last executing test programs:

3m22.10987467s ago: executing program 0 (id=208):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
socket$inet_sctp(0x2, 0x5, 0x84)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000)

3m21.524007316s ago: executing program 0 (id=213):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
fadvise64(r0, 0x7, 0x1ff, 0x1)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)

3m20.543417465s ago: executing program 0 (id=223):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8=r1], 0x14}}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507fd19c00400020208000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000870) (async)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) (async, rerun: 64)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async)
sendfile(r5, r4, 0x0, 0x7ffff000) (async)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x10, r6, 0xd6bb3000) (async)
r7 = socket$inet6(0xa, 0x80002, 0x0)
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000080)=')\x00', 0x2}], 0x1) (async)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) (async, rerun: 32)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)

3m20.390805875s ago: executing program 0 (id=224):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2d, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x236549d, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0})
ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000240))
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000640)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0)
sendfile(r2, r1, 0x0, 0x7fffefff)
r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000001c0)=0x1)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
fstat(r11, &(0x7f0000000140))
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_INIT(r11, &(0x7f0000000080)={0x50, 0x0, r12, {0x7, 0x2b, 0x6, 0x1200000, 0x6, 0x2, 0x1, 0xa51b, 0x0, 0x0, 0x4, 0x1c826108}}, 0x50)
ioctl$VIDIOC_S_FREQUENCY(r10, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b})
sendfile(r1, r1, 0x0, 0x7ffff000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x802, 0x0)
preadv(r11, &(0x7f0000000280)=[{&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000240)}, {&(0x7f00000041c0)=""/4106, 0x101c}], 0x3, 0x5d, 0x6b)

3m19.472171788s ago: executing program 0 (id=228):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000098000040"])
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r4=>0x0}, &(0x7f00000000c0)=0xc)
syz_open_procfs(r4, &(0x7f0000000100)='net/vlan/config\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000240))
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0xa, 0xbbb0, 0x300000000000, 0x2, 0x3, 0xbe, 0x709, 0x3, 0x81, 0xe141, 0xb52a, 0x5, 0x8, 0x6, 0xeb, 0x1007ffffffffffd], 0xf000, 0x281580})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a0ce6123f44ab89200000000000000000200000709000200e104ad77ee1ecddb0d73797a3000000000480008f71493cf8baeaff4ed04e11b3737d1801c0007801800148014000240fc010000000000000000000000000000100007800900120073797a32000000000c00078008000840000000100c000780d8507abe29161786824ccc54f853"], 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x40)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec9700003a2c00fe8000000000000000400000268629000000aa00000001670000000000c555ab9df0ee000089027a7830000000fc00000000000000000000000000000000000000000000000000ffffe00000010101a3da6f0a80f0871500"/121], 0x70)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)

3m19.256369384s ago: executing program 0 (id=231):
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x1400037e)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
read(r1, &(0x7f00000001c0)=""/46, 0x2e)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')

3m19.09528171s ago: executing program 32 (id=231):
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x1400037e)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
read(r1, &(0x7f00000001c0)=""/46, 0x2e)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')

3m2.863294125s ago: executing program 2 (id=344):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x66002, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3}}, 0x20)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
writev(r4, &(0x7f0000000500)=[{&(0x7f0000000180)="fd928da22a4a39b78897ab069387e346bc0f9a7ea2ba23780b0bb171", 0x1c}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x66002, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3}}, 0x20) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async)
writev(r4, &(0x7f0000000500)=[{&(0x7f0000000180)="fd928da22a4a39b78897ab069387e346bc0f9a7ea2ba23780b0bb171", 0x1c}], 0x1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)

3m2.506122497s ago: executing program 2 (id=345):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

3m1.61972149s ago: executing program 2 (id=349):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88982, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
unshare(0x2040400) (async)
syz_clone3(&(0x7f0000000440)={0x100040000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000)

2m58.48236577s ago: executing program 2 (id=365):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000)
futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x100000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m57.805716596s ago: executing program 2 (id=370):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48, 0x0, 0x100000005}]}) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000)

2m57.289695914s ago: executing program 2 (id=374):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="1081", 0x2, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @random="83f047e9529c"}, 0x10)
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
dup2(r5, r3)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x4, 0x0, [{0x4, 0x9, 0x7, 0x1, 0x4, 0x2, 0x1ff}, {0x80000001, 0x800, 0x1, 0x6, 0x1, 0x2, 0x5}, {0x40000001, 0x1, 0x6, 0x1, 0x2, 0x3}, {0x6, 0x0, 0x2, 0x8, 0x7, 0x0, 0x9}]})
r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
sendfile(r0, r0, 0x0, 0x7ffff000)

2m42.082502319s ago: executing program 33 (id=374):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="1081", 0x2, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @random="83f047e9529c"}, 0x10)
r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
dup2(r5, r3)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x4, 0x0, [{0x4, 0x9, 0x7, 0x1, 0x4, 0x2, 0x1ff}, {0x80000001, 0x800, 0x1, 0x6, 0x1, 0x2, 0x5}, {0x40000001, 0x1, 0x6, 0x1, 0x2, 0x3}, {0x6, 0x0, 0x2, 0x8, 0x7, 0x0, 0x9}]})
r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}})
sendfile(r0, r0, 0x0, 0x7ffff000)

2m19.394604219s ago: executing program 1 (id=594):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
unshare(0x22020600)
ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
personality(0x5400004)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6})
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r5, 0x7dfff000)

2m18.485877831s ago: executing program 1 (id=597):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000)
syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xbc, 0x0, 0x9, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in6=@local, 0x4d2, 0x33}, 0x0, @in=@empty}, {{@in=@remote, 0x0, 0x32}, 0x20, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f0000000100))
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840)
madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000140)={0x10001, 0xbb571c22784b985f, 0x2})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m17.61554858s ago: executing program 1 (id=604):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8c000, 0x0)
r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
copy_file_range(r2, 0x0, r2, 0x0, 0xb51, 0x0)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, <r4=>0xffffffffffffffff})
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x7, 0x4, {<r6=>0x0}, {}, 0x6ed6, 0x7})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x6000)
setresuid(0xee01, r7, r7)
r8 = getgid()
r9 = syz_open_dev$hidraw(&(0x7f0000000380), 0x7, 0xc0080)
r10 = userfaultfd(0x80800)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)=<r11=>0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, <r12=>0x0}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}, 0x2020)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002740)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000002840)=0xe8)
statx(0xffffffffffffffff, &(0x7f0000002880)='./file0\x00', 0x1000, 0x1, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
r16 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002c00)={0x0, &(0x7f00000029c0)=[@uexit={0x0, 0x18, 0x8c}, @wr_crn={0x46, 0x20, {0x4, 0x101}}, @wrmsr={0x1e, 0x20, {0x9ba, 0x4}}, @uexit={0x0, 0x18, 0x401}, @wrmsr={0x1e, 0x20, {0x99d, 0x9}}, @uexit={0x0, 0x18, 0x100}, @wrmsr={0x1e, 0x20, {0x407, 0x7}}, @wr_crn={0x46, 0x20, {0x0, 0x80000000}}, @code={0xa, 0x76, {"430feef40f20c035100000000f22c0b9180a00000f322e0fc733f658eec74424008c000000c7442402eece85c0ff2c24c744240011000000c744240200800000ff2c24440f06c744240000800000c744240200000080c7442406000000000f011c240f01c9"}}, @wr_crn={0x46, 0x20, {0x2, 0x281}}, @rdmsr={0x32, 0x18, {0x2c3}}, @uexit={0x0, 0x18, 0x7fffffff}, @rdmsr={0x32, 0x18, {0x774}}, @cpuid={0x14, 0x18, {0x1, 0xf2}}, @wr_crn={0x46, 0x20, {0xf, 0x6}}, @uexit={0x0, 0x18, 0x3ff}], 0x216})
sendmmsg$unix(r1, &(0x7f0000002c80)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="c99c2eccae4dad7f154d0ae977c7", 0xe}, {&(0x7f0000000140)="c2579dba13fc25faaf34aab4b6510349624d9c45f2b219553e1f6ab13fedd31984ef5c2a204d0a637cb0e7a3542e17af77860a46896efd10922b87c71e98856181b4cd5e23fbba08f86d4eccf2c9fc9d6796cdf8d2cc428c4f9b8b48b974308031fa9364d9b05268ba2224ba5fc71b6baec3aeba168ea250fab2ffb0962f2c1cfc40e91515ac0462bb941aa90f806bc851944f23d1c879ef40e35e2d5f696343d839240d07bab9d451c8264b1655544c78ba0b2dc6926e48cd0a01e7ac1a1a8c90", 0xc1}], 0x2, &(0x7f0000002440)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r2, 0xffffffffffffffff, r3, r0, r0, 0xffffffffffffffff, r0, r4]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r5, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r9, r0, r0, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}], 0x118, 0x11}}, {{&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002600)="6ab612cde4bde7d3e49e32cf517bfc10ef2ec83a21c2bc7b028fcb9107af844dbf79ec5e45d57fc227782df53e4dde24ff639e4837238ca41790e018864d9eb6b95a326a9e82ba4a9c3f07f72c9f", 0x4e}, {&(0x7f0000002680)="23f3d04465764f12678d2fc5f629655d6bbc7cceca8fee29ac59d2c13186632780ee06a0918269507b79d7e5595170425cc37ea77a66cab13b9923912f4acc65e3dfaa8260c29f4a06a062046d426943c47fec74be974d49d0a64695444834ebee5f7526d8f6", 0x66}], 0x2, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x1c, 0x1, 0x1, [r0, r16, r0]}}], 0x40, 0x20004000}}], 0x2, 0x40)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m17.301272887s ago: executing program 1 (id=606):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
setpgid(0x0, r1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x42, 0x80)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236cd1f8d50f2568ac466a6d40024f87588cbe7808c481b157f18acb07cee62b1d238ba704435ee1c055697eb1ee0e2cfa36d2efbf1ac9fa85fe4", 0xfdae}], 0x1)

2m17.264560432s ago: executing program 1 (id=607):
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) (async)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000380)=""/91, 0x5b}], 0x4, &(0x7f0000000400)=""/145, 0x91}, 0x12140)

2m17.016841058s ago: executing program 1 (id=608):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x831, r0, 0x52fbf000)
r1 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0)
ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000000c0)={0x9, "d8b5010000000000a75cb992001000"})
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=0x8000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r5, 0x4004ae86, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0)

2m16.818538125s ago: executing program 34 (id=608):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x831, r0, 0x52fbf000)
r1 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0)
ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000000c0)={0x9, "d8b5010000000000a75cb992001000"})
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=0x8000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r5, 0x4004ae86, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0)

5.166048039s ago: executing program 4 (id=1484):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
process_madvise(r2, 0x0, 0x0, 0x18, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3) (async)
ptrace$setregset(0x4211, r3, 0x200, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'wlan0\x00'})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x100, 0x9b02}) (async)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x10) (async, rerun: 32)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.984624223s ago: executing program 4 (id=1485):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r1])
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_interrupt={0x1, {0x0, 0x1}, 0x5, 0x6, &(0x7f0000000000)="657cf503dfee1347bf7f63805d8ddb37ae0b3bd225fd3f7cd89de6b6799078fe35b4e77a61c8f62a34002698628c2eae45c8f927be89b3944c3323df0b5bf5156e4254e5902be1536c389244190163cc9beef809d2d91081bb", 0x59, 0x7, 0x8, 0x0, 0x5, 0x8, &(0x7f0000000140)="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"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a31"], 0xe4}}, 0x200000d4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

3.482367685s ago: executing program 3 (id=1493):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) (async)
r1 = syz_open_dev$video(&(0x7f0000000040), 0x41a4, 0x0)
ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x0, "6f2699bf988913927a7f60763318f4d49461aa1a41a0d3264519fee88f3c3a8e"})
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r2, 0x2000) (async)
mincore(&(0x7f0000699000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/94)
syz_open_dev$tty1(0xc, 0x4, 0x2)

3.38192154s ago: executing program 3 (id=1494):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff}) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20500)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="9fa6dc89e777bbb7aa44ab05b9c9742e117231c10d5ed361093bdda17bd15b0de2024552e8244ad3083b45e34c4769cd168727b6ca5f1be2e1c5d7704269ebba11d9171849d53fceb364ac7b7541237a0dfbd6a53d6181471f4faee8e55571cf54de104f62e38d6543b62d840baf686c3879a6c9a60d361e4d7967e9a6151704f3721dd76a4079d88b22e0431deb85a9a87c3d362dd617190bb7963ff3053b6781ff4ba24503358dfe081146e0629c7b7eb8a394683e478fe9741d52e45437295e47c57cc8216ea9f7ea03b11bdd3861a657eae25f243372", @ANYBLOB="00042abd7000fcdbdf252500000008000300", @ANYRES32=r2, @ANYBLOB="4157cc40037897c0dd693603bbf6cf66fa3a749059daa5b6581a84d8c9cfca543694e1aedd83593cdb87d2056bd526b8c587c00ef5661421a41a6eafde7977992c6ed9f2e02721939be94ed79f53c9a44f70e429383cf4286de1f87bba78318d495c0895c959fbc8b707175588f37f38396297749c9461c8d3b44d632dc1517aff4abdbdab709bc6f943da45f2b2"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10)
r3 = socket$inet(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) (async)
sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='\b\x00', 0x2}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165642, 0x0) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r4, &(0x7f0000000180)={&(0x7f0000000240), 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x2000c884) (async, rerun: 32)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) (rerun: 32)
syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$uac1(r5, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="000f0100000077"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201602"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000280)={0xfffffffffffffd52, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r5, 0x0, 0x0) (async)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r5, 0x0, 0x0) (rerun: 32)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)

2.762228853s ago: executing program 5 (id=1497):
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000100)={{@any, 0x4}, 0x8b9, 0xe70, 0x7f, 0x10001, 0xe335, 0x100, 0x3})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690100000109021b00010000000009040000010e01000009058103"], 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0)

1.925371095s ago: executing program 4 (id=1498):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000)

1.925144434s ago: executing program 3 (id=1499):
mkdir(&(0x7f0000001580)='./file0\x00', 0x8)
mount$tmpfs(0x0, &(0x7f0000004cc0)='./file0\x00', &(0x7f0000004d00), 0x800000, &(0x7f0000004d40)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x2c, 0x31]}}}}]})
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.777114632s ago: executing program 3 (id=1500):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={r4, 0x4}, 0x8)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r5, 0xebe3b000)
r6 = socket(0x11, 0x800000002, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x3fff, 0x0, 0x0, @fd=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000010) (async)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x3fff, 0x0, 0x0, @fd=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000010)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) (async)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}})
ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000040)={0x1, 0x6})
r8 = pidfd_getfd(r7, r7, 0x0)
openat$cgroup(r8, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) (async)
r9 = openat$cgroup(r8, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r9, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.538251652s ago: executing program 3 (id=1501):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
fadvise64(r0, 0x8, 0x1fd, 0x1)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)

1.535627073s ago: executing program 5 (id=1502):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
fadvise64(r0, 0x7, 0x1ff, 0x1)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1bb)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @multicast}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc)

1.493105328s ago: executing program 4 (id=1503):
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000200)={0x0, 0xd, 0x3, "6e145c0ef608314ceb833d278fe1d4dd16331c3e1ef459aa6db8a9f4d600", 0x30313953})
poll(&(0x7f0000001880)=[{r0, 0x40}], 0x1, 0x9)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x188, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x7c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x98, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x2000c800}, 0x800)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x6, 0x4, 0x40})
sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040))
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0)

1.472582237s ago: executing program 6 (id=1504):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800770e"], 0x28}, 0x1, 0x0, 0x0, 0x8881}, 0x48010)
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

1.33021487s ago: executing program 4 (id=1505):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000040)={0x5, 0x0, 0x3010, 0x10001, 0xa, {0x2, 0x2}, 0x1})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f00000001c0)=0x4, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x5, 0x0, &(0x7f0000000180))
sendfile(r1, r0, 0x0, 0x7fffefff)
sendfile(r0, r0, 0x0, 0x7ffff000)

1.328046678s ago: executing program 6 (id=1506):
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)="170000000200020000ffbe8c5ee17688a2003300030100000065fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf780aa738061f15003901dee2a75f61000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f03d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa", 0xb8)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2014120000001b19fabda560da0781c2106a5bd2cb999f14"], 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

1.284866969s ago: executing program 5 (id=1507):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="c2", 0x1200}], 0x1) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0011023}]}) (async)
r6 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000034000)={0xb, {{0xa, 0x1, 0xffffdfff, @mcast2, 0x10000001}}}, 0x88)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000000c0)=ANY=[], 0x118) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (rerun: 64)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x2, 0xfffffffffffffffa, 0x4, 0xcb, 0x1, 0xd736, 0xc57f, 0xcc12, 0x9, 0x1000, 0x7f, 0x4, 0x5, 0x5, 0x5], 0xeeee8000, 0x40800})
getsockopt$inet6_buf(r6, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async)
sendmmsg$inet6(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='T', 0x1}], 0x1}}], 0x1, 0x800) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff})
r9 = dup3(r2, r8, 0x0)
write$cgroup_int(r9, &(0x7f0000000240)=0x4, 0x12)
prlimit64(0x0, 0x3, &(0x7f0000000000)={0xd74d, 0xc}, 0x0) (async)
syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

653.39727ms ago: executing program 6 (id=1508):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000)
cachestat(r0, &(0x7f0000000000)={0x5, 0x5}, &(0x7f0000000040), 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x1000})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)
mremap(&(0x7f000085f000/0x1000)=nil, 0x1000, 0x13000, 0x4, &(0x7f0000018000/0x13000)=nil)

554.002534ms ago: executing program 3 (id=1509):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}])
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xa)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ptrace(0x10, r4)
prctl$PR_SET_SECUREBITS(0x1c, 0x1a)
prctl$PR_SET_SECUREBITS(0x1c, 0x20)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="fd8d00000000000000000300000008000300", @ANYRES32=r8], 0x30}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r9, 0x5708e000)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r11, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4040)
ptrace$poke(0x5, r4, &(0x7f0000000080), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r3, 0xa471a000)

553.212981ms ago: executing program 6 (id=1510):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xc2ac0, 0x0)
mlockall(0x1)
mlockall(0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)
r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000200)={0x0, 0xc, 0x6, 0x69d1, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c000)
mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r1, 0x4, 0x20010, r3, 0x0)

411.182711ms ago: executing program 4 (id=1511):
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000100)={{@any, 0x4}, 0x10, 0xe70, 0x7f, 0x10001, 0xe335, 0x100, 0x3})
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x0)
unshare(0x42040480)
r3 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r4, 0x29, 0xcf, 0x0, &(0x7f0000002080)=0xffffffffffffffa2)
utimensat(r3, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0)

238.977833ms ago: executing program 5 (id=1512):
r0 = creat(&(0x7f0000000140)='./cgroup\x00', 0x14)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0)
write$ppp(r1, &(0x7f0000000280)="3626c23b4045141220a8d49c30b2641afa6f5eafe7d60f052959a5a3f9288f52734978b9f1101f6d5dda75562dc32d9e370e730830c25c245945fece7dbfaaa2b3e4000012e0d9c227323a243d7d1657070a7a81dfb0c9b7e96d449b0c7bc9b0a44a068140411bdcfa5958e58f552b23c8f82f38c8fa3c9ed175841aba0453059cac6497f1273eff3f924b1c2f3c53d8cfad09835448b1640eaec3308bc29bbc2de65804b5f07b0d6630f5cba1d42de269dfcc43ab49987bdf93549be05d69e7ec4071b419c6f1800deedd913bfa9970dc38fb0000000000001784000000000000", 0xfffffffffffffcb0) (async)
close(r0) (async)
r2 = getpid()
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x300, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) (async)
syz_pidfd_open(r2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x18, 0x68, 0x50, 0x20, 0x17cc, 0x1020, 0x167b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xea, 0x9e, 0x28}}]}}]}}, 0x0) (async)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x80089203, 0x200000000000000)
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000004000000000000030000000000770004000000ff"], 0x325100) (async)
syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x181081)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) (async)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x0)

142.159258ms ago: executing program 5 (id=1513):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt(r0, 0x0, 0x7f, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0)
r2 = socket$inet(0x2, 0x5, 0x1000)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0xc0800)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3)
write$char_usb(r4, &(0x7f0000000240)="21649a28cb9711cbfba644f2f6ff6db7f12170ce628f58f47667044b076944e9286276ea81500c9a6b1f4a9b6130c0861cbad232e9576c87ee4a45c723f6a85f92c1fd158b85d44b5ae434acec23872792345d580b47f0a5bef30e730fa1e5b16eadf7e89b0a1b1e9e4a5359d4de7b5f259d6fde8b435750abaf0c4d1823ae65f1da8cbdf82c10feb86239e288d80d665f8285653d11e0c3373bd1029024e6024ce16687624c76243e50fce78ded421a018eb182eee42adb25d8ec9efeb5612dadc7bd45bb1015c8276740a05ba9b19a038bd7d2982e7a767187556ea154603b983a", 0xe2)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}]})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000200)={r5, &(0x7f0000000100)=""/240})
sendfile(r2, r1, 0x0, 0x7ffff000)

97.092851ms ago: executing program 5 (id=1514):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000134000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
read(r0, &(0x7f00000000c0)=""/230, 0xe6)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)={0x78, r3, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x6, 0x1, 0xbb, 0x3, 0x7, <r4=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000000)={0x0, 0x33, 0x2, @tid=r4}, &(0x7f0000000240)) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) (async)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000099000040"])
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r11 = dup(r10)
write$UHID_INPUT(r11, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) (async, rerun: 64)
write$uinput_user_dev(r11, &(0x7f0000000480)={'syz0\x00', {0x8, 0xb5e, 0x9, 0x400}, 0x26, [0x6, 0xfff, 0xffffffff, 0x5, 0x368a, 0x9, 0x10000, 0xffffffff, 0xfffffffb, 0x8, 0x5, 0x0, 0xc5e1, 0x28000000, 0x0, 0xffffffff, 0x100, 0x8, 0x0, 0x8000, 0x7, 0x7f, 0xfffffffd, 0x1, 0x2, 0x7ff, 0xa2, 0x4000000, 0x45c5, 0x16eb990f, 0xeec, 0x3, 0x800, 0x3, 0x6, 0x6, 0x66, 0x9, 0x7, 0xffff, 0x7, 0x5, 0x1, 0x2, 0x8001, 0x2, 0xf4, 0x6, 0x1, 0x7, 0x6, 0xf, 0x8, 0x9e59, 0x5426, 0x5, 0xfffff0a4, 0xf, 0x1, 0x0, 0x400, 0x6, 0x4cf2, 0x3], [0x8, 0x8, 0x2, 0x2, 0x8, 0x6, 0x6, 0x4, 0x401, 0x5a, 0x6, 0x98a, 0x1, 0xe, 0x2400, 0x101, 0x5, 0x2, 0x1, 0x2, 0x6, 0x4, 0x7fff, 0xb503, 0x10, 0x4, 0x400, 0x3, 0xffffffff, 0x3, 0x101, 0x7, 0x5, 0x0, 0x64, 0x0, 0x8, 0xff, 0x5, 0x1, 0x2899, 0xd9df, 0x1, 0x4, 0xf, 0x1ff, 0x9, 0x6, 0x8, 0x9, 0x40, 0x0, 0x8, 0x2, 0x10000, 0x1, 0x4, 0x9, 0x7fff, 0x6, 0x3ff, 0x401, 0x1, 0xfa], [0x9, 0x3, 0x1000, 0x5c6, 0x1, 0x9, 0x7, 0x0, 0x4f, 0x9, 0x3, 0xbc2, 0x5, 0x6, 0xfb4, 0x7, 0xfffffffc, 0x3, 0x1, 0x7fff, 0x70dbc5ef, 0xb, 0x8, 0x1, 0x1ff, 0x4, 0x400, 0x80000000, 0x0, 0x0, 0x7, 0xc3, 0x3, 0x10000, 0x5, 0x4, 0x4, 0x3ff, 0xb, 0x3c, 0x909, 0x6, 0x2, 0x3, 0x2, 0x8d1e, 0x8, 0x879b, 0x22, 0xb, 0xd4df, 0xb, 0x5, 0x1000, 0x3, 0x9, 0x7, 0x1000, 0x7e, 0x3, 0x1000, 0x5, 0x40, 0x1], [0x6, 0x0, 0x10, 0x7, 0x2, 0x8, 0x4, 0x5, 0xffffffff, 0x1000, 0x1, 0xd, 0x7, 0xfff, 0x81, 0x8, 0x0, 0x8, 0xfffffffd, 0xe6e, 0x10001, 0xf2, 0x768, 0x80, 0xba, 0x3, 0x101, 0x0, 0x3, 0x0, 0x40, 0x8000, 0xffff, 0x4, 0x802, 0x200, 0x0, 0x6, 0x8, 0x4, 0x5, 0x8, 0x6, 0x0, 0x3b16, 0x5, 0xfffffffa, 0x10001, 0x114f, 0xf1, 0x5, 0x31, 0x8, 0x0, 0x2, 0x9, 0x1, 0xfffff001, 0x6, 0x24, 0xe94, 0x5d2d, 0x40, 0x400]}, 0x45c) (async, rerun: 64)
ptrace(0x10, r6) (async)
ptrace$poke(0x5, r6, &(0x7f0000000080), 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000)

91.111741ms ago: executing program 6 (id=1515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, r0, 0xfffff000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x242c18, 0x0)

0s ago: executing program 6 (id=1516):
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)="170000000200020000ffbe8c5ee17688a2003300030100000065fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf780aa738061f15003901dee2a75f61000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f03d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa", 0xb8)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2014120000001b19fabda560da0781c2106a5bd2cb999f14"], 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

kernel console output (not intermixed with test programs):

 189.604479][ T8861] /dev/rnullb0: Can't open blockdev
[  189.759112][ T8865] Bluetooth: MGMT ver 1.23
[  189.940279][ T8874] /dev/rnullb0: Can't open blockdev
[  190.088592][ T8878] /dev/rnullb0: Can't open blockdev
[  190.133334][ T8880] syz0: rxe_newlink: already configured on wlan1
[  190.153184][ T8880] /dev/rnullb0: Can't open blockdev
[  190.536251][ T5905] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  190.686565][ T5905] usb 4-1: device descriptor read/64, error -71
[  190.946476][ T5905] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  191.095525][ T5905] usb 4-1: device descriptor read/64, error -71
[  191.207664][ T5905] usb usb4-port1: attempt power cycle
[  191.545412][ T5905] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  191.585599][ T5905] usb 4-1: device descriptor read/8, error -71
[  191.845852][ T5905] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  191.886173][ T5905] usb 4-1: device descriptor read/8, error -71
[  191.995469][ T5905] usb usb4-port1: unable to enumerate USB device
[  193.320474][ T8930] /dev/rnullb0: Can't open blockdev
[  193.377542][ T8932] netlink: 44 bytes leftover after parsing attributes in process `syz.3.772'.
[  193.425134][ T8932] netlink: 43 bytes leftover after parsing attributes in process `syz.3.772'.
[  193.455876][ T8932] netlink: 'syz.3.772': attribute type 6 has an invalid length.
[  193.463667][ T8932] netlink: 'syz.3.772': attribute type 5 has an invalid length.
[  193.473415][ T8939] /dev/rnullb0: Can't open blockdev
[  193.488521][ T8932] netlink: 43 bytes leftover after parsing attributes in process `syz.3.772'.
[  193.723332][ T8953] /dev/rnullb0: Can't open blockdev
[  193.738363][ T8953] /dev/rnullb0: Can't open blockdev
[  193.944049][ T8964] blkio.reset_stats is deprecated
[  194.479368][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.486521][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  195.385744][ T8984] /dev/rnullb0: Can't open blockdev
[  195.705115][ T5912] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  195.860631][ T5912] usb 4-1: Using ep0 maxpacket: 32
[  195.870843][ T5912] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46
[  195.881857][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.893351][ T5912] usb 4-1: config 0 descriptor??
[  196.110461][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.123964][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.139646][ T8986] /dev/rnullb0: Can't open blockdev
[  196.147269][ T5912] usb 4-1: USB disconnect, device number 53
[  196.455300][    T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  196.595325][    T9] usb 7-1: device descriptor read/64, error -71
[  196.781597][ T9004] trusted_key: syz.5.795 sent an empty control message without MSG_MORE.
[  196.794045][ T9004] /dev/rnullb0: Can't open blockdev
[  196.838265][    T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  196.991895][ T9008] /dev/rnullb0: Can't open blockdev
[  196.997402][    T9] usb 7-1: device descriptor read/64, error -71
[  197.107731][    T9] usb usb7-port1: attempt power cycle
[  197.454074][ T9028] rdma_rxe: rxe_newlink: failed to add wlan1
[  197.460512][    T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  197.477936][ T9028] /dev/rnullb0: Can't open blockdev
[  197.488258][    T9] usb 7-1: device descriptor read/8, error -71
[  197.725327][    T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  197.733547][ T9038] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  197.760675][    T9] usb 7-1: device descriptor read/8, error -71
[  197.766510][ T9038] /dev/rnullb0: Can't open blockdev
[  197.885786][    T9] usb usb7-port1: unable to enumerate USB device
[  198.173619][ T9054] /dev/rnullb0: Can't open blockdev
[  198.283057][ T9062] /dev/rnullb0: Can't open blockdev
[  198.329561][ T9060] /dev/rnullb0: Can't open blockdev
[  198.613595][ T9081] netlink: 'syz.4.815': attribute type 46 has an invalid length.
[  198.723937][ T9086] /dev/rnullb0: Can't open blockdev
[  198.845293][   T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  198.997760][   T10] usb 4-1: Using ep0 maxpacket: 16
[  199.017328][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.038403][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  199.059808][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  199.078277][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  199.093549][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  199.103040][   T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  199.123289][   T10] usb 4-1: Manufacturer: syz
[  199.135833][   T10] usb 4-1: config 0 descriptor??
[  199.547148][ T9111] /dev/sg0: Can't lookup blockdev
[  200.510039][ T9122] /dev/rnullb0: Can't open blockdev
[  200.689379][ T9129] tmpfs: Bad value for 'huge'
[  200.928765][ T9138] /dev/rnullb0: Can't open blockdev
[  201.004593][ T9140] netlink: 64 bytes leftover after parsing attributes in process `syz.6.826'.
[  201.487946][ T5912] usb 4-1: USB disconnect, device number 54
[  201.613115][ T9152] /dev/rnullb0: Can't open blockdev
[  201.858628][ T9167] /dev/rnullb0: Can't open blockdev
[  201.866056][ T9169] /dev/rnullb0: Can't open blockdev
[  201.938165][ T9161] /dev/rnullb0: Can't open blockdev
[  202.542437][ T9195] block nbd3: Attempted send on invalid socket
[  202.548837][ T9195] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  202.658276][ T9208] /dev/rnullb0: Can't open blockdev
[  202.846203][ T5905] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  202.935155][ T5862] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  202.995101][ T5905] usb 4-1: Using ep0 maxpacket: 32
[  203.001816][ T5905] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  203.010433][ T5905] usb 4-1: config 0 has no interface number 0
[  203.016878][ T5905] usb 4-1: config 0 interface 12 has no altsetting 0
[  203.026130][ T5905] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  203.035842][ T5905] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  203.044084][ T5905] usb 4-1: Product: syz
[  203.049056][ T5905] usb 4-1: Manufacturer: syz
[  203.053659][ T5905] usb 4-1: SerialNumber: syz
[  203.059626][ T5905] usb 4-1: config 0 descriptor??
[  203.095204][ T5862] usb 6-1: Using ep0 maxpacket: 16
[  203.104625][ T5862] usb 6-1: config 0 has an invalid interface number: 58 but max is 0
[  203.113109][ T5862] usb 6-1: config 0 has no interface number 0
[  203.119313][ T5862] usb 6-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  203.129271][ T5862] usb 6-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  203.139282][ T5862] usb 6-1: config 0 interface 58 has no altsetting 0
[  203.147861][ T5862] usb 6-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03
[  203.157114][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.165170][ T5862] usb 6-1: Product: syz
[  203.169405][ T5862] usb 6-1: Manufacturer: syz
[  203.174027][ T5862] usb 6-1: SerialNumber: syz
[  203.185859][ T5862] usb 6-1: config 0 descriptor??
[  203.191555][ T9211] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  203.202013][ T9211] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  203.221005][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.847'.
[  203.231416][ T5862] ums-isd200 6-1:0.58: USB Mass Storage device detected
[  203.232475][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.847'.
[  203.271375][ T5905] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -32
[  203.279120][ T5905] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32
[  203.287160][ T5905] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32
[  203.294824][ T5905] f81534 4-1:0.12: probe with driver f81534 failed with error -32
[  203.346876][ T9220] /dev/rnullb0: Can't open blockdev
[  203.396555][ T9225] netlink: 52 bytes leftover after parsing attributes in process `syz.6.849'.
[  203.418226][ T9225] netlink: 'syz.6.849': attribute type 58 has an invalid length.
[  203.431509][ T9211] /dev/rnullb0: Can't open blockdev
[  203.481607][ T5862] ums-isd200 6-1:0.58: probe with driver ums-isd200 failed with error -22
[  203.510905][ T9226] /dev/rnullb0: Can't open blockdev
[  203.517803][ T9231] /dev/rnullb0: Can't open blockdev
[  203.631980][ T5912] usb 6-1: USB disconnect, device number 10
[  203.680511][ T9240] /dev/rnullb0: Can't open blockdev
[  203.765553][ T9244] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  203.987448][ T5862] usb 4-1: USB disconnect, device number 55
[  204.035407][   T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  204.119285][ T9258] netlink: 116 bytes leftover after parsing attributes in process `syz.4.859'.
[  204.120450][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'.
[  204.188115][   T10] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  204.197699][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.206378][   T10] usb 7-1: Product: syz
[  204.210594][   T10] usb 7-1: Manufacturer: syz
[  204.215572][   T10] usb 7-1: SerialNumber: syz
[  204.221756][   T10] usb 7-1: config 0 descriptor??
[  204.325171][ T5862] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  204.475197][ T5862] usb 4-1: device descriptor read/64, error -71
[  204.720082][ T5862] usb 4-1: new full-speed USB device number 57 using dummy_hcd
[  204.834715][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.843755][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.853138][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.861906][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.865209][ T5862] usb 4-1: device descriptor read/64, error -71
[  204.884144][   T10] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  204.900267][   T10] asix 7-1:0.0: probe with driver asix failed with error -71
[  204.911822][   T10] usb 7-1: USB disconnect, device number 17
[  204.935208][   T24] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  204.986354][ T5862] usb usb4-port1: attempt power cycle
[  205.085184][   T24] usb 6-1: Invalid ep0 maxpacket: 64
[  205.215162][   T24] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  205.345240][ T5862] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  205.365129][   T24] usb 6-1: Invalid ep0 maxpacket: 64
[  205.370842][   T24] usb usb6-port1: attempt power cycle
[  205.376492][ T5862] usb 4-1: device descriptor read/8, error -71
[  205.493839][ T9271] /dev/rnullb0: Can't open blockdev
[  206.445326][ T5862] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  206.453060][   T24] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  206.489298][ T5862] usb 4-1: device descriptor read/8, error -71
[  206.495757][   T24] usb 6-1: Invalid ep0 maxpacket: 64
[  206.530542][ T9281] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  206.539539][ T9282] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  206.606679][ T5862] usb usb4-port1: unable to enumerate USB device
[  206.625153][   T24] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  206.645845][   T24] usb 6-1: Invalid ep0 maxpacket: 64
[  206.651337][   T24] usb usb6-port1: unable to enumerate USB device
[  206.684562][ T9285] /dev/rnullb0: Can't open blockdev
[  206.716135][ T5188] Bluetooth: hci0: command tx timeout
[  207.076650][   T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  207.225257][   T24] usb 7-1: Using ep0 maxpacket: 8
[  207.233149][   T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  207.243127][   T24] usb 7-1: config 0 has no interface number 0
[  207.249339][   T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  207.264946][   T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  207.274330][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.287259][   T24] usb 7-1: config 0 descriptor??
[  207.298517][   T24] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  207.349688][ T9313] /dev/rnullb0: Can't open blockdev
[  207.465243][ T5862] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  207.622456][ T9323] /dev/rnullb0: Can't open blockdev
[  207.628151][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  207.640279][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.650756][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  207.675835][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  207.709568][ T5862] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  207.730442][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.763230][    T9] usb 7-1: USB disconnect, device number 18
[  207.766198][ T5862] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  207.797117][ T5862] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  207.817567][ T5862] usb 4-1: Manufacturer: syz
[  207.834025][ T5862] usb 4-1: config 0 descriptor??
[  208.155436][ T5862] rc_core: IR keymap rc-hauppauge not found
[  208.161486][ T5862] Registered IR keymap rc-empty
[  208.167354][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.205161][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.236246][ T5862] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  208.249668][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23
[  208.265678][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.295602][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.335143][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.357257][ T9347] /dev/rnullb0: Can't open blockdev
[  208.364735][ T9347] /dev/rnullb0: Can't open blockdev
[  208.375483][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.418788][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.505140][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.537203][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.555461][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.575646][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.625156][ T5862] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  208.640592][ T9362] syzkaller1: entered promiscuous mode
[  208.649936][ T9362] syzkaller1: entered allmulticast mode
[  208.657073][ T5862] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  208.717740][ T5862] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  208.743246][ T5862] usb 4-1: USB disconnect, device number 60
[  208.856422][ T9372] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  209.022142][ T5188] Bluetooth: hci4: Unknown advertising packet type: 0x31
[  209.294530][ T9382] /dev/rnullb0: Can't open blockdev
[  209.511535][ T3097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  209.535356][ T3097] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  209.786656][ T9384] /dev/rnullb0: Can't open blockdev
[  210.710407][ T9397] /dev/rnullb0: Can't open blockdev
[  211.447466][ T9437] block nbd4: Attempted send on invalid socket
[  211.453683][ T9437] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  211.481262][ T9437] hpfs: hpfs_map_sector(): read error
[  212.049324][ T9482] netlink: 'syz.4.923': attribute type 5 has an invalid length.
[  212.067366][ T9482] netlink: 'syz.4.923': attribute type 10 has an invalid length.
[  212.125357][   T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  212.210822][ T9488] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  212.221333][ T9488] netlink: 14428 bytes leftover after parsing attributes in process `syz.3.925'.
[  212.230855][ T9488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.287369][   T10] usb 6-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  212.296224][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 204
[  212.305683][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.319397][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.330827][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  212.343873][   T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  212.356783][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.366040][   T10] usb 6-1: config 0 descriptor??
[  212.385240][    T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  212.535195][    T9] usb 7-1: Using ep0 maxpacket: 32
[  212.543350][    T9] usb 7-1: config 0 has an invalid interface number: 196 but max is 0
[  212.552468][    T9] usb 7-1: config 0 has no interface number 0
[  212.559482][    T9] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  212.569619][    T9] usb 7-1: config 0 interface 196 has no altsetting 0
[  212.579160][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  212.588342][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.596512][    T9] usb 7-1: Product: syz
[  212.600684][    T9] usb 7-1: Manufacturer: syz
[  212.605401][    T9] usb 7-1: SerialNumber: syz
[  212.611374][    T9] usb 7-1: config 0 descriptor??
[  212.620293][ T9485] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  212.783884][   T10] input: HID 28bd:0909 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0909.000D/input/input24
[  212.860876][   T10] uclogic 0003:28BD:0909.000D: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.5-1/input0
[  212.986257][ T9472] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  213.310428][ T9503] ptrace attach of "./syz-executor exec"[5870] was attempted by ""[9503]
[  213.447211][ T5188] block nbd2: Receive control failed (result -32)
[  213.535455][    T9] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: -110
[  213.547039][    T9] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached
[  213.725286][   T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  213.893615][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  213.912170][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  213.927381][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  213.937618][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  213.954314][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  213.963827][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.979237][   T10] usb 4-1: config 0 descriptor??
[  214.074688][    T9] usb 7-1: USB disconnect, device number 19
[  214.168103][    T9] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected
[  214.244316][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  214.254277][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  214.274235][   T10] usb 4-1: USB disconnect, device number 61
[  214.292063][ T9543] /dev/rnullb0: Can't open blockdev
[  214.874382][ T9472] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  214.969200][ T3097] usb 6-1: USB disconnect, device number 15
[  215.035102][ T5188] Bluetooth: hci1: command 0x0c1a tx timeout
[  215.073408][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.151123][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.227562][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.272044][ T9594] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  215.284253][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.295090][ T9594] /dev/rnullb0: Can't open blockdev
[  215.365350][   T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  215.489832][   T13] bridge_slave_1: left allmulticast mode
[  215.511363][   T13] bridge_slave_1: left promiscuous mode
[  215.526014][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.557213][   T24] usb 4-1: Using ep0 maxpacket: 32
[  215.572304][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.587036][   T13] bridge_slave_0: left allmulticast mode
[  215.592714][   T13] bridge_slave_0: left promiscuous mode
[  215.627055][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.653543][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.674179][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  215.686091][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.702885][   T24] usb 4-1: config 0 descriptor??
[  215.712716][   T24] hub 4-1:0.0: USB hub found
[  215.912965][   T24] hub 4-1:0.0: config failed, can't read hub descriptor (err -90)
[  215.950567][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.980613][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.008658][   T13] bond0 (unregistering): Released all slaves
[  216.355580][   T24] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0
[  216.469353][ T9625] netdevsim netdevsim4: Direct firmware load for 2
[  216.469353][ T9625]  failed with error -2
[  216.485500][ T5948] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  216.507075][ T9625] netdevsim netdevsim4: Falling back to sysfs fallback for: 2
[  216.507075][ T9625] 
[  216.542506][   T13] hsr_slave_0: left promiscuous mode
[  216.550625][   T13] hsr_slave_1: left promiscuous mode
[  216.563228][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.571104][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.584297][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.592626][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.607077][   T13] veth1_macvtap: left promiscuous mode
[  216.612649][   T13] veth0_macvtap: left promiscuous mode
[  216.618625][   T13] veth1_vlan: left promiscuous mode
[  216.623954][   T13] veth0_vlan: left promiscuous mode
[  216.635451][ T5948] usb 7-1: device descriptor read/64, error -71
[  216.635589][   T24] usb 4-1: USB disconnect, device number 62
[  216.708501][ T9631] netlink: 'syz.4.946': attribute type 4 has an invalid length.
[  216.809726][   T13] team0 (unregistering): Port device team_slave_1 removed
[  216.822645][   T13] team0 (unregistering): Port device team_slave_0 removed
[  216.891098][ T5948] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  217.025137][ T5948] usb 7-1: device descriptor read/64, error -71
[  217.092136][ T9643] batadv_slave_0: entered promiscuous mode
[  217.145348][ T5948] usb usb7-port1: attempt power cycle
[  217.495279][ T5948] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  217.525834][ T5948] usb 7-1: device descriptor read/8, error -71
[  217.659013][ T9660] input: syz0 as /devices/virtual/input/input25
[  217.779107][ T5948] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  217.815869][ T5948] usb 7-1: device descriptor read/8, error -71
[  217.933826][ T9642] batadv_slave_0: left promiscuous mode
[  217.942065][ T5948] usb usb7-port1: unable to enumerate USB device
[  217.975359][   T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  218.115103][   T24] usb 6-1: device descriptor read/64, error -71
[  218.275530][ T5912] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  218.365956][   T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  218.416910][ T5912] usb 4-1: device descriptor read/64, error -71
[  218.515098][   T24] usb 6-1: device descriptor read/64, error -71
[  218.625398][   T24] usb usb6-port1: attempt power cycle
[  218.665235][ T5912] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  218.805268][ T5912] usb 4-1: device descriptor read/64, error -71
[  218.915741][ T5912] usb usb4-port1: attempt power cycle
[  218.967574][   T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  218.996535][   T24] usb 6-1: device descriptor read/8, error -71
[  219.229504][ T9713] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  219.235909][   T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  219.275757][   T24] usb 6-1: device descriptor read/8, error -71
[  219.285213][ T5912] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  219.315841][ T5912] usb 4-1: device descriptor read/8, error -71
[  219.390354][   T24] usb usb6-port1: unable to enumerate USB device
[  219.575444][ T5912] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  219.605754][ T5912] usb 4-1: device descriptor read/8, error -71
[  219.715405][ T5912] usb usb4-port1: unable to enumerate USB device
[  219.819495][ T9719] /dev/rnullb0: Can't open blockdev
[  220.095930][ T5948] usb 7-1: new low-speed USB device number 24 using dummy_hcd
[  220.247052][ T5948] usb 7-1: unable to get BOS descriptor or descriptor too short
[  220.256645][ T5948] usb 7-1: config 1 has an invalid interface number: 61 but max is 0
[  220.264873][ T5948] usb 7-1: config 1 has no interface number 0
[  220.271129][ T5948] usb 7-1: config 1 interface 61 has no altsetting 0
[  220.280696][ T5948] usb 7-1: string descriptor 0 read error: -22
[  220.287201][ T5948] usb 7-1: New USB device found, idVendor=12d1, idProduct=3605, bcdDevice=e4.b0
[  220.296477][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.308544][ T5948] huawei_cdc_ncm 7-1:1.61: CDC Union missing and no IAD found
[  220.316276][ T5948] huawei_cdc_ncm 7-1:1.61: bind() failure
[  220.509875][ T9721] overlayfs: missing 'lowerdir'
[  220.516152][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.524766][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.534547][ T3097] usb 7-1: USB disconnect, device number 24
[  220.975241][ T5948] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  221.078518][ T9744] netlink: 32 bytes leftover after parsing attributes in process `syz.3.968'.
[  221.125155][ T5948] usb 6-1: Using ep0 maxpacket: 16
[  221.133638][ T5948] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 77, changing to 10
[  221.146123][ T5948] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1080, setting to 1024
[  221.158554][ T5948] usb 6-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  221.172043][ T5948] usb 6-1: config 1 interface 0 has no altsetting 0
[  221.182482][ T5948] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b1c, bcdDevice= 0.40
[  221.192099][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.203386][ T5948] usb 6-1: Product: syz
[  221.207857][ T5948] usb 6-1: Manufacturer: 㨱㩚າ駟ㄹ壸㮠䠕ⓕᓒṢ䀦댜羰癦珏䈋铦㝔⹦攩ėⲂ撛쑐ޫѯ㰊ꂭ娣琓ￗ浿탠蛮ꂃ᲋Ḇ嫀⽜閼뷓莗锗嗵ꨛ懪狃픂貮쮘ꉾ䜡갓㶇阰﷩쾊컊ཾ䥑眅⳸濐
[  221.232151][ T5948] usb 6-1: SerialNumber: syz
[  221.239493][ T9739] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  221.252440][ T9747] /dev/rnullb0: Can't open blockdev
[  221.260243][ T9748] /dev/rnullb0: Can't open blockdev
[  221.414296][ T9758] /dev/rnullb0: Can't open blockdev
[  221.447090][ T9760] libceph: resolve '400' (ret=-3): failed
[  221.485466][ T3097] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  221.625388][ T3097] usb 4-1: device descriptor read/64, error -71
[  221.653410][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.666028][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.818059][ T1164] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  221.875108][ T3097] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  221.893422][ T5948] usbhid 6-1:1.0: can't add hid device: -71
[  221.900273][ T5948] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  221.915159][ T5948] usb 6-1: USB disconnect, device number 20
[  222.015141][ T3097] usb 4-1: device descriptor read/64, error -71
[  222.126545][ T3097] usb usb4-port1: attempt power cycle
[  222.475426][ T3097] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  222.495898][ T3097] usb 4-1: device descriptor read/8, error -71
[  222.745254][ T3097] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  222.788157][ T3097] usb 4-1: device descriptor read/8, error -71
[  222.813941][ T9775] fuse: Unknown parameter 'f5Z0x0000000000000003'
[  222.915513][ T3097] usb usb4-port1: unable to enumerate USB device
[  223.095082][   T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  223.231403][ T9787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  223.245467][   T10] usb 7-1: device descriptor read/64, error -71
[  223.485810][   T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  223.637135][   T10] usb 7-1: device descriptor read/64, error -71
[  223.765731][   T10] usb usb7-port1: attempt power cycle
[  223.965164][ T5905] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  224.084951][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  224.093714][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  224.103226][ T9834] netlink: 'syz.4.991': attribute type 9 has an invalid length.
[  224.115232][ T5905] usb 6-1: Using ep0 maxpacket: 16
[  224.116339][   T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  224.128771][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  224.144148][ T9834] /dev/rnullb0: Can't open blockdev
[  224.150840][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.174006][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  224.185780][   T10] usb 7-1: device descriptor read/8, error -71
[  224.195807][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  224.226531][ T5905] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  224.242682][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  224.249699][ T9842] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  224.264038][ T9842] /dev/rnullb0: Can't open blockdev
[  224.269487][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  224.285071][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  224.293222][ T5905] usb 6-1: Manufacturer: syz
[  224.317211][ T5905] usb 6-1: config 0 descriptor??
[  224.437420][   T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  224.438106][ T9847] Invalid ELF header magic: != ELF
[  224.538323][   T10] usb 7-1: device descriptor read/8, error -71
[  224.656948][   T10] usb usb7-port1: unable to enumerate USB device
[  225.317797][ T5905] rc_core: IR keymap rc-hauppauge not found
[  225.323764][ T5905] Registered IR keymap rc-empty
[  225.345235][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.365113][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.395451][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  225.416645][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input26
[  225.435198][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.465174][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.485210][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.508435][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.537618][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.553491][ T9863] /dev/rnullb0: Can't open blockdev
[  225.565456][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.585832][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.619171][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.656777][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.685717][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  225.688396][ T9867] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.706222][ T9867] I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.721579][ T9867] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  225.724074][ T5905] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  225.731546][ T9867] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.751568][ T9867] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  225.755097][ T5905] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  225.771044][ T9867] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.786490][ T5905] usb 6-1: USB disconnect, device number 21
[  225.794035][ T9867] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.819413][ T9867] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  225.835629][ T9867] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.848284][ T9867] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  225.859212][ T9867] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.869498][ T9867] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.881006][ T9867] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  225.923172][ T9867] I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.932735][ T9867] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  225.942851][ T9867] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  225.954567][ T9867] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  225.964688][ T9867] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  225.975313][ T9867] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  226.345244][ T5948] usb 7-1: new low-speed USB device number 29 using dummy_hcd
[  226.428138][ T9884] /dev/rnullb0: Can't open blockdev
[  226.509165][ T5948] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  226.518778][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.533257][ T5948] usb 7-1: config 0 descriptor??
[  227.054948][ T9905] /dev/rnullb0: Can't open blockdev
[  227.064706][ T9905] /dev/rnullb0: Can't open blockdev
[  227.525147][   T24] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  227.655170][   T24] usb 6-1: device descriptor read/64, error -71
[  227.895367][   T24] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  228.025134][   T24] usb 6-1: device descriptor read/64, error -71
[  228.139543][   T24] usb usb6-port1: attempt power cycle
[  228.505807][   T24] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  228.526393][   T24] usb 6-1: device descriptor read/8, error -71
[  228.775169][   T24] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  228.816821][   T24] usb 6-1: device descriptor read/8, error -71
[  228.925593][   T24] usb usb6-port1: unable to enumerate USB device
[  229.185646][ T5948] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  229.199388][ T5948] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  229.211369][ T5948] asix 7-1:0.0: probe with driver asix failed with error -71
[  229.223338][ T5948] usb 7-1: USB disconnect, device number 29
[  229.365305][   T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  229.517035][   T24] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  229.526312][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.536216][   T24] usb 4-1: config 0 descriptor??
[  229.847813][ T9955] syzkaller1: entered promiscuous mode
[  229.850448][ T9951] comedi comedi3: pcl724: a I/O base address must be specified
[  229.853364][ T9955] syzkaller1: entered allmulticast mode
[  229.946059][ T9960] /dev/rnullb0: Can't open blockdev
[  230.842673][T10006] rdma_rxe: rxe_newlink: failed to add wlan1
[  230.864301][T10010] /dev/rnullb0: Can't open blockdev
[  230.955205][ T5905] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  230.968795][T10015] /dev/rnullb0: Can't open blockdev
[  231.128859][T10034] /dev/rnullb0: Can't open blockdev
[  231.145165][ T5905] usb 6-1: Using ep0 maxpacket: 32
[  231.162111][ T5905] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  231.187259][ T5905] usb 6-1: config 0 interface 0 has no altsetting 0
[  231.206505][ T5905] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  231.218692][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.233287][ T5188] Bluetooth: hci2: SCO packet for unknown connection handle 1
[  231.246179][ T5905] usb 6-1: config 0 descriptor??
[  231.298718][T10046] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1040'.
[  231.478382][T10052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.488339][T10052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.500923][ T5905] corsair-cpro 0003:1B1C:0C10.000F: item fetching failed at offset 3/5
[  231.510913][ T5905] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -22
[  231.533659][   T24] usb 4-1: Cannot set autoneg
[  231.539276][   T24] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  231.558926][   T24] usb 4-1: USB disconnect, device number 71
[  231.645146][ T5912] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  231.696147][ T9994] /dev/rnullb0: Can't open blockdev
[  231.703154][ T5905] usb 6-1: USB disconnect, device number 26
[  231.775134][ T5912] usb 7-1: device descriptor read/64, error -71
[  232.016375][ T5912] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  232.145093][ T5912] usb 7-1: device descriptor read/64, error -71
[  232.242742][   T30] audit: type=1326 audit(1756653808.455:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.5.1045" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f013a38ebe9 code=0x0
[  232.267017][ T5912] usb usb7-port1: attempt power cycle
[  232.553511][T10069] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.1047'.
[  232.820425][T10075] overlayfs: workdir and upperdir must reside under the same mount
[  233.165133][ T5905] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  233.345972][ T5905] usb 4-1: Using ep0 maxpacket: 32
[  233.364949][ T5905] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  233.374234][ T5905] usb 4-1: config 0 has no interface number 0
[  233.380531][ T5905] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  233.394870][ T5905] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  233.415119][ T5912] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  233.423901][ T5905] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  233.434884][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.443813][ T5905] usb 4-1: Product: syz
[  233.448491][ T5912] usb 7-1: device descriptor read/8, error -71
[  233.457771][ T5905] usb 4-1: Manufacturer: syz
[  233.462529][ T5905] usb 4-1: SerialNumber: syz
[  233.470217][ T5905] usb 4-1: config 0 descriptor??
[  233.687643][ T5905] radio-si470x 4-1:0.35: this is not a si470x device.
[  233.705099][ T5912] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  233.725794][ T5912] usb 7-1: device descriptor read/8, error -71
[  233.803109][T10086] /dev/rnullb0: Can't open blockdev
[  233.845132][ T5912] usb usb7-port1: unable to enumerate USB device
[  233.888752][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.909925][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.930742][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.951910][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.995163][ T5905] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  234.020381][ T5905] usb 4-1: USB disconnect, device number 72
[  234.663858][T10098] afs: Unknown parameter 'auto#ell'
[  235.825101][   T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  235.977377][   T10] usb 6-1: config 0 has an invalid interface number: 107 but max is 0
[  235.989291][   T10] usb 6-1: config 0 has no interface number 0
[  236.005408][   T10] usb 6-1: config 0 interface 107 altsetting 140 bulk endpoint 0x4 has invalid maxpacket 64
[  236.025129][   T10] usb 6-1: config 0 interface 107 has no altsetting 0
[  236.040675][   T10] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice=a5.5f
[  236.050489][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.067456][   T10] usb 6-1: Product: syz
[  236.075951][   T10] usb 6-1: Manufacturer: syz
[  236.086185][   T10] usb 6-1: SerialNumber: syz
[  236.100153][   T10] usb 6-1: config 0 descriptor??
[  236.115385][T10103] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  236.414169][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.448285][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.616797][   T10] ti_usb_3410_5052 6-1:0.107: TI USB 5052 2 port adapter converter detected
[  236.639674][   T10] ti_usb_3410_5052 6-1:0.107: missing endpoints
[  236.647515][ T5862] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  236.685188][   T10] usb 6-1: USB disconnect, device number 27
[  236.787543][ T5862] usb 4-1: device descriptor read/64, error -71
[  236.787918][T10118] FAULT_INJECTION: forcing a failure.
[  236.787918][T10118] name failslab, interval 1, probability 0, space 0, times 1
[  236.835065][T10118] CPU: 0 UID: 0 PID: 10118 Comm: syz.5.1064 Not tainted syzkaller #0 PREEMPT(full) 
[  236.835095][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  236.835107][T10118] Call Trace:
[  236.835115][T10118]  <TASK>
[  236.835122][T10118]  dump_stack_lvl+0x189/0x250
[  236.835168][T10118]  ? __pfx____ratelimit+0x10/0x10
[  236.835191][T10118]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.835218][T10118]  ? __pfx__printk+0x10/0x10
[  236.835245][T10118]  ? __pfx___might_resched+0x10/0x10
[  236.835266][T10118]  ? lock_acquire+0x5f/0x360
[  236.835284][T10118]  should_fail_ex+0x414/0x560
[  236.835311][T10118]  should_failslab+0xa8/0x100
[  236.835329][T10118]  __kmalloc_noprof+0xcb/0x4b0
[  236.835355][T10118]  ? kfree+0x4d/0x440
[  236.835377][T10118]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  236.835404][T10118]  tomoyo_realpath_from_path+0xe3/0x5d0
[  236.835429][T10118]  ? tomoyo_domain+0xd9/0x130
[  236.835455][T10118]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  236.835475][T10118]  tomoyo_path_number_perm+0x1e8/0x5a0
[  236.835494][T10118]  ? lock_release+0x4b/0x3e0
[  236.835511][T10118]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  236.835531][T10118]  ? rcu_is_watching+0x15/0xb0
[  236.835549][T10118]  ? lock_release+0x4b/0x3e0
[  236.835564][T10118]  ? vfs_write+0x956/0xb30
[  236.835582][T10118]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  236.835616][T10118]  ? __fget_files+0x3a0/0x420
[  236.835637][T10118]  ? __fget_files+0x2a/0x420
[  236.835658][T10118]  security_file_ioctl+0xcb/0x2d0
[  236.835677][T10118]  __se_sys_ioctl+0x47/0x170
[  236.835706][T10118]  do_syscall_64+0xfa/0xfa0
[  236.835730][T10118]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.835748][T10118]  ? clear_bhb_loop+0x60/0xb0
[  236.835769][T10118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.835786][T10118] RIP: 0033:0x7f013a38ebe9
[  236.835803][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.835820][T10118] RSP: 002b:00007f013b26a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  236.835842][T10118] RAX: ffffffffffffffda RBX: 00007f013a5c5fa0 RCX: 00007f013a38ebe9
[  236.835856][T10118] RDX: 0000200000000080 RSI: 00000000c0405665 RDI: 0000000000000003
[  236.835869][T10118] RBP: 00007f013b26a090 R08: 0000000000000000 R09: 0000000000000000
[  236.835882][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.835893][T10118] R13: 00007f013a5c6038 R14: 00007f013a5c5fa0 R15: 00007ffcee687958
[  236.835914][T10118]  </TASK>
[  236.835923][T10118] ERROR: Out of memory at tomoyo_realpath_from_path.
[  237.025495][ T5862] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  237.235175][ T5862] usb 4-1: device descriptor read/64, error -71
[  237.345367][ T5862] usb usb4-port1: attempt power cycle
[  237.424469][T10124] input: syz0 as /devices/virtual/input/input28
[  237.449086][T10124] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  237.459573][T10124] /dev/rnullb0: Can't open blockdev
[  237.685113][ T5862] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  237.713420][ T5862] usb 4-1: device descriptor read/8, error -71
[  237.965190][ T5862] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  237.985308][ T5912] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  237.989319][ T5862] usb 4-1: device descriptor read/8, error -71
[  238.109893][ T5862] usb usb4-port1: unable to enumerate USB device
[  238.116500][ T5912] usb 6-1: device descriptor read/64, error -71
[  238.355115][ T5912] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  238.495117][ T5912] usb 6-1: device descriptor read/64, error -71
[  238.606755][ T5912] usb usb6-port1: attempt power cycle
[  238.678876][T10136] batadv0: entered promiscuous mode
[  238.684211][T10136] batadv0: entered allmulticast mode
[  238.697356][T10140] fuse: Unknown parameter ''
[  238.761624][T10147] FAULT_INJECTION: forcing a failure.
[  238.761624][T10147] name failslab, interval 1, probability 0, space 0, times 0
[  238.774591][T10147] CPU: 1 UID: 0 PID: 10147 Comm: syz.3.1074 Not tainted syzkaller #0 PREEMPT(full) 
[  238.774619][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  238.774630][T10147] Call Trace:
[  238.774637][T10147]  <TASK>
[  238.774645][T10147]  dump_stack_lvl+0x189/0x250
[  238.774676][T10147]  ? __pfx____ratelimit+0x10/0x10
[  238.774699][T10147]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.774724][T10147]  ? __pfx__printk+0x10/0x10
[  238.774748][T10147]  ? read_seqbegin+0x1ac/0x250
[  238.774777][T10147]  ? __pfx___might_resched+0x10/0x10
[  238.774796][T10147]  ? lock_acquire+0x5f/0x360
[  238.774815][T10147]  should_fail_ex+0x414/0x560
[  238.774842][T10147]  should_failslab+0xa8/0x100
[  238.774861][T10147]  __kmalloc_noprof+0xcb/0x4b0
[  238.774886][T10147]  ? tomoyo_encode+0x28b/0x550
[  238.774912][T10147]  tomoyo_encode+0x28b/0x550
[  238.774937][T10147]  tomoyo_realpath_from_path+0x58d/0x5d0
[  238.774965][T10147]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  238.774985][T10147]  tomoyo_path_number_perm+0x1e8/0x5a0
[  238.775010][T10147]  ? lock_release+0x4b/0x3e0
[  238.775026][T10147]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  238.775047][T10147]  ? rcu_is_watching+0x15/0xb0
[  238.775067][T10147]  ? lock_release+0x4b/0x3e0
[  238.775095][T10147]  ? vfs_write+0x956/0xb30
[  238.775115][T10147]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  238.775149][T10147]  ? __fget_files+0x3a0/0x420
[  238.775170][T10147]  ? __fget_files+0x2a/0x420
[  238.775193][T10147]  security_file_ioctl+0xcb/0x2d0
[  238.775213][T10147]  __se_sys_ioctl+0x47/0x170
[  238.775241][T10147]  do_syscall_64+0xfa/0xfa0
[  238.775264][T10147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.775282][T10147]  ? clear_bhb_loop+0x60/0xb0
[  238.775303][T10147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.775320][T10147] RIP: 0033:0x7f7fc058ebe9
[  238.775336][T10147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.775352][T10147] RSP: 002b:00007f7fc146a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  238.775375][T10147] RAX: ffffffffffffffda RBX: 00007f7fc07c5fa0 RCX: 00007f7fc058ebe9
[  238.775389][T10147] RDX: 0000200000000080 RSI: 00000000c0405665 RDI: 0000000000000003
[  238.775401][T10147] RBP: 00007f7fc146a090 R08: 0000000000000000 R09: 0000000000000000
[  238.775413][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.775425][T10147] R13: 00007f7fc07c6038 R14: 00007f7fc07c5fa0 R15: 00007fffcbd71c08
[  238.775445][T10147]  </TASK>
[  239.028972][T10147] ERROR: Out of memory at tomoyo_realpath_from_path.
[  239.085392][ T5912] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  239.105763][ T5912] usb 6-1: device descriptor read/8, error -71
[  239.315233][ T5862] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  239.345224][ T5912] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  239.366324][ T5912] usb 6-1: device descriptor read/8, error -71
[  239.475260][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  239.475366][ T5912] usb usb6-port1: unable to enumerate USB device
[  239.483669][ T5862] usb 4-1: no configurations
[  239.491551][ T5862] usb 4-1: can't read configurations, error -22
[  239.505208][    T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  239.625865][ T5862] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  239.645134][    T9] usb 7-1: device descriptor read/64, error -71
[  239.785182][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  239.791514][ T5862] usb 4-1: no configurations
[  239.796279][ T5862] usb 4-1: can't read configurations, error -22
[  239.803090][ T5862] usb usb4-port1: attempt power cycle
[  239.885220][    T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  240.015779][    T9] usb 7-1: device descriptor read/64, error -71
[  240.126185][    T9] usb usb7-port1: attempt power cycle
[  240.155279][ T5862] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  240.175617][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  240.181419][ T5862] usb 4-1: no configurations
[  240.186975][ T5862] usb 4-1: can't read configurations, error -22
[  240.315240][ T5862] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  240.337047][ T5862] usb 4-1: Using ep0 maxpacket: 16
[  240.342674][ T5862] usb 4-1: no configurations
[  240.347397][ T5862] usb 4-1: can't read configurations, error -22
[  240.354085][ T5862] usb usb4-port1: unable to enumerate USB device
[  240.465455][    T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  240.485950][    T9] usb 7-1: device descriptor read/8, error -71
[  240.707176][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1082'.
[  240.715181][ T5188] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  240.719028][T10173] netlink: 33 bytes leftover after parsing attributes in process `syz.5.1082'.
[  240.724636][ T5188] Bluetooth: hci4: Injecting HCI hardware error event
[  240.736075][T10173] netlink: 33 bytes leftover after parsing attributes in process `syz.5.1082'.
[  240.741121][ T5863] Bluetooth: hci4: hardware error 0x00
[  240.756859][    T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  240.787230][    T9] usb 7-1: device descriptor read/8, error -71
[  240.798426][T10175] /dev/rnullb0: Can't open blockdev
[  240.832081][T10177] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1084'.
[  240.843499][T10177] /dev/rnullb0: Can't open blockdev
[  240.852243][T10178] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1084'.
[  240.886672][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1085'.
[  240.906845][    T9] usb usb7-port1: unable to enumerate USB device
[  241.104140][T10189] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  241.155452][T10191] /dev/rnullb0: Can't open blockdev
[  241.307300][T10200] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[  241.324309][T10200] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  241.344548][T10200] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  241.353181][T10200] comedi comedi3: 8255: I/O port conflict (0xdb,4)
[  241.373626][T10200] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  241.392774][T10200] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  241.406379][T10200] comedi comedi3: 8255: I/O port conflict (0xffffffff800003ff,4)
[  241.424464][T10200] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  242.235109][ T5188] Bluetooth: hci0: command tx timeout
[  242.282642][T10208] /dev/rnullb0: Can't open blockdev
[  242.591343][T10227] 9pnet: p9_errstr2errno: server reported unknown error �@c��������
[  242.633846][T10233] FAULT_INJECTION: forcing a failure.
[  242.633846][T10233] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  242.647516][T10233] CPU: 1 UID: 0 PID: 10233 Comm: syz.5.1103 Not tainted syzkaller #0 PREEMPT(full) 
[  242.647551][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  242.647561][T10233] Call Trace:
[  242.647568][T10233]  <TASK>
[  242.647576][T10233]  dump_stack_lvl+0x189/0x250
[  242.647606][T10233]  ? __pfx____ratelimit+0x10/0x10
[  242.647629][T10233]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.647653][T10233]  ? __pfx__printk+0x10/0x10
[  242.647678][T10233]  ? rcu_is_watching+0x15/0xb0
[  242.647699][T10233]  should_fail_ex+0x414/0x560
[  242.647725][T10233]  _copy_to_user+0x31/0xb0
[  242.647747][T10233]  simple_read_from_buffer+0xe1/0x170
[  242.647768][T10233]  proc_fail_nth_read+0x1b3/0x220
[  242.647793][T10233]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  242.647818][T10233]  ? rw_verify_area+0x2a6/0x4d0
[  242.647834][T10233]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  242.647858][T10233]  vfs_read+0x200/0xa30
[  242.647873][T10233]  ? fdget_pos+0x247/0x320
[  242.647896][T10233]  ? __pfx___mutex_lock+0x10/0x10
[  242.647920][T10233]  ? __pfx_vfs_read+0x10/0x10
[  242.647940][T10233]  ? __fget_files+0x3a0/0x420
[  242.647959][T10233]  ? __fget_files+0x2a/0x420
[  242.647982][T10233]  ksys_read+0x145/0x250
[  242.647999][T10233]  ? __pfx_ksys_read+0x10/0x10
[  242.648014][T10233]  ? __pfx_v4l2_ioctl+0x10/0x10
[  242.648036][T10233]  ? rcu_is_watching+0x15/0xb0
[  242.648056][T10233]  do_syscall_64+0xfa/0xfa0
[  242.648077][T10233]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.648094][T10233]  ? clear_bhb_loop+0x60/0xb0
[  242.648113][T10233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.648130][T10233] RIP: 0033:0x7f013a38d5fc
[  242.648147][T10233] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  242.648163][T10233] RSP: 002b:00007f013b26a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  242.648184][T10233] RAX: ffffffffffffffda RBX: 00007f013a5c5fa0 RCX: 00007f013a38d5fc
[  242.648198][T10233] RDX: 000000000000000f RSI: 00007f013b26a0a0 RDI: 0000000000000004
[  242.648210][T10233] RBP: 00007f013b26a090 R08: 0000000000000000 R09: 0000000000000000
[  242.648221][T10233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.648231][T10233] R13: 00007f013a5c6038 R14: 00007f013a5c5fa0 R15: 00007ffcee687958
[  242.648250][T10233]  </TASK>
[  242.899506][ T5863] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  242.930032][T10249] /dev/rnullb0: Can't open blockdev
[  243.001749][T10253] netlink: 'syz.6.1109': attribute type 13 has an invalid length.
[  243.022807][T10253] netlink: 14581 bytes leftover after parsing attributes in process `syz.6.1109'.
[  243.337127][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'.
[  243.370708][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'.
[  243.388013][T10266] bpf: Bad value for 'mode'
[  243.394664][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1113'.
[  243.665105][   T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  243.828209][   T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  243.839300][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.847477][   T24] usb 4-1: Product: syz
[  243.851916][   T24] usb 4-1: Manufacturer: syz
[  243.858206][   T24] usb 4-1: SerialNumber: syz
[  244.087180][   T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  244.102432][   T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  244.112128][   T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  244.123504][   T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  244.138796][   T24] usb 4-1: USB disconnect, device number 81
[  244.275095][    T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  244.425227][    T9] usb 7-1: Using ep0 maxpacket: 16
[  244.432105][    T9] usb 7-1: config 0 has no interfaces?
[  244.438642][    T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  244.447837][    T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  244.455923][    T9] usb 7-1: Manufacturer: syz
[  244.461896][    T9] usb 7-1: config 0 descriptor??
[  244.672753][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.681650][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.700179][    T9] usb 7-1: USB disconnect, device number 38
[  245.195083][    T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  245.261595][T10295] tmpfs: Group quota inode hardlimit too large.
[  245.351722][    T9] usb 4-1: Using ep0 maxpacket: 16
[  245.375456][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  245.385440][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  245.394093][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  245.404215][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  245.413003][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  245.421770][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  245.430999][    T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!!
[  245.466532][    T9] usb 4-1: config 0 has an invalid interface number: 227 but max is 0
[  245.485070][    T9] usb 4-1: config 0 has no interface number 0
[  245.500844][    T9] usb 4-1: config 0 interface 227 has no altsetting 0
[  245.512658][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=28.6b
[  245.524010][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.540043][    T9] usb 4-1: Product: syz
[  245.544426][    T9] usb 4-1: Manufacturer: syz
[  245.549509][    T9] usb 4-1: SerialNumber: syz
[  245.565905][    T9] usb 4-1: config 0 descriptor??
[  245.585161][    T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.227/input/input29
[  245.755228][   T24] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  245.783683][T10290] vxcan1: entered allmulticast mode
[  245.837693][ T5222] bcm5974 4-1:0.227: could not read from device
[  245.853838][ T5222] bcm5974 4-1:0.227: could not read from device
[  245.863124][ T5222] bcm5974 4-1:0.227: could not read from device
[  245.864936][    T9] usb 4-1: USB disconnect, device number 82
[  245.920068][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.932397][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  245.948472][   T24] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  245.959518][   T24] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  245.969466][   T24] usb 7-1: Manufacturer: syz
[  245.980702][   T24] usb 7-1: config 0 descriptor??
[  245.991892][   T24] usb 7-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  246.005332][   T24] usb 7-1: No valid video chain found.
[  246.194565][   T24] usb 7-1: USB disconnect, device number 39
[  246.245266][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1125'.
[  247.216783][T10337] /dev/sg0: Can't lookup blockdev
[  247.269225][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1136'.
[  247.280526][T10339] netlink: 'syz.4.1136': attribute type 21 has an invalid length.
[  247.290207][T10339] netlink: 'syz.4.1136': attribute type 1 has an invalid length.
[  247.298575][T10339] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1136'.
[  247.321080][T10339] /dev/rnullb0: Can't open blockdev
[  247.355233][   T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  247.462513][T10353] /dev/rnullb0: Can't open blockdev
[  247.506808][   T10] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.518225][   T10] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  247.533045][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  247.539724][   T10] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[  247.548894][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.558240][   T10] usb 7-1: config 0 descriptor??
[  247.970514][   T10] itetech 0003:06CB:73F6.0010: item fetching failed at offset 0/3
[  247.980288][   T10] itetech 0003:06CB:73F6.0010: probe with driver itetech failed with error -22
[  248.118455][T10361] block nbd5: Unsupported socket: shutdown callout must be supported.
[  248.182251][ T5905] usb 7-1: USB disconnect, device number 40
[  248.226553][T10366] /dev/rnullb0: Can't open blockdev
[  248.255625][T10368] netlink: 'syz.3.1147': attribute type 29 has an invalid length.
[  248.264009][T10369] netlink: 'syz.3.1147': attribute type 29 has an invalid length.
[  248.323493][T10377] /dev/rnullb0: Can't open blockdev
[  248.365169][   T24] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  248.483211][T10386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1152'.
[  248.497147][T10386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1152'.
[  248.505156][   T24] usb 6-1: device descriptor read/64, error -71
[  248.511048][T10386] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x2)
[  248.524763][   T30] audit: type=1800 audit(1756653824.735:10): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1152" name="memory.events" dev="tmpfs" ino=1468 res=0 errno=0
[  248.746540][   T24] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  248.898795][   T24] usb 6-1: device descriptor read/64, error -71
[  249.135442][   T24] usb usb6-port1: attempt power cycle
[  249.575167][   T24] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  249.624149][   T24] usb 6-1: device descriptor read/8, error -71
[  249.820701][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'.
[  249.841629][T10398] erspan0: default FDB implementation only supports local addresses
[  249.852945][T10398] bpf: Bad value for 'gid'
[  249.858584][T10398] trusted_key: encrypted_key: insufficient parameters specified
[  249.867614][   T24] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  249.876683][T10398] trusted_key: encrypted_key: keylen parameter is missing
[  249.896057][   T24] usb 6-1: device descriptor read/8, error -71
[  249.954345][T10409] /dev/rnullb0: Can't open blockdev
[  250.005455][   T24] usb usb6-port1: unable to enumerate USB device
[  250.162594][T10417] overlay: Unknown parameter 'smackfsdef'
[  250.425129][   T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  250.585090][   T24] usb 4-1: Using ep0 maxpacket: 8
[  250.593829][   T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  250.606689][   T24] usb 4-1: config 0 has no interface number 0
[  250.613006][   T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  250.624742][   T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  250.638435][   T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  250.650971][   T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  250.664193][T10428] /dev/rnullb0: Can't open blockdev
[  250.671727][   T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  250.681858][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.696542][   T24] usb 4-1: config 0 descriptor??
[  250.715898][   T24] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  250.748447][T10433] netlink: 'syz.6.1167': attribute type 12 has an invalid length.
[  250.966867][   T24] usb 4-1: USB disconnect, device number 83
[  250.981844][   T24] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  251.707275][T10459] /dev/rnullb0: Can't open blockdev
[  252.125257][ T3097] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  252.275111][ T3097] usb 7-1: Using ep0 maxpacket: 16
[  252.284236][ T3097] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  252.293494][ T3097] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.301726][ T3097] usb 7-1: Product: syz
[  252.305984][ T3097] usb 7-1: Manufacturer: syz
[  252.310585][ T3097] usb 7-1: SerialNumber: syz
[  252.316916][ T3097] usb 7-1: config 0 descriptor??
[  252.324403][ T3097] as10x_usb: device has been detected
[  252.330274][ T3097] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  252.343847][ T3097] usb 7-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  252.358019][ T3097] as10x_usb: error during firmware upload part1
[  252.364570][ T3097] Registered device Sky IT Digital Key (green led)
[  252.543258][T10464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.558638][T10464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.588220][T10465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.598740][T10465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.773869][ T3097] usb 7-1: USB disconnect, device number 41
[  252.802681][ T3097] Unregistered device Sky IT Digital Key (green led)
[  252.805744][ T3097] as10x_usb: device has been disconnected
[  253.385793][    T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  253.546785][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.561843][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.583779][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  253.610910][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  253.621091][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.631899][    T9] usb 4-1: config 0 descriptor??
[  253.928149][   T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  254.088658][   T10] usb 6-1: config 0 has an invalid interface number: 11 but max is 0
[  254.102352][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.111123][   T10] usb 6-1: config 0 has no interface number 0
[  254.112385][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.119643][   T10] usb 6-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024
[  254.139251][   T10] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  254.152283][   T10] usb 6-1: config 0 interface 11 has no altsetting 0
[  254.159555][   T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  254.169441][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.177617][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  254.183690][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  254.195073][   T10] usb 6-1: config 0 descriptor??
[  254.201942][   T10] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected
[  254.210381][    T9] usb 4-1: USB disconnect, device number 84
[  254.219397][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81
[  254.227585][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82
[  254.236546][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1
[  254.244254][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2
[  254.252216][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85
[  254.260006][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5
[  254.268633][   T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  254.279658][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83
[  254.287666][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84
[  254.295577][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3
[  254.303239][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4
[  254.311187][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86
[  254.319513][   T10] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6
[  254.328033][   T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  254.377159][ T5862] usb 7-1: new full-speed USB device number 42 using dummy_hcd
[  254.407470][T10493] netlink: 'syz.5.1188': attribute type 1 has an invalid length.
[  254.415429][T10493] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1188'.
[  254.457794][ T3097] usb 6-1: USB disconnect, device number 36
[  254.469446][ T3097] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  254.481769][ T3097] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  254.492648][ T3097] keyspan 6-1:0.11: device disconnected
[  254.536865][ T5862] usb 7-1: config 0 interface 0 has no altsetting 0
[  254.543549][ T5862] usb 7-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  254.552764][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.562013][ T5862] usb 7-1: config 0 descriptor??
[  254.935244][   T10] usb 4-1: new low-speed USB device number 85 using dummy_hcd
[  254.974067][ T5862] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  254.981236][ T5862] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  254.990105][ T5862] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  255.005205][ T5862] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  255.012392][ T5862] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  255.022592][ T5862] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  255.030420][ T5862] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  255.043565][ T5862] elecom 0003:056E:00FC.0011: hidraw0: USB HID v0.06 Device [HID 056e:00fc] on usb-dummy_hcd.6-1/input0
[  255.065165][   T10] usb 4-1: device descriptor read/64, error -71
[  255.176371][T10498] /dev/rnullb0: Can't open blockdev
[  255.182813][    T9] usb 7-1: USB disconnect, device number 42
[  255.315181][   T10] usb 4-1: new low-speed USB device number 86 using dummy_hcd
[  255.445199][   T10] usb 4-1: device descriptor read/64, error -71
[  255.555372][   T10] usb usb4-port1: attempt power cycle
[  255.895100][   T10] usb 4-1: new low-speed USB device number 87 using dummy_hcd
[  255.918809][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.925747][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  255.939101][   T10] usb 4-1: device descriptor read/8, error -71
[  256.185207][   T10] usb 4-1: new low-speed USB device number 88 using dummy_hcd
[  256.207290][   T10] usb 4-1: device descriptor read/8, error -71
[  256.315342][   T10] usb usb4-port1: unable to enumerate USB device
[  257.060186][T10534] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1200'.
[  257.178549][T10543] blk_print_req_error: 2 callbacks suppressed
[  257.178569][T10543] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.211902][T10543] FAT-fs (loop4): unable to read boot sector
[  257.257206][T10548] /dev/rnullb0: Can't open blockdev
[  257.266357][T10548] /dev/rnullb0: Can't open blockdev
[  257.309387][T10552] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  257.317303][T10552] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock
[  257.327585][T10552] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  257.339361][T10552] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock
[  258.100918][T10563] /dev/rnullb0: Can't open blockdev
[  258.231070][T10579] /dev/rnullb0: Can't open blockdev
[  258.343013][T10585] fuse: Bad value for 'fd'
[  258.442368][T10588] /dev/rnullb0: Can't open blockdev
[  258.847282][T10599] mmap: syz.5.1220 (10599): VmData 25841664 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  259.505444][   T10] usb 7-1: new full-speed USB device number 43 using dummy_hcd
[  259.655552][ T5862] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  259.661525][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  259.677388][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  259.692775][   T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  259.703298][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.713754][   T10] usb 7-1: Product: syz
[  259.720269][   T10] usb 7-1: Manufacturer: syz
[  259.726342][   T10] usb 7-1: SerialNumber: syz
[  259.734264][T10609] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  259.825214][ T5862] usb 4-1: Using ep0 maxpacket: 8
[  259.835888][T10613] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1224'.
[  259.851524][T10614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1224'.
[  259.861957][T10613] block nbd3: NBD_DISCONNECT
[  259.877319][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short
[  259.888073][ T5862] usb 4-1: no configurations
[  259.892716][ T5862] usb 4-1: can't read configurations, error -22
[  260.127742][T10623] /dev/rnullb0: Can't open blockdev
[  260.235352][ T5188] Bluetooth: hci0: command 0x0c1a tx timeout
[  260.236595][ T5863] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  260.673341][T10629] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  260.935453][ T5862] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  260.949341][T10637] /dev/rnullb0: Can't open blockdev
[  261.098081][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58165, setting to 64
[  261.110663][ T5862] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  261.119891][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  261.128031][ T5862] usb 4-1: Manufacturer: syz
[  261.134121][ T5862] usb 4-1: config 0 descriptor??
[  261.142219][ T5862] usb 4-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  261.149173][ T5862] usb 4-1: No valid video chain found.
[  261.275459][ T5948] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  261.344749][    T9] usb 4-1: USB disconnect, device number 90
[  261.435156][ T5948] usb 6-1: Using ep0 maxpacket: 16
[  261.443501][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.454922][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.464793][ T5948] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  261.474116][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.483885][ T5948] usb 6-1: config 0 descriptor??
[  261.892660][T10647] syz0: rxe_newlink: already configured on wlan1
[  261.903110][T10647] /dev/rnullb0: Can't open blockdev
[  261.913745][ T5948] usbhid 6-1:0.0: can't add hid device: -71
[  261.931350][ T5948] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  261.951665][T10650] /dev/rnullb0: Can't open blockdev
[  261.954835][ T5948] usb 6-1: USB disconnect, device number 37
[  261.964452][T10651] netlink: 'syz.3.1237': attribute type 6 has an invalid length.
[  262.053578][T10657] /dev/rnullb0: Can't open blockdev
[  262.168519][   T10] cdc_ncm 7-1:1.0: bind() failure
[  262.184146][   T10] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  262.193259][   T10] cdc_ncm 7-1:1.1: bind() failure
[  262.208489][   T10] usb 7-1: USB disconnect, device number 43
[  262.603405][   T30] audit: type=1800 audit(1756654094.813:11): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1250" name="bus" dev="ramfs" ino=33491 res=0 errno=0
[  262.655204][   T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  262.816964][   T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  262.826950][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.853219][   T10] usb 4-1: config 0 descriptor??
[  262.860313][   T10] cp210x 4-1:0.0: cp210x converter detected
[  262.866886][    T9] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[  263.026734][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  263.037637][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  263.049294][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 39485, setting to 64
[  263.063371][   T10] usb 4-1: cp210x converter now attached to ttyUSB0
[  263.073237][    T9] usb 7-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  263.083442][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.085283][ T5862] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  263.091604][    T9] usb 7-1: Product: syz
[  263.105479][    T9] usb 7-1: Manufacturer: syz
[  263.110098][    T9] usb 7-1: SerialNumber: syz
[  263.116935][    T9] usb 7-1: config 0 descriptor??
[  263.122463][T10690] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  263.132265][    T9] radioshark2 7-1:0.0: Invalid radioSHARK2 device
[  263.139620][    T9] radioshark2 7-1:0.0: probe with driver radioshark2 failed with error -22
[  263.265113][ T5862] usb 6-1: Using ep0 maxpacket: 32
[  263.279032][ T5862] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  263.288374][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.299102][ T5862] usb 6-1: config 0 descriptor??
[  263.316762][ T5862] gspca_main: sq930x-2.14.0 probing 041e:403c
[  263.326177][ T5905] usb 4-1: USB disconnect, device number 91
[  263.334946][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  263.349181][ T5905] cp210x 4-1:0.0: device disconnected
[  263.415328][    T9] usb 7-1: USB disconnect, device number 44
[  263.540468][   T10] libceph: connect (1)[c::]:6789 error -101
[  263.547593][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  263.558320][ T5862] gspca_sq930x: reg_r 001f failed -71
[  263.569952][ T5862] sq930x 6-1:0.0: probe with driver sq930x failed with error -71
[  263.586144][ T5862] usb 6-1: USB disconnect, device number 38
[  263.805524][   T10] libceph: connect (1)[c::]:6789 error -101
[  263.811806][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  264.325472][   T10] libceph: connect (1)[c::]:6789 error -101
[  264.339115][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  264.878563][T10736] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1265'.
[  264.889921][T10736] /dev/rnullb0: Can't open blockdev
[  264.945259][   T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  265.097367][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.108520][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58165, setting to 1024
[  265.121016][   T10] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  265.130310][   T10] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  265.138381][   T10] usb 4-1: Manufacturer: syz
[  265.144110][   T10] usb 4-1: config 0 descriptor??
[  265.150997][   T10] usb 4-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  265.157958][   T10] usb 4-1: No valid video chain found.
[  265.305201][    T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  265.352883][   T10] usb 4-1: USB disconnect, device number 92
[  265.435301][    T9] usb 7-1: device descriptor read/64, error -71
[  265.442278][T10748] /dev/rnullb0: Can't open blockdev
[  265.695135][    T9] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  265.825143][    T9] usb 7-1: device descriptor read/64, error -71
[  265.830167][T10697] ceph: No mds server is up or the cluster is laggy
[  265.936807][    T9] usb usb7-port1: attempt power cycle
[  266.305118][    T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  266.325621][    T9] usb 7-1: device descriptor read/8, error -71
[  266.575145][    T9] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  266.595918][    T9] usb 7-1: device descriptor read/8, error -71
[  266.706545][    T9] usb usb7-port1: unable to enumerate USB device
[  267.555204][ T8348] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  267.665142][ T5862] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  267.747308][ T8348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.762630][ T8348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58165, setting to 1024
[  267.774828][ T8348] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  267.785561][ T8348] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  267.793586][ T8348] usb 6-1: Manufacturer: syz
[  267.806083][ T8348] usb 6-1: config 0 descriptor??
[  267.816459][ T8348] usb 6-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  267.817982][ T5862] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  267.823363][ T8348] usb 6-1: No valid video chain found.
[  267.859051][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  267.871131][ T5862] usb 4-1: SerialNumber: syz
[  267.885688][ T5862] usb 4-1: config 0 descriptor??
[  268.024877][ T8348] usb 6-1: USB disconnect, device number 39
[  268.294195][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.306371][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.326579][ T5862] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f
[  268.333761][ T5862] hackrf 4-1:0.0: Could not detect board
[  268.341139][T10803] /dev/rnullb0: Can't open blockdev
[  268.351476][ T5862] hackrf 4-1:0.0: probe with driver hackrf failed with error -71
[  268.361892][ T5862] usb 4-1: USB disconnect, device number 93
[  268.435342][ T5905] usb 7-1: new full-speed USB device number 49 using dummy_hcd
[  268.588389][ T5905] usb 7-1: config 0 has no interfaces?
[  268.597085][ T5905] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  268.627636][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.642581][ T5905] usb 7-1: config 0 descriptor??
[  268.874036][   T10] usb 7-1: USB disconnect, device number 49
[  269.170809][T10828] /dev/rnullb0: Can't open blockdev
[  269.693728][T10841] /dev/rnullb0: Can't open blockdev
[  269.821479][T10849] /dev/rnullb0: Can't open blockdev
[  270.539548][T10874] 9p: Unknown access argument �: -22
[  270.611821][T10885] /dev/rnullb0: Can't open blockdev
[  271.583124][T10897] /dev/rnullb0: Can't open blockdev
[  271.969381][ T3097] IPVS: starting estimator thread 0...
[  272.085184][T10906] IPVS: using max 37 ests per chain, 88800 per kthread
[  272.161172][T10911] comedi comedi4: comedi_config --init_data is deprecated
[  272.565067][ T3097] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  272.715275][ T3097] usb 4-1: Using ep0 maxpacket: 32
[  272.733190][ T3097] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  272.758440][ T3097] usb 4-1: config 0 has no interface number 0
[  272.775720][ T3097] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  272.797014][ T3097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.810066][ T3097] usb 4-1: Product: syz
[  272.814366][ T3097] usb 4-1: Manufacturer: syz
[  272.819558][ T3097] usb 4-1: SerialNumber: syz
[  272.832585][ T3097] usb 4-1: config 0 descriptor??
[  272.841578][ T3097] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  272.853195][ T3097] usb 4-1: selecting invalid altsetting 1
[  272.863332][ T3097] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  272.876801][ T3097] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  272.889212][ T3097] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  272.902945][ T3097] usb 4-1: media controller created
[  272.923982][ T3097] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  273.041787][ T3097] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)...
[  273.054907][ T3097] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered.
[  273.133440][ T3097] DVB: Unable to find symbol mxl5005s_attach()
[  273.348543][ T3097] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  273.368567][T10939] /dev/rnullb0: Can't open blockdev
[  273.535671][T10944] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[  273.547940][T10944] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  273.558207][T10944] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  273.574275][T10944] netlink: 'syz.3.1330': attribute type 21 has an invalid length.
[  273.587137][T10944] netlink: 'syz.3.1330': attribute type 22 has an invalid length.
[  273.597978][T10944] netlink: 'syz.3.1330': attribute type 23 has an invalid length.
[  273.609565][T10944] netlink: 'syz.3.1330': attribute type 25 has an invalid length.
[  273.619230][T10944] netlink: 'syz.3.1330': attribute type 26 has an invalid length.
[  273.633209][T10944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1330'.
[  273.990822][ T5948] IPVS: starting estimator thread 0...
[  274.085841][T10948] IPVS: using max 38 ests per chain, 91200 per kthread
[  274.169998][ T3097] usb 4-1: USB disconnect, device number 94
[  274.445217][ T5948] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  274.576994][T10973] syz0: rxe_newlink: already configured on wlan1
[  274.588017][T10973] /dev/rnullb0: Can't open blockdev
[  274.607302][ T5948] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.631952][ T5948] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58165, setting to 1024
[  274.646797][ T5948] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  274.678611][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  274.687406][ T5948] usb 7-1: Manufacturer: syz
[  274.702022][ T5948] usb 7-1: config 0 descriptor??
[  274.716562][T10984] block nbd3: Attempted send on invalid socket
[  274.720548][ T5948] usb 7-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  274.723450][T10984] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  274.733422][ T5948] usb 7-1: No valid video chain found.
[  274.740312][T10984] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32
[  274.889258][T10988] /dev/rnullb0: Can't open blockdev
[  274.945220][ T5905] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  274.977081][T10990] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  274.987510][T10990] netlink: 'syz.3.1344': attribute type 10 has an invalid length.
[  274.998893][T10990] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  275.008841][ T3097] wlan1 speed is unknown, defaulting to 1000
[  275.010420][T10990] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  275.022275][T10990] /dev/rnullb0: Can't open blockdev
[  275.108463][ T5905] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.118773][    T9] usb 7-1: USB disconnect, device number 50
[  275.121840][ T5905] usb 6-1: config 0 interface 0 has no altsetting 0
[  275.133877][ T5905] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[  275.143278][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.153011][ T5905] usb 6-1: config 0 descriptor??
[  275.285246][ T5948] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  275.445219][ T5948] usb 4-1: Using ep0 maxpacket: 16
[  275.453501][ T5948] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  275.462798][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.470982][ T5948] usb 4-1: Product: syz
[  275.475218][ T5948] usb 4-1: Manufacturer: syz
[  275.479835][ T5948] usb 4-1: SerialNumber: syz
[  275.487817][ T5948] r8152-cfgselector 4-1: Unknown version 0x0000
[  275.494107][ T5948] r8152-cfgselector 4-1: config 0 descriptor??
[  275.704114][ T5948] r8152-cfgselector 4-1: Unknown version 0x0000
[  275.711176][T10995] /dev/rnullb0: Can't open blockdev
[  275.717566][ T5948] r8152-cfgselector 4-1: bad CDC descriptors
[  275.726525][ T5948] r8152-cfgselector 4-1: USB disconnect, device number 95
[  275.862360][ T5905] usbhid 6-1:0.0: can't add hid device: -71
[  275.871260][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  275.880671][ T5905] usb 6-1: USB disconnect, device number 40
[  275.995207][ T8348] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  276.135921][ T8348] usb 7-1: device descriptor read/64, error -71
[  276.375971][ T8348] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  276.495107][ T5948] usb 4-1: new full-speed USB device number 96 using dummy_hcd
[  276.507102][ T8348] usb 7-1: device descriptor read/64, error -71
[  276.511161][T11005] /dev/rnullb0: Can't open blockdev
[  276.615598][ T8348] usb usb7-port1: attempt power cycle
[  276.638117][ T5948] usb 4-1: device descriptor read/64, error -71
[  276.885171][ T5948] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[  276.955489][ T8348] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  276.989181][ T8348] usb 7-1: device descriptor read/8, error -71
[  277.025372][ T5948] usb 4-1: device descriptor read/64, error -71
[  277.146215][ T5948] usb usb4-port1: attempt power cycle
[  277.235086][ T8348] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  277.255812][ T8348] usb 7-1: device descriptor read/8, error -71
[  277.367301][ T8348] usb usb7-port1: unable to enumerate USB device
[  277.486107][ T5948] usb 4-1: new full-speed USB device number 98 using dummy_hcd
[  277.517363][ T5948] usb 4-1: device descriptor read/8, error -71
[  277.531093][T11012] /dev/rnullb0: Can't open blockdev
[  277.755134][ T5948] usb 4-1: new full-speed USB device number 99 using dummy_hcd
[  277.777272][ T5948] usb 4-1: device descriptor read/8, error -71
[  277.885224][ T5905] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  277.885321][ T5948] usb usb4-port1: unable to enumerate USB device
[  278.046396][ T5905] usb 6-1: config 0 has no interfaces?
[  278.052131][ T5905] usb 6-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  278.062199][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.071405][ T5905] usb 6-1: config 0 descriptor??
[  278.282376][T11018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.293410][T11018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.302502][T11018] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[  278.309647][T11018] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  278.316586][T11018] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  278.323149][T11018] comedi comedi3: 8255: I/O port conflict (0xdb,4)
[  278.330247][T11018] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  278.337464][T11018] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  278.344437][T11018] comedi comedi3: 8255: I/O port conflict (0xffffffff800003ff,4)
[  278.352336][T11018] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  278.361131][ T5905] usb 6-1: USB disconnect, device number 41
[  278.805506][ T5948] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  278.846282][T11022] /dev/rnullb0: Can't open blockdev
[  278.851754][T11023] /dev/rnullb0: Can't open blockdev
[  278.965176][ T5948] usb 6-1: Using ep0 maxpacket: 8
[  278.972323][ T5948] usb 6-1: config index 0 descriptor too short (expected 64774, got 36)
[  278.982778][ T5948] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  279.002041][ T5948] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08
[  279.012768][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.021172][ T5948] usb 6-1: Product: syz
[  279.025683][ T5948] usb 6-1: Manufacturer: syz
[  279.030372][ T5948] usb 6-1: SerialNumber: syz
[  279.165228][ T5905] usb 7-1: new low-speed USB device number 55 using dummy_hcd
[  279.240422][T11018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.265887][T11018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.334251][ T5905] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  279.343881][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.348572][ T5948] usb 6-1: USB disconnect, device number 42
[  279.370939][ T5905] usb 7-1: config 0 descriptor??
[  279.821717][T11046] netlink: 'syz.3.1365': attribute type 1 has an invalid length.
[  279.829786][T11046] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1365'.
[  279.839654][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'.
[  279.943420][T11059] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[  279.966789][T11059] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  279.973340][T11059] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  279.980382][T11059] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  279.992991][T11059] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  280.001915][T11059] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  280.010777][T11059] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  280.017724][T11059] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  280.024961][T11059] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  280.037794][T11059] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  280.046023][T11059] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  280.052776][T11059] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  280.059464][T11059] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  280.178644][T11066] /dev/rnullb0: Can't open blockdev
[  280.323436][T11068] NILFS (nullb0): couldn't find nilfs on the device
[  280.849523][ T5905] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  280.866900][ T5905] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  280.879223][ T5905] asix 7-1:0.0: probe with driver asix failed with error -71
[  280.893533][ T5905] usb 7-1: USB disconnect, device number 55
[  280.956446][T11065] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  281.014025][T11072] overlayfs: missing 'lowerdir'
[  281.061440][T11072] ntfs3(nbd5): try to read out of volume at offset 0x0
[  281.411779][T11090] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1380'.
[  281.422670][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1380'.
[  281.427038][T11092] /dev/rnullb0: Can't open blockdev
[  281.436324][T11090] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma?
[  281.485165][ T5905] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  281.621222][T11099] /dev/rnullb0: Can't open blockdev
[  281.648005][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.659758][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58165, setting to 1024
[  281.672579][ T5905] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  281.681911][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  281.690021][ T5905] usb 6-1: Manufacturer: syz
[  281.696038][ T5905] usb 6-1: config 0 descriptor??
[  281.702786][ T5905] usb 6-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  281.709826][ T5905] usb 6-1: No valid video chain found.
[  281.885142][ T8348] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  281.907217][ T5905] usb 6-1: USB disconnect, device number 43
[  282.015243][ T8348] usb 7-1: device descriptor read/64, error -71
[  282.155156][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout
[  282.255167][ T8348] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  282.385222][ T8348] usb 7-1: device descriptor read/64, error -71
[  282.395425][  T982] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  282.498184][ T8348] usb usb7-port1: attempt power cycle
[  282.545066][  T982] usb 4-1: Using ep0 maxpacket: 8
[  282.552676][  T982] usb 4-1: unable to get BOS descriptor or descriptor too short
[  282.562086][  T982] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  282.570574][  T982] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  282.581113][  T982] usb 4-1: config 4 has no interface number 0
[  282.591400][  T982] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  282.605191][  T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.613355][  T982] usb 4-1: Product: syz
[  282.618558][  T982] usb 4-1: Manufacturer: syz
[  282.623254][  T982] usb 4-1: SerialNumber: syz
[  282.833497][T11103] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1385'.
[  282.854108][  T982] usb 4-1: Found UVC 0.02 device syz (04f2:b746)
[  282.866092][ T8348] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  282.880497][  T982] usb 4-1: No valid video chain found.
[  282.897001][  T982] usb 4-1: USB disconnect, device number 100
[  282.915683][ T8348] usb 7-1: device descriptor read/8, error -71
[  283.155206][ T8348] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  283.199760][ T8348] usb 7-1: device descriptor read/8, error -71
[  283.336007][ T8348] usb usb7-port1: unable to enumerate USB device
[  283.644417][T11118] /dev/rnullb0: Can't open blockdev
[  283.678310][T11117] syzkaller1: entered promiscuous mode
[  283.690736][T11117] syzkaller1: entered allmulticast mode
[  284.175123][ T8348] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  284.336775][ T8348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.347850][ T8348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58165, setting to 1024
[  284.360824][ T8348] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  284.370182][ T8348] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  284.378269][ T8348] usb 4-1: Manufacturer: syz
[  284.384055][ T8348] usb 4-1: config 0 descriptor??
[  284.391169][ T8348] usb 4-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  284.398236][ T8348] usb 4-1: No valid video chain found.
[  284.594679][ T8348] usb 4-1: USB disconnect, device number 101
[  285.065075][   T24] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[  285.177720][T11158] netlink: 'syz.3.1405': attribute type 3 has an invalid length.
[  285.186774][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'.
[  285.215261][   T24] usb 7-1: Using ep0 maxpacket: 8
[  285.224369][   T24] usb 7-1: config index 0 descriptor too short (expected 6427, got 27)
[  285.232831][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.244742][   T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  285.254658][   T24] usb 7-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  285.262837][   T24] usb 7-1: Product: syz
[  285.267154][   T24] usb 7-1: Manufacturer: syz
[  285.274763][   T24] usb 7-1: config 0 descriptor??
[  285.487792][   T24] usb 7-1: USB disconnect, device number 60
[  286.275140][  T982] usb 6-1: new low-speed USB device number 44 using dummy_hcd
[  286.295713][T11167] /dev/rnullb0: Can't open blockdev
[  286.343076][T11169] input: syz1 as /devices/virtual/input/input31
[  286.354003][T11169] /dev/rnullb0: Can't open blockdev
[  286.427965][  T982] usb 6-1: unable to get BOS descriptor or descriptor too short
[  286.437789][  T982] usb 6-1: config 9 has an invalid interface number: 198 but max is 0
[  286.446327][  T982] usb 6-1: config 9 has no interface number 0
[  286.452472][  T982] usb 6-1: config 9 interface 198 has no altsetting 0
[  286.462094][  T982] usb 6-1: string descriptor 0 read error: -22
[  286.468418][  T982] usb 6-1: New USB device found, idVendor=3af4, idProduct=007e, bcdDevice=6f.2b
[  286.477654][  T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.646353][   T24] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[  286.748579][T11172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.757369][T11172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.795314][   T24] usb 7-1: Using ep0 maxpacket: 8
[  286.801681][   T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  286.810798][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.823293][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[  286.830830][   T24] pvrusb2: **********
[  286.834835][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  286.845127][   T24] pvrusb2: Important functionality might not be entirely working.
[  286.852954][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  286.864448][   T24] pvrusb2: **********
[  287.025047][ T2344] pvrusb2: Invalid write control endpoint
[  287.057958][ T2344] pvrusb2: Invalid write control endpoint
[  287.064048][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  287.073743][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  287.081380][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  287.093022][ T2344] pvrusb2: Device being rendered inoperable
[  287.100217][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  287.107730][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  287.119161][ T2344] pvrusb2: Attached sub-driver cx25840
[  287.124702][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  287.135346][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  287.205130][ T5188] Bluetooth: hci0: command 0x0c1a tx timeout
[  287.228126][T11171] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61)
[  287.238379][T11171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.246987][T11171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.405177][  T982] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  287.457144][T11171] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1410'.
[  287.482613][ T8348] usb 7-1: USB disconnect, device number 61
[  287.557774][  T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.568861][  T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58165, setting to 1024
[  287.581259][  T982] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  287.590397][  T982] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  287.598748][  T982] usb 4-1: Manufacturer: syz
[  287.604744][  T982] usb 4-1: config 0 descriptor??
[  287.612759][  T982] usb 4-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  287.619854][  T982] usb 4-1: No valid video chain found.
[  287.807961][T11180] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1413'.
[  287.832597][ T3097] usb 4-1: USB disconnect, device number 102
[  288.155820][   T24] usb 6-1: USB disconnect, device number 44
[  288.748021][T11205] cgroup2: Unknown parameter 'barrier'
[  288.916765][ T8348] usb 7-1: new full-speed USB device number 62 using dummy_hcd
[  289.076959][ T8348] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.096955][ T8348] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  289.111135][ T8348] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  289.124634][ T8348] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.134247][ T8348] usb 7-1: Product: syz
[  289.138646][ T8348] usb 7-1: Manufacturer: syz
[  289.143353][ T8348] usb 7-1: SerialNumber: syz
[  289.325111][  T982] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  289.390588][ T8348] usb 7-1: 0:2 : does not exist
[  289.411452][ T8348] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  289.449056][ T8348] usb 7-1: USB disconnect, device number 62
[  289.475054][  T982] usb 6-1: Using ep0 maxpacket: 16
[  289.495615][  T982] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  289.520532][  T982] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  289.563745][  T982] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  289.574910][  T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.594313][  T982] usb 6-1: Product: 蒠怤黃́괖혪哱棅䔰瑣툒ཱུ鄞᪖䦧︡飔ⱏ邱閱헅㝣䝥먛踹兔⸞찀喡怠䅂㛍ᣂ呗ࢇ鮿ꍦх⟖㐚۞㔖顑ଓ벨ꈷ荻즀콰秦ߌℴ䇔ᜰ䷸⼛吾뉬蛅ﮥꊆŎ嘼䝑⛡ᦕ쑸㲴塽萍و貿甭蕧藜샹躋颰व⊖䪴尫ꋴ㤇‭喺؍四⚈홦胭갠鉖⩵岢
[  289.645138][  T982] usb 6-1: Manufacturer: 洛獦邃ᗆ咡Ꭾ솗餋䫣ႃ沴쁥끎뤾ٟ뵂都譠伈씷쨘ﻸ謱ꁸ弒ʻ妝⸴ṙㆧ촁녶愴뽛庁ፄꞼ밳䖑鴀맱욺뽁⻊眱娰ﲁ鑲⡹뿊
[  289.770955][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'.
[  289.876401][T11236] /dev/rnullb0: Can't open blockdev
[  289.945132][  T982] usb 6-1: SerialNumber: syz
[  290.051773][T11246] /dev/rnullb0: Can't open blockdev
[  290.348441][T11251] unknown channel width for channel at 909000KHz?
[  290.392530][T11212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.403962][T11212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.415587][  T982] cdc_ncm 6-1:1.0: bind() failure
[  290.423794][  T982] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  290.431355][  T982] cdc_ncm 6-1:1.1: bind() failure
[  290.435170][ T5905] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  290.439412][  T982] usb 6-1: USB disconnect, device number 45
[  290.615153][ T5905] usb 4-1: Using ep0 maxpacket: 8
[  290.621983][ T5905] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  290.630410][ T5905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  290.640239][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  290.650219][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  290.660281][ T5905] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  290.673354][ T5905] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  290.682467][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.893425][ T5905] usb 4-1: GET_CAPABILITIES returned 0
[  290.899032][ T5905] usbtmc 4-1:16.0: can't read capabilities
[  291.097485][  T982] usb 4-1: USB disconnect, device number 103
[  291.207670][ T5905] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  291.310945][T11248] /dev/rnullb0: Can't open blockdev
[  291.365221][ T5905] usb 6-1: Using ep0 maxpacket: 32
[  291.373540][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  291.385619][ T5905] usb 6-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75
[  291.394853][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.402988][ T5905] usb 6-1: Product: syz
[  291.408141][ T5905] usb 6-1: Manufacturer: syz
[  291.412824][ T5905] usb 6-1: SerialNumber: syz
[  291.426595][ T5905] usb 6-1: config 0 descriptor??
[  291.649897][ T5905] usb 6-1: USB disconnect, device number 46
[  293.041651][T11298] /dev/rnullb0: Can't open blockdev
[  293.097456][T11300] syzkaller1: entered promiscuous mode
[  293.110408][T11300] syzkaller1: entered allmulticast mode
[  293.137567][T11302] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  293.146573][T11302] /dev/rnullb0: Can't open blockdev
[  293.230294][T11306] /dev/rnullb0: Can't open blockdev
[  294.288434][T11347] netlink: 'syz.5.1464': attribute type 1 has an invalid length.
[  294.297083][T11347] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1464'.
[  294.312327][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1464'.
[  294.330529][ T3097] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[  294.466266][T11351] /dev/rnullb0: Can't open blockdev
[  294.500643][ T3097] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  294.528718][ T3097] usb 4-1: config 0 has no interface number 0
[  294.542789][ T3097] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  294.558105][ T3097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.574257][ T3097] usb 4-1: Product: syz
[  294.580742][ T3097] usb 4-1: Manufacturer: syz
[  294.585964][ T3097] usb 4-1: SerialNumber: syz
[  294.597795][ T3097] usb 4-1: config 0 descriptor??
[  294.811761][T11344] overlay: ./file0 is not a directory
[  294.879313][T11344] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1463'.
[  295.417578][T11378] delete_channel: no stack
[  295.422124][T11378] delete_channel: no stack
[  295.487024][T11384] fuse: Bad value for 'fd'
[  295.685116][  T982] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  295.761248][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.774648][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.836399][  T982] usb 6-1: Using ep0 maxpacket: 8
[  295.846399][  T982] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  295.848580][ T3097] usb 4-1: Firmware version (0.0) predates our first public release.
[  295.856281][  T982] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  295.879868][  T982] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  295.880276][ T3097] usb 4-1: Please update to version 0.2 or newer
[  295.890069][  T982] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  295.890095][  T982] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  295.890118][  T982] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  295.890157][  T982] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  295.890177][  T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.964493][  T982] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22
[  296.002216][ T3097] usb 4-1: USB disconnect, device number 104
[  296.522427][T11431] /dev/rnullb0: Can't open blockdev
[  296.665094][ T3097] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[  296.795214][  T982] usb 4-1: new full-speed USB device number 105 using dummy_hcd
[  296.825232][ T3097] usb 7-1: Using ep0 maxpacket: 32
[  296.832167][ T3097] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  296.840676][ T3097] usb 7-1: config 0 has no interface number 0
[  296.849068][ T3097] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  296.858331][ T3097] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.866398][ T3097] usb 7-1: Product: syz
[  296.870588][ T3097] usb 7-1: Manufacturer: syz
[  296.878095][ T3097] usb 7-1: SerialNumber: syz
[  296.884315][ T3097] usb 7-1: config 0 descriptor??
[  296.891103][ T3097] smsc95xx v2.0.0
[  296.938835][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1474'.
[  296.949119][  T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  296.959351][  T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  296.970316][  T982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60
[  296.979562][  T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  296.987841][  T982] usb 4-1: SerialNumber: syz
[  296.997051][  T982] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  297.005207][  T982] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12
[  297.206744][  T982] usb 4-1: USB disconnect, device number 105
[  297.293800][ T3097] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  297.304698][ T3097] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  298.482490][ T5905] usb 6-1: USB disconnect, device number 47
[  298.611340][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.629568][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.689137][T11485] netlink: 'syz.3.1488': attribute type 4 has an invalid length.
[  298.697822][ T3097] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  298.709565][ T3097] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  298.720841][ T3097] usb 7-1: USB disconnect, device number 63
[  298.731041][   T30] audit: type=1326 audit(1756654130.943:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.3.1488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fc058ebe9 code=0x0
[  298.773321][T11488] binder: 11486:11488 ioctl c0306201 0 returned -14
[  298.784043][T11490] netlink: 'syz.3.1488': attribute type 4 has an invalid length.
[  298.800883][T11490] /dev/rnullb0: Can't open blockdev
[  298.815373][ T5905] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  298.831140][T11492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1490'.
[  298.967013][ T5905] usb 6-1: Using ep0 maxpacket: 16
[  298.974525][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.989689][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  299.002600][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  299.014528][ T5905] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  299.024704][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  299.042663][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  299.053648][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  299.065731][ T5905] usb 6-1: Manufacturer: syz
[  299.076732][ T5905] usb 6-1: config 0 descriptor??
[  299.359947][ T5905] rc_core: IR keymap rc-hauppauge not found
[  299.368366][ T5905] Registered IR keymap rc-empty
[  299.377773][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.405145][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.435882][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  299.466517][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input32
[  299.494680][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.532961][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.566759][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.578077][T11498] ALSA: mixer_oss: invalid index 100000
[  299.585180][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.605180][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.656265][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.678789][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.715991][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.745133][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.776222][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  299.796425][ T5905] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  299.805763][ T5905] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  299.819907][ T5905] usb 6-1: USB disconnect, device number 48
[  299.955201][ T3097] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[  300.095091][ T5948] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  300.115242][ T3097] usb 7-1: Using ep0 maxpacket: 32
[  300.121516][ T3097] usb 7-1: too many configurations: 17, using maximum allowed: 8
[  300.130498][ T3097] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  300.139505][ T3097] usb 7-1: config 0 has no interface number 0
[  300.146634][ T3097] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  300.154728][ T3097] usb 7-1: config 0 has no interface number 0
[  300.161915][ T3097] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  300.169995][ T3097] usb 7-1: config 0 has no interface number 0
[  300.177736][ T3097] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  300.185787][ T3097] usb 7-1: config 0 has no interface number 0
[  300.192906][ T3097] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  300.200991][ T3097] usb 7-1: config 0 has no interface number 0
[  300.208548][ T3097] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  300.216653][ T3097] usb 7-1: config 0 has no interface number 0
[  300.223560][ T3097] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  300.231673][ T3097] usb 7-1: config 0 has no interface number 0
[  300.239170][ T3097] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  300.247328][ T3097] usb 7-1: config 0 has no interface number 0
[  300.253637][ T5948] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  300.255203][ T3097] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  300.272048][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.280495][ T3097] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.281378][ T5948] usb 4-1: config 0 descriptor??
[  300.288944][ T3097] usb 7-1: Product: syz
[  300.297978][ T3097] usb 7-1: Manufacturer: syz
[  300.302595][ T3097] usb 7-1: SerialNumber: syz
[  300.325461][ T3097] usb 7-1: config 0 descriptor??
[  300.335681][ T3097] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz)
[  300.515883][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.524672][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.534063][ T3097] etas_es58x 7-1:0.2: could not parse product info: ''
[  300.534588][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.542320][T11523] veth1_macvtap: entered allmulticast mode
[  300.555258][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.567365][T11523] /dev/rnullb0: Can't open blockdev
[  300.568685][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.599413][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.610969][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.631716][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.643156][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.655336][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.706060][  T982] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  300.868432][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.880790][ T5948] pegasus 4-1:0.0: probe with driver pegasus failed with error -32
[  300.891081][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58165, setting to 1024
[  300.913327][  T982] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  300.923804][  T982] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  300.933517][  T982] usb 6-1: Manufacturer: syz
[  300.946468][  T982] usb 6-1: config 0 descriptor??
[  300.958927][  T982] usb 6-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  300.966236][  T982] usb 6-1: No valid video chain found.
[  300.971541][    C1] etas_es58x 7-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D.
[  300.982970][    C1] etas_es58x 7-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: 9)
[  300.991917][    C1] etas_es58x 7-1:0.2: es58x_fd_handle_urb_cmd: Unknown command type (0x00) and command ID (0x00) combination
[  301.003638][    C1] etas_es58x 7-1:0.2: ops->handle_urb_cmd() returned error -EBADRQC
[  301.012578][ T5532] etas_es58x 7-1:0.2 can0: bit-timing not yet defined
[  301.160492][  T982] usb 6-1: USB disconnect, device number 49
[  301.183378][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  301.192577][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  301.201829][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  301.210997][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  301.220236][    C1] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  301.229402][    C1] etas_es58x 7-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO
[  301.237654][ T5532] etas_es58x 7-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL
[  301.239228][ T3097] usb 7-1: USB disconnect, device number 64
[  301.253862][ T3097] etas_es58x 7-1:0.2: Disconnecting syz syz
[  301.289748][ T8348] usb 4-1: USB disconnect, device number 106
[  301.368554][T11543] tmpfs: Bad value for 'mpol'
[  301.510892][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'.
[  301.527033][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'.
[  301.538673][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'.
[  301.549955][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'.
[  301.821499][T11571] /dev/rnullb0: Can't open blockdev
[  302.822892][T11598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1509'.
[  303.356096][    C1] ------------[ cut here ]------------
[  303.361653][    C1] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#1: kworker/1:4/5905
[  303.372345][    C1] Modules linked in:
[  303.376344][    C1] CPU: 1 UID: 0 PID: 5905 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
[  303.385765][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  303.395876][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[  303.401994][    C1] RIP: 0010:nf_send_unreach6+0x828/0xa20
[  303.407723][    C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20
[  303.427487][    C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246
[  303.433586][    C1] RAX: ffffffff8a51b3b7 RBX: ffff888032526280 RCX: ffff888033b4bc00
[  303.441721][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  303.449757][    C1] RBP: ffffc90000a08568 R08: ffff88802da68403 R09: 1ffff11005b4d080
[  303.457796][    C1] R10: dffffc0000000000 R11: ffffed1005b4d081 R12: ffff888077378101
[  303.465878][    C1] R13: dffffc0000000001 R14: 1ffff110064a4c5b R15: 0000000000000000
[  303.473881][    C1] FS:  0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000
[  303.482883][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  303.489547][    C1] CR2: 00007f2407820000 CR3: 000000000e338000 CR4: 00000000003526f0
[  303.497668][    C1] Call Trace:
[  303.500988][    C1]  <IRQ>
[  303.503858][    C1]  ? __pfx_nf_send_unreach6+0x10/0x10
[  303.509327][    C1]  ? unwind_next_frame+0xa5/0x2390
[  303.514473][    C1]  ? unwind_next_frame+0xa5/0x2390
[  303.519749][    C1]  ? rcu_is_watching+0x15/0xb0
[  303.524559][    C1]  ? unwind_next_frame+0xa5/0x2390
[  303.529736][    C1]  nft_reject_inet_eval+0x441/0x690
[  303.534987][    C1]  nft_do_chain+0x40c/0x1920
[  303.539606][    C1]  ? lock_release+0x4b/0x3e0
[  303.544260][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  303.549331][    C1]  ? ipv6_find_hdr+0xc78/0x1050
[  303.554214][    C1]  ? __kernel_text_address+0xd/0x40
[  303.559584][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  303.565032][    C1]  nft_do_chain_inet+0x25d/0x340
[  303.569997][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  303.575607][    C1]  ? NF_HOOK+0x9a/0x3a0
[  303.579795][    C1]  ? rcu_is_watching+0x15/0xb0
[  303.584606][    C1]  ? lock_acquire+0x5f/0x360
[  303.589504][    C1]  ? ip_sabotage_in+0x57/0x270
[  303.594396][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  303.599906][    C1]  nf_hook_slow+0xc5/0x220
[  303.604360][    C1]  NF_HOOK+0x206/0x3a0
[  303.608482][    C1]  ? skb_orphan+0xaf/0xd0
[  303.612842][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  303.618089][    C1]  ? NF_HOOK+0x9a/0x3a0
[  303.622276][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  303.627100][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  303.632336][    C1]  __netif_receive_skb+0xd3/0x380
[  303.637599][    C1]  ? process_backlog+0x2d5/0x14f0
[  303.642652][    C1]  process_backlog+0x60e/0x14f0
[  303.647576][    C1]  ? __pfx_process_backlog+0x10/0x10
[  303.653253][    C1]  ? trace_rcu_utilization+0x47/0x1d0
[  303.658676][    C1]  ? rcu_core+0x1339/0x1770
[  303.663300][    C1]  __napi_poll+0xc4/0x360
[  303.667770][    C1]  ? rcu_is_watching+0x15/0xb0
[  303.672564][    C1]  net_rx_action+0x707/0xe30
[  303.677221][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  303.682372][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  303.687634][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  303.693039][    C1]  handle_softirqs+0x283/0x870
[  303.697882][    C1]  ? do_softirq+0xec/0x180
[  303.702357][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  303.707726][    C1]  ? wg_socket_send_skb_to_peer+0x16b/0x1d0
[  303.713682][    C1]  do_softirq+0xec/0x180
[  303.718023][    C1]  </IRQ>
[  303.721063][    C1]  <TASK>
[  303.724016][    C1]  ? __pfx_do_softirq+0x10/0x10
[  303.729066][    C1]  ? rcu_is_watching+0x15/0xb0
[  303.733864][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  303.739135][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  303.744890][    C1]  ? do_raw_read_unlock+0x3d/0x80
[  303.749988][    C1]  wg_socket_send_skb_to_peer+0x16b/0x1d0
[  303.755776][    C1]  wg_packet_tx_worker+0x1c8/0x7c0
[  303.760917][    C1]  ? rcu_is_watching+0x15/0xb0
[  303.765920][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  303.771778][    C1]  process_scheduled_works+0xae1/0x17b0
[  303.777396][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  303.783502][    C1]  worker_thread+0x8a0/0xda0
[  303.788142][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  303.794503][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  303.800460][    C1]  ? __kthread_parkme+0x7b/0x200
[  303.805460][    C1]  kthread+0x711/0x8a0
[  303.809562][    C1]  ? __pfx_worker_thread+0x10/0x10
[  303.814703][    C1]  ? __pfx_kthread+0x10/0x10
[  303.819331][    C1]  ? rcu_is_watching+0x15/0xb0
[  303.824087][    C1]  ? __pfx_kthread+0x10/0x10
[  303.828706][    C1]  ret_from_fork+0x47c/0x820
[  303.833316][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  303.838450][    C1]  ? __switch_to_asm+0x39/0x70
[  303.843248][    C1]  ? __switch_to_asm+0x33/0x70
[  303.848227][    C1]  ? __pfx_kthread+0x10/0x10
[  303.852855][    C1]  ret_from_fork_asm+0x1a/0x30
[  303.857658][    C1]  </TASK>
[  303.860718][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  303.868022][    C1] CPU: 1 UID: 0 PID: 5905 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
[  303.877418][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  303.887573][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[  303.893655][    C1] Call Trace:
[  303.896936][    C1]  <IRQ>
[  303.899783][    C1]  dump_stack_lvl+0x99/0x250
[  303.904399][    C1]  ? __asan_memcpy+0x40/0x70
[  303.908994][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.914207][    C1]  ? __pfx__printk+0x10/0x10
[  303.918805][    C1]  vpanic+0x281/0x750
[  303.922930][    C1]  ? __pfx_vpanic+0x10/0x10
[  303.927522][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  303.932978][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  303.938179][    C1]  panic+0xb9/0xc0
[  303.941998][    C1]  ? __pfx_panic+0x10/0x10
[  303.946425][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  303.951475][    C1]  __warn+0x334/0x4c0
[  303.955466][    C1]  ? nf_send_unreach6+0x828/0xa20
[  303.960602][    C1]  ? nf_send_unreach6+0x828/0xa20
[  303.965640][    C1]  report_bug+0x2be/0x4f0
[  303.969991][    C1]  ? nf_send_unreach6+0x828/0xa20
[  303.975030][    C1]  ? nf_send_unreach6+0x828/0xa20
[  303.980110][    C1]  ? nf_send_unreach6+0x82a/0xa20
[  303.985247][    C1]  handle_bug+0x84/0x160
[  303.989540][    C1]  exc_invalid_op+0x1a/0x50
[  303.994055][    C1]  asm_exc_invalid_op+0x1a/0x20
[  303.998905][    C1] RIP: 0010:nf_send_unreach6+0x828/0xa20
[  304.004720][    C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20
[  304.024602][    C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246
[  304.030807][    C1] RAX: ffffffff8a51b3b7 RBX: ffff888032526280 RCX: ffff888033b4bc00
[  304.038870][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  304.046848][    C1] RBP: ffffc90000a08568 R08: ffff88802da68403 R09: 1ffff11005b4d080
[  304.054910][    C1] R10: dffffc0000000000 R11: ffffed1005b4d081 R12: ffff888077378101
[  304.062881][    C1] R13: dffffc0000000001 R14: 1ffff110064a4c5b R15: 0000000000000000
[  304.070861][    C1]  ? nf_send_unreach6+0x827/0xa20
[  304.075928][    C1]  ? __pfx_nf_send_unreach6+0x10/0x10
[  304.081306][    C1]  ? unwind_next_frame+0xa5/0x2390
[  304.086440][    C1]  ? unwind_next_frame+0xa5/0x2390
[  304.091553][    C1]  ? rcu_is_watching+0x15/0xb0
[  304.096332][    C1]  ? unwind_next_frame+0xa5/0x2390
[  304.101533][    C1]  nft_reject_inet_eval+0x441/0x690
[  304.106735][    C1]  nft_do_chain+0x40c/0x1920
[  304.111336][    C1]  ? lock_release+0x4b/0x3e0
[  304.115924][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  304.120952][    C1]  ? ipv6_find_hdr+0xc78/0x1050
[  304.125894][    C1]  ? __kernel_text_address+0xd/0x40
[  304.131450][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  304.136913][    C1]  nft_do_chain_inet+0x25d/0x340
[  304.141935][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  304.147391][    C1]  ? NF_HOOK+0x9a/0x3a0
[  304.151558][    C1]  ? rcu_is_watching+0x15/0xb0
[  304.156331][    C1]  ? lock_acquire+0x5f/0x360
[  304.160921][    C1]  ? ip_sabotage_in+0x57/0x270
[  304.165692][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  304.171166][    C1]  nf_hook_slow+0xc5/0x220
[  304.175590][    C1]  NF_HOOK+0x206/0x3a0
[  304.179662][    C1]  ? skb_orphan+0xaf/0xd0
[  304.183993][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  304.189190][    C1]  ? NF_HOOK+0x9a/0x3a0
[  304.193346][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  304.197938][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  304.203144][    C1]  __netif_receive_skb+0xd3/0x380
[  304.208171][    C1]  ? process_backlog+0x2d5/0x14f0
[  304.213458][    C1]  process_backlog+0x60e/0x14f0
[  304.218313][    C1]  ? __pfx_process_backlog+0x10/0x10
[  304.223598][    C1]  ? trace_rcu_utilization+0x47/0x1d0
[  304.228971][    C1]  ? rcu_core+0x1339/0x1770
[  304.233475][    C1]  __napi_poll+0xc4/0x360
[  304.237800][    C1]  ? rcu_is_watching+0x15/0xb0
[  304.242574][    C1]  net_rx_action+0x707/0xe30
[  304.247171][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  304.252325][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  304.257527][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  304.262833][    C1]  handle_softirqs+0x283/0x870
[  304.267596][    C1]  ? do_softirq+0xec/0x180
[  304.272019][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  304.277304][    C1]  ? wg_socket_send_skb_to_peer+0x16b/0x1d0
[  304.283286][    C1]  do_softirq+0xec/0x180
[  304.287530][    C1]  </IRQ>
[  304.290462][    C1]  <TASK>
[  304.293390][    C1]  ? __pfx_do_softirq+0x10/0x10
[  304.298241][    C1]  ? rcu_is_watching+0x15/0xb0
[  304.303011][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  304.308212][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  304.313931][    C1]  ? do_raw_read_unlock+0x3d/0x80
[  304.318957][    C1]  wg_socket_send_skb_to_peer+0x16b/0x1d0
[  304.324677][    C1]  wg_packet_tx_worker+0x1c8/0x7c0
[  304.329785][    C1]  ? rcu_is_watching+0x15/0xb0
[  304.334551][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  304.340266][    C1]  process_scheduled_works+0xae1/0x17b0
[  304.345847][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  304.351916][    C1]  worker_thread+0x8a0/0xda0
[  304.356507][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  304.362838][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  304.368733][    C1]  ? __kthread_parkme+0x7b/0x200
[  304.373676][    C1]  kthread+0x711/0x8a0
[  304.377751][    C1]  ? __pfx_worker_thread+0x10/0x10
[  304.382864][    C1]  ? __pfx_kthread+0x10/0x10
[  304.387457][    C1]  ? rcu_is_watching+0x15/0xb0
[  304.392224][    C1]  ? __pfx_kthread+0x10/0x10
[  304.396829][    C1]  ret_from_fork+0x47c/0x820
[  304.401422][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  304.406532][    C1]  ? __switch_to_asm+0x39/0x70
[  304.411294][    C1]  ? __switch_to_asm+0x33/0x70
[  304.416142][    C1]  ? __pfx_kthread+0x10/0x10
[  304.420830][    C1]  ret_from_fork_asm+0x1a/0x30
[  304.425595][    C1]  </TASK>
[  304.429207][    C1] Kernel Offset: disabled
[  304.433521][    C1] Rebooting in 86400 seconds..