last executing test programs:

2m39.514613974s ago: executing program 1 (id=344):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x5001, 0x0)

2m39.386388358s ago: executing program 1 (id=346):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x4})

2m38.826226754s ago: executing program 2 (id=348):
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='hpfs\x00', 0x1210c20, 0x0)

2m38.663539339s ago: executing program 2 (id=350):
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0)
lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "2c36c113cf9c1dc00c47ee869775a665"}, 0x11, 0x0)

2m38.126304897s ago: executing program 1 (id=353):
mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4, 0x107000)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000300)="bcdb7bd39786f9d14f34ec8195e1edfd239fcce95f8c2c777e2e9299de4a734575f202e29d8f374968d7bf4548079e4f9510733d6b41d109c8564465f65109171747253e5e632cb1eb0fa6d309735a9e3d973b0e6a4561da5ff759c56ef0f82e32aff538eab9a6ef3f031b8ed612a71dbdb51f01fefe32ca2a53b3c1585274ba381465c98c7f62683359fba1bbc10e696d4c61f210bc08d0c064183d57c07b0b97e1543a2870e2049138a65ccc41d69c9d6874d1dfa688a6bdeba990651eba2e4a01c421b5e900354bb189498cec3be432e122de5e6892397dd7defbf17092036dfdde610ad76672143ba5", 0xeb}, {&(0x7f0000000400)="de2178dc27c3dd1a8849ffb48f2a5661dc84ce48d353e8445f179e205e5adb7991cbbd0e0056469c220ec057", 0x2c}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100))
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140), &(0x7f0000000200)={0x0, 0xfb, 0xed, 0x0, 0x40, "1bede5cecc1d9f3f4475145593b3b48e", "165ede8303fc18ff18c56389b98ad0c9b3f8efb679bd622b32b395796b40dd499a7f7b6c76e8a50c0683083008e66a2954a8d8b5903eb7cd3bf52b10420af9c8879f0040e633aac62f84d6f125e399d335705823b34f34517dda7ed338623ef4ca9c2eaef0f575e109023bd834d5b96b9a23ede463a88ba87f9019ce42a633272ff586c193555794bdac21873d345c8c97fbe9b699a9ba3f52af70f0c5ede8b2fa5206b091393a8a376d3861f9b441a20d0ae118e187339cb8078dd413067e126a94b2f64cb72dbbc3a7f8e834ed8da891d5fe025bf00df1"}, 0xed, 0x2)
mount(&(0x7f0000000100)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x200000, 0x0)

2m38.036395015s ago: executing program 2 (id=355):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sync_file_range(r0, 0x7fff, 0x6, 0x4)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x500000e, 0x4008032, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00075bac88262ae4c0c5060d57f251c078ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffe1ff", 0x58}], 0x1)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1ff, 0x4}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x70}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005"], 0x60}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000", @ANYRES32=0xee00], 0x104}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
r9 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0xfff, 0x2}, 0x1c)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffff80, 0xbbb, 0x7, 0xffffffff}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4040100}, 0xc000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x93771000)

2m37.671556073s ago: executing program 1 (id=357):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000080400000100000200fd020080040000000c00168008000600", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x8004) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x93771000)

2m36.65350661s ago: executing program 1 (id=365):
r0 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005440), r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
setpgid(0x0, r1)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc0040, 0x58)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0)

2m35.823512174s ago: executing program 2 (id=371):
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, 0x9, 0x2081) (async)
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, 0x9, 0x2081)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x6, 0x0, 0x1, [@typed={0xd, 0xe4, 0x0, 0x0, @binary="b1fc2d971a289f852a"}]}]}]}, 0x2c}}, 0x40)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) (async)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0xeac0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60)
sendfile(r2, r2, 0x0, 0x7ffff000) (async)
sendfile(r2, r2, 0x0, 0x7ffff000)

2m35.727022999s ago: executing program 1 (id=373):
r0 = creat(&(0x7f00000001c0)='./cgroup/pids.max\x00', 0x12c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x10)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x16)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x20000d5}, 0x2400c001)
r4 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r4, &(0x7f0000000640)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x1, 0x4}}, 0x80, 0x0}}], 0x1, 0x20000000)
chdir(&(0x7f00000004c0)='./cgroup/pids.max\x00')
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x9})
unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200)
r6 = open(&(0x7f0000000280)='.\x00', 0x280040, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
setsockopt$inet_udp_encap(r7, 0x11, 0x68, &(0x7f0000000340)=0x1, 0x4)
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
semop(0x0, 0x0, 0x0)
r8 = syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat\x00')
mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0)
close(0x3)

2m34.918928078s ago: executing program 2 (id=377):
get_mempolicy(0x0, &(0x7f0000000080), 0x1, &(0x7f0000107000/0x4000)=nil, 0x1)
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) (async)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
mlock(&(0x7f0000280000/0x3000)=nil, 0x3000)

2m34.795251827s ago: executing program 2 (id=378):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000180))
r1 = syz_socket_connect_nvme_tcp()
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000001c0))
r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x800)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000280)={0x3, "16a67d9868e64258897c190deddc40d30aebc7098b29ffd8d13c62cbb732e2e10bfd5a6549d3b0b32e94377ee101ef0d74698a4ab0ed95c57cec0bb955317740a816430231fcba109cdc844fcd7fbbf5e77e09b21f37feb413ace494673c9efd16f9db0d287f46b6af2abcfbe491e65a04b0ca4ad2d7b17a73d64405c2da3d5a"})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff0, 0x6}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x95)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x1f}, @l2cap_cid_signaling={{0x1b}, [@l2cap_conf_req={{0x4, 0x80, 0x7}, {0xac2, 0xffff, [@l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0xd3c9, 0x3}}, @l2cap_move_chan_cfm={{0x10, 0xc, 0x4}, {0x5, 0xfeff}}]}}, 0x24)
syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r5=>r1, {0xfffff001}}, './file0/file0\x00'})
syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x5, 0xc8, 0xe5f9}}}, 0x8)
lseek(r3, 0x8, 0x4)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs2/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x38, 0x0, &(0x7f0000000600)=[@request_death={0x400c630e, 0x3}, @acquire_done, @increfs_done={0x40106308, 0x3}], 0x1b, 0x0, &(0x7f0000000640)="811980dc5203c35bd7fdb4924bb3d77f1cecdb0c7f473764d454df"})
syz_emit_vhci(&(0x7f00000006c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000700), 0x200400, 0x0)
ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000740)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x0, 'veth0_macvtap\x00'})
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, 0x0, 0x800, 0x3, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7fffffff, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000800c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3)
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x1, 0xe, 0x18, "6dd4d0c0b2f68496458fc5710eb5b097424cbd796c4c36f660e3c52f117ac06d273bac301118e27a71a8cdab1336533c4de73344229f4b019c70c58668c542c2", "f1a6c905311b7f0b535221b1ecf03fb7041b0fcac79e2a0053e52fb9e051a5caae09e515e4790c7219e06b216b4b8c32c707767166d250c2b437dbb1259c5998", "9759100b035ecbe35349e4c32e4cb439c0af4b5380804b1c229e2ad8f6ca4d30", [0x6, 0x9]})
fcntl$getownex(r5, 0x10, &(0x7f0000000ac0)={0x0, <r8=>0x0})
timer_create(0x3, &(0x7f0000000b00)={0x0, 0x2a, 0x2, @tid=r8}, &(0x7f0000000b40))
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000b80)={0x0, 0x0, '\x00', @bt={0x3, 0x1, 0x0, 0x3, 0x401, 0x35, 0x9}})
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000c40))
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x404)
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000d80)=""/162)
syz_emit_vhci(&(0x7f0000000e40)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3}, "9a3453"}, 0x7)

2m20.324551634s ago: executing program 32 (id=373):
r0 = creat(&(0x7f00000001c0)='./cgroup/pids.max\x00', 0x12c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x10)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x16)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x20000d5}, 0x2400c001)
r4 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r4, &(0x7f0000000640)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x1, 0x4}}, 0x80, 0x0}}], 0x1, 0x20000000)
chdir(&(0x7f00000004c0)='./cgroup/pids.max\x00')
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x9})
unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200)
r6 = open(&(0x7f0000000280)='.\x00', 0x280040, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
setsockopt$inet_udp_encap(r7, 0x11, 0x68, &(0x7f0000000340)=0x1, 0x4)
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
semop(0x0, 0x0, 0x0)
r8 = syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat\x00')
mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0)
close(0x3)

2m19.683647369s ago: executing program 33 (id=378):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000180))
r1 = syz_socket_connect_nvme_tcp()
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000001c0))
r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x800)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000280)={0x3, "16a67d9868e64258897c190deddc40d30aebc7098b29ffd8d13c62cbb732e2e10bfd5a6549d3b0b32e94377ee101ef0d74698a4ab0ed95c57cec0bb955317740a816430231fcba109cdc844fcd7fbbf5e77e09b21f37feb413ace494673c9efd16f9db0d287f46b6af2abcfbe491e65a04b0ca4ad2d7b17a73d64405c2da3d5a"})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff0, 0x6}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x95)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x1f}, @l2cap_cid_signaling={{0x1b}, [@l2cap_conf_req={{0x4, 0x80, 0x7}, {0xac2, 0xffff, [@l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0xd3c9, 0x3}}, @l2cap_move_chan_cfm={{0x10, 0xc, 0x4}, {0x5, 0xfeff}}]}}, 0x24)
syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r5=>r1, {0xfffff001}}, './file0/file0\x00'})
syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x5, 0xc8, 0xe5f9}}}, 0x8)
lseek(r3, 0x8, 0x4)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs2/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x38, 0x0, &(0x7f0000000600)=[@request_death={0x400c630e, 0x3}, @acquire_done, @increfs_done={0x40106308, 0x3}], 0x1b, 0x0, &(0x7f0000000640)="811980dc5203c35bd7fdb4924bb3d77f1cecdb0c7f473764d454df"})
syz_emit_vhci(&(0x7f00000006c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000700), 0x200400, 0x0)
ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000740)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x0, 'veth0_macvtap\x00'})
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, 0x0, 0x800, 0x3, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7fffffff, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000800c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3)
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x1, 0xe, 0x18, "6dd4d0c0b2f68496458fc5710eb5b097424cbd796c4c36f660e3c52f117ac06d273bac301118e27a71a8cdab1336533c4de73344229f4b019c70c58668c542c2", "f1a6c905311b7f0b535221b1ecf03fb7041b0fcac79e2a0053e52fb9e051a5caae09e515e4790c7219e06b216b4b8c32c707767166d250c2b437dbb1259c5998", "9759100b035ecbe35349e4c32e4cb439c0af4b5380804b1c229e2ad8f6ca4d30", [0x6, 0x9]})
fcntl$getownex(r5, 0x10, &(0x7f0000000ac0)={0x0, <r8=>0x0})
timer_create(0x3, &(0x7f0000000b00)={0x0, 0x2a, 0x2, @tid=r8}, &(0x7f0000000b40))
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000b80)={0x0, 0x0, '\x00', @bt={0x3, 0x1, 0x0, 0x3, 0x401, 0x35, 0x9}})
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000c40))
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x404)
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000d80)=""/162)
syz_emit_vhci(&(0x7f0000000e40)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x3}, "9a3453"}, 0x7)

1m50.289399644s ago: executing program 3 (id=555):
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})
creat(&(0x7f0000000200)='./file0\x00', 0x90)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0)

1m49.983423598s ago: executing program 3 (id=557):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/128, 0x80}, {&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f0000000380)=""/151, 0x97}], 0x3}, 0x10022)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x4000)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000035c0)=ANY=[], 0x400}, 0x1, 0x0, 0x0, 0x800}, 0x20040045) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) (async)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
socket$packet(0x11, 0x3, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r7=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x19, r7, 0x1, 0xb, 0x6, @multicast}, 0x14) (async)
sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r7}, 0x14) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000600)) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) (async)
r10 = accept4(r9, 0x0, 0x0, 0x0)
sendmmsg$inet(r10, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000005c0)="c03d3633be3d7b1f", 0x8}], 0x1, &(0x7f0000000440)=ANY=[], 0x138}}], 0x1, 0x200048cc) (async)
preadv(r0, &(0x7f0000000080), 0x0, 0xffeffffb, 0x1007) (async)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40440d5}, 0x10) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x202100, 0x0)
syz_open_dev$swradio(&(0x7f0000000640), 0x1, 0x2)

1m49.327082555s ago: executing program 3 (id=562):
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0)
socketpair(0x23, 0x1, 0x8, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0x2a, &(0x7f0000000400)={&(0x7f00000001c0)={0x228, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80001e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @private2, 0xdd}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x4}]}, 0x228}, 0x1, 0x0, 0x0, 0x840}, 0x5)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xc, 0x8, 0x7, 0x2, 0xc, 0x3e, 0x9, 0x10, 0x7, 0x9, 0xfffffff9, 0x401, 0x4e, 0xe5, 0x1, [0x9, 0xfffffda0]}})
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xfffe}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
r5 = socket(0x1e, 0x1, 0x0)
connect$tipc(r5, &(0x7f0000000040)=@id, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x10000000, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
sendto$inet6(r3, &(0x7f0000000880)="2aca10f9496c25cd757278e36a124b47b9c488b418e66796f2055f8f72e049f731790cc80b559c8e3a84d7", 0x2b, 0x40001, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000fcff72000040"])
write(r4, &(0x7f0000000100)="1400000052", 0x5)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)

1m48.111351208s ago: executing program 3 (id=571):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
pipe2$watch_queue(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x39)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff)

1m47.988734775s ago: executing program 3 (id=572):
mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x228846a, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
getsockname$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e)

1m47.687341141s ago: executing program 3 (id=574):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
unshare(0x2c060000)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x7fff, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x80000000000000})
renameat2(r2, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0/..\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000380)=""/197, &(0x7f00000001c0)=0xc5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000)
fsopen(&(0x7f0000000200)='ceph\x00', 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil)
r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'dmm32at\x00', [0xf000, 0x80008000, 0x1, 0x0, 0x0, 0x3, 0x1, 0xf, 0xffe, 0x1, 0x8, 0x1, 0x1006, 0x8, 0xffff, 0x6, 0xffffffa7, 0xf0, 0xfffffff9, 0x5, 0x3ff, 0x10000, 0x3, 0xe2df, 0x9, 0x1, 0x1, 0x3, 0x7, 0x5, 0x5]})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000885000/0x1000)=nil, 0x1000}})
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0)
ioctl$COMEDI_INSNLIST(r7, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000185780)=[{0x6000004, 0x0, 0x0, 0x1, 0x3}]})

1m32.505359652s ago: executing program 34 (id=574):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
unshare(0x2c060000)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x7fff, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x80000000000000})
renameat2(r2, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0/..\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000380)=""/197, &(0x7f00000001c0)=0xc5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000)
fsopen(&(0x7f0000000200)='ceph\x00', 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil)
r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'dmm32at\x00', [0xf000, 0x80008000, 0x1, 0x0, 0x0, 0x3, 0x1, 0xf, 0xffe, 0x1, 0x8, 0x1, 0x1006, 0x8, 0xffff, 0x6, 0xffffffa7, 0xf0, 0xfffffff9, 0x5, 0x3ff, 0x10000, 0x3, 0xe2df, 0x9, 0x1, 0x1, 0x3, 0x7, 0x5, 0x5]})
ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000885000/0x1000)=nil, 0x1000}})
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0)
ioctl$COMEDI_INSNLIST(r7, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000185780)=[{0x6000004, 0x0, 0x0, 0x1, 0x3}]})

6.943080809s ago: executing program 4 (id=1070):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8053, r1, 0x2e95b000)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x4900, 0x0)
connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100020592020881060500c0560102030109021b0001070340f20904fc08010af4770509050f"], &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
msgsnd(0x0, 0x0, 0x8, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x800)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c77a5c1638f3f66646e6f3d000000000000000000", @ANYRESHEX=r6, @ANYBLOB=',cache=mmap,access=client,cache=fscache,\x00'])
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x44080)

5.048832366s ago: executing program 4 (id=1078):
syz_usb_connect(0x5, 0x105, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcd, 0x52, 0x1d, 0x8, 0x1ae7, 0x525, 0xbae6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x1, 0x4, 0x1, 0x20, 0xd, [{{0x9, 0x4, 0x14, 0x40, 0x6, 0xf8, 0xe0, 0x35, 0x2, [], [{{0x9, 0x5, 0x6, 0x8, 0x200, 0x2, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf3, 0xb}, @generic={0x81, 0x0, "600953e511dc103ac0283e39273b740c6e0620b1be0eabcbef50f0a77c6d7e9d2d3bd2c75a1960bf173f3f0b8ce39c1a4cc4bfcef8b4dbc0bc5e245ddbd06cd9cd63e54766a10ce6cd7951c96e7f98fd6b63a287c70c54f923af242339fbdcd8ce3b2f426ae77250138044985f71e7d9d606705e14de5d9ee60924da6a3d73"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x0, 0x93, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc1, 0x5, 0x4}]}}, {{0x9, 0x5, 0x6, 0x5, 0x8, 0xf7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc3, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x4, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x68}, @uac_iso={0x7, 0x25, 0x1, 0xc3, 0x5, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x3, 0x6, 0xfd}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x9, 0xff}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x5, 0x6, 0xfa, 0x20, 0x3}, 0x4f, &(0x7f0000000840)={0x5, 0xf, 0x4f, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x8, 0x0, 0xfff, [0xff00ff, 0xff0f, 0xffffc0, 0xffffc0, 0x3f00, 0xff0000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x8, 0x0, 0xb, [0xc06f, 0x30, 0x30, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x1, 0xffff}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4ff}}, {0x89, &(0x7f0000000480)=@string={0x89, 0x3, "b3fda7b5f21a2ea1fb2c2d558dbed44c660d0e1041d35fc62f4869ae6eaaa1e738b19ed71617661bb1652f305984180892b1890b75d740e64ccd7d4848edc1c496a9f92d1803a7bbd74a864ae871c11dc6b15960cde18f38ef1d02cbe0418adae4780c0a65a127233c1f0b79aa7f484ee62d840c7eb4ba82891e4dfc2573e04dcd50b4ae8759c5"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc7a}}, {0xa7, &(0x7f00000005c0)=@string={0xa7, 0x3, "93698f7d331954cbb089a22de2b14d2909585a4bfd99fc14381d158a98878b658bddc1ef4c666badbc80907bca9a7ceb03da9d0ee58c7f0154b3e7bfc89456c6bcdec98fb271693db6490c94074d181ee3e11b469ce555c3d1820dcebef8f201fc61ae1030092defedeae017226e79917698dc046c9ade0b130c3761249b53458b1571b2c12cb1b3b82e3c13c9fcc5aa65641cd5166d71312901ff549a6cc036516251c2e1"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44b}}, {0xba, &(0x7f00000006c0)=@string={0xba, 0x3, "7f23b29e6f23fd89f4067b2b076ca6f5a07342d65d31c1f4eeeec3c190938921e4c15672dbdec30701d3694fc4a575d22a7db80861b83c94c47a41336bc530eac36e547f0c4d0a26ab0e30e6293c37e29c21fd06201a6feff49bea5988798959e0db5f1aa6d4b8c4866f1be8aaff6ab99571939a678904f4c9c7e339f4a71288768eb2b02d63d3799d7c8309dce8038f7f29b64fc8ed3849a96052d1a4cf33d68936b7f294537ed6f42db99fc99639f1a630bfc022bc6a8f"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40f}}]})

4.008588814s ago: executing program 5 (id=1082):
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x80000000, 0x10001, 0x4}}) (async, rerun: 32)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) (rerun: 32)

3.469228858s ago: executing program 4 (id=1083):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2e}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x40, 0x77}, {@rand_addr=0x64010102, 0x4e24, 0x2, 0x80000000, 0x12d5f, 0x3}}, 0x44)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
fadvise64(r1, 0x92, 0x5, 0x2)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x2, 0x2, 0x5, 0x0, 0x4}})
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000)

3.303530568s ago: executing program 5 (id=1084):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f00000002c0))
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) (async)
r3 = socket(0x1e, 0x1, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x163881)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000100)={0x80, 0x0, 0x0, 0x2}) (async)
recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/192, 0xc0}], 0x1}, 0x2141) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xc3a51000)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.255350398s ago: executing program 0 (id=1085):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x418800, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
mmap(&(0x7f0000479000/0x1000)=nil, 0x1000, 0x2000002, 0x22052, r0, 0x93771000)

3.078944171s ago: executing program 5 (id=1086):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000003dc0)={'batadv0\x00', {0x2, 0x0, @multicast2}})
r1 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x8000)
ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000001c0)=0xffffff37)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x93771000)

3.018882764s ago: executing program 0 (id=1088):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000c1c"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x145342, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000000780)={0x0, 0x3f, 0x4, @tid=r2}, &(0x7f0000000000)=<r3=>0x0)
clock_gettime(0x5, &(0x7f0000000800)={<r4=>0x0, <r5=>0x0})
timer_settime(r3, 0x1, &(0x7f0000000840)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0)
rt_sigaction(0x3f, &(0x7f0000000940)={&(0x7f00000008c0)="c46279340cdbc4c261ad9a0c000000c4c2d503f264430fae54bcc0660f638d9b540000c482c5ac2c566742d0430366f30fbae70040d9fa90", 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80))
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCFLSH(r6, 0x80045430, 0x20000000)
sendfile(r1, r1, 0x0, 0x7ffff000)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r7=>0x0}, &(0x7f00000000c0)=0xc)
ioprio_set$pid(0x0, r7, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000c1c"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x145342, 0x0) (async)
timer_create(0x3, 0x0, &(0x7f0000044000)) (async)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
gettid() (async)
timer_create(0x7, &(0x7f0000000780)={0x0, 0x3f, 0x4, @tid=r2}, &(0x7f0000000000)) (async)
clock_gettime(0x5, &(0x7f0000000800)) (async)
timer_settime(r3, 0x1, &(0x7f0000000840)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0) (async)
rt_sigaction(0x3f, &(0x7f0000000940)={&(0x7f00000008c0)="c46279340cdbc4c261ad9a0c000000c4c2d503f264430fae54bcc0660f638d9b540000c482c5ac2c566742d0430366f30fbae70040d9fa90", 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$TCFLSH(r6, 0x80045430, 0x20000000) (async)
sendfile(r1, r1, 0x0, 0x7ffff000) (async)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async)
ioprio_set$pid(0x0, r7, 0x0) (async)

2.822151918s ago: executing program 6 (id=1089):
r0 = socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340))
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x24008001)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)

2.294618981s ago: executing program 4 (id=1090):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x80082102, &(0x7f0000000240)={0x0, 0x2, r1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

1.917781301s ago: executing program 5 (id=1091):
mount(&(0x7f0000000000)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4c}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x81}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000013}, 0x4000010)

1.84040782s ago: executing program 6 (id=1092):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x67b}, 0x1c)
socket$inet(0x2b, 0x801, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x23c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f1cb21d3506a5809fbb4fea41095fdbd5caf0cc052879d42"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fb9285ba2569901eb58e2f73b221a0392901f5039b0c1f7b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c78a403cfc973a2e7675c40739b6775093e49b21b9947409"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cbf734841f3ccdc2177045fa19a37daf7545311c85246b05"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "11894a7e3086e59014b71dd6c7c3459a32f8352bb19142a3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f7374ff01296810e4ec0fa5cb359f8ee0127efd439e7afe4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0097ff4c102799af3a0a91c95ddd7995d38cc755486a8e99"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5ff573cf0cc5b668b3980a83088554beb015c1894085eba8"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "80c456889e35524dde2690049fd74e863a30f41ff9a07a57"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1db9a83289e378340028ace0b5274b881a742c5f13dc0876"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ba99cda998186994523a8fd21e147f5f2d47e028fd460b5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8a03263bd6b2df0f4fc02b8d9fd9d170320507aff6de0bc7"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4049831}, 0x4091)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0)

1.734255101s ago: executing program 5 (id=1093):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x109440)
utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x7fff, 0x7})
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000080)={0x8000000, 0x10080074})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r3, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2, 0x0, r6], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0x6]})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x4}, 0x6)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r8, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
set_mempolicy(0x4000, &(0x7f00000002c0)=0x1ff, 0x2)
ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r9, 0x0, &(0x7f00000001c0)="f1", 0x1, 0xfffffffffffffffd})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r10, 0x5708e000)

1.535911002s ago: executing program 0 (id=1094):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f000000c440)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad321b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459db9d1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e7782087383f2673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x84000000000000, {0x0, 0x200000000, 0x9, 0x7, 0x1000, 0x0, {0xfffffffffffffffd, 0x405, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r2, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x3, 0x8, {r0}, {r2}, 0x4, 0x5})
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x22052, r3, 0x2000)

1.481566599s ago: executing program 6 (id=1095):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)
getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'trusted.', 'wfdno'}, &(0x7f0000000300)=""/159, 0x9f)
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}], [{@obj_role={'obj_role', 0x3d, '(^'}}, {@fowner_lt={'fowner<', r1}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}})

1.287594819s ago: executing program 6 (id=1096):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

1.204032631s ago: executing program 6 (id=1097):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"])
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000", 0x1c}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f", 0x1d}], 0x2)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)

1.186090115s ago: executing program 4 (id=1098):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)

863.269458ms ago: executing program 6 (id=1099):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
copy_file_range(r4, 0x0, r4, 0x0, 0x7, 0x0) (async)
r5 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x483, 0x3261, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc8, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0xe, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x278}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0x7, 0xb}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x4, 0x2, 0x40, 0x9}, 0x57, &(0x7f00000001c0)={0x5, 0xf, 0x57, 0x6, [@generic={0x17, 0x10, 0x2, "3f4652a8ad7c5a57e631b468999b3d42241ea6dd"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x0, 0xf000, 0x3, [0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xc, 0x1, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x4, 0x3, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x7c, 0x1, 0x4, 0xf00f, 0x574, [0xff0f]}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0xe, 0xa4eb}]}, 0x2, [{0x33, &(0x7f0000000240)=@string={0x33, 0x3, "d823f8889bf2fc579716b55dc21c2e9dabfc06e4913fbcfd8418687128d06067e99590f96d5de2dce2e765a833de3bc4da"}}, {0x84, &(0x7f0000000280)=@string={0x84, 0x3, "df142631b8a4ba1fac57481e85c1ef6032f7bf1d661363aa4d5aeb45397f3697e9a7cd20fd6963b4a35efea0dcb107c70fc8e4f09c7c8e93b460a7da7e5806311182fe0ec128b2f53ae3fb98444f6afa171cfd5d5a0a4cb049a193255c2e5630b87d54812f8f58aba4fac2a2cea0cfc64566129b8985076ab647657fd72d53021b93"}}]})
syz_usb_control_io$hid(r7, &(0x7f0000000580)={0x24, &(0x7f0000000380)={0x20, 0x8, 0x7e, {0x7e, 0xd, "6398e62276988c04ee6ad9e7099f80e534ee4293851dc3a52fc767bfbb0cdb76969a217ec37b773aea4ecf09c1d0de575f228d99d737f4f58affeffa654072d59936e8b1c5bf3f4ba97a15998c9b4cebbab47dd56a68ba7e1d6e2e754a735954b44dc5357f99788ee8283e8794132e6a2e478421982a9f50d0f25df5"}}, &(0x7f0000000440)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "bca4028eabe81519f4db2ed454beb2727d13560476da7da0ae0443c797b12e0c106a35aaa28ebe13d3e10c48b228e5b151a1fe8cbd3aebdce23159246e7a6f920b3fd02d16b695a72a70b82e0d977523db443f2324eff04e6ffed0fc2eaceab091d5af2b3b69dd11ea640cf0550f4d039e7587c413c25aedfb"}}, &(0x7f0000000500)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0xb, "22d39510"}, @local=@item_4={0x3, 0x2, 0x0, "6ffb4e70"}, @global=@item_012={0x0, 0x1, 0x5}, @main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x44, 0x1, {0x22, 0xe5d}}}}, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x20, 0x18, 0x22, "c4fda681938efc8af940da1e83a86d17bb6c4450a07e186bbfcac2dc3d121c7acdae"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000000680)={0x20, 0x1, 0xbc, "3c4a88dbe3745c3d4350ddb1ea0362824cd5cbbe7d2587348407164c73458ab281cfa11abe530b5b6cbc5cac895b2f08daff6d7854ca3b9bfb1bf6afc3f4ad5a5cc3ec157b57f928eccbf0086211c929991cea535e56ef0617c89eea8d1f427042c27dc68979a35b87d9f63c1fcd6692608d0e90768bdd4331ecdacf54a96ce4a202634550061d19f36c70f9abe17307ab735c2609450c8dcead2c82903a4db692ec193594587cc6f2546e8b9cf58b7d3d8937488af20011997d6bb0"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x7}}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r8=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x100010, r0, 0xc3a51000) (async)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[], 0xfe33) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

783.367554ms ago: executing program 0 (id=1100):
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000))
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xec1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdc7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x904c}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x810)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x29120, 0x4)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001280)={'veth0_to_bridge\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x20, 0x1000, "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"}})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000012c0)={0x48, 0x7, r1, 0x0, 0x1, <r3=>0x0, 0x1675, 0x5})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000001340)={0x48, 0x6, r2, 0x0, r3})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), r0)
sendmsg$TIPC_NL_NET_GET(r4, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8010)
r6 = accept$packet(r1, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x14)
sendmsg$inet(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001580)="8a4ca402ae", 0x5}, {&(0x7f00000015c0)="d6f4afab18e699f631b0660482ff75c8fe5f36d0aeec7948a2f6853fd1a2c3c760e33924dad75209919a63df1f58972843b4489871dcccd84f4265f208b9eb69a3c4504da5f6a16c570e57206fd9815cabfe89be1cecbb320d2dfc5e38fe9fcdac8e593642a35d340d5cc522fcca03ef2d3d0e399e352c45a60cc76b1045bd9bab627e28f57a70dc82a1e9ab482a51e993d1493d8f788260c8d2a05765cf80eb6ce9a59aaa00d8711e240ad904f76526fe36866701e19064b0b9a05f9cbde183383225b07ead075ab42cefe87b3bf86e744e73bbfa07964b80e9a798ad02ca255497ea050c0cfa6ad0b0", 0xea}, {&(0x7f00000016c0)="021034b77fcb37a08160dcb0a41171726b0bdc41a708d587303637aaddda0a2ca62fad77e1011e3b4f4d327e04dcc6557a06c4a02b9a6e08fd38088be21aff96afbc77e246b9db3e56f0e17461cf82f1007a9d7ba4a672067570f0b5a40db2118d826082baeb70b458dfeeb381efcd00797242f98c3dd3f751a588eb0e2fd4e31e998a780ceb66f764e680ab48026a040c03fddf206a930372536ed556c0a0896b111c007da01c217c9a8da8194bb9e5ed59086a3f", 0xb5}, {&(0x7f0000001780)="447209bfff8b9a11e5e13d814b78d95a5996c0f2c837527dfe57a6dc918b1afd5b75f4f659c31a56514621971701da399b7c8cd18120bdda72ad907de97794770e56698258833987d157cc55a76309a370d0", 0x52}], 0x4, &(0x7f0000001840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xf1, [@broadcast, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x7, 0xbd, [@empty]}, @rr={0x7, 0x7, 0x6d, [@broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x52}}, @ip_retopts={{0x54, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x4d, 0x0, 0x3, [0xd7, 0x149]}, @timestamp_prespec={0x44, 0x1c, 0x5d, 0x3, 0x7, [{@broadcast, 0xe}, {@local, 0xda}, {@empty, 0x6}]}, @generic={0x88, 0xc, "b9dc70cf4aa2b13a49c8"}, @lsrr={0x83, 0x7, 0xbd, [@multicast1]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x29}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x108}, 0x4040011)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x50, 0x140a, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020)
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001d80)={0x0, &(0x7f0000001c00)=[@uexit={0x0, 0x18, 0xed8}, @cpuid={0x14, 0x18, {0xd141, 0x2}}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x84, {"48b800a00000000000000f23c80f21f8350800e0000f23f8660f388005ff413bf6c4e3b56966057ec4e1ff2dacf804000000430f09b9800000c00f3235002000000f308fa84896c1c166b81c010f00d0c744240000700000c744240200000000c7442406000000000f01142466460f38806b14"}}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x59, {"c7442400c2000000c744240200000000ff2c24b805000000b9000000000f01d9460f01b900200000b9060a00000f322cc6670f01f80fc76801c44178ae50ca0f01c5c401a157784f"}}, @wrmsr={0x1e, 0x20, {0x84f, 0x7}}], 0x15d})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000001dc0)={0x6, 0x0, [{0xb4a, 0x0, 0x213}, {0xa48, 0x0, 0x8000000000000001}, {0x3be, 0x0, 0x101}, {0xaea, 0x0, 0x500000}, {0x11a, 0x0, 0x4}, {0xb86, 0x0, 0x7}]})
getpeername$packet(r6, &(0x7f0000001e40)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001e80)=0x14)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000001ec0)='TIPCv2\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001f40)={'tunl0\x00', &(0x7f0000001f00)={'tunl0\x00', <r9=>r8, 0x80, 0x7800, 0x9, 0xd, {{0x7, 0x4, 0x2, 0x3b, 0x1c, 0x67, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, {[@timestamp={0x44, 0x8, 0x6d, 0x0, 0x8, [0x92ddaff]}]}}}}})
connect$packet(r1, &(0x7f0000001f80)={0x11, 0xc, r9, 0x1, 0x9, 0x6, @remote}, 0x14)
bind$bt_l2cap(r1, &(0x7f0000001fc0)={0x1f, 0x84, @none, 0x8000, 0x2}, 0xe)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000002000)={'adl_pci9118\x00', [0x8000, 0xfe4d, 0x0, 0x8, 0x7f1, 0xfffe0000, 0x8, 0x8, 0x7ff, 0xb, 0x8001, 0x800, 0x1, 0x54, 0x401, 0xfffffabd, 0x5, 0x9, 0x1000, 0x5, 0x3, 0x1, 0x9, 0x8, 0xc8, 0x7fff, 0x0, 0xba3d, 0x1000, 0xffffffff, 0x2, 0x99]})
symlinkat(&(0x7f00000020c0)='./file0\x00', r1, &(0x7f0000002100)='./file0\x00')
clock_gettime(0x0, &(0x7f0000002140)={<r10=>0x0, <r11=>0x0})
clock_gettime(0x0, &(0x7f0000002180)={<r12=>0x0, <r13=>0x0})
clock_gettime(0x0, &(0x7f00000021c0)={<r14=>0x0, <r15=>0x0})
write$evdev(r1, &(0x7f0000002200)=[{{}, 0x4, 0x3, 0x3}, {{r10, r11/1000+10000}, 0x16, 0x10, 0x1}, {{0x77359400}, 0x14, 0x1, 0x8}, {{r12, r13/1000+10000}, 0x3, 0x2, 0x1}, {{r14, r15/1000+60000}, 0x14, 0x9, 0x800}, {{0x0, 0x2710}, 0x19, 0x6, 0x1b89200}], 0x90)

617.120614ms ago: executing program 5 (id=1101):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x5, &(0x7f00000001c0)="c710b33eeabd79a0002297d77adf7dbe1000d8837ef93bdf9f03cf482d0164201f")
ptrace$cont(0x21, r1, 0x0, 0x0)
ptrace(0x10, r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0xad}) (async)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0xad})
r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)

491.424077ms ago: executing program 0 (id=1102):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0)

264.185568ms ago: executing program 0 (id=1103):
socket$unix(0x1, 0x1, 0x0) (async)
r0 = socket$unix(0x1, 0x1, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x2000080, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000580)={'batadv0\x00', &(0x7f00000005c0)=@ethtool_wolinfo={0x6, 0x1ff, 0xad, "67d077aeb8b9"}})
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
listen(0xffffffffffffffff, 0x8)
r3 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./cgroup\x00', &(0x7f00000001c0)={0x0, 0x3}, 0x18)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"})
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0)

0s ago: executing program 4 (id=1104):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x88c3, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
futex(&(0x7f0000000180)=0x2, 0x0, 0x1, &(0x7f0000000080), 0x0, 0x2) (async)
sendfile(r0, r0, 0x0, 0x71d)

kernel console output (not intermixed with test programs):

turned -16
[  192.066734][ T7952] /dev/rnullb0: Can't open blockdev
[  192.210807][ T5976] usb 1-1: USB disconnect, device number 24
[  192.410323][   T24] usb 5-1: device descriptor read/64, error -71
[  192.508737][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  192.649065][   T10] usb 6-1: device descriptor read/64, error -71
[  192.655491][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  192.830877][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.848315][   T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  192.869915][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.888781][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  192.900045][   T24] usb 5-1: config 0 descriptor??
[  192.921847][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  193.031630][   T10] usb 6-1: device descriptor read/64, error -71
[  193.139184][   T10] usb usb6-port1: attempt power cycle
[  193.320642][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  193.328415][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  193.347653][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  193.355945][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  193.365314][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  193.374239][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.384589][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.394454][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  193.407350][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  193.418636][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[  193.488703][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  193.539691][   T10] usb 6-1: device descriptor read/8, error -71
[  193.635645][ T7975] futex_wake_op: syz.4.532 tries to shift op by -1; fix this program
[  193.657255][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  193.664500][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  193.675192][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  193.682621][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  193.689706][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  193.696645][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  193.705859][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  193.714175][   T24] pwc: Registered as video103.
[  193.724812][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  193.753362][   T24] usb 5-1: USB disconnect, device number 9
[  193.779147][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  193.814874][   T10] usb 6-1: device descriptor read/8, error -71
[  193.868782][ T5937] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  193.941118][   T10] usb usb6-port1: unable to enumerate USB device
[  194.018721][ T5937] usb 1-1: Using ep0 maxpacket: 32
[  194.026066][ T5937] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  194.034298][ T5937] usb 1-1: config 0 has no interface number 0
[  194.042744][ T5937] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  194.053914][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.061997][ T5937] usb 1-1: Product: syz
[  194.066911][ T5937] usb 1-1: Manufacturer: syz
[  194.071877][ T5937] usb 1-1: SerialNumber: syz
[  194.078856][ T5937] usb 1-1: config 0 descriptor??
[  194.087783][ T5937] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  194.096686][ T5937] usb 1-1: selecting invalid altsetting 1
[  194.102520][ T5937] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  194.118365][ T5937] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  194.129183][ T5937] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  194.137472][ T5937] usb 1-1: media controller created
[  194.158178][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  194.252150][ T8021] gfs2: path_lookup on c::: returned error -2
[  194.263643][ T8021] fuse: Bad value for 'user_id'
[  194.268880][ T8021] fuse: Bad value for 'user_id'
[  194.314636][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  194.321372][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  194.650904][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.660516][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.675452][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.686420][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.696676][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.706141][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.716527][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.736662][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.746722][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.759627][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.768515][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.788234][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.044095][ T8048] syz.3.547: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  195.062285][ T8048] CPU: 1 UID: 0 PID: 8048 Comm: syz.3.547 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  195.062310][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  195.062320][ T8048] Call Trace:
[  195.062327][ T8048]  <TASK>
[  195.062335][ T8048]  dump_stack_lvl+0x189/0x250
[  195.062367][ T8048]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.062392][ T8048]  ? __pfx__printk+0x10/0x10
[  195.062418][ T8048]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  195.062445][ T8048]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  195.062472][ T8048]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  195.062511][ T8048]  warn_alloc+0x214/0x310
[  195.062537][ T8048]  ? __pfx_warn_alloc+0x10/0x10
[  195.062567][ T8048]  ? __get_vm_area_node+0x28f/0x300
[  195.062586][ T8048]  ? packet_set_ring+0x6f4/0x2380
[  195.062610][ T8048]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  195.062664][ T8048]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  195.062686][ T8048]  ? alloc_pages_mpol+0x3cd/0x4a0
[  195.062711][ T8048]  ? packet_set_ring+0x6f4/0x2380
[  195.062728][ T8048]  vzalloc_noprof+0xb2/0xf0
[  195.062747][ T8048]  ? packet_set_ring+0x6f4/0x2380
[  195.062768][ T8048]  packet_set_ring+0x6f4/0x2380
[  195.062810][ T8048]  ? __pfx_packet_set_ring+0x10/0x10
[  195.062851][ T8048]  ? _copy_from_user+0x94/0xb0
[  195.062875][ T8048]  packet_setsockopt+0xc5a/0x12c0
[  195.062897][ T8048]  ? __pfx_packet_setsockopt+0x10/0x10
[  195.062922][ T8048]  ? __lock_acquire+0xab9/0xd20
[  195.062949][ T8048]  ? aa_sk_perm+0x81e/0x950
[  195.062983][ T8048]  ? __pfx_aa_sk_perm+0x10/0x10
[  195.063013][ T8048]  ? __fget_files+0x2a/0x420
[  195.063039][ T8048]  ? aa_sock_opt_perm+0xff/0x1b0
[  195.063069][ T8048]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  195.063096][ T8048]  ? __pfx_packet_setsockopt+0x10/0x10
[  195.063117][ T8048]  do_sock_setsockopt+0x179/0x1b0
[  195.063143][ T8048]  __x64_sys_setsockopt+0x13f/0x1b0
[  195.063169][ T8048]  do_syscall_64+0xfa/0x3b0
[  195.063193][ T8048]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.063216][ T8048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.063234][ T8048]  ? clear_bhb_loop+0x60/0xb0
[  195.063257][ T8048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.063274][ T8048] RIP: 0033:0x7f0e9df8e9a9
[  195.063292][ T8048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.063308][ T8048] RSP: 002b:00007f0e9eec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  195.063329][ T8048] RAX: ffffffffffffffda RBX: 00007f0e9e1b5fa0 RCX: 00007f0e9df8e9a9
[  195.063341][ T8048] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005
[  195.063352][ T8048] RBP: 00007f0e9e010d69 R08: 000000000000001c R09: 0000000000000000
[  195.063363][ T8048] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  195.063374][ T8048] R13: 0000000000000000 R14: 00007f0e9e1b5fa0 R15: 00007ffd9d521398
[  195.063406][ T8048]  </TASK>
[  195.063413][ T8048] Mem-Info:
[  195.138702][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  195.147188][ T8048] active_anon:6489 inactive_anon:0 isolated_anon:0
[  195.147188][ T8048]  active_file:21304 inactive_file:46331 isolated_file:0
[  195.147188][ T8048]  unevictable:781 dirty:48 writeback:0
[  195.147188][ T8048]  slab_reclaimable:11458 slab_unreclaimable:98226
[  195.147188][ T8048]  mapped:24879 shmem:1566 pagetables:1369
[  195.147188][ T8048]  sec_pagetables:0 bounce:0
[  195.147188][ T8048]  kernel_misc_reclaimable:0
[  195.147188][ T8048]  free:1301579 free_pcp:22696 free_cma:0
[  195.271887][ T5937] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  195.277060][ T8048] Node 0 active_anon:25956kB inactive_anon:0kB active_file:66184kB inactive_file:185120kB unevictable:1588kB isolated(anon):0kB isolated(file):0kB mapped:99516kB dirty:188kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12336kB pagetables:5340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  195.302979][ T5937] zl10353_read_register: readreg error (reg=127, ret==-110)
[  195.309969][ T8048] Node 1 active_anon:0kB inactive_anon:0kB active_file:19032kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  195.310024][ T8048] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  195.318805][   T10] usb 5-1: Using ep0 maxpacket: 8
[  195.326240][ T8048] lowmem_reserve[]:
[  195.349350][ T8016] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  195.420777][ T8048]  0
[  195.484979][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  195.503718][ T8048]  2496 2497 2497 2497
[  195.551131][ T8048] Node 0 DMA32 free:1347588kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25808kB inactive_anon:0kB active_file:66184kB inactive_file:184044kB unevictable:1588kB writepending:188kB present:3129332kB managed:2556420kB mlocked:52kB bounce:0kB free_pcp:45680kB local_pcp:20628kB free_cma:0kB
[  195.579974][   T10] usb 5-1: config 4 interface 0 has no altsetting 0
[  195.607336][ T8048] lowmem_reserve[]: 0 0 1 1 1
[  195.611719][   T10] usb 5-1: string descriptor 0 read error: -22
[  195.613346][ T8048] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1076kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  195.623817][   T10] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  195.657412][ T5937] usb 1-1: USB disconnect, device number 25
[  195.667434][ T8048] lowmem_reserve[]: 0 0 0 0 0
[  195.697749][   T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  195.706812][ T8048] Node 1 Normal free:3843368kB boost:0kB min:55672kB low:69588kB high:83504kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:19032kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:45764kB local_pcp:20844kB free_cma:0kB
[  195.763905][ T8048] lowmem_reserve[]: 0 0 0 0 0
[  195.767302][   T10] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  195.769345][ T8048] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  195.794451][ T8048] Node 0 DMA32: 1*4kB (U) 2*8kB (ME) 31*16kB (UME) 458*32kB (UM) 181*64kB (UM) 37*128kB (UM) 25*256kB (UM) 22*512kB (UM) 6*1024kB (UME) 1*2048kB (E) 315*4096kB (M) = 1347588kB
[  195.801096][   T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  195.831994][ T8048] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  195.846844][ T8048] Node 1 Normal: 1522*4kB (UME) 456*8kB (ME) 268*16kB (M) 291*32kB (UME) 20*64kB (UME) 8*128kB (UM) 7*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 4*2048kB (ME) 928*4096kB (UM) = 3843368kB
[  195.880162][ T8048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  195.892963][ T8048] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  195.923029][ T8048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  195.951480][   T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  195.973535][   T10] usb 5-1: media controller created
[  196.000863][ T8048] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  196.010571][ T8048] 69231 total pagecache pages
[  196.015353][ T8048] 0 pages in swap cache
[  196.034856][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.545'.
[  196.045363][ T8058] /dev/rnullb0: Can't open blockdev
[  196.062907][ T8048] Free swap  = 124996kB
[  196.067226][ T8048] Total swap = 124996kB
[  196.072020][ T8048] 2097051 pages RAM
[  196.076083][ T8048] 0 pages HighMem/MovableOnly
[  196.084186][ T8048] 426032 pages reserved
[  196.088763][ T8048] 0 pages cma reserved
[  196.112886][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  196.455407][ T8068] /dev/rnullb0: Can't open blockdev
[  196.643024][ T8078] /dev/rnullb0: Can't open blockdev
[  197.246746][   T10] zl10353_read_register: readreg error (reg=127, ret==0)
[  197.292439][   T30] audit: type=1326 audit(1753680563.903:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  197.377832][   T30] audit: type=1326 audit(1753680563.903:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  197.453759][   T10] usb 5-1: USB disconnect, device number 10
[  197.483181][   T30] audit: type=1326 audit(1753680563.903:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  197.542603][ T8100] /dev/rnullb0: Can't open blockdev
[  197.554883][ T8098] syz.5.560: attempt to access beyond end of device
[  197.554883][ T8098] loop5: rw=0, sector=2, nr_sectors = 2 limit=0
[  197.588871][   T30] audit: type=1326 audit(1753680563.903:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  197.624878][ T8098] syz.5.560: attempt to access beyond end of device
[  197.624878][ T8098] loop5: rw=0, sector=16, nr_sectors = 2 limit=0
[  197.652181][   T30] audit: type=1326 audit(1753680563.903:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  197.708792][ T8106] input: syz1 as /devices/virtual/input/input12
[  197.732113][ T8108] /dev/sg0: Can't lookup blockdev
[  197.772163][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.799572][   T30] audit: type=1326 audit(1753680563.903:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  197.847804][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.876141][   T30] audit: type=1326 audit(1753680563.903:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  197.936277][   T30] audit: type=1326 audit(1753680563.923:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  198.025707][   T30] audit: type=1326 audit(1753680563.923:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  198.100173][ T8113] /dev/rnullb0: Can't open blockdev
[  198.152719][   T30] audit: type=1326 audit(1753680563.943:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.0.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  198.191237][ T8118] /dev/rnullb0: Can't open blockdev
[  198.468197][ T8125] /dev/rnullb0: Can't open blockdev
[  198.495311][ T8128] /dev/rnullb0: Can't open blockdev
[  198.729226][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  198.908644][   T10] usb 6-1: Using ep0 maxpacket: 32
[  198.926072][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  198.971537][   T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  199.000261][   T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  199.008478][   T10] usb 6-1: Product: syz
[  199.025863][   T10] usb 6-1: Manufacturer: syz
[  199.041424][   T10] usb 6-1: SerialNumber: syz
[  199.067557][   T10] usb 6-1: config 0 descriptor??
[  199.089997][ T8150] openvswitch: netlink: Key type 8470 is out of range max 32
[  199.109042][ T8130] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  199.168603][ T8150] /dev/rnullb0: Can't open blockdev
[  199.496728][   T24] usb 6-1: USB disconnect, device number 8
[  199.516681][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'.
[  199.519771][ T8163] fuse: Unknown parameter 'fd70x0000000000000003'
[  199.805845][ T8168] comedi comedi1: board detection failed
[  200.098781][   T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  200.266835][   T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  200.299598][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.307666][   T10] usb 1-1: Product: syz
[  200.342773][   T10] usb 1-1: Manufacturer: syz
[  200.347435][   T10] usb 1-1: SerialNumber: syz
[  200.400507][   T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  200.446904][  T986] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  200.849495][ T8171] /dev/rnullb0: Can't open blockdev
[  200.914079][ T5976] usb 1-1: USB disconnect, device number 26
[  200.978920][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  200.992689][ T8201] /dev/rnullb0: Can't open blockdev
[  201.080131][ T8204] overlayfs: missing 'lowerdir'
[  201.169337][   T10] usb 5-1: Using ep0 maxpacket: 8
[  201.215066][ T8195] netlink: 'syz.4.581': attribute type 21 has an invalid length.
[  201.230434][ T8195] /dev/rnullb0: Can't open blockdev
[  201.264395][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  201.297045][   T10] usb 5-1: unable to read config index 0 descriptor/start: -71
[  201.304889][   T10] usb 5-1: can't read configurations, error -71
[  201.486749][ T8215] syz.0.586: attempt to access beyond end of device
[  201.486749][ T8215] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[  201.520474][ T8215] isofs_fill_super: bread failed, dev=nbd0, iso_blknum=16, block=32
[  201.668754][  T986] usb 1-1: Service connection timeout for: 256
[  201.674984][  T986] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  201.700459][  T986] ath9k_htc: Failed to initialize the device
[  201.713760][ T5976] usb 1-1: ath9k_htc: USB layer deinitialized
[  202.048841][ T5976] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  202.222466][ T5976] usb 1-1: not running at top speed; connect to a high speed hub
[  202.245024][ T5976] usb 1-1: config 1 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  202.297149][ T5976] usb 1-1: config 1 interface 0 has no altsetting 0
[  202.322001][ T5976] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40
[  202.341729][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.348017][ T8233] netlink: 60 bytes leftover after parsing attributes in process `syz.4.589'.
[  202.360894][ T5976] usb 1-1: Product: А
[  202.367329][ T5976] usb 1-1: Manufacturer: 뤉楹癳襞햧ꌭ阔䯽츛丹岖뿘苕稱쎊툰꼿ᖣ鱍磔팡檚뤶詉背ꑱ翢Ⴟ׮ᲹⰣ查
[  202.393868][ T8232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.589'.
[  202.413331][ T8234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.589'.
[  202.416179][ T5976] usb 1-1: SerialNumber: syz
[  202.475733][ T8232] /dev/rnullb0: Can't open blockdev
[  203.091948][ T5976] usbhid 1-1:1.0: can't add hid device: -71
[  203.098418][ T5976] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  203.136734][ T5976] usb 1-1: USB disconnect, device number 27
[  203.149217][ T8248] netlink: 'syz.4.592': attribute type 10 has an invalid length.
[  203.885820][ T8267] /dev/rnullb0: Can't open blockdev
[  204.409145][ T8273] /dev/rnullb0: Can't open blockdev
[  205.371580][ T8293] /dev/rnullb0: Can't open blockdev
[  205.626858][ T8299] /dev/rnullb0: Can't open blockdev
[  205.637497][ T5937] hid_parser_main: 33 callbacks suppressed
[  205.637519][ T5937] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  205.678954][ T5937] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  205.698709][ T5937] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  205.728905][ T5937] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  205.766848][ T5937] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  205.788192][ T5937] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  205.824548][ T5937] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  205.849759][ T5937] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  205.857209][ T5937] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  205.872561][ T8303] /dev/rnullb0: Can't open blockdev
[  205.898638][ T5937] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  205.934369][ T8306] /dev/rnullb0: Can't open blockdev
[  205.936911][ T5937] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  206.197266][ T8308] fido_id[8308]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  206.378679][  T851] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[  206.539892][  T851] usb 1-1: Invalid ep0 maxpacket: 64
[  206.630718][ T5856] Bluetooth: hci1: command 0x0406 tx timeout
[  206.699780][  T851] usb 1-1: new low-speed USB device number 29 using dummy_hcd
[  206.813165][ T5937] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  206.878816][  T851] usb 1-1: Invalid ep0 maxpacket: 64
[  206.889080][  T851] usb usb1-port1: attempt power cycle
[  206.992795][ T8336] /dev/rnullb0: Can't open blockdev
[  206.999765][ T5937] usb 5-1: Using ep0 maxpacket: 8
[  207.043112][ T5937] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  207.064261][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.081263][ T5937] usb 5-1: Product: syz
[  207.098828][ T5937] usb 5-1: Manufacturer: syz
[  207.103506][ T5937] usb 5-1: SerialNumber: syz
[  207.147534][ T5937] usb 5-1: config 0 descriptor??
[  207.248698][  T851] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[  207.299189][  T851] usb 1-1: Invalid ep0 maxpacket: 64
[  207.322489][ T8340] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  207.376703][ T8340] ./cgroup: Can't lookup blockdev
[  207.378757][ T5937] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  207.444908][  T851] usb 1-1: new low-speed USB device number 31 using dummy_hcd
[  207.489499][  T851] usb 1-1: Invalid ep0 maxpacket: 64
[  207.499255][  T851] usb usb1-port1: unable to enumerate USB device
[  207.652527][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  207.652562][   T30] audit: type=1326 audit(1753680574.273:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.5.612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccf498e9a9 code=0x0
[  207.947295][ T8351] /dev/rnullb0: Can't open blockdev
[  208.231198][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'.
[  208.257984][ T5937] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  208.286884][ T5937] usb 5-1: USB disconnect, device number 13
[  208.565542][ T8361] overlayfs: missing 'lowerdir'
[  208.605668][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.5.616'.
[  208.972827][ T8372] netlink: 'syz.5.618': attribute type 21 has an invalid length.
[  208.985871][ T8373] /dev/rnullb0: Can't open blockdev
[  209.124835][ T8376] /dev/rnullb0: Can't open blockdev
[  209.170068][ T8377] /dev/rnullb0: Can't open blockdev
[  209.508725][ T5976] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  209.690592][ T5976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.705132][ T5976] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  209.731875][ T5976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.752004][ T5976] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  209.781933][ T5976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.802430][ T5976] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  209.833396][ T5976] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  209.852908][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  209.868598][ T5976] usb 1-1: SerialNumber: syz
[  209.886639][ T5976] usb 1-1: bad CDC descriptors
[  210.095149][ T8379] /dev/rnullb0: Can't open blockdev
[  210.110785][ T8386] /dev/rnullb0: Can't open blockdev
[  210.117432][ T8379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.139582][ T8379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.162128][ T5976] usb 1-1: USB disconnect, device number 32
[  210.298216][ T8390] /dev/rnullb0: Can't open blockdev
[  210.316682][ T8392] /dev/rnullb0: Can't open blockdev
[  210.783560][ T8403] /dev/rnullb0: Can't open blockdev
[  210.894393][ T8407] binder: 8405:8407 ioctl c0306201 200000000080 returned -14
[  211.234046][ T8414] futex_wake_op: syz.5.630 tries to shift op by -1; fix this program
[  211.244309][   T36] Bluetooth: hci4: Frame reassembly failed (-84)
[  211.272063][ T8414] netlink: 20 bytes leftover after parsing attributes in process `syz.5.630'.
[  211.281526][ T8395] /dev/rnullb0: Can't open blockdev
[  211.459206][ T8417] /dev/rnullb0: Can't open blockdev
[  211.924178][  T851] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  212.058855][ T5976] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  212.078742][  T851] usb 5-1: Using ep0 maxpacket: 8
[  212.090136][  T851] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  212.098436][  T851] usb 5-1: config 0 has no interface number 0
[  212.111637][  T851] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  212.124338][  T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.133693][  T851] usb 5-1: Product: syz
[  212.144775][  T851] usb 5-1: Manufacturer: syz
[  212.149921][  T851] usb 5-1: SerialNumber: syz
[  212.159721][  T851] usb 5-1: config 0 descriptor??
[  212.230567][ T5976] usb 1-1: Using ep0 maxpacket: 32
[  212.246220][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.260078][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.270277][ T5976] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  212.279495][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.296839][ T5976] usb 1-1: config 0 descriptor??
[  212.307068][ T5976] hub 1-1:0.0: USB hub found
[  212.378866][ T8419] binder: 8418:8419 ioctl 400c620e 2000000014c0 returned -14
[  212.397209][ T8419] binder: 8418:8419 ioctl c0306201 200000000140 returned -14
[  212.421283][ T8419] /dev/rnullb0: Can't open blockdev
[  212.434714][  T851] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[  212.443479][  T851] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized!
[  212.474794][  T851] usb 5-1: USB disconnect, device number 14
[  212.511193][ T5976] hub 1-1:0.0: 1 port detected
[  213.075399][ T8426] /dev/rnullb0: Can't open blockdev
[  213.106864][ T5976] hub 1-1:0.0: activate --> -90
[  213.268790][ T5849] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  213.275294][ T5856] Bluetooth: hci4: command 0x1003 tx timeout
[  213.416999][ T8430] /dev/rnullb0: Can't open blockdev
[  213.424203][ T8431] /dev/rnullb0: Can't open blockdev
[  213.430339][   T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  213.528145][   T30] audit: type=1326 audit(1753680580.143:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.0.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x0
[  213.583894][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.599209][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.600687][   T24] usb 5-1: Using ep0 maxpacket: 32
[  213.622275][   T24] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  213.639075][   T24] usb 5-1: config 0 has no interface number 0
[  213.651891][   T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  213.678780][ T5976] usb 1-1.1: new full-speed USB device number 34 using dummy_hcd
[  213.686711][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.694801][ T5976] usb 1-1.1: parent hub has no TT
[  213.703351][   T24] usb 5-1: Product: syz
[  213.707546][   T24] usb 5-1: Manufacturer: syz
[  213.712466][   T24] usb 5-1: SerialNumber: syz
[  213.726655][   T24] usb 5-1: config 0 descriptor??
[  213.827936][ T8422] /dev/rnullb0: Can't open blockdev
[  213.937923][   T24] radio-si470x 5-1:0.35: this is not a si470x device.
[  213.979778][   T24] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  214.017462][ T8439] /dev/rnullb0: Can't open blockdev
[  214.024420][ T8440] /dev/rnullb0: Can't open blockdev
[  214.143455][ T8442] /dev/rnullb0: Can't open blockdev
[  214.150724][ T8443] /dev/rnullb0: Can't open blockdev
[  214.217966][   T24] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71)
[  214.241671][   T24] radio-raremono 5-1:0.35: V4L2 device registered as radio48
[  214.292927][   T24] usb 5-1: USB disconnect, device number 15
[  214.322729][   T24] radio-raremono 5-1:0.35: Thanko's Raremono disconnected
[  214.354355][ T8449] /dev/rnullb0: Can't open blockdev
[  214.832481][ T5976] usb 1-1-port1: cannot disable (err = -110)
[  214.839327][ T5976] usb 1-1-port1: cannot reset (err = -32)
[  214.850079][ T5976] usb 1-1-port1: cannot reset (err = -32)
[  214.896546][   T10] usb 4-1: USB disconnect, device number 10
[  215.033207][ T5976] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad?
[  215.059970][ T5976] usb 1-1-port1: cannot disable (err = -32)
[  215.092656][ T5976] usb 1-1-port1: attempt power cycle
[  215.292057][   T24] usb 1-1: USB disconnect, device number 33
[  215.421846][ T8462] /dev/rnullb0: Can't open blockdev
[  215.544276][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  215.560590][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  215.569793][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  215.578016][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  215.588855][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  215.712149][ T8469] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  216.118729][ T5915] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  216.356272][ T5915] usb 5-1: Using ep0 maxpacket: 16
[  216.383307][ T8465] chnl_net:caif_netlink_parms(): no params data found
[  216.397087][ T5915] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  216.417928][   T30] audit: type=1326 audit(1753680583.033:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  216.448766][ T5915] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.488717][ T5915] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.498504][ T5915] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  216.543396][   T30] audit: type=1326 audit(1753680583.033:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  216.578986][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  216.608624][ T5915] usb 5-1: config 7 interface 0 has no altsetting 0
[  216.615795][ T5915] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  216.666611][   T30] audit: type=1326 audit(1753680583.033:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  216.697397][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.851654][   T30] audit: type=1326 audit(1753680583.073:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  216.904271][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.912016][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.919715][ T8465] bridge_slave_0: entered allmulticast mode
[  216.928497][ T8465] bridge_slave_0: entered promiscuous mode
[  216.938420][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.947625][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.955729][ T8465] bridge_slave_1: entered allmulticast mode
[  216.984071][   T30] audit: type=1326 audit(1753680583.083:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  216.990743][ T8465] bridge_slave_1: entered promiscuous mode
[  217.045116][   T30] audit: type=1326 audit(1753680583.083:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  217.068887][ T5937] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  217.106637][   T30] audit: type=1326 audit(1753680583.083:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  217.165512][ T8465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.174789][   T30] audit: type=1326 audit(1753680583.083:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  217.196098][ T8465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.230029][ T5937] usb 6-1: Using ep0 maxpacket: 8
[  217.238073][   T30] audit: type=1326 audit(1753680583.083:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8481 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  217.270492][ T5937] usb 6-1: config 0 has no interfaces?
[  217.278949][ T5937] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  217.288344][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.329087][ T5937] usb 6-1: Product: syz
[  217.333310][ T5937] usb 6-1: Manufacturer: syz
[  217.337924][ T5937] usb 6-1: SerialNumber: syz
[  217.359804][ T5937] usb 6-1: config 0 descriptor??
[  217.482839][ T8465] team0: Port device team_slave_0 added
[  217.502749][ T8465] team0: Port device team_slave_1 added
[  217.520997][ T8492] /dev/rnullb0: Can't open blockdev
[  217.610079][  T851] usb 6-1: USB disconnect, device number 9
[  217.647891][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.668708][ T5849] Bluetooth: hci4: command tx timeout
[  217.680662][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.720916][ T8465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.734904][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.742107][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.782114][ T8465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.858248][ T8494] fuse: Unknown parameter 'usep_id'
[  218.016698][ T8465] hsr_slave_0: entered promiscuous mode
[  218.024089][ T8465] hsr_slave_1: entered promiscuous mode
[  218.030883][ T8465] debugfs: 'hsr0' already exists in 'hsr'
[  218.036723][ T8465] Cannot create hsr debugfs directory
[  218.801704][ T8465] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  218.854686][ T8465] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  219.223726][ T5915] usbhid 5-1:7.0: can't add hid device: -71
[  219.233769][ T5915] usbhid 5-1:7.0: probe with driver usbhid failed with error -71
[  219.258948][ T5915] usb 5-1: USB disconnect, device number 16
[  219.274598][ T8465] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  219.374142][ T8465] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  219.758667][ T5849] Bluetooth: hci4: command tx timeout
[  219.813533][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.837883][ T8465] 8021q: adding VLAN 0 to HW filter on device team0
[  219.918493][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.925727][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.981700][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.988936][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.033114][ T8520] binder: BINDER_SET_CONTEXT_MGR already set
[  220.056800][ T8520] binder: 8519:8520 ioctl 40046207 0 returned -16
[  220.137745][ T8527] binder: 8521:8527 ioctl c0306201 0 returned -14
[  220.169553][ T8527] binder: 8521:8527 ioctl ae41 1 returned -22
[  220.176108][ T8527] binder: 8521:8527 ioctl 2285 200000001300 returned -22
[  220.199744][ T8527] /dev/rnullb0: Can't open blockdev
[  220.951960][ T8465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.678764][  T929] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  221.781272][ T8553] /dev/rnullb0: Can't open blockdev
[  221.829140][ T5856] Bluetooth: hci4: command tx timeout
[  221.839185][  T929] usb 5-1: Using ep0 maxpacket: 16
[  221.869843][  T929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.891921][  T929] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  221.909015][  T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.933988][  T929] usb 5-1: Product: syz
[  221.938303][  T929] usb 5-1: Manufacturer: syz
[  221.958704][  T929] usb 5-1: SerialNumber: syz
[  221.969976][  T929] usb 5-1: config 0 descriptor??
[  221.985478][  T929] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  221.986787][ T8465] veth0_vlan: entered promiscuous mode
[  221.991945][ T5856] Bluetooth: hci3: command 0x0406 tx timeout
[  222.014074][  T929] gspca_stv06xx: st6422 sensor detected
[  222.083106][ T8465] veth1_vlan: entered promiscuous mode
[  222.147525][ T8559] /dev/rnullb0: Can't open blockdev
[  222.172311][   T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  222.197664][ T8465] veth0_macvtap: entered promiscuous mode
[  222.214320][ T8465] veth1_macvtap: entered promiscuous mode
[  222.242083][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.262931][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.296283][ T2997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.315505][ T2997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.338274][ T2997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.349505][   T24] usb 1-1: Using ep0 maxpacket: 16
[  222.359752][ T2997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.362224][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.408644][ T5976] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  222.419311][   T24] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  222.432635][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.452552][   T24] usb 1-1: config 0 descriptor??
[  222.585116][ T5976] usb 6-1: Using ep0 maxpacket: 8
[  222.585141][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.607433][ T5976] usb 6-1: config 4 has an invalid interface number: 20 but max is 0
[  222.629930][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.650668][ T5976] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  222.682226][  T929] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71
[  222.688615][ T5976] usb 6-1: config 4 has no interface number 0
[  222.716819][ T5976] usb 6-1: config 4 interface 20 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  222.727500][  T929] usb 5-1: USB disconnect, device number 17
[  222.753597][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.758307][ T5976] usb 6-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  222.803903][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.823553][ T5976] usb 6-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  222.890457][   T24] ntrig 0003:1B96:0008.000B: item fetching failed at offset 2/5
[  222.898349][ T5976] usb 6-1: config 4 interface 20 altsetting 64 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  222.926170][   T24] ntrig 0003:1B96:0008.000B: parse failed
[  222.934448][ T5976] usb 6-1: config 4 interface 20 altsetting 64 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  222.956882][   T24] ntrig 0003:1B96:0008.000B: probe with driver ntrig failed with error -22
[  222.968249][ T5976] usb 6-1: config 4 interface 20 altsetting 64 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  223.008271][ T5976] usb 6-1: config 4 interface 20 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[  223.050154][ T5976] usb 6-1: config 4 interface 20 altsetting 64 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  223.078660][ T5976] usb 6-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x4, skipping
[  223.099192][ T5976] usb 6-1: config 4 interface 20 has no altsetting 0
[  223.117820][ T5976] usb 6-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ba.e6
[  223.127516][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.148574][ T5976] usb 6-1: Product: ᠁
[  223.152842][ T5976] usb 6-1: Manufacturer: ﶳ떧᫲ꄮ⳻唭뺍䳔൦ဎ퍁왟䠯깩ꩮ넸힞᜖᭦斱〯葙࠘높உ흵쵌䡽쓁ꦖ̘ⷹ뮧䫗䪆燨᷁뇆恙㢏ᷯ쬂䇠磤਌ꅥ⌧Ἴ礋羪么ⷦ಄둾芺ẉﱍ猥䷠働꺴妇
[  223.222169][ T5976] usb 6-1: SerialNumber: ౺
[  223.433789][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.459485][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.467276][ T5976] HFC-S_USB 6-1:4.20: probe with driver HFC-S_USB failed with error -5
[  223.556876][ T5976] usb 6-1: USB disconnect, device number 10
[  223.909871][ T5849] Bluetooth: hci4: command tx timeout
[  225.059549][ T5976] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  225.110942][ T5895] usb 1-1: USB disconnect, device number 38
[  225.251769][ T5976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.271363][ T5976] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.298689][ T5976] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  225.334795][ T5976] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  225.355463][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.385867][ T5976] usb 5-1: Product: syz
[  225.402568][ T5976] usb 5-1: Manufacturer: syz
[  225.422717][ T5976] usb 5-1: SerialNumber: syz
[  225.477507][ T5976] cdc_mbim 5-1:1.0: skipping garbage
[  225.861080][ T5976] cdc_mbim 5-1:1.0: bind() failure
[  225.883156][ T5976] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  225.909585][ T5976] cdc_ncm 5-1:1.1: bind() failure
[  225.939181][ T5976] usb 5-1: USB disconnect, device number 18
[  226.154968][ T8593] syz.5.679: attempt to access beyond end of device
[  226.154968][ T8593] loop5: rw=6144, sector=128, nr_sectors = 8 limit=0
[  226.188967][ T8593] gfs2: error -5 reading superblock
[  226.367319][ T8595] hpfs: Bad magic ... probably not HPFS
[  226.537699][ T8598] /dev/sg0: Can't lookup blockdev
[  226.733991][ T8605] omfs: Invalid superblock (0)
[  226.936753][ T8613] syz.4.686: attempt to access beyond end of device
[  226.936753][ T8613] loop4: rw=0, sector=2, nr_sectors = 1 limit=0
[  226.988252][ T8613] hfs: can't find a HFS filesystem on dev loop4
[  227.039016][ T5895] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  227.218857][ T5895] usb 6-1: Using ep0 maxpacket: 32
[  227.231025][ T5895] usb 6-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config
[  227.251891][ T5895] usb 6-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  227.279017][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0
[  227.296019][ T5895] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  227.316316][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.340013][ T5895] usb 6-1: config 0 descriptor??
[  227.367135][ T5895] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  227.752951][ T8628] 9p: Unknown access argument �: -22
[  227.797894][ T8629] XFS (rnullb0): Invalid superblock magic number
[  228.755031][ T8655] qnx4: no qnx4 filesystem (no root dir).
[  228.998816][   T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  229.159867][   T24] usb 1-1: Using ep0 maxpacket: 8
[  229.177445][   T24] usb 1-1: config 4 has an invalid interface number: 20 but max is 0
[  229.196266][   T24] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  229.238912][   T24] usb 1-1: config 4 has no interface number 0
[  229.256211][   T24] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  229.289909][   T24] usb 1-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  229.343311][   T24] usb 1-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  229.375629][   T24] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  229.407046][   T24] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  229.430709][   T24] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  229.456401][   T24] usb 1-1: config 4 interface 20 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[  229.479826][   T24] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  229.533306][   T24] usb 1-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x4, skipping
[  229.568614][   T24] usb 1-1: config 4 interface 20 has no altsetting 0
[  229.587304][   T24] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ba.e6
[  229.643343][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.672828][   T24] usb 1-1: Product: ᠁
[  229.692788][   T24] usb 1-1: Manufacturer: ﶳ떧᫲ꄮ⳻唭뺍䳔൦ဎ퍁왟䠯깩ꩮ넸힞᜖᭦斱〯葙࠘높உ흵쵌䡽쓁ꦖ̘ⷹ뮧䫗䪆燨᷁뇆恙㢏ᷯ쬂䇠磤਌ꅥ⌧Ἴ礋羪么ⷦ಄둾芺ẉﱍ猥䷠働꺴妇
[  229.737971][   T10] usb 6-1: USB disconnect, device number 11
[  229.784422][   T24] usb 1-1: SerialNumber: ౺
[  230.043917][   T24] HFC-S_USB 1-1:4.20: probe with driver HFC-S_USB failed with error -5
[  230.105753][ T8674] /dev/rnullb0: Can't open blockdev
[  230.136292][   T24] usb 1-1: USB disconnect, device number 39
[  230.411913][ T8682] random: crng reseeded on system resumption
[  230.460671][ T8682] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  230.499578][ T8682] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  230.718684][   T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  230.912629][   T24] usb 6-1: Using ep0 maxpacket: 16
[  230.937373][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  230.989300][   T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 7
[  231.047620][   T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  231.063877][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.087216][   T24] usb 6-1: Product: syz
[  231.103759][   T24] usb 6-1: Manufacturer: syz
[  231.120925][   T24] usb 6-1: SerialNumber: syz
[  231.353294][ T5849] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  231.363301][ T5849] Bluetooth: hci0: Injecting HCI hardware error event
[  231.372521][ T5849] Bluetooth: hci0: hardware error 0x00
[  231.374343][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.418189][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.781234][ T8705] syz.0.711: attempt to access beyond end of device
[  231.781234][ T8705] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0
[  231.828958][ T8705] XFS (loop0): SB validate failed with error -5.
[  232.268698][ T5976] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  232.523684][ T5976] usb 5-1: device descriptor read/64, error -71
[  232.782857][ T5976] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  232.943727][ T5976] usb 5-1: device descriptor read/64, error -71
[  233.089230][ T5976] usb usb5-port1: attempt power cycle
[  233.428670][ T5976] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  233.481555][ T5976] usb 5-1: device descriptor read/8, error -71
[  233.529575][ T5849] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  233.572479][   T24] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  233.580209][   T24] usb 6-1: unit 51 not found!
[  233.598973][   T24] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  233.624218][   T24] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  233.631861][ T8729] syz.5.717: attempt to access beyond end of device
[  233.631861][ T8729] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0
[  233.692787][   T24] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  233.711422][ T8730] overlayfs: missing 'lowerdir'
[  233.715066][   T24] usb 6-1: USB disconnect, device number 12
[  233.806006][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  233.828266][ T5976] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  233.872502][ T5976] usb 5-1: device descriptor read/8, error -71
[  233.999181][ T5976] usb usb5-port1: unable to enumerate USB device
[  234.068070][ T8733] random: crng reseeded on system resumption
[  234.856211][ T8747] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  234.884854][ T8747] UDF-fs: Scanning with blocksize 4096 failed
[  235.039672][ T8751] /dev/rnullb0: Can't open blockdev
[  235.096885][ T8753] vivid-001: disconnect
[  235.113909][ T8753] netlink: 56 bytes leftover after parsing attributes in process `syz.5.726'.
[  235.131454][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.726'.
[  235.151498][ T8753] netlink: 55 bytes leftover after parsing attributes in process `syz.5.726'.
[  235.165149][ T8753] netlink: 55 bytes leftover after parsing attributes in process `syz.5.726'.
[  235.251016][ T8753] vivid-001: reconnect
[  235.718768][  T986] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  235.895053][  T986] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  235.937733][  T986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  235.978726][  T986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  236.021331][  T986] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  236.051354][  T986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.078665][  T986] usb 6-1: Product: syz
[  236.093511][  T986] usb 6-1: Manufacturer: syz
[  236.109735][  T986] usb 6-1: SerialNumber: syz
[  236.146320][  T986] usb 6-1: config 0 descriptor??
[  236.402525][ T8763] /dev/rnullb0: Can't open blockdev
[  237.385846][ T8774] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  237.497547][ T8774] kvm: pic: non byte read
[  237.514087][ T8774] kvm: pic: level sensitive irq not supported
[  237.515011][ T8774] kvm: pic: non byte read
[  237.788720][   T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  237.978759][   T24] usb 1-1: Using ep0 maxpacket: 32
[  238.029432][   T24] usb 1-1: config 0 has an invalid interface number: 54 but max is 0
[  238.049878][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.102358][   T24] usb 1-1: config 0 has no interface number 0
[  238.133218][   T24] usb 1-1: too many endpoints for config 0 interface 54 altsetting 205: 134, using maximum allowed: 30
[  238.166703][   T24] usb 1-1: config 0 interface 54 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 134
[  238.200780][   T24] usb 1-1: config 0 interface 54 has no altsetting 0
[  238.230193][   T24] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  238.254745][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.268594][   T24] usb 1-1: Product: syz
[  238.276204][   T24] usb 1-1: Manufacturer: syz
[  238.289795][   T24] usb 1-1: SerialNumber: syz
[  238.321716][   T24] usb 1-1: config 0 descriptor??
[  238.562307][   T24] usb 1-1: USB disconnect, device number 40
[  239.578920][   T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  239.750678][   T24] usb 1-1: Using ep0 maxpacket: 32
[  239.772955][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.793621][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.804799][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  239.824910][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.855607][   T24] usb 1-1: config 0 descriptor??
[  239.890751][   T24] hub 1-1:0.0: USB hub found
[  239.962192][ T8806] hfs: can't find a HFS filesystem on dev rnullb0
[  240.075835][   T24] hub 1-1:0.0: 1 port detected
[  240.428911][ T5976] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  240.620141][ T5976] usb 5-1: Using ep0 maxpacket: 8
[  240.640885][ T5976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.668726][ T5976] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  240.677856][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.698673][   T24] hub 1-1:0.0: activate --> -90
[  240.744640][ T5976] usb 5-1: config 0 descriptor??
[  240.769614][ T5976] gspca_main: vc032x-2.14.0 probing 046d:0892
[  241.301589][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.342385][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.006338][ T8795] syz.5.736 (8795) used greatest stack depth: 19576 bytes left
[  242.181544][ T5976] gspca_vc032x: reg_w err -110
[  242.186658][ T5976] vc032x 5-1:0.0: probe with driver vc032x failed with error -110
[  242.205084][   T24] hub 1-1:0.0: hub_ext_port_status failed (err = -32)
[  242.226391][   T24] usb 1-1-port1: cannot reset (err = -32)
[  242.262855][   T24] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad?
[  242.275525][ T8820] pim6reg: entered allmulticast mode
[  242.310351][   T24] usb 1-1-port1: cannot disable (err = -32)
[  242.355384][   T24] usb 1-1-port1: cannot reset (err = -32)
[  242.408727][   T24] usb 1-1-port1: cannot reset (err = -32)
[  242.434675][   T24] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad?
[  242.460302][ T8820] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  242.460743][  T929] IPVS: starting estimator thread 0...
[  242.492854][   T24] usb 1-1-port1: cannot disable (err = -32)
[  242.499630][   T24] usb 1-1-port1: attempt power cycle
[  242.621799][ T8822] IPVS: using max 25 ests per chain, 60000 per kthread
[  242.639031][ T5976] usb 1-1: USB disconnect, device number 41
[  243.028880][ T8819] pim6reg: left allmulticast mode
[  243.277172][ T5884] usb 5-1: USB disconnect, device number 23
[  243.328817][ T5976] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  243.519286][ T5976] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  243.558822][ T5976] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.602662][ T5976] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  243.639034][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.704489][ T5976] hub 1-1:4.0: USB hub found
[  243.902373][ T5976] hub 1-1:4.0: 2 ports detected
[  243.902558][ T8832] mmap: syz.6.748 (8832) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  243.907334][ T5976] usb 1-1: selecting invalid altsetting 1
[  243.907356][ T5976] hub 1-1:4.0: Using single TT (err -22)
[  244.104964][ T8824] /dev/rnullb0: Can't open blockdev
[  244.113276][ T5976] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  244.119896][ T5976] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  244.179629][ T5976] usb 1-1: USB disconnect, device number 46
[  244.219144][ T8826] syzkaller0: entered promiscuous mode
[  244.224849][ T8826] syzkaller0: entered allmulticast mode
[  244.293406][ T8835] netlink: 'syz.5.745': attribute type 29 has an invalid length.
[  244.302183][ T8834] syzkaller0: tun_chr_ioctl cmd 1074025677
[  244.308484][ T8834] syzkaller0: Linktype set failed because interface is up
[  244.322647][ T2997] syzkaller0: tun_net_xmit 48
[  244.826730][ T8841] /dev/rnullb0: Can't open blockdev
[  245.108716][  T929] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  245.284067][  T929] usb 1-1: Using ep0 maxpacket: 8
[  245.309054][  T929] usb 1-1: config 4 has an invalid interface number: 20 but max is 0
[  245.340242][  T929] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  245.376914][  T929] usb 1-1: config 4 has no interface number 0
[  245.386586][  T929] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  245.408297][  T929] usb 1-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  245.424053][  T929] usb 1-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  245.435381][  T929] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  245.450028][  T929] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  245.461487][  T929] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  245.474588][  T929] usb 1-1: config 4 interface 20 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[  245.531267][  T929] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  245.576384][  T929] usb 1-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x4, skipping
[  245.606847][  T929] usb 1-1: config 4 interface 20 has no altsetting 0
[  245.645655][  T929] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ba.e6
[  245.658913][  T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.667591][  T929] usb 1-1: Product: ᠁
[  245.687554][  T929] usb 1-1: Manufacturer: ﶳ떧᫲ꄮ⳻唭뺍䳔൦ဎ퍁왟䠯깩ꩮ넸힞᜖᭦斱〯葙࠘높உ흵쵌䡽쓁ꦖ̘ⷹ뮧䫗䪆燨᷁뇆恙㢏ᷯ쬂䇠磤਌ꅥ⌧Ἴ礋羪么ⷦ಄둾芺ẉﱍ猥䷠働꺴妇
[  245.738787][  T929] usb 1-1: SerialNumber: ౺
[  245.985084][  T929] HFC-S_USB 1-1:4.20: probe with driver HFC-S_USB failed with error -5
[  246.058950][  T929] usb 1-1: USB disconnect, device number 47
[  246.613497][ T8851] /dev/rnullb0: Can't open blockdev
[  246.794147][  T986] iguanair 6-1:0.0: failed to get version
[  246.800771][  T986] iguanair 6-1:0.0: probe with driver iguanair failed with error -110
[  246.814813][  T986] usb 6-1: USB disconnect, device number 13
[  246.863749][ T8855] /dev/rnullb0: Can't open blockdev
[  250.268765][  T986] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  250.408736][  T929] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  250.435577][  T986] usb 6-1: Using ep0 maxpacket: 16
[  250.450853][  T986] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.471732][  T986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  250.499876][  T986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  250.524654][  T986] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  250.558762][  T929] usb 5-1: Using ep0 maxpacket: 8
[  250.566913][  T986] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  250.599917][  T929] usb 5-1: config 4 has an invalid interface number: 20 but max is 0
[  250.613847][  T929] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  250.640417][  T986] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  250.662973][  T929] usb 5-1: config 4 has no interface number 0
[  250.673086][  T986] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  250.699714][  T929] usb 5-1: config 4 interface 20 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  250.719820][  T986] usb 6-1: Manufacturer: syz
[  250.732786][  T929] usb 5-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  250.745648][  T986] usb 6-1: config 0 descriptor??
[  250.757437][  T929] usb 5-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  250.786401][  T929] usb 5-1: config 4 interface 20 altsetting 64 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  250.798067][  T929] usb 5-1: config 4 interface 20 altsetting 64 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  250.816827][  T929] usb 5-1: config 4 interface 20 altsetting 64 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  250.836346][  T929] usb 5-1: config 4 interface 20 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[  250.856095][  T929] usb 5-1: config 4 interface 20 altsetting 64 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  250.868061][  T929] usb 5-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x4, skipping
[  250.892164][  T929] usb 5-1: config 4 interface 20 has no altsetting 0
[  250.917418][  T929] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ba.e6
[  250.933120][  T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.956126][  T929] usb 5-1: Product: ᠁
[  250.964653][  T929] usb 5-1: Manufacturer: ﶳ떧᫲ꄮ⳻唭뺍䳔൦ဎ퍁왟䠯깩ꩮ넸힞᜖᭦斱〯葙࠘높உ흵쵌䡽쓁ꦖ̘ⷹ뮧䫗䪆燨᷁뇆恙㢏ᷯ쬂䇠磤਌ꅥ⌧Ἴ礋羪么ⷦ಄둾芺ẉﱍ猥䷠働꺴妇
[  250.964868][ T8887] x_tables: duplicate underflow at hook 1
[  250.993335][  T929] usb 5-1: SerialNumber: ౺
[  251.119199][  T986] rc_core: IR keymap rc-hauppauge not found
[  251.135637][  T986] Registered IR keymap rc-empty
[  251.145214][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.196210][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.206072][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.216421][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.263695][  T986] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  251.290856][  T929] HFC-S_USB 5-1:4.20: probe with driver HFC-S_USB failed with error -5
[  251.328895][  T986] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input16
[  251.350216][  T929] usb 5-1: USB disconnect, device number 24
[  251.412271][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.458744][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.478936][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.528695][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.548939][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.570842][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.588788][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.608901][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.629545][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.649503][  T986] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.674548][  T986] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  251.674577][  T986] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  251.685662][  T986] usb 6-1: USB disconnect, device number 14
[  252.054256][ T8903] vivid-000: =================  START STATUS  =================
[  252.067858][ T8903] vivid-000: Generate PTS: true
[  252.078474][ T8903] vivid-000: Generate SCR: true
[  252.092250][ T8903] tpg source WxH: 1920x1080 (R'G'B)
[  252.097485][ T8903] tpg field: 1
[  252.126873][ T8903] tpg crop: (0,0)/1920x1080
[  252.151249][ T8903] tpg compose: (0,0)/1920x1080
[  252.156162][ T8903] tpg colorspace: 8
[  252.184767][ T8903] tpg transfer function: 0/2
[  252.197607][ T8903] tpg quantization: 0/1
[  252.213973][ T8903] tpg RGB range: 0/2
[  252.234419][ T8903] vivid-000: ==================  END STATUS  ==================
[  252.410922][ T5976] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  252.472736][ T8908] /dev/rnullb0: Can't open blockdev
[  252.589178][ T5976] usb 5-1: Using ep0 maxpacket: 8
[  252.617991][ T5976] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  252.648941][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.657145][ T5976] usb 5-1: Product: syz
[  252.689447][ T5976] usb 5-1: Manufacturer: syz
[  252.718677][ T5976] usb 5-1: SerialNumber: syz
[  252.739916][ T5976] usb 5-1: config 0 descriptor??
[  252.772660][ T8911] /dev/rnullb0: Can't open blockdev
[  252.789468][ T8912] /dev/rnullb0: Can't open blockdev
[  252.979628][ T5976] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  253.008070][ T5976] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  253.059925][ T5976] usb 5-1: USB disconnect, device number 25
[  254.408773][ T5884] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  254.448799][ T8935] vxfs: WRONG superblock magic 00000000 at 1
[  254.470363][ T8935] vxfs: WRONG superblock magic 00000000 at 8
[  254.476412][ T8935] vxfs: can't find superblock.
[  254.595602][ T5884] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  254.602636][ T8938] ./file0: Can't lookup blockdev
[  254.628691][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.658314][ T5884] usb 5-1: Product: syz
[  254.673297][ T5884] usb 5-1: Manufacturer: syz
[  254.677936][ T5884] usb 5-1: SerialNumber: syz
[  254.693668][ T5884] usb 5-1: config 0 descriptor??
[  254.735155][ T8940] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  254.813958][ T8941] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  254.818568][ T8940] CIFS mount error: No usable UNC path provided in device string!
[  254.818568][ T8940] 
[  254.828836][ T8941] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  254.856937][ T8940] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  254.886525][ T8943] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  254.893453][ T8943] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  255.116628][ T8926] /dev/rnullb0: Can't open blockdev
[  255.140292][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.156333][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.837699][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  255.838690][ T5884] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  255.844209][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  255.896513][ T8958] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  255.925752][ T5884] asix 5-1:0.0: probe with driver asix failed with error -71
[  256.027747][ T5884] usb 5-1: USB disconnect, device number 26
[  256.718711][  T986] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  256.898663][  T986] usb 6-1: Using ep0 maxpacket: 32
[  256.928128][  T986] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  257.108785][  T986] usb 6-1: config 0 has no interface number 0
[  257.114979][  T986] usb 6-1: config 0 interface 184 has no altsetting 0
[  257.179567][  T986] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  257.197850][  T986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.228912][  T986] usb 6-1: Product: syz
[  257.233136][  T986] usb 6-1: Manufacturer: syz
[  257.237745][  T986] usb 6-1: SerialNumber: syz
[  257.289659][  T986] usb 6-1: config 0 descriptor??
[  257.320663][  T986] smsc75xx v1.0.0
[  257.330788][ T8979] block nbd6: NBD_DISCONNECT
[  257.480486][ T8975] block nbd6: Disconnected due to user request.
[  257.498803][ T8975] block nbd6: shutting down sockets
[  258.398124][ T8991] NILFS (rnullb0): couldn't find nilfs on the device
[  258.558775][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  258.564714][ T8999] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  258.638552][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  258.648575][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  258.708988][   T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  258.739892][ T8999] cramfs: wrong magic
[  258.870621][    T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!!
[  258.918855][   T24] usb 5-1: Using ep0 maxpacket: 32
[  258.922396][  T986] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  258.927430][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.033976][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  259.089977][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.188987][ T5895] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  259.200212][  T986] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  259.207302][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  259.229760][  T986] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  259.239490][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.251286][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  259.284217][  T986] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  259.295995][   T24] usb 5-1: config 0 descriptor??
[  259.313915][  T986] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  259.322403][   T24] hub 5-1:0.0: USB hub found
[  259.335616][  T986] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  259.356380][  T986] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  259.378010][  T986] usb 6-1: USB disconnect, device number 16
[  259.421083][ T5895] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  259.470634][ T5895] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  259.483947][ T5895] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  259.514116][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.544528][ T5895] usb 1-1: Product: syz
[  259.554737][   T24] hub 5-1:0.0: config failed, can't read hub descriptor (err -90)
[  259.564124][ T5895] usb 1-1: Manufacturer: syz
[  259.603620][ T5895] usb 1-1: SerialNumber: syz
[  259.724549][ T9012] /dev/rnullb0: Can't open blockdev
[  259.903782][ T5895] usb 1-1: 0:2 : does not exist
[  259.971902][   T24] hid-generic 0003:046D:C31C.000C: item fetching failed at offset 0/1
[  259.987663][ T5895] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  260.014004][   T24] hid-generic 0003:046D:C31C.000C: probe with driver hid-generic failed with error -22
[  260.045628][ T5895] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  260.109125][ T5895] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  260.205649][ T5895] usb 1-1: USB disconnect, device number 48
[  260.332707][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  260.779507][  T929] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[  260.950840][  T929] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  260.978677][  T929] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  260.990425][  T929] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  261.013093][  T929] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  261.057033][  T929] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  261.084971][  T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  261.106480][  T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  261.127027][  T929] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  261.170626][  T929] usb 6-1: string descriptor 0 read error: -22
[  261.177297][  T929] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  261.198263][  T929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.214988][  T929] usb 6-1: config 0 descriptor??
[  261.229810][ T9026] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  261.247769][  T929] hub 6-1:0.0: bad descriptor, ignoring hub
[  261.266279][  T929] hub 6-1:0.0: probe with driver hub failed with error -5
[  261.285000][ T9028] XFS (rnullb0): Invalid superblock magic number
[  261.324666][  T929] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input17
[  261.479558][ T9032] XFS (rnullb0): Invalid superblock magic number
[  261.550739][ T5895] usb 6-1: USB disconnect, device number 17
[  261.556797][    C1] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.5-1/input0, status -19
[  261.751311][ T9050] Bluetooth: MGMT ver 1.23
[  262.168949][  T929] usb 5-1: USB disconnect, device number 27
[  262.288020][ T9059] /dev/rnullb0: Can't open blockdev
[  262.607095][ T9063] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  262.613689][ T9063] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  262.673506][ T9063] vhci_hcd vhci_hcd.0: Device attached
[  262.724737][ T9063] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  262.918658][  T986] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[  262.933662][ T9064] vhci_hcd: connection reset by peer
[  262.984145][  T144] vhci_hcd: stop threads
[  262.988459][  T144] vhci_hcd: release socket
[  262.993957][  T144] vhci_hcd: disconnect device
[  263.019838][ T9077] vxfs: WRONG superblock magic 00000000 at 1
[  263.046312][ T9077] vxfs: WRONG superblock magic 00000000 at 8
[  263.086900][ T9077] vxfs: can't find superblock.
[  263.448782][ T9088] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  263.456487][ T9088] UDF-fs: Scanning with blocksize 4096 failed
[  263.535864][ T9092] vxfs: WRONG superblock magic 00000000 at 1
[  263.542787][ T9092] vxfs: WRONG superblock magic 00000000 at 8
[  263.549581][ T9092] vxfs: can't find superblock.
[  263.725001][ T9103] Can't find a SQUASHFS superblock on rnullb0
[  263.745584][ T9094] /dev/rnullb0: Can't lookup blockdev
[  265.190516][ T9142] /dev/rnullb0: Can't open blockdev
[  265.556977][ T9152] /dev/rnullb0: Can't open blockdev
[  266.086366][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'.
[  266.543719][ T9176] /dev/rnullb0: Can't lookup blockdev
[  267.082925][ T9181] /dev/rnullb0: Can't open blockdev
[  267.312880][ T9185] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  267.323857][ T9185] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[  267.368697][ T5884] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  267.528672][ T5884] usb 5-1: Using ep0 maxpacket: 32
[  267.556326][ T5884] usb 5-1: unable to get BOS descriptor or descriptor too short
[  267.576620][ T5884] usb 5-1: config 4 has an invalid interface number: 243 but max is 0
[  267.593352][ T5884] usb 5-1: config 4 has no interface number 0
[  267.613252][ T5884] usb 5-1: config 4 interface 243 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  267.614586][ T9194] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  267.640420][ T9194] VFS: Can't find a romfs filesystem on dev rnullb0.
[  267.640420][ T9194] 
[  267.653956][ T5884] usb 5-1: New USB device found, idVendor=1b80, idProduct=e1cc, bcdDevice=51.f9
[  267.666942][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.690151][ T5884] usb 5-1: Product: syz
[  267.697798][ T5884] usb 5-1: Manufacturer: syz
[  267.708159][ T5884] usb 5-1: SerialNumber: syz
[  267.977216][ T5884] usb 5-1: USB disconnect, device number 28
[  268.058701][  T986] vhci_hcd: vhci_device speed not set
[  268.078805][  T929] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  268.258625][  T929] usb 6-1: Using ep0 maxpacket: 8
[  268.266261][  T929] usb 6-1: unable to get BOS descriptor or descriptor too short
[  268.276570][  T929] usb 6-1: config 16 interface 0 has no altsetting 0
[  268.287016][  T929] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=1a.35
[  268.296749][  T929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.305482][  T929] usb 6-1: Product: syz
[  268.310102][  T929] usb 6-1: Manufacturer: syz
[  268.314816][  T929] usb 6-1: SerialNumber: syz
[  268.541898][  T929] usb 6-1: ucan: probing device on interface #0
[  268.573493][  T929] usb 6-1: ucan: invalid endpoint configuration
[  268.601458][  T929] usb 6-1: ucan: probe failed; try to update the device firmware
[  268.636179][  T929] usb 6-1: USB disconnect, device number 18
[  269.174943][  T929] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  269.340908][  T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  269.370521][  T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.403810][  T929] usb 5-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00
[  269.423005][  T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.448632][  T986] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  269.457406][  T929] usb 5-1: config 0 descriptor??
[  269.608622][  T986] usb 6-1: Using ep0 maxpacket: 16
[  269.620663][  T986] usb 6-1: unable to get BOS descriptor or descriptor too short
[  269.636686][  T986] usb 6-1: config 9 has an invalid interface number: 48 but max is 0
[  269.655538][  T986] usb 6-1: config 9 has no interface number 0
[  269.674162][  T986] usb 6-1: config 9 interface 48 has no altsetting 0
[  269.713006][  T986] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b
[  269.727661][  T986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.737668][  T986] usb 6-1: Product: syz
[  269.747685][  T986] usb 6-1: Manufacturer: syz
[  269.755959][  T986] usb 6-1: SerialNumber: syz
[  269.892152][  T929] ntrig 0003:1B96:0012.000D: item fetching failed at offset 2/5
[  269.915121][  T929] ntrig 0003:1B96:0012.000D: parse failed
[  269.927458][  T929] ntrig 0003:1B96:0012.000D: probe with driver ntrig failed with error -22
[  269.984281][  T986] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  270.086789][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'.
[  270.138341][  T929] usb 5-1: USB disconnect, device number 29
[  270.291021][ T9234] /dev/rnullb0: Can't open blockdev
[  270.436997][ T9236] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  270.457415][ T9236] /dev/rnullb0: Can't open blockdev
[  270.500069][ T9238] /dev/rnullb0: Can't lookup blockdev
[  270.849988][ T5884] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  270.861703][ T9246] tmpfs: Unknown parameter 'grpuota'
[  270.903063][ T9246] /dev/rnullb0: Can't open blockdev
[  270.909590][  T986] gspca_vc032x: reg_r err -110
[  270.925640][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  270.936862][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  270.954447][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  270.969943][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  270.985589][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.001204][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.038982][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.047328][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.047456][ T5884] usb 1-1: config 1 has too many interfaces: 235, using maximum allowed: 32
[  271.059541][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.074303][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.080426][ T5884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.089017][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.095867][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.105469][ T5884] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 235
[  271.139047][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.144403][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.188602][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.204711][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.234641][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.260426][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.293473][  T986] gspca_vc032x: I2c Bus Busy Wait 00
[  271.328686][  T986] gspca_vc032x: Unknown sensor...
[  271.357095][  T986] vc032x 6-1:9.48: probe with driver vc032x failed with error -22
[  271.368125][ T9248] 9pnet_fd: Insufficient options for proto=fd
[  271.596647][ T5884] usb 1-1: config 1 has no interface number 0
[  271.618588][ T5884] usb 1-1: config 1 has no interface number 1
[  271.640318][ T5884] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  271.706732][ T5884] usb 1-1: config 1 interface 105 has no altsetting 0
[  271.740886][ T5884] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  271.768770][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.794142][ T5884] usb 1-1: Product: syz
[  271.808921][ T5884] usb 1-1: Manufacturer: syz
[  271.834590][ T5884] usb 1-1: SerialNumber: syz
[  272.089089][ T5884] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22
[  272.219818][ T5884] usb 6-1: USB disconnect, device number 19
[  272.347916][ T9258] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  273.208805][  T929] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  273.327688][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'.
[  273.343164][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'.
[  273.355085][ T9289] netlink: 'syz.4.894': attribute type 83 has an invalid length.
[  273.371901][  T929] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[  273.388781][  T929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.418638][  T929] usb 6-1: config 0 has no interface number 0
[  273.435086][  T929] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  273.465516][  T929] usb 6-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  273.501828][  T929] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  273.518831][  T929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.537373][  T929] usb 6-1: Product: syz
[  273.541663][  T929] usb 6-1: Manufacturer: syz
[  273.546289][  T929] usb 6-1: SerialNumber: syz
[  273.573777][  T929] usb 6-1: config 0 descriptor??
[  273.747509][ T9298] pim6reg: entered allmulticast mode
[  273.764008][ T9298] pim6reg: left allmulticast mode
[  273.794864][ T9267] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  273.829653][ T9267] VFS: Can't find a romfs filesystem on dev rnullb0.
[  273.829653][ T9267] 
[  273.851803][  T929] usb 6-1: USB disconnect, device number 20
[  274.293426][ T9316] syz.4.902: attempt to access beyond end of device
[  274.293426][ T9316] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  274.388700][ T5856] Bluetooth: hci5: command 0x1003 tx timeout
[  274.396103][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  274.551584][ T5895] usb 1-1: USB disconnect, device number 49
[  274.944968][ T9342] /dev/rnullb0: Can't open blockdev
[  275.162958][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'.
[  275.184147][ T9345] syzkaller1: entered promiscuous mode
[  275.189947][ T9345] syzkaller1: entered allmulticast mode
[  275.465030][ T9362] netlink: 'syz.5.916': attribute type 25 has an invalid length.
[  275.486564][ T9362] netlink: 'syz.5.916': attribute type 7 has an invalid length.
[  275.777751][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'.
[  276.011876][ T9374] exFAT-fs (rnullb0): invalid boot record signature
[  276.019257][ T9374] exFAT-fs (rnullb0): failed to read boot sector
[  276.025685][ T9374] exFAT-fs (rnullb0): failed to recognize exfat type
[  276.269549][ T9378] fuse: Unknown parameter '9�fd'
[  276.451805][ T9366] orangefs_mount: mount request failed with -4
[  276.697140][ T9390] hpfs: Bad magic ... probably not HPFS
[  276.732970][ T9391] syzkaller1: entered promiscuous mode
[  276.773228][ T9391] syzkaller1: entered allmulticast mode
[  277.218737][   T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  277.298850][ T5895] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  277.382685][   T10] usb 6-1: config 3 has an invalid interface number: 248 but max is 1
[  277.388629][ T5884] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  277.391200][   T10] usb 6-1: config 3 has an invalid interface number: 151 but max is 1
[  277.407572][   T10] usb 6-1: config 3 has no interface number 0
[  277.414079][   T10] usb 6-1: config 3 has no interface number 1
[  277.420780][   T10] usb 6-1: config 3 interface 151 altsetting 183 endpoint 0x8 has invalid wMaxPacketSize 0
[  277.431573][   T10] usb 6-1: config 3 interface 151 altsetting 183 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  277.443473][   T10] usb 6-1: config 3 interface 151 altsetting 183 has a duplicate endpoint with address 0x4, skipping
[  277.454983][   T10] usb 6-1: config 3 interface 151 altsetting 183 has a duplicate endpoint with address 0x6, skipping
[  277.460954][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  277.467556][   T10] usb 6-1: config 3 interface 151 altsetting 183 bulk endpoint 0x1 has invalid maxpacket 1023
[  277.485722][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  277.507582][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  277.526945][ T5895] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  277.530921][   T10] usb 6-1: config 3 interface 151 altsetting 183 has an invalid descriptor for endpoint zero, skipping
[  277.536463][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.563518][ T5895] usb 5-1: Product: syz
[  277.569009][   T10] usb 6-1: config 3 interface 151 altsetting 183 has an invalid descriptor for endpoint zero, skipping
[  277.571691][ T5895] usb 5-1: Manufacturer: syz
[  277.585100][ T5884] usb 1-1: Using ep0 maxpacket: 16
[  277.588670][   T10] usb 6-1: config 3 interface 248 has no altsetting 0
[  277.596308][ T5895] usb 5-1: SerialNumber: syz
[  277.606685][ T5884] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  277.607247][   T10] usb 6-1: config 3 interface 151 has no altsetting 0
[  277.631100][ T5895] usb 5-1: config 0 descriptor??
[  277.637894][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=174, SerialNumber=8
[  277.654777][   T10] usb 6-1: New USB device found, idVendor=12d1, idProduct=143c, bcdDevice= 0.00
[  277.660645][ T5895] iguanair 5-1:0.0: probe with driver iguanair failed with error -12
[  277.674290][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.684036][ T5884] usb 1-1: Product: syz
[  277.688349][ T5884] usb 1-1: Manufacturer: syz
[  277.694062][   T10] usb 6-1: Product: syz
[  277.699012][ T5884] usb 1-1: SerialNumber: syz
[  277.714831][   T10] usb 6-1: Manufacturer: syz
[  277.733369][   T10] usb 6-1: SerialNumber: syz
[  277.759293][ T5884] usb 1-1: config 0 descriptor??
[  277.780068][ T5884] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  277.968306][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.988058][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.999747][ T5884] gp8psk: usb in 128 operation failed.
[  278.008850][ T5884] gp8psk: usb in 137 operation failed.
[  278.014654][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  278.026301][ T5884] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  278.054212][ T5884] usb 1-1: media controller created
[  278.145742][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  278.278396][ T5884] gp8psk_fe: Frontend revision 1 attached
[  278.329128][ T5884] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  278.375369][ T5884] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  278.520023][   T10] usb-storage 6-1:3.248: USB Mass Storage device detected
[  278.583761][ T5884] gp8psk: usb in 138 operation failed.
[  278.599826][ T5884] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  278.610687][ T5884] gp8psk: found Genpix USB device pID = 201 (hex)
[  278.621238][ T5884] usb 1-1: USB disconnect, device number 50
[  278.637883][   T10] usb-storage 6-1:3.151: USB Mass Storage device detected
[  278.766693][   T10] usb 6-1: USB disconnect, device number 21
[  278.809468][ T9436] /dev/rnullb0: Can't lookup blockdev
[  278.867994][ T5884] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  279.357746][ T9446] MTD: Couldn't look up '/dev/rnullb0': -15
[  279.654649][ T9455] 9pnet: p9_errstr2errno: server reported unknown error 
[  279.729900][ T9461] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  279.909661][ T5856] Bluetooth: hci4: command 0x0405 tx timeout
[  279.973364][ T5884] usb 5-1: USB disconnect, device number 30
[  283.272208][ T9475] qnx4: no qnx4 filesystem (no root dir).
[  283.960310][ T9494] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  283.991755][ T9494] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  283.998318][ T9494] comedi comedi3: 8255: I/O port conflict (0x21,4)
[  284.077196][ T9494] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  284.119789][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.5.955'.
[  284.125686][ T9494] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  284.192815][ T9494] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  284.812580][ T9520] netlink: 'syz.0.963': attribute type 2 has an invalid length.
[  284.821559][ T9523] exFAT-fs (rnullb0): invalid boot record signature
[  284.849322][ T9523] exFAT-fs (rnullb0): failed to read boot sector
[  284.899329][ T9523] exFAT-fs (rnullb0): failed to recognize exfat type
[  284.923074][  T929] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  285.088703][  T929] usb 5-1: Using ep0 maxpacket: 8
[  285.118077][  T929] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  285.140280][  T929] usb 5-1: config 0 has no interface number 0
[  285.147550][  T929] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  285.185542][  T929] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  285.214363][  T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.245228][  T929] usb 5-1: config 0 descriptor??
[  285.283742][  T929] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  285.486323][  T929] usb 5-1: USB disconnect, device number 31
[  285.512688][ T9539] /dev/rnullb0: Can't open blockdev
[  286.613973][ T9563] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  286.657472][ T9571] /dev/rnullb0: Can't lookup blockdev
[  286.674897][ T9563] VFS: Can't find a romfs filesystem on dev rnullb0.
[  286.674897][ T9563] 
[  286.878768][ T5884] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  287.058635][ T5884] usb 1-1: Using ep0 maxpacket: 16
[  287.066338][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.077158][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  287.089461][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  287.100994][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  287.114851][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  287.119130][  T986] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  287.131308][ T5884] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  287.153296][ T5884] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  287.162639][ T5884] usb 1-1: Manufacturer: syz
[  287.187335][ T5884] usb 1-1: config 0 descriptor??
[  287.435629][  T986] usb 5-1: unable to get BOS descriptor or descriptor too short
[  287.447423][  T986] usb 5-1: unable to read config index 0 descriptor/start: -71
[  287.489987][  T986] usb 5-1: can't read configurations, error -71
[  287.591311][ T5884] rc_core: IR keymap rc-hauppauge not found
[  287.598138][ T5884] Registered IR keymap rc-empty
[  287.625566][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  287.668830][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  287.712646][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  287.768023][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19
[  287.827901][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  287.899491][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  287.938790][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  287.964106][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  287.973699][ T9604] /dev/rnullb0: Can't open blockdev
[  287.974642][ T9605] /dev/rnullb0: Can't open blockdev
[  288.008842][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  288.038887][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  288.058836][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  288.128797][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  288.149249][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  288.169946][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  288.197732][ T5884] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  288.235219][ T5884] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  288.304293][ T5884] usb 1-1: USB disconnect, device number 51
[  288.648632][ T5976] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  288.798694][  T986] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  288.815229][ T5976] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[  288.833522][ T5976] usb 6-1: config 0 has no interface number 0
[  288.852449][ T5976] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  288.872012][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.889263][ T5976] usb 6-1: Product: syz
[  288.893465][ T5976] usb 6-1: Manufacturer: syz
[  288.908910][ T5976] usb 6-1: SerialNumber: syz
[  288.929784][ T5976] usb 6-1: config 0 descriptor??
[  288.988906][  T986] usb 5-1: Using ep0 maxpacket: 8
[  289.001877][  T986] usb 5-1: config 3 has an invalid interface number: 173 but max is 0
[  289.015877][  T986] usb 5-1: config 3 has no interface number 0
[  289.023971][  T986] usb 5-1: config 3 interface 173 has no altsetting 0
[  289.042788][  T986] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=5a.0b
[  289.055418][  T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.065394][  T986] usb 5-1: Product: syz
[  289.074246][  T986] usb 5-1: Manufacturer: syz
[  289.080797][  T986] usb 5-1: SerialNumber: syz
[  289.198614][  T929] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  289.358990][  T986] usb 5-1: selecting invalid altsetting 3
[  289.364931][  T986] comedi comedi5: could not set alternate setting 3 in high speed
[  289.374130][  T929] usb 1-1: Using ep0 maxpacket: 8
[  289.381747][  T986] usbdux 5-1:3.173: driver 'usbdux' failed to auto-configure device.
[  289.396910][  T929] usb 1-1: config 4 has an invalid interface number: 20 but max is 0
[  289.415041][  T929] usb 1-1: config 4 has no interface number 0
[  289.424711][  T986] usbdux 5-1:3.173: probe with driver usbdux failed with error -22
[  289.434228][  T929] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  289.458342][  T986] usb 5-1: USB disconnect, device number 34
[  289.467695][  T929] usb 1-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  289.486023][  T929] usb 1-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  289.511050][  T929] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  289.532103][  T929] usb 1-1: config 4 interface 20 altsetting 64 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  289.547613][  T929] usb 1-1: config 4 interface 20 has no altsetting 0
[  289.562073][  T929] usb 1-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ba.e6
[  289.579049][  T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.594239][  T929] usb 1-1: Product: ᠁
[  289.599589][  T929] usb 1-1: Manufacturer: ﶳ떧᫲ꄮ⳻唭뺍䳔൦ဎ퍁왟䠯깩ꩮ넸힞᜖᭦斱〯葙࠘높உ흵쵌䡽쓁ꦖ̘ⷹ뮧䫗䪆燨᷁뇆恙㢏ᷯ쬂䇠磤਌ꅥ⌧Ἴ礋羪么ⷦ಄둾芺ẉﱍ猥䷠働꺴妇
[  289.618713][ T5856] Bluetooth: hci4: unexpected event for opcode 0x2007
[  289.628903][  T929] usb 1-1: SerialNumber: ౺
[  289.872943][  T929] HFC-S_USB 1-1:4.20: probe with driver HFC-S_USB failed with error -5
[  289.934668][  T929] usb 1-1: USB disconnect, device number 52
[  289.957973][ T5976] usb 6-1: non-Atmel transceiver xxxxe6de
[  290.167478][ T9613] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  290.175869][ T9613] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  290.186338][ T5976] usb 6-1: Firmware version (0.0) predates our first public release.
[  290.206784][ T5976] usb 6-1: Please update to version 0.2 or newer
[  290.223961][ T5976] usb 6-1: atusb_probe: initialization failed, error = -19
[  290.244117][ T5976] usb 6-1: USB disconnect, device number 22
[  291.098372][ T9675] /dev/rnullb0: Can't open blockdev
[  291.115591][ T9677] XFS (rnullb0): Invalid superblock magic number
[  291.414579][ T5976] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  291.579409][ T5976] usb 6-1: Using ep0 maxpacket: 32
[  291.595653][ T5976] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.634030][ T5976] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  291.676614][ T5976] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  291.706341][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  291.751278][ T5976] usb 6-1: Product: syz
[  291.755551][ T5976] usb 6-1: Manufacturer: syz
[  291.765755][ T5976] usb 6-1: SerialNumber: syz
[  291.805427][ T5976] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input20
[  291.974091][ T9694] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  291.993738][ T9694] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  292.105218][ T9696] netlink: 'syz.0.1018': attribute type 21 has an invalid length.
[  292.138697][ T9696] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1018'.
[  292.645740][ T9709] /dev/rnullb0: Can't open blockdev
[  292.882652][ T9713] /dev/rnullb0: Can't open blockdev
[  293.266874][ T5856] Bluetooth: hci4: ACL packet too small
[  293.297671][ T9722] XFS (rnullb0): Invalid superblock magic number
[  293.388764][   T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  293.562447][   T10] usb 5-1: device descriptor read/64, error -71
[  293.669406][ T5856] Bluetooth: hci2: command 0x0406 tx timeout
[  293.742814][   T30] kauditd_printk_skb: 62 callbacks suppressed
[  293.742835][   T30] audit: type=1326 audit(1753680660.363:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  293.838675][   T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  293.855428][   T30] audit: type=1326 audit(1753680660.363:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  293.916541][   T30] audit: type=1326 audit(1753680660.403:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  294.019927][ T5895] usb 6-1: USB disconnect, device number 23
[  294.021089][   T10] usb 5-1: device descriptor read/64, error -71
[  294.077187][ T5895] appletouch 6-1:1.0: input: appletouch disconnected
[  294.098019][   T30] audit: type=1326 audit(1753680660.403:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  294.131511][   T30] audit: type=1326 audit(1753680660.403:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  294.166833][   T30] audit: type=1326 audit(1753680660.403:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  294.167762][   T10] usb usb5-port1: attempt power cycle
[  294.209327][   T30] audit: type=1326 audit(1753680660.413:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  294.231710][    C1] vkms_vblank_simulate: vblank timer overrun
[  294.264953][   T30] audit: type=1326 audit(1753680660.413:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  294.293792][   T30] audit: type=1326 audit(1753680660.413:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  294.316096][    C1] vkms_vblank_simulate: vblank timer overrun
[  294.372970][   T30] audit: type=1326 audit(1753680660.413:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f898558e9a9 code=0x7ffc0000
[  294.395165][    C1] vkms_vblank_simulate: vblank timer overrun
[  294.453924][ T9748] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1034'.
[  294.602306][   T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  294.663732][   T10] usb 5-1: device descriptor read/8, error -71
[  294.928850][   T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  294.959506][   T10] usb 5-1: device descriptor read/8, error -71
[  295.092542][   T10] usb usb5-port1: unable to enumerate USB device
[  295.713063][ T9780] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  295.805393][ T9780] GUP no longer grows the stack in syz.5.1043 (9780): 200000005000-200000008000 (200000004000)
[  295.834870][ T9780] CPU: 1 UID: 0 PID: 9780 Comm: syz.5.1043 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  295.834902][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  295.834915][ T9780] Call Trace:
[  295.834923][ T9780]  <TASK>
[  295.834931][ T9780]  dump_stack_lvl+0x189/0x250
[  295.834969][ T9780]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.834998][ T9780]  ? __pfx__printk+0x10/0x10
[  295.835022][ T9780]  ? find_vma+0xe7/0x160
[  295.835059][ T9780]  fixup_user_fault+0x661/0x720
[  295.835086][ T9780]  fault_in_user_writeable+0x72/0xe0
[  295.835115][ T9780]  futex_lock_pi+0x773/0xa90
[  295.835148][ T9780]  ? __pfx_futex_lock_pi+0x10/0x10
[  295.835197][ T9780]  ? futex_private_hash_put+0x4b/0x280
[  295.835228][ T9780]  ? __pfx_futex_wake_mark+0x10/0x10
[  295.835257][ T9780]  ? __pfx_futex_wake+0x10/0x10
[  295.835276][ T9780]  ? userfaultfd_unmap_complete+0x278/0x2d0
[  295.835310][ T9780]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  295.835346][ T9780]  do_futex+0x292/0x420
[  295.835372][ T9780]  ? __pfx_do_futex+0x10/0x10
[  295.835391][ T9780]  ? __vm_munmap+0x301/0x3d0
[  295.835416][ T9780]  __se_sys_futex+0x36f/0x400
[  295.835443][ T9780]  ? __pfx___se_sys_futex+0x10/0x10
[  295.835463][ T9780]  ? rcu_is_watching+0x15/0xb0
[  295.835493][ T9780]  ? __x64_sys_futex+0x21/0xf0
[  295.835515][ T9780]  do_syscall_64+0xfa/0x3b0
[  295.835543][ T9780]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.835570][ T9780]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.835589][ T9780]  ? clear_bhb_loop+0x60/0xb0
[  295.835613][ T9780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.835643][ T9780] RIP: 0033:0x7fccf498e9a9
[  295.835662][ T9780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.835678][ T9780] RSP: 002b:00007fccf5826038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  295.835700][ T9780] RAX: ffffffffffffffda RBX: 00007fccf4bb6080 RCX: 00007fccf498e9a9
[  295.835715][ T9780] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  295.835728][ T9780] RBP: 00007fccf4a10d69 R08: 0000000000000000 R09: 0000000000000000
[  295.835741][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.835753][ T9780] R13: 0000000000000000 R14: 00007fccf4bb6080 R15: 00007fff201c1ec8
[  295.835787][ T9780]  </TASK>
[  296.073509][ T9780] ALSA: seq fatal error: cannot create timer (-22)
[  296.903826][ T9800] netlink: 400 bytes leftover after parsing attributes in process `syz.6.1050'.
[  296.949131][ T9801] netlink: 400 bytes leftover after parsing attributes in process `syz.6.1050'.
[  297.025773][ T9801] fuse: Bad value for 'rootmode'
[  297.205228][ T9800] Malformed UNC in devname
[  297.205228][ T9800] 
[  297.221382][ T9800] CIFS: VFS: Malformed UNC in devname
[  297.778290][ T9807] Device name not specified.
[  297.778290][ T9807] 
[  297.821707][ T9807] /dev/rnullb0: Can't open blockdev
[  298.090084][ T9817] /dev/rnullb0: Can't open blockdev
[  298.299360][ T9828] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  298.324794][ T9828] /dev/rnullb0: Can't open blockdev
[  298.488149][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1064'.
[  298.558730][  T929] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  298.718665][  T929] usb 6-1: Using ep0 maxpacket: 32
[  298.730773][  T929] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  298.749449][  T929] usb 6-1: config 0 has no interface number 0
[  298.755632][  T929] usb 6-1: config 0 interface 12 has no altsetting 0
[  298.775221][  T929] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  298.784910][  T929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.784938][  T929] usb 6-1: Product: syz
[  298.784954][  T929] usb 6-1: Manufacturer: syz
[  298.784969][  T929] usb 6-1: SerialNumber: syz
[  298.789464][  T929] usb 6-1: config 0 descriptor??
[  298.869055][ T5884] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  298.985501][ T9848] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1067'.
[  298.996745][ T9848] tipc: Invalid UDP bearer configuration
[  298.996813][ T9848] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  299.030545][ T5884] usb 1-1: Using ep0 maxpacket: 32
[  299.058208][ T5884] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  299.078106][ T5884] usb 1-1: config 0 has no interface number 0
[  299.101601][  T929] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  299.108852][ T5884] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  299.120791][  T929] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  299.128172][  T929] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  299.129004][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.166874][ T5884] usb 1-1: Product: syz
[  299.185413][ T5884] usb 1-1: Manufacturer: syz
[  299.208751][  T929] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  299.225637][ T5884] usb 1-1: SerialNumber: syz
[  299.258844][  T929] usb 6-1: USB disconnect, device number 24
[  299.381665][ T5884] usb 1-1: config 0 descriptor??
[  299.423725][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  299.423743][   T30] audit: type=1326 audit(1753680666.043:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70038e9a9 code=0x7ffc0000
[  299.530117][   T30] audit: type=1326 audit(1753680666.043:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70038e9a9 code=0x7ffc0000
[  299.578622][   T30] audit: type=1326 audit(1753680666.043:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd70038e9a9 code=0x7ffc0000
[  299.682919][   T30] audit: type=1326 audit(1753680666.043:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70038e9a9 code=0x7ffc0000
[  299.745947][   T30] audit: type=1326 audit(1753680666.043:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70038e9a9 code=0x7ffc0000
[  299.829426][ T5884] radio-si470x 1-1:0.35: this is not a si470x device.
[  300.258616][   T30] audit: type=1326 audit(1753680666.873:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70038e9a9 code=0x7fc00000
[  300.379123][ T5884] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  300.474485][ T9867] IPVS: set_ctl: invalid protocol: 25647 47.118.105.100:25967
[  300.488667][   T10] usb 5-1: new low-speed USB device number 39 using dummy_hcd
[  300.670761][   T10] usb 5-1: config 7 has an invalid interface number: 252 but max is 0
[  300.686806][   T10] usb 5-1: config 7 has no interface number 0
[  300.707940][   T10] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0
[  300.718756][ T9872] /dev/rnullb0: Can't open blockdev
[  300.738596][   T10] usb 5-1: config 7 interface 252 has no altsetting 0
[  300.749122][   T10] usb 5-1: string descriptor 0 read error: -22
[  300.755722][   T10] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  300.765309][ T5884] usb 1-1: USB disconnect, device number 53
[  300.770679][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.825301][   T10] idmouse 5-1:7.252: Unable to find bulk-in endpoint.
[  300.948227][ T9878] netlink: 123 bytes leftover after parsing attributes in process `syz.5.1074'.
[  301.030903][ T9863] /dev/rnullb0: Can't open blockdev
[  301.040596][   T10] usb 5-1: USB disconnect, device number 39
[  301.551727][ T9880] /dev/rnullb0: Can't open blockdev
[  301.747525][ T9883] /dev/rnullb0: Can't open blockdev
[  302.058709][   T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  302.231819][   T10] usb 5-1: Using ep0 maxpacket: 8
[  302.249772][   T10] usb 5-1: config 4 has an invalid interface number: 20 but max is 0
[  302.268202][  T929] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  302.276189][   T10] usb 5-1: config 4 has no interface number 0
[  302.286366][   T10] usb 5-1: config 4 interface 20 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  302.317841][   T10] usb 5-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  302.333177][   T10] usb 5-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  302.346404][   T10] usb 5-1: config 4 interface 20 altsetting 64 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  302.365476][   T10] usb 5-1: config 4 interface 20 altsetting 64 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  302.385154][   T10] usb 5-1: config 4 interface 20 has no altsetting 0
[  302.396238][   T10] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ba.e6
[  302.414068][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.426570][   T10] usb 5-1: Product: ᠁
[  302.433781][   T10] usb 5-1: Manufacturer: ﶳ떧᫲ꄮ⳻唭뺍䳔൦ဎ퍁왟䠯깩ꩮ넸힞᜖᭦斱〯葙࠘높உ흵쵌䡽쓁ꦖ̘ⷹ뮧䫗䪆燨᷁뇆恙㢏ᷯ쬂䇠磤਌ꅥ⌧Ἴ礋羪么ⷦ಄둾芺ẉﱍ猥䷠働꺴妇
[  302.478080][  T929] usb 1-1: config index 0 descriptor too short (expected 69, got 36)
[  302.487886][   T10] usb 5-1: SerialNumber: ౺
[  302.503054][  T929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  302.557299][  T929] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  302.581450][  T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.584357][ T9891] /dev/rnullb0: Can't open blockdev
[  302.598780][  T929] usb 1-1: Product: syz
[  302.603078][  T929] usb 1-1: Manufacturer: syz
[  302.607790][  T929] usb 1-1: SerialNumber: syz
[  302.633607][  T929] usb 1-1: config 0 descriptor??
[  302.659820][  T929] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  302.747487][   T10] HFC-S_USB 5-1:4.20: probe with driver HFC-S_USB failed with error -5
[  302.802992][   T10] usb 5-1: USB disconnect, device number 40
[  302.898324][ T9899] /dev/rnullb0: Can't open blockdev
[  302.906761][ T9899] /dev/rnullb0: Can't open blockdev
[  302.921261][ T9899] /dev/rnullb0: Can't open blockdev
[  302.927870][ T9899] /dev/rnullb0: Can't open blockdev
[  302.943551][ T9899] /dev/rnullb0: Can't open blockdev
[  302.952745][ T9899] /dev/rnullb0: Can't open blockdev
[  302.965958][ T9899] /dev/rnullb0: Can't open blockdev
[  302.976877][ T9899] /dev/rnullb0: Can't open blockdev
[  302.990633][ T9899] /dev/rnullb0: Can't open blockdev
[  302.996932][ T9899] /dev/rnullb0: Can't open blockdev
[  303.007791][ T9899] /dev/rnullb0: Can't open blockdev
[  303.015294][ T9899] /dev/rnullb0: Can't open blockdev
[  303.028017][ T9899] /dev/rnullb0: Can't open blockdev
[  303.055942][ T9899] /dev/rnullb0: Can't open blockdev
[  303.070459][ T9899] /dev/rnullb0: Can't open blockdev
[  303.077325][ T9899] /dev/rnullb0: Can't open blockdev
[  303.091125][ T9899] /dev/rnullb0: Can't open blockdev
[  303.097572][ T9899] /dev/rnullb0: Can't open blockdev
[  303.105828][ T9899] /dev/rnullb0: Can't open blockdev
[  303.116347][ T9899] /dev/rnullb0: Can't open blockdev
[  303.124855][ T9899] /dev/rnullb0: Can't open blockdev
[  303.136704][ T9899] /dev/rnullb0: Can't open blockdev
[  303.145882][ T9899] /dev/rnullb0: Can't open blockdev
[  303.163664][ T9899] /dev/rnullb0: Can't open blockdev
[  303.175775][ T9899] /dev/rnullb0: Can't open blockdev
[  303.185440][ T9899] /dev/rnullb0: Can't open blockdev
[  303.198373][ T9899] /dev/rnullb0: Can't open blockdev
[  303.208374][ T9899] /dev/rnullb0: Can't open blockdev
[  303.223746][ T9899] /dev/rnullb0: Can't open blockdev
[  303.233387][ T9899] /dev/rnullb0: Can't open blockdev
[  303.245227][ T9899] /dev/rnullb0: Can't open blockdev
[  303.254067][ T9899] /dev/rnullb0: Can't open blockdev
[  303.287788][ T9889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.300377][ T9889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.339903][ T9899] /dev/rnullb0: Can't open blockdev
[  303.459707][ T9904] IPVS: ip_vs_add_dest(): server weight less than zero
[  303.467942][ T5884] IPVS: starting estimator thread 0...
[  303.547312][  T929] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[  303.560419][  T929] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  303.569593][ T9905] IPVS: using max 28 ests per chain, 67200 per kthread
[  303.618759][  T929] usb 1-1: USB disconnect, device number 54
[  303.652259][   T30] audit: type=1326 audit(1753680670.263:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.6.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70038e9a9 code=0x7fc00000
[  304.112413][ T9919] overlayfs: failed to clone upperpath
[  304.128733][  T986] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  304.209840][ T9920] /dev/rnullb0: Can't lookup blockdev
[  304.288828][  T986] usb 1-1: Using ep0 maxpacket: 32
[  304.307626][  T986] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  304.336438][  T986] usb 1-1: config 0 has no interface number 0
[  304.346860][  T986] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.378349][  T986] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.397725][  T986] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  304.425660][  T986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.459343][  T986] usb 1-1: config 0 descriptor??
[  305.138395][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.164673][  T986] uclogic 0003:28BD:0094.000E: pen parameters not found
[  305.165148][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.178558][  T986] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring
[  305.254092][ T5895] usb 1-1: USB disconnect, device number 55
[  305.393258][ T9938] /dev/rnullb0: Can't lookup blockdev
[  305.403549][ T9939] /dev/rnullb0: Can't open blockdev
[  305.419189][   T30] audit: type=1326 audit(1753680672.033:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.4.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f373f58e9a9 code=0x7fc00000
[  305.821885][ T9945] /dev/rnullb0: Can't lookup blockdev
[  306.407320][ T9957] /dev/rnullb0: Can't open blockdev
[  306.773669][ T9962] syz_tun: entered allmulticast mode
[  306.858469][ T9962] /dev/rnullb0: Can't open blockdev
[  307.027406][ T9970] program syz.4.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  307.437485][ T9977] /dev/rnullb0: Can't lookup blockdev
[  307.518576][  T986] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  307.682242][  T986] usb 5-1: Using ep0 maxpacket: 8
[  307.710700][  T986] usb 5-1: config 4 has an invalid interface number: 20 but max is 0
[  307.724508][  T986] usb 5-1: config 4 has no interface number 0
[  307.755065][  T986] usb 5-1: config 4 interface 20 altsetting 64 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  307.809782][  T986] usb 5-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  307.836028][  T986] usb 5-1: config 4 interface 20 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  307.847187][  T986] usb 5-1: config 4 interface 20 has no altsetting 0
[  307.869906][  T986] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ba.e6
[  307.888982][  T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.898905][  T986] usb 5-1: Product: ᠁
[  307.903095][  T986] usb 5-1: Manufacturer: ﶳ떧᫲ꄮ⳻唭뺍䳔൦ဎ퍁왟䠯깩ꩮ넸힞᜖᭦斱〯葙࠘높உ흵쵌䡽쓁ꦖ̘ⷹ뮧䫗䪆燨᷁뇆恙㢏ᷯ쬂䇠磤਌ꅥ⌧Ἴ礋羪么ⷦ಄둾芺ẉﱍ猥䷠働꺴妇
[  307.948638][  T986] usb 5-1: SerialNumber: ౺
[  308.181409][  T986] HFC-S_USB 5-1:4.20: probe with driver HFC-S_USB failed with error -5
[  308.212064][  T986] usb 5-1: USB disconnect, device number 41
[  317.209264][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  317.215723][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  344.709001][   T31] INFO: task syz.3.574:8168 blocked for more than 143 seconds.
[  344.716925][   T31]       Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
[  344.734712][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  344.746078][   T31] task:syz.3.574       state:D stack:27912 pid:8168  tgid:8153  ppid:5848   task_flags:0x400140 flags:0x00004004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  344.763269][   T31] Call Trace:
[  344.767015][   T31]  <TASK>
[  344.770500][   T31]  __schedule+0x1737/0x4d30
[  344.775090][   T31]  ? __lock_acquire+0xab9/0xd20
[  344.788289][   T31]  ? schedule+0x165/0x360
[  344.793765][   T31]  ? __lock_acquire+0xab9/0xd20
[  344.806864][   T31]  ? __pfx___schedule+0x10/0x10
[  344.812110][   T31]  ? schedule+0x91/0x360
[  344.888593][   T31]  schedule+0x165/0x360
[  344.892834][   T31]  schedule_preempt_disabled+0x13/0x30
[  344.898327][   T31]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  344.963404][   T31]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  344.988932][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  344.995175][   T31]  down_read+0x98/0x2e0
[  345.038591][   T31]  uffd_lock_vma+0xb6/0x2e0
[  345.043180][   T31]  uffd_mfill_lock+0x23/0x1a0
[  345.047901][   T31]  mfill_atomic_poison+0x160/0x1350
[  345.088658][   T31]  ? __might_fault+0xb0/0x130
[  345.093763][   T31]  ? __pfx_mfill_atomic_poison+0x10/0x10
[  345.122133][   T31]  userfaultfd_ioctl+0x2454/0x4c80
[  345.127343][   T31]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  345.168553][   T31]  ? kasan_quarantine_put+0xdd/0x220
[  345.173918][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  345.198588][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  345.204310][   T31]  ? do_vfs_ioctl+0xbe8/0x1430
[  345.238606][   T31]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  345.243723][   T31]  ? __lock_acquire+0xab9/0xd20
[  345.268791][   T31]  ? __fget_files+0x2a/0x420
[  345.273467][   T31]  ? __fget_files+0x2a/0x420
[  345.278107][   T31]  ? __fget_files+0x3a0/0x420
[  345.298538][   T31]  ? __fget_files+0x2a/0x420
[  345.303214][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[  345.308195][   T31]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  345.335436][   T31]  __se_sys_ioctl+0xf9/0x170
[  345.340499][   T31]  do_syscall_64+0xfa/0x3b0
[  345.345416][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.356372][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.370292][   T31]  ? clear_bhb_loop+0x60/0xb0
[  345.375036][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.386246][   T31] RIP: 0033:0x7f0e9df8e9a9
[  345.390872][   T31] RSP: 002b:00007f0e9eea2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  345.404421][   T31] RAX: ffffffffffffffda RBX: 00007f0e9e1b6080 RCX: 00007f0e9df8e9a9
[  345.423620][   T31] RDX: 0000200000000080 RSI: 00000000c020aa08 RDI: 000000000000000a
[  345.446161][   T31] RBP: 00007f0e9e010d69 R08: 0000000000000000 R09: 0000000000000000
[  345.478141][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  345.498543][   T31] R13: 0000000000000000 R14: 00007f0e9e1b6080 R15: 00007ffd9d521398
[  345.506699][   T31]  </TASK>
[  345.518554][   T31] 
[  345.518554][   T31] Showing all locks held in the system:
[  345.526319][   T31] 1 lock held by khungtaskd/31:
[  345.563070][   T31]  #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  345.588822][   T31] 3 locks held by kworker/0:2/929:
[  345.594013][   T31] 2 locks held by kworker/u8:8/2997:
[  345.603861][   T31]  #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  345.614186][   T31]  #1: ffff8880b8724008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  345.625957][   T31] 2 locks held by getty/5610:
[  345.635163][   T31]  #0: ffff8880341c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  345.646778][   T31]  #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  345.662230][   T31] 1 lock held by syz-executor/5841:
[  345.683663][   T31] 5 locks held by syz-executor/5850:
[  345.693129][   T31]  #0: ffff88803105cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  345.723028][   T31]  #1: ffff88803105c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  345.758589][   T31]  #2: ffffffff8faa0e68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  345.778568][   T31]  #3: ffff888028712338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  345.794995][   T31]  #4: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  345.806095][   T31] 1 lock held by syz.3.574/8153:
[  345.820017][   T31]  #0: ffff88807d23d7e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  345.833132][   T31] 1 lock held by syz.3.574/8156:
[  345.838183][   T31] 1 lock held by syz.3.574/8168:
[  345.844195][   T31]  #0: ffff88807d23d7e0 (&mm->mmap_lock){++++}-{4:4}, at: uffd_lock_vma+0xb6/0x2e0
[  345.854037][   T31] 1 lock held by syz-executor/8465:
[  345.859610][   T31]  #0: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  345.871992][   T31] 
[  345.874389][   T31] =============================================
[  345.874389][   T31] 
[  345.892440][   T31] NMI backtrace for cpu 0
[  345.892461][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  345.892484][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  345.892496][   T31] Call Trace:
[  345.892504][   T31]  <TASK>
[  345.892512][   T31]  dump_stack_lvl+0x189/0x250
[  345.892548][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.892575][   T31]  ? __pfx__printk+0x10/0x10
[  345.892615][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  345.892643][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  345.892669][   T31]  ? __pfx__printk+0x10/0x10
[  345.892701][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  345.892726][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  345.892753][   T31]  watchdog+0xf93/0xfe0
[  345.892779][   T31]  ? watchdog+0x1de/0xfe0
[  345.892806][   T31]  kthread+0x70e/0x8a0
[  345.892838][   T31]  ? __pfx_watchdog+0x10/0x10
[  345.892858][   T31]  ? __pfx_kthread+0x10/0x10
[  345.892888][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  345.892911][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.892933][   T31]  ? __pfx_kthread+0x10/0x10
[  345.892960][   T31]  ret_from_fork+0x3f9/0x770
[  345.892987][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  345.893016][   T31]  ? __switch_to_asm+0x39/0x70
[  345.893030][   T31]  ? __switch_to_asm+0x33/0x70
[  345.893045][   T31]  ? __pfx_kthread+0x10/0x10
[  345.893072][   T31]  ret_from_fork_asm+0x1a/0x30
[  345.893105][   T31]  </TASK>
[  345.893112][   T31] Sending NMI from CPU 0 to CPUs 1:
[  346.052074][    C1] NMI backtrace for cpu 1
[  346.052093][    C1] CPU: 1 UID: 0 PID: 9114 Comm: syz.4.835 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  346.052112][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  346.052121][    C1] RIP: 0010:rcu_is_watching+0x2e/0xb0
[  346.052144][    C1] Code: 41 57 41 56 53 65 ff 05 20 99 40 11 e8 4b d7 d8 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 3d e9 8d <4c> 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 dc 99 7c 00
[  346.052157][    C1] RSP: 0018:ffffc9000db97518 EFLAGS: 00000297
[  346.052172][    C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ecf00eb47aa74f00
[  346.052183][    C1] RDX: 0000000000000001 RSI: ffffffff8c04d3e0 RDI: ffffffff8c04d3a0
[  346.052194][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81730195
[  346.052204][    C1] R10: ffffc9000db97658 R11: ffffffff81ac9660 R12: 1ffff92001b72ec1
[  346.052215][    C1] R13: ffffc9000db97640 R14: ffffffff8de93d18 R15: dffffc0000000000
[  346.052226][    C1] FS:  0000000000000000(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000
[  346.052238][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  346.052249][    C1] CR2: 00005629d3b52000 CR3: 000000007cf26000 CR4: 00000000003526f0
[  346.052265][    C1] Call Trace:
[  346.052271][    C1]  <TASK>
[  346.052277][    C1]  ? exit_to_user_mode_loop+0x75/0x110
[  346.052294][    C1]  ? unwind_next_frame+0xa5/0x2390
[  346.052312][    C1]  unwind_next_frame+0xd4/0x2390
[  346.052333][    C1]  ? unwind_next_frame+0xa5/0x2390
[  346.052352][    C1]  ? arch_do_signal_or_restart+0x9a/0x750
[  346.052371][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  346.052391][    C1]  arch_stack_walk+0x11c/0x150
[  346.052414][    C1]  ? exit_to_user_mode_loop+0x75/0x110
[  346.052432][    C1]  stack_trace_save+0x9c/0xe0
[  346.052452][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  346.052477][    C1]  save_stack+0xf5/0x1f0
[  346.052493][    C1]  ? __pfx_save_stack+0x10/0x10
[  346.052508][    C1]  ? __free_frozen_pages+0xbc4/0xd30
[  346.052532][    C1]  ? vfree+0x25a/0x400
[  346.052546][    C1]  ? kcov_close+0x28/0x50
[  346.052560][    C1]  ? __fput+0x449/0xa70
[  346.052573][    C1]  ? task_work_run+0x1d4/0x260
[  346.052587][    C1]  ? do_exit+0x6b5/0x2300
[  346.052606][    C1]  ? do_group_exit+0x21c/0x2d0
[  346.052618][    C1]  ? get_signal+0x1286/0x1340
[  346.052632][    C1]  ? arch_do_signal_or_restart+0x9a/0x750
[  346.052647][    C1]  ? exit_to_user_mode_loop+0x75/0x110
[  346.052669][    C1]  __reset_page_owner+0x71/0x1f0
[  346.052686][    C1]  __free_frozen_pages+0xbc4/0xd30
[  346.052707][    C1]  vfree+0x25a/0x400
[  346.052723][    C1]  ? __pfx_kcov_close+0x10/0x10
[  346.052738][    C1]  kcov_close+0x28/0x50
[  346.052751][    C1]  __fput+0x449/0xa70
[  346.052771][    C1]  task_work_run+0x1d4/0x260
[  346.052786][    C1]  ? __pfx_task_work_run+0x10/0x10
[  346.052801][    C1]  ? kmem_cache_free+0x18f/0x400
[  346.052820][    C1]  do_exit+0x6b5/0x2300
[  346.052842][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  346.052862][    C1]  ? do_raw_spin_lock+0x121/0x290
[  346.052884][    C1]  ? __pfx_do_exit+0x10/0x10
[  346.052911][    C1]  do_group_exit+0x21c/0x2d0
[  346.052924][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.052946][    C1]  get_signal+0x1286/0x1340
[  346.052971][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  346.052987][    C1]  ? __pfx_get_timespec64+0x10/0x10
[  346.053005][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  346.053028][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  346.053045][    C1]  exit_to_user_mode_loop+0x75/0x110
[  346.053061][    C1]  do_syscall_64+0x2bd/0x3b0
[  346.053080][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.053099][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.053113][    C1]  ? clear_bhb_loop+0x60/0xb0
[  346.053130][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.053144][    C1] RIP: 0033:0x7f373f5c1265
[  346.053157][    C1] Code: Unable to access opcode bytes at 0x7f373f5c123b.
[  346.053165][    C1] RSP: 002b:00007f3740470f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  346.053180][    C1] RAX: fffffffffffffdfc RBX: 00007f373f7b5fa0 RCX: 00007f373f5c1265
[  346.053191][    C1] RDX: 00007f3740470fc0 RSI: 0000000000000000 RDI: 0000000000000000
[  346.053200][    C1] RBP: 00007f373f610d69 R08: 0000000000000000 R09: 0000000000000000
[  346.053210][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  346.053219][    C1] R13: 0000000000000000 R14: 00007f373f7b5fa0 R15: 00007ffe39f1c9d8
[  346.053237][    C1]  </TASK>
[  346.298579][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  346.298600][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  346.298621][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  346.298632][   T31] Call Trace:
[  346.298642][   T31]  <TASK>
[  346.298649][   T31]  dump_stack_lvl+0x99/0x250
[  346.298680][   T31]  ? __asan_memcpy+0x40/0x70
[  346.298706][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.298729][   T31]  ? __pfx__printk+0x10/0x10
[  346.298765][   T31]  vpanic+0x281/0x750
[  346.298788][   T31]  ? __pfx_vpanic+0x10/0x10
[  346.298805][   T31]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  346.298830][   T31]  ? preempt_schedule+0xae/0xc0
[  346.298854][   T31]  ? preempt_schedule_common+0x83/0xd0
[  346.298883][   T31]  panic+0xb9/0xc0
[  346.298902][   T31]  ? __pfx_panic+0x10/0x10
[  346.298923][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  346.298948][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  346.298971][   T31]  watchdog+0xfd2/0xfe0
[  346.298995][   T31]  ? watchdog+0x1de/0xfe0
[  346.299018][   T31]  kthread+0x70e/0x8a0
[  346.299045][   T31]  ? __pfx_watchdog+0x10/0x10
[  346.299062][   T31]  ? __pfx_kthread+0x10/0x10
[  346.299088][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  346.299109][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.299130][   T31]  ? __pfx_kthread+0x10/0x10
[  346.299155][   T31]  ret_from_fork+0x3f9/0x770
[  346.299179][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  346.299205][   T31]  ? __switch_to_asm+0x39/0x70
[  346.299220][   T31]  ? __switch_to_asm+0x33/0x70
[  346.299234][   T31]  ? __pfx_kthread+0x10/0x10
[  346.299259][   T31]  ret_from_fork_asm+0x1a/0x30
[  346.299297][   T31]  </TASK>
[  346.653287][   T31] Kernel Offset: disabled
[  346.657616][   T31] Rebooting in 86400 seconds..