev
[  656.079007][   T51] Bluetooth: hci0: command tx timeout
[  656.298751][T17151] usb 6-1: USB disconnect, device number 42
[  656.453016][T20047] /dev/rnullb0: Can't open blockdev
[  656.474101][T20046] /dev/rnullb0: Can't open blockdev
[  656.810336][   T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  656.981426][   T24] usb 6-1: Using ep0 maxpacket: 32
[  656.998891][   T24] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  657.016414][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.045650][   T24] usb 6-1: config 0 has no interface number 0
[  657.051968][   T24] usb 6-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 12288, setting to 1024
[  657.077678][   T24] usb 6-1: config 0 interface 184 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 1024
[  657.099091][   T24] usb 6-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  657.118117][   T24] usb 6-1: config 0 interface 184 has no altsetting 0
[  657.126770][   T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  657.136234][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.144412][   T24] usb 6-1: Product: syz
[  657.148640][   T24] usb 6-1: Manufacturer: syz
[  657.153620][   T24] usb 6-1: SerialNumber: syz
[  657.159934][   T24] usb 6-1: config 0 descriptor??
[  657.168104][   T24] smsc75xx v1.0.0
[  657.172405][   T24] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  657.183088][   T24] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22
[  657.259634][T17151] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  657.420700][T17151] usb 1-1: Using ep0 maxpacket: 8
[  657.430137][T17151] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  657.440104][T17151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.448458][T17151] usb 1-1: Product: syz
[  657.453294][T17151] usb 1-1: Manufacturer: syz
[  657.458180][T17151] usb 1-1: SerialNumber: syz
[  657.465047][T17151] usb 1-1: config 0 descriptor??
[  657.474270][T17151] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  657.597946][ T5969] airspy 7-1:0.0: usb_control_msg() failed -110 request 10
[  657.609653][ T5969] airspy 7-1:0.0: Registered as swradio24
[  657.620279][ T5969] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  657.640642][ T5969] usb 7-1: USB disconnect, device number 59
[  657.650746][T20068] overlayfs: missing 'lowerdir'
[  658.117955][T20066] /dev/rnullb0: Can't open blockdev
[  658.131428][T17151] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  658.144036][T17151] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  658.153805][T17151] usb 1-1: USB disconnect, device number 62
[  658.275661][   T51] Bluetooth: hci0: command tx timeout
[  658.611119][T20082] /dev/rnullb0: Can't open blockdev
[  658.643010][T20084] /dev/rnullb0: Can't open blockdev
[  658.733875][T20092] /dev/rnullb0: Can't open blockdev
[  658.764414][T20094] /dev/rnullb0: Can't open blockdev
[  658.969555][T20105] binder: 20051:20105 ioctl c0306201 200000000640 returned -22
[  658.977893][T20105] binder: 20051:20105 ioctl ae01 33 returned -22
[  658.987284][T20105] /dev/rnullb0: Can't open blockdev
[  659.003783][    T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  659.177291][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  659.188031][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  659.198744][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  659.208370][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  659.216446][    T9] usb 1-1: SerialNumber: syz
[  659.298353][T20109] /dev/rnullb0: Can't open blockdev
[  659.438838][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4130'.
[  659.454156][    T9] usb 1-1: 0:2 : does not exist
[  659.462160][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4130'.
[  659.474883][    T9] usb 1-1: USB disconnect, device number 63
[  659.481677][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4130'.
[  659.504776][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4130'.
[  659.508708][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  659.514805][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4130'.
[  659.541901][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4130'.
[  659.566360][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4130'.
[  659.577332][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4130'.
[  659.589155][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4130'.
[  659.609407][T20115] program syz.6.4131 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  659.726944][T20120] /dev/rnullb0: Can't open blockdev
[  659.924628][T20123] /dev/rnullb0: Can't open blockdev
[  660.115276][   T24] usb 6-1: USB disconnect, device number 43
[  660.128356][T20133] /dev/rnullb0: Can't open blockdev
[  660.178119][T20136] new mount options do not match the existing superblock, will be ignored
[  660.452013][T20143] /dev/rnullb0: Can't open blockdev
[  660.501600][   T51] Bluetooth: hci0: command tx timeout
[  660.596998][T20145] usb usb8: usbfs: process 20145 (syz.5.4142) did not claim interface 0 before use
[  661.224015][T20156] mkiss: ax0: crc mode is auto.
[  661.317909][T20154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  661.367585][T20163] /dev/rnullb0: Can't open blockdev
[  661.598801][T20167] /dev/rnullb0: Can't open blockdev
[  661.690103][T20156] syzkaller1: entered promiscuous mode
[  661.711689][T20156] syzkaller1: entered allmulticast mode
[  662.542999][ T5903] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[  662.715835][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  662.736480][ T5903] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  662.761558][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  662.784979][ T5903] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  662.817038][ T5903] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  662.828281][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.846184][ T5903] usb 7-1: Product: syz
[  662.856417][ T5903] usb 7-1: Manufacturer: syz
[  662.869591][ T5903] usb 7-1: SerialNumber: syz
[  662.929042][ T5903] usb 7-1: config 0 descriptor??
[  662.942908][ T5903] usb 7-1: NFC: Unable to get FW version
[  662.953816][ T5903] pn533_usb 7-1:0.0: probe with driver pn533_usb failed with error -90
[  663.131692][T20197] /dev/rnullb0: Can't open blockdev
[  663.184319][T20179] /dev/rnullb0: Can't open blockdev
[  663.197215][T20179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.228831][T20201] /dev/rnullb0: Can't open blockdev
[  663.235426][T20179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.261327][   T24] usb 7-1: USB disconnect, device number 60
[  664.461175][T20235] No control pipe specified
[  664.568960][T20242] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  664.576190][T20242] /dev/rnullb0: Can't open blockdev
[  664.624224][T20246] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  664.634103][T20249] /dev/rnullb0: Can't open blockdev
[  664.642556][T20246] /dev/rnullb0: Can't open blockdev
[  664.805053][T20261] /dev/rnullb0: Can't open blockdev
[  664.848558][T20263] /dev/rnullb0: Can't open blockdev
[  664.866701][T20266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.878152][T20266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.911018][T20259] netlink: 'syz.5.4175': attribute type 27 has an invalid length.
[  665.120809][T17151] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[  665.270242][T17151] usb 7-1: device descriptor read/64, error -71
[  665.526925][T17151] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  665.606728][T20273] /dev/rnullb0: Can't open blockdev
[  665.653232][T20275] /dev/rnullb0: Can't open blockdev
[  665.666444][T17151] usb 7-1: device descriptor read/64, error -71
[  665.798469][T17151] usb usb7-port1: attempt power cycle
[  665.951568][T20279] /dev/rnullb0: Can't open blockdev
[  666.192790][T17151] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[  666.235997][T17151] usb 7-1: device descriptor read/8, error -71
[  666.511042][T17151] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[  666.546488][T17151] usb 7-1: device descriptor read/8, error -71
[  666.583838][T20296] /dev/rnullb0: Can't open blockdev
[  666.673697][T17151] usb usb7-port1: unable to enumerate USB device
[  666.752893][T20310] /dev/rnullb0: Can't open blockdev
[  666.763550][T20311] /dev/rnullb0: Can't open blockdev
[  666.831938][    T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  667.015946][    T9] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  667.045632][    T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  667.067400][    T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  667.068083][ T5969] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  667.105744][    T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  667.131166][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.143374][T20298] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  667.270686][ T5969] usb 1-1: Using ep0 maxpacket: 8
[  667.280928][ T5969] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  667.291964][ T5969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.302142][ T5969] usb 1-1: config 0 has no interface number 0
[  667.312203][ T5969] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  667.322312][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.340115][ T5969] usb 1-1: config 0 descriptor??
[  667.348465][ T5969] ldusb 1-1:0.55: Interrupt in endpoint not found
[  667.595905][T20298] /dev/rnullb0: Can't open blockdev
[  667.604902][    T9] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  667.621477][    T9] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input83
[  667.637333][T20347] netlink: 'syz.0.4189': attribute type 2 has an invalid length.
[  667.707032][    T9] usb 6-1: USB disconnect, device number 44
[  667.713204][    C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  669.127437][T20370] /dev/rnullb0: Can't open blockdev
[  669.263887][T20378] /dev/rnullb0: Can't open blockdev
[  669.415366][T20383] /dev/rnullb0: Can't open blockdev
[  669.587229][T20390] /dev/rnullb0: Can't open blockdev
[  669.741402][ T5969] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  669.911934][ T5969] usb 6-1: Using ep0 maxpacket: 16
[  669.920191][ T5969] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  669.931963][ T5969] usb 6-1: config 0 has no interface number 0
[  669.960619][ T5969] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  669.976183][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.995776][ T5969] usb 6-1: Product: syz
[  670.000673][ T5969] usb 6-1: Manufacturer: syz
[  670.005320][ T5969] usb 6-1: SerialNumber: syz
[  670.025568][ T5969] usb 6-1: config 0 descriptor??
[  670.034282][ T5969] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  670.053023][    T9] usb 1-1: USB disconnect, device number 64
[  670.205103][T20410] /dev/rnullb0: Can't open blockdev
[  671.208700][T20425] /dev/rnullb0: Can't open blockdev
[  671.307451][T20431] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20000
[  671.320432][T20431] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20001
[  671.543857][T20442] /dev/rnullb0: Can't open blockdev
[  671.687510][ T5924] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[  671.709073][ T5969] gspca_spca1528: reg_w err -110
[  671.741918][ T5969] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110
[  671.858527][ T5924] usb 7-1: Using ep0 maxpacket: 32
[  671.879580][ T5924] usb 7-1: too many configurations: 132, using maximum allowed: 8
[  671.892713][ T5924] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 129
[  671.913330][ T5924] usb 7-1: can't read configurations, error -22
[  672.049072][T20461] __nla_validate_parse: 57 callbacks suppressed
[  672.049094][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4220'.
[  672.061761][ T5924] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[  672.066612][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4220'.
[  672.081725][T20461] netlink: 33 bytes leftover after parsing attributes in process `syz.7.4220'.
[  672.095337][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4220'.
[  672.105685][T20461] netlink: 33 bytes leftover after parsing attributes in process `syz.7.4220'.
[  672.163590][T20451] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  672.170806][T20451] /dev/rnullb0: Can't open blockdev
[  672.254156][ T5924] usb 7-1: Using ep0 maxpacket: 32
[  672.264938][ T5924] usb 7-1: too many configurations: 132, using maximum allowed: 8
[  672.286833][ T5924] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 129
[  672.295510][ T5924] usb 7-1: can't read configurations, error -22
[  672.310925][ T5924] usb usb7-port1: attempt power cycle
[  672.695391][ T5924] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[  672.707931][ T5969] usb 6-1: USB disconnect, device number 45
[  672.737802][ T5924] usb 7-1: Using ep0 maxpacket: 32
[  672.743696][ T5924] usb 7-1: too many configurations: 132, using maximum allowed: 8
[  672.768612][ T5924] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 129
[  672.788912][ T5924] usb 7-1: can't read configurations, error -22
[  672.869404][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4225'.
[  672.882636][T20476] /dev/rnullb0: Can't open blockdev
[  672.950375][ T5924] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[  673.000959][ T5924] usb 7-1: Using ep0 maxpacket: 32
[  673.007769][ T5924] usb 7-1: too many configurations: 132, using maximum allowed: 8
[  673.018745][ T5924] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 129
[  673.029536][ T5924] usb 7-1: can't read configurations, error -22
[  673.036460][ T5924] usb usb7-port1: unable to enumerate USB device
[  673.070288][T20489] /dev/rnullb0: Can't open blockdev
[  673.110031][ T5969] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  673.259557][ T5969] usb 6-1: device descriptor read/64, error -71
[  673.431057][ T5941] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  673.527000][ T5969] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  673.601901][ T5941] usb 1-1: Using ep0 maxpacket: 16
[  673.608525][ T5941] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  673.616716][ T5941] usb 1-1: config 0 has no interface number 0
[  673.625610][ T5941] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  673.634998][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.643023][ T5941] usb 1-1: Product: syz
[  673.648014][ T5941] usb 1-1: Manufacturer: syz
[  673.652663][ T5941] usb 1-1: SerialNumber: syz
[  673.658931][ T5941] usb 1-1: config 0 descriptor??
[  673.666091][ T5969] usb 6-1: device descriptor read/64, error -71
[  673.666133][ T5941] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  673.784672][ T5969] usb usb6-port1: attempt power cycle
[  674.147799][ T5969] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  674.170204][ T5969] usb 6-1: device descriptor read/8, error -71
[  674.425499][ T5969] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  674.447896][ T5969] usb 6-1: device descriptor read/8, error -71
[  674.564653][ T5969] usb usb6-port1: unable to enumerate USB device
[  676.158749][ T5941] gspca_spca1528: reg_w err -71
[  676.163735][ T5941] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  676.190620][ T5941] usb 1-1: USB disconnect, device number 65
[  676.419904][T20530] bio_check_eod: 2 callbacks suppressed
[  676.419921][T20530] syz.6.4237: attempt to access beyond end of device
[  676.419921][T20530] loop6: rw=4096, sector=0, nr_sectors = 1 limit=0
[  676.459541][ T5969] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  676.580830][T20544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4239'.
[  676.644588][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  676.659421][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  676.670961][ T5969] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  676.681102][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.699816][ T5969] usb 6-1: config 0 descriptor??
[  676.788966][ T5903] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[  676.962319][ T5903] usb 7-1: Using ep0 maxpacket: 16
[  676.968925][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  676.980716][ T5903] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  676.990513][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.001261][ T5903] usb 7-1: Product: syz
[  677.005646][ T5903] usb 7-1: Manufacturer: syz
[  677.010290][ T5903] usb 7-1: SerialNumber: syz
[  677.018163][ T5903] usb 7-1: config 0 descriptor??
[  677.026761][ T5903] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  677.036098][ T5903] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  677.139543][ T5969] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor
[  677.152744][ T5969] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.002E/input/input84
[  677.241171][ T5969] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  677.333146][T20552] /dev/rnullb0: Can't open blockdev
[  677.368537][ T5903] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  677.391642][T20554] /dev/rnullb0: Can't open blockdev
[  677.440077][ T5903] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  677.452250][ T5903] em28xx 7-1:0.0: board has no eeprom
[  677.494370][  T121] usb 6-1: USB disconnect, device number 50
[  677.517153][ T5903] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  677.537453][ T5903] em28xx 7-1:0.0: dvb set to bulk mode.
[  677.548271][ T5969] em28xx 7-1:0.0: Binding DVB extension
[  677.561640][ T5903] usb 7-1: USB disconnect, device number 69
[  677.585187][ T5903] em28xx 7-1:0.0: Disconnecting em28xx
[  677.621923][ T5969] em28xx 7-1:0.0: Registering input extension
[  677.629626][ T5903] em28xx 7-1:0.0: Closing input extension
[  677.644332][ T5903] em28xx 7-1:0.0: Freeing device
[  678.104469][  T121] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[  678.276032][  T121] usb 7-1: Using ep0 maxpacket: 16
[  678.284955][  T121] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  678.293913][  T121] usb 7-1: config 0 has no interface number 0
[  678.306444][  T121] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  678.318910][  T121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.327090][  T121] usb 7-1: Product: syz
[  678.334232][  T121] usb 7-1: Manufacturer: syz
[  678.338976][  T121] usb 7-1: SerialNumber: syz
[  678.346876][  T121] usb 7-1: config 0 descriptor??
[  678.371156][  T121] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  678.623711][T20572] blktrace: Concurrent blktraces are not allowed on rnullb0
[  678.948672][T20577] /dev/rnullb0: Can't open blockdev
[  679.278577][ T5941] hid-generic 0009:80000000:0000.002F: reserved main item tag 0xd
[  679.286723][ T5941] hid-generic 0009:80000000:0000.002F: reserved main item tag 0xd
[  679.295763][ T5941] hid-generic 0009:80000000:0000.002F: unknown main item tag 0x1
[  679.303765][T20579] binder: 20578:20579 ioctl 3ba0 2000000002c0 returned -22
[  679.305035][ T5941] hid-generic 0009:80000000:0000.002F: reserved main item tag 0xe
[  679.320006][ T5941] hid-generic 0009:80000000:0000.002F: item fetching failed at offset 47/216
[  679.329535][ T5941] hid-generic 0009:80000000:0000.002F: probe with driver hid-generic failed with error -22
[  679.881081][  T121] gspca_spca1528: reg_w err -71
[  679.886192][  T121] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[  679.896430][  T121] usb 7-1: USB disconnect, device number 70
[  679.944146][ T5941] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  680.059171][T20594] dvmrp0: entered allmulticast mode
[  680.104652][ T5941] usb 6-1: Using ep0 maxpacket: 32
[  680.111810][ T5941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  680.125050][ T5941] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  680.134689][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.143053][ T5941] usb 6-1: Product: syz
[  680.147393][ T5941] usb 6-1: Manufacturer: syz
[  680.152025][ T5941] usb 6-1: SerialNumber: syz
[  680.158210][ T5941] usb 6-1: config 0 descriptor??
[  680.166216][ T5941] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out.
[  680.318494][    T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  680.387234][  T982] usb 6-1: USB disconnect, device number 51
[  680.502394][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  680.512967][    T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  680.522417][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.539129][    T9] usb 1-1: config 0 descriptor??
[  680.550777][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  680.949432][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  680.962408][T20605] /dev/rnullb0: Can't open blockdev
[  680.974944][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  680.985614][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  680.992450][  T982] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  680.992932][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  681.007619][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[  681.015087][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[  681.023277][    T9] pwc: recv_control_msg error -32 req 04 val 1400
[  681.030935][    T9] pwc: recv_control_msg error -32 req 02 val 2000
[  681.038836][    T9] pwc: recv_control_msg error -32 req 02 val 2100
[  681.046735][    T9] pwc: recv_control_msg error -32 req 04 val 1500
[  681.054277][    T9] pwc: recv_control_msg error -32 req 02 val 2500
[  681.061594][    T9] pwc: recv_control_msg error -32 req 02 val 2400
[  681.069237][    T9] pwc: recv_control_msg error -32 req 02 val 2600
[  681.076741][    T9] pwc: recv_control_msg error -32 req 02 val 2900
[  681.177086][  T982] usb 7-1: config 0 interface 0 has no altsetting 0
[  681.184436][  T982] usb 7-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  681.194138][  T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.209452][  T982] usb 7-1: config 0 descriptor??
[  681.299291][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  681.307734][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  681.316668][    T9] pwc: Registered as video103.
[  681.322951][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input86
[  681.344267][    T9] usb 1-1: USB disconnect, device number 66
[  681.452040][ T5941] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  681.637579][ T5941] usb 6-1: config 0 has an invalid interface number: 107 but max is 0
[  681.646974][ T5941] usb 6-1: config 0 has no interface number 0
[  681.651453][  T982] zeroplus 0003:0C12:0005.0030: item fetching failed at offset 0/3
[  681.655269][ T5941] usb 6-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  681.662933][  T982] zeroplus 0003:0C12:0005.0030: parse failed
[  681.674101][ T5941] usb 6-1: config 0 interface 107 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  681.691242][  T982] zeroplus 0003:0C12:0005.0030: probe with driver zeroplus failed with error -22
[  681.692444][ T5941] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64
[  681.714924][ T5941] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  681.725084][ T5941] usb 6-1: config 0 interface 107 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  681.740375][ T5941] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0127, bcdDevice=7b.4a
[  681.749662][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.758785][ T5941] usb 6-1: Product: syz
[  681.763153][ T5941] usb 6-1: Manufacturer: syz
[  681.767836][ T5941] usb 6-1: SerialNumber: syz
[  681.775310][ T5941] usb 6-1: config 0 descriptor??
[  681.781190][T20610] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  681.790077][ T5941] kvaser_usb 6-1:0.107: error -EMSGSIZE: Cannot get software info
[  681.798148][ T5941] kvaser_usb 6-1:0.107: probe with driver kvaser_usb failed with error -90
[  681.866945][T20603] /dev/rnullb0: Can't open blockdev
[  681.875122][  T982] usb 7-1: USB disconnect, device number 71
[  682.009796][ T5903] usb 6-1: USB disconnect, device number 52
[  682.698752][T20642] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4274'.
[  682.713598][T20642] syzkaller1: entered promiscuous mode
[  682.719664][T20642] syzkaller1: entered allmulticast mode
[  682.720165][ T5903] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[  682.732786][T20642] /dev/rnullb0: Can't open blockdev
[  682.827156][T20644] /dev/rnullb0: Can't open blockdev
[  682.885248][ T5903] usb 7-1: Using ep0 maxpacket: 32
[  682.900354][ T5903] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  682.910819][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.922507][ T5903] usb 7-1: Product: syz
[  682.926757][ T5903] usb 7-1: Manufacturer: syz
[  682.932170][ T5903] usb 7-1: SerialNumber: syz
[  682.942075][ T5903] usb 7-1: config 0 descriptor??
[  682.952592][ T5903] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  682.982897][T20651] netlink: 'syz.5.4277': attribute type 6 has an invalid length.
[  683.248953][  T982] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  683.412389][  T982] usb 6-1: Using ep0 maxpacket: 16
[  683.419485][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  683.437633][  T982] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  683.446932][  T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.455744][  T982] usb 6-1: Product: syz
[  683.460073][  T982] usb 6-1: Manufacturer: syz
[  683.464795][  T982] usb 6-1: SerialNumber: syz
[  683.471910][  T982] usb 6-1: config 0 descriptor??
[  683.480188][T20655] /dev/rnullb0: Can't open blockdev
[  683.488040][  T982] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  683.498724][  T982] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  683.762808][  T982] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  684.011988][  T982] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  684.020213][  T982] em28xx 6-1:0.0: board has no eeprom
[  684.168728][  T982] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  684.179078][  T982] em28xx 6-1:0.0: dvb set to bulk mode.
[  684.190923][ T5910] em28xx 6-1:0.0: Binding DVB extension
[  684.219434][  T982] usb 6-1: USB disconnect, device number 53
[  684.245107][  T982] em28xx 6-1:0.0: Disconnecting em28xx
[  684.292575][ T5910] em28xx 6-1:0.0: Registering input extension
[  684.303337][  T982] em28xx 6-1:0.0: Closing input extension
[  684.325377][  T982] em28xx 6-1:0.0: Freeing device
[  684.424787][T20674] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4283'.
[  684.437685][T20674] netdevsim netdevsim5: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component
[  684.623108][T20677] /dev/rnullb0: Can't open blockdev
[  685.022371][T20690] /dev/rnullb0: Can't open blockdev
[  685.342158][T20698] /dev/rnullb0: Can't open blockdev
[  685.514692][T20702] /dev/rnullb0: Can't open blockdev
[  685.651791][T20709] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4298'.
[  685.895572][T20724] overlayfs: missing 'lowerdir'
[  685.964137][ T5903] gspca_stk1135: reg_w 0x351 err -71
[  685.970698][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  685.987166][ T5903] gspca_stk1135: Sensor write failed
[  685.992619][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  686.005447][ T5903] gspca_stk1135: Sensor write failed
[  686.011324][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  686.018067][ T5903] gspca_stk1135: Sensor read failed
[  686.023998][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  686.030629][ T5903] gspca_stk1135: Sensor read failed
[  686.036140][ T5903] gspca_stk1135: Detected sensor type unknown (0x0)
[  686.043924][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  686.050319][ T5903] gspca_stk1135: Sensor read failed
[  686.056188][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  686.062607][ T5903] gspca_stk1135: Sensor read failed
[  686.067859][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  686.074364][ T5903] gspca_stk1135: Sensor write failed
[  686.079707][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  686.092584][ T5903] gspca_stk1135: Sensor write failed
[  686.098141][ T5903] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[  686.108978][ T5903] usb 7-1: USB disconnect, device number 72
[  686.244182][ T5941] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  686.435994][ T5941] usb 6-1: Using ep0 maxpacket: 32
[  686.442816][ T5941] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  686.451809][ T5941] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  686.461225][ T5941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  686.470992][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  686.480801][ T5941] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  686.490542][    T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  686.498232][ T5941] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  686.514809][ T5941] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  686.524414][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.541257][ T5941] usb 6-1: config 0 descriptor??
[  686.703447][    T9] usb 1-1: Using ep0 maxpacket: 16
[  686.711298][    T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  686.723484][    T9] usb 1-1: config 0 has no interface number 0
[  686.736641][    T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  686.754037][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.763079][    T9] usb 1-1: Product: syz
[  686.772419][ T5941] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  686.783790][    T9] usb 1-1: Manufacturer: syz
[  686.789179][    T9] usb 1-1: SerialNumber: syz
[  686.795611][    T9] usb 1-1: config 0 descriptor??
[  686.804886][ T5941] usb 6-1: USB disconnect, device number 54
[  686.816742][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  686.830467][ T5941] usblp0: removed
[  687.348023][ T5941] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  687.516336][ T5941] usb 6-1: Using ep0 maxpacket: 32
[  687.523545][ T5941] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  687.532249][ T5941] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  687.541011][ T5941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  687.550200][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  687.560624][ T5941] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  687.571189][ T5941] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  687.584304][ T5941] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  687.593660][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.604242][ T5941] usb 6-1: config 0 descriptor??
[  687.828303][ T5941] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  688.320728][    T9] gspca_spca1528: reg_w err -71
[  688.326372][    T9] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  688.336505][    T9] usb 1-1: USB disconnect, device number 67
[  688.886969][T20759] /dev/rnullb0: Can't open blockdev
[  688.920306][T20762] /dev/rnullb0: Can't open blockdev
[  689.013038][T20724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  689.044213][  T121] usb 6-1: USB disconnect, device number 55
[  689.058658][  T121] usblp0: removed
[  689.139513][T20770] /dev/rnullb0: Can't open blockdev
[  689.174073][    T9] usb 1-1: new low-speed USB device number 68 using dummy_hcd
[  689.335983][    T9] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  689.349137][    T9] usb 1-1: string descriptor 0 read error: -22
[  689.355434][    T9] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  689.364685][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.410355][T17151] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[  689.558987][  T121] usb 6-1: new full-speed USB device number 56 using dummy_hcd
[  689.569729][T17151] usb 7-1: Using ep0 maxpacket: 32
[  689.576390][T17151] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  689.585046][T17151] usb 7-1: config 0 has no interface number 0
[  689.594295][T17151] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  689.595106][  T982] usb 1-1: USB disconnect, device number 68
[  689.608435][T17151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.618849][T17151] usb 7-1: Product: syz
[  689.626240][T17151] usb 7-1: Manufacturer: syz
[  689.631155][T17151] usb 7-1: SerialNumber: syz
[  689.638079][T17151] usb 7-1: config 0 descriptor??
[  689.648087][T17151] smsc95xx v2.0.0
[  689.698022][  T121] usb 6-1: device descriptor read/64, error -71
[  689.954727][  T121] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[  690.104543][  T121] usb 6-1: device descriptor read/64, error -71
[  690.222441][  T121] usb usb6-port1: attempt power cycle
[  690.553951][T20783] netlink: 'syz.7.4318': attribute type 1 has an invalid length.
[  690.585843][  T121] usb 6-1: new full-speed USB device number 58 using dummy_hcd
[  690.623808][  T121] usb 6-1: device descriptor read/8, error -71
[  690.822629][T20796] loop6: detected capacity change from 0 to 1
[  690.896417][  T121] usb 6-1: new full-speed USB device number 59 using dummy_hcd
[  690.931592][  T121] usb 6-1: device descriptor read/8, error -71
[  690.939768][T17151] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  690.952839][T17151] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  690.962919][T17151] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  690.974653][T17151] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  690.986407][T17151] usb 7-1: USB disconnect, device number 73
[  691.077952][  T121] usb usb6-port1: unable to enumerate USB device
[  691.538756][ T5903] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  691.676644][ T5903] usb 1-1: device descriptor read/64, error -71
[  691.784331][  T982] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[  691.934329][ T5903] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  691.965777][  T982] usb 7-1: Using ep0 maxpacket: 32
[  691.971885][  T982] usb 7-1: too many configurations: 17, using maximum allowed: 8
[  691.982498][  T982] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  691.991791][  T982] usb 7-1: config 0 has no interface number 0
[  692.000840][  T982] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  692.009179][  T982] usb 7-1: config 0 has no interface number 0
[  692.016604][  T982] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  692.031027][  T982] usb 7-1: config 0 has no interface number 0
[  692.038886][  T982] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  692.047415][  T982] usb 7-1: config 0 has no interface number 0
[  692.056148][  T982] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  692.059786][T20819] /dev/rnullb0: Can't open blockdev
[  692.066755][  T982] usb 7-1: config 0 has no interface number 0
[  692.077798][  T982] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  692.086387][  T982] usb 7-1: config 0 has no interface number 0
[  692.093747][ T5903] usb 1-1: device descriptor read/64, error -71
[  692.101146][  T982] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  692.110072][  T982] usb 7-1: config 0 has no interface number 0
[  692.117539][  T982] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  692.126151][  T982] usb 7-1: config 0 has no interface number 0
[  692.134644][  T982] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  692.144825][  T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.153311][  T982] usb 7-1: Product: syz
[  692.157622][  T982] usb 7-1: Manufacturer: syz
[  692.160814][T20821] /dev/rnullb0: Can't open blockdev
[  692.163002][  T982] usb 7-1: SerialNumber: syz
[  692.174561][  T982] usb 7-1: config 0 descriptor??
[  692.181773][  T982] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz)
[  692.211746][ T5903] usb usb1-port1: attempt power cycle
[  692.223075][T20823] /dev/rnullb0: Can't open blockdev
[  692.272668][T20825] /dev/rnullb0: Can't open blockdev
[  692.416788][  T982] etas_es58x 7-1:0.2: could not parse product info: ''
[  692.576623][ T5903] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  692.620862][ T5903] usb 1-1: device descriptor read/8, error -71
[  692.885086][    C1] etas_es58x 7-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D.
[  692.896120][    C1] etas_es58x 7-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: -61)
[  692.908107][ T5903] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  692.910281][ T5532] etas_es58x 7-1:0.2 can1: bit-timing not yet defined
[  692.928732][ T5903] usb 1-1: device descriptor read/8, error -71
[  693.046214][ T5903] usb usb1-port1: unable to enumerate USB device
[  693.101178][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  693.102889][T17151] usb 7-1: USB disconnect, device number 74
[  693.110442][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  693.110504][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  693.110556][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  693.144265][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  693.153470][    C1] etas_es58x 7-1:0.2 can0: es58x_write_bulk_callback: error -ESHUTDOWN
[  693.161902][T17151] etas_es58x 7-1:0.2: Disconnecting syz syz
[  693.162314][    C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending?
[  693.167991][ T5532] etas_es58x 7-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL
[  693.406109][T20866] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4335'.
[  693.407561][T20868] /dev/rnullb0: Can't open blockdev
[  693.456011][T20866] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4335'.
[  693.556095][T20875] /dev/rnullb0: Can't open blockdev
[  693.885511][T17151] usb 6-1: new full-speed USB device number 60 using dummy_hcd
[  694.047618][T17151] usb 6-1: device descriptor read/64, error -71
[  694.318409][T17151] usb 6-1: new full-speed USB device number 61 using dummy_hcd
[  694.456629][T20916] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  694.466571][T20916] /dev/rnullb0: Can't open blockdev
[  694.472373][T17151] usb 6-1: device descriptor read/64, error -71
[  694.544348][T20919] /dev/rnullb0: Can't open blockdev
[  694.596888][T17151] usb usb6-port1: attempt power cycle
[  694.664617][T20926] /dev/rnullb0: Can't open blockdev
[  694.756070][T20933] rtc_cmos 00:00: Alarms can be up to one day in the future
[  694.833706][T20940] /dev/rnullb0: Can't open blockdev
[  694.840758][T20941] /dev/rnullb0: Can't open blockdev
[  694.882803][T20943] syzkaller1: entered promiscuous mode
[  694.888637][T20943] syzkaller1: entered allmulticast mode
[  694.962645][ T5903] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  694.970810][T17151] usb 6-1: new full-speed USB device number 62 using dummy_hcd
[  694.992806][T17151] usb 6-1: device descriptor read/8, error -71
[  695.013890][  T121] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[  695.109770][ T5903] usb 1-1: device descriptor read/64, error -71
[  695.141116][T20950] No buffer was provided with the request
[  695.148632][T20950] /dev/rnullb0: Can't open blockdev
[  695.175484][  T121] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.193628][  T121] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  695.209000][  T121] usb 7-1: config 0 interface 0 has no altsetting 0
[  695.215676][  T121] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[  695.227016][  T121] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.229291][T20952] Bluetooth: MGMT ver 1.23
[  695.237653][  T121] usb 7-1: config 0 descriptor??
[  695.248814][T17151] usb 6-1: new full-speed USB device number 63 using dummy_hcd
[  695.270994][T17151] usb 6-1: device descriptor read/8, error -71
[  695.377249][ T5903] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  695.395655][T17151] usb usb6-port1: unable to enumerate USB device
[  695.516248][ T5903] usb 1-1: device descriptor read/64, error -71
[  695.634890][ T5903] usb usb1-port1: attempt power cycle
[  695.683054][  T121] itetech 0003:06CB:73F6.0031: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.6-1/input0
[  695.899303][   T24] usb 7-1: USB disconnect, device number 75
[  695.997563][ T5903] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  696.019391][ T5903] usb 1-1: device descriptor read/8, error -71
[  696.286322][ T5903] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  696.308057][ T5903] usb 1-1: device descriptor read/8, error -71
[  696.437916][ T5903] usb usb1-port1: unable to enumerate USB device
[  696.505401][T20961] netlink: 'syz.6.4363': attribute type 1 has an invalid length.
[  696.514343][T20961] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4363'.
[  696.842399][ T5903] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[  696.876885][T20963] sp0: Synchronizing with TNC
[  696.975099][T20964] [U] �
[  697.005000][ T5903] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  697.016804][ T5903] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  697.026377][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.040601][ T5903] usb 7-1: config 0 descriptor??
[  697.049606][ T5903] pwc: Askey VC010 type 2 USB webcam detected.
[  697.064078][T20966] /dev/rnullb0: Can't open blockdev
[  697.136445][T20971] /dev/rnullb0: Can't open blockdev
[  697.477844][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00
[  697.485387][ T5903] pwc: recv_control_msg error -32 req 02 val 2700
[  697.492321][ T5903] pwc: recv_control_msg error -32 req 02 val 2c00
[  697.720160][ T5903] pwc: recv_control_msg error -71 req 04 val 1300
[  697.727521][ T5903] pwc: recv_control_msg error -71 req 04 val 1400
[  697.734412][ T5903] pwc: recv_control_msg error -71 req 02 val 2000
[  697.742541][ T5903] pwc: recv_control_msg error -71 req 02 val 2100
[  697.749420][ T5903] pwc: recv_control_msg error -71 req 04 val 1500
[  697.757239][ T5903] pwc: recv_control_msg error -71 req 02 val 2500
[  697.765411][ T5903] pwc: recv_control_msg error -71 req 02 val 2400
[  697.772118][ T5903] pwc: recv_control_msg error -71 req 02 val 2600
[  697.779447][ T5903] pwc: recv_control_msg error -71 req 02 val 2900
[  697.788298][ T5903] pwc: recv_control_msg error -71 req 02 val 2800
[  697.795288][ T5903] pwc: recv_control_msg error -71 req 04 val 1100
[  697.802835][ T5903] pwc: recv_control_msg error -71 req 04 val 1200
[  697.813568][ T5903] pwc: Registered as video103.
[  697.820359][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input88
[  697.845670][ T5903] usb 7-1: USB disconnect, device number 76
[  698.336290][T20987] /dev/rnullb0: Can't open blockdev
[  698.351746][  T982] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  698.466791][T20991] random: crng reseeded on system resumption
[  698.500343][  T982] usb 1-1: device descriptor read/64, error -71
[  698.759155][  T982] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  698.793086][T20998] /dev/rnullb0: Can't open blockdev
[  698.923593][  T982] usb 1-1: device descriptor read/64, error -71
[  698.943927][ T5924] usb 7-1: new full-speed USB device number 77 using dummy_hcd
[  699.047270][  T982] usb usb1-port1: attempt power cycle
[  699.053396][T21016] /dev/rnullb0: Can't open blockdev
[  699.133174][ T5924] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  699.142563][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.159902][ T5924] usb 7-1: config 0 descriptor??
[  699.178649][ T5924] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  699.295729][T21031] ntfs3(loop5): try to read out of volume at offset 0x0
[  699.430990][  T982] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  699.483917][  T982] usb 1-1: device descriptor read/8, error -71
[  699.491779][T21036] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  699.507528][T21036] /dev/rnullb0: Can't open blockdev
[  699.521324][T21040] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  699.540000][T21040] /dev/rnullb0: Can't open blockdev
[  699.612207][T20996] PKCS7: Unknown OID: [5] (bad)
[  699.617211][T20996] PKCS7: Only support pkcs7_signedData type
[  699.630965][T20996] /dev/rnullb0: Can't open blockdev
[  699.641733][ T5924] gp8psk: usb in 128 operation failed.
[  699.653586][ T5924] gp8psk: usb in 137 operation failed.
[  699.662031][ T5924] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  699.680942][ T5924] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  699.701702][ T5924] usb 7-1: USB disconnect, device number 77
[  699.741193][  T982] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  699.755286][T21046] /dev/rnullb0: Can't open blockdev
[  699.774032][  T982] usb 1-1: device descriptor read/8, error -71
[  699.868112][T21049] input: syz0 as /devices/virtual/input/input89
[  699.896947][  T982] usb usb1-port1: unable to enumerate USB device
[  700.038289][T21059] /dev/rnullb0: Can't open blockdev
[  700.065525][T21059] /dev/rnullb0: Can't open blockdev
[  700.096527][T21057] netlink: 'syz.5.4396': attribute type 29 has an invalid length.
[  700.110215][T21054] netlink: 'syz.5.4396': attribute type 29 has an invalid length.
[  700.120636][T21057] netlink: 'syz.5.4396': attribute type 29 has an invalid length.
[  700.138682][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4396'.
[  700.387469][T21072] /dev/rnullb0: Can't open blockdev
[  700.583414][T21092] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4404'.
[  700.698417][T21096] /dev/rnullb0: Can't open blockdev
[  700.869492][T21100] PKCS8: Unsupported PKCS#8 version
[  700.981587][ T5903] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  701.155879][ T5903] usb 6-1: config 5 has an invalid interface number: 233 but max is 1
[  701.167414][ T5903] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  701.178798][ T5903] usb 6-1: config 5 has no interface number 1
[  701.185720][ T5903] usb 6-1: config 5 interface 233 has no altsetting 0
[  701.189964][T21104] dvmrp0: left allmulticast mode
[  701.221571][ T5903] usb 6-1: string descriptor 0 read error: -71
[  701.244569][ T5903] usb 6-1: New USB device found, idVendor=1e2d, idProduct=0085, bcdDevice=96.e8
[  701.254445][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.270282][ T5903] usb 6-1: can't set config #5, error -71
[  701.270362][ T5924] usb 7-1: new full-speed USB device number 78 using dummy_hcd
[  701.282119][ T5903] usb 6-1: USB disconnect, device number 64
[  701.454802][ T5924] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  701.473202][ T5924] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  701.483992][ T5924] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  701.499656][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0
[  701.506626][ T5924] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  701.515757][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.527844][ T5924] usb 7-1: config 0 descriptor??
[  701.631223][T21121] binder: 21120:21121 ioctl c018620b 200000000280 returned -14
[  701.993600][T21137] /dev/rnullb0: Can't open blockdev
[  702.112255][T21140] /dev/rnullb0: Can't open blockdev
[  702.127587][   T24] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  702.196633][T21102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.208132][T21102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.229620][ T5924] usbhid 7-1:0.0: can't add hid device: -71
[  702.247203][ T5924] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  702.249150][T21149] /dev/rnullb0: Can't open blockdev
[  702.265725][ T5924] usb 7-1: USB disconnect, device number 78
[  702.297345][   T24] usb 1-1: Using ep0 maxpacket: 8
[  702.311993][   T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  702.324033][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.333391][   T24] usb 1-1: Product: syz
[  702.348544][   T24] usb 1-1: Manufacturer: syz
[  702.354317][   T24] usb 1-1: SerialNumber: syz
[  702.360925][   T24] usb 1-1: config 0 descriptor??
[  702.385779][T21152] ieee802154 phy0 wpan0: encryption failed: -90
[  702.385805][T21153] tipc: Started in network mode
[  702.398825][T21153] tipc: Node identity 7, cluster identity 4711
[  702.405739][T21153] tipc: Node number set to 7
[  702.411290][T21152] /dev/rnullb0: Can't open blockdev
[  702.447195][  T121] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  702.584011][   T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  702.618018][  T121] usb 6-1: Using ep0 maxpacket: 16
[  702.625402][  T121] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  702.635935][  T121] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  702.647546][  T121] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  702.656822][  T121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.664917][  T121] usb 6-1: Product: syz
[  702.669598][  T121] usb 6-1: Manufacturer: syz
[  702.674338][  T121] usb 6-1: SerialNumber: syz
[  702.819493][T21158] /dev/rnullb0: Can't open blockdev
[  702.880350][T21161] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4428'.
[  702.893840][T21161] netlink: 428 bytes leftover after parsing attributes in process `syz.6.4428'.
[  702.904068][T21161] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4428'.
[  702.921446][  T121] usb 6-1: 0:2 : does not exist
[  702.930568][  T121] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5)
[  702.950391][  T121] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  702.971886][  T121] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  702.985762][  T121] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  703.014968][  T121] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  703.034362][  T121] usb 6-1: USB disconnect, device number 65
[  703.569729][ T5903] usb 7-1: new high-speed USB device number 79 using dummy_hcd
[  703.755873][ T5903] usb 7-1: unable to get BOS descriptor or descriptor too short
[  703.765536][ T5903] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  703.776913][ T5903] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  703.789846][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4435'.
[  703.791907][ T5903] usb 7-1: config 1 interface 1 has no altsetting 0
[  703.802391][T21189] openvswitch: netlink: Unknown nsh attribute 0
[  703.814443][T21189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  703.817057][ T5903] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  703.830191][T21189] /dev/rnullb0: Can't open blockdev
[  703.839442][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.848053][ T5903] usb 7-1: Product: syz
[  703.852990][ T5903] usb 7-1: Manufacturer: syz
[  703.857675][ T5903] usb 7-1: SerialNumber: syz
[  703.980740][T21200] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4438'.
[  703.992497][T21200] /dev/rnullb0: Can't open blockdev
[  703.999878][T21202] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4438'.
[  704.000391][T21200] /dev/rnullb0: Can't open blockdev
[  704.115570][   T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  704.158143][   T24] usb 1-1: USB disconnect, device number 81
[  704.173528][ T5903] usb 7-1: USB disconnect, device number 79
[  704.479618][  T121] usb 6-1: new full-speed USB device number 66 using dummy_hcd
[  704.575218][ T5903] usb 7-1: new low-speed USB device number 80 using dummy_hcd
[  704.641535][  T121] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  704.650170][  T121] usb 6-1: config 0 has no interface number 0
[  704.656489][  T121] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  704.668859][  T121] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  704.692729][  T121] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  704.702420][  T121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.710848][  T121] usb 6-1: Product: syz
[  704.715395][  T121] usb 6-1: Manufacturer: syz
[  704.720347][  T121] usb 6-1: SerialNumber: syz
[  704.725823][ T5903] usb 7-1: device descriptor read/64, error -71
[  704.735069][  T121] usb 6-1: config 0 descriptor??
[  704.741279][T21209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  704.749055][T21209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  704.759495][  T121] smsc95xx v2.0.0
[  704.979582][T21204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  704.981650][ T5903] usb 7-1: new low-speed USB device number 81 using dummy_hcd
[  704.991235][T21204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  705.131295][ T5903] usb 7-1: device descriptor read/64, error -71
[  705.186894][T21221] netlink: 'syz.0.4444': attribute type 11 has an invalid length.
[  705.195098][T21221] netlink: 'syz.0.4444': attribute type 11 has an invalid length.
[  705.203504][T21221] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4444'.
[  705.220297][  T121] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  705.232095][  T121] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  705.252781][ T5903] usb usb7-port1: attempt power cycle
[  705.265804][T21223] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4445'.
[  705.566787][T21227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  705.577384][T21227] /dev/rnullb0: Can't open blockdev
[  705.623657][ T5903] usb 7-1: new low-speed USB device number 82 using dummy_hcd
[  705.645432][ T5903] usb 7-1: device descriptor read/8, error -71
[  705.822819][T21235] /dev/rnullb0: Can't open blockdev
[  705.866773][T21237] syzkaller1: entered promiscuous mode
[  705.873168][T21237] syzkaller1: entered allmulticast mode
[  705.901402][ T5903] usb 7-1: new low-speed USB device number 83 using dummy_hcd
[  705.923239][ T5903] usb 7-1: device descriptor read/8, error -71
[  706.041594][ T5903] usb usb7-port1: unable to enumerate USB device
[  706.107647][ T1307] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  706.116882][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  706.123207][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  706.157913][T17151] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  706.318384][T17151] usb 1-1: Using ep0 maxpacket: 8
[  706.325799][T17151] usb 1-1: config 5 has an invalid interface number: 143 but max is 2
[  706.334145][T17151] usb 1-1: config 5 has an invalid interface number: 6 but max is 2
[  706.342410][T17151] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  706.351544][T17151] usb 1-1: config 5 has an invalid descriptor of length 108, skipping remainder of the config
[  706.362255][T17151] usb 1-1: config 5 has no interface number 1
[  706.368472][T17151] usb 1-1: config 5 has no interface number 2
[  706.374796][T17151] usb 1-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  706.388224][T17151] usb 1-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30
[  706.399781][T17151] usb 1-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122
[  706.412975][T17151] usb 1-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30
[  706.425970][T17151] usb 1-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36
[  706.439216][T17151] usb 1-1: config 5 interface 143 has no altsetting 0
[  706.455291][T17151] usb 1-1: config 5 interface 6 has no altsetting 0
[  706.462192][T17151] usb 1-1: config 5 interface 0 has no altsetting 0
[  706.472091][T17151] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3
[  706.484145][T17151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.492379][T17151] usb 1-1: Product: syz
[  706.496711][T17151] usb 1-1: Manufacturer: syz
[  706.501433][T17151] usb 1-1: SerialNumber: syz
[  706.540207][  T121] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  706.551524][  T121] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61
[  706.741589][T17151] uvcvideo 1-1:5.143: probe with driver uvcvideo failed with error -22
[  706.768947][T17151] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  706.775967][T17151] usb 1-1: MIDIStreaming interface descriptor not found
[  706.804866][T17151] usb 1-1: USB disconnect, device number 82
[  706.837534][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  707.441800][T21249] /dev/rnullb0: Can't open blockdev
[  707.719599][T17151] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  707.879808][T17151] usb 1-1: Using ep0 maxpacket: 16
[  707.885809][T17151] usb 1-1: no configurations
[  707.891463][T17151] usb 1-1: can't read configurations, error -22
[  708.029666][T17151] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  708.190101][T17151] usb 1-1: Using ep0 maxpacket: 16
[  708.195920][T17151] usb 1-1: no configurations
[  708.201777][T17151] usb 1-1: can't read configurations, error -22
[  708.208893][T17151] usb usb1-port1: attempt power cycle
[  708.334528][T21262] gfs2: gfs2 mount does not exist
[  708.340649][T21262] fuse: Unknown parameter 'grou��i�>1�S���d'
[  708.350631][ T5941] usb 7-1: new high-speed USB device number 84 using dummy_hcd
[  708.575153][T17151] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  708.597188][T17151] usb 1-1: Using ep0 maxpacket: 16
[  708.603060][T17151] usb 1-1: no configurations
[  708.608301][T17151] usb 1-1: can't read configurations, error -22
[  708.650821][  T982] usb 6-1: USB disconnect, device number 66
[  708.714113][ T5941] usb 7-1: device descriptor read/64, error -71
[  708.747755][T17151] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  708.778977][T17151] usb 1-1: Using ep0 maxpacket: 16
[  708.787671][T17151] usb 1-1: no configurations
[  708.792780][T17151] usb 1-1: can't read configurations, error -22
[  708.800038][T17151] usb usb1-port1: unable to enumerate USB device
[  708.873051][T21277] sctp: [Deprecated]: syz.5.4462 (pid 21277) Use of int in maxseg socket option.
[  708.873051][T21277] Use struct sctp_assoc_value instead
[  708.970851][ T5941] usb 7-1: new high-speed USB device number 85 using dummy_hcd
[  709.141945][ T5941] usb 7-1: Using ep0 maxpacket: 16
[  709.148609][ T5941] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  709.161282][ T5941] usb 7-1: config 0 interface 0 has no altsetting 0
[  709.169387][ T5941] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  709.178718][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.192341][ T5941] usb 7-1: config 0 descriptor??
[  709.195038][T21281] can0: slcan on ptm0.
[  709.207549][ T5941] usbhid 7-1:0.0: can't add hid device: -22
[  709.220489][ T5941] usbhid 7-1:0.0: probe with driver usbhid failed with error -22
[  709.437502][ T5941] usb 7-1: USB disconnect, device number 85
[  710.063352][T21279] can0 (unregistered): slcan off ptm0.
[  710.232840][  T982] usb 7-1: new high-speed USB device number 86 using dummy_hcd
[  710.372082][  T982] usb 7-1: device descriptor read/64, error -71
[  710.649971][  T982] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[  710.706301][T21352] /dev/rnullb0: Can't open blockdev
[  710.789015][  T982] usb 7-1: device descriptor read/64, error -71
[  710.907397][  T982] usb usb7-port1: attempt power cycle
[  711.153843][T21373] kvm: user requested TSC rate below hardware speed
[  711.162346][T21373] /dev/rnullb0: Can't open blockdev
[  711.270243][  T982] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[  711.302932][  T982] usb 7-1: device descriptor read/8, error -71
[  711.321810][T21380] /dev/rnullb0: Can't open blockdev
[  711.327725][   T51] Bluetooth: hci0: command 0x0405 tx timeout
[  711.470035][T21388] /dev/sg0: Can't lookup blockdev
[  711.520359][T21393] /dev/rnullb0: Can't open blockdev
[  711.554399][T21396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  711.564403][T21396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.573661][  T982] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[  711.576150][T21396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  711.593757][T21396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.603519][  T982] usb 7-1: device descriptor read/8, error -71
[  711.605689][T21396] /dev/rnullb0: Can't open blockdev
[  711.730295][ T5923] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  711.738184][  T982] usb usb7-port1: unable to enumerate USB device
[  711.805097][T17151] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  711.901283][ T5923] usb 6-1: Using ep0 maxpacket: 8
[  711.908173][ T5923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  711.918616][ T5923] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  711.928218][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.938703][ T5923] usb 6-1: config 0 descriptor??
[  711.947044][ T5923] gspca_main: vc032x-2.14.0 probing 046d:0892
[  711.954893][T17151] usb 1-1: device descriptor read/64, error -71
[  712.211572][T17151] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  712.350704][T17151] usb 1-1: device descriptor read/64, error -71
[  712.479838][T17151] usb usb1-port1: attempt power cycle
[  712.853178][T17151] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  712.875707][T17151] usb 1-1: device descriptor read/8, error -71
[  713.141860][T17151] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  713.163888][T17151] usb 1-1: device descriptor read/8, error -71
[  713.281639][T17151] usb usb1-port1: unable to enumerate USB device
[  713.345912][T21409] /dev/rnullb0: Can't open blockdev
[  713.564319][ T5923] usb 6-1: USB disconnect, device number 67
[  713.651639][T21424] /dev/rnullb0: Can't open blockdev
[  713.826358][ T5924] usb 7-1: new high-speed USB device number 90 using dummy_hcd
[  713.990471][ T5924] usb 7-1: unable to get BOS descriptor or descriptor too short
[  713.999555][ T5924] usb 7-1: config 255 has an invalid interface number: 154 but max is 0
[  714.007949][ T5924] usb 7-1: config 255 has no interface number 0
[  714.014961][ T5924] usb 7-1: config 255 interface 154 has no altsetting 0
[  714.024135][ T5924] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=9a.6f
[  714.033551][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.041718][ T5924] usb 7-1: Product: syz
[  714.046169][ T5924] usb 7-1: Manufacturer: syz
[  714.051148][ T5924] usb 7-1: SerialNumber: syz
[  714.316905][ T5924] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  714.368119][ T5924] usb 7-1: USB disconnect, device number 90
[  714.395877][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:255.154/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  714.431002][T21441] /dev/rnullb0: Can't open blockdev
[  714.749915][T21452] /dev/rnullb0: Can't open blockdev
[  714.756205][T21452] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4499'.
[  714.780066][T21452] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4499'.
[  714.789973][T21452] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4499'.
[  714.871244][T21456] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  715.117419][T21460] Option 'TX��Ʈ�' to dns_resolver key: bad/missing value
[  715.134680][ T5924] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[  715.216837][ T5923] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  715.302397][ T5924] usb 7-1: Using ep0 maxpacket: 16
[  715.309485][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  715.320616][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  715.330684][ T5924] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  715.343626][ T5924] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  715.353536][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.363631][ T5924] usb 7-1: config 0 descriptor??
[  715.380111][  T982] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  715.387961][ T5923] usb 1-1: Using ep0 maxpacket: 8
[  715.395313][ T5923] usb 1-1: unable to get BOS descriptor or descriptor too short
[  715.404905][ T5923] usb 1-1: config 4 interface 0 has no altsetting 0
[  715.414424][ T5923] usb 1-1: string descriptor 0 read error: -22
[  715.422507][ T5923] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  715.431948][ T5923] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  715.451350][ T5923] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  715.462282][ T5923] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  715.473252][ T5923] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  715.480596][ T5923] usb 1-1: media controller created
[  715.497881][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  715.560919][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  715.572662][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  715.582554][  T982] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  715.591757][  T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.602012][  T982] usb 6-1: config 0 descriptor??
[  715.724052][ T5923] zl10353_read_register: readreg error (reg=127, ret==0)
[  715.731447][T21458] /dev/rnullb0: Can't open blockdev
[  715.765221][ T5923] usb 1-1: USB disconnect, device number 91
[  715.800809][T21456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  715.810383][T21456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  715.821898][ T5924] microsoft 0003:045E:07DA.0032: report is too long
[  715.828910][ T5924] microsoft 0003:045E:07DA.0032: item 0 4 0 8 parsing failed
[  715.837082][ T5924] microsoft 0003:045E:07DA.0032: parse failed
[  715.843563][ T5924] microsoft 0003:045E:07DA.0032: probe with driver microsoft failed with error -22
[  716.046408][  T982] sony 0003:054C:0268.0033: unknown main item tag 0x0
[  716.053419][  T982] sony 0003:054C:0268.0033: unknown main item tag 0x0
[  716.060441][  T982] sony 0003:054C:0268.0033: unknown main item tag 0x0
[  716.070155][  T982] sony 0003:054C:0268.0033: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.5-1/input0
[  716.082457][  T982] sony 0003:054C:0268.0033: failed to claim input
[  716.261821][T21460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.270937][T21460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.281500][T21460] support for the xor transformation has been removed.
[  716.295375][  T982] usb 6-1: USB disconnect, device number 68
[  716.331191][T21465] ntfs3(nullb0): Primary boot signature is not NTFS.
[  716.338330][T21465] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  716.403708][T21467] /dev/rnullb0: Can't open blockdev
[  716.409392][T21468] /dev/rnullb0: Can't open blockdev
[  716.594645][  T982] usb 7-1: USB disconnect, device number 91
[  717.122838][T21487] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4509'.
[  717.136778][T21487] [U] 
[  717.379547][T21493] input: syz1 as /devices/virtual/input/input90
[  717.414285][T21493] mkiss: ax0: crc mode is auto.
[  717.427232][T21495] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  717.547472][T21502] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  717.558140][T21502] /dev/rnullb0: Can't open blockdev
[  717.750842][T21514] /dev/rnullb0: Can't open blockdev
[  717.778722][T21505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.810648][T21505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.892047][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4519'.
[  717.907207][T21517] 9pnet_fd: p9_fd_create_tcp (21517): problem connecting socket to 127.0.0.1
[  717.918651][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4519'.
[  717.930917][ T5903] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  718.095762][ T5903] usb 1-1: Using ep0 maxpacket: 32
[  718.100450][T21532] /dev/rnullb0: Can't open blockdev
[  718.116576][ T5903] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  718.136312][ T5903] usb 1-1: config 0 has no interface number 0
[  718.147246][ T5903] usb 1-1: config 0 interface 12 has no altsetting 0
[  718.160636][ T5903] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  718.189390][ T5903] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  718.206931][ T5903] usb 1-1: Product: syz
[  718.218566][ T5903] usb 1-1: Manufacturer: syz
[  718.232824][ T5903] usb 1-1: SerialNumber: syz
[  718.239617][ T5903] usb 1-1: config 0 descriptor??
[  718.906690][ T5941] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  718.931145][T21545] ==================================================================
[  718.939333][T21545] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  718.948140][T21545] Write of size 720 at addr ffffc9000ad99f80 by task vivid-000-vid-c/21545
[  718.956839][T21545] 
[  718.959267][T21545] CPU: 1 UID: 0 PID: 21545 Comm: vivid-000-vid-c Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) 
[  718.959289][T21545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  718.959299][T21545] Call Trace:
[  718.959307][T21545]  <TASK>
[  718.959316][T21545]  dump_stack_lvl+0x189/0x250
[  718.959342][T21545]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  718.959359][T21545]  ? __pfx_dump_stack_lvl+0x10/0x10
[  718.959381][T21545]  ? __pfx__printk+0x10/0x10
[  718.959403][T21545]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  718.959427][T21545]  ? __virt_addr_valid+0xdc/0x5c0
[  718.959441][T21545]  ? __virt_addr_valid+0xdc/0x5c0
[  718.959455][T21545]  print_report+0xca/0x240
[  718.959470][T21545]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  718.959484][T21545]  kasan_report+0x118/0x150
[  718.959501][T21545]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  718.959519][T21545]  kasan_check_range+0x2b0/0x2c0
[  718.959534][T21545]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  718.959549][T21545]  __asan_memcpy+0x40/0x70
[  718.959570][T21545]  tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  718.959611][T21545]  vivid_thread_vid_cap_tick+0xfff/0x5fd0
[  718.959641][T21545]  ? rcu_is_watching+0x15/0xb0
[  718.959661][T21545]  ? rcu_is_watching+0x15/0xb0
[  718.959681][T21545]  ? __pfx___free_object+0x10/0x10
[  718.959702][T21545]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  718.959728][T21545]  ? do_raw_spin_lock+0x121/0x290
[  718.959752][T21545]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[  718.959781][T21545]  ? cgroup_freezing+0x29a/0x350
[  718.959806][T21545]  vivid_thread_vid_cap+0x8da/0x10d0
[  718.959837][T21545]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  718.959862][T21545]  ? __pfx_autoremove_wake_function+0x10/0x10
[  718.959895][T21545]  ? __kthread_parkme+0x7b/0x200
[  718.959923][T21545]  ? __kthread_parkme+0x1a1/0x200
[  718.959952][T21545]  kthread+0x711/0x8a0
[  718.959970][T21545]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  718.959999][T21545]  ? __pfx_kthread+0x10/0x10
[  718.960030][T21545]  ? rcu_is_watching+0x15/0xb0
[  718.960054][T21545]  ? __pfx_kthread+0x10/0x10
[  718.960093][T21545]  ret_from_fork+0x3f9/0x770
[  718.960121][T21545]  ? __pfx_ret_from_fork+0x10/0x10
[  718.960145][T21545]  ? __switch_to_asm+0x39/0x70
[  718.960159][T21545]  ? __switch_to_asm+0x33/0x70
[  718.960172][T21545]  ? __pfx_kthread+0x10/0x10
[  718.960194][T21545]  ret_from_fork_asm+0x1a/0x30
[  718.960214][T21545]  </TASK>
[  718.960220][T21545] 
[  719.080006][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  719.081682][T21545] The buggy address belongs to a 128-page vmalloc region starting at 0xffffc9000ad1a000 allocated at vb2_vmalloc_alloc+0xef/0x340
[  719.087115][ T5941] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  719.092735][T21545] The buggy address belongs to the physical page:
[  719.092766][T21545] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x200000efa pfn:0x524a9
[  719.092788][T21545] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  719.092819][T21545] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  719.092836][T21545] raw: 0000000200000efa 0000000000000000 00000001ffffffff 0000000000000000
[  719.092848][T21545] page dumped because: kasan: bad access detected
[  719.092866][T21545] page_owner tracks the page as allocated
[  719.100350][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.104073][T21545] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 21544, tgid 21542 (syz.6.4526), ts 718882944663, free_ts 718510120150
[  719.104115][T21545]  post_alloc_hook+0x240/0x2a0
[  719.119062][ T5941] usb 6-1: config 0 descriptor??
[  719.120248][T21545]  get_page_from_freelist+0x21e4/0x22c0
[  719.120288][T21545]  __alloc_frozen_pages_noprof+0x181/0x370
[  719.328950][T21545]  alloc_pages_mpol+0x232/0x4a0
[  719.333837][T21545]  alloc_pages_noprof+0xa9/0x190
[  719.338829][T21545]  __vmalloc_node_range_noprof+0x97d/0x12f0
[  719.344764][T21545]  vmalloc_user_noprof+0xad/0xf0
[  719.349748][T21545]  vb2_vmalloc_alloc+0xef/0x340
[  719.350732][ T5941] usbhid 6-1:0.0: can't add hid device: -71
[  719.354633][T21545]  __vb2_queue_alloc+0x9bf/0x15a0
[  719.354663][T21545]  vb2_core_reqbufs+0xc31/0x1420
[  719.366223][ T5941] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  719.370659][T21545]  __vb2_init_fileio+0x318/0xff0
[  719.370692][T21545]  vb2_core_poll+0x4c1/0x840
[  719.370713][T21545]  vb2_fop_poll+0x193/0x310
[  719.370734][T21545]  v4l2_poll+0x147/0x2c0
[  719.370753][T21545]  do_sys_poll+0x8c9/0x1070
[  719.370777][T21545]  __se_sys_ppoll+0x1ff/0x260
[  719.370799][T21545] page last free pid 21537 tgid 21525 stack trace:
[  719.370814][T21545]  free_unref_folios+0xdbd/0x1520
[  719.391686][ T5941] usb 6-1: USB disconnect, device number 69
[  719.392618][T21545]  folios_put_refs+0x559/0x640
[  719.428919][T21545]  free_pages_and_swap_cache+0x277/0x520
[  719.434747][T21545]  tlb_flush_mmu+0x3a0/0x680
[  719.439350][T21545]  unmap_page_range+0x3b37/0x4370
[  719.444394][T21545]  unmap_vmas+0x399/0x580
[  719.448767][T21545]  exit_mmap+0x248/0xb50
[  719.453073][T21545]  __mmput+0x118/0x420
[  719.457360][T21545]  exit_mm+0x1da/0x2c0
[  719.461883][T21545]  do_exit+0x648/0x2300
[  719.466056][T21545]  do_group_exit+0x21c/0x2d0
[  719.470652][T21545]  get_signal+0x1286/0x1340
[  719.475172][T21545]  arch_do_signal_or_restart+0x9a/0x750
[  719.480797][T21545]  exit_to_user_mode_loop+0x75/0x110
[  719.486136][T21545]  do_syscall_64+0x2bd/0x3b0
[  719.491013][T21545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.497185][T21545] 
[  719.499611][T21545] Memory state around the buggy address:
[  719.505462][T21545]  ffffc9000ad99f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  719.513666][T21545]  ffffc9000ad99f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  719.521853][T21545] >ffffc9000ad9a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  719.530097][T21545]                    ^
[  719.534271][T21545]  ffffc9000ad9a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  719.542736][T21545]  ffffc9000ad9a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  719.550812][T21545] ==================================================================
[  719.559025][    C1] vkms_vblank_simulate: vblank timer overrun
[  719.571591][T21545] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  719.578855][T21545] CPU: 1 UID: 0 PID: 21545 Comm: vivid-000-vid-c Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) 
[  719.591112][T21545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  719.601187][T21545] Call Trace:
[  719.604490][T21545]  <TASK>
[  719.607451][T21545]  dump_stack_lvl+0x99/0x250
[  719.612105][T21545]  ? __asan_memcpy+0x40/0x70
[  719.616717][T21545]  ? __pfx_dump_stack_lvl+0x10/0x10
[  719.621936][T21545]  ? __pfx__printk+0x10/0x10
[  719.626572][T21545]  vpanic+0x281/0x750
[  719.630599][T21545]  ? preempt_schedule+0xae/0xc0
[  719.635502][T21545]  ? __pfx_vpanic+0x10/0x10
[  719.640110][T21545]  ? preempt_schedule_common+0x83/0xd0
[  719.645607][T21545]  ? preempt_schedule+0xae/0xc0
[  719.650472][T21545]  ? __pfx_preempt_schedule+0x10/0x10
[  719.655868][T21545]  panic+0xb9/0xc0
[  719.659609][T21545]  ? __pfx_panic+0x10/0x10
[  719.664053][T21545]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  719.669998][T21545]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  719.675651][T21545]  check_panic_on_warn+0x89/0xb0
[  719.680608][T21545]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  719.686384][T21545]  end_report+0x78/0x160
[  719.690637][T21545]  kasan_report+0x129/0x150
[  719.695154][T21545]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  719.700811][T21545]  kasan_check_range+0x2b0/0x2c0
[  719.705938][T21545]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  719.711615][T21545]  __asan_memcpy+0x40/0x70
[  719.716080][T21545]  tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  719.721615][T21545]  vivid_thread_vid_cap_tick+0xfff/0x5fd0
[  719.727674][T21545]  ? rcu_is_watching+0x15/0xb0
[  719.732578][T21545]  ? rcu_is_watching+0x15/0xb0
[  719.737553][T21545]  ? __pfx___free_object+0x10/0x10
[  719.742684][T21545]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  719.748620][T21545]  ? do_raw_spin_lock+0x121/0x290
[  719.753684][T21545]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[  719.760148][T21545]  ? cgroup_freezing+0x29a/0x350
[  719.765138][T21545]  vivid_thread_vid_cap+0x8da/0x10d0
[  719.770471][T21545]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  719.776484][T21545]  ? __pfx_autoremove_wake_function+0x10/0x10
[  719.782595][T21545]  ? __kthread_parkme+0x7b/0x200
[  719.787575][T21545]  ? __kthread_parkme+0x1a1/0x200
[  719.792723][T21545]  kthread+0x711/0x8a0
[  719.796815][T21545]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  719.802586][T21545]  ? __pfx_kthread+0x10/0x10
[  719.807303][T21545]  ? rcu_is_watching+0x15/0xb0
[  719.812098][T21545]  ? __pfx_kthread+0x10/0x10
[  719.816710][T21545]  ret_from_fork+0x3f9/0x770
[  719.821347][T21545]  ? __pfx_ret_from_fork+0x10/0x10
[  719.826776][T21545]  ? __switch_to_asm+0x39/0x70
[  719.831547][T21545]  ? __switch_to_asm+0x33/0x70
[  719.836411][T21545]  ? __pfx_kthread+0x10/0x10
[  719.841108][T21545]  ret_from_fork_asm+0x1a/0x30
[  719.845935][T21545]  </TASK>
[  719.849272][T21545] Kernel Offset: disabled
[  719.853605][T21545] Rebooting in 86400 seconds..