last executing test programs:

2m32.120421661s ago: executing program 2 (id=894):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0)
fchmod(r0, 0x110) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r1, r2, 0x0, 0x7fffeffd)

2m32.070611482s ago: executing program 2 (id=896):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648e000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
syz_usb_connect(0x5, 0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="120101024cf1c508"], 0x0)
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = syz_open_procfs(r1, &(0x7f00000000c0)='wchan\x00')
pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m28.994936628s ago: executing program 2 (id=922):
r0 = fanotify_init(0x18, 0x1001)
r1 = memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet(r2, &(0x7f0000000240)="183e", 0x2, 0x4800, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r4 = dup(r1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg0\x00'})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
fanotify_mark(r0, 0x1, 0x8000000, r4, 0x0)
ftruncate(r4, 0x6)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

2m28.82378715s ago: executing program 2 (id=925):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_NMI(r0, 0xae9a)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x2)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000080)=""/135, 0x87}, {&(0x7f0000000140)=""/11, 0xb}], 0x3, 0x8, 0xfffffffd)
mount(&(0x7f00000001c0)=@md0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='reiserfs\x00', 0x8, &(0x7f0000000280)='!$[\x00')
ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xc})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000340)={[0x6, 0x0, 0x9, 0x4, 0xfffffffffffffffb, 0xb, 0x1, 0xf7d1, 0x8, 0x9, 0x4, 0xfffffffffffffffd, 0x7, 0x59f6, 0x1, 0x7fffffffffffffff], 0x4000, 0x13002})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/11, 0xb}, {&(0x7f0000001500)=""/81, 0x51}], 0x4, &(0x7f00000015c0)=""/132, 0x84}, 0x12050)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000016c0), 0x18d240, 0x0)
sendmmsg$alg(r3, &(0x7f0000005400)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)="efced293af7cb29b3f4cb10b5c0f7c303c9dd1d0810aab9b898c3855a00ba34dd4", 0x21}, {&(0x7f0000001740)="25cece138e3f5064af1d59b81977c11102a9", 0x12}], 0x2, &(0x7f00000017c0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xf3f2}, @iv={0x30, 0x117, 0x2, 0x1a, "a5edb7fd0511149c232ccd6d3bd2df73fdba9064aca7c0abb3dd"}, @iv={0x80, 0x117, 0x2, 0x68, "f8f024eaab8936eaacd594d1371a64f826bb64efdd042910afe541a1a27e5c889123a918ba8ce2408a0f07d587b03ea038a5414038baf6f7dd4eacbe82ab077f40273bf5d2c470060679a80f56b5006ced4b724a073c3bd9a5ce362306ece7eef5fbdf5cb64f7e66"}, @iv={0x18}], 0x110, 0x1}, {0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001900)="c8492998fb063ae9c32dcda5968bb3d9c0b0cb95a672afe111ef5a5cfb74482c1aec4a4a2fb6c2d8e4a35359263dfcbfb927a2655ccca128073d727b34c942b91737733468d95dbd9a", 0x49}, {&(0x7f0000001980)="41fc581e5a9e8f1a4c989f56a80794d79247840b7d6e9d9140892c78afb65f50e9d750aefe5c4e58", 0x28}, {&(0x7f00000019c0)="465e33b06a81219bae894ca48b7ed15a25ca0342c8f68b7b4c12edce33f7baa9f993727ad3a3463a9aa3b2e443c251ae43b5f03ea5bb850a864ccaa77a0025044d42be6ba77e216f8713e53e2a848a377e4d0ced3108d604aa1eca6b4d472ef48d28f33f21c0946e031bdd4fce801edcbc640e7383d42d797de4268d3aa3fd21613883f479cdb1a5", 0x88}, {&(0x7f0000001a80)="e2e9feb06d67d0c45a2c553f3581829aa22345965891d85e16ea5aa7cf9352ed2ee5b6fcde4148947a3841dc4d855fce3d27003bef4d2a46ac6ddecc23214c7f439451eab37ccf7eec404849cf45d91dae985a1213cd561580bec8024741147b662da5b0246cf1a752fd91397a3da9f77b75c6732408112c9e8d71d8a52342add901f319173a51ba422c9bbebf6c7f0a564f26085d937a6b0ee516cb2f445e38bb9c4685fafa5d428fd48cbdbdfcaca65b08e85c9aadc44bf55745d4e9ee2e2bbd4e2ccce0698ff091854c6cd86c8c24fada4eb158a5b920eb602ec2676956", 0xdf}, {&(0x7f0000001b80)="0124945ef620e3640c6b1da5edc8b2e39fb83840b48ac9", 0x17}, {&(0x7f0000001bc0)="32a28e930bcedb467b7deacaa79e91883d88a1d0efe9bf8661ab07096a9b6c8df92b7960e94ee2c8426011188552df2d6b409a5967d6f40cb2dead35dfec834918885e059c744b0628d63b20418bca951ba1886c8b7a1b14830c0a2f09bac1aa93988f03b5aa9f95fbd6fb23bb164a7cdc07f1df100d9f5491365b4c044d72d9669429f442ab2c884c09ab6585c4cb6e985e4be41235ce95421e78c43676f5dd77d6a3f33ebf2984c6f8bd5b9450e26ee98a", 0xb2}], 0x6, &(0x7f0000001d00)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x50, 0x117, 0x2, 0x3b, "6a49389b9215d54963249bde2e9683e74a7d849718b5133f9d3f5a13a7e71b61b831b079aca8d623a8fbe9e2ebaa0f7a5624f981d1aa1e27d070f4"}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x78, 0x117, 0x2, 0x5d, "7d387f6d360e0cf3e094be3b557125bf000f506ddffb7474f704aeb8f53a7272713717f5e5ad307dd6556b53513a46e64e30871dea28e8f5d0c916ed21b9b31afcc6fdaeec3f3f716c68605a30990f3c70f661806a568a2b887c53d164"}], 0x140, 0x4}, {0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001e40)="f826d435120e16be1a0f2ff520c4c70a7d96dacad584462abf5ec663671b43e61bd6764f57d36490ee8fe4dd8e79641f8112129d64047ec0c52351f4528b99d13c", 0x41}, {&(0x7f0000001ec0)="3e1a5d5329b0fe064a1bf8b85952", 0xe}, {&(0x7f0000001f00)="efaa5b964e7232e6bffe0fb71de77501b10db7d4b9c595247e78b030f065fadf6cf6d166539a6b0f80d7810a3b508fb7e1ffae1bee6db212c14007cba57c695f4580446842b267b3daf5d1cffcbf39264a765a466c66aa2b843ad9d44a23aecddabe92976d9c7567b94925cd9dbecea4556935d9da8edd80fcaf5511344b8b37b546b104f31d4fcfcec8a02e107ea1b7f92c654c9e5490babb1b86ede9522a01ce2b977af89732705415108d34845d3b00c8ebf321a6761b8109c3835838edbb64ee432a5aaa885cf7b9d3bc5c4410a9c1078f4348bdcbffdb664a0ef2129691e29ef9ac8f185169099479a38e1c41a61fc529535db354aafc2b2ecd124d41c95565d92f31a1dd1657ba4d4a90ad1a4fa26184c12b77667591eb875bc0c84cfbc67c7b4f3204aaa8594d0df24e6829305562d3493df78daacfa95b4702f9ab2308c36e98a5d15b051af526e36da76e838160910da3adfba04f6d0aa7195fe3d504790cdd2eb7e42fc29df0ed14e76309e082a6adf925cd25e065f2fbf046b9b7874114445330b3d602cd59733904bc80be608cb8c64bef5c4403169b1d4171d23c57aa9dcb0c8a9fc7affb1aab24a89c278d2ca7cb65772ee4c90d153ced7997ae7239230a178b244cffdf19efac8927014b3d73b17794b044ec8a9dd34965c95ddc045640f7aa0a3f4dd2b26f4c4230a11f0ef00e1082a7f4351df5f65f819d0419bc556a90e57ba53d2355a2485f4fdf137fe95e26c2a2de6238e3255b839f95cc20e3878edf82b878075dd21020205f576b0b341092230d79cf2004ebcd2eae1628f79a31491944a1e5ac651037c6805bed1e96ab1b76fed34f78b1b8fb5e2edcf6e07fd693bb9e5e24278e8f6195e2bc4dc5a3c3db63a772cde0520ec6d000b2e8fa4764354efc62702e4b7ffd9bb7365c03b2054274160999fff0a364010102c9cf6a2efec95116d2125b5667bc48969e160476370fdaa183463e5af2835bb925994340cd30780996aad30a91cf01e34b13b2e79787d3a11113647ae43e6db350319101476278e51b9b1b75005ff6c328a3abd1b26526c53abc059a4e115c389906874181d6bd05c2517a549b8165f00ddefbe1ac678568c17c8d8f03c43e233dda93e783b95cb11f9427350544a6241069a1528dbbe80286f96f68a203be5903fb23857a9cb8861c5d3c4691edf4d76986aaefdb4644726ef8faa6da8c2b5a8b1fc074c273314b1edf25cb079ebfb29e2257e64b25a725bae4f0db8b27115d0b80ca4d6c34b0b5651c487c3e1c33d3fb25f1d50f04f857aa7227f7a3065e25ce02d40d0b5d6a3ced06a65f26e56293106c7c65ce4d365bbdec723f2b6c355574cccde8a5f9acca8e982da164d20501661ebf1165ae966a0587f08cc2191015289f4466be99552d154a1821fba29ffa6b167c805d8c658f8038dc8d483db6a060f4af3670791422dfe6e1ad37759f88df656cff6f65a0ca1afe3ef3eb49f39f1418f58705f8666482b02917b605107b96ef522798c8a6e64ff2de8dfe6220aa7b50604b5dcc08bbb5f646b2994322cc49120ca52d6fd1d57c13bcbee39607b02dd417906a818368c810415af6baa0ab43ea468217a0d6692f433aa86a9c6be09525b03768049dae838cf511fbeb7e7d693f905d7179ae7fd5690816aaed325bcb96573bef53a5de040f825fbd24624c4365aef0840930bab49ebfa2bd54c25973904310216dac5b834c7bd3d40e28831b1790a84b4d6c7aabe1a6f3716485edfbae83f45f621006995006ee277a4f6d18daa487dbd4a2ee2c05ed7c23fca568c9d5447b4aafa338a2dc8e444990d455b7656ae6454b1b98681d41d331922fc42223a53930e86f3674ed09d0c2ed2d3fb2c6ff8c0fd99a7778e72b0d5624b861ac28f19a8a11adc1816a68dfecf525494d262112b084924377bb9195c3f57bbcd2d1548d7cea749426f66757404986148f29b5c3f7f0ea44e456a0451f34ddde85d6d1c93c7352f5fe577840ed11c17b4937783ef3510724a8f3f59714b94482788cc50bf929ffcadc12af9a039ec49ce17585338134c614d7feb55dece87eed6b04da7164b5544f99da69c6407d07607bcb768f35c893663f742706fae66c3403e564fcddfc03d196f35de410a4388013ed8492f957b9ba79c148aaf4869f1e6fede8b0e445118ff5d3651462858fb6d5463b12c9810b6024151bbab07fe64821844e10e0f215aa3095bfa5a6369396e3e2340be7c75374bd647acce9d20355def72dbe256407b0c1910826b0f51e247729a84f26f0a12ef95df7b01ca396863dfd5d928cc5a6722a5869c80b637e5b213fd0c4f31cb48e9265ea53a134e99b2c84b0bbbc5d556cf40e6d574a2fb074cdd7fe6a92e259a1e8dde477a20ebc3cccaa82d60afc0cbc1aefa68eda36858e958432f27acbff7cde98d193300a4ff270f805f0b4059c8f251859ab178c93c2d7b186f1123a1f8492d483d362ab5d9d862c02df93d27616f2358522f17963d5739443d5758b7bd83b9e0a08d1420003166b2973e69f35becafc2005ce56d2e3841ede6cb915ffc62db475226825df034618575c8075dc8fada0e8f0c8d902025fb22c995e4c6cc08bd689310a2b248e4466d7936df8ceecc5c452a146393f1c30837e0893c85334b6af0d2c23565de8f9bca4f3fec928430b87a24141f1f84deca8e4a3dda75d0e8f6b2c9a5a3a27a17ec67800ac6253287b9b35ac41ce739c612c10bf9556d5cd531f1bc37b03905c9cbf71897b3fa3db0c50bcd16cc8580a63edbc335a9c3f8477ab856a8456f2585fe912aedcee5f267345f011ddb71fde1b26bcfde09e4a81e5c55d78e0f46a1999a97bc36565301ddb0b1471e52427a7d4ff6af6309af61f0ae8cc99db36fbdc61399f3dff755658eaeb390da796dee2799c9eaba7adb30cbd7f590dee4d443ee75e8f43210e6499a0977bb6a070855bcebda88c2513db1c03d4a7e3d6350d06e8c4ae0a96611e03b4e9bb99d643ac387cc8f9d0eb27b347ad0d6e4728e657af0a1833624da45749071bc370b2b30c322f35ce6d74092a4d58264252c027391ad13ab9c495f3528da44f11d2d1edd00a83b3d260c7ffd7108df5681e7f442452938fea36249c06975e5b46ccb89a270886450e98791c6e9c380300d975034f9507c08048f8000e6adde07390cd02b1149730ad05cb907cf28b5d999145c6524b62cbe1785a350a3e8f521da8a7906938f197140da5be0718fabf83b77fa161f35256d574f23d57110fb076a6d061c49061932b1a08fff234f1bc7e6918f6894fdb7f8c53b0443cd925162b7199820f1cef6e4fa17e4192f76e246bde62fe0d0c87d19c3b5f9c29ce5189f6995c3a0a819a2b9a2495123a59a2bff28ddbd646c3a4a53ce06f21e57d43ce123d9dfbc9dbcde884ec784d6a85fe7d3e2c9591b6534b86924fe35099d7ee41170b2bc32999cdfed3181102b4dd642e801bfdf57c15715a46405995eb9cd5e097ae58bf6154d511977dfe77d0bc466c876922168321c42a380d62a2607924db4442ca6e503b3eeb635ef0560f9ed5097bcecbf4a430db103159681eb9f88ec009da60b962b477738a76cf2f035d5eab1699ac38ed05f76221904d489a1369b791f07fd7abc4e10e8a2f1131c2cebc941afbfdc3ba24797342070868256579e2cd5c2137d5a475977c6cf1fac6219e838e0b65049ba8c56b31b507ae5e6d038395500289a5e10bf2c7cdd655bb33b71e23d2cf58176bba3a68999aeb6a2544dbcd9923bab8c05f4250e48d232da3fd9ddb018be139b13a5d2ca6fadce70b1d7933de9d1bec8411f313b762bf6d9cab9525ee4039c9115d7c086a79300669c71fc7575faa2ef9de6a2b32670cdd99aa4427bf94b06e6b6d0974e52255c1d8d80add391d2f49b2579398ac178cefb9a0672d056a04892175f8b0f95142e4b4eee6db4cbc9cff28e3ad71f9583f2f47edf6df881f850cf54362a9ae13d6c762b9a577ce33d341734a06fb9aadbbe5d3166a9107f3cf6db38561578330209c9faf3024e7feaed7515426780d98855ab1c2137313237383386f5610d6a1fc395574bc2b369cce3c8c40da79d7740ec7592d863a15f2637df738e067b90a2d66cae42dc5f33394e978ffe55471998c1f5ce1c345e590ad09933feb950128c9fc52b9280e75839bfd29208afeaae78cd4552f885795dcaa287455ad2f72538c8ebf26a22f81294aba643df8a09e7cb389a828b9aca32da56dd29e1a4a9a534d892168bc82c5bb5e8c3c54f1f6ec338cdbbf55163773cbd3829439e9e27bfdb064defbb77259c8949d56204910c2fc062048e26f02d94238b171822aedca8e44db042784a5374880dae207dbe0a726e3930dcf410f9ae5b6f5059e83135d3c0d350aae5bac5b75430aac9fe9bf48d93fbf71a92bfeefdca2dfb2628580e02c527de871ccedd4cd8528fbabfacddf06a45998018a55d76f89d434ef626ac6200e213010be77baec9d285e06c21078ebccfc235efe29c2b7edb862eb41ed5dd9bff1993eae20661d65517e2bbb5787fbefeb9bd6473474791f44c394513f065846fad8d8c5d95a1f828b33661c7a05c80fc045dd4974feda40b6749ea5923a89e7d8ce84f552d05de665cc15effed8bd81f086be44be0da6f40fc6998098f1c91a98f83889f4d48eb85893884ca0443b6b4d107420a6b29392a6fbd229b38af2026fe768a9c6618370318fdbad5c54d66cdd86484f4439e7b6eb47eb7bc002fde7bc6b18ac7b2cc92e694c98362f2be92cc7d571db601660fe6580a450e2118bbef4ad588577ba8cdccac260d37ed8205b996bdf51550c5ad97b6c5d55a9e0b6cd07133d785989abb0fc1f3aebfc178206e1389aa1c66a895a51adc05e464099876bac5383e527718e3f0c89644f85e33470b3acb2c143daa09dc1d53b91f98335446057017ed143b6ac859d0d29b314209f275e13dacbbe9c7ac414cdd685332fdaa473a23da893c3b8b55af2172bc6a943b992c9dbe27d677aa5b7aaf027a2b9d4aaafcdb941a9a41e2f50982a7f7e9e6fc881901fd17eb72cae41b8bff4d1c92a73b2a3a2cffd4df7e3f373c72f3d7cab98a1154df407f142d0aa2648b0a2608d4642ca14009773f33f39e168f38fd9a61282501f47ff4bc3a2357bb22ddb4e0bc28de33529aafe5586c9b512df17ab06d61c5b5eb9f33d4d4ded4d9d0d1dfc60c1f084889d8c34bb82473dfccfc449dbd6554c123e3fa1b59aa24e483925b7108f9347fd3bae9407f09780a6208058f815d75273c2c95041a1920a457cd8601de27f9a868ec8039b49bba21b989eddcd45ebacd9ed5a18ea9be708d449c13650b0e6d5cec769e6fa80862546c1512f5239a29c64f4964b26a4f74750f1eab8438168b22ff848cfe5a5600f32ec178e55aaf2e4423361ed67b2818f9e83c57876488d5bea3e530aea93cbbcbd8704910e07bd27a27c0fb3c2958985ae5117164a2f8df3e6aada6dbd57bfa9fe063193e74c8a01d8bbf4a7398cbfd1d2310e27d2df9b7624aeff58df4befd6bfee99285e7fe33396c8bc50f927af7d3f05e287936f80e2bde22925cd28fb4aa2747afb82a81035be6f54787ca7fe0840fab780b4f482d079dc6da9ee4ed1d2793266ec8c816bf45d5d3a1414ab407a9131de7405519a4f0cff9e9413a17511e365d772ccfc33d4a7e168446ff89e6483d166a5f10bbe4535859e56372586e41f564fa26eeb52ac405722ba94bbdecd65df48bddca6bc88c3d583d658b00846cd33255a6cf0342af50998e5", 0x1000}, {&(0x7f0000002f00)="f209b5215beeacac70b585ea0d7205c0aa43b2a3659fd55c6826a8daceceff61a141f1b7de3581a9facf353fc8691c88a0b074fb5ad0ddf868d6641155127502b0d1a0bf063d96194443815f12d78a24ea5151d07ef0536fbb48a3652c062003aecb90b7c39c102285029316b334ed9b76ad7c818d1f3484cdd6c5d46cf6784f43fb44d40741c573253556e347b7b58867fccfd35e933744a2177828304b23c98400558071af1a65a01e085c8f9ade605359a9dce54b21acf908003debe100ee131f00613833bc80bb71341523c7b7369b34471a427b4658d183752753f1d974cf", 0xe1}, {&(0x7f0000003000)="603102324fe8eeec29ab2b3b85", 0xd}, {&(0x7f0000003040)="41d2b3f8304a8d25c478eaba4ec2a594423ceb8bbbb9be0c342f4c5efc8aa793efa1da59855e109dd5a85a0d95f404e8f41586ab2a2f90", 0x37}], 0x6, &(0x7f0000003100)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x80, 0x117, 0x2, 0x66, "80656c6064d8919b2d3edc398f28611f33f7fb7285359ce82e14b02f7b5c78a46ec7c5581ac36d17c946c67eae5af99bae50c0d1ddc136cf22c6cb5a37c5011247d849bd7249c8c493ccbdac276b78b13291c4b5224e492cd8bb54cbc64be02afd1dd377875b"}, @assoc={0x18, 0x117, 0x4, 0xaf2}, @assoc={0x18, 0x117, 0x4, 0x2}], 0xe0, 0x8000}, {0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000003200)="69db5955b7495b9f583b306f54cb036adc32250b14dc4b918799fbe3e044f23e2bc5ac91cac6c07795ecc8cf36fe17d1adf01e15a2c3abee0184319ae19cf790ad220201d5eca5cdb6cb5b3c936d02052fe8213965edfc9db39a18603f6fc0329c21027c2dcdb1e1cdf14d84fb601f8f0bfc66d5fb2f3e2deb44a757df6732eb82514b23902d228a86ab50fdb0d460e1e4723cd81575a7310cb6f5992f10638432fa04c4b3dc648eeabd441dc15c9f31e162b1e1cd86035d75117d691c22e6d503d4697d4f21721eb2edae5748755407fa40dab1f5d15e23bec31e64a9b515fecf8a064507c765f3ee093315526d1009cc403dd4a8f861d9ac6988e8", 0xfc}, {&(0x7f0000003300)="f60db744d7287feac51a2a5c1bef1417508f808e8d4253c0081cdac950a4d999da2fb09f1b83641f46d55ca13ca9546a27940f0c6447532dbc46694a5c067ba12f4ad5216a396b47ab4381f5e1b5473d159809b29ddf363ffe7693b0a75d40660b066cd4023a54011c9d15d24b1dbf2b3266b145c9346468e629e833c8ca5331a204325058ae6ffe5b71f9a4d85911b71ada6e7bf64fcbb21071beed23b0a904aa6e0a36b4c3cfc36ad7a0f93285bacb1c423f2e341012d9ef367eade6f71ae2fe417f375a3bdb1bf8615e0692efc74d166592a9b8d274c8d5b1d3f8c62f6683436e7aa6461159aaefbf", 0xea}, {&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000004400)="21d517d118c1a491b123666be53c1e052ddb2028dccdd328ddb8f73bc0eab1", 0x1f}, {&(0x7f0000004440)="3aa906189504c7644ef8808fe399e44d47dba0a211af7eac86e01803914f7282a0d010e1fa222950e56f7025608951c10b84de0e48c21fd207483c85654a7042712c5760749da98790545eef538d07acc3ed147179a7f9f8fca4f782d330ec61cb9a100cfef169efd54656309d0c615a", 0x70}, {&(0x7f00000044c0)="211290ea1bdfa185bbdfa38165c1f2e83e1f", 0x12}, {&(0x7f0000004500)="b60669c76e420dbec3e69fc4408a85f07e6fac3e3d3408a085507783511453c76d26086329cc8e937f4adec06ec4a03578c486a891fa32196ebb1330bbdc72320ab8a7d175cac98890cfa32df9e86daaa7d1246d8f076fdaddbae4e5", 0x5c}], 0x7, &(0x7f0000004600), 0x0, 0x80}, {0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004640)="9ded5ecbfbe98e29496fa9abfd33bde1971bbced28e780d6389a9ae36ea122efc3af36d248b0ee224c8250ba8125adb74d863e3cced14f8d30dac4dba3c5b7dfcfafa47b0bc735e8b1d3e13d3535b85cae77f3e9394cac883665a9971e8eb93c38b4ab6a8db433f64baae16317d9b45a459a7bf29181e1da500336aa33e030c88319e16ebf6fd6639cdf5cf5467c7bcbc4f04e9f0d82494fc4742e661071252ffbb18b50a91204418f9b0980c17fb2877d96147ddcfde632ad40410726345fdf", 0xc0}, {&(0x7f0000004700)="49f17b22f8c989878a001c9af8b4028104c3e8d68da7a165f68d727ef7b3ed2c62fc3b57379734f650e3749a7476473b3aab2922c42c4d1c7ebc5e2dbf5036af7585d3d3717b7fa9e5a328611aebf6119653b80b57e7825ceeb0bd1dfa8846fd87dffd4694feeff68a3ed18714b473a18f517540e3a880a7f5d87a9d3d50161403910b7e96d515fae6b0ba97d0a07440569e71331b25cfd90f18555d942a81a0d1a131886d73e86f2d075837c055cdb872cfdcadb4852f44c6b05eb454fd574af99f1761f9dde152a82dd3b041a97d3b0bbea4df4788fc69aeb7520159da0cb36d7215cb", 0xe4}, {&(0x7f0000004800)="be9ea9819e7c8f6f4e35d739666330e329102c856cc6f9f63d0d76d8a1deb581702d69f2cf6fec3c2e4e", 0x2a}, {&(0x7f0000004840)="79296695e9e40808ad1ac7926c1fa2895c488744e75b4e656635d36db0beb241c1ff0577030ea75a3a39b7d2c12a2a99cf036982241e41afa542a14a033df3fadcd5a54b377922733fdb5abab1cccb7c9100787c8e081e78312b43236fb9eab5ed6573b9c013cfa12b41ae5b0f39f8466450378716d0b535822367ee08808bba52e76a47361dbc7b35befe3f3b3f2d9a7c8bce7bd643d637f4afe76fc8b82208c0070dccdece2a47fa708ba00122befefa37d6eac6eb5e1602da3c9318cbefa591d3", 0xc2}, {&(0x7f0000004940)}, {&(0x7f0000004980)="7ff04ef846d2f48d911a6a399fe36fafafd1cdf6edba1f9e01eb7dc1dd2d63bed6303adadce90b2fb20e114640e9e0dfb26174e9cf8e57b2f1e1ec2ba40d99bb5288ceaaedbe0f295e58865bdc665fd3cd9d6966a0ee68f14ed077ee5558817e6118c12416c2c3f3d15c08853883c02fd7d04d34aebe115d470f4471a8597d21ede226ea3c7f60ecc3655d2f4b54131a27415d5e7e9aa2582433656f090186152c1e58a51fab11214c225cc49d34ad4417737d", 0xb3}, {&(0x7f0000004a40)}, {&(0x7f0000004a80)="b26cb64475fe7486b9d3dc73dc54fc35d29150ea5f7ed6662bcf9592f44b8581fee7bd2b9360d0bf3aad6e4fc6feb606b0fe980aaf563efc6e111bf17663a1a67adeccc240889c6718ee3f24244a857aa6cd886db006b653f430a597b7050fb261f37952f54104da31729e981e438c11ea5a", 0x72}], 0x8, &(0x7f0000004b80)=[@assoc={0x18, 0x117, 0x4, 0xcfd}, @iv={0xd0, 0x117, 0x2, 0xb5, "e252d7f79f9e34dc09ac6e88e7ef5090d233955977beda65cfc3d969929e57b25bc234122f67b9adda51d6d8b6b9eec6788e1697d7f7fd0dd066f6fb50292623b48618b2bdef8728ce0e5aaa8760ef13c88072da9b28ed0d2a1075230241d91529fb4613535dc134efd4c97e2124fea1ab774dcb5867ec4bff8c0864d2ecd220529960d2448fe77dce453e1231d32cbfdc3491d58624a3b62703d61a66d630d2da1dc9c90cd2beb2c0e681615e70dc86fa7b76c549"}, @iv={0x110, 0x117, 0x2, 0xfb, "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"}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x78, 0x117, 0x2, 0x64, "1b04b7940feb6984774b5f38b053a87ec7395ac80e793d06f3591e68f5fd93d15ab1a62f7a5e95466a9bedfcc492ab7ad213ac136fff35d8632500926643e8c660304bd481813e075e1df9eb706030ef0155702db492b7c1e8d0317acca5ba366034095e"}], 0x288, 0x4000}, {0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004e40)="c1e984fd0728f2bbfcd90af57e31fb595fc2b16dd1906597e7565a86b847fd19685dd48465a634ee02a1a71ea87217f654fc77c736be870df266a0c77aac950c40c5d853ca2405944d9c3e4ebc4939b53e90d28bdefbf4d1", 0x58}, {&(0x7f0000004ec0)="2cd404af742f2b72d5d9eb5d2e31a49d49e4996b", 0x14}, {&(0x7f0000004f00)="f44ee972b5418990d31a9c34c725ae7b5d13a2e2bc7627781240b53d96533642965468c290761dbd7b9e5be9d3d99d8640035940873834dcdf38aa383c5c0c50b40b7b1aa7d9104b82419b373b3ba6032dde660baeef6acd8f3fa424c868c5e0a8447fee8dc8ffe435e3b2534cc44a25d00cd1cffcf704516aaef4eecf7d57287c428da71d51629b3852b12596c70f201dfbfa3d0ecaf507cf57b1eac0f31871c7216bed16f66126054569d165673e25143407526d30540f828f397ae837712284d818845c6c68f51e05b247b702c6bcb308bdc28b9fd0481b41d693495a46b8525977fcb42e988cc77c19701244619caf01fdfb", 0xf4}, {&(0x7f0000005000)="1ae42bb750d5ee0527802eae1d26c9712c396b782c44aee32774d0831e6e7b431c2d750339eca50db0b5afe5a1d6e1f69bcf8cb6911295876a6e37860447682390e5a5fcf84049918499b3d272d954de80b3a83db65ce0263316723aa4f27abda4bee8fa653a2f39ca92481a6a598bd9bd74a2c5813608bd3f3242d9aef8f6e6dc0b2fe2c272b1e04edc651cbd38806f4fb0a25f48964d459083455006e52444bcb9a148aeb86822c1c64d7658d2553491f5cc1c43953ac62c1edb916b22ee59862697acacb92cc76e70e9b58991758e71096e009aaad739c793b18cab3c1d55392799d25802ed63fac5", 0xea}], 0x4, &(0x7f0000005140)=[@assoc={0x18, 0x117, 0x4, 0x800}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x98, 0x117, 0x2, 0x81, "6ab8b108a28145ae14c9720613098092639278ab44a09d73b4693d4bdaabe6d4e30b286a194ae2dd902398aa5beeaa8e0a2c60e2e3e4a82298462c6be50380d3ea36237d34ea8bd6f047512559f54d337ad5df6e38bcb9aaac6d6f74045a729f30a00bf87cca9741a9b97cd41a81ffe5efe57c0a91be5b1dc18ae8ab96de352ad7"}, @iv={0x18, 0x117, 0x2, 0x4, "ecfe2adf"}, @iv={0x88, 0x117, 0x2, 0x6d, "4a54939b046a2516b4617a6618b69c1037205235a5a3f66d5d4f885ada9ca5a29df99cfe5ff8dff66fc6fd54d883ea5f6b509f2c5924473d22c4d199f0e4ac5b1b6e709dca1e3321d28f69d9eaf8710351987b42b8b18195c6f820fe5ccf170100b5092059aafc9fb98d8cd9be"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xe0, 0x117, 0x2, 0xc6, "047c0bec2147976119d70de8ea16137c07971b4711d30093e7872ed4da175becdb5fcfb3c46a314f741e891efc2a9492e9545e63ac6c1aaafca8fd25ba3b6bf38ce4bd3f7b7c8818cfaf45b104fce835a8edd45bf249c3cfc0f9536374097f9a7397f532098fc5f9123731e743c385579da448eb051e536b28983707c295096698986145c3d600b8d71cd478b5bcf1f15cd7b98c1a9f4cd248a69907775f59ff2e95d0d324a77ff8d5ee10f7c611377ccbd6b36cd6a251729d9a2eaff7ba13b32329fe98ba97"}], 0x290, 0x4}], 0x6, 0x4c004)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000005580)={<r4=>0x0, 0x2, 0x20}, &(0x7f00000055c0)=0xc)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000005600)={r4, @in={{0x2, 0x4e22, @loopback}}, 0x7, 0x0, 0x2, 0x6, 0x91, 0x5, 0x81}, &(0x7f00000056c0)=0x9c)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000005700), 0x400000, 0x0)
openat$cgroup_procs(r5, &(0x7f0000005740)='cgroup.threads\x00', 0x2, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000005780), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000057c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005800)='./cgroup.cpu/syz1\x00', 0x1ff)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000005a80)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005a40)={&(0x7f0000005880)={0x198, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_TUPLE={0xdc, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}]}, 0x198}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000005ac0)={@host})
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000005b00)=0x466, 0x4)
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000005bc0)={0x0, &(0x7f0000005b40)=[@code={0x1, 0x49, {"f36f3e64030666b85b008ec80f78d2460f3066440f510a0f20a38fa8b0a25aca34430a7303c74424008a000000c744240200000000ff1c24"}}, @uexit={0x0, 0x18, 0x8}], 0x61})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000005c00)={[0x10, 0x803e, 0x0, 0x6, 0x8, 0x8, 0x6, 0xc, 0x4, 0x1, 0x3, 0x3, 0x8, 0x6, 0x0, 0xcd9], 0x6000, 0x100202})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
socket$nl_netfilter(0x10, 0x3, 0xc)

2m28.633040894s ago: executing program 2 (id=927):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x5}, 0x1c)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x7})
ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000180))
creat(&(0x7f0000001380)='./file0\x00', 0x54)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200009}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x27)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000002c0)=ANY=[@ANYBLOB="80000000f51644d036be5416bc5e944cfdff00e69339941eff97915774b84622fec5126030f2cb287198545a709c85bc6e87c9805af6e04831491badf38a4812f6f5ffd967df0d2ff837de1ba895eb5a6c7a58d680127c9f8adc506bf51fe16ca23842f8b9c17651550cb87aa2f173eef7b458a4ef4cfe28be23c8d739fd52f8d20d66b1"])
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={r4}, &(0x7f0000000140)=0x8)

2m25.312195712s ago: executing program 2 (id=945):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x5, 0x7, 0x2})

2m10.16373471s ago: executing program 32 (id=945):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"}) (async)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000005c0)={0x7, @raw_data="0c3aed37c3c7da9ca29eb2642afbfc8db8e943d0eae9b855c64b1454b9a468798421c487fba0439bf6483d66ea4bfd16c098035222e6950e55553dc8563de38f2feeddb261d5d4900dd80d9eba4b96ab0749b766415549b0a5b07654385294f8d24e37f10eb6246d05ae9684a7b746b10319a89d7493f644584e38b59e18831ab107219ccf30b593ad639241e2b2598ab2d0aea2d4dae298ca347a5c21f993efd406b8f67efe6ed0154ac72cf46593d397b18264b2a9933628417a85ccc0ab12dac962ef9cd6e1ae"})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6) (async)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000240)=0x6)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xeb0b4000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) (async)
mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6) (async)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x6)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=r0])
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x2, 0x85, 0x2})
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0) (async)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x5, 0x7, 0x2})

1m12.333749825s ago: executing program 1 (id=1411):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a1bc001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2001"], 0x0})
r2 = socket(0x40000000015, 0x5, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
add_key(&(0x7f0000000140)='ceph\x00', 0x0, &(0x7f0000000000)="01000100bf34823a0000000000", 0xd, 0xfffffffffffffffd)
readv(r3, &(0x7f0000000640)=[{&(0x7f0000000100)=""/74, 0x4a}], 0x1)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xffffdfffffffffff, 0x800, 0x0, 0x3}, 0x20)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0x0, 0x2, 0xbb, {0xbb, 0x2, "7794cea76339cb567a16b76893353bbdeba87e2697e23cf0beee9b1fd05b53a127b868a63a30cc1ee5923ad92667340a3c58a0756498694ee49d730d31b698be1d8d741186a31a7ec2cca1bd77d6a4b87ba5bdf83352634b1b08bc1b81ea8280d2bb7a8ae0cdf3a47549de38bb56147498c12005d3ea6c2bc9777b5fa610bfede89bcd03f1bcce4e82d310017223df31b7d8f6bb7ee10c73674842d6b587a149af3bb1fa6aa2b05a7056c8bc9054a46d975312c1f0b7fd9784"}}, &(0x7f0000000440)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "3e4778fdf39bbc2298e46ff6c9289ff67ea7add17e888e6bb8c3d73caeb1cc8cc2b93a0cf7f5342158bae0c915b93ef8e7bde660d256c1ef7c6e7fef35ff6117cdda7a131fee789546efb817a79c61bc8e479fd542a48be80cb9842bbbfec760cbc92aec110487096b77de389c2fc0c314e3e77fca62725b4bc2b13664136f1c030b7b3b7cc75beebd20cdbf90156c527ce8aeeb1245542ffa034f2c7063f10cf4675f31f1363ac619d6e5dbdee74958e654c1a73de37f6f9521813b139d404419f207a1990d55153a6f0bb57b8d"}}}, &(0x7f0000000740)={0x44, &(0x7f0000000600)={0x20, 0x7, 0x98, "9c7aeeb605bdc6b075136acaa7e1a1f3b8d6782f7792953c89c32f5379f18aac5eb29aeaaec196299b1b2f0d11a23b2bdff047488b421f69cbd58fae8bd79f5c85fff9dc8b686c015c81316b5bf634a12e0340b041ddd8398952a663dade1d9fa6f4e9cf762d71efe3d3f0baab88fdfb5d611255d4a5c0f12b32dc899a2377da5911793559a74f86e1ca0088ff9adbfcf969538055b6043e"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x81, 0x1, "9f"}, &(0x7f0000000540)={0x20, 0x82, 0x1, "17"}, &(0x7f0000000580)={0x20, 0x83, 0x3, 'mq '}, &(0x7f00000006c0)={0x20, 0x84, 0x1, '}'}, &(0x7f0000000700)={0x20, 0x85, 0x3, "86751a"}})
syz_usb_disconnect(r1)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10)
r6 = socket(0x1d, 0x2, 0xd)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x6a, 0x10, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x2010, r2, 0x84eae000)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0)

1m11.515271694s ago: executing program 1 (id=1413):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0)

1m11.419090057s ago: executing program 1 (id=1414):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x14, 0x18, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) (async)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, 0x0, 0x0) (async)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x83, 0x4)

1m11.252202102s ago: executing program 1 (id=1415):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000006261"], 0x1c}, 0x1, 0x0, 0x0, 0x20048001}, 0x48000)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000ffffffffffffff8f0000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

1m10.288178369s ago: executing program 1 (id=1421):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081)
close(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000680)=['']})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)
setxattr$incfs_metadata(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)="63414d533c5fe8ca88770ea13cb8569b95b3a73ff7250609c52f52d9d93616a854774450987d1f35cb7d50663c8c28cd5fd573ebe6d66df9d1c40e3e6ac15fae77bda440ca6a9204ae2bb02332e4700006343180b0217bf308a193b4cdfc2415a10c6ad6a6c96df551d11d24861b11e90276fbc8aad5e7dc000c78d060ff4d4e966a0d8c3741c46a25f86a5b4b6f2ad24f464dd121f337c24f2df045c4e95c44d606d9eb49f5c0eaf83c198137be57a04be0d7d3ff9394da9d07a6bb2375583c6b95622cd87e7b3468e24465a0e3d4b09393403a15490a033fb090675b1d8bf09640c19b3290d293a60488dac5", 0xed, 0x0)

1m10.193815478s ago: executing program 1 (id=1424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000080))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_current(r3, &(0x7f0000000000)=@profile={'permprofile ', ']\x96%)//.!-\x00'}, 0x16)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xb, 0xf9, 0x3, 0x1f, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x78, 0x40, 0x0, 0xc0000001}, @sadb_x_sec_ctx={0x13, 0x18, 0x86, 0xd8, 0x8d, "c99bcd36253f653039e1596301117a9e7d52c85a8abcc80696925b6b3588a5d9cc75c5bd98dc9c92be0a91b9fb4dddc54e4559c0bfea1cb83ea91e6f888e5a7967d1abdacc8dea08b3d56463d5128bd00e82cd316e8f7af7a6d522643965eccd195ba8919d41ceb45197cff2f3cbe582625f945a2332b41ac3ad1e9752c6d405fc1256e6dadba2f990f52f6743"}, @sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@mcast1, 0xf, 0x4}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd26}]}, 0xf8}}, 0x8000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2, 0x800000000004, @thr={&(0x7f0000000300)="917d9f5b4bfb05fa97a10952bdf2132e9e1a8f9affae87b96beaacc996e1d42f675438f4e5e83cdb537a9666a914fc13ed34614d33a8e7c6b6bdcc0b0cb96ab9e04a90400c51fa7cc370973cc647f2ab770600e8b22e8ab1e3917d366e650cfe8cc00543a524eaa14f0bb5c5f4bcbd5e2ac93de2890f02809545968ea4eb6137b8594e97c7d776e6babf1e2070073dbbfbd3ea6fb522dd7638d5d53d4190b4582f68e53d884a8ab196b51939ba8111bad3d6e4c6f58c3e0a9829de6e341d391390055dfd5563488e0823e5fe11e9af032f18c5168a4cd7ed64b7ea2141b14b65832bb0b0b73cd74a1d541403815092af613902693ac216", &(0x7f0000000400)="1c583b071bf6549e2efb4123d03d35acca557ab5a9a074d98cb5ebb7bc736459bbf52ad8c3633b6524c866f876e14624704f2ecffcf5e0cf924dfc93143c63343d3aa244e01d642f537ad218d040cbc1641671582789216ae3875df12f9f83174f468062976890bf5b6a95d1fc33d74b31ea3f413a1c80d8e6e050fc5d13d864deacd3ae2453ecf4650b18ae4e68b0ce26f0f1a6fcdcd635ab16f152943eed5052"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = eventfd2(0x0, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000080)={0x3, r7})
ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f00000000c0)={0x40003, r7, 0x1})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

55.042757124s ago: executing program 33 (id=1424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000080))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_current(r3, &(0x7f0000000000)=@profile={'permprofile ', ']\x96%)//.!-\x00'}, 0x16)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xb, 0xf9, 0x3, 0x1f, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x78, 0x40, 0x0, 0xc0000001}, @sadb_x_sec_ctx={0x13, 0x18, 0x86, 0xd8, 0x8d, "c99bcd36253f653039e1596301117a9e7d52c85a8abcc80696925b6b3588a5d9cc75c5bd98dc9c92be0a91b9fb4dddc54e4559c0bfea1cb83ea91e6f888e5a7967d1abdacc8dea08b3d56463d5128bd00e82cd316e8f7af7a6d522643965eccd195ba8919d41ceb45197cff2f3cbe582625f945a2332b41ac3ad1e9752c6d405fc1256e6dadba2f990f52f6743"}, @sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@mcast1, 0xf, 0x4}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd26}]}, 0xf8}}, 0x8000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2, 0x800000000004, @thr={&(0x7f0000000300)="917d9f5b4bfb05fa97a10952bdf2132e9e1a8f9affae87b96beaacc996e1d42f675438f4e5e83cdb537a9666a914fc13ed34614d33a8e7c6b6bdcc0b0cb96ab9e04a90400c51fa7cc370973cc647f2ab770600e8b22e8ab1e3917d366e650cfe8cc00543a524eaa14f0bb5c5f4bcbd5e2ac93de2890f02809545968ea4eb6137b8594e97c7d776e6babf1e2070073dbbfbd3ea6fb522dd7638d5d53d4190b4582f68e53d884a8ab196b51939ba8111bad3d6e4c6f58c3e0a9829de6e341d391390055dfd5563488e0823e5fe11e9af032f18c5168a4cd7ed64b7ea2141b14b65832bb0b0b73cd74a1d541403815092af613902693ac216", &(0x7f0000000400)="1c583b071bf6549e2efb4123d03d35acca557ab5a9a074d98cb5ebb7bc736459bbf52ad8c3633b6524c866f876e14624704f2ecffcf5e0cf924dfc93143c63343d3aa244e01d642f537ad218d040cbc1641671582789216ae3875df12f9f83174f468062976890bf5b6a95d1fc33d74b31ea3f413a1c80d8e6e050fc5d13d864deacd3ae2453ecf4650b18ae4e68b0ce26f0f1a6fcdcd635ab16f152943eed5052"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = eventfd2(0x0, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000080)={0x3, r7})
ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f00000000c0)={0x40003, r7, 0x1})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

5.524053055s ago: executing program 0 (id=1742):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
prctl$PR_SET_SECUREBITS(0x1c, 0x1a)
r5 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r6})
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x2, 0xa2)
write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000002c80)={0x30}, 0x30)
r8 = userfaultfd(0x800)
ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000340)={{&(0x7f000077b000/0x1000)=nil, 0x1000}, 0x1})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_SET_CPUID(r11, 0x4008ae8a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f3ee017fe76b69f55a1a74c9c9b5d34332b5678092bcf6081f311e126d359c12ab750d7c07ab3667d5ece0c4e6e8a1fa0b8d08b0c62a4f2eb4b0200e7e2"])
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2])
unshare(0x22020600)
ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x80000002, 0x101, 0x5, 0x0, [{0xd, 0x99, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x4, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0x9, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6b, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x40, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x6000)
personality(0x5400004)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$kcm(0x2d, 0x2, 0x0)

5.156003739s ago: executing program 0 (id=1745):
r0 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x80, 0x0, &(0x7f0000000000))
read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffffffffffffe, r2}, 0xfffffe64) (async)
close(0x3)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d141400000000000000000003000600000000000200"], 0x50}}, 0x0) (async)
mount(&(0x7f0000001400)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x20344c2, 0x0)

5.046404479s ago: executing program 0 (id=1746):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)=0x20000)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a80)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, r0, 0xeb9ac000)
mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='cramfs\x00', 0x2500408, 0x0)

4.279863596s ago: executing program 5 (id=1748):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, &(0x7f0000000000)="fdcf35b8244a6b98c85e2bf9a2e1447b7ae1a8b073c425633d7f5f20aa84c475da8f62d9fda3673cffb5284665d92ce8a6259434ecfb694aa91e9aabe027927abe668a94dbeca7cf8782aba2ce8dd8cc40078f084af03d44763170f92a9be763da314487c5548a93be5ade70ca44ac48c432fd3b219a627fe307be094b282c756b688e15cdeb37f91f3523b210e33cf7fa8fd7360d8317ab6c741f6bc36260c6cdf000434e1f0f464cf43e12022584d6de2bfd778810c558165bdb474763074762a7e025c7941edf0135c88a4c48b1a6af4d9bf116eda02fc7b515", 0xdb, 0x4, 0x0, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0xe65d6000)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0x4}})
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000200)={0x3a, @loopback, 0x4e20, 0x0, 'lblc\x00', 0x16, 0x4, 0x3a}, 0x2c)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000280)=0x6)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000002c0)={@private}, &(0x7f0000000300)=0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000380)=0x5, 0x4)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000003c0))
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x7}, 0x8)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x440000, 0x0)
syz_clone(0x100, &(0x7f0000000480)="8b3a2799b70f60f3647011aa81b315e7426ca549ae3331fa6082ba57c9b2de649f6ca42989c85ab9a335292b69d7ed0dae667c659f38bb13f2c5d420a7975c06285d5fc249ca44f9550be196d8", 0x4d, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="89866d0c8070d8b24d15ac65f6ef0ebaa0090db0ecc4ad6f09ea51dc3ecbaed529078c67af4564a3a3ffd49dc3b1a87c437709b38c85bea403fbb03a889dffcbe730cd6e225614ed3fc01c2050bb284b3fd9558a8a44adedbd65905ff16b19611bbbde")
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r3)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x8082, 0x0)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000780)={0x4, 0xd3, 0x4, 0x9c7, 0xe, "4c8506b01f5014f6c92445c4004f32d2c609e8", 0x10000, 0x4})
fcntl$setsig(r3, 0xa, 0x26)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000c80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000880)={0x328, r6, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x13}}}}, [@NL80211_ATTR_IE={0xf7, 0x2a, [@dsss={0x3, 0x1, 0xa5}, @perr={0x84, 0xee, {0x8, 0xe, [{{0x0, 0x1}, @device_a, 0x6, @value, 0x14}, {{}, @device_b, 0x1000, @void, 0x35}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x4}, {{0x0, 0x1}, @device_a, 0xfffffffc, @value=@broadcast, 0x2c}, {{0x0, 0x1}, @broadcast, 0x80, @value, 0x2c}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x10}, {{}, @device_a, 0x5, @void, 0x2a}, {{}, @device_b, 0x6, @void, 0x40}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x32}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x17}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x8}, {{}, @device_b, 0x4, @void, 0x37}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x2f}, {{}, @device_b, 0x3, @void, 0x3b}]}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x8, 0xc0}}]}, @NL80211_ATTR_IE={0x61, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xb, 0xf, @device_a, 0x4, @value=@device_b, 0x6, 0x20000, @broadcast, 0x976}}, @dsss={0x3, 0x1, 0xb2}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xad, 0xc}}, @preq={0x82, 0x25, {{0x1, 0x0, 0x1}, 0x2, 0x0, 0x67, @device_a, 0x7fffffff, @void, 0x8, 0x7fff, 0x1, [{{0x1}, @device_a, 0x8f}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xcc, 0x38, 0x6}}]}, @NL80211_ATTR_IE={0x186, 0x2a, [@challenge={0x10, 0x1, 0x7b}, @perr={0x84, 0xf6, {0x4, 0x10, [{{}, @device_a, 0xd, @void, 0x30}, {{}, @broadcast, 0x2, @void, 0x35}, {{}, @device_b, 0x4, @void, 0x3f}, {{}, @broadcast, 0x9, @void, 0x23}, {{}, @broadcast, 0x5, @void, 0x4}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x1}, {{}, @device_a, 0xbe68, @void, 0x2d}, {{}, @device_a, 0x9, @void, 0x25}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x22}, {{}, @device_a, 0x5, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0x90, @value=@device_b, 0x40}, {{}, @device_b, 0xfffffffc, @void, 0x42}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x20}, {{}, @device_b, 0x4}, {{0x0, 0x1}, @device_a, 0xb, @value=@broadcast, 0x2d}, {{0x0, 0x1}, @broadcast, 0xffff, @value, 0xd}]}}, @perr={0x84, 0x82, {0x3, 0x8, [{{}, @broadcast, 0x80000000, @void, 0x26}, {{}, @broadcast, 0x0, @void, 0xa}, {{0x0, 0x1}, @device_a, 0x2, @value, 0xa}, {{}, @device_a, 0x3, @void, 0xa}, {{0x0, 0x1}, @device_b, 0x8000, @value=@device_b, 0x35}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x34}, {{}, @device_b, 0x8, @void, 0x17}]}}, @challenge={0x10, 0x1, 0xea}]}]}, 0x328}, 0x1, 0x0, 0x0, 0xc000}, 0x20004850)
r8 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000000cc0)={{r3}, "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"})
openat(r2, &(0x7f0000001cc0)='./file0\x00', 0x10440, 0x40)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000001d40)={&(0x7f0000001d00)=[0x0], 0x1, 0xffffe485})
bind$inet6(r3, &(0x7f0000001d80)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3a244c2c}, 0x1c)
setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000001dc0)=0x3, 0x4)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x4c, 0x0, 0x700, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x800)

3.94968181s ago: executing program 5 (id=1750):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
read(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

3.412816691s ago: executing program 5 (id=1751):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x5, 0x2, 0x4})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)

3.24823283s ago: executing program 4 (id=1752):
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7fff}, &(0x7f0000000000)=0x100000000, 0x0, 0x80000000, 0x3, 0x8001, 0x9, 0x4c, 0x100000001}}], 0x58}, 0x200000000000000)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000000), 0x0, 0x2)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0)

3.183838639s ago: executing program 5 (id=1753):
rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xfffffff8})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a180000000c0a010400001000000000000200000804000380240000000c0a01010000000000000000050000020900010073797a310000000004000380140000001100010000000000000000000a00000a"], 0x64}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000)
memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4)
execveat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x9)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r2, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6})
ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000180)={0x28, 0x10000, r2, r2, 0x3d24, 0x3, 0x0, 0x1d7770})
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)={@loopback, @broadcast})
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000100)='./file0\x00', 0x1400037e)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
open$dir(&(0x7f0000000240)='./bus\x00', 0x1a5240, 0x1)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000001000), &(0x7f0000001000)='.', 0x1, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1c13c2, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r4 = gettid()
r5 = getpid()
rt_tgsigqueueinfo(r5, r4, 0x3a, &(0x7f0000000000)={0x3e, 0xfffffffd, 0x3})
gettid()
getpid()

3.109019042s ago: executing program 4 (id=1754):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448cc, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r3, &(0x7f0000000080)=[{0x10, 0x0, 0x8, 0x0, @time={0x7ffffffd, 0x80004}, {0x0, 0x1}, {}, @control={0x1, 0x0, 0x77}}], 0x1c)
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
keyctl$read(0xb, r4, &(0x7f00000000c0)=""/18, 0x12)
r5 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x6, 0x6})
syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYBLOB="e2ff"], 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, 0x0)
getrlimit(0x4, &(0x7f0000000000))
getsockname(r2, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

2.856174097s ago: executing program 5 (id=1755):
bind$can_raw(0xffffffffffffffff, &(0x7f0000000400), 0x10)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x2, 0x0, 0xfe, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x2c}, 0x60)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'pimreg0\x00', 0x6})
getsockopt$inet_buf(r1, 0x118, 0x2f, 0x0, &(0x7f00000003c0))
r2 = userfaultfd(0x80001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1a8})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r8, 0x300000b, 0x11, r6, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000340)={0x10, 0x1, r9})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000006f000000000000000f20c035040000000f22c0b805000000b9fc3300000f01c12e440f3a0fdf00f30fc73166baa100ecc4c3f50a92070000000048b80a000000000000000f23d80f21f835c00000600f23f86766bbfaff0fc75f880f20e035004000000f804ec3"], 0x6f})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000000)={0x14, &(0x7f0000000500)={0x0, 0x23, 0x1c, {0x1c, 0xc, "47a468c1fb56fd4a2625992afe97504bcb6b685b4f6e6c78f94b"}}, 0x0}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r11 = dup3(r0, r2, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x10})
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

2.70815118s ago: executing program 0 (id=1756):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x40)
write$cgroup_devices(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='a *'], 0x9)

2.582327204s ago: executing program 0 (id=1757):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000006261"], 0x1c}, 0x1, 0x0, 0x0, 0x20048001}, 0x48000)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000850000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

2.136234474s ago: executing program 3 (id=1758):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x3e, 0x0, 0x0) (async)
unshare(0x6a040000) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) (async, rerun: 32)
syz_open_procfs$namespace(0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
chmod(&(0x7f0000000000)='./file0\x00', 0x7a) (async, rerun: 32)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
read(r2, &(0x7f00000021c0)=""/4095, 0xfff) (async)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4)
write$binfmt_misc(r2, &(0x7f0000000300), 0x6) (async)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000240)={'nat\x00', 0x0, [0x4, 0xfffdf001, 0x4, 0x7, 0x6c]}, &(0x7f00000002c0)=0x54)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x4}, 0x4b7}, 0x1c) (async, rerun: 32)
shutdown(r4, 0x1) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x8206, 0x58800000, 0x5c}, &(0x7f0000000040)=0x10) (async, rerun: 64)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040}, 0x4000) (rerun: 64)
creat(&(0x7f0000000080)='./file0\x00', 0xac) (async)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0xe845, 0x0, 0x0, 0x3, 0x1, 0xc}, 0x20) (async, rerun: 32)
socket(0x3, 0x6, 0x2) (rerun: 32)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x602d00, 0x0)
ioctl$COMEDI_UNLOCK(r6, 0x6406)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='adfs\x00', 0x8010, 0x0)

1.833680718s ago: executing program 3 (id=1759):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0)
symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00')
syz_open_dev$sndctrl(&(0x7f0000000040), 0x9, 0x20000)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/245, 0xf5}], 0x1, 0x40000004, 0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32)
r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @rand_addr=0x64010101}, 0x2}}, 0x26) (async, rerun: 64)
r6 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0x1) (async)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)

1.606582185s ago: executing program 4 (id=1760):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40016002)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0xc894)

667.326284ms ago: executing program 4 (id=1761):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
read(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

667.20326ms ago: executing program 3 (id=1762):
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
syz_open_procfs(r0, &(0x7f0000000080)='fd\x00')
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ntfs3\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) (async)
syz_open_procfs(r0, &(0x7f0000000080)='fd\x00') (async)
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ntfs3\x00', 0x0, 0x0) (async)

666.614183ms ago: executing program 0 (id=1769):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40016002)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0xc894)

663.364684ms ago: executing program 5 (id=1763):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0) (async)
ioprio_set$pid(0x1, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x8080)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)}], 0x1}, 0x1)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
splice(r3, &(0x7f00000001c0)=0x7, 0xffffffffffffffff, &(0x7f0000000280)=0x7, 0x7, 0x1) (async)
splice(r3, &(0x7f00000001c0)=0x7, 0xffffffffffffffff, &(0x7f0000000280)=0x7, 0x7, 0x1)
r6 = socket(0x10, 0x803, 0x0)
syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
socket(0xa, 0x3, 0x3a)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r8 = socket(0x15, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYRESHEX=r8, @ANYRESDEC=r7], 0x58}}, 0x0)
pipe2(&(0x7f0000000040)={<r9=>0xffffffffffffffff}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) (async)
getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', r11, 0x7800, 0x20, 0x432, 0xb6a6, {{0xe, 0x4, 0x3, 0x6, 0x38, 0x68, 0x0, 0x20, 0x0, 0x0, @remote, @broadcast, {[@generic={0x1d, 0xf, "3e5af417718f9c33c8a39559b8"}, @ssrr={0x89, 0xf, 0x74, [@rand_addr=0x64010102, @empty, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
syz_usb_connect$uac1(0x6, 0xa4, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYRESDEC=r0, @ANYBLOB="05", @ANYRES16=r4, @ANYRES8=r6, @ANYRES16=r5, @ANYRES16=r9], 0x0)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/35, 0x30}], 0x1, 0x0, 0xffffffffffffff6f}, 0x2002)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000140)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c)

450.165394ms ago: executing program 3 (id=1764):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl2\x00', <r1=>0x0, 0x29, 0x2, 0x0, 0xff, 0x26, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x11, 0x10, 0x5, 0x401}})
sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000100)="a0d6dcb6e7924ae9920795f27ac330162096b082dc83b235012701879e83ca701defd6ca919935e407520ca726c3b15f122347e22c44c1efebb1a1cf29fe01aee511fb1881789fa5656c33592866b4b835d2d083fb7bb9d0121806363a2a0a57ba9ef10013793bb5e4ce23cf4ab9c3bd22214b100d8c", 0x76}, {&(0x7f0000000180)="dc9eec5459dd88dfff4be27ba7afefdc3d3dc1511bac5371631e9e4da9083a45be2b7d16a2fa555c053b046f1ce7f3a94a8fe3d5f486456d986038ff2f99287120dd5158bc534763372a5e66db1b0cb4ff539a5bb80595b974f42fd2669769e5c97fc01dae8df812c5c1bd2b21d5d1469ff435e612da1d2c1b82595cbc250a1251a3da2d95bd630c1d6b5dda80dd23a9733b7db9988c22d5c1a8936ccd1de9b7635fedab1738c47efcd161151335379ccb42206513d0e251e3d219fe69bade048f7862484dc70b73718d23b14358ed", 0xcf}, {&(0x7f0000000280)="9b80bac20adbddd9f298e73d2292dc4d23dca200da54927314022dacc13284184178ffdcdee60b6b67ec4c0e3f692eb04ab1151fc0540f19fffb7390fa4421ae4b87ef238b51ac7a89bbce9e1856e3aabf87335c46197a712cf7a6b95da976ff53d87967b8d89f47f9fb8efbcccfc134e9d9f38d30994c6314db69f7844dca55dc6e6339a0a33d6746fa6bad293e12dcffcb8058d6c2c50e972a2b82", 0x9c}, {&(0x7f0000000340)="4d87ab9d64fde7ea5aa99e47f364c3a9feae59833416a62f57346361cb586b52344dfc99c09a196a4704e44b046245ff3dd37ccc29b7a891d0d0bf919a320ac2926ee964dc0921ac4387ea5fb0efc513cae88d003cfa759c3186dccd871f604c2e1865e777039af5bbaf32a314dffe6ba51edfbf3162e1b793c085e2d0cf2928cfc8e60db8207105144f97b562ade8340bb6c4436ff9cdbdd6fd012231159175d6d60d637531e39cf14543bd637babe6f0d84a899e089d4dc5fc015b740484893cd2253bec9218e9fd6da7b176cc76afac397ee3d02257caa05a733744e09af3917fa39db1b051e45c70a0336cc761ecb7a9354beb", 0xf5}, {&(0x7f0000000440)="1fe3eea95a89667bd42d1b77d4c93ae1645c403266c77bcb72642aa6f3c00222eec9c6853a9cae528dd3a2dfc8a2ae06685664fd8a3c7949a38d0950e124d243c8ade0ff57b9629999998b8262e22b9dc1a33656fb7ffb8a82af1c765defcfe26a6ea8bf30f68fba49b1fb681d6916f8f58d4201d89a7004275cad224a83200552962f10c7bd523ae85eb66ce20723894b008ea3cc883389157bdf1fd1361d42662a63ccecfe792b5571ca9425c1dca0d7d466bb0035a40ad71f24d56ee8a371bfa3889caa98e0488270930c9479e576405de33f7e07e0d2ac1874261640248bfe009a5372a9518ff125395ac2b7", 0xee}, {&(0x7f0000000540)="8da78176ad0f4b3e4395c25d06bf6ae358e3302eb0e810373e9959d63dc51a77dbb18dc2b16c103b5b6177beed44ac0d5c", 0x31}, {&(0x7f0000000580)="103d7a1f4bdd915ecb604a1cea57c152095ee33c66c7300f61ee111b43c05c81d806ce2512f042f084613a8ac2198d2896cc3e986419e45925a83a35ecceb8139a7449112e4d817445da2a8c09b69c24f49f8d69a2342f7ec4996e2d59ee0e5a44eda55124f66ebd63ed670a36e134720dbc900d652adf238b99f4590a9128d5d74ac5f7ffdfbc28f3e361c9508a13bc", 0x90}, {&(0x7f0000000640)="14e271078f9b5d0d26b3a2eedb6182d3223d069bd809dd5f20f1469c7ba90485666130c46f75317937c540b30fa82fb09a93262d46874539db95b6fd015ade5c46b568", 0x43}, {&(0x7f00000006c0)="7503c033afd8970822e5214ca60af341a2b0b0271646acd996d8e881c73761738a8a1679372591463aa8e260974d09d6d74219b40d79c706c0eab49e2faeb3b59500a590219ba2edfdef63df0378e060464b81bc772c23e3c4be785b5ddb5b9073811d786c74168e11a16cb3dcedae94060d96761e35808e66e7ad3bd440427667c9f4528ef039d2472d600b82fdd12c", 0x90}, {&(0x7f0000000780)="9156794ad38d91325b74d89290a6b615ea3539eed4a6562999e88dc14e285a9890608ca8d161cc7513753dacf8d64ed0720fbb094b6d5bf50f4a8f70a593529b69b57b894c66aa30d05f511ff90f30f550010e5acee3ece31ccd12cc93ff7c79c6690c3c4231452b7ab2f76364caac633e61a3fb7a8633ce104a8e6a30304cd826eeb00e3b12fa05462115f397b2625339c3c0df8c2118497b8e5bb147eacae8fab8b52c7119e7c15786ad8e2e62d543b4087f221896b10feef8f165e178c78d4c119849b1", 0xc5}], 0xa, &(0x7f0000000a00)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @private=0xa010102}}}], 0x50}, 0x4000800)

232.350255ms ago: executing program 3 (id=1765):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x40)
write$cgroup_devices(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='a '], 0x9)

197.553209ms ago: executing program 3 (id=1766):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4841}, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-er -blkiT\r\x00\x00lkio \x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1b)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a06000000000000000000020000090900020073797a32000000000900010073797a30000000001400248008000240000000000800014000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x234e01, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x5c3900, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103381, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xb, 0x3, 0x16, @SEQ_NOTEON=@special, 0x0, 0x1, 0x1})
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8)
ioctl$IOMMU_VFIO_IOAS$CLEAR(r4, 0x3b88, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x40000000000001d, 0x1c})
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010a5740000000000000000000000000a48000000170a01080000000000000000020000000900020073797a30000000000900010073797a30"], 0x70}}, 0x24040880)
r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r2, r0, 0x0, 0x7ffff000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES16=r9, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b8008000900000138"], 0x184}}, 0xafaae200b074c7ff)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)

182.265514ms ago: executing program 4 (id=1767):
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) (async, rerun: 64)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (rerun: 64)
mq_timedreceive(r1, 0x0, 0x0, 0x1000, 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x7ffffffe, 0x0, 0x0, 0x0) (async)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2b6e65745f33b116a3f515f7bb7573657420"], 0x12)

0s ago: executing program 4 (id=1768):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
accept4$ax25(r1, &(0x7f0000000040)={{0x3, @null}, [@default, @default, @null, @null, @netrom, @netrom, @null, @default]}, &(0x7f00000000c0)=0x48, 0x80000)
r2 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb) (async)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) (rerun: 64)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x88c0}, 0x4)
shmctl$SHM_UNLOCK(r2, 0xc) (async, rerun: 64)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 64)
shmctl$SHM_UNLOCK(r2, 0xc) (async)
shmctl$SHM_LOCK(r2, 0xb) (async)
r5 = shmget(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil)
r6 = syz_open_dev$audion(&(0x7f00000002c0), 0x9, 0x200)
preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000300)=""/6, 0x6}], 0x1, 0x6, 0x7)
shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000380)=""/106) (async)
shmctl$SHM_LOCK(r5, 0xb) (async)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x200000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@access_user}], [{@uid_gt}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x36, 0x61, 0x66, 0x34, 0x31, 0x5d, 0x64], 0x2d, [0x61, 0x63, 0x33, 0x62], 0x2d, [0x34, 0x31, 0x30, 0x30], 0x2d, [0x39, 0x34, 0x33, 0x35], 0x2d, [0x36, 0x6, 0x66, 0x35, 0x37, 0x64, 0x32, 0x34]}}}]}})
shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x6078edbc7c737095) (async)
statfs(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=""/121) (async)
shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000600)=""/149)
r7 = shmget(0x0, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil)
shmctl$IPC_INFO(r7, 0x3, &(0x7f00000006c0)=""/1)
mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r6, 0x5000) (async)
r8 = semget(0x1, 0x2, 0x0)
semctl$GETVAL(r8, 0x3, 0xc, &(0x7f0000000700)=""/251) (async)
shmctl$SHM_UNLOCK(r7, 0xc) (async, rerun: 32)
syz_emit_vhci(&(0x7f0000000800)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x127}, @l2cap_cid_signaling={{0x123}, [@l2cap_conf_rsp={{0x5, 0x5, 0x6}, {0x100, 0x53, 0x2}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x5ff, 0x9}}, @l2cap_info_rsp={{0xb, 0x2, 0xbd}, {0x8, 0x8, "88a6fb2190bc20e5a51f62d49d6ec4707f0336c96a039bbd90fb8c59daaa85101c8b87a5cc83d1075ec8f2444d512cc028a731d48190239ead66b5a4e4597d4b12bac6c4d1cc3b770405ceb9ac1ce1082f4dc0f41d1a1b2f8388b1d1e2a4a39b72f2e798a8b9f20bcfa8917b021c1e4189e22e040c1257f7c400915e45b3ed1d5185587558f75d0d67901d6efef11b14956257a4956f2372c11177c8ec730dc6239d65684bdd3068d111a02ab3b6f7eaedd19bb3dc117544ca"}}, @l2cap_conf_rsp={{0x5, 0xe, 0x9}, {0x4, 0x2, 0x2, [@l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x9, 0xfffb}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x8, 0x5}}, @l2cap_conf_req={{0x4, 0x8, 0x2f}, {0xd, 0x20, [@l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_flushto={0x2, 0x2, 0xa1f}, @l2cap_conf_mtu={0x1, 0x2, 0x100}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x31e}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x3, 0xa5, 0x8001, 0x8, 0x9}}]}}]}}, 0x12c) (async, rerun: 32)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)

kernel console output (not intermixed with test programs):

blockdev
[  208.770424][ T9094] /dev/rnullb0: Can't open blockdev
[  209.112392][ T9106] /dev/rnullb0: Can't open blockdev
[  209.202352][ T9108] FAULT_INJECTION: forcing a failure.
[  209.202352][ T9108] name failslab, interval 1, probability 0, space 0, times 0
[  209.216025][ T9108] CPU: 1 UID: 0 PID: 9108 Comm: syz.3.923 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  209.216051][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  209.216061][ T9108] Call Trace:
[  209.216068][ T9108]  <TASK>
[  209.216076][ T9108]  dump_stack_lvl+0x189/0x250
[  209.216103][ T9108]  ? __pfx____ratelimit+0x10/0x10
[  209.216125][ T9108]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.216146][ T9108]  ? __pfx__printk+0x10/0x10
[  209.216174][ T9108]  ? __pfx___might_resched+0x10/0x10
[  209.216193][ T9108]  ? fs_reclaim_acquire+0x7d/0x100
[  209.216217][ T9108]  should_fail_ex+0x414/0x560
[  209.216244][ T9108]  should_failslab+0xa8/0x100
[  209.216265][ T9108]  kmem_cache_alloc_noprof+0x73/0x3c0
[  209.216283][ T9108]  ? alloc_file_pseudo_noaccount+0x144/0x2c0
[  209.216306][ T9108]  alloc_file_pseudo_noaccount+0x144/0x2c0
[  209.216327][ T9108]  ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10
[  209.216361][ T9108]  bdev_file_open_by_dev+0x181/0x240
[  209.216387][ T9108]  setup_bdev_super+0x5a/0x5b0
[  209.216411][ T9108]  get_tree_bdev_flags+0x366/0x4d0
[  209.216432][ T9108]  ? __pfx_msdos_fill_super+0x10/0x10
[  209.216453][ T9108]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  209.216485][ T9108]  vfs_get_tree+0x8f/0x2b0
[  209.216508][ T9108]  do_new_mount+0x2a2/0x9e0
[  209.216535][ T9108]  ? ns_capable+0x8a/0xf0
[  209.216553][ T9108]  ? __pfx_do_new_mount+0x10/0x10
[  209.216572][ T9108]  ? path_mount+0x61c/0xfe0
[  209.216591][ T9108]  ? user_path_at+0x44/0x60
[  209.216619][ T9108]  __se_sys_mount+0x317/0x410
[  209.216648][ T9108]  ? __pfx___se_sys_mount+0x10/0x10
[  209.216675][ T9108]  ? do_syscall_64+0xbe/0x3b0
[  209.216696][ T9108]  ? __x64_sys_mount+0x20/0xc0
[  209.216720][ T9108]  do_syscall_64+0xfa/0x3b0
[  209.216743][ T9108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.216759][ T9108]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  209.216776][ T9108]  ? clear_bhb_loop+0x60/0xb0
[  209.216797][ T9108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.216822][ T9108] RIP: 0033:0x7fd9e298e9a9
[  209.216838][ T9108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.216852][ T9108] RSP: 002b:00007fd9e378f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  209.216871][ T9108] RAX: ffffffffffffffda RBX: 00007fd9e2bb5fa0 RCX: 00007fd9e298e9a9
[  209.216884][ T9108] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000
[  209.216896][ T9108] RBP: 00007fd9e378f090 R08: 0000000000000000 R09: 0000000000000000
[  209.216907][ T9108] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002
[  209.216918][ T9108] R13: 0000000000000001 R14: 00007fd9e2bb5fa0 R15: 00007ffdd37ea508
[  209.216947][ T9108]  </TASK>
[  209.216986][ T9108] /dev/rnullb0: Can't open blockdev
[  209.572197][ T9122] /dev/rnullb0: Can't open blockdev
[  209.700598][ T5869] usb 2-1: Failed to load image "edgeport/boot.fw" err -110
[  209.720139][ T5869] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB0
[  209.763033][ T5869] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB1
[  209.802915][ T5869] usb 2-1: USB disconnect, device number 3
[  209.823689][ T5891] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  209.845885][ T5869] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0
[  209.866704][ T5869] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1
[  209.879970][ T5869] io_edgeport 2-1:162.209: device disconnected
[  209.973680][ T5891] usb 3-1: device descriptor read/64, error -71
[  210.009971][ T5934] usb 1-1: USB disconnect, device number 32
[  210.233968][ T5891] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  210.373604][ T5934] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  210.393851][ T5891] usb 3-1: device descriptor read/64, error -71
[  210.468724][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'.
[  210.514651][ T5891] usb usb3-port1: attempt power cycle
[  210.528271][ T5934] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  210.540702][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.549378][ T5934] usb 1-1: Product: syz
[  210.559281][ T5934] usb 1-1: Manufacturer: syz
[  210.564276][ T5934] usb 1-1: SerialNumber: syz
[  210.582681][ T5934] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  210.608883][ T5971] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  210.873647][ T5891] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  210.905386][ T5891] usb 3-1: device descriptor read/8, error -71
[  211.153602][ T5891] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  211.175207][ T5891] usb 3-1: device descriptor read/8, error -71
[  211.230572][ T9129] /dev/rnullb0: Can't open blockdev
[  211.254126][ T5934] usb 1-1: USB disconnect, device number 33
[  211.294052][ T5891] usb usb3-port1: unable to enumerate USB device
[  211.695752][ T9140] FAT-fs (rnullb0): bogus number of reserved sectors
[  211.702537][ T9140] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  211.788942][ T9144] FAT-fs (rnullb0): bogus number of reserved sectors
[  211.797315][ T9144] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  211.811789][ T9146] FAULT_INJECTION: forcing a failure.
[  211.811789][ T9146] name failslab, interval 1, probability 0, space 0, times 0
[  211.826526][ T9146] CPU: 1 UID: 0 PID: 9146 Comm: syz.0.936 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  211.826551][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  211.826561][ T9146] Call Trace:
[  211.826569][ T9146]  <TASK>
[  211.826577][ T9146]  dump_stack_lvl+0x189/0x250
[  211.826603][ T9146]  ? __pfx____ratelimit+0x10/0x10
[  211.826626][ T9146]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.826647][ T9146]  ? __pfx__printk+0x10/0x10
[  211.826675][ T9146]  ? __pfx___might_resched+0x10/0x10
[  211.826695][ T9146]  ? fs_reclaim_acquire+0x7d/0x100
[  211.826720][ T9146]  should_fail_ex+0x414/0x560
[  211.826746][ T9146]  should_failslab+0xa8/0x100
[  211.826766][ T9146]  __kmalloc_cache_noprof+0x70/0x3d0
[  211.826785][ T9146]  ? fat_fill_super+0x123/0x3570
[  211.826812][ T9146]  fat_fill_super+0x123/0x3570
[  211.826837][ T9146]  ? format_decode+0x5ee/0xe30
[  211.826856][ T9146]  ? __pfx_setup+0x10/0x10
[  211.826877][ T9146]  ? vsnprintf+0xe11/0xf00
[  211.826905][ T9146]  ? __pfx_fat_fill_super+0x10/0x10
[  211.826925][ T9146]  ? snprintf+0xda/0x120
[  211.826949][ T9146]  ? __pfx_snprintf+0x10/0x10
[  211.826965][ T9146]  ? set_blocksize+0x21e/0x500
[  211.826993][ T9146]  ? sb_set_blocksize+0x104/0x180
[  211.827016][ T9146]  ? setup_bdev_super+0x4c1/0x5b0
[  211.827040][ T9146]  get_tree_bdev_flags+0x40b/0x4d0
[  211.827061][ T9146]  ? __pfx_msdos_fill_super+0x10/0x10
[  211.827081][ T9146]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  211.827113][ T9146]  vfs_get_tree+0x8f/0x2b0
[  211.827137][ T9146]  do_new_mount+0x2a2/0x9e0
[  211.827163][ T9146]  ? ns_capable+0x8a/0xf0
[  211.827182][ T9146]  ? __pfx_do_new_mount+0x10/0x10
[  211.827203][ T9146]  ? path_mount+0x61c/0xfe0
[  211.827221][ T9146]  ? user_path_at+0x44/0x60
[  211.827250][ T9146]  __se_sys_mount+0x317/0x410
[  211.827278][ T9146]  ? __pfx___se_sys_mount+0x10/0x10
[  211.827306][ T9146]  ? do_syscall_64+0xbe/0x3b0
[  211.827325][ T9146]  ? __x64_sys_mount+0x20/0xc0
[  211.827356][ T9146]  do_syscall_64+0xfa/0x3b0
[  211.827376][ T9146]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.827398][ T9146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.827415][ T9146]  ? clear_bhb_loop+0x60/0xb0
[  211.827435][ T9146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.827451][ T9146] RIP: 0033:0x7f1346d8e9a9
[  211.827467][ T9146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.827481][ T9146] RSP: 002b:00007f1347b1a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  211.827499][ T9146] RAX: ffffffffffffffda RBX: 00007f1346fb5fa0 RCX: 00007f1346d8e9a9
[  211.827512][ T9146] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000
[  211.827524][ T9146] RBP: 00007f1347b1a090 R08: 0000000000000000 R09: 0000000000000000
[  211.827535][ T9146] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002
[  211.827546][ T9146] R13: 0000000000000001 R14: 00007f1346fb5fa0 R15: 00007ffdcab1ba38
[  211.827575][ T9146]  </TASK>
[  212.120898][    C1] vkms_vblank_simulate: vblank timer overrun
[  212.127029][ T5971] usb 1-1: Service connection timeout for: 256
[  212.133751][ T5971] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  212.143380][ T5971] ath9k_htc: Failed to initialize the device
[  212.152215][ T5934] usb 1-1: ath9k_htc: USB layer deinitialized
[  212.244948][ T9151] qnx4: no qnx4 filesystem (no root dir).
[  212.309968][ T9153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  212.311891][ T9156] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  214.028424][ T9181] /dev/rnullb0: Can't open blockdev
[  214.572502][ T7732] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  214.774876][ T7732] usb 4-1: config 7 has an invalid interface number: 4 but max is 0
[  214.782917][ T7732] usb 4-1: config 7 has no interface number 0
[  214.803586][ T7732] usb 4-1: config 7 interface 4 has no altsetting 0
[  214.812586][ T7732] usb 4-1: New USB device found, idVendor=05c6, idProduct=9000, bcdDevice=bb.9d
[  214.822064][ T7732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.843647][ T7732] usb 4-1: Product: syz
[  214.847862][ T7732] usb 4-1: Manufacturer: syz
[  214.852467][ T7732] usb 4-1: SerialNumber: syz
[  215.101173][ T9186] /dev/rnullb0: Can't open blockdev
[  215.120328][ T7732] usb 4-1: USB disconnect, device number 29
[  215.466156][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'.
[  215.579072][ T9218] /dev/rnullb0: Can't open blockdev
[  215.598344][ T9218] FAULT_INJECTION: forcing a failure.
[  215.598344][ T9218] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  215.648157][ T9218] CPU: 1 UID: 0 PID: 9218 Comm: syz.0.948 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  215.648182][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  215.648191][ T9218] Call Trace:
[  215.648198][ T9218]  <TASK>
[  215.648204][ T9218]  dump_stack_lvl+0x189/0x250
[  215.648230][ T9218]  ? __pfx____ratelimit+0x10/0x10
[  215.648252][ T9218]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.648273][ T9218]  ? __pfx__printk+0x10/0x10
[  215.648307][ T9218]  should_fail_ex+0x414/0x560
[  215.648331][ T9218]  _copy_to_user+0x31/0xb0
[  215.648351][ T9218]  simple_read_from_buffer+0xe1/0x170
[  215.648377][ T9218]  proc_fail_nth_read+0x1b3/0x220
[  215.648395][ T9218]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  215.648415][ T9218]  ? rw_verify_area+0x2a6/0x4d0
[  215.648431][ T9218]  ? __lock_acquire+0xab9/0xd20
[  215.648446][ T9218]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  215.648462][ T9218]  vfs_read+0x1fd/0x980
[  215.648480][ T9218]  ? fdget_pos+0x247/0x320
[  215.648497][ T9218]  ? __pfx___mutex_lock+0x10/0x10
[  215.648519][ T9218]  ? __pfx_vfs_read+0x10/0x10
[  215.648538][ T9218]  ? __fget_files+0x2a/0x420
[  215.648563][ T9218]  ? __fget_files+0x3a0/0x420
[  215.648583][ T9218]  ? __fget_files+0x2a/0x420
[  215.648610][ T9218]  ksys_read+0x145/0x250
[  215.648632][ T9218]  ? __pfx_ksys_read+0x10/0x10
[  215.648647][ T9218]  ? rcu_is_watching+0x15/0xb0
[  215.648672][ T9218]  ? do_syscall_64+0xbe/0x3b0
[  215.648699][ T9218]  do_syscall_64+0xfa/0x3b0
[  215.648718][ T9218]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.648738][ T9218]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.648752][ T9218]  ? clear_bhb_loop+0x60/0xb0
[  215.648770][ T9218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.648786][ T9218] RIP: 0033:0x7f1346d8d3bc
[  215.648801][ T9218] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  215.648814][ T9218] RSP: 002b:00007f1347b1a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  215.648833][ T9218] RAX: ffffffffffffffda RBX: 00007f1346fb5fa0 RCX: 00007f1346d8d3bc
[  215.648846][ T9218] RDX: 000000000000000f RSI: 00007f1347b1a0a0 RDI: 0000000000000003
[  215.648856][ T9218] RBP: 00007f1347b1a090 R08: 0000000000000000 R09: 0000000000000000
[  215.648867][ T9218] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002
[  215.648877][ T9218] R13: 0000000000000001 R14: 00007f1346fb5fa0 R15: 00007ffdcab1ba38
[  215.648906][ T9218]  </TASK>
[  215.981939][ T9222] /dev/rnullb0: Can't open blockdev
[  216.444580][ T9226] /dev/rnullb0: Can't open blockdev
[  217.283804][ T9247] PKCS7: Unknown OID: [4] 5.25.373.87(bad)
[  217.289932][ T9247] PKCS7: Only support pkcs7_signedData type
[  218.528482][ T9287] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  218.566011][ T9289] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  219.201534][ T5935] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  219.333830][ T5935] usb 4-1: device descriptor read/64, error -71
[  219.583848][ T5935] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  219.743673][ T5935] usb 4-1: device descriptor read/64, error -71
[  219.864867][ T5935] usb usb4-port1: attempt power cycle
[  220.223702][ T5935] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  220.264360][ T5935] usb 4-1: device descriptor read/8, error -71
[  220.513641][ T5935] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  220.554462][ T5935] usb 4-1: device descriptor read/8, error -71
[  220.673658][ T5935] usb usb4-port1: unable to enumerate USB device
[  221.299147][ T9340] FAT-fs (rnullb0): bogus number of reserved sectors
[  221.326304][ T9340] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  221.507974][ T9345] 9pnet_fd: Insufficient options for proto=fd
[  221.947249][ T5934] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  222.148601][ T5934] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  222.177884][ T5934] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  222.196536][ T5934] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  222.220411][ T5934] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  222.242573][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.260891][ T5934] usb 1-1: Product: syz
[  222.268255][ T5934] usb 1-1: Manufacturer: syz
[  222.272884][ T5934] usb 1-1: SerialNumber: syz
[  222.351686][ T5934] hub 1-1:1.0: bad descriptor, ignoring hub
[  222.383733][ T5934] hub 1-1:1.0: probe with driver hub failed with error -5
[  224.220307][ T9373] overlayfs: failed to clone upperpath
[  224.723112][ T5934] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  224.776824][ T5934] usb 1-1: USB disconnect, device number 34
[  224.789449][ T5934] usblp0: removed
[  225.619283][ T9391] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  225.657692][ T9391] UDF-fs: Scanning with blocksize 4096 failed
[  226.523725][ T5891] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  226.693581][ T5891] usb 1-1: device descriptor read/64, error -71
[  226.944836][ T5891] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  227.113664][ T5891] usb 1-1: device descriptor read/64, error -71
[  227.245684][ T5891] usb usb1-port1: attempt power cycle
[  227.603743][ T5891] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  227.634980][ T5891] usb 1-1: device descriptor read/8, error -71
[  227.899549][ T5891] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  228.035222][ T9425] netlink: 'syz.3.1017': attribute type 2 has an invalid length.
[  228.046932][ T5891] usb 1-1: device descriptor read/8, error -71
[  228.088531][ T9426] gfs2: not a GFS2 filesystem
[  228.138620][ T9425] netlink: 'syz.3.1017': attribute type 1 has an invalid length.
[  228.174100][ T5891] usb usb1-port1: unable to enumerate USB device
[  228.611322][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  228.624730][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  228.638878][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  228.648169][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  228.668503][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  228.968328][ T9440] netlink: 'syz.1.1021': attribute type 1 has an invalid length.
[  228.993897][ T9440] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1021'.
[  229.090863][ T9431] chnl_net:caif_netlink_parms(): no params data found
[  229.318558][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'.
[  229.327945][ T9448] netlink: 'syz.0.1022': attribute type 2 has an invalid length.
[  229.336864][ T9448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1022'.
[  229.357995][ T9448] qnx4: no qnx4 filesystem (no root dir).
[  229.375567][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.393067][ T9431] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.411021][ T9431] bridge_slave_0: entered allmulticast mode
[  229.425579][ T9431] bridge_slave_0: entered promiscuous mode
[  229.466259][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.487337][ T9431] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.497531][ T9431] bridge_slave_1: entered allmulticast mode
[  229.509043][ T9431] bridge_slave_1: entered promiscuous mode
[  229.515409][ T9451] FAT-fs (rnullb0): bogus number of reserved sectors
[  229.524250][ T9451] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  229.638041][ T9431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.690803][ T9431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.719177][ T9457] NILFS (rnullb0): couldn't find nilfs on the device
[  229.744741][ T9456] sctp: [Deprecated]: syz.1.1025 (pid 9456) Use of int in max_burst socket option.
[  229.744741][ T9456] Use struct sctp_assoc_value instead
[  229.841342][ T9459] /dev/sg0: Can't lookup blockdev
[  229.861583][ T9431] team0: Port device team_slave_0 added
[  229.887002][ T9431] team0: Port device team_slave_1 added
[  230.191865][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.214099][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.267638][ T9431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.295447][ T9431] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.302428][ T9431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.363325][ T9431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.389339][ T9481] Mount JFS Failure: -22
[  230.571482][ T9431] hsr_slave_0: entered promiscuous mode
[  230.585651][ T9431] hsr_slave_1: entered promiscuous mode
[  230.594213][ T9484] Malformed UNC in devname
[  230.594213][ T9484] 
[  230.601039][ T9484] CIFS: VFS: Malformed UNC in devname
[  230.614369][ T9431] debugfs: 'hsr0' already exists in 'hsr'
[  230.630417][ T9431] Cannot create hsr debugfs directory
[  230.714235][ T5846] Bluetooth: hci4: command tx timeout
[  231.047999][ T7732] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  231.114910][ T9496] /dev/rnullb0: Can't lookup blockdev
[  231.214811][ T7732] usb 4-1: Using ep0 maxpacket: 32
[  231.242313][ T7732] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  231.257577][ T7732] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  231.267238][ T7732] usb 4-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[  231.302883][ T7732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.321921][ T9431] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  231.339078][ T7732] usb 4-1: config 0 descriptor??
[  231.389506][ T9431] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  231.415237][ T9431] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  231.478889][ T9431] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  231.508803][ T9503] tmpfs: Group quota block hardlimit too large.
[  231.558556][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.580325][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.687892][ T5900] usb 4-1: USB disconnect, device number 34
[  231.772661][ T9431] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.832975][ T9431] 8021q: adding VLAN 0 to HW filter on device team0
[  231.876655][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.883872][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.927647][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.934853][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.057023][ T9431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  232.454128][ T5891] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  232.512549][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.546676][ T5900] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  232.645726][ T5891] usb 1-1: config 8 has an invalid interface number: 127 but max is 0
[  232.673034][ T5891] usb 1-1: config 8 has no interface number 0
[  232.683191][ T5891] usb 1-1: config 8 interface 127 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  232.723740][ T5900] usb 4-1: Using ep0 maxpacket: 32
[  232.725441][ T5891] usb 1-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=45.36
[  232.734663][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.753578][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.773608][ T5891] usb 1-1: Product: syz
[  232.777810][ T5891] usb 1-1: Manufacturer: syz
[  232.787385][ T5900] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.800326][ T5846] Bluetooth: hci4: command tx timeout
[  232.804352][ T5891] usb 1-1: SerialNumber: syz
[  232.814090][ T5900] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.824375][ T5900] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  232.837526][ T5900] usb 4-1: config 0 interface 0 has no altsetting 0
[  232.844315][ T5900] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  232.853384][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.868360][ T5900] usb 4-1: config 0 descriptor??
[  233.101046][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.121954][ T5900] usbhid 4-1:0.0: can't add hid device: -71
[  233.134283][ T5900] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  233.170406][ T9431] veth0_vlan: entered promiscuous mode
[  233.182798][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.191817][ T5900] usb 4-1: USB disconnect, device number 35
[  233.210357][ T9431] veth1_vlan: entered promiscuous mode
[  233.299008][ T5891] io_ti 1-1:8.127: required endpoints missing
[  233.337109][ T5891] usb 1-1: USB disconnect, device number 39
[  233.386039][ T9431] veth0_macvtap: entered promiscuous mode
[  233.410576][ T9431] veth1_macvtap: entered promiscuous mode
[  233.481877][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.527987][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.612134][ T9553] gfs2: not a GFS2 filesystem
[  233.661220][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.701924][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.747335][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.770000][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.933255][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.953920][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.024942][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.044441][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.096141][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.132777][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.171730][ T5935] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  234.593572][ T5971] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  234.765000][ T5971] usb 5-1: Using ep0 maxpacket: 32
[  234.778372][ T5971] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  234.798559][ T5971] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  234.837890][ T5971] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  234.857559][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.874062][ T5846] Bluetooth: hci4: command tx timeout
[  234.894977][ T5971] usb 5-1: Product: syz
[  234.899218][ T5971] usb 5-1: Manufacturer: ֻᘚꯑ㉎≲ࡼ钃跀ऊ䯻쭅岾榎괦観鰽쟉ᆇ踸䩩蹳ḇ⊵퉓풝藶ᴺ헽Ꮴ뻎˞衄ӯ䅞缉줍瑸韝륵ⱖ䖩ꭽᄾ䨤嗶愲࿩矔⨹䃞샶붺숓퐚ͦ쭒旓牪蕠ꋟ姏꬘剃෧ア䯼㪛೗⽆唝䎭䜹ꅻ⛽ឿ屓戒㦲쓊䆪ꢦ苮ᕉ黃ᶅ复嚐煲쾹帪咢貕ᢎ䙜䆂
[  234.930714][ T5971] usb 5-1: SerialNumber: syz
[  235.044125][ T5935] usb 4-1: device descriptor read/64, error -71
[  235.144358][ T9568] FAT-fs (rnullb0): bogus number of reserved sectors
[  235.154658][ T9568] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  235.192201][ T9584] gfs2: not a GFS2 filesystem
[  235.294803][ T5935] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  235.415013][ T5971] cdc_ncm 5-1:1.0: bind() failure
[  235.441226][ T5971] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  235.453988][ T5935] usb 4-1: Using ep0 maxpacket: 8
[  235.463696][ T5971] cdc_ncm 5-1:1.1: bind() failure
[  235.473302][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.483888][ T5971] usb 5-1: USB disconnect, device number 2
[  235.523861][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.563738][ T5935] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  235.590941][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.621037][ T5935] usb 4-1: config 0 descriptor??
[  236.046973][ T5935] logitech 0003:046D:C24F.0007: unknown main item tag 0x0
[  236.076990][ T5935] logitech 0003:046D:C24F.0007: unknown main item tag 0x0
[  236.077039][ T5935] logitech 0003:046D:C24F.0007: unknown main item tag 0x0
[  236.077065][ T5935] logitech 0003:046D:C24F.0007: unknown main item tag 0x0
[  236.077089][ T5935] logitech 0003:046D:C24F.0007: unknown main item tag 0x0
[  236.084786][ T5935] logitech 0003:046D:C24F.0007: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.3-1/input0
[  236.084829][ T5935] logitech 0003:046D:C24F.0007: no inputs found
[  236.247721][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.286315][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.327093][ T5935] usb 4-1: USB disconnect, device number 37
[  236.641176][ T9622] gfs2: not a GFS2 filesystem
[  236.794699][ T9632] MTD: Couldn't look up '/dev/rnullb0': -15
[  236.818444][ T9632] MTD: Couldn't look up '/dev/rnullb0': -15
[  236.954254][ T5846] Bluetooth: hci4: command tx timeout
[  237.391703][ T9654] /dev/rnullb0: Can't open blockdev
[  238.125786][ T9673] binder: 9672:9673 ioctl c0306201 200000001a80 returned -14
[  238.273000][ T5935] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  238.361033][ T9685] binder_alloc: binder_alloc_mmap_handler: 9682 200000ff9000-200000ffd000 already mapped failed -16
[  238.374262][ T9686] /dev/rnullb0: Can't lookup blockdev
[  238.408317][ T9685] binder_alloc: binder_alloc_mmap_handler: 9682 200000ff9000-200000ffd000 already mapped failed -16
[  238.479164][ T5935] usb 1-1: Using ep0 maxpacket: 16
[  238.503236][ T5935] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  238.559188][ T5935] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  238.591183][ T5935] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  238.609348][ T5935] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  238.622487][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.640969][ T5935] usb 1-1: Product: syz
[  238.645959][ T5935] usb 1-1: Manufacturer: syz
[  238.661985][ T5935] usb 1-1: SerialNumber: syz
[  238.863603][ T5971] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  238.888312][ T9677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.934062][ T9677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.944070][   T30] audit: type=1800 audit(1752904155.935:12): pid=9677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1084" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0
[  238.964061][    C0] vkms_vblank_simulate: vblank timer overrun
[  239.013948][ T5935] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  239.021961][ T5935] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  239.063563][ T5971] usb 4-1: Using ep0 maxpacket: 8
[  239.071269][ T5971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  239.082966][ T5971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  239.092997][ T5971] usb 4-1: config 0 interface 0 has no altsetting 0
[  239.103189][ T5971] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  239.113438][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.136243][ T5971] usb 4-1: Product: syz
[  239.137925][ T5935] usb 1-1: USB disconnect, device number 40
[  239.140431][ T5971] usb 4-1: Manufacturer: syz
[  239.167780][ T5971] usb 4-1: SerialNumber: syz
[  239.208885][ T5971] usb 4-1: config 0 descriptor??
[  239.233053][ T5971] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[  239.428236][ T5971] snd_usb_toneport 4-1:0.0: cannot get proper max packet size
[  239.440756][ T5971] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[  239.451705][ T5971] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  239.673158][ T5971] usb 4-1: USB disconnect, device number 38
[  240.285093][ T9703] /dev/sg0: Can't lookup blockdev
[  240.412147][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.430893][ T9701] /dev/rnullb0: Can't open blockdev
[  240.434662][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.471800][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.482147][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.513883][ T5935] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  240.643633][   T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  240.651303][ T5935] usb 1-1: device descriptor read/64, error -71
[  240.783574][   T43] usb 5-1: device descriptor read/64, error -71
[  240.893734][ T5935] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  240.897608][ T9720] /dev/rnullb0: Can't lookup blockdev
[  241.005162][ T9724] /dev/rnullb0: Can't lookup blockdev
[  241.023687][   T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  241.033719][ T5935] usb 1-1: device descriptor read/64, error -71
[  241.144058][ T5935] usb usb1-port1: attempt power cycle
[  241.153938][   T43] usb 5-1: device descriptor read/64, error -71
[  241.264105][   T43] usb usb5-port1: attempt power cycle
[  241.483884][ T5935] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  241.517075][ T5935] usb 1-1: device descriptor read/8, error -71
[  241.603662][   T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  241.644370][   T43] usb 5-1: device descriptor read/8, error -71
[  241.763584][ T5935] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  241.796281][ T5935] usb 1-1: device descriptor read/8, error -71
[  241.886198][   T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  241.916145][ T5935] usb usb1-port1: unable to enumerate USB device
[  241.936054][   T43] usb 5-1: device descriptor read/8, error -71
[  242.058145][   T43] usb usb5-port1: unable to enumerate USB device
[  242.551238][ T9745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.561870][ T9745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.624102][   T43] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  243.589515][ T9765] /dev/sg0: Can't lookup blockdev
[  243.882013][ T9770] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  244.044123][ T5935] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  244.194799][ T5935] usb 5-1: device descriptor read/64, error -71
[  244.459005][ T5935] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  244.611577][ T5935] usb 5-1: device descriptor read/64, error -71
[  244.734126][ T5935] usb usb5-port1: attempt power cycle
[  245.083719][ T5935] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  245.154285][ T5935] usb 5-1: device descriptor read/8, error -71
[  245.396770][ T5935] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  245.424405][ T5935] usb 5-1: device descriptor read/8, error -71
[  245.497723][ T9787] netlink: 'syz.3.1120': attribute type 1 has an invalid length.
[  245.571234][ T5935] usb usb5-port1: unable to enumerate USB device
[  245.750656][ T9797] netlink: 'syz.3.1123': attribute type 10 has an invalid length.
[  245.782733][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.791726][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.864970][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.872163][ T9797] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.879773][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.886981][ T9797] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.924722][ T9797] bridge0: entered allmulticast mode
[  245.930661][ T9797] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  246.523582][   T43] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  246.563860][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1131'.
[  246.604642][ T9827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1131'.
[  246.703939][   T43] usb 1-1: Using ep0 maxpacket: 16
[  246.711986][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.733470][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.751008][   T43] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  246.763839][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'.
[  246.783847][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.805324][   T43] usb 1-1: config 0 descriptor??
[  246.909256][ T9834] /dev/rnullb0: Can't open blockdev
[  247.039308][   T43] playstation 0003:054C:05C4.0008: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0
[  247.227918][ T9821] /dev/rnullb0: Can't open blockdev
[  247.235787][   T43] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 18: -71
[  247.259091][   T43] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 pairing info: -71
[  247.273852][ T5934] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  247.286975][   T43] playstation 0003:054C:05C4.0008: Failed to get MAC address from DualShock4
[  247.305041][   T43] playstation 0003:054C:05C4.0008: Failed to create dualshock4.
[  247.326228][   T43] playstation 0003:054C:05C4.0008: probe with driver playstation failed with error -71
[  247.361387][   T43] usb 1-1: USB disconnect, device number 45
[  247.423714][ T5934] usb 4-1: Using ep0 maxpacket: 32
[  247.446046][ T5934] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  247.458504][ T5934] usb 4-1: config 0 has no interface number 0
[  247.475933][ T5934] usb 4-1: config 0 interface 184 has no altsetting 0
[  247.497073][ T5934] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  247.506856][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.518270][ T5934] usb 4-1: Product: syz
[  247.527094][ T5934] usb 4-1: Manufacturer: syz
[  247.536700][ T5934] usb 4-1: SerialNumber: syz
[  247.552336][ T5934] usb 4-1: config 0 descriptor??
[  247.627461][ T5934] smsc75xx v1.0.0
[  248.136123][   T43] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  248.298386][   T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.332578][   T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.356454][   T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  248.368512][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.386725][   T43] usb 1-1: Product: syz
[  248.401164][   T43] usb 1-1: Manufacturer: syz
[  248.408649][   T43] usb 1-1: SerialNumber: syz
[  248.432534][ T5934] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  248.453914][ T5934] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  248.627863][ T9867] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  248.893886][ T9844] /dev/rnullb0: Can't open blockdev
[  248.922384][ T5934] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  248.939050][ T5934] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  248.959975][ T5934] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  248.975568][ T5934] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  249.009503][ T5934] usb 4-1: USB disconnect, device number 40
[  249.447291][ T9852] /dev/rnullb0: Can't open blockdev
[  249.477148][   T43] cdc_ncm 1-1:1.0: bind() failure
[  249.488821][   T43] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  249.513301][ T9889] /dev/rnullb0: Can't open blockdev
[  249.520076][   T43] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  249.528934][ T9889] /dev/rnullb0: Can't open blockdev
[  249.536484][   T43] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  249.574962][   T43] usb 1-1: USB disconnect, device number 46
[  250.112937][ T9902] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  250.137497][ T9902] /dev/rnullb0: Can't open blockdev
[  250.403758][   T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  250.484527][ T5935] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  250.545564][ T7732] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  250.564275][   T43] usb 5-1: Using ep0 maxpacket: 32
[  250.575505][   T43] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  250.585020][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.593033][   T43] usb 5-1: Product: syz
[  250.598141][   T43] usb 5-1: Manufacturer: syz
[  250.602766][   T43] usb 5-1: SerialNumber: syz
[  250.615165][   T43] usb 5-1: config 0 descriptor??
[  250.640967][   T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  250.649570][ T5935] usb 1-1: Using ep0 maxpacket: 8
[  250.659139][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  250.676708][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  250.688883][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.699507][ T5935] usb 1-1: Product: syz
[  250.706671][ T5935] usb 1-1: Manufacturer: syz
[  250.711581][ T5935] usb 1-1: SerialNumber: syz
[  250.725863][ T7732] usb 4-1: unable to get BOS descriptor or descriptor too short
[  250.741981][ T7732] usb 4-1: not running at top speed; connect to a high speed hub
[  250.742947][ T5935] usb 1-1: config 0 descriptor??
[  250.762881][ T7732] usb 4-1: config 6 has an invalid interface number: 150 but max is 0
[  250.764356][ T5935] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  250.781400][ T7732] usb 4-1: config 6 has an invalid interface association descriptor of length 2, skipping
[  250.791550][ T7732] usb 4-1: config 6 has no interface number 0
[  250.800752][ T7732] usb 4-1: config 6 interface 150 altsetting 3 endpoint 0x6 has an invalid bInterval 0, changing to 4
[  250.812083][ T7732] usb 4-1: config 6 interface 150 has no altsetting 0
[  250.826530][ T7732] usb 4-1: New USB device found, idVendor=12d1, idProduct=76d8, bcdDevice=5d.76
[  250.844589][ T7732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.852741][ T7732] usb 4-1: Product: syz
[  250.858040][ T7732] usb 4-1: Manufacturer: syz
[  250.862661][ T7732] usb 4-1: SerialNumber: syz
[  251.163819][ T7732] usb 4-1: USB disconnect, device number 41
[  251.754231][   T43] gspca_ov534_9: reg_w failed -110
[  252.053963][   T43] gspca_ov534_9: Unknown sensor 0000
[  252.054061][   T43] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  252.109846][   T43] usb 5-1: USB disconnect, device number 11
[  252.425367][ T9961] /dev/rnullb0: Can't open blockdev
[  252.760376][ T9968] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  252.780044][ T5935] gspca_zc3xx: reg_r err -32
[  253.375836][ T5935] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  253.402379][ T5935] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32
[  253.484238][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.493031][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.752239][ T9992] /dev/rnullb0: Can't open blockdev
[  254.058829][T10001] /dev/rnullb0: Can't open blockdev
[  254.212257][T10004] syzkaller1: entered promiscuous mode
[  254.223791][T10004] syzkaller1: entered allmulticast mode
[  254.235482][T10004] /dev/rnullb0: Can't open blockdev
[  254.278415][T10006] Bluetooth: MGMT ver 1.23
[  254.373940][T10008] /dev/rnullb0: Can't open blockdev
[  254.476199][T10010] /dev/rnullb0: Can't open blockdev
[  255.291760][ T5935] usb 1-1: USB disconnect, device number 47
[  255.617205][T10027] /dev/rnullb0: Can't open blockdev
[  255.760366][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  255.766783][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  256.061005][T10044] /dev/rnullb0: Can't open blockdev
[  256.296258][T10052] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  256.452793][T10060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1204'.
[  256.496974][T10060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1204'.
[  256.518508][T10060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1204'.
[  258.274766][T10078] /dev/rnullb0: Can't open blockdev
[  258.575268][T10080] /dev/rnullb0: Can't open blockdev
[  259.097921][T10095] netlink: 'syz.1.1215': attribute type 3 has an invalid length.
[  259.153665][T10095] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1215'.
[  259.320292][T10102] ieee802154 phy0 wpan0: encryption failed: -22
[  259.386646][T10104] /dev/rnullb0: Can't open blockdev
[  260.115027][ T7732] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  260.309200][ T7732] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.309234][ T7732] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.309263][ T7732] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  260.309287][ T7732] usb 5-1: config 0 interface 0 has no altsetting 0
[  260.309320][ T7732] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  260.309341][ T7732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.312136][ T7732] usb 5-1: config 0 descriptor??
[  260.526576][T10126] /dev/rnullb0: Can't open blockdev
[  260.607329][ T7732] usbhid 5-1:0.0: can't add hid device: -71
[  260.627298][ T7732] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  260.679189][ T7732] usb 5-1: USB disconnect, device number 12
[  261.034647][T10155] /dev/rnullb0: Can't open blockdev
[  261.426478][T10168] syz.0.1232: attempt to access beyond end of device
[  261.426478][T10168] loop0: rw=0, sector=2, nr_sectors = 1 limit=0
[  261.597052][T10171] /dev/rnullb0: Can't open blockdev
[  261.641077][T10173] /dev/rnullb0: Can't open blockdev
[  261.715332][T10175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.743998][T10175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.752366][T10177] /dev/rnullb0: Can't open blockdev
[  261.816096][T10180] /dev/rnullb0: Can't open blockdev
[  262.004310][T10185] /dev/rnullb0: Can't open blockdev
[  262.140448][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'.
[  262.213744][ T7732] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  262.366997][ T7732] usb 4-1: device descriptor read/64, error -71
[  262.608315][ T5900] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  262.633912][ T7732] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  262.783570][ T7732] usb 4-1: device descriptor read/64, error -71
[  262.789916][ T5900] usb 5-1: Using ep0 maxpacket: 8
[  262.800607][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  262.813364][ T5900] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  262.833712][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.841768][ T5900] usb 5-1: Product: syz
[  262.856263][ T5900] usb 5-1: Manufacturer: syz
[  262.860896][ T5900] usb 5-1: SerialNumber: syz
[  262.862756][T10199] MTD: Couldn't look up '/dev/rnullb0': -15
[  262.879991][ T5900] usb 5-1: config 0 descriptor??
[  262.897423][ T5900] gspca_main: stk014-2.14.0 probing 05e1:0893
[  262.906992][ T7732] usb usb4-port1: attempt power cycle
[  262.917941][ T5900] usb 5-1: selecting invalid altsetting 1
[  263.014110][T10201] 9pnet_fd: Insufficient options for proto=fd
[  263.020674][T10202] 9pnet_fd: Insufficient options for proto=fd
[  263.098623][ T5900] gspca_stk014: init reg: 0x00
[  263.114522][ T5900] stk014 5-1:0.0: probe with driver stk014 failed with error -5
[  263.273608][ T7732] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  263.323716][ T7732] usb 4-1: device descriptor read/8, error -71
[  263.563569][ T7732] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  263.606810][ T7732] usb 4-1: device descriptor read/8, error -71
[  263.658943][T10209] overlayfs: failed to clone upperpath
[  263.724940][ T7732] usb usb4-port1: unable to enumerate USB device
[  264.070279][ T5900] usb 5-1: USB disconnect, device number 13
[  264.511901][T10228] /dev/rnullb0: Can't open blockdev
[  264.528347][T10228] Malformed UNC in devname
[  264.528347][T10228] 
[  264.565957][T10228] CIFS: VFS: Malformed UNC in devname
[  264.806949][T10236] /dev/rnullb0: Can't open blockdev
[  265.140545][T10251] /dev/rnullb0: Can't open blockdev
[  265.367958][T10255] /dev/rnullb0: Can't open blockdev
[  265.685410][T10267] 9pnet_fd: Insufficient options for proto=fd
[  266.254279][ T5935] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  266.383687][   T43] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  266.435399][ T5935] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  266.452859][ T5935] usb 5-1: config 0 has no interface number 0
[  266.474085][ T5935] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  266.496643][ T5935] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  266.509930][ T5935] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  266.521355][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.544531][ T5935] usb 5-1: config 0 descriptor??
[  266.573599][   T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.594361][   T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  266.614261][   T43] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  266.637661][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.664288][   T43] usb 1-1: config 0 descriptor??
[  266.769690][ T5869] usb 5-1: USB disconnect, device number 14
[  266.890284][T10279] tmpfs: Bad value for 'mpol'
[  266.950595][T10279] /dev/rnullb0: Can't open blockdev
[  266.989205][   T43] Bluetooth: Can't get state to change to load ram patch err
[  267.009304][   T43] Bluetooth: Loading patch file failed
[  267.021776][   T43] ath3k 1-1:0.0: probe with driver ath3k failed with error -71
[  267.050124][   T43] usb 1-1: USB disconnect, device number 49
[  267.223696][ T7732] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  267.373646][ T7732] usb 4-1: Using ep0 maxpacket: 8
[  267.384703][ T7732] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4
[  267.405297][ T7732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.413324][ T7732] usb 4-1: Product: syz
[  267.418063][ T7732] usb 4-1: Manufacturer: syz
[  267.422679][ T7732] usb 4-1: SerialNumber: syz
[  267.465159][ T7732] usb 4-1: bad CDC descriptors
[  267.774428][T10319] /dev/rnullb0: Can't open blockdev
[  268.143600][ T7732] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  268.217300][T10326] /dev/rnullb0: Can't open blockdev
[  268.292277][   T43] usb 4-1: USB disconnect, device number 46
[  268.303804][ T7732] usb 1-1: Using ep0 maxpacket: 32
[  268.315931][ T7732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  268.329417][ T7732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  268.360733][ T7732] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  268.398044][ T7732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.418109][ T7732] usb 1-1: Product: syz
[  268.422313][ T7732] usb 1-1: Manufacturer: syz
[  268.442480][ T7732] usb 1-1: SerialNumber: syz
[  268.464592][ T7732] usb 1-1: config 0 descriptor??
[  268.499847][ T7732] usb 1-1: no audio or video endpoints found
[  268.623896][T10339] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1288'.
[  268.633288][T10339] netlink: 'syz.1.1288': attribute type 2 has an invalid length.
[  268.641739][T10339] netlink: 'syz.1.1288': attribute type 2 has an invalid length.
[  268.651108][T10339] netlink: 'syz.1.1288': attribute type 1 has an invalid length.
[  268.663602][T10339] netlink: 'syz.1.1288': attribute type 2 has an invalid length.
[  268.675968][T10339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1288'.
[  268.682951][   T43] usb 1-1: USB disconnect, device number 50
[  268.900486][T10345] /dev/rnullb0: Can't open blockdev
[  268.936704][T10347] netlink: 'syz.1.1291': attribute type 7 has an invalid length.
[  268.956127][T10347] /dev/rnullb0: Can't lookup blockdev
[  269.090098][T10349] /dev/rnullb0: Can't open blockdev
[  269.470756][T10361] /dev/rnullb0: Can't open blockdev
[  269.658944][T10369] rtc_cmos 00:00: Alarms can be up to one day in the future
[  269.892599][T10380] syz.3.1302 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  270.438552][T10402] /dev/rnullb0: Can't open blockdev
[  270.465538][T10407] overlayfs: failed to clone upperpath
[  270.516269][T10407] 9pnet_fd: Insufficient options for proto=fd
[  271.801276][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'.
[  272.410839][T10460] veth0_to_hsr: entered allmulticast mode
[  272.484902][T10466] /dev/rnullb0: Can't open blockdev
[  272.764338][T10459] veth0_to_hsr: left allmulticast mode
[  272.834709][T10472] /dev/rnullb0: Can't lookup blockdev
[  272.850911][T10472] /dev/rnullb0: Can't lookup blockdev
[  272.864411][T10472] /dev/rnullb0: Can't lookup blockdev
[  272.910227][T10472] /dev/rnullb0: Can't lookup blockdev
[  272.920349][T10472] /dev/rnullb0: Can't lookup blockdev
[  272.932575][T10472] /dev/rnullb0: Can't lookup blockdev
[  272.951418][T10472] /dev/rnullb0: Can't lookup blockdev
[  272.971003][T10472] /dev/rnullb0: Can't lookup blockdev
[  272.991679][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.009900][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.024159][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.045522][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.074319][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.096269][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.143983][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.149992][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.184303][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.190175][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.204433][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.228596][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.236372][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.254598][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.274332][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.284069][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.314101][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.320229][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.334328][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.351067][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.365254][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.381389][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.394108][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.411730][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.421856][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.434385][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.458194][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.465584][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.509908][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.534925][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.564124][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.574364][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.597059][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.603723][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.610445][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.622216][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.628672][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.644449][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.650393][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.662286][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.690756][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.701170][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.732201][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.749663][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.766466][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.799362][T10489] /dev/rnullb0: Can't open blockdev
[  273.813951][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.819783][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.834213][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.840167][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.873143][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.904053][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.910934][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.923967][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.933985][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.954396][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.960389][T10472] /dev/rnullb0: Can't lookup blockdev
[  273.975244][T10472] /dev/rnullb0: Can't lookup blockdev
[  274.590561][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1333'.
[  274.701615][ T5869] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  274.913340][ T5869] usb 5-1: unable to get BOS descriptor or descriptor too short
[  274.953456][ T5869] usb 5-1: config 6 has an invalid interface number: 252 but max is 0
[  274.961774][ T5869] usb 5-1: config 6 has no interface number 0
[  274.983578][ T5869] usb 5-1: config 6 interface 252 has no altsetting 0
[  275.008858][T10521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.023800][ T5869] usb 5-1: New USB device found, idVendor=14aa, idProduct=0221, bcdDevice=76.22
[  275.032871][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.044235][T10521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.073640][ T5935] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  275.085065][ T5869] usb 5-1: Product: syz
[  275.089377][ T5869] usb 5-1: Manufacturer: syz
[  275.106344][ T5869] usb 5-1: SerialNumber: syz
[  275.244786][ T5971] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  275.247377][ T5935] usb 4-1: Using ep0 maxpacket: 8
[  275.293999][ T5935] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  275.303450][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.331351][ T5935] usb 4-1: Product: syz
[  275.341459][ T5935] usb 4-1: Manufacturer: syz
[  275.351584][ T5935] usb 4-1: SerialNumber: syz
[  275.365302][ T5935] usb 4-1: config 0 descriptor??
[  275.389324][ T5935] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  275.508603][T10528] /dev/rnullb0: Can't open blockdev
[  275.578952][ T5935] gspca_sonixj: reg_r err -32
[  275.608986][ T5935] sonixj 4-1:0.0: probe with driver sonixj failed with error -32
[  275.645590][ T5935] usb 4-1: USB disconnect, device number 47
[  275.818601][T10538] netlink: 'syz.1.1340': attribute type 1 has an invalid length.
[  275.839682][T10538] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1340'.
[  275.859593][T10540] netlink: 'syz.0.1341': attribute type 4 has an invalid length.
[  275.946602][T10540] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  275.960462][T10545] netlink: 'syz.1.1342': attribute type 2 has an invalid length.
[  275.975058][T10545] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1342'.
[  276.315840][T10552] /dev/rnullb0: Can't open blockdev
[  277.001743][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'.
[  277.040923][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'.
[  277.323660][ T5971] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  277.504636][ T5971] usb 4-1: Using ep0 maxpacket: 16
[  277.537032][ T5869] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state.
[  277.552788][ T5869] dvb-usb: bulk message failed: -71 (2/0)
[  277.559837][ T5869] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  277.568711][ T5971] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  277.568741][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.568760][ T5971] usb 4-1: Product: syz
[  277.568773][ T5971] usb 4-1: Manufacturer: syz
[  277.568786][ T5971] usb 4-1: SerialNumber: syz
[  277.612826][ T5971] r8152-cfgselector 4-1: Unknown version 0x0000
[  277.627733][ T5869] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom))
[  277.650245][ T5971] r8152-cfgselector 4-1: config 0 descriptor??
[  277.658599][ T5869] usb 5-1: media controller created
[  277.705168][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  277.705760][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'.
[  277.746521][ T5869] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  277.784988][ T5869] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  277.966609][ T5869] rc_core: IR keymap rc-dtt200u not found
[  277.983541][ T5869] Registered IR keymap rc-empty
[  277.989706][ T5869] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  278.035837][ T5869] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15
[  278.067121][ T5869] dvb-usb: schedule remote query interval to 300 msecs.
[  278.093532][ T5869] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected.
[  278.138394][T10566] /dev/rnullb0: Can't open blockdev
[  278.155837][ T5869] usb 5-1: USB disconnect, device number 15
[  278.181887][T10587] /dev/rnullb0: Can't open blockdev
[  278.266913][ T5971] r8152-cfgselector 4-1: USB disconnect, device number 48
[  278.329777][ T5869] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected.
[  278.594512][T10596] /dev/rnullb0: Can't open blockdev
[  278.974363][T10611] /dev/rnullb0: Can't open blockdev
[  279.022455][T10608] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  279.048683][T10608] /dev/rnullb0: Can't open blockdev
[  279.143582][   T43] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  279.304140][   T43] usb 1-1: Using ep0 maxpacket: 32
[  279.312088][   T43] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  279.338857][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  279.353739][   T43] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  279.376448][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.403651][   T43] usb 1-1: config 0 descriptor??
[  279.463845][ T7732] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  279.616322][ T7732] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  279.644029][ T7732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  279.672512][ T7732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.699457][ T7732] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  279.740441][ T7732] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  279.802093][ T7732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.818779][ T7732] usb 4-1: config 0 descriptor??
[  279.880614][   T43] aquacomputer_d5next 0003:0C70:F011.0009: item fetching failed at offset 5/7
[  279.924328][   T43] aquacomputer_d5next 0003:0C70:F011.0009: probe with driver aquacomputer_d5next failed with error -22
[  279.984039][   T43] usb 1-1: USB disconnect, device number 52
[  280.121569][T10648] /dev/rnullb0: Can't lookup blockdev
[  280.467941][ T7732] usb 4-1: USB disconnect, device number 49
[  280.493667][   T43] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  280.633613][   T43] usb 1-1: device descriptor read/64, error -71
[  280.875975][   T43] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  281.013597][   T43] usb 1-1: device descriptor read/64, error -71
[  281.058192][T10672] /dev/rnullb0: Can't open blockdev
[  281.137976][   T43] usb usb1-port1: attempt power cycle
[  281.155292][T10675] /dev/rnullb0: Can't open blockdev
[  281.483614][   T43] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  281.542612][   T43] usb 1-1: device descriptor read/8, error -71
[  281.803643][   T43] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  281.852538][   T43] usb 1-1: device descriptor read/8, error -71
[  281.969899][   T43] usb usb1-port1: unable to enumerate USB device
[  281.984038][T10697] x_tables: duplicate underflow at hook 1
[  282.166758][T10701] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1383'.
[  282.203661][T10701] netlink: zone id is out of range
[  282.213764][T10701] netlink: zone id is out of range
[  282.218945][T10701] netlink: zone id is out of range
[  282.244075][T10701] netlink: zone id is out of range
[  282.249224][T10701] netlink: zone id is out of range
[  282.259311][T10701] netlink: zone id is out of range
[  282.265024][T10701] netlink: zone id is out of range
[  282.267737][ T5971] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  282.270280][T10701] netlink: zone id is out of range
[  282.288511][T10701] netlink: zone id is out of range
[  282.296800][T10701] netlink: zone id is out of range
[  282.457956][ T5971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.487199][ T5971] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  282.673140][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.719725][ T5971] usb 4-1: config 0 descriptor??
[  282.868399][T10722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1388'.
[  282.994159][T10725] random: crng reseeded on system resumption
[  283.054436][T10725] Malformed UNC in devname
[  283.054436][T10725] 
[  283.107452][T10725] CIFS: VFS: Malformed UNC in devname
[  283.159070][T10727] binder: 10726:10727 unknown command 0
[  283.180405][T10727] binder: 10726:10727 ioctl c0306201 200000000080 returned -22
[  283.205540][T10727] binder: 10726:10727 ioctl c0189378 200000000440 returned -22
[  283.244818][T10727] binder_alloc: 10726: binder_alloc_buf, no vma
[  283.321701][T10733] comedi comedi0: rti802: I/O port conflict (0x80008,4)
[  283.366608][T10733] /dev/rnullb0: Can't open blockdev
[  283.603681][ T5971] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  283.651122][T10743] /dev/rnullb0: Can't open blockdev
[  283.768469][ T5971] usb 1-1: Using ep0 maxpacket: 32
[  283.789011][ T5971] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  283.801610][ T5971] usb 1-1: config 0 has no interface number 0
[  283.816700][ T5971] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  283.826261][ T7732] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  283.843706][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.862497][ T5971] usb 1-1: Product: syz
[  283.872911][ T5971] usb 1-1: Manufacturer: syz
[  283.892763][ T5971] usb 1-1: SerialNumber: syz
[  283.906878][ T5971] usb 1-1: config 0 descriptor??
[  283.929694][ T5971] smsc95xx v2.0.0
[  284.003685][ T7732] usb 5-1: Using ep0 maxpacket: 8
[  284.030852][ T7732] usb 5-1: unable to get BOS descriptor or descriptor too short
[  284.054640][ T7732] usb 5-1: unable to read config index 0 descriptor/start: -71
[  284.063118][ T7732] usb 5-1: can't read configurations, error -71
[  284.325811][   T30] audit: type=1326 audit(1752904201.315:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7001f8e9a9 code=0x7fc00000
[  284.358969][ T5971] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  284.379293][ T5971] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  284.430427][T10765] /dev/rnullb0: Can't lookup blockdev
[  285.054408][ T7732] usb 4-1: USB disconnect, device number 50
[  285.202110][ T5971] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  285.214542][ T5971] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32
[  285.399848][T10778] /dev/rnullb0: Can't open blockdev
[  285.503884][ T7732] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  285.567874][T10782] /dev/rnullb0: Can't open blockdev
[  285.678288][ T7732] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  285.698705][ T7732] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  285.715192][ T7732] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  285.733559][ T7732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.751967][ T7732] usb 4-1: Product: Л
[  285.762101][ T7732] usb 4-1: Manufacturer: ໩㚴ﴅЈ헳⏁虨䄰棿땫排壃蒋浝㲈襛ꆍ︠囥
[  285.774827][ T7732] usb 4-1: SerialNumber: ꀉ㭧춲컣嗲ᇪ븍蛟楃쑵ꅅ葐큡ᡀ쿮ꕯ휟퐐፛퀜९㝛밊䜖఻⦽쏽榨홰㈈↨蚟갰ꈹ짒Ɽ᥂㐣ꂸ倮젌뒍铔쮍ृꃰ政㐡♡巜ᙸ堓仦삞훹쾠쉱ᆑ㭙쯺耐ŋ癃度㜡ᶚ伸⠽君胮稉퀅ᤆᛛ㬡〉筂ￅ碮퐒뼲㚜齜亨娼ꈼٻ髖寛抸뷣윽붠﷔썪뽊
[  285.863602][ T5971] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  286.020267][ T5971] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  286.038292][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.048732][ T5971] usb 5-1: Product: syz
[  286.052942][ T5971] usb 5-1: Manufacturer: syz
[  286.060774][ T5971] usb 5-1: SerialNumber: syz
[  286.084365][ T5971] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  286.106550][ T5934] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  286.382430][   T43] usb 1-1: USB disconnect, device number 57
[  286.457458][T10791] binder: 10790:10791 ioctl c0306201 2000000003c0 returned -22
[  286.529128][ T5971] usb 5-1: USB disconnect, device number 18
[  286.728077][   T30] audit: type=1800 audit(1752904203.715:14): pid=10794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1412" name="file1" dev="tmpfs" ino=1904 res=0 errno=0
[  287.194919][ T5934] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  287.222501][ T5934] ath9k_htc: Failed to initialize the device
[  287.242449][ T5971] usb 5-1: ath9k_htc: USB layer deinitialized
[  287.661715][T10815] /dev/rnullb0: Can't open blockdev
[  287.681339][T10816] /dev/rnullb0: Can't open blockdev
[  287.757534][T10818] /dev/rnullb0: Can't open blockdev
[  287.820890][T10820] /dev/rnullb0: Can't lookup blockdev
[  287.935705][T10826] ./file0: Can't lookup blockdev
[  288.194917][ T7732] cdc_ncm 4-1:1.0: bind() failure
[  288.240678][ T7732] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  288.259549][ T7732] cdc_ncm 4-1:1.1: bind() failure
[  288.274900][T10834] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  288.296884][ T7732] usb 4-1: USB disconnect, device number 51
[  288.813555][ T7732] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  288.914163][ T5934] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  288.993562][ T7732] usb 4-1: Using ep0 maxpacket: 16
[  289.000585][ T7732] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  289.013552][ T7732] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.033152][ T7732] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  289.055912][ T7732] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  289.076197][ T7732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.086053][ T5934] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[  289.113567][ T5934] usb 5-1: config 8 has no interface number 0
[  289.119706][ T5934] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88
[  289.131498][ T7732] usb 4-1: Product: syz
[  289.143567][ T7732] usb 4-1: Manufacturer: syz
[  289.148192][ T7732] usb 4-1: SerialNumber: syz
[  289.163571][ T5934] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64
[  289.196152][ T5934] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  289.206171][ T5934] usb 5-1: config 8 interface 177 has no altsetting 0
[  289.213155][ T5934] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  289.233696][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.280555][T10845] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  289.572437][T10852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.588160][ T7732] usb 4-1: 0:2 : does not exist
[  289.601640][T10852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.663766][   T43] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  289.823721][   T43] usb 1-1: Using ep0 maxpacket: 8
[  289.836460][   T43] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  289.849356][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.874573][   T43] usb 1-1: Product: syz
[  289.878773][   T43] usb 1-1: Manufacturer: syz
[  289.893652][   T43] usb 1-1: SerialNumber: syz
[  289.906321][   T43] usb 1-1: config 0 descriptor??
[  289.927250][   T43] ipw 1-1:0.0: IPWireless converter converter detected
[  290.395347][T10843] /dev/rnullb0: Can't open blockdev
[  290.426415][ T7732] usb 4-1: 1:0: failed to get current value for ch 0 (-22)
[  290.515932][ T7732] usb 4-1: USB disconnect, device number 52
[  290.580930][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  291.670507][T10845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  291.692246][ T5907] usb 1-1: USB disconnect, device number 58
[  291.728599][ T5907] ipw 1-1:0.0: device disconnected
[  291.859801][ T5934] usb 5-1: string descriptor 0 read error: -71
[  291.901265][ T5934] ir_toy 5-1:8.177: required endpoints not found
[  291.944021][ T5934] usb 5-1: USB disconnect, device number 19
[  292.208125][T10869] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003
[  292.254354][T10869] /dev/rnullb0: Can't open blockdev
[  292.528814][T10879] /dev/rnullb0: Can't open blockdev
[  292.732199][T10883] /dev/rnullb0: Can't open blockdev
[  292.753801][T10885] binder: 10884:10885 ioctl 400c620e 2000000014c0 returned -22
[  292.780704][T10885] /dev/rnullb0: Can't open blockdev
[  292.827337][T10886] /dev/rnullb0: Can't open blockdev
[  293.077170][T10890] /dev/rnullb0: Can't open blockdev
[  293.244002][T10895] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  293.251033][T10895] /dev/rnullb0: Can't open blockdev
[  294.195375][T10912] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  294.209200][T10912] /dev/rnullb0: Can't open blockdev
[  294.514426][T10916] /dev/rnullb0: Can't open blockdev
[  294.694876][T10922] /dev/rnullb0: Can't open blockdev
[  294.957938][T10933] tipc: MTU too low for tipc bearer
[  294.993648][ T5934] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  295.163622][ T5934] usb 1-1: Using ep0 maxpacket: 16
[  295.186927][ T5934] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  295.201918][ T5934] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  295.233293][ T5934] usb 1-1: config 1 has no interface number 1
[  295.257079][ T5934] usb 1-1: too many endpoints for config 1 interface 2 altsetting 3: 240, using maximum allowed: 30
[  295.307782][ T5934] usb 1-1: config 1 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 240
[  295.363945][ T5934] usb 1-1: config 1 interface 2 has no altsetting 0
[  295.395341][ T5934] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  295.407976][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.434162][ T5934] usb 1-1: Product: 鏥شើ
[  295.439063][ T5934] usb 1-1: Manufacturer: ఉ
[  295.453834][ T5934] usb 1-1: SerialNumber: 㴵᣻䯜㏕㫯ᵕ敕췓⇟䵊ｔ㉩㦜㵴੦䩛穎筫挺흦ﰾ삎줱單詁䝤䓾欎졄猙ꊰ娭圤廭灞坃鞇ಃᡄၐ蜋胻ᮃ⹂偯겇휔鷔啕╤茧Ƭٷ풲萯섶꼝
[  295.473398][    C0] vkms_vblank_simulate: vblank timer overrun
[  295.780852][ T5934] usb 1-1: USB disconnect, device number 59
[  295.848588][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  296.480015][T10947] /dev/rnullb0: Can't open blockdev
[  297.096280][T10960] /dev/rnullb0: Can't open blockdev
[  298.286289][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.303988][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.493777][   T43] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  298.544184][T10978] net_ratelimit: 76 callbacks suppressed
[  298.544204][T10978] openvswitch: netlink: Key type 200 is out of range max 32
[  298.645699][   T43] usb 5-1: device descriptor read/64, error -71
[  298.884811][   T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  298.949630][T10990] syz.0.1479: attempt to access beyond end of device
[  298.949630][T10990] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0
[  298.966253][T10990] EXT4-fs (loop0): unable to read superblock
[  299.033646][   T43] usb 5-1: device descriptor read/64, error -71
[  299.122191][T10992] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  299.131248][T10992] /dev/rnullb0: Can't open blockdev
[  299.154039][   T43] usb usb5-port1: attempt power cycle
[  299.324308][T10995] binder_alloc: 10994: binder_alloc_buf size 12280 failed, no address space
[  299.346952][T10995] binder_alloc: allocated: 72 (num: 1 largest: 72), free: 12216 (num: 1 largest: 12216)
[  299.505694][   T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  299.536211][   T43] usb 5-1: device descriptor read/8, error -71
[  299.773662][   T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  299.814235][   T43] usb 5-1: device descriptor read/8, error -71
[  299.927913][   T43] usb usb5-port1: unable to enumerate USB device
[  301.371540][T11000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.562820][T11005] /dev/rnullb0: Can't open blockdev
[  302.035036][T11015] netlink: 'syz.0.1488': attribute type 4 has an invalid length.
[  302.057264][T11015] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1488'.
[  302.251411][T11017] /dev/rnullb0: Can't open blockdev
[  302.714533][T11029] /dev/rnullb0: Can't open blockdev
[  303.125329][T11039] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  303.150666][T11039] /dev/rnullb0: Can't open blockdev
[  306.167139][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  306.179821][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  306.188377][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  306.205338][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  306.213342][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  306.416520][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.522645][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.621501][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.709912][T11056] chnl_net:caif_netlink_parms(): no params data found
[  306.749548][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.934975][T11056] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.949179][T11056] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.961078][T11056] bridge_slave_0: entered allmulticast mode
[  306.972891][T11056] bridge_slave_0: entered promiscuous mode
[  306.981635][T11056] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.988880][T11056] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.996268][T11056] bridge_slave_1: entered allmulticast mode
[  307.004024][T11056] bridge_slave_1: entered promiscuous mode
[  307.119385][T11056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.166200][T11056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.290458][   T49] bridge_slave_1: left allmulticast mode
[  307.296885][   T49] bridge_slave_1: left promiscuous mode
[  307.305018][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.348202][   T49] bridge_slave_0: left allmulticast mode
[  307.359968][   T49] bridge_slave_0: left promiscuous mode
[  307.369807][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.108550][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.131636][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.147127][   T49] bond0 (unregistering): Released all slaves
[  308.170734][T11056] team0: Port device team_slave_0 added
[  308.225458][T11056] team0: Port device team_slave_1 added
[  308.239181][   T51] Bluetooth: hci3: command tx timeout
[  308.389153][T11056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.408004][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.442645][T11056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.485749][T11056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.497217][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.524430][T11056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.698273][   T49] hsr_slave_0: left promiscuous mode
[  308.720953][   T49] hsr_slave_1: left promiscuous mode
[  308.728637][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.744911][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.765052][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.772461][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.823146][   T49] veth1_macvtap: left promiscuous mode
[  308.830646][   T49] veth0_macvtap: left promiscuous mode
[  308.839204][   T49] veth1_vlan: left promiscuous mode
[  308.846134][   T49] veth0_vlan: left promiscuous mode
[  309.686366][   T49] team0 (unregistering): Port device team_slave_1 removed
[  309.747585][   T49] team0 (unregistering): Port device team_slave_0 removed
[  310.240281][T11056] hsr_slave_0: entered promiscuous mode
[  310.257870][T11056] hsr_slave_1: entered promiscuous mode
[  310.269312][T11056] debugfs: 'hsr0' already exists in 'hsr'
[  310.278220][T11056] Cannot create hsr debugfs directory
[  310.313569][   T51] Bluetooth: hci3: command tx timeout
[  310.879749][T11056] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  310.902540][T11056] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  310.941444][T11056] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  310.977715][T11056] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  311.171397][T11056] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.215428][T11056] 8021q: adding VLAN 0 to HW filter on device team0
[  311.233083][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.240252][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.251066][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.258258][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.708103][T11056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.264814][T11056] veth0_vlan: entered promiscuous mode
[  312.291490][T11056] veth1_vlan: entered promiscuous mode
[  312.346778][T11056] veth0_macvtap: entered promiscuous mode
[  312.358292][T11056] veth1_macvtap: entered promiscuous mode
[  312.386258][T11056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.407200][T11056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.413522][   T51] Bluetooth: hci3: command tx timeout
[  312.451576][ T1104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.476586][ T1104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.529436][ T1104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.566778][ T1104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.622809][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.650115][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.691411][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.714138][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.263068][T11192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1504'.
[  314.285962][T11192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1504'.
[  314.322565][T11192] /dev/rnullb0: Can't open blockdev
[  314.475365][   T51] Bluetooth: hci3: command tx timeout
[  314.537271][T11196] binder: 11195:11196 ioctl 4c82 0 returned -22
[  314.871049][T11208] /dev/rnullb0: Can't open blockdev
[  314.986806][T11210] /dev/rnullb0: Can't open blockdev
[  315.308524][T11223] /dev/rnullb0: Can't open blockdev
[  315.627500][T11231] /dev/rnullb0: Can't open blockdev
[  315.633399][T11231] /dev/rnullb0: Can't open blockdev
[  315.714878][T11231] /dev/rnullb0: Can't open blockdev
[  315.720821][T11231] /dev/rnullb0: Can't open blockdev
[  315.788374][T11231] /dev/rnullb0: Can't open blockdev
[  315.810158][T11231] /dev/rnullb0: Can't open blockdev
[  315.825475][T11231] /dev/rnullb0: Can't open blockdev
[  315.831499][T11231] /dev/rnullb0: Can't open blockdev
[  315.843277][T11231] /dev/rnullb0: Can't open blockdev
[  315.851698][T11231] /dev/rnullb0: Can't open blockdev
[  315.881195][T11231] /dev/rnullb0: Can't open blockdev
[  315.896294][T11231] /dev/rnullb0: Can't open blockdev
[  315.930157][T11235] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  315.931762][T11231] /dev/rnullb0: Can't open blockdev
[  315.944317][T11235] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  315.954863][T11235] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  315.968806][T11235] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  315.986376][T11231] /dev/rnullb0: Can't open blockdev
[  315.987053][T11235] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  316.009331][T11235] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  316.011480][T11231] /dev/rnullb0: Can't open blockdev
[  316.022361][T11231] /dev/rnullb0: Can't open blockdev
[  316.032373][T11231] /dev/rnullb0: Can't open blockdev
[  316.039821][T11235] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  316.057835][T11231] /dev/rnullb0: Can't open blockdev
[  316.068969][T11231] /dev/rnullb0: Can't open blockdev
[  316.077514][T11235] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  316.099124][T11231] /dev/rnullb0: Can't open blockdev
[  316.125336][T11231] /dev/rnullb0: Can't open blockdev
[  316.131618][T11231] /dev/rnullb0: Can't open blockdev
[  316.159926][T11231] /dev/rnullb0: Can't open blockdev
[  316.184309][T11231] /dev/rnullb0: Can't open blockdev
[  316.190209][T11231] /dev/rnullb0: Can't open blockdev
[  316.226533][T11231] /dev/rnullb0: Can't open blockdev
[  316.248690][T11231] /dev/rnullb0: Can't open blockdev
[  316.260941][T11231] /dev/rnullb0: Can't open blockdev
[  316.277679][T11231] /dev/rnullb0: Can't open blockdev
[  316.284586][T11231] /dev/rnullb0: Can't open blockdev
[  316.290474][T11231] /dev/rnullb0: Can't open blockdev
[  316.300077][T11231] /dev/rnullb0: Can't open blockdev
[  316.307290][T11231] /dev/rnullb0: Can't open blockdev
[  316.463612][ T5891] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  316.635231][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  316.665790][ T5891] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  316.683663][ T5934] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  316.706724][ T5891] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  316.758406][ T5891] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  316.788019][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.813554][ T5891] usb 4-1: Product: syz
[  316.817752][ T5891] usb 4-1: Manufacturer: syz
[  316.852992][ T5891] usb 4-1: SerialNumber: syz
[  316.864249][ T5934] usb 5-1: Using ep0 maxpacket: 8
[  316.892407][ T5934] usb 5-1: config 0 has an invalid interface number: 85 but max is 1
[  316.924001][ T5891] hub 4-1:1.0: bad descriptor, ignoring hub
[  316.938956][ T5934] usb 5-1: config 0 has an invalid interface number: 89 but max is 1
[  316.950383][ T5891] hub 4-1:1.0: probe with driver hub failed with error -5
[  317.084950][T11274] /dev/rnullb0: Can't open blockdev
[  317.123956][ T5891] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  317.264232][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  317.273017][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  317.336218][ T5934] usb 5-1: config 0 has no interface number 0
[  317.359806][ T5934] usb 5-1: config 0 has no interface number 1
[  317.393948][ T5891] usb 4-1: USB disconnect, device number 53
[  317.395471][ T5934] usb 5-1: New USB device found, idVendor=0e96, idProduct=c001, bcdDevice=62.3f
[  317.425381][ T5891] usblp0: removed
[  317.442793][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.482143][ T5934] usb 5-1: Product: syz
[  317.495553][ T5934] usb 5-1: Manufacturer: syz
[  317.516321][T11283] /dev/rnullb0: Can't open blockdev
[  317.526049][ T5934] usb 5-1: SerialNumber: syz
[  317.634531][ T5934] usb 5-1: config 0 descriptor??
[  317.652562][T11287] /dev/rnullb0: Can't open blockdev
[  317.855084][T11256] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1521'.
[  318.013773][   T51] Bluetooth: hci4: command 0x0c1a tx timeout
[  318.020142][   T51] Bluetooth: hci2: command 0x0c1a tx timeout
[  318.026698][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout
[  318.064378][ T5891] usb 5-1: USB disconnect, device number 24
[  318.074003][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[  318.144423][T11295] random: crng reseeded on system resumption
[  318.414273][T11304] /dev/rnullb0: Can't open blockdev
[  318.799045][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1534'.
[  318.808187][   T30] audit: type=1400 audit(1752904235.785:15): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11313 comm="syz.5.1534"
[  318.855782][T11314] /dev/rnullb0: Can't open blockdev
[  319.064107][T11330] /dev/rnullb0: Can't open blockdev
[  319.475970][ T7732] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  319.638396][ T7732] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  319.666373][ T7732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.694517][ T7732] usb 4-1: Product: syz
[  319.708667][ T7732] usb 4-1: Manufacturer: syz
[  319.723221][ T7732] usb 4-1: SerialNumber: syz
[  319.764459][ T7732] usb 4-1: config 0 descriptor??
[  319.790003][ T7732] ch341 4-1:0.0: ch341-uart converter detected
[  319.819100][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1545'.
[  320.073895][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout
[  320.153760][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[  320.503918][ T5934] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  320.592959][T11333] /dev/rnullb0: Can't open blockdev
[  320.601370][ T7732] usb 4-1: failed to send control message: -71
[  320.607841][ T7732] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  320.632104][ T7732] usb 4-1: USB disconnect, device number 54
[  320.657758][ T5934] usb 1-1: device descriptor read/64, error -71
[  320.668443][ T7732] ch341 4-1:0.0: device disconnected
[  320.926995][ T5934] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  321.018320][T11372] /dev/rnullb0: Can't open blockdev
[  321.093551][ T5934] usb 1-1: device descriptor read/64, error -71
[  321.215214][ T5934] usb usb1-port1: attempt power cycle
[  321.254484][T11374] /dev/rnullb0: Can't open blockdev
[  321.338233][T11378] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  321.386966][T11378] /dev/rnullb0: Can't open blockdev
[  321.574450][T11385] XFS (nullb0): Invalid superblock magic number
[  321.600095][ T5934] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  321.624352][ T5934] usb 1-1: device descriptor read/8, error -71
[  321.768222][T11398] sctp: [Deprecated]: syz.4.1559 (pid 11398) Use of int in maxseg socket option.
[  321.768222][T11398] Use struct sctp_assoc_value instead
[  321.796841][T11398] /dev/rnullb0: Can't open blockdev
[  321.873579][ T5934] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  321.924350][ T5934] usb 1-1: device descriptor read/8, error -71
[  322.012155][T11403] /dev/rnullb0: Can't open blockdev
[  322.034722][ T5934] usb usb1-port1: unable to enumerate USB device
[  322.163561][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout
[  322.233695][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout
[  322.916497][ T5869] IPVS: starting estimator thread 0...
[  323.027087][T11434] IPVS: using max 27 ests per chain, 64800 per kthread
[  323.051732][T11438] sp0: Synchronizing with TNC
[  323.143744][ T5971] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  323.223664][ T5869] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  323.294136][ T5971] usb 5-1: device descriptor read/64, error -71
[  323.316018][ T5934] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[  323.413587][ T5869] usb 4-1: Using ep0 maxpacket: 32
[  323.431076][ T5869] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  323.460616][ T5869] usb 4-1: config 0 has no interface number 0
[  323.483216][ T5869] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  323.493725][ T5934] usb 6-1: Invalid ep0 maxpacket: 64
[  323.512763][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.543158][ T5869] usb 4-1: Product: syz
[  323.563404][ T5869] usb 4-1: Manufacturer: syz
[  323.563908][ T5971] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  323.568096][ T5869] usb 4-1: SerialNumber: syz
[  323.607876][ T5869] usb 4-1: config 0 descriptor??
[  323.633707][ T5934] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  323.635716][ T5869] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  323.746985][ T5971] usb 5-1: device descriptor read/64, error -71
[  323.805557][ T5934] usb 6-1: Invalid ep0 maxpacket: 64
[  323.826236][ T5869] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  323.828894][ T5934] usb usb6-port1: attempt power cycle
[  323.873963][ T5971] usb usb5-port1: attempt power cycle
[  323.878563][ T5869] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  324.020302][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 210
[  324.029878][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 210
[  324.213844][ T5971] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  324.223690][ T5934] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  324.285953][ T5971] usb 5-1: device descriptor read/8, error -71
[  324.292228][ T5934] usb 6-1: Invalid ep0 maxpacket: 64
[  324.324348][ T7732] usb 4-1: USB disconnect, device number 55
[  324.326394][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  324.339498][ T7732] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  324.394015][ T7732] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  324.426637][ T5934] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[  324.438175][ T7732] quatech2 4-1:0.51: device disconnected
[  324.475378][ T5934] usb 6-1: Invalid ep0 maxpacket: 64
[  324.481775][ T5934] usb usb6-port1: unable to enumerate USB device
[  324.533649][ T5971] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  324.555340][ T5971] usb 5-1: device descriptor read/8, error -71
[  324.676297][ T5971] usb usb5-port1: unable to enumerate USB device
[  325.038147][T11469] /dev/rnullb0: Can't open blockdev
[  325.564579][T11479] netlink: 'syz.3.1580': attribute type 29 has an invalid length.
[  325.600703][T11479] netlink: 'syz.3.1580': attribute type 29 has an invalid length.
[  325.628230][T11479] netlink: 'syz.3.1580': attribute type 64 has an invalid length.
[  325.670128][T11479] /dev/rnullb0: Can't open blockdev
[  325.989674][T11491] syz.3.1584: attempt to access beyond end of device
[  325.989674][T11491] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  326.084331][T11491] syz.3.1584: attempt to access beyond end of device
[  326.084331][T11491] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0
[  326.127938][T11491] Mount JFS Failure: -5
[  326.445445][T11510] /dev/rnullb0: Can't open blockdev
[  326.814627][ T5869] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  326.856100][ T5907] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  326.973544][ T5869] usb 6-1: device descriptor read/64, error -71
[  327.019655][ T5907] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  327.048199][ T5907] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  327.085824][ T5907] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  327.105217][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.233661][ T5869] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  327.262634][T11538] /dev/rnullb0: Can't open blockdev
[  327.339983][ T5907] usb 5-1: usb_control_msg returned -32
[  327.351835][T11541] /dev/rnullb0: Can't open blockdev
[  327.363836][ T5907] usbtmc 5-1:16.0: can't read capabilities
[  327.388232][ T5869] usb 6-1: device descriptor read/64, error -71
[  327.402462][T11543] /dev/rnullb0: Can't open blockdev
[  327.514782][ T5869] usb usb6-port1: attempt power cycle
[  327.666024][T11550] /dev/rnullb0: Can't open blockdev
[  327.714247][T11552] /dev/rnullb0: Can't open blockdev
[  327.858610][T11556] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  327.873655][ T5869] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  327.905368][ T5869] usb 6-1: device descriptor read/8, error -71
[  328.173695][ T5869] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  328.193999][ T5869] usb 6-1: device descriptor read/8, error -71
[  328.303805][ T5869] usb usb6-port1: unable to enumerate USB device
[  328.473752][ T7732] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  328.643584][ T7732] usb 1-1: Using ep0 maxpacket: 32
[  328.655419][ T7732] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  328.677670][ T7732] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  328.703628][ T7732] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  328.733243][ T7732] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  328.752726][ T7732] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  328.768659][ T7732] usb 1-1: Product: syz
[  328.772958][ T7732] usb 1-1: Manufacturer: syz
[  328.783047][ T7732] usb 1-1: SerialNumber: syz
[  328.815677][ T7732] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input16
[  329.005620][ T7732] usb 1-1: USB disconnect, device number 64
[  329.011664][    C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  329.060478][ T7732] appletouch 1-1:1.0: input: appletouch disconnected
[  329.203109][ T5846] Bluetooth: hci2: Malformed LE Event: 0x0b
[  329.533546][ T7732] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  329.656735][ T5907] usb 5-1: USB disconnect, device number 29
[  329.663718][ T7732] usb 4-1: device descriptor read/64, error -71
[  329.782171][T11572] /dev/rnullb0: Can't open blockdev
[  329.903570][ T7732] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  330.055084][ T7732] usb 4-1: device descriptor read/64, error -71
[  330.165300][ T7732] usb usb4-port1: attempt power cycle
[  330.524522][ T7732] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  330.537310][T11603] /dev/rnullb0: Can't open blockdev
[  330.554431][ T7732] usb 4-1: device descriptor read/8, error -71
[  331.720608][ T7732] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  331.853963][T11628] /dev/rnullb0: Can't open blockdev
[  332.139963][T11631] /dev/rnullb0: Can't open blockdev
[  332.721154][ T7732] usb 4-1: device descriptor read/8, error -71
[  333.721441][ T7732] usb usb4-port1: unable to enumerate USB device
[  334.810203][T11648] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1624'.
[  334.906056][T11649] sctp: [Deprecated]: syz.5.1624 (pid 11649) Use of struct sctp_assoc_value in delayed_ack socket option.
[  334.906056][T11649] Use struct sctp_sack_info instead
[  335.038812][T11645] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1624'.
[  335.532153][T11657] /dev/rnullb0: Can't open blockdev
[  336.214103][ T5907] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  336.341817][T11684] /dev/rnullb0: Can't open blockdev
[  336.408804][ T5907] usb 4-1: Using ep0 maxpacket: 8
[  336.421594][ T5907] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  336.472964][ T5907] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  336.513248][ T5907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  336.543334][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.563532][ T5907] usb 4-1: Product: 힜￐༧㡮蠂我ⴣ먃掺ᤗ쪬㛩鏭ᚖ얳䉘੼艞ﭏ氻ꡓ靭靿굎긘淣쩡ᒳ⟝㘥옊䕥固鎆ᎌ᝼
[  336.613590][ T5907] usb 4-1: Manufacturer: 穈畏╼癆廡ꉌᢩ⇨疕ᔯ二꼤妉㲏쪎ᑌ鞛瀂獈⛎璨왣➾捦ꎖ欧땥฀ቼ⿺姢蹟Ǡ퇠뛘륽荽Ҫ牴퀾륞㪥劮魼밤㶵签䬵犼⹫芒蓞푡鸉붼퓨䷋餁报즦ⶎ᪰檿沰圾쒂
[  336.691718][ T5907] usb 4-1: SerialNumber: 钟缯䩓᪙쑄땩梘廱즷⸹쑸䴴噽枅䩖ㆆ饬㒀顠촊흠領᪁ࡦ鉎খ舷揎ノ驧련숊萮谲
[  336.778671][T11662] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  337.005080][ T5907] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  337.046402][ T5907] usb 4-1: USB disconnect, device number 60
[  337.378739][T11711] /dev/rnullb0: Can't open blockdev
[  337.752449][T11726] /dev/rnullb0: Can't open blockdev
[  337.981714][T11737] /dev/rnullb0: Can't open blockdev
[  338.253679][ T7732] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  338.314814][ T5869] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  338.324699][T11749] /dev/rnullb0: Can't open blockdev
[  338.424181][ T7732] usb 6-1: device descriptor read/64, error -71
[  338.463760][ T5869] usb 1-1: device descriptor read/64, error -71
[  338.473044][T11753] /dev/rnullb0: Can't open blockdev
[  338.499000][T11753] /dev/rnullb0: Can't open blockdev
[  338.663699][ T7732] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  338.726056][ T5869] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  338.823627][ T7732] usb 6-1: device descriptor read/64, error -71
[  338.883640][ T5869] usb 1-1: device descriptor read/64, error -71
[  338.933919][ T7732] usb usb6-port1: attempt power cycle
[  338.993943][ T5869] usb usb1-port1: attempt power cycle
[  339.305719][ T7732] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  339.345835][ T7732] usb 6-1: device descriptor read/8, error -71
[  339.356107][ T5869] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  339.393381][T11779] /dev/rnullb0: Can't open blockdev
[  339.394273][ T5869] usb 1-1: device descriptor read/8, error -71
[  339.622425][T11785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1656'.
[  339.637988][ T7732] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  339.663624][ T5869] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  339.676322][ T7732] usb 6-1: device descriptor read/8, error -71
[  339.697143][ T5869] usb 1-1: device descriptor read/8, error -71
[  339.805247][ T7732] usb usb6-port1: unable to enumerate USB device
[  339.834786][ T5869] usb usb1-port1: unable to enumerate USB device
[  341.024051][ T5934] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  341.139538][T11816] /dev/rnullb0: Can't open blockdev
[  341.165477][T11819] /dev/rnullb0: Can't open blockdev
[  341.212960][ T5934] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[  341.230096][ T5934] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  341.257366][ T5934] usb 4-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0
[  341.286946][ T5934] usb 4-1: config 48 interface 0 altsetting 98 has an invalid descriptor for endpoint zero, skipping
[  341.302269][ T5934] usb 4-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  341.323350][ T5934] usb 4-1: config 48 interface 0 has no altsetting 0
[  341.342241][ T5934] usb 4-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f
[  341.352284][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.362067][ T5934] usb 4-1: Product: syz
[  341.372159][ T5934] usb 4-1: Manufacturer: syz
[  341.379519][ T5934] usb 4-1: SerialNumber: syz
[  341.610924][T11811] /dev/rnullb0: Can't open blockdev
[  341.655688][ T5934] usb 4-1: USB disconnect, device number 61
[  341.910984][T11827] /dev/rnullb0: Can't open blockdev
[  342.014119][   T30] audit: type=1800 audit(1752904259.005:16): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1666" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  342.223966][T11835] /dev/rnullb0: Can't open blockdev
[  342.354207][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'.
[  342.377168][T11841] bridge_slave_1: left allmulticast mode
[  342.393673][T11841] bridge_slave_1: left promiscuous mode
[  342.407336][T11841] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.421384][T11841] bridge_slave_0: left allmulticast mode
[  342.444427][T11845] /dev/rnullb0: Can't open blockdev
[  342.449824][T11841] bridge_slave_0: left promiscuous mode
[  342.459275][T11841] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.486776][ T5907] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  342.654261][ T5907] usb 6-1: Using ep0 maxpacket: 32
[  342.668800][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.693487][ T5907] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  342.732052][ T5907] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  342.755286][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  342.786646][ T5907] usb 6-1: Product: syz
[  342.790848][ T5907] usb 6-1: Manufacturer: syz
[  342.811514][T11855] /dev/rnullb0: Can't open blockdev
[  342.838713][ T5907] usb 6-1: SerialNumber: syz
[  342.929548][ T5907] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input17
[  342.980474][T11860] /dev/rnullb0: Can't open blockdev
[  343.087665][ T5869] usb 6-1: USB disconnect, device number 14
[  343.133773][ T6744] udevd[6744]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  343.150404][ T5869] appletouch 6-1:1.0: input: appletouch disconnected
[  343.161075][ T6744] udevd[6744]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  344.188420][T11885] /dev/rnullb0: Can't open blockdev
[  344.950694][T11913] ./cgroup: Can't lookup blockdev
[  344.950884][T11914] ALSA: mixer_oss: invalid OSS volume './cgroup'
[  345.079007][T11916] /dev/rnullb0: Can't open blockdev
[  345.323555][ T5891] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  345.430516][T11929] cifs: Bad value for 'port'
[  345.485376][ T5891] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  345.515705][ T5891] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  345.537257][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  345.559732][ T5891] usb 5-1: config 1 has no interface number 0
[  345.576401][ T5891] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  345.614172][ T5891] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  345.653619][ T5891] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  345.684314][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.717757][ T5891] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  345.763878][ T7732] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  345.925932][ T5891] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  345.933665][ T7732] usb 6-1: device descriptor read/64, error -71
[  345.998793][ T5891] usb 5-1: USB disconnect, device number 30
[  346.027522][ T5891] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  346.155700][T11959] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1705'.
[  346.203595][ T7732] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  346.330245][T11966] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1705'.
[  346.358797][   T43] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  346.493535][ T7732] usb 6-1: device descriptor read/64, error -71
[  346.535469][   T43] usb 1-1: unable to get BOS descriptor or descriptor too short
[  346.557919][   T43] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  346.573538][   T43] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  346.613610][   T43] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  346.613890][ T7732] usb usb6-port1: attempt power cycle
[  346.622620][   T43] usb 1-1: config 1 has no interface number 1
[  346.622676][   T43] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  346.725708][   T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  346.743547][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.761791][   T43] usb 1-1: Product: syz
[  346.766117][   T43] usb 1-1: Manufacturer: syz
[  346.770728][   T43] usb 1-1: SerialNumber: syz
[  346.993675][ T7732] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  347.010031][T11956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.024487][ T7732] usb 6-1: device descriptor read/8, error -71
[  347.027355][T11956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.094867][   T43] usb 1-1: found format II with max.bitrate = 8, frame size=9
[  347.107529][   T43] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  347.146243][   T43] usb 1-1: USB disconnect, device number 69
[  347.214179][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  347.263552][ T7732] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  347.287099][ T7732] usb 6-1: device descriptor read/8, error -71
[  347.291144][T11978] tipc: Started in network mode
[  347.302682][T11978] tipc: Node identity 7ec073a93612, cluster identity 4711
[  347.312464][T11978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.324587][T11978] tipc: Disabling bearer <eth:syzkaller0>
[  347.403920][ T7732] usb usb6-port1: unable to enumerate USB device
[  347.849080][T11985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.890530][T11985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.088576][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'.
[  348.118152][T11991] MTD: Couldn't look up './file0': -15
[  348.354232][T11993] overlay: ./file0 is not a directory
[  348.783570][ T7732] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  348.844358][T11997] binder: 11996:11997 ioctl c018620c 200000000380 returned -22
[  348.943726][ T7732] usb 5-1: Using ep0 maxpacket: 8
[  348.971402][ T7732] usb 5-1: config 0 has an invalid interface number: 200 but max is 0
[  349.000043][ T7732] usb 5-1: config 0 has no interface number 0
[  349.018604][ T7732] usb 5-1: config 0 interface 200 has no altsetting 0
[  349.049615][ T7732] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  349.070218][ T7732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.100394][ T7732] usb 5-1: Product: syz
[  349.116610][ T7732] usb 5-1: Manufacturer: syz
[  349.127600][ T7732] usb 5-1: SerialNumber: syz
[  349.162919][ T7732] usb 5-1: config 0 descriptor??
[  349.398994][T11993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.433126][T11993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.552621][ T7732] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input18
[  349.605295][ T7732] usb 5-1: USB disconnect, device number 31
[  349.998868][T12014] /dev/rnullb0: Can't open blockdev
[  350.185962][T12018] /dev/rnullb0: Can't open blockdev
[  350.408275][T12022] /dev/rnullb0: Can't open blockdev
[  350.422635][T12024] netlink: 492 bytes leftover after parsing attributes in process `syz.3.1725'.
[  350.611166][T12030] lo speed is unknown, defaulting to 1000
[  350.638676][T12030] lo speed is unknown, defaulting to 1000
[  350.666453][T12030] lo speed is unknown, defaulting to 1000
[  350.711403][T12030] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  350.792254][T12030] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  350.973016][T12030] lo speed is unknown, defaulting to 1000
[  351.022849][T12030] lo speed is unknown, defaulting to 1000
[  351.035522][T12030] lo speed is unknown, defaulting to 1000
[  351.046937][T12030] lo speed is unknown, defaulting to 1000
[  351.065931][T12030] lo speed is unknown, defaulting to 1000
[  351.258587][T12046] /dev/rnullb0: Can't open blockdev
[  351.463736][ T7732] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  351.471397][ T5900] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  351.615630][T12057] Malformed UNC in devname
[  351.615630][T12057] 
[  351.622400][T12057] CIFS: VFS: Malformed UNC in devname
[  351.630508][ T7732] usb 1-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config
[  351.641023][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.653089][T12057] Malformed UNC in devname
[  351.653089][T12057] 
[  351.659944][ T7732] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  351.670961][ T5900] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  351.680224][T12057] CIFS: VFS: Malformed UNC in devname
[  351.685916][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.705978][ T7732] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  351.715372][ T7732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.723386][ T7732] usb 1-1: Product: syz
[  351.730384][ T5900] usb 5-1: config 0 descriptor??
[  351.735629][ T7732] usb 1-1: Manufacturer: syz
[  351.760686][ T7732] usb 1-1: SerialNumber: syz
[  351.775728][ T7732] usb 1-1: config 0 descriptor??
[  351.875961][T12061] siw: device registration error -23
[  351.957059][ T5900] usbhid 5-1:0.0: can't add hid device: -71
[  351.967911][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  351.995264][   T43] usb 1-1: USB disconnect, device number 70
[  352.020331][ T5900] usb 5-1: USB disconnect, device number 32
[  352.463560][ T5900] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  352.613974][T12069] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  352.624110][ T5900] usb 5-1: Using ep0 maxpacket: 32
[  352.636767][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.678755][ T5900] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  352.693540][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.726160][ T5900] usb 5-1: config 0 descriptor??
[  352.745109][ T5900] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  352.780371][ T5900] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  352.815576][T12072] /dev/rnullb0: Can't open blockdev
[  353.103686][ T5900] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  353.199971][T12044] /dev/rnullb0: Can't open blockdev
[  353.218681][ T5934] usb 5-1: USB disconnect, device number 33
[  353.235547][ T5934] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  353.273577][ T5900] usb 4-1: Using ep0 maxpacket: 32
[  353.285414][ T5900] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  353.308460][ T5900] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  353.323805][ T7732] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  353.332887][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.344231][ T5900] usb 4-1: Product: syz
[  353.350908][ T5900] usb 4-1: Manufacturer: syz
[  353.355712][ T5900] usb 4-1: SerialNumber: syz
[  353.371505][ T5900] usb 4-1: config 0 descriptor??
[  353.494013][ T7732] usb 1-1: Using ep0 maxpacket: 32
[  353.506109][ T7732] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  353.523496][ T7732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.531549][ T7732] usb 1-1: Product: syz
[  353.553765][ T7732] usb 1-1: Manufacturer: syz
[  353.558425][ T7732] usb 1-1: SerialNumber: syz
[  353.576722][ T7732] usb 1-1: config 0 descriptor??
[  353.590226][T12072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.622058][T12072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.786691][ T5900] usb 4-1: USB disconnect, device number 62
[  353.943400][T12095] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[  353.986043][ T7732] airspy 1-1:0.0: Board ID: 00
[  354.001125][ T7732] airspy 1-1:0.0: Firmware version: 
[  354.264516][T12103] siw: device registration error -23
[  354.787639][T12109] /dev/rnullb0: Can't open blockdev
[  354.800999][ T7732] airspy 1-1:0.0: usb_control_msg() failed -71 request 0f
[  354.839762][ T7732] airspy 1-1:0.0: Registered as swradio24
[  354.861717][ T7732] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  354.902508][ T7732] usb 1-1: USB disconnect, device number 71
[  355.047737][T12114] /dev/rnullb0: Can't open blockdev
[  355.313554][ T5900] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  355.485356][ T5900] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  355.525725][ T5900] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  355.533611][   T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  355.549760][ T5900] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[  355.563611][ T5900] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  355.587692][ T5900] usb 5-1: Manufacturer: syz
[  355.600621][ T5900] usb 5-1: SerialNumber: syz
[  355.726038][   T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  355.747009][   T43] usb 6-1: config 0 has no interfaces?
[  355.752544][   T43] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  355.782022][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.816550][   T43] usb 6-1: config 0 descriptor??
[  355.820715][T12116] /dev/rnullb0: Can't open blockdev
[  355.880108][ T5900] yealink 5-1:36.0: invalid payload size 6, expected 16
[  355.923850][ T5900] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input19
[  355.985951][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  355.993006][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.000167][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.010809][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.018474][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.025478][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.032468][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.039515][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.046530][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  356.053322][    C0] yealink 5-1:36.0: unexpected response 0
[  356.059329][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.066322][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  356.073115][    C0] yealink 5-1:36.0: unexpected response 0
[  356.079163][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.086153][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  356.092950][    C0] yealink 5-1:36.0: unexpected response 0
[  356.098884][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.106911][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  356.113707][    C0] yealink 5-1:36.0: unexpected response 0
[  356.119631][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.126709][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  356.133505][    C0] yealink 5-1:36.0: unexpected response 0
[  356.139438][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.146519][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  356.153322][    C0] yealink 5-1:36.0: unexpected response 0
[  356.159249][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.166263][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  356.173054][    C0] yealink 5-1:36.0: unexpected response 0
[  356.179024][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.186010][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  356.192798][    C0] yealink 5-1:36.0: unexpected response 0
[  356.198776][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.210544][    C0] yealink 5-1:36.0: urb_irq_callback - urb status -71
[  356.217364][    C0] yealink 5-1:36.0: unexpected response 0
[  356.224652][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.232155][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.239290][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.242514][T12130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.246276][    C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71
[  356.246301][    C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -19
[  356.246327][ T5900] usb 5-1: USB disconnect, device number 34
[  356.320574][T12130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.599200][ T5900] usb 6-1: USB disconnect, device number 19
[  357.474491][T12147] /dev/rnullb0: Can't open blockdev
[  357.510797][T12154] /dev/rnullb0: Can't open blockdev
[  357.531045][T12156] siw: device registration error -23
[  357.700842][T12161] /dev/rnullb0: Can't open blockdev
[  357.959850][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'.
[  358.104843][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.114435][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.122384][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.131105][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.139127][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.147123][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.160313][   T31] INFO: task syz.2.945:9178 blocked for more than 143 seconds.
[  358.168211][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.175994][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.194622][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.202343][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.210200][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.217981][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.225818][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.233598][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.241317][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.249149][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.258221][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.266151][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.274108][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.281821][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.289636][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.297438][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.305284][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.313017][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.314494][   T31]       Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
[  358.320789][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.336010][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.343838][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.351545][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.360629][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.368388][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.376166][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.384114][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.391845][ T5846] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  358.399744][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  358.408516][   T31] task:syz.2.945       state:D stack:25992 pid:9178  tgid:9177  ppid:5848   task_flags:0x400040 flags:0x00004004
[  358.420532][   T31] Call Trace:
[  358.423926][   T31]  <TASK>
[  358.426876][   T31]  __schedule+0x1737/0x4d30
[  358.431423][   T31]  ? __lock_acquire+0xab9/0xd20
[  358.436369][   T31]  ? schedule+0x165/0x360
[  358.440753][   T31]  ? __lock_acquire+0xab9/0xd20
[  358.445715][   T31]  ? __pfx___schedule+0x10/0x10
[  358.450605][   T31]  ? schedule+0x91/0x360
[  358.454942][   T31]  schedule+0x165/0x360
[  358.460418][   T31]  schedule_preempt_disabled+0x13/0x30
[  358.466000][   T31]  rwsem_down_write_slowpath+0xbec/0x1030
[  358.471727][   T31]  ? kasan_save_track+0x3e/0x80
[  358.476992][   T31]  ? __kasan_slab_alloc+0x6c/0x80
[  358.482101][   T31]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  358.487828][   T31]  ? rwsem_down_write_slowpath+0x7ec/0x1030
[  358.493974][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  358.500149][   T31]  ? __lock_acquire+0xab9/0xd20
[  358.505126][   T31]  ? __se_sys_mbind+0x613/0xc30
[  358.510025][   T31]  down_write+0x1ab/0x1f0
[  358.514420][   T31]  ? __pfx_down_write+0x10/0x10
[  358.519275][   T31]  ? rcu_is_watching+0x15/0xb0
[  358.524139][   T31]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  358.529520][   T31]  ? kmem_cache_alloc_noprof+0x21a/0x3c0
[  358.535273][   T31]  __se_sys_mbind+0x613/0xc30
[  358.539968][   T31]  ? __pfx_do_futex+0x10/0x10
[  358.544764][   T31]  ? __pfx___se_sys_mbind+0x10/0x10
[  358.549985][   T31]  ? __se_sys_futex+0x36f/0x400
[  358.555283][   T31]  ? rcu_is_watching+0x15/0xb0
[  358.560186][   T31]  ? __x64_sys_mbind+0x21/0xf0
[  358.566326][   T31]  do_syscall_64+0xfa/0x3b0
[  358.570872][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.576184][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.582263][   T31]  ? clear_bhb_loop+0x60/0xb0
[  358.587067][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.592998][   T31] RIP: 0033:0x7f8df4f8e9a9
[  358.597545][   T31] RSP: 002b:00007f8df5d4c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  358.606184][   T31] RAX: ffffffffffffffda RBX: 00007f8df51b5fa0 RCX: 00007f8df4f8e9a9
[  358.614268][   T31] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000
[  358.622280][   T31] RBP: 00007f8df5010ca1 R08: 0000000000000000 R09: 0000000000000000
[  358.630428][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.639074][   T31] R13: 0000000000000000 R14: 00007f8df51b5fa0 R15: 00007ffc16cc6c88
[  358.647425][   T31]  </TASK>
[  358.650576][   T31] 
[  358.650576][   T31] Showing all locks held in the system:
[  358.659206][   T31] 1 lock held by khungtaskd/31:
[  358.665565][   T31]  #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  358.675712][   T31] 7 locks held by kworker/u8:7/1162:
[  358.681021][   T31] 2 locks held by getty/5609:
[  358.687199][   T31]  #0: ffff888033bf50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  358.699255][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  358.709783][   T31] 1 lock held by syz.2.945/9177:
[  358.719090][   T31]  #0: ffff8880716bcd20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  358.730665][   T31] 1 lock held by syz.2.945/9178:
[  358.737919][   T31]  #0: ffff8880716bcd20 (&mm->mmap_lock){++++}-{4:4}, at: __se_sys_mbind+0x613/0xc30
[  358.748955][   T31] 1 lock held by syz.2.945/9179:
[  358.754131][   T31] 4 locks held by syz.3.1766/12164:
[  358.759364][   T31]  #0: ffff8880119e3208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  358.771554][   T31]  #1: ffffffff8f99bbf0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  358.783005][   T31]  #2: ffff8880310ca4d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640
[  358.805500][   T31]  #3: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  358.818178][   T31] 1 lock held by syz.4.1768/12171:
[  358.823393][   T31]  #0: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  358.838628][   T31] 
[  358.841064][   T31] =============================================
[  358.841064][   T31] 
[  358.856319][   T31] NMI backtrace for cpu 1
[  358.856337][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  358.856364][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  358.856374][   T31] Call Trace:
[  358.856380][   T31]  <TASK>
[  358.856388][   T31]  dump_stack_lvl+0x189/0x250
[  358.856418][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.856439][   T31]  ? __pfx__printk+0x10/0x10
[  358.856473][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  358.856497][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  358.856515][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.856546][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  358.856568][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  358.856590][   T31]  watchdog+0xf93/0xfe0
[  358.856613][   T31]  ? watchdog+0x1de/0xfe0
[  358.856636][   T31]  kthread+0x70e/0x8a0
[  358.856661][   T31]  ? __pfx_watchdog+0x10/0x10
[  358.856678][   T31]  ? __pfx_kthread+0x10/0x10
[  358.856700][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  358.856721][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.856739][   T31]  ? __pfx_kthread+0x10/0x10
[  358.856762][   T31]  ret_from_fork+0x3f9/0x770
[  358.856784][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  358.856809][   T31]  ? __switch_to_asm+0x39/0x70
[  358.856823][   T31]  ? __switch_to_asm+0x33/0x70
[  358.856837][   T31]  ? __pfx_kthread+0x10/0x10
[  358.856860][   T31]  ret_from_fork_asm+0x1a/0x30
[  358.856890][   T31]  </TASK>
[  358.856897][   T31] Sending NMI from CPU 1 to CPUs 0:
[  359.008302][    C0] NMI backtrace for cpu 0
[  359.008318][    C0] CPU: 0 UID: 0 PID: 9179 Comm: syz.2.945 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  359.008337][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  359.008347][    C0] RIP: 0010:mt_validate+0x26ca/0x4380
[  359.008371][    C0] Code: ff 0f 84 4d 01 00 00 e8 74 bc 47 f6 eb 36 e8 6d bc 47 f6 4c 8b 7c 24 20 48 83 7c 24 60 00 74 0a e8 5b bc 47 f6 e9 b6 00 00 00 <e8> 51 bc 47 f6 4d 89 f5 4c 2b 6c 24 08 49 ff c5 e9 a1 00 00 00 e8
[  359.008385][    C0] RSP: 0018:ffffc9000c4ff280 EFLAGS: 00000246
[  359.008399][    C0] RAX: ffffffff8b78434e RBX: ffffffff8cdac6a1 RCX: ffff88802c21da00
[  359.008410][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  359.008420][    C0] RBP: ffffc9000c4ff450 R08: ffff88802c21da00 R09: 0000000000000004
[  359.008430][    C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000004
[  359.008442][    C0] R13: 0000000000dda000 R14: 00001ffb4eae9fff R15: ffffffff8cdac701
[  359.008454][    C0] FS:  00007f8df5d2b6c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000
[  359.008466][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  359.008477][    C0] CR2: 00007fd9e2b83178 CR3: 000000007e3dc000 CR4: 00000000003526f0
[  359.008490][    C0] Call Trace:
[  359.008496][    C0]  <TASK>
[  359.008509][    C0]  ? __pfx_mt_validate+0x10/0x10
[  359.008541][    C0]  validate_mm+0xb6/0x4b0
[  359.008561][    C0]  ? __pfx_validate_mm+0x10/0x10
[  359.008588][    C0]  ? up_write+0x1c4/0x420
[  359.008605][    C0]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  359.008627][    C0]  vma_link+0x366/0x450
[  359.008647][    C0]  ? __pfx_vma_link+0x10/0x10
[  359.008667][    C0]  ? anon_vma_clone+0x49b/0x4f0
[  359.008683][    C0]  ? anon_vma_name+0x87/0xf0
[  359.008701][    C0]  copy_vma+0x70c/0x940
[  359.008723][    C0]  ? __pfx_copy_vma+0x10/0x10
[  359.008743][    C0]  ? __pfx_move_page_tables+0x10/0x10
[  359.008760][    C0]  ? rcu_is_watching+0x15/0xb0
[  359.008789][    C0]  move_vma+0x81f/0x1840
[  359.008810][    C0]  ? arch_get_unmapped_area_topdown+0x251/0xbc0
[  359.008833][    C0]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  359.008851][    C0]  ? __pfx_move_vma+0x10/0x10
[  359.008871][    C0]  ? mm_get_unmapped_area+0xa7/0xd0
[  359.008890][    C0]  ? cap_mmap_addr+0xb0/0x100
[  359.008907][    C0]  ? bpf_lsm_mmap_addr+0x9/0x20
[  359.008921][    C0]  ? security_mmap_addr+0x71/0x270
[  359.008942][    C0]  mremap_to+0x6d6/0x7a0
[  359.008963][    C0]  ? __pfx_mremap_to+0x10/0x10
[  359.008983][    C0]  ? check_prep_vma+0x740/0xae0
[  359.009005][    C0]  __se_sys_mremap+0xa0b/0xef0
[  359.009033][    C0]  ? __pfx___se_sys_mremap+0x10/0x10
[  359.009062][    C0]  ? do_syscall_64+0xbe/0x3b0
[  359.009079][    C0]  ? __x64_sys_mremap+0x20/0xc0
[  359.009098][    C0]  do_syscall_64+0xfa/0x3b0
[  359.009115][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  359.009132][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.009147][    C0]  ? clear_bhb_loop+0x60/0xb0
[  359.009162][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.009176][    C0] RIP: 0033:0x7f8df4f8e9a9
[  359.009189][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.009200][    C0] RSP: 002b:00007f8df5d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  359.009215][    C0] RAX: ffffffffffffffda RBX: 00007f8df51b6080 RCX: 00007f8df4f8e9a9
[  359.009226][    C0] RDX: 0000000000002000 RSI: 0000000000002000 RDI: 00002000003c9000
[  359.009236][    C0] RBP: 00007f8df5010ca1 R08: 00002000001de000 R09: 0000000000000000
[  359.009246][    C0] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  359.009255][    C0] R13: 0000000000000000 R14: 00007f8df51b6080 R15: 00007ffc16cc6c88
[  359.009273][    C0]  </TASK>
[  359.009412][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  359.380186][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  359.391479][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  359.401550][   T31] Call Trace:
[  359.404836][   T31]  <TASK>
[  359.407760][   T31]  dump_stack_lvl+0x99/0x250
[  359.412346][   T31]  ? __asan_memcpy+0x40/0x70
[  359.416929][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  359.422119][   T31]  ? __pfx__printk+0x10/0x10
[  359.426724][   T31]  vpanic+0x281/0x750
[  359.430720][   T31]  ? __pfx_vpanic+0x10/0x10
[  359.435222][   T31]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  359.440781][   T31]  ? preempt_schedule+0xae/0xc0
[  359.445644][   T31]  ? preempt_schedule_common+0x83/0xd0
[  359.451109][   T31]  panic+0xb9/0xc0
[  359.454825][   T31]  ? __pfx_panic+0x10/0x10
[  359.459226][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  359.464588][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  359.470733][   T31]  watchdog+0xfd2/0xfe0
[  359.474878][   T31]  ? watchdog+0x1de/0xfe0
[  359.479197][   T31]  kthread+0x70e/0x8a0
[  359.483265][   T31]  ? __pfx_watchdog+0x10/0x10
[  359.487941][   T31]  ? __pfx_kthread+0x10/0x10
[  359.492531][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  359.497725][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  359.502925][   T31]  ? __pfx_kthread+0x10/0x10
[  359.507537][   T31]  ret_from_fork+0x3f9/0x770
[  359.512137][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  359.517246][   T31]  ? __switch_to_asm+0x39/0x70
[  359.522004][   T31]  ? __switch_to_asm+0x33/0x70
[  359.526751][   T31]  ? __pfx_kthread+0x10/0x10
[  359.531337][   T31]  ret_from_fork_asm+0x1a/0x30
[  359.536100][   T31]  </TASK>
[  359.539400][   T31] Kernel Offset: disabled
[  359.543725][   T31] Rebooting in 86400 seconds..