last executing test programs:

4m34.225139704s ago: executing program 2 (id=634):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) (async, rerun: 32)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200016d"], 0x18}}, 0x0) (rerun: 32)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)

4m34.169787914s ago: executing program 2 (id=635):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0ae0"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0xec) (async)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0)
read$dsp(r1, &(0x7f0000000180)=""/161, 0xa1)

4m34.012768674s ago: executing program 2 (id=636):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x9, 0x9)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './cgroup\x00'})
sigaltstack(&(0x7f0000000240)={&(0x7f0000000140)=""/247, 0x80000002, 0xf7}, 0x0)

4m33.987278584s ago: executing program 2 (id=637):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x7fff, @mcast2, 0x5e45}}, 0x24) (async, rerun: 32)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) (rerun: 32)

4m33.673091868s ago: executing program 2 (id=638):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
getsockname$llc(r0, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x800)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xb2ffeb5207d3ddf5}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xc1fd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0xa3}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000814}, 0x889e73cfc159a159)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r3, 0x6f000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r4, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x4)
getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000040))
ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x6)

4m32.802001062s ago: executing program 2 (id=641):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x508000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000)

4m17.767799429s ago: executing program 32 (id=641):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x508000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000)

3m58.583977123s ago: executing program 4 (id=844):
r0 = fanotify_init(0x200, 0x0)
fanotify_mark(r0, 0x2, 0x8001020, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00')
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000002}}}, 0x10)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x58}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301003, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bond0\x00'})
pwritev(r1, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
read(r3, &(0x7f0000000240)=""/49, 0x31)
ioctl$FIBMAP(r5, 0x401070c9, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x7f, 0x4a, 0x0, 0x8, 0x6, 0x0, 0x9, 0xffffffffffffff9a, 0xffffffffffffffc0, 0x1, 0x3, 0x8, 0x7, 0x4da, 0x5, 0x7fffffff], 0x737b2000, 0x200})

3m58.531259894s ago: executing program 4 (id=845):
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r0, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xf2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c)

3m58.4624167s ago: executing program 4 (id=846):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
fadvise64(r0, 0x3, 0x0, 0x1)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x3000) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async, rerun: 64)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/4105, 0x1009}, {&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f00000001c0)=""/86, 0x56}], 0x3}, 0x0) (rerun: 64)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
read$FUSE(r0, &(0x7f0000004380)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in=@remote}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) (async)
fchownat(r4, &(0x7f0000000040)='./file0\x00', r2, r3, 0x1000)

3m58.197822742s ago: executing program 4 (id=848):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000)

3m57.219768112s ago: executing program 4 (id=853):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x400)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x81b}}, './file0\x00'})
sendto$inet6(r1, &(0x7f00000000c0)="33f12e2436516a8c91ed699b3467c273ce29cb5af16360dd0358da4e20bd5241fd357788e6bd6af3a99e964e603f2d3423a5122a5d39b15061d19b328237d96b280207d8d7bc9b2125063433aeddd61d28f69ca3a11bf279f7eb997eb02c6f38f2846e4d1714f9497833bc59454d3c9c312ab23e18b4aad086ff38722a984749b15fed29e0cf", 0x86, 0x40080, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1c)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "417d3f6af318162c", "ac88ab51e81b3c894443bf904b865f7a", "9d0a1aab", "a822d6b89171014f"}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000200))
madvise(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0)
recvfrom(r2, &(0x7f0000000240)=""/129, 0x81, 0x40000000, &(0x7f0000000300)=@phonet={0x23, 0x54, 0x5, 0x9}, 0x80)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x600000b, 0x11, r1, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000400)=0x4, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r5=>r4, {0x40000000}}, './file0\x00'})
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000480)={{0x1, 0x3, 0xfffffffb, 0x6, 0x1, 0x1}, 0x3dd, [0x6741, 0x8, 0x80000001, 0x2, 0x210, 0x2, 0xffff0001, 0x7, 0x3, 0x7, 0x6, 0x1, 0x7, 0x1, 0x9, 0x6, 0x0, 0x9, 0x8, 0x0, 0x7fffffff, 0x2, 0x0, 0x101, 0x400, 0x4, 0x3, 0x0, 0x9, 0x8, 0x255c, 0x4, 0x10001, 0x7, 0x10, 0x10000, 0x101, 0x80200, 0x8, 0x1, 0x9, 0x0, 0x1e, 0x100, 0x1ff, 0x83f, 0x5, 0x5, 0x1400000, 0x7000000, 0x65d, 0x0, 0x4, 0x4, 0x4a04ff4b, 0xa, 0xa09, 0xfffffffb, 0x3, 0x3a19a6b1, 0x9, 0x9, 0x2, 0x7, 0x3ff, 0x5389b65f, 0x1, 0x401, 0x10001, 0x7f, 0x1, 0x81, 0x2, 0x5c, 0xf0, 0x1, 0x5, 0x4, 0x4, 0x8, 0x40, 0x9, 0x2, 0xbc1c, 0x7, 0x2, 0x0, 0x100, 0x8, 0x7, 0x4, 0x7, 0x10001, 0x0, 0x0, 0x7f, 0x100, 0x7, 0x401, 0x6, 0x2, 0x84b4, 0x401, 0xb, 0x6, 0x1, 0x5, 0x5, 0xf72, 0x8001, 0xfff, 0x3, 0x1, 0x2, 0x1, 0x3ff, 0x5, 0xfffffebb, 0x7, 0xb, 0x4, 0x6, 0x7fffffff, 0x6, 0x2, 0x6, 0x3ff, 0x10, 0x89cf5d7a, 0xc0000000, 0xfffff200, 0x1, 0x9, 0x212, 0x1, 0xb26, 0x1482, 0x8000, 0x7, 0x5, 0x2, 0x80000001, 0x3, 0x4, 0x0, 0x2b, 0x2, 0x3, 0x8001, 0x0, 0xfffffff9, 0x2, 0x1, 0x6, 0x0, 0x9, 0x8, 0xfffffff9, 0xb3, 0x3, 0x6, 0x1752, 0x33ca, 0x6, 0x80000000, 0x200, 0x800, 0x3, 0x0, 0x9, 0x5, 0x0, 0x1, 0xf869, 0x40, 0x6, 0x8, 0x6, 0x7, 0x6, 0x42b0972f, 0x1, 0x7, 0x10000, 0x7, 0xb018, 0x8, 0x0, 0x452, 0x7, 0xa, 0x2, 0xa, 0x5, 0x5, 0x7, 0x9d, 0x4, 0x493, 0x5, 0x3, 0x0, 0x200, 0xfa, 0xd, 0x5, 0x8, 0x2, 0x8a93, 0x7, 0x46, 0x6, 0x3, 0xffffffff, 0x3, 0x9, 0x8, 0x9, 0x4, 0xeb, 0x28000, 0x1000, 0xfffff37c, 0x6, 0x1, 0x5d9, 0x7, 0xaa, 0xfffffff8, 0x400, 0xd, 0x59b5, 0x0, 0x8, 0x2, 0x80000001, 0x2, 0x0, 0xfffffff8, 0x1, 0x8, 0x7fffffff, 0x3, 0x8, 0x2, 0x7, 0x8, 0x9, 0x7fffffff, 0x3, 0xd1, 0x6, 0x3, 0x8, 0x6, 0x962, 0x0, 0x0, 0x3f, 0x4, 0xa5, 0x2, 0x32f, 0x400, 0xb3e1, 0x0, 0x9, 0x1, 0x3, 0x10001, 0x3, 0x9, 0x7ff, 0x4, 0x73, 0x3, 0x3, 0xb, 0x1, 0xffffff3c, 0x6, 0x3, 0x3181, 0x5, 0x2, 0x7, 0x19e, 0x10, 0xffffffff, 0x9, 0x6, 0x2, 0x10, 0x2, 0x5, 0x2, 0x7, 0xb, 0x5, 0x4a2, 0x6, 0x244, 0x7fff, 0x4, 0x4, 0x0, 0x7, 0x5, 0x0, 0x9, 0x8728, 0x7f, 0x80000000, 0x2, 0xf6c1, 0x5, 0x7, 0x3, 0x19, 0x1, 0x7, 0xbce8, 0x4, 0x1000, 0xd, 0x2, 0x9, 0x9051, 0x2, 0x80, 0x3, 0xe63, 0x15, 0x6, 0x4, 0xfffffffe, 0xffffff17, 0x1, 0x80000000, 0x5, 0xfffff800, 0x0, 0x10, 0x2, 0x8, 0xe78, 0x9, 0x3, 0x7, 0x1, 0x0, 0x800, 0x81, 0x5, 0xe9, 0x5, 0x754e, 0x559, 0x3, 0x5, 0xe2a, 0x61, 0x9, 0x8, 0x3, 0x34, 0x6, 0x6, 0x80000000, 0x3, 0x4, 0x1, 0x7ff, 0x8, 0x4, 0x200, 0x7, 0xe, 0x1000, 0x2, 0x7fff, 0x3, 0xfffffff8, 0xfffffc5c, 0x8, 0x7, 0x1, 0x9, 0xda, 0x8a, 0xffff0000, 0x2, 0xd, 0x1, 0x8, 0x8, 0x0, 0x40, 0x7, 0x5, 0x9, 0x4, 0x10001, 0x8, 0x7ff, 0x6, 0x9, 0x3, 0xfffffffc, 0x10, 0x0, 0x1, 0x0, 0x9, 0x580f, 0x9, 0x2, 0x7, 0x4, 0x1, 0x1, 0xfffffffc, 0x6, 0x1, 0x0, 0x6, 0x80, 0x0, 0x62636670, 0xffffbdde, 0x8, 0x7, 0x9, 0xef, 0x1, 0x1, 0x0, 0x4, 0x14, 0x971e, 0xe34, 0xff, 0xfff, 0xe, 0xd2d3, 0x2, 0x3ff, 0x8, 0x42, 0x6, 0x5, 0xfffffffd, 0x0, 0x217c, 0xa, 0x1, 0x36a, 0x3, 0x20000, 0xe5f2, 0x7ff, 0x9, 0x7ff, 0x1c, 0x7fffffff, 0x0, 0x1c6, 0x80, 0x4, 0x3, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0xf, 0xfffffffb, 0x3, 0xfffffff8, 0x5, 0xf, 0x400, 0x81, 0x0, 0x8, 0x7f, 0xef7, 0x1, 0x2, 0x9, 0x2, 0x7, 0xe2, 0x7, 0x8, 0x7, 0x8000, 0x6, 0x2, 0x80, 0x536, 0x26, 0x5, 0xc9, 0xffffffff, 0xa9, 0x6c70, 0x8000, 0x400, 0x40, 0xe92, 0x6, 0xffff, 0x4, 0x3, 0x5, 0xe8, 0x1, 0xfff, 0xd814, 0xa1, 0xff, 0x0, 0x4, 0x3, 0x8, 0x5, 0x5, 0x0, 0xe, 0x0, 0x8001, 0x80, 0x0, 0x8, 0x10000, 0x3, 0x7fffffff, 0x5, 0x9, 0xe, 0x8001, 0x0, 0xff, 0x80, 0x1, 0x5, 0x2, 0x3, 0x7fff, 0x6, 0x4, 0x2, 0xd, 0x0, 0x4, 0xfff, 0x0, 0xf, 0xb21, 0x6, 0x0, 0x49, 0x8679, 0x80000000, 0x7fc000, 0x80000001, 0x1, 0x4, 0x3, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0xe0a, 0x8, 0x8fdb, 0x5, 0x6, 0x7, 0x10, 0xa849, 0xfffffffb, 0x5, 0x4, 0x8, 0xb4, 0x7, 0x2, 0x7, 0x10, 0x2b9, 0x8001, 0x8001, 0x800, 0x3, 0x6, 0x5c, 0x0, 0xd, 0xffffffff, 0x8, 0x101, 0x200, 0x2, 0x5, 0xfffffff3, 0xb, 0x3, 0x1fa, 0x3, 0x0, 0x1, 0x101, 0x3, 0x400, 0x3, 0x7, 0x3c0, 0x9, 0xc, 0x8, 0xb, 0x7, 0x8001, 0x3, 0xb96, 0x9, 0x7f, 0x8, 0x6, 0x6, 0x5, 0x4, 0x1, 0xffffffff, 0x8001, 0x0, 0x200, 0x5, 0xfff, 0x7, 0x6f, 0x5, 0xfffff28b, 0xfffffffe, 0x0, 0x10000, 0x8, 0xa70, 0x5, 0xfffffffe, 0xa, 0x5, 0x200, 0x2, 0xe, 0x4be, 0x8, 0x7f, 0x800, 0x0, 0x1cf2, 0x401, 0x7fffffff, 0x4, 0x6ca, 0x7, 0xdb7434ea, 0x5, 0x9, 0xf, 0x9, 0x7fff, 0x4, 0x4fb8, 0x3, 0x80000001, 0x8001, 0x9, 0x9, 0x10000, 0x7, 0x9, 0x0, 0x7, 0x10000, 0x80, 0x5, 0x7, 0x5, 0x200, 0x6, 0xffff, 0x5, 0x33084b09, 0x5, 0xa1, 0x9, 0x2, 0x25, 0x10001, 0x3ff, 0x101, 0x2, 0xff, 0x2, 0x7, 0xfff, 0x37, 0x6, 0x7, 0x2, 0x6, 0x6d, 0x0, 0x1ff, 0xba, 0xfe000000, 0x3, 0x5, 0x6, 0xa, 0x8, 0x8000, 0x4, 0x3, 0xff, 0x3, 0x3ff, 0x27dd8f84, 0xfd60, 0x9, 0xc403, 0x6, 0x80, 0xb8, 0xb6, 0x2, 0xb7, 0x1ff, 0x6, 0x3, 0x1, 0x4, 0x3471, 0xffffffff, 0x8, 0x4, 0xfffffffe, 0x5, 0xfffff7b2, 0x9e7, 0xffff, 0x200, 0x5, 0xd, 0x1000, 0x20, 0x3, 0x6, 0xc, 0x4ee, 0x9, 0x7, 0x7, 0x5, 0x7, 0x7b, 0x101, 0x1, 0x1, 0x10001, 0x7, 0xff, 0x2, 0x1000, 0x88b, 0x3, 0x8001, 0x7, 0x3ff, 0x6, 0x5, 0xeb6c, 0x5, 0x70ef5317, 0x3, 0x3ebf853e, 0xfffffffe, 0x854, 0x7, 0xfffffff4, 0x0, 0xcd9, 0xffffffff, 0x4, 0x7, 0x6, 0x6, 0xf, 0x9, 0x3, 0x6, 0x9, 0x10001, 0x1, 0x6, 0x5, 0xc, 0x6, 0xf3, 0x2, 0x9, 0x7, 0x8, 0xd5, 0x0, 0x2, 0xfffffff7, 0x6, 0x3, 0xeb2, 0xfffffffd, 0x10000, 0x0, 0x80000001, 0x2, 0xfffffff9, 0x5, 0x2, 0x3, 0x2, 0x1, 0x0, 0x3, 0x3, 0x2, 0x8, 0x80000000, 0x2, 0x5, 0x4, 0x9, 0x6, 0x24b7, 0x200, 0x69, 0xfffffff3, 0x6, 0xe, 0x6, 0x401, 0x800, 0x2b4, 0x7fff, 0x7, 0x8001, 0x5, 0x4b6760f7, 0x1, 0x4, 0x4, 0x80000, 0x7, 0x400, 0xf, 0x7fff, 0x3, 0x2, 0x2, 0x78, 0x4b, 0x81, 0x2, 0x1, 0x3, 0xffffdb9e, 0xb, 0x1b, 0x0, 0x1, 0x1, 0x2, 0xb, 0x75, 0x1000, 0x9, 0xd, 0x5, 0x8, 0x0, 0xfffffffe, 0x400, 0x80, 0x1000, 0xef, 0x3, 0x1, 0x3, 0x6, 0x100, 0xcf, 0x401, 0x7fff, 0x2, 0x5, 0x3, 0x6, 0x3, 0x7, 0xd, 0xd, 0x0, 0xd, 0x3, 0x2, 0x9, 0x3, 0x10000, 0x4195, 0xd31, 0x557d, 0x0, 0x2, 0x4, 0xa78e, 0x9799, 0x1, 0xbc9, 0x4, 0x7f, 0xffffffff, 0xef, 0x0, 0xfff, 0x10001, 0xfffff001, 0x6, 0x2, 0x4, 0x7, 0x6, 0x519, 0x8, 0x6, 0x5, 0x9, 0x5cfa, 0xd11, 0xc0e4, 0x5, 0x1, 0x0, 0x8001, 0x9, 0x6, 0x10000, 0x0, 0x9, 0x8, 0x2, 0x7fffffff, 0x1, 0x1, 0x200, 0x5, 0x7, 0x5, 0x5c, 0x5, 0x6, 0x2, 0x6, 0x6e62, 0xc29, 0x4, 0x0, 0x9, 0x513, 0x8, 0x4, 0x40, 0x9d, 0x2, 0x7, 0x80000001, 0xfff, 0x801, 0xfffff939, 0x3, 0x9, 0x4, 0x7286, 0x7, 0x5, 0x8000, 0x1, 0x9, 0x81, 0xffffffff, 0x6, 0x8000, 0x8, 0x4, 0x3, 0x3, 0xa, 0x7, 0xa92, 0x40, 0x5, 0x5, 0xc000, 0x1, 0x4, 0x81, 0xc7, 0xfe, 0xb, 0xf4f4, 0x9]})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000014c0)={{0x1, 0x1, 0x18, <r6=>r1, {0x8}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001500)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000001580)=r7)
r8 = dup3(r4, r3, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r4)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x20, r9, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x54}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20040004)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001700), r4)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000001780)={0xa3, 0x0, &(0x7f0000001740)})
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000001800)=""/196)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001900)={0x1, 0x2, 0x208, 0x4516, 0x6, 0x4, 0x81, 0x6, <r10=>0x0}, &(0x7f0000001940)=0x20)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001980)={r10, 0x1000, "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"}, &(0x7f00000029c0)=0x1008)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000002a40), r8)
sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x70, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_FAMILY={0x5}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0xb}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x48840)
recvmmsg(r6, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/155, 0x9b}, {&(0x7f0000002c80)=""/8, 0x8}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/8, 0x8}, {&(0x7f0000003d00)=""/209, 0xd1}, {&(0x7f0000003e00)=""/212, 0xd4}], 0x7, &(0x7f0000003f80)=""/203, 0xcb}, 0x80000000}, {{&(0x7f0000004080)=@ax25={{0x3, @rose}, [@netrom, @rose, @null, @null, @remote, @null, @default, @bcast]}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/31, 0x1f}, {&(0x7f0000005140)=""/161, 0xa1}, {&(0x7f0000005200)=""/82, 0x52}, {&(0x7f0000005280)=""/149, 0x95}, {&(0x7f0000005340)=""/109, 0x6d}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/148, 0x94}, {&(0x7f0000006480)=""/230, 0xe6}, {&(0x7f0000006580)=""/61, 0x3d}], 0xa, &(0x7f0000006680)=""/15, 0xf}, 0x3}], 0x2, 0x2013, &(0x7f0000006740)={0x0, 0x989680})

3m56.252248556s ago: executing program 4 (id=862):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r3, &(0x7f0000000080)=""/186, 0xba)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
getpid()
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="09ff00"})
r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x6000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000340)={0x1, 0x2, 0x1})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000a00fc003a2a5e247b00000008061b800106dc"], 0x624}], 0x1}, 0x20004000)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$printer(r9, 0x0, 0x0)
connect(r8, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80)

3m41.20252628s ago: executing program 33 (id=862):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r3, &(0x7f0000000080)=""/186, 0xba)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
getpid()
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="09ff00"})
r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x6000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000340)={0x1, 0x2, 0x1})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000a00fc003a2a5e247b00000008061b800106dc"], 0x624}], 0x1}, 0x20004000)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$printer(r9, 0x0, 0x0)
connect(r8, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80)

2m25.119982527s ago: executing program 0 (id=1646):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe000078009106000000000000004a073e"], 0xfe33) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x183343, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x2000003})
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0x0, &(0x7f0000000240))

2m25.061837649s ago: executing program 0 (id=1647):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000001300)={0x6, 0xe})
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xd)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x4b}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000)

2m24.652837851s ago: executing program 0 (id=1648):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0)

2m24.607862291s ago: executing program 0 (id=1650):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/242, 0xf2}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/137, 0x89}, {&(0x7f0000000380)=""/20, 0x14}], 0x6, 0x1, 0x3)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2102, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/4\x00')
preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000440))
mmap(&(0x7f000099c000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r1, 0x1364000)
r3 = dup(r1)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x22b})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_open_dev$I2C(&(0x7f0000001000), 0x0, 0x0)
ioctl$I2C_TENBIT(r8, 0x704, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000022000040"])
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000)

2m23.594515408s ago: executing program 0 (id=1657):
r0 = syz_clone(0x100080, &(0x7f0000000240)="d6625755983401bbb8fb71fc4286277e7f14775eeacfb9536826a64295bda30630f1b8f18650aa3958a704e56d3de0d8aeafbd3a2ca08ecf803037ce2f680a73f459645e595894b39a2ae06bb1babdfcdf6d5b569952ed8c4fed9b56059ca5c9f1f6ee637184f73ea4de56b66b5a2047550a9b64fdb33c7d787bef6b21cd93b55e75d86d", 0x84, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="6f6ce1d2b2e7cbbe67c236dd5e09e9413c1b77cce5976f76936f3870aa37167eca4c559cb0113c7c9f61321a31b8f8a32f44ce0a4cc8c4ea531d2b39460bd46ed1d185b4b74019b88e6d95203c3c2bca305ef899c9af949528828c4932f32123215ec35387ca1e038275882d52b667c651a134c8375a96bc8450880354fbac6511e534b8d3dbea1552cf4b3fbdde03f25f9f626da67cc89320af41e3171361dffc3f4f297f58893257793c6855b46e60b1972c6c8a")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={<r1=>0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000480)=0xc)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000540)={0x12000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f00000000c0)=""/116, 0x74, &(0x7f0000000140)=""/234, &(0x7f00000004c0)=[r0, r1, 0x0], 0x3, {r4}}, 0x58)
ioprio_set$uid(0x3, r2, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000005c0)={0x0, r2, r3}, 0xc)
r6 = syz_open_dev$dri(&(0x7f0000000600), 0xd4, 0x242000)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000006c0)={0x8, 0x0, &(0x7f0000000680)=[0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000700)={&(0x7f0000000640)=[0x0, 0x0], 0x2, r7})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000800), r5)
getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000840)={@multicast1, @remote, <r11=>0x0}, &(0x7f0000000880)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl1\x00', <r12=>r8, 0x2f, 0x8, 0x5, 0x8, 0x0, @empty, @remote, 0x7, 0x10, 0x8, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000980)={'wg0\x00', <r13=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f00000009c0)={'sit0\x00', <r14=>r8, 0x7840, 0x8000, 0x4, 0xd2, {{0x35, 0x4, 0x0, 0x1, 0xd4, 0x66, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x11, "162fca4298c079cd37ebdb2a56770b"}, @timestamp_prespec={0x44, 0xc, 0x2e, 0x3, 0x0, [{@loopback, 0xebd3}]}, @cipso={0x86, 0x66, 0x1, [{0x2, 0x10, "053699d3a317b41280c8827be730"}, {0x6, 0x11, "18cda60d47fe0901f6e674b2a1c643"}, {0x7, 0x2}, {0x1, 0x9, "dcfba4138dc153"}, {0x6, 0xc, "dd2a8fcd018a9310fd2e"}, {0x6, 0x3, "f9"}, {0x0, 0x11, "b0b83b97d092d27ab29a0c6e483aad"}, {0x1, 0xc, "ad35e980cd91102a2f3f"}, {0x6, 0x8, "8f3ce6a9d1d5"}]}, @lsrr={0x83, 0x1f, 0xf, [@local, @multicast2, @local, @multicast2, @multicast1, @multicast2, @loopback]}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xd7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x2, [0x4]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000b00)={'team0\x00', <r15=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f00000011c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000000b80)={0x5d0, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r12}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1c000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9a81}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r15}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x959}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r16}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040000)
r17 = dup3(r5, r4, 0x80000)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, <r18=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000001380)={0x400, 0x1, &(0x7f0000001280)=[r18], &(0x7f00000012c0)=[0x8001, 0x0, 0xe9, 0x2, 0x7f, 0x81, 0xffffff7f, 0xff, 0x400], &(0x7f0000001300)=[0x0], &(0x7f0000001340)=[0x8000, 0x5, 0x28, 0x5], 0x0, 0x800})
ioctl$sock_netdev_private(r17, 0x89ff, &(0x7f00000013c0)="b92ad85de5d662c8057f6ea8b1d7bfb5cee098e42d191c466bad98addeafa314c6a2cd6d41e7b667ca27182585dad4a1f01a295a2128cf86ad")
clock_nanosleep(0x1, 0x0, &(0x7f0000001400), &(0x7f0000001440))
ioctl$IOMMU_VFIO_SET_IOMMU(r17, 0x3b66, 0x1)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001480)='reno\x00', 0x5)
setsockopt$ax25_int(r17, 0x101, 0x6, &(0x7f00000014c0)=0x2, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r17, 0x8933, &(0x7f0000001500)={'wg2\x00'})
close(r6)

2m23.489421294s ago: executing program 0 (id=1659):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c40)={0x2, 0x4, 0x3, 0x2, 0xe, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xf, @private1={0xfc, 0x1, '\x00', 0x2}, 0x2}}, @sadb_address={0x5, 0x6, 0x9d, 0x60, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x2d, 0x1, 0x40000000}]}, 0x70}}, 0x8040) (async)
sendmsg$key(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c40)={0x2, 0x4, 0x3, 0x2, 0xe, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xf, @private1={0xfc, 0x1, '\x00', 0x2}, 0x2}}, @sadb_address={0x5, 0x6, 0x9d, 0x60, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x2d, 0x1, 0x40000000}]}, 0x70}}, 0x8040)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)
socket$kcm(0x29, 0x5, 0x0)

2m8.277321353s ago: executing program 34 (id=1659):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c40)={0x2, 0x4, 0x3, 0x2, 0xe, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xf, @private1={0xfc, 0x1, '\x00', 0x2}, 0x2}}, @sadb_address={0x5, 0x6, 0x9d, 0x60, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x2d, 0x1, 0x40000000}]}, 0x70}}, 0x8040) (async)
sendmsg$key(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c40)={0x2, 0x4, 0x3, 0x2, 0xe, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xf, @private1={0xfc, 0x1, '\x00', 0x2}, 0x2}}, @sadb_address={0x5, 0x6, 0x9d, 0x60, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x2d, 0x1, 0x40000000}]}, 0x70}}, 0x8040)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)
socket$kcm(0x29, 0x5, 0x0)

1m54.684765499s ago: executing program 3 (id=1901):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './cgroup\x00'})
write$UHID_INPUT(r0, &(0x7f0000000100)={0x8, {"c32f89abf08b1e6f2f2ea0295087f59c1bef6e3e486898f48235aae7346d317a83bbd003c23d2c8adff45af297b5eb1252672c9cbcef34dbc5b175f51a7815fc2a2fb58d94546826ead51c07137f03ae35543c85c1a3fa924c217c6fb19e681e0b2ebf9c4b53ce187c852c2dadf4a469473d08205839744a94ef2000c7e0f545fadece3dac4d281fac3a01341ddfb1db214a45833241eb8c599b8e7085296aa1cd417caac6ce460361d9c3c6e159aed21eb5697cc697c2f2b084977ff422f5fc8cccbd3d328de44d5067fa49b259e7db0bf2891707c61d3f58e688a66e65cf14295348d2b729c5094dd48954ddfae5bcf8fa91c2e7aed265acb5f82e357525c3fe03be33a97df6cc4cb152601c7b681e65896b89e5088801af4f266014a5dbc9946d6b56d741f63eb46c6ad95d90016467f541603db7b4cced9a8e5da5b9acecc33e6266efbf68b0f0e9e58dea4753b2b3f8b5764f510cb73a72b98b26103366246f45273bc756b4eb6c42dadaedef988b828725337c2625c5d932dab772f1040ceb72b211f217f6adecff6b9c2abdee7ddac9c99d8f712975c195753cb7b9d50fa29f564bccd42dcbc601c23a99008f42bcf788456c049e5e366dbd7313cc9a8595ad38acab132aee60d51019ee24c1f27ced2fbdcff58b950276fed914ff53f79eff1732a7f05a20c6635b412cdcc5677f05235e37c1f865b90372f7558df6649c327c402fb65799b9de2ba743042e3d1d5e1f48ab0c829ac32f5f4e8c50eea1fc7c882d6906ab142cea4cfd9a783ccbbf72286740c0cf58f3cb7fb187a60d3ab01e776d866cec619f30505c1b06a3ff82d912be9b7cefbed02192df6b3316e23da3a5026ec13ce5db9c0a121cad4e5593ad8d90d4bbd8e9955476480c6773535c864962600606191fccc98fa285436b39872ea246cddca722e11ae4b227e71d33675d1d05b55cff92c8a8f43f65ef294b2760fa455e214f4836b260a2b70bbe015843dc138581238b631bb1177d13d78db6067220f5a8190f609cf10f331e9fc0ba997de6eea1c6963694dd8af0209d3d2131581e344af5af36e885acceaa07e42acbf2a53b22d2287fe4cba628ababce18f813022267db3139d24d9c4091fafa5a90ad2df95cea940de2b936675ce02a14834f4aa95e929cd359b1ccaea290149229522c490ea4e148a97997449f07cb72052540ec18a15ace65c581de04a7beb68390b568c8a111303e0e478998a04dc689ae8b6f708b0c3bb0afeee541bbc1ea85cf86137044546fb2064a70ce6895bcc301172df4a1a87d72833c8f4981ce9f77ee0af6bec68db0cc623765dae0d3a9b7af2abdf0cfb81defb927a68a5e6e73622850f94a8e9123109f503b438e45268cc003394a5b56651a8ea21b89fe4940c8f88916a395197bfdc6affdb1f869895828ef0f64625c0b734b9760ffc23c936dfe2d4b0011f7717181853c1066fe6d6f37f743995940e5f3f89841ad415907c5a4272d11c7b14152c1725e320de82a185fa2b98e5f6193e6f6b8895ffbe042472b40a5c924f5f815858e9116229538f0601425aec7a75440fe068ea93c3a47b335dc9786d2808575a8caaf1b2206ddff2e9c38038cd1707fca5f352a951cd5f4f3b437839d7659394b282ab1012eea51c590566b6410d32139ad57aa7e860d2a4a6d038e93d1f8d98d89df8ecc5be05e136afab58ee8208f37954e47178479ac257166a2cb6bc3300b6776fc1d0cfc0337e429e3e0e2076b1d07c38f9f148f89ecc60a536a2720f4bd13e686c38677e30fc666bec676345fb0ed961be460c7a75dde4b0ef62b0400b3b186894bea9d8db25d4e9a4847a9d1133991fa11be424983bc796724bc5b970a75ab183bf75f79e599d04720284d3362f490fef2c881a8fe4e437f2495f57071e7d9269c1d129b655f8a9b795bde7dc1533898fa4c602b969b36f7d6478c20e727b2397754335bb6584373b70b52d312e85baa167c968a2c28f9229899b329b632bc1655a9a0253f9c13c91f71cf0a05facabbc693573c7e0f9efa4cadb94cb87e4d5f76f18c326a3786a5e86137be5a6c8e874c82de70147b329bc6bf262ed7c12def95de0d273894e1f2af071c721ef1a832be0792cc8a4a546e3750940eb58dd52c255cd890a019bbabfbe79aa3304c5d685462fd66ed05842d4b7642969716c877ef8e1777d11bcf1bc7131abe28593be5f8bf4dc6deaca7dd2b6b5849224f7c1f40384a024cbd07d4bd8ad7ea3a26feaa617cbf5803fc3d65619c2614e260a689677c20aa970db2a6dc30094008d1e69c63308a10c8b05f9c92ebcc5f03fe649e9767bc9822d9359037bc3a84b828d5f4937f1ad783e3690b24f95e1345701b69924194f62ce5b658832b80aae23f91b7f798f0cb65e56637bf178655999610ec50fe84b850a3be66a2a1eeb85346278999bda5c20f02bd58256ed6df890a87b08d29810d0c4c7fbf6d373ff08e0debc30b6bd300dc6f177f680840679a49a3aa60a858585ce0b6b97f0a71cebc0d3854b2328622fda4a84e7cf4c0272d10db29c335c010d0e8bb13156b057a2be65edffb683a3ce838bd9a878a4426259e5559f2f5c384aa088f88bf33d77550e5de1c33cfc237c9571071fcdd7e95fd20acc130d95fce1e6aba03dc95fbd701797c8be92f237e89e21ba9d2e030bcf28e5b328601be3d6d174ba8e43cbde09894f8765cd9b140559c415a4c935345fa644110ecf3f9ff70542b8a34722cc008d66e0d3214e992457065daee799cf291bc662ed50933552af080df939e9548a9d12e0b38b1291b54879b95ad2ec1d5e006809fdecc195b1a527674647841e9c8e5b49e2c24b4ae35066f17592061f5234a24416cab90139cef3937f1381345616404693eb7e5d767fadb036639572a4c0a6cae463f64f159844a90b0b3b31b93bb9828aca2a5d58c038481d23b9add3b59d5f3be089072d1ca2b6da2a3fc6217ced0136084c14ecfff76c6d854428d03251103780c60635184020b589681afe25b8801242e3f4dd4a297057a1f2c93edc9f06b1901a6f59958fee3bded9f58152e7453f1d3c79de915f577143c85df2f15b439aea7dcfefd5c70fee4247e8d6bf80ea38cab4bfcfbaeb98c265a860f21af5fd68a52bf809ff817410bf7b9a4c37858c95e5f19fc068a8c12ca5ffd98460d6fc673f4494cf58917d351e8b379feb5fa141ef8a39c3f845e9b6dc28c8759e44f47dfc11be093ec5ef243d9cb4334b4011bd95d76f5f80327f84f788dacdc72505568c36f367a25617da454f1aa717493066beb0174f416dc70ff86933c251b6b25522eb0b2210bc2f1b9112c28ea271ce05f92086ce2e9499476e20b97abbb7830bcb9dc1d2f85b8f6d14923fe9a3b7ac435ff2e5e07f9d37f0018bdaec0bd844b36e53e103590b5ac717f9957794ca9ebd4543e8e2e57f3856d0113c5f66b876648b55872a5799db4abecb2d5c40d31e80871dfa6550dcd6cdc63b97bae18ba3f7cec7a6967b6b29622223188889d3a4905add14963bba1e9223bb3ac331eaadfcb1d9c87145133704f873f962d3f83cca025359fe836e46467a52daddd3fc5e60717f814f06a0e920d9a83955dc8f2815bc8536051f9c74c6bdfcc5c009ae3d7250cb2a1e678e2ba97e5c0367d0b7e890692dec3be16ba0eac652ad2b0f21372d285461cc66a8b41e940705c22dab9984a06dce6b890231c121a064f720e68898cefa5a55c1b213bcd89286dfbb024b7e8a29043180a881f2f2874700807e9c0039af088e2528a8333b333516958e530eedcbacb14ba1288e80b5dd4b04f3f68f364c70f5859c495286a632b93c77fe7ea0a0327721c407509ed79b5fbd610a9f469d4302b571926025d139cd73619df6ebc3a4f0cffbb2cb54eb61f517808544aaba36aa1619e5ed6c194c9daa8729cb393ba869c09c848add4676fabe27832747d2332fb5934c889e53398a6ece252925214f4c2aaf735ec93a9a545bd9e7cd41a49f358683ad24425848fd4596442363e09b92c728bad19947d0744edd1f27e50dfd34dd5e90cf660de2987ab06316a762285a02505f80475c7ca407121995965e76fd2178366f6dd5d3b04742a41e602e59da8831470b35a3505e04c058d7a57d80b6979882c7321d2e6e49c0d55ab050ee59fbfc2890ac6f0596dd57e385f9e8fdbd7d7abcb99143447fbcd309efafcd1a9f9a2ee3a7834010fe60cf73ba1c72732ac2b1211bf2dec13f0759a46a923c7dc29fed71a3fc00bd35a5b8250c4adcd70dfc1ac2dab4fa6306bfb64dda8893ad1c295e60c60ea878b34610ebb510b0660ff3abe73345faa2b7cdcca81a353237840c9c5112c4261e1b0612c5f3f0dbc7baa74401a581e1b31427f06a42aa563acaffa515d0df7d2b8ae7f38305fd3c61d0a60e3da35592bab46c7b97117b3efc709313a51b2240dbc694d910d48628b12f0afb71392870b259232f37c62adc638699963ef46c2395ed6e74b4f4e99a4cb168b3dab557491b3105ed50b1f581b9621248834929ef383d8f80ee0daf221d54f2a00acc97a231233276ec93e3b84486cfbf3bee5a064a6566456bc8e9fa22ec41addbbc4a1a1fcbf0bc3dfdd320a403c344a4139349df51ada369ee09aaba92eb4820acd7212752c408c702d7f78e12af24a94380923577fab6457426f99922b862b0f76c4151a52b349f9c55532787c3fb0c761ad15a5028d86bfea78834fd05aefc86f3fdf3817ca419a1c795dc87b65a1f6680e3d6daa4bd35150cd0f050e4e59281fa2c1ac60201bebc31a5a6327d3a890af9cc8d68dbffa2eee3ae6eb213efac336e5bdb4a94c9f24605d564ebde8e5a4a73c2d50e231aec797aba11fa1a36ba814cb510eb73b2a828e5852d03ea1385740d37bd5a1e250535cfe2b696c0b317f9471c77a2fde297957fc77c2fa552304219144638454c0c82f25ab575fef61e99b43dc681b80a63dbf743d4ab1d98b9116faa78149c4983d37b63d74bac561bd620c1a8291282fe1a4ee7f4a69f13d8cd1becc7f4bab78eb0fbc5b50b8d5bde3a96c501f24af4a5e541419923419c1a44477d3fc274aefebc0ed87dfa38f506ff54dc1061b9dd430e2b154ad4da7742e887b1339949a1b0547e9e93d8a27924d450f3ea9690e287cda8a9ed19bf55ab912a62df50e6fdc6df7c97a599de546dcf059c744b357409e8112b327b5e64f260697c76e16d5abdf311cd801c3fe023dc3c36d6fd0e8d6d86cfb575119f30079a0e784008def6b8a5654755c31217c6db06b7ec29d5b5468074bc6349aa75ce3a3a22d30c7c1ec72dce20f6872b269b68c2db7d79677d12275f55e14f0c3dea8abd5a1b35067d0f5d6633f53d6ef84e005a7adb8e01ed0b896534c5f9942f9f35c5690f27aa0090ad4c5c4cf75699d0707f4d1ffa7b974b6279405c74bac94a2840d13a7847b6bd8fef642deac12d58646e5749308ea29cd1dcb2ec414eed18aa39243dce0523bb4ca8d5b8361cfb242a19af03f79210a4885c0cb132fd4bccb566966bd54cd666aec731dca58c604d07e28c07fa95768a1c32942f7994dada88a05ffcad23a172a1605618481a5aebe66e5d0df385770c8588fe5536664f46b4b013018bba33a26a67c01669f731b1f1b6193e420a9db2fa4b0b89d2fd9b22b0a78420b81988942a3ed37e773956a92c96057d77c67e54ccf3330cd50575610f2b97e9909453e68ce1715ffb85c6bf374fde458ee7be95e4d28347ef50e46c4b4817d4e9a31722cb6c1bcb96acac18e6423d0bfd1a41960", 0x1000}}, 0x1006)

1m54.48571222s ago: executing program 3 (id=1903):
r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001000)={0x10, 0x5, {0x9, @struct={0x5, 0x8}, 0x0, 0x719, 0x8001, 0x2, 0xfff, 0x3, 0xce, @struct={0x829, 0x10}, 0x3, 0x3, [0x1, 0x9, 0x10000, 0x8000, 0x3, 0x8]}, {0x81, @struct={0x68, 0x3}, 0x0, 0x4, 0x1, 0x2, 0x2, 0x401, 0x30, @usage=0x7, 0x0, 0x1, [0x4, 0x1f7, 0x1, 0x0, 0xfffffffffffffff7, 0x2]}, {0x18, @usage=0x2, 0x0, 0x8000, 0x5, 0x0, 0x0, 0x6000, 0x448, @usage=0x2, 0x7, 0x8000, [0x10, 0x2, 0x44e, 0x6, 0x0, 0x1]}, {0x80, 0xfc2, 0x1}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x6d, 0x0, &(0x7f0000001040))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r3)
r4 = getgid()
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r6=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xea, 0x0, 0x1, [@typed={0xd, 0xbb, 0x0, 0x0, @binary="cee05c45eb13584178"}]}]}]}, 0x3c}], 0x1}, 0xcc000)
getgroups(0x2, &(0x7f0000000080)=[<r7=>0xee00, 0xffffffffffffffff])
r8 = accept4$x25(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x0)
sendmsg$netlink(r1, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r0, r1, r1, r8, r1]}}], 0x88, 0x40}, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0)

1m54.340650481s ago: executing program 3 (id=1904):
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0x72, 0x38, 0xa, 0x40, 0x8087, 0xa5a, 0x60b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8c, 0x0, 0xf, [{{0x9, 0x4, 0x19, 0x7, 0x0, 0x73, 0xb0, 0xe2, 0xb9}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0x0, 0x7}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x10, 0x1, 0x88, 0x40, 0x9}, 0x41, &(0x7f0000000280)={0x5, 0xf, 0x41, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x6, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x2, 0x324, 0xff}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x9, 0xf000, 0x6, [0x3f30, 0x1fe0000, 0xc000, 0xf, 0x60, 0xff3f0f]}]}, 0x6, [{0xe2, &(0x7f0000000300)=@string={0xe2, 0x3, "aa2ae30327c4079600cc39bb356b21ea6f485f7dc9b2f2e9ecfeb8717ce0b8eba7183e05006aed39ac229d01b89c45d438e777b84200e425069066442d72ac7db808dcf2da5130cd2093759c9a4440ff9a51a2ecc2cffc134f944c33f2dc81ffab306be86e3e5fb902dc307129c160e04be1b8f32196466f6b101a4f65c3e72bb524d16c9c0c9a04d2f14e293252e4cd4c4f22c91e9e40b61f2eb8f4d83ca240e7591b63d046e87fc017f7330b99775fdf45e22449d22ca03ff2c89c46e0c5044ed14a495d1f28d3a8ea8bfb123dab8e330e164bdbcbe8e7fa245e47fef11cd1"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x81a}}, {0x7f, &(0x7f0000000440)=@string={0x7f, 0x3, "d3c90aa69b9bd0044ef90b365b1fc04f22dcdd7b7b9b6f1db58b6326d8eb31c046929a2c54c3ecd4f5f5ef7ef8fd7fa4aeaab70af9b7e2a69e4137ba9ad6c4411e134ab302dca450a50887ec66006f3804033ba1731e858e43c6af408e8e7e5147a66eee81d717bbf42e478e25378422cd7102e7e97a3c2669c955006a"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x409}}]}) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) (async)
dup(r0)
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@nullb, r1, &(0x7f0000000180))

1m52.755827976s ago: executing program 3 (id=1908):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000540))
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x6, 0x102)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'erspan0\x00', @broadcast})
r3 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x6)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = getpgrp(0x0)
r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
ioctl$AUTOFS_IOC_FAIL(r7, 0x40087543, 0x200000000000)
fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6})
sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000060a0b040000000000fdffffffffff8ced000480280001800b0001006c6f6f6b75700000180008000000000000007a3000000000080002400000000d0900010073797a30000000000900020073797a320000000014000000110a00fddb98d64ce39167a47ab22b3ecd4f3ebaec854af5f0a7b588ef51267608762824854615d3075559500de70179b2d7a3549c2687a201260726dd7ba4c508a3683d45947ba67910000018c2f85ec12c14d0654a08fc2ac0d12d65cc0c9a0114df5e8a00"/227], 0x80}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0xb000, 0x0)

1m52.551600981s ago: executing program 3 (id=1910):
r0 = socket$netlink(0x10, 0x3, 0x15) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="94050000", @ANYRES16=r1, @ANYBLOB="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"], 0x594}, 0x1, 0x0, 0x0, 0x10}, 0x4004001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x7800, 0x7, 0x1, 0x65, {{0x8, 0x4, 0x3, 0x19, 0x20, 0x67, 0x0, 0x5, 0x29, 0x0, @remote, @local, {[@generic={0x83, 0x2}, @generic={0x94, 0x9, "1654ff91ec3e33"}]}}}}})
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) (async)
setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c)
mkdirat(r5, &(0x7f0000000880)='./cgroup\x00', 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={0x50, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xb, 0xff}, @value=@ver_80211n={0x0, 0x10, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x27, @val={0x8c, 0x10, {0x161, "1b711e84c5be", @short="ccb20aa5da48010f"}}}}]}, 0x50}}, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)
lstat(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setfsuid(r7)

1m51.897190411s ago: executing program 3 (id=1913):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00})

1m51.426169385s ago: executing program 35 (id=1913):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00})

1m38.875761219s ago: executing program 6 (id=1954):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2401)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000})
syncfs(r0)
r4 = syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0xc040ff0b, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000280)={{r0}, 0x0, 0x18, @inherit={0x58, &(0x7f0000001280)=ANY=[@ANYBLOB="0000000000000000020000000000000005000000000000000900000000000000200000000000000008000000000000004d05000000000000faffffffffffffffda0000000000000001000000c44f052a902e058c4bb7db18f9000000000b00000000000000592f0c1f4bb60964d72d0c9b5d4ab5c15f473c2a7150df334b1ea75d130363768aa2f17a4fb8fdbae430cb324c423261acf99f0b36e4d4de94addca8251f52a1cfec5ea5c661734999295d25c2dbc05c097f947ba22480e6d36c0389b3653b1c1732"]}, @subvolid=0x4})
quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000540)=@rnullb, 0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x0, 0x1, 0x3, 0x3}}, 0x8c200)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2401) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) (async)
syncfs(r0) (async)
syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_pidfd_open(r4, 0x0) (async)
ioctl$FS_IOC_GETVERSION(r5, 0xc040ff0b, 0x0) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000280)={{r0}, 0x0, 0x18, @inherit={0x58, &(0x7f0000001280)=ANY=[@ANYBLOB="0000000000000000020000000000000005000000000000000900000000000000200000000000000008000000000000004d05000000000000faffffffffffffffda0000000000000001000000c44f052a902e058c4bb7db18f9000000000b00000000000000592f0c1f4bb60964d72d0c9b5d4ab5c15f473c2a7150df334b1ea75d130363768aa2f17a4fb8fdbae430cb324c423261acf99f0b36e4d4de94addca8251f52a1cfec5ea5c661734999295d25c2dbc05c097f947ba22480e6d36c0389b3653b1c1732"]}, @subvolid=0x4}) (async)
quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000540)=@rnullb, 0x0, 0x0) (async)
open_by_handle_at(r5, &(0x7f0000000000)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x0, 0x1, 0x3, 0x3}}, 0x8c200) (async)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) (async)

1m38.310327214s ago: executing program 6 (id=1957):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SLAVE(r1, 0x703, 0x0)
ppoll(&(0x7f0000000700)=[{r0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9, 0x3, 0x31, 0x7, 0xc, "b21b516a79760675521d52964e421437d4e1c0"})
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
read$FUSE(r3, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10)
mmap(&(0x7f0000a49000/0x2000)=nil, 0x2000, 0x1000000, 0x22052, r2, 0x2000)

1m36.836332138s ago: executing program 6 (id=1968):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8a000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0x20, 0xb, 0x0, 0x9, 0x7, 0xff, 0x6, 0x5, 0x12, '\x00', 0x1})
syz_clone(0x800, &(0x7f0000000180)="fa344c1735b8a61f764d74840c1c6fdf77792050be5774bf22fd5ec71f4268873640a7", 0x23, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0x3}, 0x1c)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a15, 0x10010, r5, 0x7e000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r12=>0x0})
bind$can_j1939(r11, &(0x7f0000000340)={0x1d, r12, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=<r13=>0x0, &(0x7f0000000180)=0x4)
r14 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r14, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r14, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x0, 0x0})
sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r10, @ANYRES64=r2, @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="14000b0000000000000000000000000000000001080008000400000014000c00fc010000000000000000000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x4a000}, 0x20000844)

1m35.784738709s ago: executing program 6 (id=1971):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2)
umount2(&(0x7f0000000040)='./file0\x00', 0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r0 = userfaultfd(0x1)
read(r0, &(0x7f0000000280)=""/107, 0x6b)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000893000/0x1000)=nil, 0x400000, 0x2, 0x2})
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)

1m35.661680165s ago: executing program 6 (id=1972):
creat(&(0x7f0000000140)='./file0\x00', 0x71)
chdir(&(0x7f0000000480)='./cgroup\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x2308003, 0x0)

1m35.389110082s ago: executing program 6 (id=1973):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4)
r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f00000000c0)=0x7, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x36, @mcast1, 0x6}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x2}}, 0x2e)
preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000340)=""/101, 0x65}], 0x1, 0x7fffffff, 0x95)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5c, 0x200001)
sendmsg$can_bcm(r8, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()

1m34.820836953s ago: executing program 36 (id=1973):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4)
r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0xcf, &(0x7f00000000c0)=0x7, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x36, @mcast1, 0x6}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x2}}, 0x2e)
preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000340)=""/101, 0x65}], 0x1, 0x7fffffff, 0x95)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r8 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5c, 0x200001)
sendmsg$can_bcm(r8, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()

3.383501222s ago: executing program 1 (id=2671):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, &(0x7f0000000000))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8d)
close(r1) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r2, 0x5) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c009d98c98c08cb3120c5fa320d3a96d114228f679e104f498eb6c6fa115fbbb74c930d48722dddd10b4d34715d7d47673d555ad2bc05cc681b044c86f920ed38a99c68d50b3d12a15a1d32655409d5dd1d87e9a62a3697b345031f6b5b76b0fd762aade4d4816278c12606fad1726419e0288a4a75b2145a90abba87bd32c2383a15485f97339eec562e1041ca41289c988888c23c8c56c89cf33d82727d0ae08eacb4ba3afacb9ec567269b354bbc39381513cce52a6a099d7cf9cb6d5900"/205])
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$char_usb(r7, &(0x7f00000000c0)=""/22, 0x16) (async)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[])
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

3.075764631s ago: executing program 1 (id=2672):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)

2.15259566s ago: executing program 7 (id=2683):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth0_to_team\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
pread64(r2, 0x0, 0x0, 0x9)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0x1000, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
pread64(r3, &(0x7f0000000180)=""/81, 0x51, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189", @ANYRES16], 0xfce)
r4 = gettid()
tkill(r4, 0xb)
fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x1, r4})
r5 = open$dir(&(0x7f0000000100)='./cgroup\x00', 0x48000, 0x0)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000100)={[], 0x1f}, 0x0, 0x0)
execveat$binfmt(r5, r6, &(0x7f00000004c0)={[&(0x7f0000000140)='syzkaller1\x00', &(0x7f0000000240)='/dev/net/tun\x00', &(0x7f0000000280)='syzkaller1\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='/dev/net/tun\x00', &(0x7f0000000340)='/dev/net/tun\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='/dev/video#\x00', &(0x7f0000000440)='/dev/video#\x00', &(0x7f0000000480)='syzkaller1\x00']}, &(0x7f00000005c0)={[&(0x7f0000000540)='/dev/video#\x00', &(0x7f0000000580)='syzkaller1\x00']}, 0x1000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0)

1.806950758s ago: executing program 5 (id=2687):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10000) (async)
pipe2(&(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x80080) (async)
r3 = syz_open_dev$video4linux(&(0x7f0000000200), 0x0, 0x642040)
poll(&(0x7f0000000040)=[{r3}, {r2, 0x4110}], 0x2, 0x8001) (async, rerun: 64)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000200ffffff840000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe80"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r8=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000040)={r8, 0x1, 0x10, 0xfffffffffffffff8, 0x8}, &(0x7f0000000080)=0x18) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e23, @local}}, 0x76, 0x4, 0x81, 0x81, 0x0, 0x7}, &(0x7f0000000000)=0x9c) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x84) (async)
capset(&(0x7f0000000080)={0x20071026}, 0x0)

1.680198819s ago: executing program 8 (id=2688):
utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1)
write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000000300)='l', 0x1}], 0x3}], 0x1, 0x0)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0)
utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) (async)
creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) (async)
setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) (async)
write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async)
read$FUSE(r0, &(0x7f0000009080)={0x2020}, 0x2020) (async)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async)
accept4(r3, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000000300)='l', 0x1}], 0x3}], 0x1, 0x0) (async)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) (async)

1.466313442s ago: executing program 1 (id=2689):
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) (async)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1303, 0x0)

1.372719224s ago: executing program 8 (id=2690):
r0 = openat$vcsu(0xffffff9c, &(0x7f0000001700), 0x0, 0x0)
lseek(r0, 0x7b, 0x2)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x4044004)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x5, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34f0a87871305eb2}, 0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./cgroup/file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0x911c}, {r0, 0x1}, {r5, 0x8}], 0x3, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0x4]}, 0x8)

1.326438169s ago: executing program 5 (id=2691):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
getrandom(&(0x7f0000000000)=""/54, 0x36, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="03c8000029612c83ca021336796ec7e163d1fc8fda443ea89f80f1d2c4e7a733d2b9758d96c98f058fa11bf9e227a54959eca907e122d9c200b28df926209e723332e42f8e9cba02df583a01c1a065cb3b689b407fa8117671969e59d6ef8544ab6aa30894932ea60bc83c1bf219633e917df7694b181a616d72d46d0323a2399d9e024e80e9b4ddbc9867073818b35f058f550ddf72b6ecd0388fdc85a594c1f4b3fe778d2cf7603732b430acc7d6807cdb7957bb5d4b771a13dc3132385ee389469b1826457d8846e5f2e75bb8c9bfa090a3ea2d282a39774a6f011995e10cac308ff288f2258617ff45cc8dd243716e94c3282475f8db0cb6c02cdc38716666b949abad2df7c763e7deab5be4da7f99e3e62cecaad68f3d89df0a05a300aabe659f38c4758655542abfb03ea035c719f18f73beddcd50a48ead06cd0ffb2f67757f7f8db72f9eb63887eeff9bcedfa5593172f1e09fdaa40a64f4bf9666b7c3b846f63185ae99e4ade788a2f948b78000ff359e032c87bc4b69893859e69e6dcfe9dd95695b42ccad8a9a2e5af01b7592e732fd741c44d68b75335477f8988ca98a630de1b43db654b02566befcd74290af02c5e1160aa9e89f4805929395b6ef87ec28a7432152cb7613d4c89ffd7cc537db3c3bb7a59f70b5973c5456d265b1fb149c9aa6bd2b3bc45fdd9fa11c1c80d7c2c4aa377bc59397a04b31b2dde6f920b66dca2f08c6a1e272d645bf2fb2a9ac5fd21872370aad53f9e3b58289bf73be2eb133266ebb9b08bccca1ce9564d063bd4f91d888e607bced4afe4c23ae28eb76b2032a3db77f5abb816a42e0a07f483da13e2ec6ba3ad78f10b384af50a2145bd31d6369dcb741dd628778ca88bf47213b702e4e1ad57fac6f4a2c1b70f68d96ff2d09bb28d8454cb0dea3408b16d7cb006e2b5bf45aa7b1bacdcd234e59c275cfb876fc9c108d36d3b942330027ea090c1e5726d355ae8614eb03a741e6994495f48821d3e504926168d02412ae58d2054309b19326397a3677023d9c7f13b7c5f019733e0778edb0efb45b61babeda86538676f6ba184905726096d01af864eebc0b6fad79c4446822b12fb95f50dc14b941491ba3d315ab342849754dc2d2a450a1b91dfd94afb1ad742319635deb56dc6c9db82b9d2251aeae7bc6f4c3ebb07417ef882bd34ac08d70bbb771500febaade37f477ac36f4f2d1a899ea2bf56a990692ad99e53273eb321d9237ce0005aaada1f2bbc246816331363028f80b96c1c58278d985be4ca511450cff694b73cd7dad4ad6de125cab0d0bb60a956582300de1947c49a74c88ad737c7fccb3566e921a0600054ccd3a7006eb471d1b8fbab83bd3bbdd50805da283a8411c3747c17c446d3c6e3ceb48073ef4fc8bee3b6086d65e1ec167d5279377d083b2112be234f0ffb43bcc65a8884005ec1eccbb3b903dcba7e07e08014aa3267f1cbe4504c6b4584cc2c9d6fbb7681e414c798457da931591b7a8dd4b32a40eac29fe0e5cf64129d395d0030880d9d41477fa85fc9a98d97d8b7bc1f3cacafc9db68796e7efdd831fcc1f7b736b56b5d828bed91ab2a5d9d6ea837bb32183524649fe0eddd1113f0192c9e7f674f290506580342b19693dfb788ee850f8950693e5479c6f4aab8a35c7d0bc99c8c06ef8761c4f9e0b352da491607d9e8bae8bfe4737a3b1f6c81b6b0c595ad037fd1591da9fd1bad86ed147de68d34504f9c63268598cbd09d21153674d9bac78127935d81b64507da51db2891f1b8f899255cbc78c5d67bc7a3006cf7b35a34ae1d193f982c9a1ded1008cea0f85a8db8968eff5520000006492792ef4690ba98c89bfc3b2b3cd2699995cde2432a720ca16771351bd8d086eba4e0cee20df89ce242263eeef28d03548a1c045c0b763e19493eefd4d0c739053f1c690ee22899ae4f402a543a1579d57476334412da225b605b43d771b64cd48adeb95b8a4fc96d11418ee4eaf96ee0ed4b044775c198d55ee3bbb5ca0c9d194da1dc93c96cbbe8ac97f95bbb45fd2d75d7f875e2c558032be0762c62ed5ffadd9db85524f462598b7f4b2d0aa43a362019e7f458deeca34e392df4a7f5bcb2a938e60cb057c3422be3eff1a514081ac9711b4f2acf28512e3814ce9e2fec77bfcc5e5cb289a3f9ceb3149bc6b4950f779ad1c04e216c7609d4750f15cbce4d206d9b849f6afc6d0860b84e6a24e341f70caae510b8e51cea6f70b74301294d60899ca6d39e515c6a2664fb14363678c7bb6e215b3565951d6338fd02418cfe9846d26ed49f869cdb25faa38de4a3e38336fcf9238c5b01a01b348aa0955afe919113a30f995c066037f389452ae7a5fff55c9e0ea490a43fa13274a45f0c0c1a3a5b44cf735eea2cde9c1b8f639a24f1f56debc0761c75c4051157dab91e2f2a37dfbfaca830a585b7ce17d79d3aed5975d563974d2996be1b50290a1bb83a5f4ca8676b97f7e1a9a63c60b63e898c6a22276b0c49a83c80705db6e64fdcab77367ce4ebb6c607d89ffd1eaf4182b6c0d5c438357d6263ee422d5fab23465bc03d307ed3ce02b583b3c180ac9ca8e2cb16eacfd4ef075f839df9742ef75608787be655ac91e0887a6c15c5cf2d530465f27b45af6cb3be18d2ec4b76dbe946d5cf7eb855f9427ec4b58fd31aef6195cd493f3cfc8d26158c3de4abd9942ddb86627d8db3bc54f6fdeb36715d1a3ef0bc83e43e251c3ac377a543cc69cc069c96ced75a969b86d2ca7e8024f1a7a396182e8656cb0d8c98191ca36ce2b878c9416af440046a245bc5ee694b6d448e92a56d8bf289def3a100d98f4fce2471c5bc12d15fb360ba3ad84d004b22690ca57563941e29047d56d5655c067d4347c73e36c5e0d7b82254d479dc18fcd37d42836fac5faa33b9e1e85ebc5ffc0f3c5054793af92ca7c6edd3297f37f3e5696665b831894db06150feb1a87986594f522ba1139b17a8312333738fae9827021f7993bb1114d4f31eb09f3aa3e5aba512c0c44f2dcf535682612d7eb2f00beb50d1a78fbcd9b27f4c5339b4959ed93c81f358cddea7e8ea2e76448c4ec0cce614e821479e46a8d93f567ea2897286579f7a593ab7cc8668a4f9ec9068029034ce57f4e0328ffc30a446036b92667ea64becfa9d6ae6419a67ce13b0315196abfbf03e5427dc6f6bc4770a6909e0c8332033b9008b8be5d553d8f462c46ab5ca61cb18b0eff44414e9ec0ac1b49a3e6526dfc0a8538187ee9a256180eb7a077849bcac229666f43df659e5c1a6c21b02978a531f5907ead94f99b67693fd26ec95c629ecc236463e850923527953bc1fb8b31e1f9d2145a20af73b126ea80fe5b974431c2fe4cfd4b1a3912a65fe74d28945e67896c7eadccbaeadadd9f5786265e884fc749b31b744d49e7d19d64657bb8e1216637adc78030024ca513247bbf7a8de28a2cdbf387dcc7fc8ab3616c56e90ce76f4303721539b7c3461a6d58acd81e59eda1480348177e6281743ebd70a9dc6ad362bd27b0559d5e68681c81473952c3789e81c6726a5a2bf89d57f62326e7dcc07d4215669bfad7bc6141fb8ffb417e72597b6a95cf92cc0cc90714251309263478b8b26ef687c2fb36c4dd48d55662763611e2007a6d8ce6393e2c0b9a4b0fc26f08b5ff3d4b3313efb50bda7f50645a927fb9bda29290634b86eeca8b8a7799032f08116d2096e84e26051851c472c48919eac777053318fa1ffd713f04a33f3d81714a92b7faa27396bb765e8f24622da81dcc52a6b0da9e921c8b6df238e192c622f8a7e43d6710f4faccd63cfab6423dc3d66b4b89e50aa8199d7a8cc79404afee27be14c2e50d248363ef25bef9bc92345d1f2d6202a1d4be85b81c1036e2d7b02a5bef69928132f4cb8b22d7386f8ab2ece4f0e7b855fbe5a07cc52faef72d24aed6b21e17046bb944a53b60c12a0bd60bcd85236ee5c7baf2358fecfb3ac005ba3399984d36cd54f9a5610c4f343bc2f6ce2d40e96320289b187e2c11db4fb85ee1b571a2ffa4feec0f7f8d8c8965c5fc6fe3dcd11f73e80e1610591d18f0d5f64de8bed70fa82d0b7b169877de447ea7d1193ce08b347873155c4aabdd08038c1e8f13ebb872a3993c012d09ae8160d7e9efd267c424c0341c9085b4e0da3c1768b90fefad0c5c79ed0bbe5b46f5af738bdc0cd3a3d1f085fdb835cccb9c5e724a1c7173650903b1e2ab4ec5e101fa0860d1ba21cd5b4c17c157af2a786a5fef48f90b015927fb1d0d07e45aeafe4bfd7442c006f6e7adadadac880fe6370ae2ee3196fadcd1bb602d5f505c89eab40075d23dd27970c2a2518daaa4c49d200fc290cc3edb3d7392108e7c8e433e091d38961a0c8bf43efdd610356f0c5cec18942c95a806e46761eddbf7cb92a1c122b90cae0ef9f6c825d4ec400bcf9ecb60f747a03d121a02e44f9583b3988286a48819f587de24ce4014a24a102f90b2742e941572a5687d4eca78d280bdbf087efaab754d29e57e3de44bc49d1163809d231c03c11dcfff408581ea17349997dfa9f81d5b769cd7e70364a4c18b4f061c9422c45af9a8ea4149707cbfe6b564d6777e356c92637b43b685ea8c46534c8dc05b742eb888d2aba7e6b9dcd29536b195f9d4a99375b2680f46e976200cf6f3e2b1aad1fbf0b384e9a763ca4da90e752d7716a0a2f66f35ecf4f4540b7712731437b84bf6fdd3b2c80f876736f9fa3f3d24926d139ac22baf21c55f65f368640ca1289c3f7fbfc91fad48a5f9be48d0087be5eba4ec84e4271d89eef8b74f98d5d824b27ab33b6d6034ad6b17a5aa99e61ab68504cd0d38733c90be749e3cb93e20662c54321d73a121f27f4cf28780a16e7e7892cd0395ccf689aecf761eea346b4d75f228d28ebc72d74d03d75ff081ffed223405de1550de9e02080990e4c867d02c03a3a752fd9cdc830609f6d836d002508e721cff9e941c59c8ea4282658a69eede35fcb745e38f990da72a357d92c3385278bdee3c2c9b9ab60fac9f6ba5e881b5efee9f74cea12f6ccf7f81cfee844da2eb76b03c1f742e67ab1c58929eeb7caaa6a851e03bbad556067f7345ce5985a743159509773affd195e843394825eb940eb7d033937bb05eb1f1dca7cda81e83ec2c6c75a7bc2fdc03a137029e76c2bc5f4cb243777913d9adb7c56a13aa9e223d568cfb0bd9720838b56d29b35891c378601ec7efcbd3fc7dbc754f582df2209230f383d791fedb380a1bad3617845dfa2ff170c4c21c4f9198d7f7e27a466cba4da67afd7ea7eccf385638213d003d37e92eaad49237858eae19febdefae50d2e3bcf548ac0b13b87d256c4b42a7b80cc0e6787114d919d1683c2edbd793d45d72e1020a81a1fc8e444e528053e00851b9426f2644cf344eee559789005e1d8dd7f20419902c7e72ec13a494487ef68c2dc021b9df5be3cb8193d7c70a7ddf25ea5ed7cbc70028a39440cfb9fd110e79eebc7bc2540d9408477e3c0ef1b9614777c6161c099cbc54a4d38e519ea30e37711614d97209d9ea79ceaf183f19b82c9438a638cc858aec20cbfd235ea19cf6ef1e9c83720f6b0278f291bc206c2c86a40f3f8c4f30c764e1c81677f56c72df5c4fa1cc7c8bbd240913979322bb70e2de570efab2bad39f296eb01b94f5faa728aedb2868954c97681e71eea742cd4b6f5c6a3a9206d5c248ec3a65ea44e16e4585dee7c7f9fe9b391f93eac4d575bca18ddc011fe44f37bb9ca87b50c9bca6eb2f54da5884785c7fc64e40a387e5e66709210d294cd8c433b6bd67b504"], 0x1004)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000)

1.28911089s ago: executing program 1 (id=2692):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x200002, 0x0)

1.172857303s ago: executing program 8 (id=2693):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000300)=ANY=[@ANYBLOB=',msize=0'])
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000)
socketpair(0x28, 0x80000, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x2, 0x0, 0x97}, 0xc)

1.093957294s ago: executing program 8 (id=2694):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000ffffffec00000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0)

961.697984ms ago: executing program 1 (id=2695):
r0 = epoll_create1(0x0)
r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e)
close(r1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
dup(r1)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

768.638863ms ago: executing program 1 (id=2696):
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/13, 0xd)
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x2)
ioctl$BLKROSET(r7, 0x125d, &(0x7f00000002c0))
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x4a, &(0x7f0000000000)=0x20, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6d000200", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf25070000002700070073797374656d5f753a6f626a6563745f723a6574635f72756e74696d655f743a7330000014000200ff010000000000000000000000000001"], 0x50}, 0x1, 0x1000000, 0x0, 0x20000801}, 0x4000000)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$SOCK_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x18, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000004b101c94c3e529e796703148cbf848f54bbcb8a631eeb7ac85b3821a43851094d3a7864ba625090565bfe5f8a94bc618ca63d5945816b26383404498724e3e66020034d249b5e499ff03b744586075d2a676f2a409cd0ba1d6f20caea9ad1a0f9bdfc6eda40322fbb97610958e816331afb4eb5929921f3b2e4daff290e041168da4ec50010018c607e93ecd1e3ccabf00000000000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf25070000000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x55}, 0x8000)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
pipe(&(0x7f00000000c0))
socket$inet6(0xa, 0x2, 0x0)

762.093894ms ago: executing program 8 (id=2697):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000003000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000021c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004"], 0xd4}}, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0)

606.930814ms ago: executing program 8 (id=2698):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0}, {0xa, 0x0, 0x7, @remote}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300), r1, 0x0, 0x2, 0x4}}, 0x20)
syz_clone3(&(0x7f0000000480)={0x20000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140), {0x1e}, &(0x7f0000000240)=""/139, 0x8b, &(0x7f0000000300)=""/237, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58)
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r2, 0x0, 0xce, 0x0, &(0x7f0000000740))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={<r3=>0x0, <r4=>0x0}, &(0x7f0000000500)=0xc)
capset(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x0, 0x1})
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x16, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x40, 0x30, 0x1d, {0x1d, 0xe, "ec96e2d5c1ab4cca954a8b18f8babc0b41bc8067492f323f5fc1fb"}}, 0x0, 0x0, 0x0}, 0x0)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000bdf7130870270c936a8d0102030109021200010600000000000000002ac5980000f6501bfd24d8028711e45c2db02713c20700000000000000a2d4800397f77cf3d492e6d854028153710141d6126cc93daac0ee050d69d97b894fc0d37afd62d7b512d998b38c33487a804be00ddf79b57e41787aa38cb264e037108d08ff3b34f3b3c2066884120fdaf2ca20a34810b394b260f9a7ff75336234f12a1047770b647e0e0f58a9e71288420729332b039eaee9f2373916a5e934dd1743eea5476ac848"], 0x0)
syz_usb_control_io$printer(r7, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0xe, 0x6, "4074d82c4097"}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f0000000540)='./file7\x00', &(0x7f0000000580), 0x20000, &(0x7f0000000800)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1500}}, {@max_read={'max_read', 0x3d, 0x8000000000000001}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions}, {@default_permissions}], [{@euid_lt={'euid<', 0xee00}}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x62, 0x37, 0xc7, 0x37, 0x39, 0x33], 0x2d, [0x63, 0x64, 0x38, 0x66], 0x2d, [0x32, 0x38, 0x63, 0x66], 0x2d, [0x30, 0x65, 0x38, 0x33], 0x2d, [0x33, 0x38, 0x32, 0x65, 0x35, 0x38, 0x61, 0x36]}}}]}})
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0)

440.86828ms ago: executing program 7 (id=2699):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000005c0)="80", 0x1, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r1, 0x0, 0x0})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000300)={0x0, 0x0, 0x0})
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0)

372.788817ms ago: executing program 7 (id=2700):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000})
setpriority(0x1, 0x0, 0x5)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x101040, 0x40)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/25, 0x19}], 0x1, 0x401, 0x2)
getdents64(r0, &(0x7f0000000140)=""/181, 0xb5)

313.70823ms ago: executing program 7 (id=2701):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000)
r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f00000000c0)=0x1, 0x4)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
fsopen(&(0x7f0000000000)='fuse\x00', 0x1)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()

200.067619ms ago: executing program 5 (id=2702):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00')
read$usbfs(r0, &(0x7f0000000280)=""/155, 0x9b)
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
statx(0xffffffffffffffff, &(0x7f0000002780)='./file0\x00', 0x1000, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/net\x00')
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
sendmsg$nl_netfilter(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x4, 0x7, 0x101, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000)
flock(r2, 0x1)
acct(&(0x7f0000000280)='.\x00')
setuid(0xee00)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x97401c, &(0x7f0000000540)={[{@redirect_dir_on}, {@workdir={'workdir', 0x3d, './file0/file0'}}, {@nfs_export_off}, {@uuid_off}, {@xino_auto}, {@volatile}, {@uuid_on}, {@uuid_off}, {@default_permissions}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r3}}, {@subj_user={'subj_user', 0x3d, '\x00\x00\x00\x00'}}, {@pcr={'pcr', 0x3d, 0x12}}, {@seclabel}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, ')-}\xd3*'}}]})
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r2, 0xfffffffffffffffc, 0x4, 0x9})
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0)
write$binfmt_misc(r2, &(0x7f0000001280), 0x6)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0)

199.409512ms ago: executing program 5 (id=2703):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000940)=""/256, 0x100}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000a40)=""/231, 0xe7}], 0x4}, 0x4}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000001180)=""/253, 0xfd}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0)

100.605593ms ago: executing program 7 (id=2704):
r0 = getpid()
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb9)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00210000000000180000000700000073000000000000000a000200"], 0x28}}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpgid(r0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000001a80)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3, 0x4}}, 0x10, &(0x7f0000001980)=[{&(0x7f00000015c0)="624524d6dfed7a6f6f0199a515e208a775ff2f25ee073d613bf6dafd4e3e1c162952d798385412fc5f19deb661b40c54a61403861cce96e55982102958c1f7169bcf1bba625bf40b1f798d693fa6dc30cd58a122f42d3fa6ea219c317cd1ebb51389cbaaf580f7db5ad5cb9bf87fbdceedf956ccaf704ef6bbf91974bb1c3ac16635a09d522390e0ac1f9102cafaf8b45f4328d20161e912a250540c71097b5d3f98a38f8b421b64e00a6f7edce0b529fc47a62e6e3bfae1c1bca862f1770d5d355e0a7ea0fe908473074a9f8256673ff2bb6b", 0xd3}, {&(0x7f00000016c0)="830e51abddccc4866136c7f1638bda1795f57a45d12b66a0275317939d4d4d76f5c0b52ef837a37fd940a0fc4e9cb93013d3f8e651e4d683cd0a97bcee20e2274dd62c5d7feb280d127315744f81690cc645c737a69ba356d88dc7f9a11d05521d81f38e721a7975cfe8bd984b1e40bbf4b069d05125c16facc60e5c47b807ef35a9fda63ca4681ce0372fee382498de9c41aa0cc8638747f4c02c7b425f9e3ada902d21bd9bef7c9a68f29b0f796752a139735cdb7f21eb6c6f8975500a68ada369f7d215d6dd29a9438b0a6fe06947e880900090e705f54f704d6e896ef2496ae2", 0xe2}, {&(0x7f00000001c0)="1dd865becdb3", 0x6}, {&(0x7f0000000200)="92d5ca2751d06f9dc25fac885706fc25a0bc1eb1db4856e3289876faf1644d8c4268a25f6b586d", 0x27}, {&(0x7f00000017c0)="15832feaf85d8a5dd236bd2402e542306ff643f5994d3c692d978223e386dd323f0ca8bd3dff2fff99d37ff55ba112912aa45c93ffea5d8fe0f732054b0a0f19e8e647ea01e6c3e4c20f41bde64a453bad3a08b59f41591a282b0ab432473f62f67fbea1f00bbd4851e4c7cd3a08b813430f0c333227a5825ea5aa974c528770c356375e13272bd640d837850a17a2a35e1e1304137bb4b1373aa90cd71f4ffbd0417df5212c47fd38fbbb848534401801083fa430b3655db9c3e3843c557dba5a779c2c2d630ea9edd3a12c320db9f1ab63f919197eeee925c4b7ce2aff9d9533abc70a34a697", 0xe7}, {&(0x7f00000018c0)="206a452abafd2012bdf7a34e49309ccbd16d4a20de204cd63d1a374fed2c7b45afc065dfd7d745541cd379849fa6c2b3402da3dfc5f75a6b3ee9230789374bee532b85d4fdea90746ab23bddfebf830cdaca95def87ad01d5fc87287cce19d32a210d11090714fb0d8aa76dcfe59d93d5513e84deb6c8ec5cea603edb74fdade5903ecd6c6", 0x85}], 0x6, &(0x7f0000001a00)="0d3eaa3bd11b4acb19b1118c851ddbcbfb53144ef2588b022983745f9ae4d9ca87df7d34f11b070fde21ae6d7a312517b42219cdd2322bc81b2750941ee48ed9c91462e83caea1cb0daa46a3eddf1064875d37a39b06b66a2029a4715df18965d550c542aaea98df6990b954adb1d8de3c78b8b9c97952e67469197b", 0x7c, 0x4004000}, 0x4000800)
sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x131c, 0x42, 0x20, 0x70bd25, 0x25dfdbfd, {0x8}, [@nested={0x110a, 0x6d, 0x0, 0x1, [@nested={0x4, 0x14}, @generic="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", @typed={0x7, 0xff, 0x0, 0x0, @str='%\xb3\x00'}, @generic="2b3f9f78e3bcfe07e332cff7e10e2ddb5832a963a46460a3c2ab213e0f3941ee2fbbebca6023aa64c8d1e53b990751402ad8afd39a36249966ce3be197791f414d368110a28f841275de49a045e88b40e622a0bb92d7592e02d2b7fe21fb58a4c01ca9818ee3e3459923", @generic="a5043496d9a167864947df9f345538a34000ee7416bc4727285c74de61c3fea57769519af709aee44edc396a7a4236d6460f4b7bcb9bf3d52c09b47f791ff639", @typed={0x40, 0xfd, 0x0, 0x0, @binary="36ca13fe0321aa03970e6c304b132b5b7178bfbbd12319c907fbe60817592d26af067e99d995fb6dc26f9d4d92e4b337e96a48363a4d4de4c03de012"}, @nested={0x4, 0x1d}, @typed={0x9, 0x62, 0x0, 0x0, @str=']#*@\x00'}, @generic]}, @typed={0x8, 0x36, 0x0, 0x0, @ipv4=@remote}, @generic="f14fc8093dd750f5a7bc4418c9747ce8266c94f97a6688844ef7cafbe0f3e87db9bc76762c1566502ee2954ca81f52cb0aca3ba430050e85c777ccf5d5dba776c64c077d603180c11eb604808cee79e4b7d08b69dfd806acfb4129979387755b4ae54b9953ab47f129b09fa07642496201d01d0dca78c874a960628a1ed43c3ff131ce95dc7b04b5931d310e2eecfcd163450ee1cc6200efea8f2ccca9650827d95330b9a6ccb4086fc48cfe3a2c7b606f9d40b176606e408732e274f705ae19eb3ab077ab6c84481ce02469a7d41fcc9e602e78b650688b0bc50b1be6f43ce968ce752ca26160", @generic="0b479da20d0739854be319e346e64661990081f3d6fc3d45eb1d8fb64c80537ac5fcd635b7fd7ebbc030225fa7d7b9abdf206f77ffa9b557204c78b86071", @generic="f53b7f6ccc3ab8c359a9fb0c485f5bbded7e5182f7306a6efe5051431ebe0866fbb0c1a5089a71b0cf4e466c19c86ff72f583cc2131bdc69f2371ab99e251a8376ce149817ebcff8c0789c4c8cdab4f186c317fedc395bfe20e08276e96f010422", @nested={0x69, 0x115, 0x0, 0x1, [@generic="5a9852c7e8cf54831bab24ad15229aa330ea7da1e265ac305035c80f1b6acb5a80d81626f644db5faf4bd7aa2bb8964587967d5d4092f98445f4ef2ff0ca63be28c69daefc", @nested={0x4, 0xde}, @nested={0x4, 0x10d}, @nested={0x4, 0x13e}, @typed={0x8, 0x80, 0x0, 0x0, @pid=r0}, @nested={0x4, 0x8}, @typed={0x8, 0x12c, 0x0, 0x0, @pid=r3}]}]}, 0x131c}, 0x1, 0x0, 0x0, 0x440c1}, 0x24000040)

87.166081ms ago: executing program 5 (id=2705):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) (async)
pidfd_getfd(r0, r0, 0x0)

53.186139ms ago: executing program 7 (id=2706):
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000000c0)=ANY=[@ANYBLOB="036eb867ae142036e4e860b9dcc4889be54de600e8d8d3340dc5c79328626ef2255cf17356f91583118a711949d744fc433c54785a7c7af39491b1ce3e6da82f8a976f668c501c5d4cf315fd6edb6320afc8c80214961920042a21bb5a9f732cc27c33f25c3efe5b609d8e5e249e"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000002c0)={0x40, 0x16, 0x1, "a5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)

0s ago: executing program 5 (id=2707):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0)
r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[])
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000340)=[0x2a, 0x7])
write(r1, &(0x7f0000000280)="493220ad06fd95cc12d49f", 0xb)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0)

kernel console output (not intermixed with test programs):

"/dev/rnullb0"
[  406.652890][T13240] /dev/rnullb0: Can't open blockdev
[  406.780833][T13132] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.805177][T13132] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.812468][T13132] bridge_slave_0: entered allmulticast mode
[  406.855364][T13132] bridge_slave_0: entered promiscuous mode
[  406.889577][T13132] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.918687][T13132] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.943335][T13132] bridge_slave_1: entered allmulticast mode
[  406.964024][T13132] bridge_slave_1: entered promiscuous mode
[  407.092167][T13132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.131535][T13132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.165516][ T5945] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  407.316474][T13132] team0: Port device team_slave_0 added
[  407.336590][T13132] team0: Port device team_slave_1 added
[  407.363891][ T5945] usb 2-1: Using ep0 maxpacket: 16
[  407.378019][ T5945] usb 2-1: config 15 has an invalid interface number: 70 but max is 0
[  407.389432][ T5945] usb 2-1: config 15 has no interface number 0
[  407.400189][ T5945] usb 2-1: config 15 interface 70 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  407.424881][ T5945] usb 2-1: config 15 interface 70 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[  407.452588][ T5945] usb 2-1: config 15 interface 70 has no altsetting 0
[  407.478718][ T5945] usb 2-1: New USB device found, idVendor=0519, idProduct=009a, bcdDevice=56.49
[  407.488532][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.504470][T13132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.507448][ T5945] usb 2-1: Product: syz
[  407.519324][T13132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.521205][ T5945] usb 2-1: Manufacturer: syz
[  407.545329][    C0] vkms_vblank_simulate: vblank timer overrun
[  407.562925][T13132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.572373][ T5945] usb 2-1: SerialNumber: syz
[  407.576454][T13132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.587701][T13132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.626753][T13132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.643135][ T7699] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  407.727171][T13132] hsr_slave_0: entered promiscuous mode
[  407.734533][T13132] hsr_slave_1: entered promiscuous mode
[  407.793718][ T7699] usb 8-1: Using ep0 maxpacket: 8
[  407.808274][ T7699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.819843][ T7699] usb 8-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00
[  407.827233][T13255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.829267][ T7699] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.864460][T13255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.877521][ T7699] usb 8-1: config 0 descriptor??
[  408.140004][T13286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.171123][T13286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.196233][T13286] /dev/rnullb0: Can't open blockdev
[  408.295723][ T7699] wacom 0003:056A:00E5.0013: unknown main item tag 0x0
[  408.307993][T13132] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  408.339161][T13132] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  408.358708][T13132] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  408.366157][ T5924] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[  408.381816][T13132] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  408.503214][ T5924] usb 6-1: device descriptor read/64, error -71
[  408.551430][T13132] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.555665][ T5176] Bluetooth: hci2: command tx timeout
[  408.579534][T13302] /dev/rnullb0: Can't open blockdev
[  408.606226][T13132] 8021q: adding VLAN 0 to HW filter on device team0
[  408.637098][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.644313][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.682859][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.690078][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.747650][ T5924] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[  408.812933][T13132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  408.883747][ T5924] usb 6-1: device descriptor read/64, error -71
[  409.007333][ T5924] usb usb6-port1: attempt power cycle
[  409.134076][T13132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.365465][ T5924] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[  409.394869][ T5924] usb 6-1: device descriptor read/8, error -71
[  409.649192][ T5924] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  409.658714][T13132] veth0_vlan: entered promiscuous mode
[  409.685594][T13132] veth1_vlan: entered promiscuous mode
[  409.698236][ T5924] usb 6-1: device descriptor read/8, error -71
[  409.755535][T13132] veth0_macvtap: entered promiscuous mode
[  409.767680][T13132] veth1_macvtap: entered promiscuous mode
[  409.803883][T13132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.820943][T13132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.828988][ T5924] usb usb6-port1: unable to enumerate USB device
[  409.841692][ T1165] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.859036][ T1165] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.907772][ T1165] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.957107][ T1165] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.020813][ T5945] usb 2-1: USB disconnect, device number 65
[  410.132617][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.138510][T13338] /dev/rnullb0: Can't open blockdev
[  410.160349][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.230865][ T3584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.252922][ T3584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.345742][T13342] /dev/rnullb0: Can't open blockdev
[  410.371548][T13265] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  410.451302][ T5945] usb 8-1: USB disconnect, device number 3
[  410.616255][T13353] tmpfs: Bad value for 'size'
[  410.633550][ T5176] Bluetooth: hci2: command tx timeout
[  410.635237][T13351] /dev/rnullb0: Can't open blockdev
[  410.836923][T13359] /dev/rnullb0: Can't open blockdev
[  410.910806][T13365] /dev/rnullb0: Can't open blockdev
[  411.049399][T13371] /dev/rnullb0: Can't open blockdev
[  411.453665][T13389] netlink: 'syz.1.2026': attribute type 2 has an invalid length.
[  411.477208][T13389] netlink: 'syz.1.2026': attribute type 4 has an invalid length.
[  411.522679][T13390] netlink: 'syz.1.2026': attribute type 2 has an invalid length.
[  411.554265][T13390] netlink: 'syz.1.2026': attribute type 4 has an invalid length.
[  411.803343][T13407] input: syz0 as /devices/virtual/input/input32
[  412.781460][T13435] /dev/rnullb0: Can't open blockdev
[  412.971817][T13440] /dev/rnullb0: Can't open blockdev
[  413.099819][T13446] /dev/rnullb0: Can't open blockdev
[  413.253232][ T5857] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  413.403283][ T5857] usb 2-1: Using ep0 maxpacket: 16
[  413.416158][ T5857] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64
[  413.429738][ T5857] usb 2-1: config 1 interface 0 has no altsetting 0
[  413.454456][ T5857] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  413.473131][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.490888][ T5857] usb 2-1: Product: 䩄ហ褂韬Ꙇ깥㸂Ꮅ沣闳ꂈ�Ꟶ鑼ʧ暳ꉽ濿ꋶ腰羲㮨댡㘴㜢඄㤑滸ⅤҰ�㛱ꨢ콨಑�①k㣖�ۖ㒞䲬瓒年ꕌ頛傹�⃒����跜ᅑ귻⡟觃䓬�ﵦ둬��滧룼ꃬ⳰녬욮
[  413.514151][    C0] vkms_vblank_simulate: vblank timer overrun
[  413.590233][ T5857] usb 2-1: Manufacturer: à �
[  413.610273][ T5857] usb 2-1: SerialNumber: à¡ 
[  413.636469][T13445] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  413.864371][T13445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.878072][T13445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.893192][ T5857] usb 2-1: bad CDC descriptors
[  413.913233][ T5176] Bluetooth: hci3: command 0x0406 tx timeout
[  413.914854][ T5945] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  413.920596][ T5857] usb 2-1: USB disconnect, device number 66
[  413.966159][ T5945] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  414.063207][ T7699] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  414.203377][ T7699] usb 6-1: device descriptor read/64, error -71
[  414.453662][ T7699] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  414.507337][T13492] /dev/rnullb0: Can't open blockdev
[  414.593734][ T7699] usb 6-1: device descriptor read/64, error -71
[  414.664778][   T30] audit: type=1326 audit(1752470864.370:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13468 comm="syz.7.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d58e929 code=0x7fc00000
[  414.709629][ T7699] usb usb6-port1: attempt power cycle
[  414.801467][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2048'.
[  414.809435][T13498] /dev/rnullb0: Can't open blockdev
[  414.819422][T13501] /dev/rnullb0: Can't open blockdev
[  415.083281][ T7699] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  415.123949][ T7699] usb 6-1: device descriptor read/8, error -71
[  415.373236][ T7699] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  415.390624][T13530] /dev/rnullb0: Can't open blockdev
[  415.420344][ T7699] usb 6-1: device descriptor read/8, error -71
[  415.548488][ T7699] usb usb6-port1: unable to enumerate USB device
[  416.036578][T13553] /dev/rnullb0: Can't open blockdev
[  416.153304][ T5176] Bluetooth: hci4: command 0x206a tx timeout
[  416.153500][ T5945] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  416.186699][ T5945] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  416.423455][ T5893] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  416.593723][ T5893] usb 9-1: Using ep0 maxpacket: 8
[  416.600458][ T5893] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  416.627556][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  416.641342][ T5893] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  416.655160][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.666619][ T5893] usb 9-1: Product: syz
[  416.670805][ T5893] usb 9-1: Manufacturer: syz
[  416.678067][ T5893] usb 9-1: SerialNumber: syz
[  416.693867][ T5893] usb 9-1: config 0 descriptor??
[  416.941728][T13585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2060'.
[  416.948627][   T43] usb 9-1: USB disconnect, device number 2
[  417.384400][ T5946] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  417.566994][ T5946] usb 6-1: Using ep0 maxpacket: 16
[  417.650814][T13594] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2062'.
[  417.674629][T13594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.707157][T13607] /dev/rnullb0: Can't open blockdev
[  417.725363][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short
[  417.759846][ T5946] usb 6-1: unable to read config index 0 descriptor/start: -71
[  417.782738][ T5946] usb 6-1: can't read configurations, error -71
[  418.140935][T13622] /dev/rnullb0: Can't open blockdev
[  418.284914][T13625] /dev/rnullb0: Can't open blockdev
[  418.313449][ T5945] Bluetooth: hci6: Opcode 0x0c1a failed: -110
[  418.313780][ T5176] Bluetooth: hci6: command 0x0c1a tx timeout
[  418.355816][ T5945] Bluetooth: hci6: Error when powering off device on rfkill (-110)
[  418.958042][T13654] /dev/rnullb0: Can't open blockdev
[  419.034679][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  419.202244][T13660] @: renamed from vlan0 (while UP)
[  419.211144][T13670] /dev/rnullb0: Can't open blockdev
[  419.473263][ T5946] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  419.577110][T13681] /dev/rnullb0: Can't open blockdev
[  420.134890][ T5946] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.153448][ T5946] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  420.173892][ T5946] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  420.182972][ T5946] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  420.206139][ T5946] usb 9-1: Manufacturer: syz
[  420.220072][ T5946] usb 9-1: config 0 descriptor??
[  420.451734][T13703] /dev/rnullb0: Can't open blockdev
[  420.463754][T13669] binder: BINDER_SET_CONTEXT_MGR already set
[  420.469805][T13669] binder: 13667:13669 ioctl 4018620d 200000000280 returned -16
[  420.473197][ T5176] Bluetooth: hci1: command 0x0c1a tx timeout
[  420.484328][T13669] binder: 13667:13669 ioctl c0306201 200000000240 returned -11
[  420.491964][ T5945] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  420.505830][T13669] /dev/rnullb0: Can't open blockdev
[  420.511156][ T5945] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  420.539133][ T5946] usb 9-1: USB disconnect, device number 3
[  420.983328][ T7699] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  421.023200][ T5857] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  421.147136][ T7699] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  421.157812][ T7699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.172013][ T7699] usb 2-1: config 0 descriptor??
[  421.177433][ T5857] usb 6-1: device descriptor read/64, error -71
[  421.373267][  T984] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  421.393496][ T5946] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  421.423198][ T5857] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  421.523189][  T984] usb 8-1: Using ep0 maxpacket: 32
[  421.529846][  T984] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.541313][  T984] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.551156][  T984] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  421.564276][ T5857] usb 6-1: device descriptor read/64, error -71
[  421.572375][  T984] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  421.573305][ T5946] usb 9-1: Using ep0 maxpacket: 32
[  421.581725][  T984] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  421.595416][ T5946] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  421.595970][  T984] usb 8-1: Product: syz
[  421.608622][  T984] usb 8-1: Manufacturer: syz
[  421.611991][ T5946] usb 9-1: config 0 has no interface number 0
[  421.613511][  T984] usb 8-1: SerialNumber: syz
[  421.621692][ T5946] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  421.639066][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.647346][ T5946] usb 9-1: Product: syz
[  421.650040][  T984] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input33
[  421.651551][ T5946] usb 9-1: Manufacturer: syz
[  421.651568][ T5946] usb 9-1: SerialNumber: syz
[  421.685081][ T5857] usb usb6-port1: attempt power cycle
[  421.685717][ T5946] usb 9-1: config 0 descriptor??
[  421.709536][ T5946] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  421.723176][ T5946] usb 9-1: selecting invalid altsetting 1
[  421.737162][ T5946] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  421.774421][ T5946] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  421.787179][ T5946] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  421.800736][ T5946] usb 9-1: media controller created
[  421.841061][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  421.865927][T13723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.877622][T13723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.899843][   T43] usb 8-1: USB disconnect, device number 4
[  421.907643][T13725] /dev/rnullb0: Can't open blockdev
[  421.919339][T13729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.934285][T13729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.950102][   T43] appletouch 8-1:1.0: input: appletouch disconnected
[  421.960249][ T5946] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  421.969188][ T5946] zl10353_read_register: readreg error (reg=127, ret==-71)
[  421.984544][ T5946] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  422.030942][ T5946] usb 9-1: USB disconnect, device number 4
[  422.043553][ T5857] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  422.084498][ T5857] usb 6-1: device descriptor read/8, error -71
[  422.343319][ T5857] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  422.364736][ T5857] usb 6-1: device descriptor read/8, error -71
[  422.473718][ T5857] usb usb6-port1: unable to enumerate USB device
[  422.767293][T13733] /dev/rnullb0: Can't open blockdev
[  422.859248][T13739] binder: 13738:13739 ioctl c018620b 200000000000 returned -14
[  422.873645][ T5945] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  422.873915][ T5176] Bluetooth: hci2: command 0x0c1a tx timeout
[  422.891132][ T5945] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  423.013371][ T5946] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  423.163253][ T5946] usb 8-1: Using ep0 maxpacket: 8
[  423.172439][ T5946] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  423.182669][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.190732][ T5946] usb 8-1: Product: syz
[  423.193843][ T5900] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  423.195031][ T5946] usb 8-1: Manufacturer: syz
[  423.206996][ T5946] usb 8-1: SerialNumber: syz
[  423.214565][ T5946] usb 8-1: config 0 descriptor??
[  423.225214][T13708] /dev/rnullb0: Can't open blockdev
[  423.239624][ T7699] pegasus 2-1:0.0: setup Pegasus II specific registers
[  423.353689][ T5900] usb 9-1: Using ep0 maxpacket: 8
[  423.363524][ T5900] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  423.374807][ T5900] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  423.386651][ T5900] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  423.397768][ T7699] pegasus 2-1:0.0: can't locate MII phy, using default
[  423.404884][ T5900] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  423.422147][ T5946] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  423.431152][ T7699] pegasus 2-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, 6a:ab:74:f6:48:bf
[  423.454446][ T5900] usb 9-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  423.466229][ T7699] usb 2-1: USB disconnect, device number 67
[  423.476956][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.492442][ T5900] usb 9-1: Product: syz
[  423.497192][ T5900] usb 9-1: Manufacturer: syz
[  423.501783][ T5900] usb 9-1: SerialNumber: syz
[  423.522161][ T5900] usb 9-1: config 0 descriptor??
[  423.532391][ T5900] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  423.540886][ T5900] imon 9-1:0.0: unable to initialize intf0, err -19
[  423.548506][ T5900] imon:imon_probe: failed to initialize context!
[  423.557610][ T5900] imon 9-1:0.0: unable to register, err -19
[  423.730551][T13742] /dev/rnullb0: Can't open blockdev
[  423.745344][ T5945] usb 9-1: USB disconnect, device number 5
[  423.943830][T13756] /dev/rnullb0: Can't open blockdev
[  424.070169][ T5900] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  424.109304][ T5900] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  424.114563][T13763] /dev/rnullb0: Can't open blockdev
[  424.243934][T13735] /dev/rnullb0: Can't open blockdev
[  424.260499][ T5946] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  424.303489][ T5946] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  424.311379][ T5946] usb 8-1: media controller created
[  424.398238][T13769] /dev/rnullb0: Can't open blockdev
[  424.434968][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  424.623616][ T5946] i2c i2c-1: Added multiplexed i2c bus 2
[  424.639475][ T5946] rtl2830 1-0010: Realtek RTL2830 successfully attached
[  424.647823][ T7699] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  424.650921][ T5946] usb 8-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))...
[  424.697798][ T5946] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered.
[  424.820483][ T7699] usb 9-1: not running at top speed; connect to a high speed hub
[  424.834293][ T7699] usb 9-1: config 7 has an invalid interface number: 215 but max is 3
[  424.879512][ T7699] usb 9-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[  424.927801][ T7699] usb 9-1: config 7 has an invalid interface number: 137 but max is 3
[  424.959773][ T5946] DVB: Unable to find symbol mxl5005s_attach()
[  424.979165][ T7699] usb 9-1: config 7 has an invalid interface number: 212 but max is 3
[  425.030931][ T7699] usb 9-1: config 7 has an invalid interface number: 153 but max is 3
[  425.054401][ T7699] usb 9-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[  425.082205][ T7699] usb 9-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config
[  425.140595][ T7699] usb 9-1: config 7 has 5 interfaces, different from the descriptor's value: 4
[  425.169285][ T5946] usb 8-1: USB disconnect, device number 5
[  425.173338][ T7699] usb 9-1: config 7 has no interface number 0
[  425.181271][ T7699] usb 9-1: config 7 has no interface number 2
[  425.192467][ T7699] usb 9-1: config 7 has no interface number 3
[  425.208325][ T7699] usb 9-1: config 7 has no interface number 4
[  425.217419][   T96] block nbd0: Possible stuck request ffff8880254c5080: control (read@0,1024B). Runtime 120 seconds
[  425.231056][   T96] block nbd0: Possible stuck request ffff8880254c5240: control (read@1024,1024B). Runtime 120 seconds
[  425.235534][ T7699] usb 9-1: config 7 interface 215 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  425.270646][T13773] /dev/rnullb0: Can't open blockdev
[  425.313607][ T7699] usb 9-1: config 7 interface 215 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  425.382650][ T7699] usb 9-1: config 7 interface 215 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  425.405738][T13797] /dev/rnullb0: Can't open blockdev
[  425.429755][ T7699] usb 9-1: config 7 interface 215 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  425.456744][ T7699] usb 9-1: config 7 interface 215 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  425.500638][ T7699] usb 9-1: config 7 interface 215 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[  425.537077][ T7699] usb 9-1: config 7 interface 215 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 11
[  425.577390][ T7699] usb 9-1: too many endpoints for config 7 interface 137 altsetting 218: 250, using maximum allowed: 30
[  425.609607][ T7699] usb 9-1: config 7 interface 137 altsetting 218 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  425.634937][ T7699] usb 9-1: config 7 interface 137 altsetting 218 has a duplicate endpoint with address 0xA, skipping
[  425.657228][ T7699] usb 9-1: config 7 interface 137 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 250
[  425.686181][ T7699] usb 9-1: config 7 interface 212 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  425.702512][ T7699] usb 9-1: too many endpoints for config 7 interface 1 altsetting 10: 243, using maximum allowed: 30
[  425.729095][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has a duplicate endpoint with address 0x7, skipping
[  425.747714][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has a duplicate endpoint with address 0xF, skipping
[  425.761132][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has a duplicate endpoint with address 0x9, skipping
[  425.778091][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has a duplicate endpoint with address 0x5, skipping
[  425.801447][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has a duplicate endpoint with address 0x7, skipping
[  425.812805][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  425.858226][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has a duplicate endpoint with address 0xA, skipping
[  425.876475][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has a duplicate endpoint with address 0x8A, skipping
[  425.911668][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has a duplicate endpoint with address 0x7, skipping
[  425.942479][ T7699] usb 9-1: config 7 interface 1 altsetting 10 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  425.978209][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  425.989566][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has a duplicate endpoint with address 0xD, skipping
[  426.003018][ T7699] usb 9-1: config 7 interface 1 altsetting 10 has 12 endpoint descriptors, different from the interface descriptor's value: 243
[  426.016534][ T7699] usb 9-1: config 7 interface 153 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  426.030393][ T7699] usb 9-1: config 7 interface 137 has no altsetting 0
[  426.040081][ T5857] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  426.049907][ T7699] usb 9-1: config 7 interface 1 has no altsetting 0
[  426.061232][T13815] ./cgroup: Can't lookup blockdev
[  426.071164][ T7699] usb 9-1: config 7 interface 153 has no altsetting 0
[  426.082900][ T7699] usb 9-1: Dual-Role OTG device on HNP port
[  426.091122][ T7699] usb 9-1: New USB device found, idVendor=2040, idProduct=c090, bcdDevice=8f.8f
[  426.109552][ T7699] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.120527][ T7699] usb 9-1: Product: syz
[  426.124799][ T7699] usb 9-1: Manufacturer: Ñ™
[  426.129331][ T7699] usb 9-1: SerialNumber: syz
[  426.141187][T13770] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  426.157932][T13770] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  426.199898][T13822] /dev/rnullb0: Can't open blockdev
[  426.213266][ T5857] usb 2-1: Using ep0 maxpacket: 8
[  426.227418][ T5857] usb 2-1: config 60 has an invalid interface number: 154 but max is 0
[  426.242545][ T5857] usb 2-1: config 60 has no interface number 0
[  426.251425][ T5857] usb 2-1: config 60 interface 154 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  426.267600][ T5857] usb 2-1: config 60 interface 154 altsetting 8 endpoint 0xC has an invalid bInterval 216, changing to 11
[  426.279024][ T5857] usb 2-1: config 60 interface 154 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  426.301337][ T5857] usb 2-1: config 60 interface 154 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  426.323268][ T5857] usb 2-1: config 60 interface 154 has no altsetting 0
[  426.333707][ T5857] usb 2-1: New USB device found, idVendor=0846, idProduct=4301, bcdDevice=7c.dc
[  426.337075][ T5945] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  426.342792][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.342814][ T5857] usb 2-1: Product: syz
[  426.363813][ T5857] usb 2-1: Manufacturer: ц
[  426.370095][ T5857] usb 2-1: SerialNumber: syz
[  426.371233][T13770] /dev/rnullb0: Can't open blockdev
[  426.391112][ T7699] smsusb:smsusb_probe: board id=8, interface number 215
[  426.422596][ T7699] smsusb:smsusb_probe: board id=8, interface number 137
[  426.442273][ T7699] smsusb:smsusb_probe: board id=8, interface number 212
[  426.459696][ T7699] smsusb:smsusb_probe: board id=8, interface number 1
[  426.472656][ T7699] smsusb:smsusb_probe: board id=8, interface number 153
[  426.494935][ T7699] usb 9-1: USB disconnect, device number 6
[  426.530130][ T5945] usb 8-1: config 0 has an invalid interface number: 219 but max is 0
[  426.542627][ T5945] usb 8-1: config 0 has no interface number 0
[  426.554609][ T5945] usb 8-1: config 0 interface 219 altsetting 0 endpoint 0xF has invalid maxpacket 1479, setting to 64
[  426.569460][ T5945] usb 8-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf
[  426.579175][ T5945] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.598496][ T5857] usb 2-1: Could not find all expected endpoints
[  426.630520][ T5857] usb 2-1: USB disconnect, device number 68
[  426.638345][   T30] audit: type=1326 audit(1752470876.350:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13823 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc636f8e929 code=0x7fc00000
[  426.681639][ T5945] usb 8-1: config 0 descriptor??
[  426.705298][ T5945] rndis_host 8-1:0.219: invalid descriptor buffer length
[  426.712364][ T5945] usb 8-1: bad CDC descriptors
[  426.722304][   T30] audit: type=1326 audit(1752470876.350:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13823 comm="syz.5.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc636f8e929 code=0x7fc00000
[  426.750575][ T5945] cdc_acm 8-1:0.219: invalid descriptor buffer length
[  426.904297][T13817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  426.915731][T13817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.977286][ T5946] usb 8-1: USB disconnect, device number 6
[  427.093510][ T5857] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  427.266123][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.284897][ T5857] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  427.297783][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.313774][ T5857] usb 6-1: config 0 descriptor??
[  427.729221][T13859] /dev/rnullb0: Can't open blockdev
[  427.747177][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  427.793549][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  427.870741][T13863] /dev/rnullb0: Can't open blockdev
[  427.959409][ T5857] usbhid 6-1:0.0: can't add hid device: -71
[  427.980424][ T5857] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  428.033280][ T5857] usb 6-1: USB disconnect, device number 63
[  428.193764][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2121'.
[  428.433755][T13875] /dev/rnullb0: Can't open blockdev
[  428.574810][T13877] /dev/rnullb0: Can't open blockdev
[  428.819512][T13889] /dev/rnullb0: Can't open blockdev
[  429.382972][T13915] usb usb1: usbfs: process 13915 (syz.8.2133) did not claim interface 0 before use
[  429.404500][T13915] /dev/rnullb0: Can't open blockdev
[  429.630970][T13926] vlan1: entered promiscuous mode
[  429.645965][T13926] vlan1: entered allmulticast mode
[  429.667853][T13926] veth0_vlan: entered allmulticast mode
[  429.701898][T13926] /dev/rnullb0: Can't open blockdev
[  429.992842][T13943] /dev/rnullb0: Can't open blockdev
[  430.153953][T13950] netlink: 'syz.5.2143': attribute type 2 has an invalid length.
[  430.163666][   T43] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  430.177798][T13950] netlink: 16126 bytes leftover after parsing attributes in process `syz.5.2143'.
[  430.194476][T13950] /dev/rnullb0: Can't open blockdev
[  430.323171][   T43] usb 2-1: Using ep0 maxpacket: 8
[  430.344382][   T43] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  430.372282][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.385959][   T43] usb 2-1: Product: syz
[  430.399353][   T43] usb 2-1: Manufacturer: syz
[  430.412505][   T43] usb 2-1: SerialNumber: syz
[  430.432157][   T43] usb 2-1: config 0 descriptor??
[  430.446237][   T43] gspca_main: se401-2.14.0 probing 047d:5003
[  430.749346][T13972] /dev/rnullb0: Can't open blockdev
[  431.055222][   T43] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34
[  431.122193][T13988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.312258][T13997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.342861][T13997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.380204][T13938] /dev/rnullb0: Can't open blockdev
[  431.414376][   T43] usb 2-1: USB disconnect, device number 69
[  431.765304][T14009] /dev/rnullb0: Can't open blockdev
[  431.925072][T14015] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  432.369378][ T7699] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  432.543273][ T7699] usb 2-1: Using ep0 maxpacket: 16
[  432.563529][ T7699] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  432.588306][ T7699] usb 2-1: config 0 has no interface number 0
[  432.600004][ T7699] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  432.624972][ T7699] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  432.650654][ T7699] usb 2-1: config 0 interface 41 has no altsetting 0
[  432.682287][ T7699] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  432.701791][ T7699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.732370][ T7699] usb 2-1: Product: syz
[  432.740523][ T7699] usb 2-1: Manufacturer: syz
[  432.746909][ T7699] usb 2-1: SerialNumber: syz
[  432.763957][ T7699] usb 2-1: config 0 descriptor??
[  432.772440][T14025] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  432.794475][T14025] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  433.009045][T14025] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  433.017616][T14025] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  433.705791][ T7699] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  433.785535][T14064] /dev/rnullb0: Can't open blockdev
[  433.961304][T14067] /dev/rnullb0: Can't open blockdev
[  434.233439][ T5945] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  434.318213][T14077] /dev/rnullb0: Can't open blockdev
[  434.425485][ T5945] usb 9-1: config index 0 descriptor too short (expected 35577, got 27)
[  434.443071][ T5945] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  434.451695][ T5945] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[  434.485847][ T5945] usb 9-1: config 1 has no interface number 0
[  434.492000][ T5945] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  434.502995][ T5945] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  434.515959][ T5945] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  434.533429][ T5945] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.568355][ T5945] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[  434.685476][T14093] /dev/rnullb0: Can't open blockdev
[  434.763234][T14082] /dev/rnullb0: Can't open blockdev
[  434.935512][ T7699] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  434.966308][ T7699] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  434.988166][ T7699] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  435.017532][ T7699] usb 2-1: USB disconnect, device number 70
[  435.119678][ T5945] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached
[  435.339455][T14110] /dev/rnullb0: Can't open blockdev
[  435.454587][T14112] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  435.478134][T14112] /dev/rnullb0: Can't open blockdev
[  435.598336][T14122] /dev/rnullb0: Can't open blockdev
[  435.825392][T14130] /dev/rnullb0: Can't open blockdev
[  435.835436][T14132] netlink: 'syz.7.2173': attribute type 5 has an invalid length.
[  435.846403][T14132] netlink: 'syz.7.2173': attribute type 9 has an invalid length.
[  435.855443][T14131] netlink: 'syz.7.2173': attribute type 5 has an invalid length.
[  435.863795][T14131] netlink: 'syz.7.2173': attribute type 9 has an invalid length.
[  435.874095][T14132] /dev/rnullb0: Can't open blockdev
[  436.165208][T14139] tipc: Enabling <ib:lo> not permitted
[  436.166116][ T5945] snd_usb_pod 9-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  436.170795][T14139] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  436.256089][T14143] /dev/rnullb0: Can't open blockdev
[  436.271461][T14144] /dev/rnullb0: Can't open blockdev
[  436.415007][T14150] /dev/rnullb0: Can't open blockdev
[  436.568317][T14154] FAT-fs (nullb0): bogus number of reserved sectors
[  436.575066][T14154] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  436.794038][T14166] /dev/rnullb0: Can't open blockdev
[  437.028320][ T5946] usb 9-1: USB disconnect, device number 8
[  437.056488][ T5946] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[  437.084755][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2184'.
[  437.163137][T14183] /dev/rnullb0: Can't open blockdev
[  437.185196][  T984] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  437.185671][T14183] Bluetooth: MGMT ver 1.23
[  437.289216][T14190] virtio-fs: tag </dev/rnullb0> not found
[  437.375939][  T984] usb 2-1: Using ep0 maxpacket: 16
[  437.403187][ T5945] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  437.420742][  T984] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  437.473291][  T984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  437.500190][  T984] usb 2-1: config 0 has no interface number 0
[  437.516658][  T984] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  437.545848][  T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.551001][T14199] /dev/rnullb0: Can't open blockdev
[  437.569373][ T5945] usb 8-1: device descriptor read/64, error -71
[  437.569437][  T984] usb 2-1: Product: syz
[  437.590238][  T984] usb 2-1: Manufacturer: syz
[  437.600410][  T984] usb 2-1: SerialNumber: syz
[  437.623722][  T984] usb 2-1: config 0 descriptor??
[  437.791984][T14208] MTD: Couldn't look up './cgroup': -15
[  437.803681][T14208] ./cgroup: Can't lookup blockdev
[  437.823283][ T5945] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  437.849303][T14172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.863718][T14172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.888560][T14172] netlink: 'syz.1.2183': attribute type 21 has an invalid length.
[  437.925764][T14172] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2183'.
[  437.939740][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'.
[  437.953381][ T5857] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  437.970529][  T984] usb 2-1: Found UVC 0.00 device syz (046d:08d3)
[  437.983296][ T5945] usb 8-1: device descriptor read/64, error -71
[  438.009153][  T984] usb 2-1: No valid video chain found.
[  438.048161][  T984] usb 2-1: USB disconnect, device number 71
[  438.066305][T14216] /dev/rnullb0: Can't open blockdev
[  438.103523][ T5945] usb usb8-port1: attempt power cycle
[  438.124209][ T5857] usb 6-1: device descriptor read/64, error -71
[  438.365464][ T5857] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  438.463164][ T5945] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  438.503890][ T5945] usb 8-1: device descriptor read/8, error -71
[  438.513288][ T5857] usb 6-1: device descriptor read/64, error -71
[  438.625634][T14236] /dev/rnullb0: Can't open blockdev
[  438.645484][ T5857] usb usb6-port1: attempt power cycle
[  438.753412][ T5945] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  438.792738][T14244] /dev/rnullb0: Can't open blockdev
[  438.815683][ T5945] usb 8-1: device descriptor read/8, error -71
[  438.847419][T14233] could not allocate digest TFM handle hmac(sha1-avx2)
[  438.933873][ T5945] usb usb8-port1: unable to enumerate USB device
[  438.993131][ T5857] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  439.046269][ T5857] usb 6-1: device descriptor read/8, error -71
[  439.195717][T14258] /dev/rnullb0: Can't open blockdev
[  439.313212][ T5857] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  439.343889][ T5857] usb 6-1: device descriptor read/8, error -71
[  439.392413][T14266] /dev/rnullb0: Can't open blockdev
[  439.453501][ T5857] usb usb6-port1: unable to enumerate USB device
[  439.653949][T14273] /dev/rnullb0: Can't open blockdev
[  439.919292][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  439.933114][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  440.773199][ T5946] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  440.975176][ T5946] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  440.988867][ T5946] usb 2-1: config 220 has an invalid descriptor of length 102, skipping remainder of the config
[  441.004270][ T5946] usb 2-1: config 220 has no interface number 2
[  441.010658][ T5946] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  441.024470][ T5946] usb 2-1: config 220 interface 0 has no altsetting 0
[  441.031255][ T5946] usb 2-1: config 220 interface 76 has no altsetting 0
[  441.074617][ T5946] usb 2-1: config 220 interface 1 has no altsetting 0
[  441.092674][ T5946] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  441.170896][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.210652][ T5946] usb 2-1: Product: syz
[  441.227253][ T5946] usb 2-1: Manufacturer: syz
[  441.231876][ T5946] usb 2-1: SerialNumber: syz
[  441.509091][T14296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.530164][T14296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.555887][T14296] /dev/rnullb0: Can't open blockdev
[  441.591786][ T5946] usb 2-1: selecting invalid altsetting 0
[  441.622566][ T5946] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  441.662751][ T5946] usb 2-1: No valid video chain found.
[  441.685275][ T5946] usb 2-1: selecting invalid altsetting 0
[  441.691034][ T5946] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  441.740781][ T5946] usb 2-1: USB disconnect, device number 72
[  441.872946][T14343] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4.
[  442.051215][T14351] sp0: Synchronizing with TNC
[  442.099275][T14350] [U] è
[  442.153401][ T5945] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  442.202188][T14355] /dev/rnullb0: Can't open blockdev
[  442.303823][ T5945] usb 8-1: Using ep0 maxpacket: 8
[  442.353460][ T5945] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  442.372719][ T5945] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.392925][ T5945] usb 8-1: Product: syz
[  442.408275][ T5945] usb 8-1: Manufacturer: syz
[  442.412885][ T5945] usb 8-1: SerialNumber: syz
[  442.413875][T14360] /dev/rnullb0: Can't open blockdev
[  442.444992][ T5945] usb 8-1: config 0 descriptor??
[  442.457930][ T5945] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  442.642778][T14363] /dev/rnullb0: Can't open blockdev
[  442.815172][T14366] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2225'.
[  443.278446][T14348] netlink: 'syz.7.2219': attribute type 2 has an invalid length.
[  443.505859][T14348] /dev/rnullb0: Can't open blockdev
[  443.549082][   T43] usb 8-1: USB disconnect, device number 11
[  443.898659][T14379] /dev/rnullb0: Can't open blockdev
[  444.278196][T14381] could not allocate digest TFM handle sha224-arm64
[  444.475865][T14390] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  444.855621][T14399] /dev/rnullb0: Can't open blockdev
[  444.861115][   T30] audit: type=1800 audit(1752470894.550:150): pid=14399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2235" name="memory.events" dev="tmpfs" ino=437 res=0 errno=0
[  445.134022][T14417] /dev/rnullb0: Can't open blockdev
[  445.224159][T14421] netlink: 'syz.8.2242': attribute type 21 has an invalid length.
[  445.250956][T14421] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  445.266840][T14421] /dev/rnullb0: Can't open blockdev
[  445.445440][T14430] ieee802154 phy0 wpan0: encryption failed: -22
[  445.556871][T14434] /dev/rnullb0: Can't open blockdev
[  445.788185][T14442] /dev/rnullb0: Can't open blockdev
[  445.945532][T14445] /dev/rnullb0: Can't open blockdev
[  446.041073][T14447] /dev/rnullb0: Can't open blockdev
[  446.125693][T14449] binder_alloc_mmap_handler: 54 callbacks suppressed
[  446.125711][T14449] binder_alloc: binder_alloc_mmap_handler: 14448 200000ffd000-200001000000 already mapped failed -16
[  446.144198][T14449] binder_alloc: binder_alloc_mmap_handler: 14448 200000735000-200000736000 already mapped failed -16
[  446.171823][T14449] /dev/rnullb0: Can't open blockdev
[  446.658609][T14467] syzkaller1: entered promiscuous mode
[  446.665763][T14468] /dev/rnullb0: Can't open blockdev
[  446.671260][T14467] syzkaller1: entered allmulticast mode
[  446.724856][   T43] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  446.766307][T14470] /dev/rnullb0: Can't open blockdev
[  446.885801][ T5857] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  446.903235][   T43] usb 9-1: Using ep0 maxpacket: 32
[  446.910546][   T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.922168][   T43] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  446.937074][   T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.959814][   T43] usb 9-1: config 0 descriptor??
[  447.021266][T14477] batadv_slave_1: entered promiscuous mode
[  447.038374][T14477] syz.7.2262: attempt to access beyond end of device
[  447.038374][T14477] nbd7: rw=6144, sector=128, nr_sectors = 8 limit=0
[  447.052346][T14477] gfs2: error -5 reading superblock
[  447.057780][ T5857] usb 2-1: Using ep0 maxpacket: 32
[  447.067916][ T5857] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  447.077619][ T5857] usb 2-1: config 0 has no interface number 0
[  447.085270][T14476] batadv_slave_1: left promiscuous mode
[  447.095923][ T5857] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  447.105437][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.130643][ T5857] usb 2-1: Product: syz
[  447.135543][ T5857] usb 2-1: Manufacturer: syz
[  447.140142][ T5857] usb 2-1: SerialNumber: syz
[  447.172159][ T5857] usb 2-1: config 0 descriptor??
[  447.199432][ T5857] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  447.277824][T14482] /dev/rnullb0: Can't open blockdev
[  447.409426][ T5857] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  447.431090][ T5857] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  447.584874][T14461] /dev/rnullb0: Can't open blockdev
[  447.594219][   T43] usbhid 9-1:0.0: can't add hid device: -71
[  447.600662][   T43] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  447.619416][   T43] usb 9-1: USB disconnect, device number 9
[  447.647428][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2266'.
[  447.675075][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2266'.
[  447.704022][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2266'.
[  447.836551][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  447.844553][ T5857] usb 2-1: USB disconnect, device number 73
[  447.862796][ T5857] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  447.910529][ T5857] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  447.936827][ T5857] quatech2 2-1:0.51: device disconnected
[  448.289216][T14502] /dev/rnullb0: Can't open blockdev
[  448.558174][T14504] /dev/rnullb0: Can't open blockdev
[  448.818541][T14514] input: syz0 as /devices/virtual/input/input35
[  448.894768][T14518] /dev/rnullb0: Can't open blockdev
[  449.099410][T14524] MTD: Couldn't look up './file0': -15
[  449.643655][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  450.129392][T14544] /dev/rnullb0: Can't open blockdev
[  450.341835][T14548] /dev/rnullb0: Can't open blockdev
[  450.369068][T14552] /dev/rnullb0: Can't open blockdev
[  450.422193][ T5945] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  450.594506][T14556] /dev/rnullb0: Can't open blockdev
[  450.599281][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  450.625660][ T5945] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  450.643313][ T5857] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  450.653287][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.682608][ T5945] usb 2-1: config 0 descriptor??
[  450.697566][ T5945] pwc: Askey VC010 type 2 USB webcam detected.
[  450.810538][ T5857] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  450.824306][ T5857] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  450.843095][ T5857] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  450.890891][ T5857] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  450.945614][ T5857] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  450.963351][ T5857] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.988799][ T5857] usb 9-1: Product: syz
[  450.993922][ T5857] usb 9-1: Manufacturer: syz
[  450.998535][ T5857] usb 9-1: SerialNumber: syz
[  451.023541][ T5857] usb 9-1: config 0 descriptor??
[  451.033471][T14553] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  451.065328][ T5857] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input36
[  451.203274][  T984] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  451.219038][ T5945] pwc: recv_control_msg error -32 req 02 val 2b00
[  451.226482][ T5945] pwc: recv_control_msg error -32 req 02 val 2700
[  451.239598][ T5945] pwc: recv_control_msg error -32 req 02 val 2c00
[  451.247127][ T5945] pwc: recv_control_msg error -32 req 04 val 1000
[  451.254682][ T5945] pwc: recv_control_msg error -32 req 04 val 1300
[  451.263775][ T5945] pwc: recv_control_msg error -32 req 04 val 1400
[  451.271464][T14514] /dev/rnullb0: Can't open blockdev
[  451.278839][ T5945] pwc: recv_control_msg error -32 req 02 val 2000
[  451.366539][  T984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  451.378094][  T984] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  451.392573][  T984] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  451.406901][  T984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.421377][  T984] usb 8-1: config 0 descriptor??
[  451.490196][T14545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.507953][T14545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.521170][T14545] /dev/rnullb0: Can't open blockdev
[  451.534488][ T5945] pwc: recv_control_msg error -71 req 04 val 1500
[  451.541429][ T5945] pwc: recv_control_msg error -71 req 02 val 2500
[  451.554748][ T5945] pwc: recv_control_msg error -71 req 02 val 2400
[  451.573136][ T5945] pwc: recv_control_msg error -71 req 02 val 2600
[  451.583214][ T5945] pwc: recv_control_msg error -71 req 02 val 2900
[  451.593130][ T5945] pwc: recv_control_msg error -71 req 02 val 2800
[  451.613300][ T5945] pwc: recv_control_msg error -71 req 04 val 1100
[  451.633143][ T5945] pwc: recv_control_msg error -71 req 04 val 1200
[  451.641208][ T5945] pwc: Registered as video103.
[  451.683654][ T5945] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37
[  451.728454][ T5945] usb 2-1: USB disconnect, device number 74
[  451.813968][  T984] usbhid 8-1:0.0: can't add hid device: -71
[  451.830580][  T984] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  451.862255][  T984] usb 8-1: USB disconnect, device number 12
[  451.966882][T14572] /dev/rnullb0: Can't open blockdev
[  452.302777][T14579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2291'.
[  452.308357][    T9] usb 9-1: USB disconnect, device number 10
[  452.333829][T14579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2291'.
[  453.103736][ T5945] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  453.193740][  T984] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  453.273235][ T5945] usb 2-1: Using ep0 maxpacket: 32
[  453.282769][ T5945] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6
[  453.299906][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.303999][T14610] /dev/rnullb0: Can't open blockdev
[  453.309999][ T5945] usb 2-1: Product: syz
[  453.322175][ T5945] usb 2-1: Manufacturer: syz
[  453.328702][ T5945] usb 2-1: SerialNumber: syz
[  453.339155][ T5945] usb 2-1: config 0 descriptor??
[  453.373288][  T984] usb 6-1: Using ep0 maxpacket: 8
[  453.380148][  T984] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  453.420517][  T984] usb 6-1: config 6 has no interface number 0
[  453.434345][  T984] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  453.454969][  T984] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D
[  453.483303][  T984] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  453.505221][  T984] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  453.514951][  T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.522941][  T984] usb 6-1: Product: syz
[  453.527663][  T984] usb 6-1: Manufacturer: syz
[  453.532263][  T984] usb 6-1: SerialNumber: syz
[  453.560557][  T984] hso 6-1:6.2: Failed to find INT IN ep
[  453.571094][ T5945] usb 2-1: USB disconnect, device number 75
[  453.608713][T14615] /dev/rnullb0: Can't open blockdev
[  453.672036][T14617] /dev/rnullb0: Can't open blockdev
[  453.713360][ T5857] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  453.800609][  T984] usb 6-1: USB disconnect, device number 68
[  453.887229][ T5857] usb 8-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  453.905847][ T5857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.922305][ T5857] usb 8-1: config 0 descriptor??
[  453.931068][ T5857] gspca_main: spca508-2.14.0 probing 8086:0110
[  454.132814][ T5857] gspca_spca508: reg_read err -32
[  454.144357][ T5857] gspca_spca508: reg_read err -32
[  454.162580][ T5857] gspca_spca508: reg_read err -32
[  454.179148][ T5857] gspca_spca508: reg_read err -32
[  454.198777][T14629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2306'.
[  454.237627][T14629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2306'.
[  454.664445][ T5857] gspca_spca508: reg write: error -71
[  454.670007][ T5857] spca508 8-1:0.0: probe with driver spca508 failed with error -71
[  454.694261][ T5857] usb 8-1: USB disconnect, device number 13
[  454.744439][T14638] overlay: ./file0 is not a directory
[  454.772079][T14638] /dev/rnullb0: Can't open blockdev
[  454.966354][T14646] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  455.010285][T14646] /dev/rnullb0: Can't open blockdev
[  455.020830][T14649] nfs: Unknown parameter 'defcontext'
[  455.276562][   T96] block nbd0: Possible stuck request ffff8880254c5080: control (read@0,1024B). Runtime 150 seconds
[  455.279913][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'.
[  455.293198][   T96] block nbd0: Possible stuck request ffff8880254c5240: control (read@1024,1024B). Runtime 150 seconds
[  455.382060][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2316'.
[  455.393500][ T7699] usb 6-1: new full-speed USB device number 69 using dummy_hcd
[  455.558031][ T7699] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  455.575875][ T7699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.606113][ T7699] usb 6-1: config 0 descriptor??
[  455.620354][ T7699] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  455.673858][ T5945] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  455.748907][T14679] program syz.7.2321 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  455.851987][ T5945] usb 2-1: Using ep0 maxpacket: 8
[  455.860313][ T5945] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81
[  455.901816][ T5945] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.933550][ T5945] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  455.942640][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.169335][T14652] kvm: pic: single mode not supported
[  456.170379][T14652] kvm: pic: single mode not supported
[  456.193194][    T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  456.290983][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'.
[  456.321373][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'.
[  456.385374][    T9] usb 8-1: config index 0 descriptor too short (expected 62780, got 441)
[  456.399043][    T9] usb 8-1: config 86 has too many interfaces: 190, using maximum allowed: 32
[  456.693171][    T9] usb 8-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config
[  456.725979][    T9] usb 8-1: config 86 has 0 interfaces, different from the descriptor's value: 190
[  456.756495][    T9] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  456.771864][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.817244][T14694] netlink: 300 bytes leftover after parsing attributes in process `syz.8.2325'.
[  456.838293][T14694] unsupported nlmsg_type 40
[  457.006402][T14683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.023683][T14683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.048544][    T9] usb 8-1: string descriptor 0 read error: -71
[  457.067640][    T9] usb 8-1: USB disconnect, device number 14
[  457.150392][ T5945] usb 2-1: string descriptor 0 read error: -71
[  457.171451][ T5945] hub 2-1:32.0: bad descriptor, ignoring hub
[  457.204515][ T5945] hub 2-1:32.0: probe with driver hub failed with error -5
[  457.278827][ T5945] usb 2-1: USB disconnect, device number 76
[  457.573223][    T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  457.715913][T14712] /dev/rnullb0: Can't open blockdev
[  457.755935][    T9] usb 8-1: Using ep0 maxpacket: 16
[  457.764194][    T9] usb 8-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config
[  457.793440][    T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  457.820830][    T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  457.845599][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.863151][    T9] usb 8-1: Product: syz
[  457.871319][    T9] usb 8-1: Manufacturer: syz
[  457.880907][    T9] usb 8-1: SerialNumber: syz
[  457.888605][T14715] /dev/rnullb0: Can't open blockdev
[  457.994452][ T7699] gp8psk: usb out operation failed.
[  457.999988][ T7699] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  458.055808][ T7699] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  458.162868][T14720] /dev/rnullb0: Can't open blockdev
[  458.177518][T14722] /dev/rnullb0: Can't open blockdev
[  458.273393][ T5945] usb 6-1: USB disconnect, device number 69
[  458.324588][    T9] usb 8-1: 0:2 : does not exist
[  458.527121][T14738] /dev/rnullb0: Can't open blockdev
[  458.527121][T14683] /dev/rnullb0: Can't open blockdev
[  458.551753][    T9] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5)
[  458.578358][    T9] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5)
[  458.608127][    T9] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5)
[  458.633681][ T1214] usb 2-1: new full-speed USB device number 77 using dummy_hcd
[  458.672004][    T9] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5)
[  458.689168][    T9] usb 8-1: 5:0: failed to get current value for ch 1 (-22)
[  458.709046][    T9] usb 8-1: 5:0: cannot get min/max values for control 8 (id 5)
[  458.722655][    T9] usb 8-1: 5:0: cannot get min/max values for control 8 (id 5)
[  458.749052][    T9] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5)
[  458.759352][T14747] /dev/rnullb0: Can't open blockdev
[  458.761742][    T9] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5)
[  458.778688][    T9] usb 8-1: USB disconnect, device number 15
[  458.814397][ T1214] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30
[  458.817106][ T7465] udevd[7465]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  458.868930][ T1214] usb 2-1: config 0 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 33
[  458.898839][ T1214] usb 2-1: config 0 interface 0 has no altsetting 0
[  458.910235][ T1214] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[  458.937229][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.968646][ T1214] usb 2-1: config 0 descriptor??
[  459.030277][T14753] /dev/rnullb0: Can't open blockdev
[  459.390099][ T1214] kye 0003:0458:501B.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  459.403945][    T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  459.417744][ T1214] kye 0003:0458:501B.0015: hidraw0: USB HID v8.00 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0
[  459.435902][ T1214] kye 0003:0458:501B.0015: tablet-enabling feature report not found
[  459.453174][ T1214] kye 0003:0458:501B.0015: tablet enabling failed
[  459.564964][    T9] usb 8-1: config 220 has an invalid interface number: 76 but max is 2
[  459.587434][    T9] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  459.599524][    T9] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  459.616861][    T9] usb 8-1: config 220 has no interface number 2
[  459.625697][    T9] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  459.646204][T14728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.654006][    T9] usb 8-1: config 220 interface 0 has no altsetting 0
[  459.661357][    T9] usb 8-1: config 220 interface 76 has no altsetting 0
[  459.663785][T14728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.674732][    T9] usb 8-1: config 220 interface 1 has no altsetting 0
[  459.689726][    T9] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  459.702026][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.714373][    T9] usb 8-1: Product: syz
[  459.718560][    T9] usb 8-1: Manufacturer: syz
[  459.730854][T14728] /dev/rnullb0: Can't open blockdev
[  459.731485][    T9] usb 8-1: SerialNumber: syz
[  459.794270][ T7699] usb 2-1: USB disconnect, device number 77
[  459.905243][T14775] vivid-001: disconnect
[  459.930747][T14775] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2348'.
[  459.949485][T14758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.971565][T14758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.974150][T14775] /dev/rnullb0: Can't open blockdev
[  459.984072][T14758] /dev/rnullb0: Can't open blockdev
[  459.996282][T14774] vivid-001: reconnect
[  460.001367][T14758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.031444][T14758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.059701][    T9] usb 8-1: selecting invalid altsetting 0
[  460.078347][    T9] usb 8-1: Found UVC 7.01 device syz (8086:0b07)
[  460.086403][    T9] usb 8-1: No valid video chain found.
[  460.108218][    T9] usb 8-1: selecting invalid altsetting 0
[  460.123144][    T9] usbtest 8-1:220.1: probe with driver usbtest failed with error -22
[  460.156295][    T9] usb 8-1: USB disconnect, device number 16
[  460.870706][T14803] gfs2: not a GFS2 filesystem
[  461.003339][T14805] random: crng reseeded on system resumption
[  461.023282][    T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  461.115285][ T5945] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  461.143924][T14810] /dev/rnullb0: Can't open blockdev
[  461.193248][    T9] usb 8-1: Using ep0 maxpacket: 32
[  461.206575][    T9] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.236826][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  461.248759][    T9] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  461.260018][    T9] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  461.273097][    T9] usb 8-1: Product: syz
[  461.280297][    T9] usb 8-1: config 0 descriptor??
[  461.289868][ T5945] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  461.313264][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.321303][ T5945] usb 6-1: Product: syz
[  461.329948][ T5945] usb 6-1: Manufacturer: syz
[  461.343291][ T5945] usb 6-1: SerialNumber: syz
[  461.359070][ T5945] usb 6-1: config 0 descriptor??
[  461.502342][T14818] /dev/rnullb0: Can't open blockdev
[  461.507766][    T9] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0
[  461.507805][    T9] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0
[  461.507831][    T9] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0
[  461.507857][    T9] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0
[  461.507882][    T9] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0
[  461.516195][    T9] waterforce 0003:1044:7A4D.0016: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.7-1/input0
[  461.576327][ T5945] hso 6-1:0.0: Can't find BULK IN endpoint
[  461.593743][ T5945] usb-storage 6-1:0.0: USB Mass Storage device detected
[  461.726080][    T9] waterforce 0003:1044:7A4D.0016: fw version request failed with -38
[  461.769026][    T9] usb 8-1: USB disconnect, device number 17
[  461.783477][ T5945] usb 6-1: USB disconnect, device number 70
[  461.826974][ T5857] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  461.921812][T14828] fido_id[14828]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  461.972092][T14830] /dev/rnullb0: Can't open blockdev
[  461.977782][ T5857] usb 2-1: device descriptor read/64, error -71
[  462.223554][ T5857] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  462.258481][T14835] /dev/rnullb0: Can't open blockdev
[  462.285385][T14837] /dev/rnullb0: Can't open blockdev
[  462.363794][ T5857] usb 2-1: device descriptor read/64, error -71
[  462.475597][T14843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.493921][ T5857] usb usb2-port1: attempt power cycle
[  462.508528][T14843] /dev/rnullb0: Can't open blockdev
[  462.581916][T14847] /dev/rnullb0: Can't open blockdev
[  462.589038][T14848] /dev/rnullb0: Can't open blockdev
[  462.663286][ T7699] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  462.783276][ T5945] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  462.834173][ T7699] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  462.843825][ T5857] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  462.852166][ T7699] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  462.861139][ T7699] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  462.872195][ T7699] usb 8-1: config 0 interface 0 has no altsetting 0
[  462.879744][ T5857] usb 2-1: device descriptor read/8, error -71
[  462.885994][    T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  462.895078][ T7699] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  462.904176][ T7699] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  462.915146][ T7699] usb 8-1: config 0 interface 0 has no altsetting 0
[  462.922932][ T7699] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  462.932103][ T7699] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  462.933263][ T5945] usb 6-1: Using ep0 maxpacket: 32
[  462.943220][ T7699] usb 8-1: config 0 interface 0 has no altsetting 0
[  462.944376][ T7699] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  462.964448][ T7699] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  462.968845][ T5945] usb 6-1: config 0 has an invalid interface number: 28 but max is 0
[  462.976047][ T7699] usb 8-1: config 0 interface 0 has no altsetting 0
[  462.990664][ T5945] usb 6-1: config 0 has no interface number 0
[  462.991577][ T7699] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.001073][ T5945] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=3f.37
[  463.006736][ T7699] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.019715][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.025982][ T7699] usb 8-1: config 0 interface 0 has no altsetting 0
[  463.041987][ T7699] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.045142][ T5945] usb 6-1: Product: syz
[  463.051994][ T7699] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.066590][ T7699] usb 8-1: config 0 interface 0 has no altsetting 0
[  463.068578][ T5945] usb 6-1: Manufacturer: syz
[  463.075795][ T7699] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.080162][ T5945] usb 6-1: SerialNumber: syz
[  463.087386][    T9] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  463.101051][ T7699] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.112010][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.120284][ T7699] usb 8-1: config 0 interface 0 has no altsetting 0
[  463.121279][ T5945] usb 6-1: config 0 descriptor??
[  463.129580][    T9] usb 9-1: config 0 descriptor??
[  463.137102][ T5857] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  463.146355][ T7699] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  463.152335][ T5945] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  463.158839][ T7699] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  463.173512][ T7699] usb 8-1: config 0 interface 0 has no altsetting 0
[  463.176299][ T5945] command write [95] error -22
[  463.182574][ T7699] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  463.195045][ T7699] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  463.203679][ T5857] usb 2-1: device descriptor read/8, error -71
[  463.210271][ T7699] usb 8-1: Product: syz
[  463.214555][ T7699] usb 8-1: Manufacturer: syz
[  463.219193][ T7699] usb 8-1: SerialNumber: syz
[  463.227997][ T7699] usb 8-1: config 0 descriptor??
[  463.242203][ T7699] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[  463.313973][ T5857] usb usb2-port1: unable to enumerate USB device
[  463.360386][ T5857] usb 6-1: USB disconnect, device number 71
[  463.551084][T14850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.560008][T14850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.573193][T14850] /dev/rnullb0: Can't open blockdev
[  463.579796][    T9] ath6kl: Failed to read usb control message: -71
[  463.592842][    T9] ath6kl: Unable to read the bmi data from the device: -71
[  463.602712][    T9] ath6kl: Unable to recv target info: -71
[  463.620298][    T9] ath6kl: Failed to init ath6kl core: -71
[  463.627303][    T9] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71
[  463.644787][    T9] usb 9-1: USB disconnect, device number 11
[  463.859760][T14854] qnx4: no qnx4 filesystem (no root dir).
[  463.890250][T14854] netlink: 244 bytes leftover after parsing attributes in process `syz.7.2366'.
[  463.932802][T14856] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2371'.
[  463.943916][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2371'.
[  463.952940][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2371'.
[  463.964159][T14856] /dev/rnullb0: Can't open blockdev
[  464.011584][T14858] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2372'.
[  464.023002][T14858] fuse: Bad value for 'fd'
[  464.122326][T14860] fuseblk: Bad value for 'fd'
[  464.141765][T14860] syz.5.2373: attempt to access beyond end of device
[  464.141765][T14860] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  464.176612][T14862] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2374'.
[  464.217435][T14862] overlayfs: missing 'lowerdir'
[  464.424742][T14866] /dev/rnullb0: Can't open blockdev
[  464.683593][ T7699] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  464.773221][   T43] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  464.853345][ T7699] usb 6-1: Using ep0 maxpacket: 32
[  464.860072][ T7699] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  464.871241][ T7699] usb 6-1: config 0 has no interface number 0
[  464.878390][ T7699] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  464.893834][ T7699] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  464.902951][ T7699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.911087][ T7699] usb 6-1: Product: syz
[  464.915266][   T43] usb 9-1: device descriptor read/64, error -71
[  464.921831][ T7699] usb 6-1: Manufacturer: syz
[  464.926486][ T7699] usb 6-1: SerialNumber: syz
[  464.942833][ T7699] usb 6-1: config 0 descriptor??
[  464.960687][ T7699] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  464.971061][ T7699] em28xx 6-1:0.132: Video interface 132 found: isoc
[  465.023462][    T9] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  465.153269][   T43] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  465.153877][T14877] /dev/rnullb0: Can't open blockdev
[  465.183287][    T9] usb 2-1: Using ep0 maxpacket: 16
[  465.194140][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.204843][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  465.213932][    T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  465.227182][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.235362][    T9] usb 2-1: Product: syz
[  465.239696][    T9] usb 2-1: Manufacturer: syz
[  465.246789][    T9] usb 2-1: SerialNumber: syz
[  465.255358][    T9] usb 2-1: config 0 descriptor??
[  465.293309][   T43] usb 9-1: device descriptor read/64, error -71
[  465.413621][   T43] usb usb9-port1: attempt power cycle
[  465.488927][ T1214] usb 8-1: USB disconnect, device number 18
[  465.514677][ T1214] yurex 8-1:0.0: USB YUREX #0 now disconnected
[  465.561918][    T9] usb 2-1: USB disconnect, device number 82
[  465.763111][   T43] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  466.056151][ T7699] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  466.133869][   T43] usb 9-1: device descriptor read/8, error -71
[  466.147709][ T7699] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  466.180075][ T7699] em28xx 6-1:0.132: board has no eeprom
[  466.270103][ T7699] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  466.288358][ T7699] em28xx 6-1:0.132: analog set to isoc mode.
[  466.300097][ T5857] em28xx 6-1:0.132: Registering V4L2 extension
[  466.369770][T14888] /dev/rnullb0: Can't open blockdev
[  466.375288][   T43] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  466.398908][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  466.409761][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  466.414266][   T43] usb 9-1: device descriptor read/8, error -71
[  466.461121][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  466.496464][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[  466.542842][T14891] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2384'.
[  466.554592][   T43] usb usb9-port1: unable to enumerate USB device
[  466.567140][T14893] /dev/rnullb0: Can't open blockdev
[  466.571498][T14891] /dev/rnullb0: Can't open blockdev
[  466.575482][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0x84 (error=-5)
[  466.615863][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0x86 (error=-5)
[  466.644766][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0x94 (error=-5)
[  466.667855][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0x96 (error=-5)
[  466.751504][T14899] /dev/rnullb0: Can't open blockdev
[  466.781386][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5)
[  466.811069][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5)
[  466.815912][T14900] /dev/rnullb0: Can't open blockdev
[  466.843949][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5)
[  466.872097][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5)
[  466.900261][ T5857] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5)
[  466.912074][ T5857] em28xx 6-1:0.132: Config register raw data: 0xfffffffb
[  466.922032][ T5857] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  466.930453][ T5857] em28xx 6-1:0.132: No AC97 audio processor
[  466.989378][ T5857] usb 6-1: Decoder not found
[  467.010441][ T5857] em28xx 6-1:0.132: failed to create media graph
[  467.029252][ T5857] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  467.079357][ T5857] em28xx 6-1:0.132: Remote control support is not available for this card.
[  467.473726][    T9] usb 6-1: USB disconnect, device number 72
[  467.534773][    T9] em28xx 6-1:0.132: Disconnecting em28xx
[  467.540587][    T9] em28xx 6-1:0.132: Closing input extension
[  467.593445][    T9] em28xx 6-1:0.132: Freeing device
[  467.874043][T14937] /dev/rnullb0: Can't open blockdev
[  468.175843][T14943] fuse: Unknown parameter '000000000000000000030x000000000000000500000000000000000005'
[  468.680716][T14962] /dev/rnullb0: Can't open blockdev
[  468.925086][T14971] syzkaller1: entered promiscuous mode
[  468.940272][T14971] syzkaller1: entered allmulticast mode
[  469.770021][T15016] /dev/rnullb0: Can't open blockdev
[  469.800726][T15011] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  469.869112][   T30] audit: type=1326 audit(1752470919.580:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15022 comm="syz.8.2413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f628ed8e929 code=0x0
[  469.890934][    C0] vkms_vblank_simulate: vblank timer overrun
[  469.929203][T15024] /dev/rnullb0: Can't open blockdev
[  470.057903][T15028] Bluetooth: hci5: Frame reassembly failed (-84)
[  470.071242][   T35] Bluetooth: hci5: Frame reassembly failed (-84)
[  470.102075][   T35] Bluetooth: hci5: Frame reassembly failed (-90)
[  470.363149][ T1214] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  470.493146][ T1214] usb 2-1: device descriptor read/64, error -71
[  470.688028][T15033] /dev/rnullb0: Can't open blockdev
[  470.733459][ T1214] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  470.825387][T15042] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2419'.
[  470.883386][ T1214] usb 2-1: device descriptor read/64, error -71
[  470.993437][ T1214] usb usb2-port1: attempt power cycle
[  471.033200][   T43] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  471.071591][T15047] syz.5.2421 (15047) used greatest stack depth: 18776 bytes left
[  471.185340][   T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.196655][   T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.206746][   T43] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  471.216380][   T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.226639][   T43] usb 9-1: config 0 descriptor??
[  471.343177][ T5946] usb 6-1: new full-speed USB device number 73 using dummy_hcd
[  471.350876][ T1214] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  471.383798][ T1214] usb 2-1: device descriptor read/8, error -71
[  471.515794][ T5946] usb 6-1: config 0 has an invalid interface number: 30 but max is 0
[  471.524148][ T5946] usb 6-1: config 0 has no interface number 0
[  471.530310][ T5946] usb 6-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2
[  471.540916][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.551429][ T5946] usb 6-1: config 0 descriptor??
[  471.562892][ T5946] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state.
[  471.570949][ T5946] usb 6-1: setting power ON
[  471.576028][ T5946] dvb-usb: bulk message failed: -22 (2/0)
[  471.623397][ T1214] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  471.639997][   T43] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0
[  471.648673][   T43] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0
[  471.657117][ T1214] usb 2-1: device descriptor read/8, error -71
[  471.666653][   T43] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.0017/input/input39
[  471.695396][   T43] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0
[  471.728835][ T5946] dvb-usb: bulk message failed: -22 (1/0)
[  471.747289][   T43] usb 9-1: USB disconnect, device number 16
[  471.764993][T15052] /dev/rnullb0: Can't open blockdev
[  471.783459][ T1214] usb usb2-port1: unable to enumerate USB device
[  471.853320][ T5946] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  471.872626][T15054] fido_id[15054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  471.892604][ T5946] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19)
[  471.901986][ T5946] dvb_usb_cxusb 6-1:0.30: probe with driver dvb_usb_cxusb failed with error -22
[  471.941082][ T5946] usb 6-1: USB disconnect, device number 73
[  472.074956][ T5176] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  472.075320][ T5865] Bluetooth: hci5: command 0x1003 tx timeout
[  472.150530][T15059] /dev/rnullb0: Can't open blockdev
[  472.160972][T15059] /dev/rnullb0: Can't open blockdev
[  472.218923][T15063] /dev/rnullb0: Can't open blockdev
[  472.293555][   T43] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[  472.350265][T15069] /dev/rnullb0: Can't open blockdev
[  472.465201][   T43] usb 9-1: unable to get BOS descriptor or descriptor too short
[  472.474167][   T43] usb 9-1: not running at top speed; connect to a high speed hub
[  472.482837][   T43] usb 9-1: config 0 has an invalid interface number: 97 but max is 0
[  472.491357][   T43] usb 9-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  472.500150][   T43] usb 9-1: config 0 has no interface number 0
[  472.506437][   T43] usb 9-1: config 0 interface 97 altsetting 3 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  472.518035][   T43] usb 9-1: config 0 interface 97 altsetting 3 endpoint 0x5 has invalid wMaxPacketSize 0
[  472.531556][   T43] usb 9-1: config 0 interface 97 altsetting 3 has an endpoint descriptor with address 0x5E, changing to 0xE
[  472.543554][   T43] usb 9-1: config 0 interface 97 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64
[  472.555239][   T43] usb 9-1: config 0 interface 97 altsetting 3 endpoint 0x7 has invalid maxpacket 2031, setting to 64
[  472.566800][   T43] usb 9-1: config 0 interface 97 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  472.577536][   T43] usb 9-1: config 0 interface 97 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  472.588188][   T43] usb 9-1: config 0 interface 97 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  472.598812][   T43] usb 9-1: config 0 interface 97 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  472.609440][   T43] usb 9-1: config 0 interface 97 altsetting 3 endpoint 0x9 has invalid maxpacket 423, setting to 64
[  472.620248][   T43] usb 9-1: config 0 interface 97 altsetting 3 has a duplicate endpoint with address 0x8, skipping
[  472.630926][   T43] usb 9-1: config 0 interface 97 altsetting 3 has a duplicate endpoint with address 0x2, skipping
[  472.643992][   T43] usb 9-1: config 0 interface 97 altsetting 3 has a duplicate endpoint with address 0x5, skipping
[  472.656376][   T43] usb 9-1: config 0 interface 97 has no altsetting 0
[  472.665959][   T43] usb 9-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=eb.e7
[  472.675069][   T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.683099][   T43] usb 9-1: Product: syz
[  472.687254][   T43] usb 9-1: Manufacturer: syz
[  472.691823][   T43] usb 9-1: SerialNumber: syz
[  472.698983][   T43] usb 9-1: config 0 descriptor??
[  472.909941][T15056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.918945][T15056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.172769][T15079] /dev/rnullb0: Can't open blockdev
[  473.297877][T15085] /dev/sg0: Can't lookup blockdev
[  473.540978][T15095] /dev/rnullb0: Can't open blockdev
[  473.597759][T15097] binder: 15096:15097 ioctl c018620b 200000000000 returned -14
[  473.669654][T15099] syz.1.2436: attempt to access beyond end of device
[  473.669654][T15099] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0
[  473.688989][T15099] EXT4-fs (nbd1): unable to read superblock
[  473.733371][    T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  473.767823][T15101] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2437'.
[  473.773864][T15102] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2437'.
[  473.791776][T15101] /dev/rnullb0: Can't open blockdev
[  473.883133][    T9] usb 8-1: Using ep0 maxpacket: 16
[  473.899928][    T9] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  473.925771][    T9] usb 8-1: config 0 has no interface number 0
[  473.936784][    T9] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  473.949482][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.961294][    T9] usb 8-1: Product: syz
[  473.971178][    T9] usb 8-1: Manufacturer: syz
[  473.978304][    T9] usb 8-1: SerialNumber: syz
[  473.991467][    T9] usb 8-1: config 0 descriptor??
[  474.002168][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  475.382058][T15072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  475.569584][T15117] /dev/rnullb0: Can't open blockdev
[  475.593067][   T43] belkin_sa 9-1:0.97: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  475.616187][   T43] usb 9-1: bcdDevice: ebe7, bfc: 0
[  475.630111][   T43] usb 9-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  475.719666][   T43] usb 9-1: USB disconnect, device number 17
[  475.723445][    T9] gspca_spca1528: reg_w err -110
[  475.745034][T15119] /dev/rnullb0: Can't open blockdev
[  475.750974][    T9] spca1528 8-1:0.1: probe with driver spca1528 failed with error -110
[  475.782491][   T43] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  475.801950][T15123] /dev/rnullb0: Can't open blockdev
[  475.822836][   T43] belkin_sa 9-1:0.97: device disconnected
[  475.910752][T15127] /dev/rnullb0: Can't open blockdev
[  476.107158][T15133] syzkaller1: entered promiscuous mode
[  476.117647][T15133] syzkaller1: entered allmulticast mode
[  476.151591][T15133] /dev/rnullb0: Can't open blockdev
[  476.207415][T15136] /dev/rnullb0: Can't open blockdev
[  476.227870][T15136] /dev/rnullb0: Can't open blockdev
[  476.236226][T15136] /dev/rnullb0: Can't open blockdev
[  476.242262][T15136] /dev/rnullb0: Can't open blockdev
[  476.249481][T15136] /dev/rnullb0: Can't open blockdev
[  476.260019][T15136] /dev/rnullb0: Can't open blockdev
[  476.286099][T15136] /dev/rnullb0: Can't open blockdev
[  476.307519][T15136] /dev/rnullb0: Can't open blockdev
[  476.324573][T15136] /dev/rnullb0: Can't open blockdev
[  476.332727][T15136] /dev/rnullb0: Can't open blockdev
[  476.352519][T15136] /dev/rnullb0: Can't open blockdev
[  476.370166][T15136] /dev/rnullb0: Can't open blockdev
[  476.391426][T15136] /dev/rnullb0: Can't open blockdev
[  476.407710][T15136] /dev/rnullb0: Can't open blockdev
[  476.420157][T15136] /dev/rnullb0: Can't open blockdev
[  476.427542][T15136] /dev/rnullb0: Can't open blockdev
[  476.434842][T15140] /dev/rnullb0: Can't open blockdev
[  476.452515][T15136] /dev/rnullb0: Can't open blockdev
[  476.481450][T15136] /dev/rnullb0: Can't open blockdev
[  476.497955][T15136] /dev/rnullb0: Can't open blockdev
[  476.524658][T15136] /dev/rnullb0: Can't open blockdev
[  476.530430][T15136] /dev/rnullb0: Can't open blockdev
[  476.543996][T15136] /dev/rnullb0: Can't open blockdev
[  476.552676][T15136] /dev/rnullb0: Can't open blockdev
[  476.591499][T15136] /dev/rnullb0: Can't open blockdev
[  476.599688][T15136] /dev/rnullb0: Can't open blockdev
[  476.612630][T15136] /dev/rnullb0: Can't open blockdev
[  476.621129][T15136] /dev/rnullb0: Can't open blockdev
[  476.622728][ T7699] usb 8-1: USB disconnect, device number 19
[  476.640047][T15136] /dev/rnullb0: Can't open blockdev
[  476.646211][T15136] /dev/rnullb0: Can't open blockdev
[  476.652076][T15136] /dev/rnullb0: Can't open blockdev
[  476.705784][T15136] /dev/rnullb0: Can't open blockdev
[  476.711483][T15136] /dev/rnullb0: Can't open blockdev
[  476.728288][T15136] /dev/rnullb0: Can't open blockdev
[  477.056608][T15157] /dev/rnullb0: Can't open blockdev
[  477.060828][T15159] /dev/rnullb0: Can't open blockdev
[  477.137739][T15164] /dev/rnullb0: Can't open blockdev
[  477.164641][   T43] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  477.284357][ T1214] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  477.333692][   T43] usb 8-1: Using ep0 maxpacket: 32
[  477.340290][   T43] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  477.348668][   T43] usb 8-1: config 0 has no interface number 0
[  477.354870][   T43] usb 8-1: config 0 interface 12 has no altsetting 0
[  477.364645][   T43] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  477.373785][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.381752][   T43] usb 8-1: Product: syz
[  477.386149][   T43] usb 8-1: Manufacturer: syz
[  477.390933][   T43] usb 8-1: SerialNumber: syz
[  477.397748][   T43] usb 8-1: config 0 descriptor??
[  477.423200][ T1214] usb 9-1: device descriptor read/64, error -71
[  477.533139][ T7699] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  477.533172][ T5946] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  477.673633][ T1214] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  477.686479][ T7699] usb 2-1: Using ep0 maxpacket: 16
[  477.693142][ T5946] usb 6-1: Using ep0 maxpacket: 16
[  477.699581][ T7699] usb 2-1: unable to read config index 0 descriptor/start: -61
[  477.703306][ T5946] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  477.712321][ T7699] usb 2-1: can't read configurations, error -61
[  477.717018][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.731008][ T5946] usb 6-1: Product: syz
[  477.735499][ T5946] usb 6-1: Manufacturer: syz
[  477.740130][ T5946] usb 6-1: SerialNumber: syz
[  477.750354][ T5946] r8152-cfgselector 6-1: Unknown version 0x0000
[  477.757899][ T5946] r8152-cfgselector 6-1: config 0 descriptor??
[  477.767195][ T5946] hub 6-1:0.0: bad descriptor, ignoring hub
[  477.773434][ T5946] hub 6-1:0.0: probe with driver hub failed with error -5
[  477.803228][ T1214] usb 9-1: device descriptor read/64, error -71
[  477.843217][ T7699] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  477.925314][ T1214] usb usb9-port1: attempt power cycle
[  478.003360][ T7699] usb 2-1: Using ep0 maxpacket: 16
[  478.010561][ T7699] usb 2-1: unable to read config index 0 descriptor/start: -61
[  478.019015][T15143] /dev/rnullb0: Can't open blockdev
[  478.029756][ T7699] usb 2-1: can't read configurations, error -61
[  478.031300][   T43] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71
[  478.036511][ T7699] usb usb2-port1: attempt power cycle
[  478.051063][   T43] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[  478.058605][   T43] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  478.066705][   T43] f81534 8-1:0.12: probe with driver f81534 failed with error -71
[  478.082648][   T43] usb 8-1: USB disconnect, device number 20
[  478.266017][ T1214] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  478.293792][ T1214] usb 9-1: device descriptor read/8, error -71
[  478.403364][ T7699] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  478.409685][T15171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.419839][T15171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.433994][ T7699] usb 2-1: Using ep0 maxpacket: 16
[  478.450410][ T7699] usb 2-1: unable to read config index 0 descriptor/start: -61
[  478.458874][ T7699] usb 2-1: can't read configurations, error -61
[  478.539184][ T1214] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  478.574313][ T1214] usb 9-1: device descriptor read/8, error -71
[  478.595672][   T43] r8152-cfgselector 6-1: USB disconnect, device number 74
[  478.604284][ T7699] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  478.644953][ T7699] usb 2-1: Using ep0 maxpacket: 16
[  478.652208][ T7699] usb 2-1: unable to read config index 0 descriptor/start: -61
[  478.660975][ T7699] usb 2-1: can't read configurations, error -61
[  478.672886][ T7699] usb usb2-port1: unable to enumerate USB device
[  478.685596][ T1214] usb usb9-port1: unable to enumerate USB device
[  482.710430][T15408] /dev/rnullb0: Can't open blockdev
[  482.854274][T15416] netlink: 2384 bytes leftover after parsing attributes in process `syz.7.2571'.
[  482.911621][T15420] /dev/rnullb0: Can't open blockdev
[  483.015855][ T5946] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  483.029030][ T5946] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  483.249170][T15434] netlink: 'syz.8.2576': attribute type 1 has an invalid length.
[  483.257622][T15434] netlink: 'syz.8.2576': attribute type 101 has an invalid length.
[  483.265662][T15434] netlink: 808 bytes leftover after parsing attributes in process `syz.8.2576'.
[  483.484105][T15443] /dev/rnullb0: Can't open blockdev
[  483.643268][ T5945] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  483.701066][T15454] overlay: ./file0 is not a directory
[  483.793151][ T5945] usb 9-1: device descriptor read/64, error -71
[  484.035705][ T5945] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[  484.098188][T15473] hugetlbfs: syz.1.2588 (15473): Using mlock ulimits for SHM_HUGETLB is obsolete
[  484.203687][ T5945] usb 9-1: device descriptor read/64, error -71
[  484.337091][ T5945] usb usb9-port1: attempt power cycle
[  484.537889][T15501] /dev/rnullb0: Can't open blockdev
[  484.540904][T15502] sctp: [Deprecated]: syz.5.2598 (pid 15502) Use of int in maxseg socket option.
[  484.540904][T15502] Use struct sctp_assoc_value instead
[  484.560859][T15504] /dev/rnullb0: Can't open blockdev
[  484.656044][T15508] syz.5.2600: attempt to access beyond end of device
[  484.656044][T15508] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  484.683126][ T5945] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[  484.690882][T15508] efs: cannot read volume header
[  484.715674][ T5945] usb 9-1: device descriptor read/8, error -71
[  484.732478][T15512] /dev/rnullb0: Can't open blockdev
[  484.821730][T15516] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  484.846898][T15515] netlink: 'syz.7.2603': attribute type 10 has an invalid length.
[  484.858737][T15516] /dev/rnullb0: Can't open blockdev
[  484.859098][T15519] /dev/rnullb0: Can't open blockdev
[  484.870321][T15515] team0: Port device team_slave_0 removed
[  484.973457][ T5945] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[  485.023859][ T5945] usb 9-1: device descriptor read/8, error -71
[  485.047681][T15529] /dev/rnullb0: Can't open blockdev
[  485.133740][ T5945] usb usb9-port1: unable to enumerate USB device
[  485.138432][T15534] /dev/rnullb0: Can't open blockdev
[  485.146413][T15534] /dev/rnullb0: Can't open blockdev
[  485.163097][T15534] /dev/rnullb0: Can't open blockdev
[  485.168709][T15534] /dev/rnullb0: Can't open blockdev
[  485.177538][T15534] /dev/rnullb0: Can't open blockdev
[  485.187056][T15534] /dev/rnullb0: Can't open blockdev
[  485.187550][    T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  485.192908][T15534] /dev/rnullb0: Can't open blockdev
[  485.206535][T15534] /dev/rnullb0: Can't open blockdev
[  485.212110][T15534] /dev/rnullb0: Can't open blockdev
[  485.217797][T15534] /dev/rnullb0: Can't open blockdev
[  485.228150][T15534] /dev/rnullb0: Can't open blockdev
[  485.248647][T15534] /dev/rnullb0: Can't open blockdev
[  485.249008][T15534] /dev/rnullb0: Can't open blockdev
[  485.249362][T15534] /dev/rnullb0: Can't open blockdev
[  485.249775][T15534] /dev/rnullb0: Can't open blockdev
[  485.250130][T15534] /dev/rnullb0: Can't open blockdev
[  485.250475][T15534] /dev/rnullb0: Can't open blockdev
[  485.250880][T15534] /dev/rnullb0: Can't open blockdev
[  485.251230][T15534] /dev/rnullb0: Can't open blockdev
[  485.251592][T15534] /dev/rnullb0: Can't open blockdev
[  485.251998][T15534] /dev/rnullb0: Can't open blockdev
[  485.252364][T15534] /dev/rnullb0: Can't open blockdev
[  485.252715][T15534] /dev/rnullb0: Can't open blockdev
[  485.255668][T15534] /dev/rnullb0: Can't open blockdev
[  485.256075][T15534] /dev/rnullb0: Can't open blockdev
[  485.256521][T15534] /dev/rnullb0: Can't open blockdev
[  485.256886][T15534] /dev/rnullb0: Can't open blockdev
[  485.257246][T15534] /dev/rnullb0: Can't open blockdev
[  485.257674][T15534] /dev/rnullb0: Can't open blockdev
[  485.258042][T15534] /dev/rnullb0: Can't open blockdev
[  485.258406][T15534] /dev/rnullb0: Can't open blockdev
[  485.259256][T15534] /dev/rnullb0: Can't open blockdev
[  485.259624][T15534] /dev/rnullb0: Can't open blockdev
[  485.260025][T15534] /dev/rnullb0: Can't open blockdev
[  485.260377][T15534] /dev/rnullb0: Can't open blockdev
[  485.260729][T15534] /dev/rnullb0: Can't open blockdev
[  485.261125][T15534] /dev/rnullb0: Can't open blockdev
[  485.261498][T15534] /dev/rnullb0: Can't open blockdev
[  485.261848][T15534] /dev/rnullb0: Can't open blockdev
[  485.262243][T15534] /dev/rnullb0: Can't open blockdev
[  485.262604][T15534] /dev/rnullb0: Can't open blockdev
[  485.262964][T15534] /dev/rnullb0: Can't open blockdev
[  485.266917][T15534] /dev/rnullb0: Can't open blockdev
[  485.267298][T15534] /dev/rnullb0: Can't open blockdev
[  485.267653][T15534] /dev/rnullb0: Can't open blockdev
[  485.268075][T15534] /dev/rnullb0: Can't open blockdev
[  485.268447][T15534] /dev/rnullb0: Can't open blockdev
[  485.268800][T15534] /dev/rnullb0: Can't open blockdev
[  485.269229][T15534] /dev/rnullb0: Can't open blockdev
[  485.269608][T15534] /dev/rnullb0: Can't open blockdev
[  485.270034][T15534] /dev/rnullb0: Can't open blockdev
[  485.270397][T15534] /dev/rnullb0: Can't open blockdev
[  485.270785][T15534] /dev/rnullb0: Can't open blockdev
[  485.271188][T15534] /dev/rnullb0: Can't open blockdev
[  485.271752][T15534] /dev/rnullb0: Can't open blockdev
[  485.343125][    T9] usb 2-1: device descriptor read/64, error -71
[  485.379862][T15534] /dev/rnullb0: Can't open blockdev
[  485.517077][   T96] block nbd0: Possible stuck request ffff8880254c5080: control (read@0,1024B). Runtime 180 seconds
[  485.529947][   T96] block nbd0: Possible stuck request ffff8880254c5240: control (read@1024,1024B). Runtime 180 seconds
[  485.530764][T15534] /dev/rnullb0: Can't open blockdev
[  485.531411][T15534] /dev/rnullb0: Can't open blockdev
[  485.532019][T15534] /dev/rnullb0: Can't open blockdev
[  485.559123][T15534] /dev/rnullb0: Can't open blockdev
[  485.565064][T15534] /dev/rnullb0: Can't open blockdev
[  485.571249][T15534] /dev/rnullb0: Can't open blockdev
[  485.577158][T15534] /dev/rnullb0: Can't open blockdev
[  485.583113][T15534] /dev/rnullb0: Can't open blockdev
[  485.589474][T15534] /dev/rnullb0: Can't open blockdev
[  485.633420][    T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  485.754752][T15550] /dev/rnullb0: Can't open blockdev
[  485.760616][T15543] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  485.777147][T15543] /dev/rnullb0: Can't open blockdev
[  485.784777][    T9] usb 2-1: device descriptor read/64, error -71
[  485.909794][    T9] usb usb2-port1: attempt power cycle
[  486.145528][ T5945] usb 6-1: new full-speed USB device number 75 using dummy_hcd
[  486.267101][    T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  486.316484][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  486.330756][    T9] usb 2-1: device descriptor read/8, error -71
[  486.343100][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  486.363680][T15571] /dev/rnullb0: Can't open blockdev
[  486.377337][ T5945] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  486.394308][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.424825][ T5945] usb 6-1: config 0 descriptor??
[  486.593115][    T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  486.616013][    T9] usb 2-1: device descriptor read/8, error -71
[  486.719463][T15573] syz.7.2623: vmalloc error: size 283115520, failed to allocated page array size 552960, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  486.742424][    T9] usb usb2-port1: unable to enumerate USB device
[  486.754312][T15573] CPU: 0 UID: 0 PID: 15573 Comm: syz.7.2623 Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) 
[  486.754340][T15573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  486.754356][T15573] Call Trace:
[  486.754365][T15573]  <TASK>
[  486.754374][T15573]  dump_stack_lvl+0x189/0x250
[  486.754417][T15573]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.754440][T15573]  ? __pfx__printk+0x10/0x10
[  486.754464][T15573]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  486.754487][T15573]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  486.754512][T15573]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  486.754541][T15573]  warn_alloc+0x214/0x310
[  486.754566][T15573]  ? __pfx_warn_alloc+0x10/0x10
[  486.754593][T15573]  ? __get_vm_area_node+0x28f/0x300
[  486.754619][T15573]  ? vb2_vmalloc_alloc+0xef/0x340
[  486.754643][T15573]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  486.754687][T15573]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  486.754711][T15573]  ? __kasan_kmalloc+0x93/0xb0
[  486.754739][T15573]  vmalloc_user_noprof+0xad/0xf0
[  486.754757][T15573]  ? vb2_vmalloc_alloc+0xef/0x340
[  486.754778][T15573]  vb2_vmalloc_alloc+0xef/0x340
[  486.754798][T15573]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  486.754820][T15573]  __vb2_queue_alloc+0x9bf/0x15a0
[  486.754864][T15573]  vb2_core_reqbufs+0xc31/0x1420
[  486.754882][T15573]  ? __pfx___mutex_trylock_common+0x10/0x10
[  486.754923][T15573]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  486.754953][T15573]  ? vb2_verify_memory_type+0x1fc/0x570
[  486.754975][T15573]  vb2_ioctl_reqbufs+0x4c0/0x830
[  486.755007][T15573]  __video_do_ioctl+0xc98/0xdb0
[  486.755035][T15573]  ? __pfx___video_do_ioctl+0x10/0x10
[  486.755067][T15573]  video_usercopy+0x86e/0x14f0
[  486.755096][T15573]  ? __pfx___video_do_ioctl+0x10/0x10
[  486.755115][T15573]  ? __pfx_video_usercopy+0x10/0x10
[  486.755143][T15573]  ? __fget_files+0x2a/0x420
[  486.755164][T15573]  ? __fget_files+0x2a/0x420
[  486.755180][T15573]  ? __fget_files+0x3a0/0x420
[  486.755201][T15573]  v4l2_ioctl+0x18d/0x1e0
[  486.755220][T15573]  ? __pfx_v4l2_ioctl+0x10/0x10
[  486.755237][T15573]  __se_sys_ioctl+0xf9/0x170
[  486.755262][T15573]  do_syscall_64+0xfa/0x3b0
[  486.755280][T15573]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.755298][T15573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.755316][T15573]  ? clear_bhb_loop+0x60/0xb0
[  486.755339][T15573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.755364][T15573] RIP: 0033:0x7f413d58e929
[  486.755382][T15573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  486.755407][T15573] RSP: 002b:00007f413e463038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  486.755427][T15573] RAX: ffffffffffffffda RBX: 00007f413d7b5fa0 RCX: 00007f413d58e929
[  486.755442][T15573] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000008
[  486.755455][T15573] RBP: 00007f413d610b39 R08: 0000000000000000 R09: 0000000000000000
[  486.755467][T15573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  486.755478][T15573] R13: 0000000000000000 R14: 00007f413d7b5fa0 R15: 00007ffd0fedc9a8
[  486.755508][T15573]  </TASK>
[  486.755543][T15573] Mem-Info:
[  486.848626][ T5945] konepure 0003:1E7D:2DB4.0019: unbalanced collection at end of report description
[  486.986184][T15573] active_anon:9232 inactive_anon:0 isolated_anon:0
[  486.986184][T15573]  active_file:7509 inactive_file:51347 isolated_file:0
[  486.986184][T15573]  unevictable:2731 dirty:40 writeback:0
[  486.986184][T15573]  slab_reclaimable:11941 slab_unreclaimable:104731
[  486.986184][T15573]  mapped:35545 shmem:1398 pagetables:1866
[  486.986184][T15573]  sec_pagetables:0 bounce:0
[  486.986184][T15573]  kernel_misc_reclaimable:0
[  486.986184][T15573]  free:1271569 free_pcp:14278 free_cma:0
[  486.995430][ T5945] konepure 0003:1E7D:2DB4.0019: parse failed
[  487.058884][T15573] Node 0 active_anon:37028kB inactive_anon:0kB active_file:32084kB inactive_file:205184kB unevictable:11388kB isolated(anon):0kB isolated(file):0kB mapped:142180kB dirty:156kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13324kB pagetables:7312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  487.122304][    C0] vkms_vblank_simulate: vblank timer overrun
[  487.160790][    C0] vkms_vblank_simulate: vblank timer overrun
[  487.209103][T15573] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  487.238989][    C0] vkms_vblank_simulate: vblank timer overrun
[  487.260094][T15573] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  487.272429][ T5945] konepure 0003:1E7D:2DB4.0019: probe with driver konepure failed with error -22
[  487.288956][    C0] vkms_vblank_simulate: vblank timer overrun
[  487.301725][T15573] lowmem_reserve[]: 0 2496 2497 2497 2497
[  487.318562][T15573] Node 0 DMA32 free:1183156kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38584kB inactive_anon:0kB active_file:33492kB inactive_file:204108kB unevictable:12888kB writepending:152kB present:3129332kB managed:2556164kB mlocked:11408kB bounce:0kB free_pcp:26116kB local_pcp:6248kB free_cma:0kB
[  487.351196][    C0] vkms_vblank_simulate: vblank timer overrun
[  487.355722][ T5945] usb 6-1: USB disconnect, device number 75
[  487.359312][T15573] lowmem_reserve[]: 0 0 1 1 1
[  487.368258][T15573] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1076kB unevictable:0kB writepending:4kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  487.397172][    C0] vkms_vblank_simulate: vblank timer overrun
[  487.423580][T15573] lowmem_reserve[]: 0 0 0 0 0
[  487.428442][T15573] Node 1 Normal free:3881992kB boost:0kB min:55672kB low:69588kB high:83504kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:28352kB local_pcp:16064kB free_cma:0kB
[  487.459691][    C0] vkms_vblank_simulate: vblank timer overrun
[  487.466662][T15573] lowmem_reserve[]: 0 0 0 0 0
[  487.471413][T15573] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  487.484658][T15573] Node 0 DMA32: 49*4kB (E) 393*8kB (ME) 728*16kB (UME) 439*32kB (UME) 220*64kB (UME) 47*128kB (M) 25*256kB (M) 15*512kB (M) 6*1024kB (UME) 21*2048kB (UME) 261*4096kB (UM) = 1181420kB
[  487.506924][T15573] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  487.519637][T15573] Node 1 Normal: 194*4kB (UE) 48*8kB (UME) 44*16kB (UME) 120*32kB (UME) 33*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 944*4096kB (M) = 3881992kB
[  487.541829][T15573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  487.552480][T15573] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  487.565706][T15573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  487.575731][T15573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  487.585458][T15573] 61114 total pagecache pages
[  487.590312][T15573] 0 pages in swap cache
[  487.595105][T15573] Free swap  = 124996kB
[  487.599273][T15573] Total swap = 124996kB
[  487.603856][T15573] 2097051 pages RAM
[  487.607686][T15573] 0 pages HighMem/MovableOnly
[  487.612359][T15573] 426096 pages reserved
[  487.621241][T15573] 0 pages cma reserved
[  488.104399][T15610] netlink: 'syz.1.2630': attribute type 33 has an invalid length.
[  488.136479][T15610] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2630'.
[  488.404921][T15615] /dev/rnullb0: Can't open blockdev
[  488.454609][T15617] /dev/rnullb0: Can't open blockdev
[  488.494099][T15619] /dev/rnullb0: Can't open blockdev
[  488.785688][T15629] /dev/rnullb0: Can't open blockdev
[  488.933130][ T5945] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  489.009720][T15637] netlink: 'syz.8.2639': attribute type 6 has an invalid length.
[  489.073183][ T5946] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  489.083324][ T5945] usb 2-1: Using ep0 maxpacket: 32
[  489.092211][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.108760][ T5945] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  489.119944][ T5945] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.134968][ T5945] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  489.149590][ T5945] usb 2-1: config 0 interface 0 has no altsetting 0
[  489.177220][ T5945] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  489.208982][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.234190][ T5946] usb 8-1: Using ep0 maxpacket: 8
[  489.253924][ T5945] usb 2-1: config 0 descriptor??
[  489.286630][ T5946] usb 8-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  489.310485][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.339913][ T5946] usb 8-1: Product: syz
[  489.344772][ T5946] usb 8-1: Manufacturer: syz
[  489.349902][ T5946] usb 8-1: SerialNumber: syz
[  489.365808][ T5946] usb 8-1: config 0 descriptor??
[  489.422425][T15647] /dev/rnullb0: Can't open blockdev
[  489.616433][ T5946] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  489.630774][ T5946] gspca_sunplus: reg_w_riv err -71
[  489.636188][ T5946] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[  489.660988][ T5946] usb 8-1: USB disconnect, device number 21
[  489.709215][ T5945] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0
[  489.720356][ T5945] hid-thrustmaster 0003:044F:B65D.001A: unknown main item tag 0x0
[  489.733378][ T5945] hid-thrustmaster 0003:044F:B65D.001A: item fetching failed at offset 2/5
[  489.742823][ T5945] hid-thrustmaster 0003:044F:B65D.001A: parse failed with error -22
[  489.751948][ T5945] hid-thrustmaster 0003:044F:B65D.001A: probe with driver hid-thrustmaster failed with error -22
[  489.911668][ T5857] usb 2-1: USB disconnect, device number 95
[  489.963166][ T7699] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  490.070779][T15674] /dev/rnullb0: Can't open blockdev
[  490.134012][ T7699] usb 9-1: Using ep0 maxpacket: 16
[  490.141309][ T7699] usb 9-1: unable to get BOS descriptor or descriptor too short
[  490.150168][ T7699] usb 9-1: config 8 has an invalid interface number: 105 but max is 0
[  490.162203][ T7699] usb 9-1: config 8 has no interface number 0
[  490.170230][ T7699] usb 9-1: config 8 interface 105 has no altsetting 0
[  490.182696][ T7699] usb 9-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34
[  490.191933][ T7699] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.200112][    T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  490.207752][ T7699] usb 9-1: Product: syz
[  490.211915][ T7699] usb 9-1: Manufacturer: syz
[  490.216953][ T7699] usb 9-1: SerialNumber: syz
[  490.365189][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  490.380831][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  490.390010][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  490.411678][    T9] usb 8-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  490.421100][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.450756][    T9] usb 8-1: Product: syz
[  490.468625][    T9] usb 8-1: Manufacturer: syz
[  490.488200][    T9] usb 8-1: SerialNumber: syz
[  490.531652][    T9] usb 8-1: config 0 descriptor??
[  490.665943][T15683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2656'.
[  490.741052][ T7699] usb 9-1: USB disconnect, device number 26
[  490.976233][    T9] usb 8-1: Found UVC 34.00 device syz (8086:0b5b)
[  491.016318][    T9] usb 8-1: No valid video chain found.
[  491.028561][    T9] usb 8-1: USB disconnect, device number 22
[  491.336716][T15689] kAFS: No cell specified
[  491.389002][T15692] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  491.395550][T15692] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  491.403603][T15692] vhci_hcd vhci_hcd.0: Device attached
[  491.418155][T15692] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5)
[  491.424695][T15692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  491.432608][T15692] vhci_hcd vhci_hcd.0: Device attached
[  491.440792][T15692] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7)
[  491.447320][T15692] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  491.455482][T15692] vhci_hcd vhci_hcd.0: Device attached
[  491.498002][T15692] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(9)
[  491.504560][T15692] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  491.532436][T15692] vhci_hcd vhci_hcd.0: Device attached
[  491.544460][T15703] /dev/rnullb0: Can't open blockdev
[  491.550682][T15700] vhci_hcd: connection closed
[  491.550795][T15697] vhci_hcd: connection closed
[  491.551810][ T3584] vhci_hcd: stop threads
[  491.576126][T15693] vhci_hcd: connection closed
[  491.576876][T15695] vhci_hcd: connection closed
[  491.589952][ T3584] vhci_hcd: release socket
[  491.602266][T15689] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2658'.
[  491.603522][  T984] vhci_hcd: vhci_device speed not set
[  491.627143][ T3584] vhci_hcd: disconnect device
[  491.635720][ T3584] vhci_hcd: stop threads
[  491.640881][ T3584] vhci_hcd: release socket
[  491.648752][ T3584] vhci_hcd: disconnect device
[  491.655873][ T3584] vhci_hcd: stop threads
[  491.660265][ T3584] vhci_hcd: release socket
[  491.668207][ T3584] vhci_hcd: disconnect device
[  491.673890][ T3584] vhci_hcd: stop threads
[  491.678186][ T3584] vhci_hcd: release socket
[  491.682746][ T3584] vhci_hcd: disconnect device
[  491.694640][  T984] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  491.702490][  T984] usb 43-1: enqueue for inactive port 0
[  491.733345][T15710] netlink: 'syz.1.2660': attribute type 2 has an invalid length.
[  491.794921][T15712] sctp: [Deprecated]: syz.8.2662 (pid 15712) Use of struct sctp_assoc_value in delayed_ack socket option.
[  491.794921][T15712] Use struct sctp_sack_info instead
[  491.823228][  T984] vhci_hcd: vhci_device speed not set
[  492.063879][T15719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  492.071557][T15719] IPv6: NLM_F_CREATE should be set when creating new route
[  492.078856][T15719] IPv6: NLM_F_CREATE should be set when creating new route
[  492.086109][T15719] IPv6: NLM_F_CREATE should be set when creating new route
[  492.134322][T15719] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  492.153673][T15719] /dev/rnullb0: Can't open blockdev
[  492.178199][T15721] /dev/rnullb0: Can't open blockdev
[  492.299431][T15723] /dev/rnullb0: Can't open blockdev
[  492.416583][T15726] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2667'.
[  492.535292][T15730] /dev/rnullb0: Can't open blockdev
[  492.623287][    T9] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  492.797022][    T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  492.829497][    T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  492.862502][    T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  492.886170][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.911072][T15728] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  492.932506][    T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  493.257726][  T984] usb 9-1: USB disconnect, device number 27
[  493.514232][T15742] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2673'.
[  493.553329][T15708] Malformed UNC in devname
[  493.553329][T15708] 
[  493.560146][T15708] CIFS: VFS: Malformed UNC in devname
[  493.573300][    T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  493.662402][T15750] /dev/rnullb0: Can't open blockdev
[  493.711820][T15752] syzkaller1: entered promiscuous mode
[  493.717467][T15752] syzkaller1: entered allmulticast mode
[  493.747661][    T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  493.757120][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.765890][    T9] usb 2-1: Product: syz
[  493.770156][    T9] usb 2-1: Manufacturer: syz
[  493.774896][    T9] usb 2-1: SerialNumber: syz
[  493.781623][    T9] usb 2-1: config 0 descriptor??
[  493.880987][T15759] /dev/rnullb0: Can't open blockdev
[  493.890068][T15760] /dev/rnullb0: Can't open blockdev
[  494.044449][T15769] /dev/rnullb0: Can't open blockdev
[  494.262095][    T9] usb 2-1: f81604_write: reg: 105 data: 8a failed: -EPROTO
[  494.290156][    T9] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  494.310562][    T9] f81604 2-1:0.0: probe with driver f81604 failed with error -71
[  494.327964][    T9] usb 2-1: USB disconnect, device number 96
[  494.374667][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2684'.
[  494.404246][T15779] /dev/rnullb0: Can't open blockdev
[  494.404916][T15781] blkio.reset_stats is deprecated
[  494.428343][T15781] /dev/rnullb0: Can't open blockdev
[  494.511743][T15785] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  494.531507][T15785] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  494.561006][T15785] /dev/rnullb0: Can't open blockdev
[  494.611740][T15788] /dev/rnullb0: Can't open blockdev
[  494.653527][T15789] pim6reg1: entered promiscuous mode
[  494.662816][T15789] pim6reg1: entered allmulticast mode
[  494.765330][T15793] syz.8.2688: attempt to access beyond end of device
[  494.765330][T15793] loop8: rw=2048, sector=0, nr_sectors = 8 limit=0
[  494.812057][T15793] SQUASHFS error: Failed to read block 0x0: -5
[  494.824430][T15793] unable to read squashfs_super_block
[  494.921879][T15800] /dev/rnullb0: Can't open blockdev
[  494.951960][T15801] /dev/rnullb0: Can't open blockdev
[  495.432069][T15815] /dev/rnullb0: Can't open blockdev
[  495.474367][T15814] /dev/rnullb0: Can't open blockdev
[  495.632554][T15820] /dev/rnullb0: Can't open blockdev
[  495.844888][    T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  495.902158][T15825] /dev/rnullb0: Can't open blockdev
[  495.967234][T15827] /dev/rnullb0: Can't open blockdev
[  496.008298][    T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  496.017868][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.034177][    T9] usb 2-1: config 0 descriptor??
[  496.103167][ T7699] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  496.158794][T15835] /dev/rnullb0: Can't open blockdev
[  496.230270][T15839] /dev/rnullb0: Can't open blockdev
[  496.253226][ T7699] usb 9-1: Using ep0 maxpacket: 8
[  496.272651][ T7699] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  496.300400][ T7699] usb 9-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[  496.312188][ T7699] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.336490][ T7699] usb 9-1: config 0 descriptor??
[  496.348353][T15846] netlink: 'syz.5.2707': attribute type 29 has an invalid length.
[  496.523185][ T5946] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  496.593344][ T5945] usb 6-1: new full-speed USB device number 76 using dummy_hcd
[  496.653130][ T5946] usb 8-1: device descriptor read/64, error -71
[  496.766310][ T7699] smartjoyplus 0003:6666:8802.001B: hidraw0: USB HID v0.03 Device [HID 6666:8802] on usb-dummy_hcd.8-1/input0
[  496.791048][ T7699] smartjoyplus 0003:6666:8802.001B: no output reports found
[  496.824290][ T5945] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  496.838181][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  496.853457][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  496.874344][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  496.890416][   T31] INFO: task syz.0.1659:11919 blocked for more than 143 seconds.
[  496.904957][ T5945] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  496.906688][   T31]       Not tainted 6.16.0-rc5-next-20250711-syzkaller #0
[  496.927420][ T5945] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  496.931637][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  496.942085][ T5945] usb 6-1: Manufacturer: syz
[  496.953335][ T5946] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  496.963164][T15822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.978407][   T31] task:syz.0.1659      state:D stack:28360 pid:11919 tgid:11917 ppid:5852   task_flags:0x400140 flags:0x00004004
[  496.991342][T15822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.000020][ T5945] usb 6-1: config 0 descriptor??
[  497.028769][   T31] Call Trace:
[  497.032197][   T31]  <TASK>
[  497.037850][T15822] /dev/rnullb0: Can't open blockdev
[  497.050888][   T31]  __schedule+0x16f5/0x4d00
[  497.065674][ T1214] usb 9-1: USB disconnect, device number 28
[  497.083600][   T31]  ? __lock_acquire+0xab9/0xd20
[  497.103455][ T5946] usb 8-1: device descriptor read/64, error -71
[  497.113723][   T31]  ? schedule+0x165/0x360
[  497.122534][   T31]  ? __pfx___schedule+0x10/0x10
[  497.132808][   T31]  ? schedule+0x91/0x360
[  497.139281][   T31]  schedule+0x165/0x360
[  497.147210][   T31]  schedule_preempt_disabled+0x13/0x30
[  497.152936][   T31]  __mutex_lock+0x724/0xe80
[  497.169694][   T31]  ? __mutex_lock+0x51b/0xe80
[  497.178655][   T31]  ? bdev_open+0xe0/0xd30
[  497.185348][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  497.190576][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[  497.207838][   T31]  ? alloc_file_pseudo_noaccount+0x203/0x2c0
[  497.216013][   T31]  ? disk_block_events+0xab/0x120
[  497.221283][   T31]  ? bdev_open+0xbe/0xd30
[  497.229726][ T5946] usb usb8-port1: attempt power cycle
[  497.240913][   T31]  bdev_open+0xe0/0xd30
[  497.249488][   T31]  bdev_file_open_by_dev+0x1be/0x240
[  497.256895][   T31]  setup_bdev_super+0x5a/0x5b0
[  497.261953][   T31]  get_tree_bdev_flags+0x366/0x4d0
[  497.273997][   T31]  ? __pfx_exfat_fill_super+0x10/0x10
[  497.291918][   T31]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  497.311050][   T31]  vfs_get_tree+0x8f/0x2b0
[  497.328004][   T31]  do_new_mount+0x2a2/0x9e0
[  497.345658][   T31]  ? ns_capable+0x8a/0xf0
[  497.359736][   T31]  ? __pfx_do_new_mount+0x10/0x10
[  497.368774][   T31]  ? path_mount+0x61c/0xfe0
[  497.381068][   T31]  ? user_path_at+0x44/0x60
[  497.388902][   T31]  __se_sys_mount+0x317/0x410
[  497.400642][   T31]  ? __pfx___se_sys_mount+0x10/0x10
[  497.406894][   T31]  ? rcu_is_watching+0x15/0xb0
[  497.411937][   T31]  ? do_syscall_64+0xbe/0x3b0
[  497.422232][   T31]  ? __x64_sys_mount+0x20/0xc0
[  497.429285][   T31]  do_syscall_64+0xfa/0x3b0
[  497.438248][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  497.446357][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.452711][   T31]  ? clear_bhb_loop+0x60/0xb0
[  497.462481][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.470435][   T31] RIP: 0033:0x7fae09d8e929
[  497.481735][   T31] RSP: 002b:00007fae0ab22038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  497.502570][   T31] RAX: ffffffffffffffda RBX: 00007fae09fb5fa0 RCX: 00007fae09d8e929
[  497.524665][   T31] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000
[  497.532698][   T31] RBP: 00007fae09e10b39 R08: 0000000000000000 R09: 0000000000000000
[  497.540862][   T31] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000
[  497.548931][   T31] R13: 0000000000000000 R14: 00007fae09fb5fa0 R15: 00007ffd5b1ceef8
[  497.561818][   T31]  </TASK>
[  497.565342][   T31] 
[  497.565342][   T31] Showing all locks held in the system:
[  497.573340][   T31] 6 locks held by kworker/0:0/9:
[  497.578307][   T31]  #0: ffff888021a8e548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  497.589719][   T31]  #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  497.589909][ T5946] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  497.601634][   T31]  #2: ffff888028071198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[  497.601695][   T31]  #3: ffff88804c2a2198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  497.601769][   T31]  #4: ffff88805934e160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  497.601820][   T31]  #5: ffff8880590d0e60 (&dev->phy_mutex){+.+.}-{4:4}, at: mcs7830_write_phy+0x9c/0x290
[  497.601868][   T31] 5 locks held by kworker/u8:0/12:
[  497.601882][   T31] 1 lock held by khungtaskd/31:
[  497.601915][   T31]  #0: ffffffff8e53c5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  497.601995][   T31] 2 locks held by getty/5616:
[  497.602007][   T31]  #0: ffff8880304590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  497.665546][T15850] /dev/rnullb0: Can't open blockdev
[  497.671604][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  497.697885][   T31] 5 locks held by kworker/1:4/5945:
[  497.702230][ T5946] usb 8-1: device descriptor read/8, error -71
[  497.704781][   T31]  #0: ffff888021a8e548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  497.721623][   T31]  #1: ffffc90004517bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  497.737986][   T31]  #2: ffff888145780198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[  497.752828][   T31]  #3: ffff88805934c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  497.767210][   T31]  #4: ffff888024132160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  497.777385][   T31] 5 locks held by kworker/1:5/5946:
[  497.793299][   T31]  #0: ffff888021a8e548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  497.805319][   T31]  #1: ffffc90004567bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  497.818452][   T31]  #2: ffff8881457a8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[  497.827602][   T31]  #3: ffff8881457ab518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00
[  497.838414][   T31]  #4: ffff8881457b9568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00
[  497.848591][   T31] 1 lock held by udevd/7511:
[  497.853320][   T31]  #0: ffff88802542a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  497.862819][   T31] 2 locks held by syz.0.1659/11919:
[  497.868161][   T31]  #0: ffff888054a9a0e0 (&type->s_umount_key#64/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970
[  497.878486][   T31]  #1: ffff88802542a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  497.888737][   T31] 
[  497.891092][   T31] =============================================
[  497.891092][   T31] 
[  497.899645][   T31] NMI backtrace for cpu 1
[  497.899660][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) 
[  497.899684][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  497.899694][   T31] Call Trace:
[  497.899702][   T31]  <TASK>
[  497.899708][   T31]  dump_stack_lvl+0x189/0x250
[  497.899733][   T31]  ? __wake_up_klogd+0xd9/0x110
[  497.899750][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  497.899771][   T31]  ? __pfx__printk+0x10/0x10
[  497.899804][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  497.899829][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  497.899857][   T31]  ? _printk+0xcf/0x120
[  497.899902][   T31]  ? __pfx__printk+0x10/0x10
[  497.899925][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  497.899947][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  497.899972][   T31]  watchdog+0xfee/0x1030
[  497.899991][   T31]  ? watchdog+0x1de/0x1030
[  497.900015][   T31]  kthread+0x711/0x8a0
[  497.900043][   T31]  ? __pfx_watchdog+0x10/0x10
[  497.900059][   T31]  ? __pfx_kthread+0x10/0x10
[  497.900076][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  497.900100][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  497.900115][   T31]  ? __pfx_kthread+0x10/0x10
[  497.900133][   T31]  ret_from_fork+0x3f9/0x770
[  497.900157][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  497.900182][   T31]  ? __switch_to_asm+0x39/0x70
[  497.900196][   T31]  ? __switch_to_asm+0x33/0x70
[  497.900211][   T31]  ? __pfx_kthread+0x10/0x10
[  497.900229][   T31]  ret_from_fork_asm+0x1a/0x30
[  497.900259][   T31]  </TASK>
[  497.900286][   T31] Sending NMI from CPU 1 to CPUs 0:
[  498.057533][    C0] NMI backtrace for cpu 0
[  498.057549][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) 
[  498.057569][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  498.057580][    C0] Workqueue: events_unbound toggle_allocation_gate
[  498.057606][    C0] RIP: 0010:check_preemption_disabled+0x40/0x120
[  498.057626][    C0] Code: 08 65 8b 05 06 92 67 07 65 8b 0d fb 91 67 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d db 91 67 07 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d e9 01 c1 02 00 cc 48 c7 04 24 00 00
[  498.057640][    C0] RSP: 0018:ffffc900001177e0 EFLAGS: 00000046
[  498.057652][    C0] RAX: 0000000000000000 RBX: 0000000000000a06 RCX: 214c1e3259d6eb00
[  498.057663][    C0] RDX: 0000000000000001 RSI: ffffffff8c04d220 RDI: ffffffff8c04d1e0
[  498.057674][    C0] RBP: ffffc90000117930 R08: ffff88801d2ada1b R09: 1ffff11003a55b43
[  498.057685][    C0] R10: dffffc0000000000 R11: ffffed1003a55b44 R12: dffffc0000000000
[  498.057696][    C0] R13: ffffffff819b47b7 R14: ffffffff8e65dc78 R15: 1ffff92000022f14
[  498.057709][    C0] FS:  0000000000000000(0000) GS:ffff88812578f000(0000) knlGS:0000000000000000
[  498.057721][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  498.057732][    C0] CR2: 000000110c4554b2 CR3: 000000000e336000 CR4: 00000000003526f0
[  498.057746][    C0] Call Trace:
[  498.057753][    C0]  <TASK>
[  498.057761][    C0]  rcu_is_watching+0x15/0xb0
[  498.057782][    C0]  lock_release+0x4b/0x3e0
[  498.057802][    C0]  _raw_spin_unlock_irqrestore+0x70/0x110
[  498.057823][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  498.057843][    C0]  ? __pfx___might_resched+0x10/0x10
[  498.057861][    C0]  ? rcu_read_lock_any_held+0xb3/0x120
[  498.057881][    C0]  prepare_to_wait_event+0x437/0x480
[  498.057899][    C0]  toggle_allocation_gate+0x12d/0x240
[  498.057921][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  498.057940][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  498.057963][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  498.057981][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  498.057997][    C0]  process_scheduled_works+0xade/0x17b0
[  498.058027][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  498.058053][    C0]  worker_thread+0x8a0/0xda0
[  498.058082][    C0]  kthread+0x711/0x8a0
[  498.058096][    C0]  ? __pfx_worker_thread+0x10/0x10
[  498.058113][    C0]  ? __pfx_kthread+0x10/0x10
[  498.058127][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  498.058145][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  498.058158][    C0]  ? __pfx_kthread+0x10/0x10
[  498.058171][    C0]  ret_from_fork+0x3f9/0x770
[  498.058191][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  498.058210][    C0]  ? __switch_to_asm+0x39/0x70
[  498.058223][    C0]  ? __switch_to_asm+0x33/0x70
[  498.058236][    C0]  ? __pfx_kthread+0x10/0x10
[  498.058249][    C0]  ret_from_fork_asm+0x1a/0x30
[  498.058276][    C0]  </TASK>
[  498.058825][ T5946] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  498.183139][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  498.183160][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) 
[  498.183183][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  498.183194][   T31] Call Trace:
[  498.183204][   T31]  <TASK>
[  498.183213][   T31]  dump_stack_lvl+0x99/0x250
[  498.183244][   T31]  ? __asan_memcpy+0x40/0x70
[  498.183272][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  498.183295][   T31]  ? __pfx__printk+0x10/0x10
[  498.183329][   T31]  vpanic+0x281/0x750
[  498.183352][   T31]  ? __pfx_vpanic+0x10/0x10
[  498.183371][   T31]  ? preempt_schedule+0xae/0xc0
[  498.183390][   T31]  ? preempt_schedule_common+0x83/0xd0
[  498.183413][   T31]  panic+0xb9/0xc0
[  498.183432][   T31]  ? __pfx_panic+0x10/0x10
[  498.183453][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  498.183478][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  498.183503][   T31]  watchdog+0x102d/0x1030
[  498.183525][   T31]  ? watchdog+0x1de/0x1030
[  498.183550][   T31]  kthread+0x711/0x8a0
[  498.183569][   T31]  ? __pfx_watchdog+0x10/0x10
[  498.183585][   T31]  ? __pfx_kthread+0x10/0x10
[  498.183603][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  498.183626][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  498.183642][   T31]  ? __pfx_kthread+0x10/0x10
[  498.183659][   T31]  ret_from_fork+0x3f9/0x770
[  498.183683][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  498.183708][   T31]  ? __switch_to_asm+0x39/0x70
[  498.183724][   T31]  ? __switch_to_asm+0x33/0x70
[  498.183739][   T31]  ? __pfx_kthread+0x10/0x10
[  498.183756][   T31]  ret_from_fork_asm+0x1a/0x30
[  498.183787][   T31]  </TASK>
[  498.184276][   T31] Kernel Offset: disabled