last executing test programs:

4m11.156910974s ago: executing program 0 (id=605):
r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x10001, 0x200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000200)={0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2)
r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r3 = fspick(r2, &(0x7f00000002c0)='./file0/file0\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000280)='*\x9c\x00', 0x0, r1)
execveat(r2, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x1000)
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)

4m10.751740564s ago: executing program 0 (id=610):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x1}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x0, 0x1}, 0x10)
socket$inet(0x2, 0x80001, 0x84) (async)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000180)=0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=r4], 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r4, 0x3}, 0x8)

4m10.669031198s ago: executing program 0 (id=612):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1, 0x5, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x9) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async, rerun: 64)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) (async)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

4m10.419689842s ago: executing program 0 (id=614):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0xdcb, 0x2, 0x0, 0x3, 0x7ff, 0x4}, &(0x7f0000000140)=0x20) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00') (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
setpgid(0x0, r1) (async)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) (async)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r3, 0x6f000) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x4}]}, 0x3c}}, 0x0) (async)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)

4m10.171695937s ago: executing program 0 (id=618):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
unshare(0x8020000)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @default})
r2 = semget$private(0x0, 0x4000, 0x0)
semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000340)=""/72)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
semctl$SEM_STAT(r2, 0x4, 0x12, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r3, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000000240)=""/182, 0xb6}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0)
fadvise64(r3, 0x92, 0x5, 0x1)
mmap(&(0x7f000018d000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r0, 0xa4716000)

4m9.891384454s ago: executing program 0 (id=620):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x101000)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0x3}}, 0x5b, 0x5, &(0x7f0000000040)="18bf3d54291e3eb7ae8ca3c4c6f9423d4cf59701dfe85c735e5e6f96f1bb295c7d49657c0e6eba0fee431157a37c5e1329b78e50d5ed7674a25fd4d2aabf15420514a5b753e10abbb7a1756cce0194c5e1c808266ef1f6c88a15c5"})
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000100)=0x4)
r1 = socket$inet6(0xa, 0x80000, 0x80000001)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x82, 0x2, "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"})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r1, {0x8}}, './file0\x00'})
close(r2)
mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x8010, 0xffffffffffffffff, 0x7)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008010}, 0x4004815)
r4 = syz_open_dev$usbfs(&(0x7f0000000400), 0x1, 0x200402)
ioctl$USBDEVFS_RESET(r4, 0x5514)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x86}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000084)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', <r6=>0x0, 0x4, 0x6, 0xee, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x190b, 0xfff}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1815}, 0x800)
ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r0, {0x5}}, './file0\x00'})
ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000800)={0x5, 0x9})
ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000840)=""/131)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000940)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fffffff, 0x42}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000a40), r7)
mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r2, 0x82)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000bc0)=@urb_type_bulk={0x3, {0x9, 0x1}, 0x4bbc, 0xc0, &(0x7f0000000a80)="405833a4b77d1c0f2cbc066bb6b0959687ccea98943fbd4752f96dcc701547e89e52ea35b3828368e69d9fb60e1b7f40c6df555037e664a8c39c126a307fcdd316a334e09f41918870bd92bbf3ddb70a08a930329e294a718fff58595a4db1c969c602c81875", 0x66, 0x6, 0x0, 0x8, 0x3, 0xffffffff, &(0x7f0000000b00)="1fcfa2236caaed518803b2d5b24f7404fec8eb8c18a5d0b4b616589a345f906f22de4f6f131c6c3bed9dac7d39b86efaea1713616aab596115cf8ebea539a9fd4a2aecad812493b2dd9d48e57a880438cc5997adeebabf24f59a92c619850bcd4b61a599544c004343be3043ed0ce06c36b065166735a9eb036cbb046cd9b7bc0de74bf049da1a732c301f1fad13ff417ede7ab67438fbe12dd1be0ef259bc9ba3"})
ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000c00)={0x0, r2})
r9 = accept4(r7, 0x0, &(0x7f0000000c40), 0x80000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r9)

4m9.65094877s ago: executing program 32 (id=620):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x101000)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0x3}}, 0x5b, 0x5, &(0x7f0000000040)="18bf3d54291e3eb7ae8ca3c4c6f9423d4cf59701dfe85c735e5e6f96f1bb295c7d49657c0e6eba0fee431157a37c5e1329b78e50d5ed7674a25fd4d2aabf15420514a5b753e10abbb7a1756cce0194c5e1c808266ef1f6c88a15c5"})
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000100)=0x4)
r1 = socket$inet6(0xa, 0x80000, 0x80000001)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x82, 0x2, "95b608166620208c2c9cb5cd32a4fa9b61b509cbe55053c1a172477cca0bc0add210759949d6cf0ad5bf9e5c52771a58a10ee85e06392e1da795ed2707fdcb84e97b2b5192cf17674e9f09b11054f7a38a8ed99227d46ecfd27eb384767d6c5afcb48f57d1a41c36adfafecc6fc9fd264ea8b0877fea5fa85543fcf83d2fbc2518dad62586f82737642515afecd30547c3a0e1353da6a5f168bd80f3164b0241f18de13a9753be26fd5573facb4f10e6c0eb8cf06e8ce941d630ba3ad61b3d355835f75bfff65275b0bb183c0fac5e9821984f3b55abbaa02d6402d5efbcec2b3eb5bdb7a9924409a7cf061f94a57cbe4362fad1b958cd79e92300aa774fcbfa"})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r1, {0x8}}, './file0\x00'})
close(r2)
mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x8010, 0xffffffffffffffff, 0x7)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008010}, 0x4004815)
r4 = syz_open_dev$usbfs(&(0x7f0000000400), 0x1, 0x200402)
ioctl$USBDEVFS_RESET(r4, 0x5514)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r2)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x86}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000084)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', <r6=>0x0, 0x4, 0x6, 0xee, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x190b, 0xfff}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1815}, 0x800)
ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r0, {0x5}}, './file0\x00'})
ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000800)={0x5, 0x9})
ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000840)=""/131)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000940)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fffffff, 0x42}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000a40), r7)
mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r2, 0x82)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000bc0)=@urb_type_bulk={0x3, {0x9, 0x1}, 0x4bbc, 0xc0, &(0x7f0000000a80)="405833a4b77d1c0f2cbc066bb6b0959687ccea98943fbd4752f96dcc701547e89e52ea35b3828368e69d9fb60e1b7f40c6df555037e664a8c39c126a307fcdd316a334e09f41918870bd92bbf3ddb70a08a930329e294a718fff58595a4db1c969c602c81875", 0x66, 0x6, 0x0, 0x8, 0x3, 0xffffffff, &(0x7f0000000b00)="1fcfa2236caaed518803b2d5b24f7404fec8eb8c18a5d0b4b616589a345f906f22de4f6f131c6c3bed9dac7d39b86efaea1713616aab596115cf8ebea539a9fd4a2aecad812493b2dd9d48e57a880438cc5997adeebabf24f59a92c619850bcd4b61a599544c004343be3043ed0ce06c36b065166735a9eb036cbb046cd9b7bc0de74bf049da1a732c301f1fad13ff417ede7ab67438fbe12dd1be0ef259bc9ba3"})
ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000c00)={0x0, r2})
r9 = accept4(r7, 0x0, &(0x7f0000000c40), 0x80000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r9)

3m19.45564247s ago: executing program 2 (id=988):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000340)={0x10001, 0x4, 0x4, 0x2000, &(0x7f00001d9000/0x2000)=nil})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r1, 0x2, 0x71b, 0x2)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000795d6c08450c01806dc4010203010902124d36000000000904"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x1ff, 0x6}], 0x1)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x404f26, 0x5, 0x2, 0x401, 0xc, 0xcc7, 0xfff, 0x5c95239c, 0x5, 0x3bf, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x4, 0x400, 0x195, 0x2, 0x0, 0xb, 0x402, 0x9, 0x3, 0x40, 0x5, 0x4, 0x8000003, 0xdffffffa]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa4717000)

3m17.382026189s ago: executing program 2 (id=1007):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async, rerun: 32)
mkdir(&(0x7f0000000140)='.\x02\x00', 0x1a9) (rerun: 32)
mount$nfs(&(0x7f0000000040)='\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) (async)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) (async, rerun: 64)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 64)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}, 0x0, 0x300}, 0x90) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) (async)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async)
close(0x3)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2f600e834dfaa643)
mlock(&(0x7f0000266000/0x1000)=nil, 0x1000)

3m17.251804302s ago: executing program 2 (id=1008):
syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xf7, 0x8b, 0x42, 0x20, 0x52b, 0x1803, 0x152a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x2, 0xb0, 0x1, [{{0x9, 0x4, 0x2, 0x9, 0x0, 0x10, 0x31, 0x1c, 0x6d}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x27, &(0x7f0000000300)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x83, "efcb02b4bd0a2d9e99fb9751c88c3726"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x7, 0x32, 0x10, 0xab}, @ptm_cap={0x3}]}, 0x3, [{0xb5, &(0x7f0000000340)=@string={0xb5, 0x3, "e5350a5e477ae34c5d9fd56ac367b16cb88df19599a8904aa9165381ca05d568e30e6550b914bee234cb278add0cf4df31d5cb29fca29ad20d5c15e9cdfe644ff6c81afd6b7a95f0d0ba2cb1ff4e77f4ea7f85e30fc04eb30c86599b04689c4e082c7870a8ed0d53604511bbd4412a231dadc5ef61e68190feef58ec47d36a2b4c550a27849a1208d1bf454775003dce2e13a217fec4a4042d8eaf2ac4dbfab52271d8ba73bf849ccdda7b08fe6701a619cfb3"}}, {0x8a, &(0x7f0000000440)=@string={0x8a, 0x3, "bb6bb8f5843b532053ddf6028b35fae51e4fd91ea7e38d2d4431ecfdfacc2f15b1bdc0b99ad8d9a5d44192dcae2664b35d3eeb5f132bb0741a5698cf16fa4050f0c24bae59989ae877f8bb0cf8d4ae10730496bb2755fc7bd9f9cdd1eb4783cfdfb8071e841926e1376152377d7517b93a806afa01e85d3b550eddc4331a1b9135fdaf5750cfbce9"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2009}}]})

3m15.959286596s ago: executing program 2 (id=1024):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000380)=""/141, 0x8d)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000240)={0x2e, 0x6, 0x0, {0x3, 0x5, 0x5, 0x0, 'ext4\x00'}}, 0x2e)
bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1, @none, 0x8001, 0x2}, 0xe)
creat(&(0x7f0000001380)='./file0\x00', 0xa4)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)

3m15.723610768s ago: executing program 2 (id=1026):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="2010020b6ebfe659"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x81}, 0x0}) (async)
syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x9}, 0x2d, r2) (async)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)

3m15.414657093s ago: executing program 2 (id=1030):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

3m15.061922428s ago: executing program 33 (id=1030):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

2m34.359414803s ago: executing program 3 (id=1302):
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@loopback, @in=@loopback, 0x4e20, 0x78, 0x4e21, 0x7ff, 0xa, 0x80, 0x20, 0x16, r1, 0xee00}, {0xf110, 0x6, 0x1, 0x5, 0x474, 0x80000001, 0x2, 0x5}, {0x7fff, 0x5, 0xc, 0x3}, 0x5, 0x6e6bbe, 0x2, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d5, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x3503, 0x0, 0x1, 0xb, 0x40, 0x6, 0x2}}, 0xe8)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000001c0)="46072106e8c3552af247daec8fe7f2fc0a6ae4c74b34db884cb4940809e88fcbe2d57ada536ef276e756ca7c6dea00215c30af6feb48e61bf5f804156e706840ce20dc6310ea5e447430", 0x4a}, {&(0x7f0000000240)="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", 0xfb}, {&(0x7f0000000340)="230c6d7299d39d8909402219433018ce9cb4b1444ab64510a803b615c7720112ef023873a1565a9a1ecd3053e4ae99a8cf743f650a8198c0ada4a69d8d69f9b493f15765b75adec9478cdfb2d05ed0b0572a3a06c02badc3ab57575fe5d2dbe09d31f7ed80a98ed343e1d230bd9c2ef4782b3e74c82965b44e80141bef1456a50bf9b24e6cb59bb63462728437efa4be2bd33e2a2d44dc6458932bb4c92f", 0x9e}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="ef4c17e36f98eb7d12d2af3e7c8b7fd8d510f2d13bd21376011c56451858a7a7445067e37d6529f7ce4084444e3e6159fbc69b4ed5cde37260fcb9ba274b8a63caa8fafab34837278ca76264906b68691ba8c5f2a5577cadc4e3faf533fc70e61b93ecca3e21995281079f5d7b04defaacbd303cef92d79d4cbbdd6df461b4d0d97111888a2952d21e2ee6cf0ac00aa7900c6b7eaf4ede6db38179b5bbd42bee04f5d99305fc80edb82f1c6a629d65dc72396a640aa3ec220ac22ea7b1af510c8f53354b48ae5a6c6ca5a93d8409a2a0393bb2451ee0b637212fb1a4c29edfe9796d61ddd9546bbc60342df33258", 0xee}, {&(0x7f0000001500)="d7c0862e271066529dbb7318a7b8374582deb9b2917268a2d9462ed9b6562937e1fb64beb0d817feccb536a7481ce34f4e8298e2950686c978d31936a59d479ebfea8f5f3367957c6113ed5c01f72ce1a2b586dd378a35a506ed04339415e977cda7171454f2ec6c03db71f482ba257d3e12725104e4f01f6d367cff7776529054", 0x81}], 0x6)
r2 = socket$netlink(0x10, 0x3, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x8)
r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001640), &(0x7f00000016c0)=0x60, 0x0)
accept$nfc_llcp(r4, &(0x7f0000001700), &(0x7f0000001780)=0x60)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000017c0)={'wlan1\x00'})
timer_create(0x7, &(0x7f00000028c0)={0x0, 0x4, 0x0, @thr={&(0x7f0000001800)="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", &(0x7f0000002800)="e0510b9fabaa7c3b4693551424846c6fb9c1b100b7f2fd86c3513e03b648b69419201d6b2c0c9d0069773a6265c6e2547d40e4b44607c227711a5d6367d0044f899b9471b02095b4f23e649c07fbf1dbd23e651f2113568acf211ffa653aa704f769004b784a6f824bb967e813d7e67d7972d785403c5dbdef709c9febf9b6022304b25f3968922ac1b45782a7a636b440a3a8c2982202"}}, &(0x7f0000002900))
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002940), 0x200100, 0x0)
r6 = syz_clone(0x100, &(0x7f0000002980)="ab45449753fe563741f2da33c3243f557fe46d2fafa5a9ba05a2da3a24b15390231b1dbb15b850237820038478658139e7edf8882d919764207d65bd5000a9ae4d19edeb1bdb779d721c5a7d255c89cab85ad8f434d5502d9e8ac5deeeab04a9760c8a1e184e18798a0a93712f003ac600910bd5e0d0babf6a1f663b8a4725636b49c82fc71aada8066bd7aa9a777c1872be652c84dc2f7d3db0b11c71d58c73cb3c553406fd35d550eacba68ecc720e39ff7e01a1f122f0960d9a97fda03f3205bd5ec431d179e0efdf", 0xca, &(0x7f0000002a80), &(0x7f0000002ac0), &(0x7f0000002b00)="a4bbf0b50b90d593373dc81ee82eb688c455300ea931124b20bc54c4d04d3cee28ea1a4c61b63128e99223959e18096be9e591e6fa0ee94cf326ba6cd59bb0e9707751cf0e41f28c6e62c5b0e71093c5f9c905394243551a962d95ee10370d36931755ba9736cde3c796f49f76d96b526d7a4ad75f84865ef9cca7042f2633349ab077f902b120a05db716ffeb64eb1824be7e8b91a95ef1568e49c65b7a6222c23e8bab714e6922afeec66df470405496f3c47c1f9686f889c98902fed7c23655c7b1d1ff085b054077b18dfa120b825416b3c2abc7d28ab1f04ce93feeb1690e6e5c4fc409400b7cbd924ef6")
write$cgroup_pid(r5, &(0x7f0000002c00)=r6, 0x12)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000002c40)={<r7=>r4, 0x4, 0x8000, 0x6})
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x48, 0x1404, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c094}, 0x2008000)
r8 = getpgid(0xffffffffffffffff)
timer_create(0x6, &(0x7f0000002dc0)={0x0, 0x16, 0x0, @tid=r8}, &(0x7f0000002e00)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000002e40)={<r10=>0x0, <r11=>0x0})
timer_settime(r9, 0x1, &(0x7f0000002e80)={{}, {r10, r11+60000000}}, &(0x7f0000002ec0))
io_setup(0x8, &(0x7f0000002f00)=<r12=>0x0)
io_getevents(r12, 0x80, 0x2, &(0x7f0000002f40)=[{}, {}], &(0x7f0000002f80)={0x0, 0x989680})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000003040)={'tunl0\x00', &(0x7f0000002fc0)={'gre0\x00', <r13=>r1, 0x40, 0xf840, 0x8f, 0x1000, {{0x15, 0x4, 0x2, 0x2, 0x54, 0x64, 0x0, 0x5, 0x4, 0x0, @empty, @remote, {[@ssrr={0x89, 0x1b, 0x72, [@remote, @private=0xa010101, @local, @empty, @rand_addr=0x64010101, @rand_addr=0x64010100]}, @generic={0x44, 0xd, "ed5886766d489e28d067e5"}, @end, @lsrr={0x83, 0xb, 0x2c, [@remote, @rand_addr=0x64010102]}, @lsrr={0x83, 0x7, 0xbe, [@broadcast]}, @noop, @noop]}}}}})
connect$can_j1939(r7, &(0x7f0000003080)={0x1d, r13, 0x2, {0x0, 0xf, 0x7}}, 0x18)
clock_nanosleep(0x3, 0x1, &(0x7f00000030c0)={0x0, 0x3938700}, &(0x7f0000003100))
fsetxattr$security_evm(r2, &(0x7f0000003140), &(0x7f0000003180)=@v2={0x3, 0x3, 0x14, 0x1, 0x7d, "9179ee0809947e8df02a544e882c1bc76792c37dc2f2206b82ad5bb397c80c5e7af014c6c1079d0e8e82d81726ad1cd0368924ef97204e82e2b4b36018395b297c30ee57ccdc05ce07f570b0bab4c858cd417401fa24361620e3489d1c2325ad87d78321058920aabb22db9f0fe0ef2aca075ced69b8683bb1748d610e"}, 0x86, 0x3)
ioctl$IOMMU_VFIO_SET_IOMMU(r7, 0x3b66, 0x1)
fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000003240), &(0x7f0000003280)='./file0\x00', 0x8, 0x2)
rt_sigqueueinfo(r8, 0x1a, &(0x7f00000032c0)={0x3c, 0x7, 0x800})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000003340))
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000003380)=0x22200, 0x4)

2m34.16366895s ago: executing program 3 (id=1303):
prctl$PR_SET_ENDIAN(0x14, 0x1)
mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) (async)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x1})
r4 = syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x420e, r4) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0x10000, @private2}}, 0x0, 0x24def624, 0xda9, 0x80000000, 0xfc94}, &(0x7f0000000200)=0x98) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async)
r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x80000000004, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x59565955}}) (async)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x0) (async)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0], 0x1e)
prctl$PR_SET_ENDIAN(0x14, 0x0)

2m33.999578034s ago: executing program 3 (id=1305):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x4bfb, &(0x7f0000000240)={0x9, 0x3f00})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4)
recvfrom(r2, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffcd6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', <r3=>0x0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x15c, 0x28, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0x4}, {0xf, 0x3}, {0x5, 0x5}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xa7}}}, @c_atm={{0x8}, {0xcc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0x2f, 0x3, "fb5a1dcede0d7ff9544abb3a241c24bfe9f474b2a745549962e0beaed306731cffb6d17e8ebf4b632e86a9"}, @TCA_ATM_HDR={0x33, 0x3, "ed9f66e1f7b94840dd872261f0bd8dbc17dd5a9ba12a31e159281d179f87d3c5b913bf31016a7c2131f2dab24fce41"}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x3b, 0x3, "dd25129560ebcccde58356241e3d6923044e807a8b48c10c407c9f32b21a1af0007e2f16c7c415a26b4feffac33e59d1894d5e9a77df07"}, @TCA_ATM_HDR={0x8, 0x3, "2cb9e18f"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x5, 0x3, "eb"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x6}}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xe7, 0x6, 0x1, 0x6, 0xffff, 0x1b}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x50}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4040481}, 0x200010d4)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc294, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x7a0, 0x4, 0x1, {0x22, 0xcbd}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x7, 0x9, 0x8, 0x10, 0xb5}, 0x30, &(0x7f0000000400)={0x5, 0xf, 0x30, 0x2, [@generic={0x21, 0x10, 0x4, "f9c89ae2cd71de2fa5f3c3a41e0cca13909ae36c1b8ec8774b42ce060a2b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x10, 0x18, 0x4caf}]}, 0x5, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xfcff}}, {0xf4, &(0x7f0000000480)=@string={0xf4, 0x3, "d68f0b8c2815881b1cc5a73d9c4fdf128560a94c09acbd81e21179a924797967d42cd35d1cfc673839a535e1956dc029130ebbdf64b00134b2e97390c30fea145726488892cd56f30f1fb3f62c93c3632e58324eb146cac3531af38be62609fd7b5f72678bf421216299b2c7dfea5b0084afdbe3bfeaa8ce009a5dfecc87265475775e1218ff17802807429225e1a0a6c7414c1fa30312972630558badc3d8d35fb2a7b12d1650ea4841833b2fc699abf7cbf552a65a68c5ede2a1fa81d743b3ca0028fb7e601a59f00f905ef770dd2d1f9fb701fdf09617712b11c273c7c0a38012bb8132c30de412f98b2429d8862d6370"}}, {0x2e, &(0x7f0000000580)=@string={0x2e, 0x3, "877247be7c5c8db0c7f67d81b629b01261df8773fb316456758640e6e0bcaad53d76b5e20196730d178b2f53"}}, {0xd8, &(0x7f0000000640)=@string={0xd8, 0x3, "72fd6b91e0b18e0cc554927e4908407d36d4a8af7a18989e14140a80d3b0d07dc2f7ab5a217f0da04e19319de42cfc607f19ead3ae44f3236bab528dcd3b7a77aeb99894339f09cac6e018f675aeae6a7b984a16862f306b79118a54e8997fc26383de739496231277e0e56d7e179a848cd9df3cf3a7524a050f7f77ebb085aefbf2cb18662495c3ec09a92459298b4a362e29b44eef6cc164799a226db84325c8500dfeeef5f493f4c47a9f3e38ce0edb503307827c062c9f8cf3ecd2a3334c40c4f59efc5a4333bae10f67f5f8f9b806625c84d852"}}, {0xbc, &(0x7f00000007c0)=@string={0xbc, 0x3, "91af160aca9c2307897f93b87e3dd7e1f1d003710c297969406c1094fb684ae404ed87be66d75922fd8f5fea585a5a355e6fa366dc3761dc8599a31a1bd88fd245c08cbb54a24cb6a6d8a5d096d728fde87647f5325109742451f8eee33059a65ab36c481826265686238e57798315f85b398abc5d892862bd0dac06def79a3e35f3dde6e80fb079df834758447935f1ef04e9ce31acd614a2837eaa7a39c068783ad40aaaa43fcf0bd0b70a81a3385e30beb574d9c9ee7eb13e"}}]})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='adfs\x00', 0x40, 0x0)

2m33.295842061s ago: executing program 3 (id=1308):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4)

2m33.287773042s ago: executing program 3 (id=1309):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async, rerun: 32)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
r4 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r4) (async)
tkill(r4, 0x12) (async)
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') (async, rerun: 64)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1044}, 0x84) (rerun: 64)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a5109ead35feb555c600b7f9125df4f6f8b8942e993dfda0138cf2bc102feaf421ee057192c40c536d9213d1263108ae947b42e7b9e291ca94624b5941fc2af6bca8da6bcf0e50f9dd6ffd42530dfcfa20ae81a669c60b1cbd9cc7c5a6150a64cc24bdce9f4d0cfe64", @ANYRES16=r5, @ANYBLOB="01010094f3e7edac2d000000000000002b000000050034007600"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) (async)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x38)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

2m32.94434191s ago: executing program 3 (id=1310):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x4008031, 0xffffffffffffffff, 0xac96a000)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f00000000c0)=0x7, 0x4)
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil)
mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6704", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000"], 0x50}}, 0x400c0)
socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={[&(0x7f0000000040)='/dev/rnullb0\x00', &(0x7f0000000200)='/.s\x1a\xf1l:\f\v\xaa\xa4\xf6\xc3`\xac', &(0x7f00000000c0)='qnx4\x00', &(0x7f0000000100)='\x00\x00\x00']}, &(0x7f0000000180)={[&(0x7f00000002c0)='\xfd<H`4', &(0x7f0000000080)='/dev/rnullb0\x00']}, 0x1000)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000074d564b"])
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000300)={{&(0x7f0000bc2000/0x1000)=nil, 0x1000}})
ioctl$sock_rose_SIOCRSCLRRT(r7, 0x8919)
mount(&(0x7f0000001400)=@md0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='qnx4\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000001c0)=0x17, 0x4)

2m17.884498991s ago: executing program 34 (id=1310):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x4008031, 0xffffffffffffffff, 0xac96a000)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f00000000c0)=0x7, 0x4)
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil)
mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6704", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000"], 0x50}}, 0x400c0)
socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={[&(0x7f0000000040)='/dev/rnullb0\x00', &(0x7f0000000200)='/.s\x1a\xf1l:\f\v\xaa\xa4\xf6\xc3`\xac', &(0x7f00000000c0)='qnx4\x00', &(0x7f0000000100)='\x00\x00\x00']}, &(0x7f0000000180)={[&(0x7f00000002c0)='\xfd<H`4', &(0x7f0000000080)='/dev/rnullb0\x00']}, 0x1000)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000074d564b"])
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000300)={{&(0x7f0000bc2000/0x1000)=nil, 0x1000}})
ioctl$sock_rose_SIOCRSCLRRT(r7, 0x8919)
mount(&(0x7f0000001400)=@md0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='qnx4\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000001c0)=0x17, 0x4)

1m30.350269607s ago: executing program 6 (id=1572):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140600001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280040001800000000008000140000003000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m30.056164388s ago: executing program 6 (id=1574):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000003c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x0)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000100)={0x1, 0x20, 0x40, 0x6dd, 0x0, 0x0, 0x2, 0x801, 0xffffff6f, 0x40000009, 0x0, 0x8, &(0x7f0000001140)=[0x6], 0x1, 0x0})
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0)

1m29.795931011s ago: executing program 6 (id=1575):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0xb963})
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x7ff, @local, 0x8}, 0x1c)
write(r2, 0x0, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)

1m29.624656949s ago: executing program 6 (id=1577):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x200, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1)

1m29.482562983s ago: executing program 6 (id=1579):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit']) (async)
read$FUSE(0xffffffffffffffff, &(0x7f00000036c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x7, 0x40000001, 0x2, 0xa, 0x400, 0x4, 0x0, 0x0, 0x8, 0x8}}, 0x50) (async)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1d0, &(0x7f0000000340)=ANY=[@ANYBLOB="3800004e3b605383329d2850d87293325afa5d5b935fe2b5ca7dca2565773260dea5cbd089c619d2ac5ad9456df676e13a86c18e7fdaf900000000000000094e91fca7429dbb6351d238e7a2481e9d5607b025c87d1cc59ab5e09b2bb79557471c9d17285a6f512a3c8cdda1b6153ccba135ee008700004eda8c973c9cfe96f039263c22b24129dbf8ef40a06e1982c8026c8827f4e1ad119b874b8cc1372c222d36da6dbea0c83f3611e27dabab7654ea4a66b070350642b4a525b4900e76297db63a03874464fb3a5434f6a66acf6e9e12aa3da67058ec2f9c135bd3bb602b643aca8419e55fecee013b2fd6f9c7e18f8ed7067f1864056698fa950b842a007e00004ef2dfe9ccf19190e8c761ab5576cb91a7bdcfa8382c9a9f6ff02516e514e3bcaa8f6080f083483e26243714b3de6cf4fd70db084794d0dce4ff1aceb67367d76a4065b5e98125474a08a6ad4e74ef45070af7566f14f48981b701e15da66c89ce6573e1b2f1bec1fe7bfc96fa22e3702e95ed2e65e07cc995f507c46c14c600004500004e14d45beeae2d65158f5773dced55915e71d29a5bc3111d9e5cc7438cec205238649b80fe3946d5a665128f97a27399c3f95d8fb30229e14ad9d6bc7a5ef54a1a0252c582a2000000f5f12a6149939f3bb80bacac6bb4fd91fdb2792964e1c4e6d8635e48968ea50684a79d3f47163a1045a6c5e641dcc50d77c2948af7aea2bc7d025b2cc5e10a8514fbcfbd6140f8a53bac4e1a545e5eb26078ed09d5a5c84d0d0aab4c525c0ed970c6ee0c4a3b8ab696746fbce5f0897ac474c1459f9103ce429d60cc81ef2eff2a2f343fef8f6b4ba6c7b7639b401af22bc25909f00b15fba6dc5d9932751562991b150b86e6a488b4ec2913ad3773842e961822a05708995253d8519cb36813cabe6047678f5a7e69cdc575992a685ccd5eba3bb57ff1d7a70234278027f6373215afc89ebb51f880"])
shutdown(0xffffffffffffffff, 0x1)

1m28.719046488s ago: executing program 6 (id=1587):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async)
truncate(&(0x7f0000000240)='./file0\x00', 0x1)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd, 0x60803)
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x9, 0x3014, 0x5, 0x1, 0x2, 0x2, 0x5}}) (async)
pipe2$9p(&(0x7f0000000000), 0x4080) (async)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x0, 0xffffff95}) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0x40000000}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x3503, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@broadcast, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0xfffffd}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0)
mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)='debugfs\x00', 0x200000, 0x0)

1m13.619611701s ago: executing program 35 (id=1587):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async)
truncate(&(0x7f0000000240)='./file0\x00', 0x1)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0xd, 0x60803)
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x0, 0x9, 0x3014, 0x5, 0x1, 0x2, 0x2, 0x5}}) (async)
pipe2$9p(&(0x7f0000000000), 0x4080) (async)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x2, 0x0, 0xffffff95}) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0x40000000}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x3503, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@broadcast, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0xfffffd}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0)
mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)='debugfs\x00', 0x200000, 0x0)

7.999644407s ago: executing program 4 (id=2013):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xd2, 0xcf, 0xa0, 0x8, 0x1163, 0x100, 0xdcba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x5, 0x90, 0x1, [{{0x9, 0x4, 0xd7, 0x3, 0x1, 0xff, 0x3, 0x4, 0x4, [], [{{0x9, 0x5, 0xf, 0xede9da985a30f683, 0x200, 0x9, 0xb3, 0x5}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x9, {0x4040, 0x6, 0xfe, 0x1}})
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r2 = fanotify_init(0x20, 0x2)
write(r2, &(0x7f0000000140)="1ce6545f214cdac50000", 0xa)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x3}, 0x18)
connect$can_j1939(r3, &(0x7f0000000300)={0x1d, r4, 0x3, {0x0, 0x0, 0x3}, 0x1}, 0x18)
writev(r3, &(0x7f00000002c0)=[{&(0x7f00000004c0)='H', 0x1}], 0x1)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000480)={'pcl730\x00', [0x14f27, 0x5, 0x1, 0x401, 0x1, 0xcc3, 0xfff, 0x5c952399, 0xc4f, 0x400013ff, 0xfffffffe, 0x300, 0x401, 0xfffffffd, 0xffffff01, 0xe1cb, 0x0, 0x1a449, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x0, 0x20001e56, 0x7, 0x3, 0x3c, 0x8, 0x0, 0x8000004, 0xdffffffa]})
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)

7.245207326s ago: executing program 4 (id=2015):
r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x2b82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0xffffffffffff6260, {{0x7, 0x56, 0x2, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$lock(r7, 0x5, &(0x7f0000000200)={0x1})
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000600)="580000001400ff2340834b80041d8c56021174000000000058000b4824ca940417a3cd3639e431e8e2125f6400940f6a0325010ebc0000000000000080003228baf0fffeffe809005300fff5dd00000010000100220c1000", 0x58}], 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000000006a0200000000000000000008"])
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r9, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r9, r9, 0x3, 0xfffffffffffffffa, 0x3fff})
creat(&(0x7f0000000080)='./file0/file0\x00', 0x120)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)
r10 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
fcntl$addseals(r10, 0x409, 0x12)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1008, 0x0, 0x13, r10, 0x0)
r11 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
memfd_create(&(0x7f0000000040)='omfs\x00', 0x1)

5.396393791s ago: executing program 7 (id=2025):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
syz_clone(0x80100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

4.358253619s ago: executing program 7 (id=2028):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
bind$ax25(r0, 0x0, 0x0)

4.146867785s ago: executing program 7 (id=2029):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008814}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, <r3=>0x0, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f00000004c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)={0xe8, 0x0, 0x0, [{{0x3, 0xfffffffffffffffe, 0xffffffffffffffff, 0x7, 0x0, 0x173d4, {0x0, 0x8000, 0x3f8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8000, 0x0, 0x2, 0x0, r4, 0x2, 0xdffffffd}}, {0x4, 0x0, 0x3e, 0x0, '.&^\'\x9b\x8e\xf1\x8a\xbb\xbe\xddn=@\x9bE\xe4c\xfd\xcc\xba\xed\x0f\xd1\xb5}v-\xccq\x91\xe6\xbdw5\x06\x15\xd5\xf8\xec\"|\x00\x00\x00\x7f\xdf\xdf\xac&{d)v\x94\xd4B\xfd\'\xbc@\x95'}}]}, 0x0, 0x0, 0x0})
ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200))
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r5, &(0x7f0000000000)=""/192, 0xc0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000b08000240000000f60c00048005000200090000000c00038005000200d30000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490)
write$cgroup_pid(r7, &(0x7f00000000c0), 0x12)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)

3.947972349s ago: executing program 5 (id=2031):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x240b42, 0x0)
syz_clone(0x80044000, 0x0, 0x50, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
write$cgroup_devices(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="62202a3a2a207200f00f1f0df3ff50dead5b26008514440000e4f0cb4279843b0146a58d946154e33e69577830aec8308306b7d861fb380f20ba6ff608d7771470737bd358a7f1cd72c86d02067e332edf88aee1e4572fd5aa98aaf6349828488e74fb6c8560c2cbb22c370f8b8f0fd76937f573553895cf10a5549a1aa59c6d3091f1497c334843daa60000005b2ef10158b452da33f3f8c6615a3c9a664c26a9eea9869a9358362af87dd726c104e08b78414516fd1eaf99147b6285f327ef384997ce7c28cc63eb6eacf793cdb86458c1e00c32c97ccf345b0344c6f88b4cc71217248d7de7f11beb1f4700d02800"/253], 0x8)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7, 0x4}, 0x20)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140))
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
rseq(0x0, 0x0, 0x4, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r2, 0x0, 0x0, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0)
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES8=r7], 0x18}], 0x1, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x3}, 0x2000)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)

3.852142822s ago: executing program 4 (id=2032):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) (async)
syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async)
io_setup(0x202, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r6, 0x801, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) (async)
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0)

3.090268009s ago: executing program 7 (id=2035):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r1=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008881}, 0xc000)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40080)
r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0)
pwritev(r3, &(0x7f0000000440)=[{&(0x7f00000002c0)="91acb94c4266f53d5a3dd163e157449b0dfee672572d4d9b57edb9cfd452c4dd9bbbe049351f276da7788e268567eb62288920f6f2710da6ecc0a90b61a5a800", 0x40}, {&(0x7f0000000300)="d5557ac494d7d55226df709363b20071272c68f52542b26eb74d675cc53be5942d587831e8f4482f204fe688c10decec62b6324e1195eb16d801fcfa8a4c2e01d6b6e10596831368349bf33dd11773afb8c44e9d68525be3206012db73a229669f308c349c7ba32814ca253d0188ed6b958939f1d051e9c013065ab83054ffbd25759dfe5e0304058d9b", 0x8a}, {&(0x7f00000003c0)="bdac3fb300ebf603af9d8d33017aaae187910225fa5ad4a1b771f2d63e0f757367b5efb99e0fd414be0737db6a5e1d2a7d78ccc5840803c3d26a01f85c505497f8f676122f0a60f67e8a4520bff62db3c2e70f3c3c7252aef4a4004c959966fb1e31c12fb0b1fb7492457073f99a1a236332ccefcc5bc9b5", 0x78}], 0x3, 0x5, 0x80000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfb}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000)
write$nci(0xffffffffffffffff, &(0x7f00000005c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0xff}, 0x4)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
write$nci(r6, &(0x7f0000000640)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x5a, 0x1}, 0x4)
r7 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000680)={{0x3, @rose}, [@netrom, @bcast, @bcast, @bcast, @null, @remote, @null, @default]}, &(0x7f0000000700)=0x48, 0x80800)
bind$ax25(r7, &(0x7f0000000740)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r4)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40884}, 0x4000)
r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900), 0x80100, 0x0)
ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000000940)=""/18)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
close(r9)
bind$packet(r9, &(0x7f0000000980)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_GET_REGS(r10, 0x8090ae81, &(0x7f00000009c0))
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
getsockname$l2tp6(r9, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000b00)=0x20)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000b40)=@req={0x6, 0x2, 0x9, 0x5ca3}, 0x10)
creat(&(0x7f0000000b80)='./file0\x00', 0x80)
socket$packet(0x11, 0x3, 0x300)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000bc0)={{0x2, 0x1000, 0xb, 0x2, 0x6, 0xa6, 0xa2, 0xb6, 0x3, 0xb3, 0x3}, {0x0, 0x1, 0xd, 0x7, 0x5, 0x6, 0x4, 0x66, 0x6, 0x6c, 0x4, 0x9}, {0x10000, 0x100000, 0xc, 0xf7, 0x5, 0x2, 0x3, 0x2c, 0x2, 0x9, 0x16, 0x4}, {0x2000, 0xeeef0000, 0xc, 0x5, 0x9, 0x6e, 0x3, 0x0, 0x9, 0xff, 0x10, 0x10}, {0x8000000, 0x80a0000, 0xf, 0x1, 0x1, 0x10, 0x4, 0x9, 0xf, 0x3, 0x2}, {0x1, 0x1000, 0x10, 0xf3, 0x3, 0xa, 0x6, 0x7f, 0xc, 0x0, 0x36}, {0x80a0000, 0x8000000, 0x0, 0x6, 0x0, 0x5, 0xa3, 0x1, 0x2, 0x9}, {0x8000000, 0x0, 0xe, 0xd, 0x6, 0xb, 0x81, 0x5, 0x1, 0x8, 0x2, 0x8}, {0x10000, 0x2}, {0xdddd1000, 0x1}, 0x20, 0x0, 0x0, 0x212, 0x2, 0x0, 0x80a0000, [0x6, 0x8e57, 0x400, 0xffffffffffffffff]})

2.991717534s ago: executing program 1 (id=2036):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) (async)
ioctl$EVIOCRMFF(r1, 0x550c, &(0x7f0000000080))
symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)

2.856734449s ago: executing program 5 (id=2037):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
bind$ax25(r0, 0x0, 0x0)

2.753555375s ago: executing program 7 (id=2038):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd24, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xfffffffe}]}, 0x41}, 0x1, 0x0, 0x0, 0x20008000}, 0x4810)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

2.643491609s ago: executing program 4 (id=2039):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r1, 0x1, 0x0, 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r4 = syz_usb_connect(0x6, 0x1d1, &(0x7f00000008c0)={{0x12, 0x1, 0x250, 0xe7, 0xf2, 0x7d, 0x40, 0x789, 0x160, 0xbe35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1bf, 0x2, 0x7, 0x3, 0x60, 0x3, [{{0x9, 0x4, 0xa, 0x4, 0x3, 0x72, 0x9e, 0x9c, 0x3, [@hid_hid={0x9, 0x21, 0x8, 0x4f, 0x1, {0x22, 0xddb}}], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x20, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x1}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0xc, 0x1, 0xc9, [@generic={0xcf, 0xd, "b38a392f465faf0889f2cff28e0233d4cfb0df1a4b27812244cdd6f78d780461868230fb42e2d9254279ad8659e02d6f8b487aa347d51f853e3d1451bb801521c287473f10ce7afb1ede3bbe440cf663e11e05bd7e3993d007616300439e8e63eec6cd6b643d2ff1838587243efe361ea42f8bd13abaf3338daa8145c45e54fcdc43dd198d408c3ea72bd90b1a06ce2c9cf353a73f06b5c828ad840d2c74648cceb01eea87c1e671bf4b7c827242ce9f707b8e3bf7860bca1fc9c87145b917529de6d9b3907bf2e4da1d39befe"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x4, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x1}]}}]}}, {{0x9, 0x4, 0xd1, 0x8, 0x2, 0x74, 0x55, 0xb7, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x8}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x1, 0x2, [0x8, 0x4], 0x3}]}], [{{0x9, 0x5, 0x3, 0x0, 0x8, 0x8, 0x6, 0x22, [@generic={0x6f, 0x10, "4842598fa11b896b048bd45ddb1d21f08c3b49d48dee2e04463952ba41fcb9b560d1f4735e19da4d4c3dd37affb1084c96b07397a6c530985cff8edd59a336c88cd841a4797ed1fdf417ada2d71a4d240664f41b470099b99e283cf5496f56796f2c275324325a88fd9abc1b29"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x0, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x56}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x1, 0x8, 0xff, 0x20, 0x3}, 0xd7, &(0x7f00000004c0)={0x5, 0xf, 0xd7, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x67, 0x6, 0x8}, @ptm_cap={0x3}, @generic={0xc5, 0x10, 0x1, "bc020f51054f7e1136552413c03b508e8c12182fb311fb671b98d13528822f1ebd3fd43bb4772744a213d1091fcb1b663366ccbb82b583de92dba34aa2f9b7fa08bdd7864e1d478727d2d4ed87e9624546b91e86d51c6a71b1c3aab67d62bd8ac860d536b35f5553e0f50ec6581c8a9f281d8cef0a61adad856bf2b2af77633091a6a2c948ec63dc641aabf868a9cb458acbaacb62839c8b8f4cfcc8ae8556056854a8015653374c5a5ceae333a735a4a673c12e918824cb1c53a77d2df6c7fa9fb2"}]}, 0x5, [{0xb8, &(0x7f00000005c0)=@string={0xb8, 0x3, "1ad5f795897377eae524a0a6ac4caa7b2985a75f745c273bf1c1e117dd982dfe77e81549278017a51045e67ca82e534f4a61e41c578d965942abcdecc81adfd3da467e1b2184edbfe68d8ef4afbac1e00448d0c9f6d944a7377a777b6a6fa1d165d26dca6262b89340a514890eeb3b39bbca82c172e8a0997f4dd7670f1819aab27d5f283656a0d2f9790fcd81763bac89bd9e7479752c4646aaeb34013bdc89fabaf31d3a5899ec288f53353311d08046e01c3ee353"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x480a}}, {0x3, &(0x7f0000000780)=@string={0x3, 0x3, "1a"}}, {0x10, &(0x7f00000007c0)=@string={0x10, 0x3, "6611c952b07dcf791cc8faf4b073"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x420}}]})
syz_usb_disconnect(r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0503000000000000000007000000060003"], 0x1c}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000)
syz_usb_ep_read(r1, 0x1, 0xc7, &(0x7f0000000080)=""/199)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x84, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000140081044ea1f782db44b904022008f130200000040000a118000200e000000e00000e1208000f0100030000000016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dbe5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e7ae4001b146222fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00d95667e0060000000000000080ca9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ff070dd68adb000000000000000000000083ea32baf4ef367516", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040000)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r7, 0x0, &(0x7f00000002c0)='L', 0x1, 0xfffffffffffffff9})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r7, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe86})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000000480)='~', 0x41, 0x8})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x3, r7, 0x0, &(0x7f0000000b40)="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", 0x10b, 0x8000})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1)
r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x40102, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000240)=0x17)

2.511603875s ago: executing program 7 (id=2040):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50e00400", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf254a0000000f00a8007365636f6e646e616d650000080001007063690011000200303030303a30303a31302e300000000008000300000000000800030000000000"], 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x10)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)='\a', 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB='P'], 0x50}, 0x80)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [<r6=>0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r6, 0x7}, 0xc)
r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
close(r2)
sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004)
fadvise64(r1, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x93771000)

2.446838064s ago: executing program 5 (id=2041):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0xa0080, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4040}, 0x8806)
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r4}}, './cgroup\x00'})

2.063782314s ago: executing program 1 (id=2042):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648b000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x9, 0x10}, 0xc)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
mmap$dsp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x1033, r3, 0x0)

2.055797954s ago: executing program 5 (id=2043):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x52, 0x9, 0x9, 0x9, 0x9})
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x3ff, 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000100)={0x6, 'batadv_slave_0\x00', {0xbcf}, 0x8})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'caif0\x00', {0x3}, 0x5bb})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
write$sndseq(r3, &(0x7f00000001c0)=[{0x3c, 0x4, 0x9, 0xe9, @tick, {0x61, 0x3}, {0x3, 0x2}, @time=@time={0x5, 0x2}}, {0x40, 0x4, 0x5, 0xcd, @time={0x94, 0xffffff01}, {0xf3, 0x8}, {0x3, 0x3}, @quote={{0x75, 0x3}, 0x9}}, {0xb, 0x4, 0x3, 0x1, @tick=0xa8, {0x1c, 0xa}, {0x1, 0x7}, @result={0x0, 0x8}}, {0x6, 0xf9, 0xc0, 0x7f, @tick=0x2, {0x2, 0xb8}, {0x7, 0x7}, @raw8={"c19bf8d30bbd594eb150aca9"}}, {0xc, 0x3, 0x65, 0xc8, @tick, {0xb6, 0xb}, {0x4, 0xfc}, @connect={{0x4, 0xe}, {0x4, 0x3}}}, {0xf, 0xf, 0x7, 0xfc, @time={0x3, 0x6}, {0x8, 0x3}, {0x0, 0x7}, @result={0x3, 0xe}}, {0x8, 0x2, 0x1, 0x6, @tick=0x6, {0xe, 0x8e}, {0x6, 0x3c}, @connect={{0x1, 0xde}, {0x8, 0x1}}}, {0x2, 0x0, 0xc4, 0x7, @tick=0x7, {0x7f, 0x80}, {0x7}, @time=@tick=0x9552}], 0xe0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x4280, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_print_times', 0x0, 0x80)
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x1, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040080)
write$sndseq(r3, &(0x7f0000000480)=[{0xb, 0x2, 0x0, 0x1, @tick=0xffff, {0x2}, {0x8, 0x2}, @raw8={"b735f6b4105c897ceb4c4034"}}, {0xc, 0x4, 0x3c, 0xf, @time={0x5, 0x3}, {0x2, 0x5}, {0x0, 0x4}, @control={0x5, 0x4, 0x7}}, {0xf, 0x4, 0x5, 0x1, @tick=0x4, {0x3, 0xd}, {0x80, 0x6}, @quote={{0x9, 0x3}, 0x0, &(0x7f0000000440)={0x68, 0x5, 0x4, 0x9, @time={0x9, 0x100}, {0x2, 0x3}, {0x9, 0x2}, @result={0xffff, 0x1}}}}, {0x8, 0x3, 0x4, 0x5, @tick=0x1, {0xc0}, {0x49, 0xfb}, @addr={0x3, 0x9}}, {0x7, 0x1, 0x81, 0x13, @time={0xba, 0xfff}, {0x3, 0x8}, {0x80, 0xf5}, @raw32={[0x6, 0x81, 0x2]}}, {0x4, 0x8, 0x5, 0x1, @time={0x7}, {0x8, 0x24}, {0x9, 0x8}, @raw8={"c62b522fb119399c57824a1a"}}, {0x0, 0x17, 0xf, 0x5, @tick=0x3, {0x5, 0x1}, {0x0, 0xc}, @addr={0x31, 0xb}}, {0x7, 0x9, 0x8e, 0x9, @tick=0x1, {0x80, 0x4}, {0x4, 0xa2}, @raw8={"b57c433ea6d411ff54248d63"}}, {0x8, 0x5, 0x31, 0x40, @tick=0x1000, {0x3b, 0x83}, {0x80, 0x40}, @raw8={"0210e483b996a1f96ae5e584"}}], 0xfc)
writev(r1, &(0x7f0000001980)=[{&(0x7f0000000580)="41cd42303ea8ab7aee3fd4cced63c32598b8d8860901c5c60e6be2e1b5c6372377d8cfd79a9693afb7cc7338aa0a98983ad643886f5ed41415e299cd9f0984494eebd65cb52004157bfaf8f0cffc3722e5c15f3eeebc3aa283b9c147ac64235ce79f902ca4187888694c5f2c7af7d1672a5688257684981c6e8def9f2ee7c4482a5d9426bb39b8cb8c303758f341d5e44676849ad042f04db02d728d7972ba16b7bd749c2a90ab3dbb0d264b4d3529c342eab46622fe12ea01d1f5dd2ef6359e209229c9ce414300da8722ec6b20618067cc185a161b1b960d1aa4868f8e767aa812773bf88fd5d07ef3ca8a26034c3cb3df70a51ca0", 0xf6}, {&(0x7f0000000680)="6752f286d3a1bcf56c46d6aa3f65da791eaadb32dd9b9017446636cd894d82b78dd593d1c2160aca0342de67bb0015276e76d1f00d577d302fb5d1a312bd0f5896138718cfa8f9da798265d20aea03f4a3cd465b9f97412ff4ac94bbefda96fd1cee7fc49c4a796fe62949ce5b43e5", 0x6f}, {&(0x7f0000000700)="d6b0c273419270bed15f460334072a815f9400f198927c853a3faf21f09fb8a795519c3e2009e59d88f02e01551022f080344e652e25e57912232e3ecc264bc49ebed283c295d036b660957cc1dc3fef80424faa5ac225906a66187568ab26aabc9899582f9c2d18121d2dc951deab241fc162203c625d2a47cf854b640154197fd976284b4910eb81cd224bd55e80a4e3d588ac01b8f71d167a2ea0798cfdcbb778e170fd328928dea25ec38de6ec31cda231e27c6766749ace7e31e196684a8474257eb34bcd491eec37c485959344bff666a89085935ecb070fd881775ba6f70bd2654af2445f68eac72411f494601eaa1e95", 0xf4}, {&(0x7f0000000800)="25eb3c676ac9d5d2e9dbe288c2e231476c334b9422515111f0aa9ce7e6eb1961475968f3f6ba017b632c6a2d982c6fd505f59814c436d23885479fd5e68c0be04252a9f4437c4f0913bf7c6b704aef842467cf5dd1c185e8927002e12f6b6125fddacfd91ee50d3b6b697814b7d4b04b4a", 0x71}, {&(0x7f0000000880)="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", 0xfe}, {&(0x7f0000000980)="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", 0x1000}], 0x6)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001a00)={0x0, 0x0, 0x9d1}, 0x8)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = accept4$packet(r4, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001a80)=0x14, 0x0)
getsockname$packet(r6, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b00)=0x14)
r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001b40), 0x151000, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x4c, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xc2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x11)
sendfile(r3, r7, &(0x7f0000001cc0)=0xc8, 0x5)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001d00)={'vxcan1\x00'})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000001d40)={0x0, 'bond_slave_1\x00', {}, 0x7})
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001d80), &(0x7f0000001dc0)=0x8)
r8 = syz_open_dev$audion(&(0x7f0000001e00), 0xa, 0x422200)
sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x11001000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={0xa0, 0x1, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x315af8c7}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10a}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x1)
syz_open_dev$dri(&(0x7f0000001fc0), 0x9, 0x80e01)
getsockname$l2tp(r8, &(0x7f0000002000)={0x2, 0x0, @initdev}, &(0x7f0000002040)=0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002080))
creat(&(0x7f00000020c0)='./file0\x00', 0x5a)

1.723038321s ago: executing program 1 (id=2044):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0xbf3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000000)=@ethtool_eeprom={0xc, 0x17f, 0xfffffff9}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8}}}}, 0x3e)
ioprio_set$pid(0x1, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r4=>0x0)
prlimit64(r4, 0x8, &(0x7f0000000200)={0x2, 0xa}, &(0x7f0000000240))
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$user(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000b40)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d650e00b4075db8419d9e6d17b1eec4dfb860a7d7b4021d3459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r5)
r7 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000004c0)='\x00', 0x1, 0xfffffffffffffffe)
mkdir(&(0x7f0000000140)='./file0\x00', 0xa4)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r7, r6, r7}, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={'xxhash64-generic\x00'}})
sendfile(r3, r3, 0x0, 0x7ffff008)

1.587778864s ago: executing program 5 (id=2045):
creat(&(0x7f0000000080)='./file0\x00', 0xac)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000840)=@generic={0x3, 0xff31, 0x80000001})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000ffffff88000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d6839"], 0xfdef)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

1.346618966s ago: executing program 4 (id=2046):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080))
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x6, @pix={0x1, 0x2, 0x32315559, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x1, 0x2, 0x1, 0x7}}) (async)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f0000000180)='1\x00', 0x2) (async)
socket(0x1d, 0x7, 0x1) (async)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@sg0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x4010, 0x0)

718.872421ms ago: executing program 1 (id=2047):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x4a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x5, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x185], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe654, 0x0, 0xae, 0x0, 0x0, 0x88, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x80, 0x4]}, 0x45c)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

343.592535ms ago: executing program 4 (id=2048):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090933f70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006)

343.236832ms ago: executing program 1 (id=2049):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0xffff, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x95}, 0x0)

119.192622ms ago: executing program 1 (id=2050):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(r1)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0xfb7f0000, 0x4, 0x3000, 0x2000, &(0x7f000060b000/0x2000)=nil, 0x8000})

0s ago: executing program 5 (id=2051):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000cc0)="02c9", 0x2}], 0x1, &(0x7f0000001140)=[{0x10, 0x1, 0x8}], 0x10}}], 0x2, 0x4004804)

kernel console output (not intermixed with test programs):

1][ T2136] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.006008][ T2136] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.018634][ T5905] usb 5-1: device descriptor read/64, error -71
[  361.024214][ T2136] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.128834][ T5905] usb usb5-port1: attempt power cycle
[  361.145527][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.164898][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.198404][ T1072] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  361.206233][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.220003][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.229097][ T1072] usb 6-1: device descriptor read/8, error -71
[  361.343229][ T1072] usb usb6-port1: unable to enumerate USB device
[  361.488364][ T5905] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  361.529442][ T5905] usb 5-1: device descriptor read/8, error -71
[  361.780433][ T5905] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  361.819102][ T5905] usb 5-1: device descriptor read/8, error -71
[  361.931883][ T5905] usb usb5-port1: unable to enumerate USB device
[  362.398544][ T5169] Bluetooth: hci4: command tx timeout
[  362.548788][T10985] binder: 10984:10985 ioctl 4018f514 0 returned -22
[  362.686743][T10988] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  363.416202][T10999] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  363.451051][T10999] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  363.457601][T10999] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  363.579182][    T9] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[  363.760864][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  363.779138][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  363.818748][    T9] usb 2-1: config 7 has an invalid interface number: 2 but max is 0
[  363.827574][    T9] usb 2-1: config 7 has no interface number 0
[  363.848429][    T9] usb 2-1: config 7 interface 2 has no altsetting 0
[  363.872035][    T9] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=15.2a
[  363.908670][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.932231][    T9] usb 2-1: Product: syz
[  363.936454][    T9] usb 2-1: Manufacturer: syz
[  363.955666][T11004] /dev/rnullb0: Can't open blockdev
[  363.958549][    T9] usb 2-1: SerialNumber: syz
[  364.205192][    T9] gspca_main: sunplus-2.14.0 probing 052b:1803
[  364.240041][    T9] gspca_sunplus: reg_r err -71
[  364.245163][    T9] sunplus 2-1:7.2: probe with driver sunplus failed with error -71
[  364.281360][    T9] usb 2-1: USB disconnect, device number 74
[  364.408445][ T1072] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  364.478939][ T5169] Bluetooth: hci4: command tx timeout
[  364.580069][ T1072] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  364.598335][ T1072] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  364.618327][ T1072] usb 6-1: config 220 has no interface number 2
[  364.624860][ T1072] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  364.669930][ T1072] usb 6-1: config 220 interface 0 has no altsetting 0
[  364.679290][ T1072] usb 6-1: config 220 interface 76 has no altsetting 0
[  364.686198][ T1072] usb 6-1: config 220 interface 1 has no altsetting 0
[  364.719436][ T1072] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  364.733791][ T1072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.761672][ T1072] usb 6-1: Product: syz
[  364.779841][ T1072] usb 6-1: Manufacturer: syz
[  364.784504][ T1072] usb 6-1: SerialNumber: syz
[  364.882890][T11010] ieee802154 phy0 wpan0: encryption failed: -22
[  365.052658][ T1072] usb 6-1: selecting invalid altsetting 0
[  365.078922][ T1072] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  365.096707][ T1072] usb 6-1: No valid video chain found.
[  365.143314][ T1072] usb 6-1: selecting invalid altsetting 0
[  365.168346][ T1072] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  365.207077][ T1072] usb 6-1: USB disconnect, device number 35
[  365.315129][T11017] /dev/rnullb0: Can't open blockdev
[  365.752614][T11024] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  365.971537][T11032] sp0: Synchronizing with TNC
[  366.032800][    T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  366.207531][T11037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1403'.
[  366.218792][    T9] usb 2-1: Using ep0 maxpacket: 16
[  366.227398][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  366.238817][T11037] /dev/rnullb0: Can't open blockdev
[  366.239104][ T1072] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  366.255349][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  366.296353][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  366.315791][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.334399][    T9] usb 2-1: Product: syz
[  366.351622][    T9] usb 2-1: Manufacturer: syz
[  366.368274][    T9] usb 2-1: SerialNumber: syz
[  366.388466][ T1072] usb 6-1: device descriptor read/64, error -71
[  366.606039][T11020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.615225][T11020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.629225][ T1072] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  366.664399][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.688524][ T5841] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  366.701424][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.778378][ T1072] usb 6-1: device descriptor read/64, error -71
[  366.828448][ T5841] usb 5-1: device descriptor read/64, error -71
[  366.898795][ T1072] usb usb6-port1: attempt power cycle
[  367.081570][ T5841] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  367.148978][    T9] usb 2-1: 0:2 : does not exist
[  367.173728][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  367.218397][ T5841] usb 5-1: device descriptor read/64, error -71
[  367.233682][    T9] usb 2-1: USB disconnect, device number 75
[  367.248502][ T1072] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[  367.296708][ T1072] usb 6-1: device descriptor read/8, error -71
[  367.319589][ T7804] udevd[7804]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  367.339748][ T5841] usb usb5-port1: attempt power cycle
[  367.548592][ T1072] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  367.599328][ T1072] usb 6-1: device descriptor read/8, error -71
[  367.688590][ T5841] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  367.718916][ T1072] usb usb6-port1: unable to enumerate USB device
[  367.738717][ T5841] usb 5-1: device descriptor read/8, error -71
[  367.978534][ T5841] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  368.035974][ T5841] usb 5-1: device descriptor read/8, error -71
[  368.148947][ T5841] usb usb5-port1: unable to enumerate USB device
[  368.276825][T11047] /dev/rnullb0: Can't open blockdev
[  369.885522][T11064] ubi10: attaching mtd0
[  369.893159][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1411'.
[  370.401327][ T5169] Bluetooth: hci0: command 0x0c20 tx timeout
[  370.498874][ T1072] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  370.653433][ T1072] usb 6-1: Using ep0 maxpacket: 8
[  370.869757][ T1072] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  370.898314][ T1072] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  370.908048][ T1072] usb 6-1: config 1 interface 1 has no altsetting 0
[  370.964915][ T1072] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  370.977635][ T1072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.994002][ T1072] usb 6-1: Product: syz
[  371.008384][ T1072] usb 6-1: Manufacturer: syz
[  371.013139][ T1072] usb 6-1: SerialNumber: syz
[  371.255007][T11070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.268878][T11070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.303319][ T1072] usb 6-1: 2:1 : sample bitwidth 202 in over sample bytes 1
[  371.318468][ T1072] usb 6-1: 2:1 : invalid channels 0
[  371.405099][ T1072] usb 6-1: USB disconnect, device number 40
[  371.778432][    T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  371.944190][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  371.954420][    T9] usb 2-1: config 255 has an invalid interface number: 171 but max is 0
[  371.979630][    T9] usb 2-1: config 255 has no interface number 0
[  371.996187][    T9] usb 2-1: config 255 interface 171 has no altsetting 0
[  371.998555][ T1072] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  372.027250][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=35.eb
[  372.051900][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.072153][    T9] usb 2-1: Product: syz
[  372.076404][    T9] usb 2-1: Manufacturer: syz
[  372.094178][    T9] usb 2-1: SerialNumber: syz
[  372.165923][ T1072] usb 5-1: unable to get BOS descriptor or descriptor too short
[  372.177731][ T1072] usb 5-1: not running at top speed; connect to a high speed hub
[  372.206000][ T1072] usb 5-1: too many configurations: 148, using maximum allowed: 8
[  372.288822][ T1072] usb 5-1: unable to read config index 0 descriptor/start: -61
[  372.298547][ T1072] usb 5-1: can't read configurations, error -61
[  372.379134][    T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240
[  372.405388][T11096] netlink: 'syz.5.1420': attribute type 2 has an invalid length.
[  372.413377][T11096] netlink: 'syz.5.1420': attribute type 1 has an invalid length.
[  372.413390][    T9] gspca_sn9c20x: Write register 1000 failed -71
[  372.413407][    T9] gspca_sn9c20x: Device initialization failed
[  372.445474][T11096] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  372.454726][T11096] /dev/rnullb0: Can't open blockdev
[  372.460266][ T1072] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  372.488390][    T9] gspca_sn9c20x 2-1:255.171: probe with driver gspca_sn9c20x failed with error -71
[  372.514397][T11099] /dev/rnullb0: Can't open blockdev
[  372.518328][    T9] usb 2-1: USB disconnect, device number 76
[  372.555323][T11098] /dev/rnullb0: Can't open blockdev
[  372.630650][ T1072] usb 5-1: unable to get BOS descriptor or descriptor too short
[  372.649222][ T1072] usb 5-1: not running at top speed; connect to a high speed hub
[  372.657379][ T1072] usb 5-1: too many configurations: 148, using maximum allowed: 8
[  372.677609][ T1072] usb 5-1: unable to read config index 0 descriptor/start: -61
[  372.685538][ T1072] usb 5-1: can't read configurations, error -61
[  372.698813][ T1072] usb usb5-port1: attempt power cycle
[  372.878584][    T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  373.038562][    T9] usb 2-1: Using ep0 maxpacket: 32
[  373.046766][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.058445][ T1072] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  373.079282][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  373.111061][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  373.117697][ T1072] usb 5-1: unable to get BOS descriptor or descriptor too short
[  373.140717][ T1072] usb 5-1: not running at top speed; connect to a high speed hub
[  373.148643][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.156085][    T9] usb 2-1: config 0 descriptor??
[  373.168375][ T1072] usb 5-1: too many configurations: 148, using maximum allowed: 8
[  373.179653][    T9] hub 2-1:0.0: USB hub found
[  373.192957][ T1072] usb 5-1: unable to read config index 0 descriptor/start: -61
[  373.238718][ T1072] usb 5-1: can't read configurations, error -61
[  373.376197][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'.
[  373.388468][ T1072] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  373.400407][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'.
[  373.427955][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'.
[  373.447989][ T1072] usb 5-1: unable to get BOS descriptor or descriptor too short
[  373.457193][T11107] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1421'.
[  373.473043][ T1072] usb 5-1: not running at top speed; connect to a high speed hub
[  373.490280][ T1072] usb 5-1: too many configurations: 148, using maximum allowed: 8
[  373.495909][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'.
[  373.512789][T11107] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1421'.
[  373.530788][ T1072] usb 5-1: unable to read config index 0 descriptor/start: -61
[  373.546187][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'.
[  373.548394][ T1072] usb 5-1: can't read configurations, error -61
[  373.568833][ T1072] usb usb5-port1: unable to enumerate USB device
[  373.576197][T11099] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1421'.
[  373.608549][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'.
[  373.632159][T11099] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1421'.
[  373.641475][ T5897] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  373.711486][    T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  373.752534][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  373.769470][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  373.818331][ T5897] usb 6-1: Using ep0 maxpacket: 32
[  373.824818][    T9] usb 2-1: USB disconnect, device number 77
[  373.833787][ T5897] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  373.846004][ T5897] usb 6-1: config 0 has no interface number 0
[  373.872183][ T5897] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  373.898542][ T5897] usb 6-1: config 0 interface 1 has no altsetting 0
[  373.931557][ T5897] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  373.942037][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.968644][ T5897] usb 6-1: Product: syz
[  373.972884][ T5897] usb 6-1: Manufacturer: syz
[  373.977509][ T5897] usb 6-1: SerialNumber: syz
[  374.019706][ T5897] usb 6-1: config 0 descriptor??
[  374.242043][ T5897] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  374.260426][ T5897] cx231xx 6-1:0.1: Failed to read PCB config
[  374.276761][ T5897] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71
[  374.285736][    T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  374.308655][ T5897] usb 6-1: USB disconnect, device number 41
[  374.428309][    T9] usb 2-1: device descriptor read/64, error -71
[  374.669846][    T9] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  374.738435][ T5897] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  374.819044][    T9] usb 2-1: device descriptor read/64, error -71
[  374.898511][ T5897] usb 6-1: Using ep0 maxpacket: 32
[  374.915926][ T5897] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  374.928913][    T9] usb usb2-port1: attempt power cycle
[  374.935841][ T5897] usb 6-1: config 0 has no interface number 0
[  374.956944][ T5897] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  374.988497][ T5897] usb 6-1: config 0 interface 1 has no altsetting 0
[  375.003651][ T5897] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  375.042746][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.059972][ T5897] usb 6-1: Product: syz
[  375.064240][ T5897] usb 6-1: Manufacturer: syz
[  375.078568][ T5897] usb 6-1: SerialNumber: syz
[  375.099532][ T5897] usb 6-1: config 0 descriptor??
[  375.288338][    T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  375.315876][ T5897] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  375.335417][ T5897] cx231xx 6-1:0.1: bad config in buspower!!!!
[  375.335417][ T5897] config_info=40
[  375.347223][ T5897] cx231xx 6-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  375.355967][    T9] usb 2-1: device descriptor read/8, error -71
[  375.368871][T11123] /dev/rnullb0: Can't open blockdev
[  375.488796][ T5897] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  375.497269][ T5897] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  375.518959][ T5897] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  375.536728][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.558807][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.571807][ T5897] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  375.588626][ T5897] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[  375.598090][ T5897] cx231xx 6-1:0.1: Failed to set devmode to analog: error: -71
[  375.629769][    T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  375.661644][    T9] usb 2-1: device descriptor read/8, error -71
[  375.678561][ T5897] i2c i2c-2: Added multiplexed i2c bus 4
[  375.693220][ T5897] i2c i2c-2: Added multiplexed i2c bus 5
[  375.707295][ T5897] cx231xx 6-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[  375.725697][ T5897] cx231xx 6-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[  375.774098][    T9] usb usb2-port1: unable to enumerate USB device
[  375.802231][ T5897] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71
[  375.829600][ T5897] usb 6-1: USB disconnect, device number 42
[  376.289051][T11138] /dev/rnullb0: Can't open blockdev
[  376.651476][T11144] /dev/rnullb0: Can't open blockdev
[  376.891539][T11148] /dev/rnullb0: Can't open blockdev
[  377.088578][ T1072] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  377.228359][ T1072] usb 6-1: device descriptor read/64, error -71
[  377.238589][ T5940] usb 2-1: new full-speed USB device number 82 using dummy_hcd
[  377.268501][ T5841] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  377.323962][T11155] /dev/rnullb0: Can't open blockdev
[  377.393375][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short
[  377.416337][ T5940] usb 2-1: not running at top speed; connect to a high speed hub
[  377.430045][ T5940] usb 2-1: config 7 has an invalid interface number: 2 but max is 0
[  377.440281][ T5841] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[  377.453532][ T5940] usb 2-1: config 7 has no interface number 0
[  377.465583][ T5841] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  377.477103][ T5940] usb 2-1: config 7 interface 2 has no altsetting 0
[  377.487289][ T1072] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  377.500458][T11157] netlink: 'syz.6.1436': attribute type 11 has an invalid length.
[  377.508491][ T5940] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=15.2a
[  377.508523][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.508544][ T5940] usb 2-1: Product: syz
[  377.508560][ T5940] usb 2-1: Manufacturer: syz
[  377.508575][ T5940] usb 2-1: SerialNumber: syz
[  377.510904][ T5841] usb 5-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0
[  377.540923][T11157] netlink: 'syz.6.1436': attribute type 11 has an invalid length.
[  377.566904][ T5841] usb 5-1: config 48 interface 0 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  377.598503][ T5841] usb 5-1: config 48 interface 0 has no altsetting 0
[  377.615757][ T5841] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f
[  377.648327][ T1072] usb 6-1: device descriptor read/64, error -71
[  377.662119][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.698408][ T5841] usb 5-1: Product: syz
[  377.702671][ T5841] usb 5-1: Manufacturer: syz
[  377.707338][ T5841] usb 5-1: SerialNumber: syz
[  377.717250][T11162] /dev/rnullb0: Can't open blockdev
[  377.758674][ T1072] usb usb6-port1: attempt power cycle
[  377.769254][T11150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.798984][T11150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.845171][ T5940] gspca_main: sunplus-2.14.0 probing 052b:1803
[  377.847713][T11164] /dev/rnullb0: Can't open blockdev
[  377.855030][ T5940] gspca_sunplus: reg_r err -71
[  377.882139][ T5940] sunplus 2-1:7.2: probe with driver sunplus failed with error -71
[  377.921658][ T5940] usb 2-1: USB disconnect, device number 82
[  377.939945][T11153] /dev/rnullb0: Can't open blockdev
[  378.013877][ T5841] usb 5-1: USB disconnect, device number 46
[  378.098470][ T1072] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  378.130430][ T1072] usb 6-1: device descriptor read/8, error -71
[  378.148804][ T5897] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  378.308383][ T5897] usb 7-1: Using ep0 maxpacket: 8
[  378.326640][ T5897] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[  378.338384][ T5897] usb 7-1: config 0 has no interface number 0
[  378.357423][ T5897] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  378.368988][ T1072] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  378.387088][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.405535][ T5897] usb 7-1: Product: syz
[  378.409917][ T5897] usb 7-1: Manufacturer: syz
[  378.416067][ T1072] usb 6-1: device descriptor read/8, error -71
[  378.424175][ T5897] usb 7-1: SerialNumber: syz
[  378.450123][ T5897] usb 7-1: config 0 descriptor??
[  378.539940][T11173] /dev/rnullb0: Can't open blockdev
[  378.564868][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  378.576907][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  378.588144][ T1072] usb usb6-port1: unable to enumerate USB device
[  378.744022][T11176] /dev/rnullb0: Can't open blockdev
[  378.771137][T11176] /dev/rnullb0: Can't open blockdev
[  378.780774][ T5897] usb 7-1: Found UVC 0.04 device syz (046d:08c3)
[  378.796904][ T5897] usb 7-1: No valid video chain found.
[  378.833891][ T5897] usb 7-1: USB disconnect, device number 2
[  378.862104][T11179] cgroup: release_agent respecified
[  378.891411][T11179] netlink: 'syz.4.1442': attribute type 10 has an invalid length.
[  378.902114][T11179] team0: Device tunl0 is of different type
[  379.072695][T11181] /dev/rnullb0: Can't open blockdev
[  379.322888][T11186] /dev/rnullb0: Can't open blockdev
[  379.546234][T11192] __nla_validate_parse: 1 callbacks suppressed
[  379.546255][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'.
[  379.841113][ T5897] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  379.937617][T11200] can: request_module (can-proto-0) failed.
[  380.031117][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short
[  380.044473][ T5897] usb 5-1: not running at top speed; connect to a high speed hub
[  380.064764][ T5897] usb 5-1: config 7 has an invalid interface number: 2 but max is 0
[  380.078285][ T5897] usb 5-1: config 7 has no interface number 0
[  380.090991][ T5897] usb 5-1: config 7 interface 2 has no altsetting 0
[  380.110542][ T5897] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=15.2a
[  380.131898][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.165980][ T5897] usb 5-1: Product: 曪뎻폷ￖ跁퓦⹦赳辥␌評쭽谔
[  380.179601][ T5897] usb 5-1: Manufacturer: 鲜ѕ鰧␑ꖤ
[  380.185269][ T5897] usb 5-1: SerialNumber: й
[  380.199275][    T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  380.263177][ T1072] hid (null): bogus close delimiter
[  380.268979][ T1072] hid (null): report_id 53392 is invalid
[  380.309950][ T1072] hid-generic 0000:FFFFFFFF:0003.0013: unknown main item tag 0x7
[  380.317764][ T1072] hid-generic 0000:FFFFFFFF:0003.0013: bogus close delimiter
[  380.332807][ T1072] hid-generic 0000:FFFFFFFF:0003.0013: item 0 0 2 10 parsing failed
[  380.346568][ T1072] hid-generic 0000:FFFFFFFF:0003.0013: probe with driver hid-generic failed with error -22
[  380.369294][    T9] usb 6-1: Using ep0 maxpacket: 16
[  380.396871][    T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  380.416859][    T9] usb 6-1: config 0 has no interface number 0
[  380.427996][    T9] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  380.443090][    T9] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  380.455856][ T5897] gspca_main: sunplus-2.14.0 probing 052b:1803
[  380.466289][ T5897] gspca_sunplus: reg_r err -71
[  380.466842][T11212] Invalid source name
[  380.476794][ T5897] sunplus 5-1:7.2: probe with driver sunplus failed with error -71
[  380.488852][    T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  380.499191][T11212] UBIFS error (pid: 11212): cannot open "ubifs", error -22
[  380.504329][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.531092][ T5897] usb 5-1: USB disconnect, device number 47
[  380.572895][    T9] usb 6-1: Product: syz
[  380.577212][    T9] usb 6-1: Manufacturer: syz
[  380.598323][    T9] usb 6-1: SerialNumber: syz
[  380.627073][    T9] usb 6-1: config 0 descriptor??
[  380.636187][T11199] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  380.645923][T11199] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  380.689097][T11219] /dev/rnullb0: Can't open blockdev
[  380.742078][T11219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.858550][T11199] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  380.867434][T11199] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  380.971326][ T1072] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  381.035145][T11224] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  381.046262][T11224] overlayfs: overlapping lowerdir path
[  381.121136][T11227] /dev/rnullb0: Can't open blockdev
[  381.150464][ T1072] usb 7-1: Using ep0 maxpacket: 16
[  381.157713][ T1072] usb 7-1: config 0 has an invalid interface number: 111 but max is 0
[  381.181155][ T1072] usb 7-1: config 0 has no interface number 0
[  381.201395][ T1072] usb 7-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66
[  381.218371][ T1072] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.235163][ T1072] usb 7-1: Product: syz
[  381.242936][ T1072] usb 7-1: Manufacturer: syz
[  381.247572][ T1072] usb 7-1: SerialNumber: syz
[  381.258509][ T5841] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  381.285424][ T1072] usb 7-1: config 0 descriptor??
[  381.292428][    T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  381.344502][    T9] asix 6-1:0.251: probe with driver asix failed with error -524
[  381.368162][T11231] /dev/rnullb0: Can't open blockdev
[  381.431041][ T5841] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  381.452012][ T5841] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  381.469125][ T5841] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  381.484022][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  381.515055][ T5841] usb 2-1: SerialNumber: syz
[  381.520045][ T5169] Bluetooth: hci4: command 0x0405 tx timeout
[  381.560431][    T9] usb 7-1: USB disconnect, device number 3
[  381.744354][T11239] /dev/rnullb0: Can't open blockdev
[  381.849441][T11240] /dev/rnullb0: Can't open blockdev
[  381.932330][ T5841] usb 2-1: 0:2 : does not exist
[  381.953517][ T5841] usb 2-1: unit 255 not found!
[  381.993156][ T5841] usb 2-1: USB disconnect, device number 83
[  382.063890][ T7804] udevd[7804]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  382.557361][T11244] /dev/rnullb0: Can't open blockdev
[  382.808983][T11250] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  382.818920][T11250] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  382.930138][ T5841] usb 6-1: USB disconnect, device number 47
[  383.308699][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'.
[  383.352375][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'.
[  383.378878][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'.
[  383.381773][ T5841] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  383.412248][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'.
[  383.424987][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'.
[  383.435648][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'.
[  383.446197][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'.
[  383.456712][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'.
[  383.466575][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'.
[  383.478560][    T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  383.538783][ T5841] usb 6-1: device descriptor read/64, error -71
[  383.608358][ T5949] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  383.638398][    T9] usb 5-1: Using ep0 maxpacket: 32
[  383.648028][    T9] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  383.667480][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.682987][    T9] usb 5-1: Product: syz
[  383.693215][    T9] usb 5-1: Manufacturer: syz
[  383.701619][    T9] usb 5-1: SerialNumber: syz
[  383.720564][    T9] usb 5-1: config 0 descriptor??
[  383.743506][    T9] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  383.772473][ T5949] usb 2-1: not running at top speed; connect to a high speed hub
[  383.782765][ T5949] usb 2-1: config index 0 descriptor too short (expected 2322, got 18)
[  383.794325][ T5841] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  383.803253][ T5949] usb 2-1: config 95 has an invalid interface number: 1 but max is 0
[  383.818965][ T5949] usb 2-1: config 95 has no interface number 0
[  383.825688][ T5949] usb 2-1: config 95 interface 1 has no altsetting 0
[  383.845793][ T5949] usb 2-1: string descriptor 0 read error: -22
[  383.857330][ T5949] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[  383.871896][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.949484][ T5841] usb 6-1: device descriptor read/64, error -71
[  384.069028][ T5841] usb usb6-port1: attempt power cycle
[  384.329528][T11261] /dev/rnullb0: Can't open blockdev
[  384.389880][ T5949] usb 2-1: USB disconnect, device number 84
[  384.457160][    C1] vkms_vblank_simulate: vblank timer overrun
[  384.472484][ T5841] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  384.529987][ T5841] usb 6-1: device descriptor read/8, error -71
[  384.768433][ T5841] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  384.814374][ T5841] usb 6-1: device descriptor read/8, error -71
[  384.833720][T11275] vcan0: entered allmulticast mode
[  384.948494][ T5841] usb usb6-port1: unable to enumerate USB device
[  385.263980][T11291] __nla_validate_parse: 56 callbacks suppressed
[  385.264007][T11291] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1480'.
[  385.460551][    T9] gspca_stk1135: reg_w 0x200 err -71
[  385.466969][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  385.480877][T11295] ptm ptm7: ldisc open failed (-12), clearing slot 7
[  385.485399][    T9] gspca_stk1135: Sensor write failed
[  385.510813][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  385.532093][    T9] gspca_stk1135: Sensor write failed
[  385.537467][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  385.549145][    T9] gspca_stk1135: Sensor read failed
[  385.554826][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  385.566846][    T9] gspca_stk1135: Sensor read failed
[  385.573130][    T9] gspca_stk1135: Detected sensor type unknown (0x0)
[  385.585597][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  385.593244][    T9] gspca_stk1135: Sensor read failed
[  385.605635][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  385.612459][    T9] gspca_stk1135: Sensor read failed
[  385.617824][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  385.629274][    T9] gspca_stk1135: Sensor write failed
[  385.634612][    T9] gspca_stk1135: serial bus timeout: status=0x00
[  385.647491][    T9] gspca_stk1135: Sensor write failed
[  385.655275][    T9] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[  385.698510][    T9] usb 5-1: USB disconnect, device number 48
[  386.028526][T11309] cgroup: Bad value for 'name'
[  386.313861][T11319] overlayfs: missing 'workdir'
[  386.325646][T11320] /dev/rnullb0: Can't open blockdev
[  387.588421][ T5897] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  387.750041][ T5897] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[  387.768063][ T5897] usb 6-1: config 0 has no interface number 0
[  387.774954][ T5897] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  387.795116][ T5897] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  387.809788][ T5897] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  387.819109][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.827207][ T5897] usb 6-1: Product: syz
[  387.831646][ T5897] usb 6-1: Manufacturer: syz
[  387.837686][ T5897] usb 6-1: SerialNumber: syz
[  387.838833][ T5949] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  387.858131][ T5897] usb 6-1: config 0 descriptor??
[  387.865182][T11334] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  387.875312][ T5897] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  387.893812][ T5897] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  388.003593][ T5949] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73
[  388.014196][ T5949] usb 5-1: can't read configurations, error -22
[  388.038322][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  388.148565][ T5949] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  388.168809][    T9] usb 7-1: device descriptor read/64, error -71
[  388.181310][ T5841] usb 6-1: USB disconnect, device number 52
[  388.196826][ T5841] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  388.227300][ T5841] cyberjack 6-1:0.69: device disconnected
[  388.320222][ T5949] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73
[  388.338482][ T5949] usb 5-1: can't read configurations, error -22
[  388.346127][T11348] /dev/rnullb0: Can't open blockdev
[  388.355514][ T5949] usb usb5-port1: attempt power cycle
[  388.428852][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  388.578669][    T9] usb 7-1: device descriptor read/64, error -71
[  388.689224][    T9] usb usb7-port1: attempt power cycle
[  388.708475][ T5949] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  388.723196][ T5897] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  388.751195][ T5949] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73
[  388.767620][ T5897] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  388.775083][ T5949] usb 5-1: can't read configurations, error -22
[  388.887013][T11358] fido_id[11358]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  388.928469][ T5949] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  388.972327][ T5949] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73
[  388.983368][ T5949] usb 5-1: can't read configurations, error -22
[  388.994040][ T5949] usb usb5-port1: unable to enumerate USB device
[  389.058327][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  389.079935][    T9] usb 7-1: device descriptor read/8, error -71
[  389.328342][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  389.363108][    T9] usb 7-1: device descriptor read/8, error -71
[  389.394746][T11364] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  389.401329][T11364] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  389.409786][T11364] vhci_hcd vhci_hcd.0: Device attached
[  389.435158][T11366] vhci_hcd: connection closed
[  389.435776][   T12] vhci_hcd: stop threads
[  389.458310][   T12] vhci_hcd: release socket
[  389.462805][   T12] vhci_hcd: disconnect device
[  389.479483][    T9] usb usb7-port1: unable to enumerate USB device
[  389.650062][T11372] nbd: nbd1 already in use
[  389.666303][T11372] /dev/rnullb0: Can't open blockdev
[  389.994455][T11383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  390.680168][T11397] /dev/rnullb0: Can't open blockdev
[  390.802042][T11399] lo speed is unknown, defaulting to 1000
[  391.316804][T11409] /dev/rnullb0: Can't open blockdev
[  391.680423][T11419] /dev/rnullb0: Can't open blockdev
[  391.691718][T11420] /dev/rnullb0: Can't open blockdev
[  391.889568][T11427] /dev/rnullb0: Can't open blockdev
[  391.902061][T11425] /dev/rnullb0: Can't open blockdev
[  392.115565][T11432] /dev/rnullb0: Can't open blockdev
[  392.153791][T11432] /dev/rnullb0: Can't open blockdev
[  392.179235][T11432] /dev/rnullb0: Can't open blockdev
[  392.199358][T11432] /dev/rnullb0: Can't open blockdev
[  392.229552][T11432] /dev/rnullb0: Can't open blockdev
[  392.247524][T11432] /dev/rnullb0: Can't open blockdev
[  392.276417][T11432] /dev/rnullb0: Can't open blockdev
[  392.300651][T11432] /dev/rnullb0: Can't open blockdev
[  392.319192][T11432] /dev/rnullb0: Can't open blockdev
[  392.340186][T11432] /dev/rnullb0: Can't open blockdev
[  392.379761][T11432] /dev/rnullb0: Can't open blockdev
[  392.391500][T11432] /dev/rnullb0: Can't open blockdev
[  392.425025][T11436] /dev/rnullb0: Can't open blockdev
[  392.429736][T11432] /dev/rnullb0: Can't open blockdev
[  392.444231][T11432] /dev/rnullb0: Can't open blockdev
[  392.454664][T11432] /dev/rnullb0: Can't open blockdev
[  392.469479][T11432] /dev/rnullb0: Can't open blockdev
[  392.483433][T11432] /dev/rnullb0: Can't open blockdev
[  392.502796][T11432] /dev/rnullb0: Can't open blockdev
[  392.529086][T11432] /dev/rnullb0: Can't open blockdev
[  392.535096][T11432] /dev/rnullb0: Can't open blockdev
[  392.609761][T11432] /dev/rnullb0: Can't open blockdev
[  392.640049][T11432] /dev/rnullb0: Can't open blockdev
[  392.658886][T11432] /dev/rnullb0: Can't open blockdev
[  392.664910][T11432] /dev/rnullb0: Can't open blockdev
[  392.714581][T11432] /dev/rnullb0: Can't open blockdev
[  392.739009][T11432] /dev/rnullb0: Can't open blockdev
[  392.758469][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  392.759479][T11432] /dev/rnullb0: Can't open blockdev
[  392.800077][T11432] /dev/rnullb0: Can't open blockdev
[  392.819060][T11432] /dev/rnullb0: Can't open blockdev
[  392.826544][T11432] /dev/rnullb0: Can't open blockdev
[  392.846799][T11432] /dev/rnullb0: Can't open blockdev
[  392.868519][T11432] /dev/rnullb0: Can't open blockdev
[  392.877212][T11432] /dev/rnullb0: Can't open blockdev
[  392.918376][    T9] usb 7-1: device descriptor read/64, error -71
[  393.143512][T11449] /dev/rnullb0: Can't open blockdev
[  393.168419][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  393.318280][    T9] usb 7-1: device descriptor read/64, error -71
[  393.448902][    T9] usb usb7-port1: attempt power cycle
[  393.818360][    T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  393.863137][    T9] usb 7-1: device descriptor read/8, error -71
[  394.086129][T11471] /dev/rnullb0: Can't open blockdev
[  394.118727][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  394.173239][    T9] usb 7-1: device descriptor read/8, error -71
[  394.290335][    T9] usb usb7-port1: unable to enumerate USB device
[  394.394878][ T5905] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  394.588615][ T5905] usb 2-1: Using ep0 maxpacket: 16
[  394.603564][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  394.661993][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  394.710212][ T5905] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82
[  394.758305][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.766471][ T5905] usb 2-1: Product: syz
[  394.778327][ T5905] usb 2-1: Manufacturer: syz
[  394.783018][ T5905] usb 2-1: SerialNumber: syz
[  394.813258][ T5905] usb 2-1: config 0 descriptor??
[  394.831633][ T5905] kobil_sct 2-1:0.0: KOBIL USB smart card terminal converter detected
[  394.835465][ T5849] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  394.893107][ T5905] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  394.934036][T11487] /dev/rnullb0: Can't open blockdev
[  395.050466][ T5905] usb 2-1: USB disconnect, device number 85
[  395.079184][ T5905] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  395.116210][ T5905] kobil_sct 2-1:0.0: device disconnected
[  395.515127][T11490] netlink: 'syz.4.1535': attribute type 11 has an invalid length.
[  396.010756][T11505] /dev/rnullb0: Can't open blockdev
[  396.228126][T11512] /dev/rnullb0: Can't open blockdev
[  396.246078][T11511] /dev/rnullb0: Can't open blockdev
[  396.380910][T11514] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1542'.
[  396.744553][T11525] /dev/rnullb0: Can't open blockdev
[  396.858416][ T5841] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  397.003662][ T5841] usb 6-1: device descriptor read/64, error -71
[  397.288911][ T5841] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  397.297549][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.304959][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.312065][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.320914][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.328813][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.336497][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.343500][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.352890][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.361149][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.368155][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.375176][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.382200][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.389264][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.396239][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.403432][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.410545][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.417580][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.424663][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.431607][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.438709][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.445615][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.449143][ T5841] usb 6-1: device descriptor read/64, error -71
[  397.452727][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.467229][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.474248][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.481220][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.488108][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.495118][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.502101][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.509225][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.516728][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.524051][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.531033][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.537992][ T5849] Bluetooth: hci2: unexpected event for opcode 0x2031
[  397.668409][ T5841] usb usb6-port1: attempt power cycle
[  397.864516][T11547] /dev/rnullb0: Can't open blockdev
[  397.883219][T11546] syzkaller1: entered promiscuous mode
[  397.898430][T11546] syzkaller1: entered allmulticast mode
[  398.064491][T11552] /dev/rnullb0: Can't open blockdev
[  398.086616][ T5841] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  398.106971][T11552] /dev/rnullb0: Can't open blockdev
[  398.120510][ T5841] usb 6-1: device descriptor read/8, error -71
[  398.359006][ T5841] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  398.379182][ T5841] usb 6-1: device descriptor read/8, error -71
[  398.490260][ T5841] usb usb6-port1: unable to enumerate USB device
[  398.508421][ T5897] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[  398.538322][ T5905] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  398.689546][ T5897] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[  398.707309][ T5897] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[  398.718596][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.734467][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.744602][ T5905] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  398.758541][ T5897] usb 2-1: Product: syz
[  398.762762][ T5897] usb 2-1: Manufacturer: syz
[  398.777822][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.786057][ T5897] usb 2-1: SerialNumber: syz
[  398.801043][ T5897] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  398.811440][ T5905] usb 7-1: config 0 descriptor??
[  398.819261][T11563] sg_write: data in/out 12/2550 bytes for SCSI command 0x0-- guessing data in;
[  398.819261][T11563]    program syz.4.1556 not setting count and/or reply_len properly
[  398.832373][ T5897] dvb-usb: bulk message failed: -22 (3/0)
[  398.865073][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  398.911277][ T5897] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[  398.927379][ T5897] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22
[  399.244857][ T5905] usbhid 7-1:0.0: can't add hid device: -71
[  399.250988][ T5905] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  399.264020][ T5905] usb 7-1: USB disconnect, device number 12
[  399.668918][ T5905] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  399.693964][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'.
[  399.707135][T11573] /dev/rnullb0: Can't open blockdev
[  399.838571][ T5905] usb 7-1: Using ep0 maxpacket: 32
[  399.852748][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.875378][ T5905] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  399.879298][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.898524][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.931235][ T5949] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  399.936608][ T5905] usb 7-1: config 0 descriptor??
[  399.951461][ T5905] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  399.952485][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.987534][ T5905] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  400.011397][T11575] netlink: 57 bytes leftover after parsing attributes in process `syz.1.1560'.
[  400.118354][ T5949] usb 5-1: Using ep0 maxpacket: 16
[  400.132438][ T5949] usb 5-1: unable to get BOS descriptor or descriptor too short
[  400.142424][ T5949] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[  400.151000][ T5949] usb 5-1: config 13 has no interface number 0
[  400.157227][ T5949] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[  400.198559][ T5949] usb 5-1: config 13 interface 50 has no altsetting 0
[  400.210348][ T5949] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  400.219742][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.227756][ T5949] usb 5-1: Product: syz
[  400.249400][ T5949] usb 5-1: Manufacturer: syz
[  400.254137][ T5949] usb 5-1: SerialNumber: syz
[  400.272015][T11572] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  400.508835][ T5949] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  400.515899][ T5949] usb 5-1: MIDIStreaming interface descriptor not found
[  400.644439][ T5949] usb 5-1: USB disconnect, device number 53
[  400.749214][ T7895] udevd[7895]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  400.766659][T11580] /dev/rnullb0: Can't open blockdev
[  400.978680][T11584] input: syz0 as /devices/virtual/input/input25
[  401.651051][T11592] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  401.651051][T11592] The task syz.5.1565 (11592) triggered the difference, watch for misbehavior.
[  402.099237][T11595] /dev/rnullb0: Can't open blockdev
[  402.219530][T11597] /dev/rnullb0: Can't open blockdev
[  402.358497][ T1072] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  402.379173][ T5841] usb 7-1: USB disconnect, device number 13
[  402.405745][ T5841] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  402.534476][ T1072] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  402.560574][ T1072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.591299][ T1072] usb 5-1: config 0 descriptor??
[  402.687421][ T1072] gspca_main: spca508-2.14.0 probing 8086:0110
[  402.881283][ T1072] gspca_spca508: reg_read err -32
[  402.927346][ T1072] gspca_spca508: reg_read err -32
[  402.995379][ T1072] gspca_spca508: reg_read err -32
[  403.028910][ T1072] gspca_spca508: reg_read err -32
[  403.131244][T11627] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1571'.
[  403.155089][T11627] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  403.235848][T11630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.263331][T11630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.285229][ T1072] gspca_spca508: reg write: error -71
[  403.289163][T11630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.302207][ T1072] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[  403.315024][T11628] /dev/rnullb0: Can't open blockdev
[  403.323047][ T1072] usb 5-1: USB disconnect, device number 54
[  403.332940][T11632] /dev/rnullb0: Can't open blockdev
[  403.345666][T11630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.488065][T11634] /dev/rnullb0: Can't open blockdev
[  403.742000][T11640] /dev/rnullb0: Can't open blockdev
[  403.857919][T11642] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  403.948327][T11649] /dev/rnullb0: Can't open blockdev
[  404.268308][ T5905] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  404.277664][T11663] /dev/rnullb0: Can't open blockdev
[  404.370058][T11666] vivid-004: =================  START STATUS  =================
[  404.398541][T11666] vivid-004: Radio HW Seek Mode: Bounded
[  404.404593][T11666] vivid-004: Radio Programmable HW Seek: false
[  404.452233][T11666] vivid-004: RDS Rx I/O Mode: Block I/O
[  404.457884][T11666] vivid-004: Generate RBDS Instead of RDS: false
[  404.458296][ T5905] usb 6-1: Using ep0 maxpacket: 16
[  404.503189][T11666] vivid-004: RDS Reception: true
[  404.518795][T11666] vivid-004: RDS Program Type: 0 inactive
[  404.519560][ T5905] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  404.540532][T11666] vivid-004: RDS PS Name:  inactive
[  404.545859][T11666] vivid-004: RDS Radio Text:  inactive
[  404.575430][ T5905] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  404.602867][ T5905] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  404.618426][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.620320][T11666] vivid-004: RDS Traffic Announcement: false inactive
[  404.655612][ T5905] usb 6-1: Product: syz
[  404.678949][T11667] ALSA: seq fatal error: cannot create timer (-19)
[  404.679252][ T5905] usb 6-1: Manufacturer: syz
[  404.710593][T11666] vivid-004: RDS Traffic Program: false inactive
[  404.718336][ T5905] usb 6-1: SerialNumber: syz
[  404.749055][T11666] vivid-004: RDS Music: false inactive
[  404.785199][T11666] vivid-004: ==================  END STATUS  ==================
[  404.996264][T11680] /dev/rnullb0: Can't open blockdev
[  405.046898][T11680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.087797][T11680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.154580][ T5905] usb 6-1: 0:2 : does not exist
[  405.767050][T11657] /dev/rnullb0: Can't open blockdev
[  405.777210][ T5905] usb 6-1: USB disconnect, device number 57
[  406.446716][T11691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.461901][T11691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.778419][ T5905] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  406.894853][T11702] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  406.920846][T11702] /dev/rnullb0: Can't open blockdev
[  406.928446][ T5905] usb 5-1: device descriptor read/64, error -71
[  407.338324][ T5905] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  407.500184][ T5905] usb 5-1: device descriptor read/64, error -71
[  407.618821][ T5905] usb usb5-port1: attempt power cycle
[  407.677611][T11708] /dev/rnullb0: Can't open blockdev
[  407.998470][ T5905] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  408.009773][T11710] /dev/rnullb0: Can't open blockdev
[  408.053270][ T5905] usb 5-1: device descriptor read/8, error -71
[  408.308332][ T5905] usb 5-1: new full-speed USB device number 58 using dummy_hcd
[  408.358420][ T5905] usb 5-1: device descriptor read/8, error -71
[  408.472590][ T5905] usb usb5-port1: unable to enumerate USB device
[  409.904593][T11735] /dev/rnullb0: Can't open blockdev
[  409.979267][ T5905] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  410.162677][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.190730][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.218282][ T5905] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  410.239131][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.284934][ T5905] usb 5-1: config 0 descriptor??
[  410.748986][ T5905] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  410.838716][ T5905] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected
[  410.870013][ T5905] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  411.192684][ T5949] usb 5-1: USB disconnect, device number 59
[  411.223046][ T5949] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected
[  411.346463][T11747] /dev/rnullb0: Can't open blockdev
[  411.729345][T11754] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1610'.
[  412.099449][T11760] /dev/rnullb0: Can't open blockdev
[  412.678386][ T5905] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  412.748153][T11766] /dev/rnullb0: Can't open blockdev
[  412.872946][ T5905] usb 5-1: config 2 has an invalid interface number: 50 but max is 0
[  412.904113][ T5905] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  412.924590][ T5905] usb 5-1: config 2 has no interface number 0
[  412.937618][ T5905] usb 5-1: config 2 interface 50 altsetting 7 bulk endpoint 0x7 has invalid maxpacket 64
[  412.981073][ T5905] usb 5-1: config 2 interface 50 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  413.011913][ T5905] usb 5-1: config 2 interface 50 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  413.045147][ T5905] usb 5-1: config 2 interface 50 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  413.079937][ T5905] usb 5-1: config 2 interface 50 altsetting 7 has a duplicate endpoint with address 0x7, skipping
[  413.096170][ T5905] usb 5-1: config 2 interface 50 altsetting 7 has 9 endpoint descriptors, different from the interface descriptor's value: 13
[  413.130850][ T5905] usb 5-1: config 2 interface 50 has no altsetting 0
[  413.141767][ T5905] usb 5-1: New USB device found, idVendor=15c2, idProduct=003f, bcdDevice=22.89
[  413.168761][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.195903][ T5905] usb 5-1: Product: syz
[  413.219978][ T5905] usb 5-1: Manufacturer: syz
[  413.234888][ T5905] usb 5-1: SerialNumber: syz
[  413.278739][T11763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  413.534326][T11763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.544800][T11763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.589183][ T5905] imon 5-1:2.50: unable to register, err -19
[  413.640222][ T5905] usb 5-1: USB disconnect, device number 60
[  413.728801][T11775] Invalid source name
[  414.263893][T11786] /dev/rnullb0: Can't open blockdev
[  414.289641][T11786] overlayfs: failed to resolve './file0': -2
[  416.087743][T11811] netlink: 'syz.1.1627': attribute type 21 has an invalid length.
[  416.114808][T11813] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  416.122532][T11811] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1627'.
[  416.405095][T11820] /dev/rnullb0: Can't open blockdev
[  416.631533][T11822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.650804][T11822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.663348][T11822] /dev/rnullb0: Can't open blockdev
[  417.178378][T11832] /dev/rnullb0: Can't open blockdev
[  417.295937][T11834] /dev/rnullb0: Can't open blockdev
[  417.506957][T11842] /dev/rnullb0: Can't open blockdev
[  417.648639][T11845] /dev/rnullb0: Can't open blockdev
[  417.907543][T11854] /dev/rnullb0: Can't open blockdev
[  418.057289][T11856] netlink: 'syz.5.1643': attribute type 21 has an invalid length.
[  418.071459][T11859] ./cgroup: Can't lookup blockdev
[  418.095205][T11856] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1643'.
[  418.127228][T11861] /dev/rnullb0: Can't open blockdev
[  418.240442][T11865] /dev/rnullb0: Can't open blockdev
[  418.584983][T11869] /dev/rnullb0: Can't open blockdev
[  418.628685][    T9] usb 6-1: new full-speed USB device number 58 using dummy_hcd
[  418.814217][    T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  418.827431][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.845874][    T9] usb 6-1: Product: syz
[  418.856008][    T9] usb 6-1: Manufacturer: syz
[  418.873934][T11873] /dev/rnullb0: Can't open blockdev
[  418.898458][    T9] usb 6-1: SerialNumber: syz
[  418.929632][    T9] usb 6-1: config 0 descriptor??
[  419.138153][    T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  419.646377][T11894] IPVS: length: 148 != 8
[  420.638428][T11900] binder: 11898:11900 ioctl 4018620d 0 returned -22
[  420.776417][T11890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  420.792984][T11890] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  420.810682][T11890] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  420.828529][T11890] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  420.839872][T11890] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  421.014334][T11903] lo speed is unknown, defaulting to 1000
[  421.020044][T11908] /dev/rnullb0: Can't open blockdev
[  421.458356][ T5841] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  421.600199][T11890] Bluetooth: hci3: command 0x0405 tx timeout
[  421.607325][T11903] chnl_net:caif_netlink_parms(): no params data found
[  421.660936][ T5841] usb 5-1: Using ep0 maxpacket: 16
[  421.690452][ T5841] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  421.718484][ T5841] usb 5-1: can't read configurations, error -22
[  421.858495][ T5841] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  422.035239][ T5841] usb 5-1: Using ep0 maxpacket: 16
[  422.051340][T11903] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.082498][T11903] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.110587][ T5841] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  422.118998][T11903] bridge_slave_0: entered allmulticast mode
[  422.125380][ T5841] usb 5-1: can't read configurations, error -22
[  422.134079][T11903] bridge_slave_0: entered promiscuous mode
[  422.142024][ T5841] usb usb5-port1: attempt power cycle
[  422.143133][T11922] /dev/rnullb0: Can't open blockdev
[  422.152255][T11903] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.160140][T11903] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.167468][T11903] bridge_slave_1: entered allmulticast mode
[  422.175691][T11903] bridge_slave_1: entered promiscuous mode
[  422.203804][    T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  422.254869][    T9] usb 6-1: USB disconnect, device number 58
[  422.320601][T11903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.361207][T11903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.488595][ T5841] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  422.505776][T11903] team0: Port device team_slave_0 added
[  422.529459][T11903] team0: Port device team_slave_1 added
[  422.539195][ T5841] usb 5-1: Using ep0 maxpacket: 16
[  422.547056][ T5841] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  422.568294][ T5841] usb 5-1: can't read configurations, error -22
[  422.696591][T11903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.718899][ T5841] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  422.737101][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.778494][ T5841] usb 5-1: Using ep0 maxpacket: 16
[  422.795845][ T5841] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  422.804123][ T5841] usb 5-1: can't read configurations, error -22
[  422.816772][ T5841] usb usb5-port1: unable to enumerate USB device
[  422.826771][T11903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.849356][T11903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.856377][T11903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.884608][T11938] ./cgroup: Can't lookup blockdev
[  422.889113][ T5849] Bluetooth: hci5: command tx timeout
[  422.909486][T11903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.014046][T11903] hsr_slave_0: entered promiscuous mode
[  423.028047][T11903] hsr_slave_1: entered promiscuous mode
[  423.042930][T11903] debugfs: 'hsr0' already exists in 'hsr'
[  423.054679][T11903] Cannot create hsr debugfs directory
[  423.386011][T11945] lo speed is unknown, defaulting to 1000
[  423.850608][T11903] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  423.862628][T11948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.899118][T11948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.913421][T11903] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  423.966199][T11903] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  424.018828][T11903] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  424.336740][T11903] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.440564][T11903] 8021q: adding VLAN 0 to HW filter on device team0
[  424.455574][T11961] Malformed UNC in devname
[  424.455574][T11961] 
[  424.458970][T11960] Malformed UNC in devname
[  424.458970][T11960] 
[  424.495261][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.502489][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.506626][T11960] CIFS: VFS: Malformed UNC in devname
[  424.529647][T11961] CIFS: VFS: Malformed UNC in devname
[  424.536345][T11945] /dev/rnullb0: Can't open blockdev
[  424.593231][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.600471][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.775528][T11903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  424.854648][T11971] netlink: 'syz.1.1674': attribute type 2 has an invalid length.
[  424.913444][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.948824][T11971] netlink: 'syz.1.1674': attribute type 1 has an invalid length.
[  424.956714][T11971] netlink: 'syz.1.1674': attribute type 1 has an invalid length.
[  424.984424][ T5849] Bluetooth: hci5: command tx timeout
[  425.018150][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.685548][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.260465][T12016] binder: 12015:12016 ioctl c018620b 0 returned -14
[  426.528651][T12023] tap0: tun_chr_ioctl cmd 1074025675
[  426.550032][T12023] tap0: persist disabled
[  426.575902][T12026] overlay: ./file0 is not a directory
[  426.596319][T12026] /dev/rnullb0: Can't open blockdev
[  426.729523][T11903] veth0_vlan: entered promiscuous mode
[  426.764671][T11903] veth1_vlan: entered promiscuous mode
[  426.876922][T11903] veth0_macvtap: entered promiscuous mode
[  426.919437][T11903] veth1_macvtap: entered promiscuous mode
[  426.994161][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.031632][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.038475][ T5849] Bluetooth: hci5: command tx timeout
[  427.089397][ T5940] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  427.111459][T11622] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.123857][T11622] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.170313][T11622] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.200438][T11622] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.371013][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  427.382436][ T5940] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  427.409526][ T5940] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  427.428577][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  427.436620][ T5940] usb 5-1: SerialNumber: syz
[  427.648109][T11616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.678259][T11616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.708421][   T30] audit: type=1326 audit(2000000252.103:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12029 comm="syz.4.1690" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f1347b8e9a9 code=0x0
[  427.788932][ T5940] usb 5-1: 0:2 : does not exist
[  427.812232][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.830252][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.896125][ T5940] usb 5-1: USB disconnect, device number 65
[  427.977011][ T7804] udevd[7804]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  428.214301][T12043] GUP no longer grows the stack in syz.1.1694 (12043): 200000005000-200000008000 (200000004000)
[  428.232894][T12043] CPU: 0 UID: 0 PID: 12043 Comm: syz.1.1694 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  428.232921][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  428.232942][T12043] Call Trace:
[  428.232950][T12043]  <TASK>
[  428.232958][T12043]  dump_stack_lvl+0x189/0x250
[  428.233006][T12043]  ? __pfx_dump_stack_lvl+0x10/0x10
[  428.233034][T12043]  ? __pfx__printk+0x10/0x10
[  428.233058][T12043]  ? find_vma+0xe7/0x160
[  428.233092][T12043]  __get_user_pages+0x24d0/0x2ce0
[  428.233108][T12043]  ? __lock_acquire+0xab9/0xd20
[  428.233155][T12043]  ? __gup_longterm_locked+0xc68/0x1660
[  428.233183][T12043]  __gup_longterm_locked+0xde9/0x1660
[  428.233222][T12043]  ? gup_fast_fallback+0x195f/0x2010
[  428.233245][T12043]  gup_fast_fallback+0x1e6a/0x2010
[  428.233295][T12043]  ? __pfx_gup_fast_fallback+0x10/0x10
[  428.233322][T12043]  ? rcu_is_watching+0x15/0xb0
[  428.233344][T12043]  ? is_valid_gup_args+0x11f/0x200
[  428.233365][T12043]  ? get_user_pages_fast+0x4d/0xb0
[  428.233387][T12043]  get_futex_key+0x938/0x1660
[  428.233426][T12043]  ? __pfx_get_futex_key+0x10/0x10
[  428.233470][T12043]  ? preempt_schedule_common+0x83/0xd0
[  428.233504][T12043]  ? __pfx___schedule+0x10/0x10
[  428.233536][T12043]  futex_wait_setup+0x4f/0x590
[  428.233565][T12043]  ? __futex_wait+0xb3/0x3e0
[  428.233593][T12043]  __futex_wait+0x148/0x3e0
[  428.233626][T12043]  ? __pfx___futex_wait+0x10/0x10
[  428.233653][T12043]  ? __pfx_futex_wake_mark+0x10/0x10
[  428.233687][T12043]  ? futex_private_hash_put+0x4b/0x280
[  428.233726][T12043]  futex_wait+0x104/0x360
[  428.233752][T12043]  ? __pfx_futex_wait+0x10/0x10
[  428.233786][T12043]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  428.233823][T12043]  do_futex+0x333/0x420
[  428.233848][T12043]  ? __pfx_do_futex+0x10/0x10
[  428.233876][T12043]  ? __vm_munmap+0x301/0x3d0
[  428.233900][T12043]  __se_sys_futex+0x36f/0x400
[  428.233926][T12043]  ? __pfx___se_sys_futex+0x10/0x10
[  428.233946][T12043]  ? rcu_is_watching+0x15/0xb0
[  428.233977][T12043]  ? __x64_sys_futex+0x21/0xf0
[  428.233999][T12043]  do_syscall_64+0xfa/0x3b0
[  428.234028][T12043]  ? lockdep_hardirqs_on+0x9c/0x150
[  428.234056][T12043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.234074][T12043]  ? clear_bhb_loop+0x60/0xb0
[  428.234098][T12043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.234123][T12043] RIP: 0033:0x7f575518e9a9
[  428.234146][T12043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  428.234163][T12043] RSP: 002b:00007f5752ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  428.234183][T12043] RAX: ffffffffffffffda RBX: 00007f57553b5fa0 RCX: 00007f575518e9a9
[  428.234197][T12043] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000200000004000
[  428.234210][T12043] RBP: 00007f5755210d69 R08: 0000000000000000 R09: 0000000000000000
[  428.234222][T12043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  428.234234][T12043] R13: 0000000000000000 R14: 00007f57553b5fa0 R15: 00007ffc4d5dd728
[  428.234263][T12043]  </TASK>
[  428.724470][T12050] /dev/rnullb0: Can't open blockdev
[  429.120732][ T5849] Bluetooth: hci5: command tx timeout
[  429.129338][T12057] /dev/rnullb0: Can't open blockdev
[  429.361725][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.371051][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.488286][ T5897] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  429.533692][ T5940] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  429.658575][ T5897] usb 6-1: device descriptor read/64, error -71
[  429.701635][ T5940] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  429.722486][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  429.747072][ T5940] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  429.777174][ T5940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.797198][ T5940] usb 8-1: config 0 descriptor??
[  429.817842][ T5940] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  429.833419][ T5940] dvb-usb: bulk message failed: -22 (3/0)
[  429.856795][ T5940] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  429.882234][ T5940] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  429.894137][ T5940] usb 8-1: media controller created
[  429.904134][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  429.930684][ T5897] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  429.948967][ T5940] dvb-usb: bulk message failed: -22 (6/0)
[  429.973655][ T5940] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  430.010918][ T5940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input27
[  430.066153][ T5940] dvb-usb: schedule remote query interval to 150 msecs.
[  430.088668][ T5897] usb 6-1: device descriptor read/64, error -71
[  430.117541][ T5940] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  430.185534][T12077] /dev/rnullb0: Can't open blockdev
[  430.251122][ T5897] usb usb6-port1: attempt power cycle
[  430.270827][ T5940] dvb-usb: bulk message failed: -22 (1/0)
[  430.285359][ T5940] dvb-usb: error while querying for an remote control event.
[  430.435382][ T5841] usb 8-1: USB disconnect, device number 2
[  430.509837][ T5841] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  430.617304][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  430.658283][ T5897] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  430.676925][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  430.698674][ T5897] usb 6-1: device descriptor read/8, error -71
[  430.918619][ T5940] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  430.938408][ T5897] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  430.989091][ T5897] usb 6-1: device descriptor read/8, error -71
[  431.092211][ T5940] usb 5-1: Using ep0 maxpacket: 32
[  431.101289][ T5897] usb usb6-port1: unable to enumerate USB device
[  431.116500][ T5940] usb 5-1: config 0 has an invalid interface number: 179 but max is 2
[  431.136225][ T5940] usb 5-1: config 0 has an invalid interface number: 157 but max is 2
[  431.168784][ T5940] usb 5-1: config 0 has an invalid interface number: 15 but max is 2
[  431.177313][ T5940] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  431.225780][ T5940] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  431.248463][ T5940] usb 5-1: config 0 has no interface number 0
[  431.255262][ T5940] usb 5-1: config 0 has no interface number 1
[  431.268282][ T5940] usb 5-1: config 0 has no interface number 2
[  431.285652][ T5940] usb 5-1: config 0 interface 179 altsetting 163 endpoint 0x1 has invalid maxpacket 1584, setting to 64
[  431.318278][ T5940] usb 5-1: config 0 interface 179 altsetting 163 has an invalid descriptor for endpoint zero, skipping
[  431.358545][ T5940] usb 5-1: config 0 interface 157 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 1024
[  431.388308][ T5940] usb 5-1: config 0 interface 157 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  431.420572][ T5940] usb 5-1: config 0 interface 157 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  431.440970][ T5940] usb 5-1: config 0 interface 157 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  431.472673][ T5940] usb 5-1: config 0 interface 15 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  431.504324][ T5940] usb 5-1: config 0 interface 15 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[  431.539106][ T5940] usb 5-1: config 0 interface 15 altsetting 3 has a duplicate endpoint with address 0x9, skipping
[  431.570435][ T5940] usb 5-1: config 0 interface 15 altsetting 3 has a duplicate endpoint with address 0xF, skipping
[  431.613680][ T5940] usb 5-1: config 0 interface 15 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  431.690751][ T5940] usb 5-1: config 0 interface 15 altsetting 3 has a duplicate endpoint with address 0x2, skipping
[  431.739755][ T5940] usb 5-1: config 0 interface 15 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  431.770645][ T5940] usb 5-1: config 0 interface 179 has no altsetting 0
[  431.786322][ T5940] usb 5-1: config 0 interface 157 has no altsetting 0
[  431.813895][ T5940] usb 5-1: config 0 interface 15 has no altsetting 0
[  431.836162][ T5940] usb 5-1: New USB device found, idVendor=045e, idProduct=0444, bcdDevice= a.80
[  431.866235][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.888621][ T5940] usb 5-1: Product: 蹋⬃䧟컩䂴姓賁쐵픮ᗐ㸽㪬霮ඖᣎ䚶ȫ쬾鲹ɱ쫈﹊㇌ࡹ֪궈㠍㸔爂琰䇱옡뽐⺤஄嵁穚ꂪ澍屈뜐뀅聯嵜ᖱ䥀擉굢裒ᄄ芛ў繙솴괜闖졆乙簙ꃓ峼똪沯ᚃ쓽퇼⫱읤霆♻Ⴡᅦ၏锾膝囃刉浢粬䲍溊路邖贃翕채蠓䟌蠻劗쉵掼젆ꍊꁛ꼀偝住娝㾔焆ܾ㏷瘑斸Ⲣ빦炚樫왠☸
[  431.918345][T12100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.924391][    C1] vkms_vblank_simulate: vblank timer overrun
[  431.954695][T12101] /dev/rnullb0: Can't open blockdev
[  431.964654][T12100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.038670][ T5940] usb 5-1: Manufacturer: 샃޸౅䆊㏯跔웲๰抣蠤³欿㷑塖陼ᓓ돈㖇胂釳䮗힤䒣띿絖埀⅌煿빮曉ጴ娋஧귐﹘倲㙥푌⊯衖調
[  432.070348][ T5940] usb 5-1: SerialNumber: 䐊
[  432.109586][ T5940] usb 5-1: config 0 descriptor??
[  432.413893][ T5940] usb 5-1: USB disconnect, device number 66
[  433.180444][T12118] /dev/rnullb0: Can't open blockdev
[  433.190081][T12120] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[  433.479416][T12132] /dev/rnullb0: Can't open blockdev
[  433.766118][T12138] /dev/rnullb0: Can't open blockdev
[  433.999546][T12148] /dev/rnullb0: Can't open blockdev
[  434.113269][T12152] /dev/rnullb0: Can't open blockdev
[  434.205692][T12156] /dev/rnullb0: Can't open blockdev
[  434.522004][T12162] usb usb8: usbfs: process 12162 (syz.5.1731) did not claim interface 0 before use
[  434.673622][T12169] IPVS: length: 68 != 24
[  434.818330][ T5905] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  435.043761][ T5905] usb 6-1: Using ep0 maxpacket: 16
[  435.082292][ T5905] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  435.098342][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.122731][ T5905] usb 6-1: Product: syz
[  435.126949][ T5905] usb 6-1: Manufacturer: syz
[  435.138602][ T5905] usb 6-1: SerialNumber: syz
[  435.185862][ T5905] usb 6-1: config 0 descriptor??
[  435.216145][ T5905] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  435.454254][T12162] syzkaller1: entered promiscuous mode
[  435.489887][T12184] /dev/rnullb0: Can't open blockdev
[  435.498312][T12162] syzkaller1: entered allmulticast mode
[  435.970354][ T5905] gspca_sn9c2028: read1 error -71
[  435.993211][ T5905] gspca_sn9c2028: read1 error -71
[  436.017780][ T5905] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71
[  436.039688][ T5905] usb 6-1: USB disconnect, device number 63
[  436.098548][  T981] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  436.282219][T12199] /dev/rnullb0: Can't open blockdev
[  436.291581][  T981] usb 5-1: Using ep0 maxpacket: 8
[  436.324263][  T981] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  436.342425][  T981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  436.383931][  T981] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  436.438747][  T981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  436.468279][  T981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  436.533241][  T981] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  436.572882][  T981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  436.633610][  T981] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  436.688270][  T981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  436.718291][  T981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  436.788976][  T981] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  436.796438][  T981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  436.840708][  T981] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  436.908348][  T981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  436.955784][  T981] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  437.089011][T12212] /dev/rnullb0: Can't open blockdev
[  437.301224][  T981] usb 5-1: string descriptor 0 read error: -22
[  437.307619][  T981] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  437.349995][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.423491][  T981] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  437.444199][T12216] Bluetooth: MGMT ver 1.23
[  437.583950][T12219] /dev/rnullb0: Can't open blockdev
[  437.603803][  T981] usb 5-1: USB disconnect, device number 67
[  437.795892][T12222] /dev/rnullb0: Can't open blockdev
[  438.058684][ T5940] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  438.248301][ T5940] usb 5-1: Using ep0 maxpacket: 16
[  438.256480][T12230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.258980][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  438.297512][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  438.330311][T12230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.346657][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  438.384441][ T5940] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  438.423472][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  438.474126][ T5940] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  438.488329][ T5841] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  438.515994][ T5940] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  438.537275][ T5940] usb 5-1: Manufacturer: syz
[  438.559372][ T5940] usb 5-1: config 0 descriptor??
[  438.658403][ T5841] usb 6-1: Using ep0 maxpacket: 8
[  438.681273][ T5841] usb 6-1: unable to get BOS descriptor or descriptor too short
[  438.713235][ T5841] usb 6-1: config 254 has an invalid interface number: 3 but max is 0
[  438.750689][ T5841] usb 6-1: config 254 has no interface number 0
[  438.787234][ T5841] usb 6-1: config 254 interface 3 has no altsetting 0
[  438.842196][ T5841] usb 6-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=5e.fa
[  438.869412][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.892721][ T5841] usb 6-1: Product: syz
[  438.900958][ T5841] usb 6-1: Manufacturer: syz
[  438.914865][ T5841] usb 6-1: SerialNumber: syz
[  438.992193][ T5940] rc_core: IR keymap rc-hauppauge not found
[  439.005081][ T5940] Registered IR keymap rc-empty
[  439.025171][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.070253][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.126577][ T5940] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  439.285015][ T5841] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282
[  439.306022][ T5940] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28
[  439.326559][ T5841] gspca_sn9c20x: Write register 1000 failed -71
[  439.337808][ T5841] gspca_sn9c20x: Device initialization failed
[  439.368478][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.394842][ T5841] gspca_sn9c20x 6-1:254.3: probe with driver gspca_sn9c20x failed with error -71
[  439.408970][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.444232][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.456049][ T5841] usb 6-1: USB disconnect, device number 64
[  439.499244][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.529188][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.550315][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.571197][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.614356][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.663067][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.719119][ T5940] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  439.744971][ T5940] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  439.788311][ T5940] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  439.828937][ T5940] usb 5-1: USB disconnect, device number 68
[  439.986039][T12245] /dev/rnullb0: Can't open blockdev
[  439.998414][T12244] netlink: 'syz.4.1752': attribute type 11 has an invalid length.
[  440.012499][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  440.012592][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  440.037686][T12246] /dev/rnullb0: Can't open blockdev
[  440.375440][T12251] /dev/rnullb0: Can't open blockdev
[  440.379407][T12250] No control pipe specified
[  440.674618][T12258] input: syz0 as /devices/virtual/input/input29
[  440.808554][ T5940] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  440.849242][    T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  441.024980][    T9] usb 6-1: Using ep0 maxpacket: 32
[  441.062650][    T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  441.110209][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.169742][    T9] usb 6-1: Product: syz
[  441.188246][    T9] usb 6-1: Manufacturer: syz
[  441.192950][    T9] usb 6-1: SerialNumber: syz
[  441.239277][    T9] usb 6-1: config 0 descriptor??
[  441.500746][    T9] airspy 6-1:0.0: usb_control_msg() failed -71 request 09
[  441.508030][    T9] airspy 6-1:0.0: Could not detect board
[  441.559111][    T9] airspy 6-1:0.0: probe with driver airspy failed with error -71
[  441.585261][    T9] usb 6-1: USB disconnect, device number 65
[  441.775228][T12277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.821706][T12277] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.980409][T12277] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.073306][T12277] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.545422][T12306] /dev/rnullb0: Can't open blockdev
[  443.593704][T12310] /dev/sg0: Can't lookup blockdev
[  443.751296][ T5841] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  443.883461][T12312] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  443.920203][T12312] /dev/rnullb0: Can't open blockdev
[  443.951003][ T5841] usb 8-1: unable to read config index 0 descriptor/start: -61
[  443.974540][ T5841] usb 8-1: can't read configurations, error -61
[  444.069008][T12316] /dev/rnullb0: Can't open blockdev
[  444.168718][ T5841] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  444.361914][ T5841] usb 8-1: unable to read config index 0 descriptor/start: -61
[  444.387461][ T5841] usb 8-1: can't read configurations, error -61
[  444.402115][T12320] /dev/rnullb0: Can't open blockdev
[  444.423049][ T5841] usb usb8-port1: attempt power cycle
[  444.598310][    T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  444.720741][T12333] /dev/rnullb0: Can't open blockdev
[  444.761681][    T9] usb 6-1: Using ep0 maxpacket: 16
[  444.784124][ T5841] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  444.791233][    T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  444.804068][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  444.820685][T12335] PKCS7: Unknown OID: [4] 5.25.373.87(bad)
[  444.826552][T12335] PKCS7: Only support pkcs7_signedData type
[  444.853787][    T9] usb 6-1: config 0 has no interface number 0
[  444.854711][ T5841] usb 8-1: unable to read config index 0 descriptor/start: -61
[  444.881519][    T9] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  444.909817][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.911605][ T5841] usb 8-1: can't read configurations, error -61
[  444.969903][    T9] usb 6-1: Product: syz
[  444.976232][    T9] usb 6-1: Manufacturer: syz
[  444.991175][    T9] usb 6-1: SerialNumber: syz
[  445.049576][    T9] usb 6-1: config 0 descriptor??
[  445.068441][ T5841] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  445.150666][ T5841] usb 8-1: unable to read config index 0 descriptor/start: -61
[  445.172265][ T5841] usb 8-1: can't read configurations, error -61
[  445.201245][ T5841] usb usb8-port1: unable to enumerate USB device
[  445.259662][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.289001][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.348050][T12343] ptm ptm4: ldisc open failed (-12), clearing slot 4
[  445.465612][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.552389][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.738142][T12352] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  446.013446][ T5940] usb 5-1: unable to read config index 0 descriptor/start: -32
[  446.049822][ T5940] usb 5-1: chopping to 0 config(s)
[  446.070951][ T5940] usb 5-1: can't read configurations, error -32
[  446.154877][T12360] pim6reg1: entered promiscuous mode
[  446.184947][T12360] pim6reg1: entered allmulticast mode
[  446.218454][ T5940] usb 5-1: new full-speed USB device number 70 using dummy_hcd
[  446.269554][T12360] /dev/rnullb0: Can't open blockdev
[  446.398482][ T5940] usb 5-1: device descriptor read/64, error -32
[  446.465237][    T9] usb 6-1: USB disconnect, device number 66
[  446.512643][T12364] /dev/rnullb0: Can't open blockdev
[  446.538782][ T5940] usb usb5-port1: attempt power cycle
[  446.899724][ T5940] usb 5-1: new full-speed USB device number 71 using dummy_hcd
[  446.961876][ T5940] usb 5-1: device descriptor read/8, error -32
[  447.208512][ T5940] usb 5-1: new full-speed USB device number 72 using dummy_hcd
[  447.259304][ T5940] usb 5-1: device descriptor read/8, error -32
[  447.381830][ T5940] usb usb5-port1: unable to enumerate USB device
[  447.439791][T12379] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  447.504451][T12382] /dev/rnullb0: Can't open blockdev
[  447.802756][T12389] /dev/rnullb0: Can't open blockdev
[  447.878952][T12391] trusted_key: encrypted_key: insufficient parameters specified
[  448.030170][T12393] /dev/rnullb0: Can't open blockdev
[  448.738673][ T5940] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  448.918325][ T5940] usb 6-1: device descriptor read/64, error -71
[  449.122551][T12404] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  449.149678][T12404] syzkaller0: entered allmulticast mode
[  449.179283][ T5940] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  449.188828][T12405] /dev/rnullb0: Can't open blockdev
[  449.348300][ T5940] usb 6-1: device descriptor read/64, error -71
[  449.488920][ T5940] usb usb6-port1: attempt power cycle
[  449.662433][T12409] /dev/rnullb0: Can't open blockdev
[  449.759084][T12411] /dev/rnullb0: Can't open blockdev
[  449.798529][ T5949] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  449.840953][ T5940] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  449.880047][ T5940] usb 6-1: device descriptor read/8, error -71
[  449.914163][T12417] /dev/rnullb0: Can't open blockdev
[  449.958279][ T5949] usb 8-1: device descriptor read/64, error -71
[  450.118574][ T5940] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  450.160153][ T5940] usb 6-1: device descriptor read/8, error -71
[  450.198579][ T5949] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  450.290985][ T5940] usb usb6-port1: unable to enumerate USB device
[  450.338328][ T5949] usb 8-1: device descriptor read/64, error -71
[  450.469234][ T5949] usb usb8-port1: attempt power cycle
[  450.833364][ T5849] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  450.841997][ T5949] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  450.889072][ T5949] usb 8-1: device descriptor read/8, error -71
[  451.057850][T12443] program syz.4.1807 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  451.111924][T12443] program syz.4.1807 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  451.138955][ T5949] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  451.182160][ T5949] usb 8-1: device descriptor read/8, error -71
[  451.332045][ T5949] usb usb8-port1: unable to enumerate USB device
[  451.614285][T12449] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1809'.
[  452.497811][T12466] /dev/rnullb0: Can't open blockdev
[  453.050832][T12472] can: request_module (can-proto-0) failed.
[  453.486562][T12482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1820'.
[  455.078332][    T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  455.113249][T12518] /dev/rnullb0: Can't open blockdev
[  455.190090][T12523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1832'.
[  455.219997][T12522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.258336][    T9] usb 6-1: Using ep0 maxpacket: 16
[  455.264249][T12522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.291071][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.302098][T12525] netlink: 4120 bytes leftover after parsing attributes in process `syz.4.1833'.
[  455.336607][T12525] openvswitch: netlink: Flow key attr not present in new flow.
[  455.338858][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  455.373515][T12527] /dev/rnullb0: Can't open blockdev
[  455.388415][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  455.406376][T12525] /dev/rnullb0: Can't open blockdev
[  455.419813][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  455.452461][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  455.513580][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  455.562132][    T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  455.588262][    T9] usb 6-1: Manufacturer: syz
[  455.609623][    T9] usb 6-1: config 0 descriptor??
[  455.672750][T12531] random: crng reseeded on system resumption
[  455.750236][   T30] audit: type=1326 audit(2000000280.163:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.4.1836" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1347b8e9a9 code=0x0
[  456.138375][    T9] rc_core: IR keymap rc-hauppauge not found
[  456.168960][    T9] Registered IR keymap rc-empty
[  456.174006][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.248349][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.295005][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  456.353887][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input30
[  456.373326][T12542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.394604][T12544] /dev/rnullb0: Can't open blockdev
[  456.424418][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.453290][T12542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.518359][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.526806][T12542] /dev/rnullb0: Can't open blockdev
[  456.537540][T12545] /dev/rnullb0: Can't open blockdev
[  456.558683][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.598318][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.658358][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.693352][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.748714][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.778348][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.828377][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.866151][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  456.920709][    T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  456.958561][    T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  457.001871][    T9] usb 6-1: USB disconnect, device number 71
[  457.282909][  T981] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  457.291861][T12559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.342401][  T981] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  457.398588][T12559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.615118][T12563] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1844'.
[  457.649551][T12559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1844'.
[  457.683473][T12564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1844'.
[  457.740426][T12564] /dev/rnullb0: Can't open blockdev
[  457.767604][T12564] /dev/rnullb0: Can't open blockdev
[  457.795889][T12564] /dev/rnullb0: Can't open blockdev
[  457.819782][T12564] /dev/rnullb0: Can't open blockdev
[  457.846184][T12564] /dev/rnullb0: Can't open blockdev
[  457.889558][T12564] /dev/rnullb0: Can't open blockdev
[  457.916173][T12564] /dev/rnullb0: Can't open blockdev
[  457.938722][T12564] /dev/rnullb0: Can't open blockdev
[  457.956439][T12564] /dev/rnullb0: Can't open blockdev
[  457.969039][T12564] /dev/rnullb0: Can't open blockdev
[  457.977854][T12564] /dev/rnullb0: Can't open blockdev
[  457.984369][T12564] /dev/rnullb0: Can't open blockdev
[  457.990855][T12564] /dev/rnullb0: Can't open blockdev
[  457.997805][T12564] /dev/rnullb0: Can't open blockdev
[  458.029374][T12574] /dev/rnullb0: Can't open blockdev
[  458.049134][T12564] /dev/rnullb0: Can't open blockdev
[  458.080170][T12564] /dev/rnullb0: Can't open blockdev
[  458.086123][T12564] /dev/rnullb0: Can't open blockdev
[  458.120642][T12564] /dev/rnullb0: Can't open blockdev
[  458.126702][T12564] /dev/rnullb0: Can't open blockdev
[  458.199345][T12564] /dev/rnullb0: Can't open blockdev
[  458.235964][T12564] /dev/rnullb0: Can't open blockdev
[  458.261740][T12564] /dev/rnullb0: Can't open blockdev
[  458.286002][T12564] /dev/rnullb0: Can't open blockdev
[  458.306313][T12564] /dev/rnullb0: Can't open blockdev
[  458.339033][T12564] /dev/rnullb0: Can't open blockdev
[  458.354623][T12564] /dev/rnullb0: Can't open blockdev
[  458.364815][T12564] /dev/rnullb0: Can't open blockdev
[  458.395622][T12564] /dev/rnullb0: Can't open blockdev
[  458.421321][T12564] /dev/rnullb0: Can't open blockdev
[  458.450082][T12564] /dev/rnullb0: Can't open blockdev
[  458.469117][T12564] /dev/rnullb0: Can't open blockdev
[  458.482176][T12564] /dev/rnullb0: Can't open blockdev
[  458.494458][T12564] /dev/rnullb0: Can't open blockdev
[  458.781368][T12592] /dev/rnullb0: Can't open blockdev
[  458.978696][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1852'.
[  459.047515][T12591] /dev/rnullb0: Can't open blockdev
[  459.634485][ T5841] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  459.795776][T12612] /dev/rnullb0: Can't open blockdev
[  459.849439][ T5841] usb 8-1: Using ep0 maxpacket: 8
[  459.874287][ T5841] usb 8-1: config 1 interface 0 has no altsetting 0
[  459.888545][ T5841] usb 8-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40
[  459.907945][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.939325][ T5841] usb 8-1: Product: ࠚ
[  459.943581][ T5841] usb 8-1: Manufacturer: ѕ
[  459.961538][ T5841] usb 8-1: SerialNumber: 㐉
[  460.187888][T12620] ptm ptm3: ldisc open failed (-12), clearing slot 3
[  460.399313][ T5841] usbhid 8-1:1.0: can't add hid device: -71
[  460.405580][ T5841] usbhid 8-1:1.0: probe with driver usbhid failed with error -71
[  460.460408][ T5841] usb 8-1: USB disconnect, device number 11
[  460.681278][T12631] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[  460.711486][T12631] /dev/rnullb0: Can't open blockdev
[  461.163562][T12642] /dev/rnullb0: Can't open blockdev
[  461.292793][T12647] /dev/rnullb0: Can't open blockdev
[  461.989462][T12669] /dev/rnullb0: Can't open blockdev
[  462.130107][T12672] netlink: 'syz.4.1881': attribute type 2 has an invalid length.
[  462.170836][T12672] /dev/rnullb0: Can't open blockdev
[  462.419350][  T981] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  462.579908][T12681] kvm: user requested TSC rate below hardware speed
[  462.600589][  T981] usb 8-1: Using ep0 maxpacket: 32
[  462.604203][T12681] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3304665512 (6609331024 ns) > initial count (5832947598 ns). Using initial count to start timer.
[  462.623250][    C1] vkms_vblank_simulate: vblank timer overrun
[  462.625711][  T981] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[  462.665457][  T981] usb 8-1: config 0 has no interface number 0
[  462.693711][  T981] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  462.715603][  T981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.729945][T12681] /dev/rnullb0: Can't open blockdev
[  462.754920][  T981] usb 8-1: Product: syz
[  462.778481][  T981] usb 8-1: Manufacturer: syz
[  462.784910][  T981] usb 8-1: SerialNumber: syz
[  462.819308][  T981] usb 8-1: config 0 descriptor??
[  462.852839][  T981] smsc95xx v2.0.0
[  463.278652][  T981] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  463.312325][  T981] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  463.445918][T12700] /dev/rnullb0: Can't open blockdev
[  463.474133][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1892'.
[  463.509173][T12702] /dev/rnullb0: Can't open blockdev
[  464.159198][ T5949] raw-gadget.0 gadget.4: failed to queue resume event
[  464.173108][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1895'.
[  464.248604][ T5949] usb 5-1: new full-speed USB device number 73 using dummy_hcd
[  464.256514][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  464.264526][T12713] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  464.271691][T12713] /dev/rnullb0: Can't open blockdev
[  464.288411][ T5949] raw-gadget.0 gadget.4: failed to queue reset event
[  464.372103][ T5949] raw-gadget.0 gadget.4: failed to queue resume event
[  464.448294][ T5949] usb 5-1: device descriptor read/64, error -32
[  464.487669][T12721] /dev/rnullb0: Can't open blockdev
[  464.578575][ T5949] raw-gadget.0 gadget.4: failed to queue suspend event
[  464.601088][ T5949] raw-gadget.0 gadget.4: failed to queue reset event
[  464.698349][ T5949] raw-gadget.0 gadget.4: failed to queue resume event
[  464.778354][ T5949] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  464.786262][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  464.818514][ T5949] raw-gadget.0 gadget.4: failed to queue reset event
[  464.908607][ T5949] raw-gadget.0 gadget.4: failed to queue resume event
[  464.949915][T12731] /dev/rnullb0: Can't open blockdev
[  464.998350][ T5949] usb 5-1: device descriptor read/64, error -32
[  465.111874][ T5949] raw-gadget.0 gadget.4: failed to queue suspend event
[  465.131059][ T5949] usb usb5-port1: attempt power cycle
[  465.132952][T12735] /dev/rnullb0: Can't open blockdev
[  465.148462][ T5949] raw-gadget.0 gadget.4: failed to queue disconnect event
[  465.163017][ T5949] raw-gadget.0 gadget.4: failed to queue reset event
[  465.248320][ T5949] raw-gadget.0 gadget.4: failed to queue resume event
[  465.268784][ T5949] raw-gadget.0 gadget.4: failed to queue reset event
[  465.482306][ T5949] raw-gadget.0 gadget.4: failed to queue resume event
[  465.606971][T12743] /dev/rnullb0: Can't open blockdev
[  465.759226][ T5949] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  465.798519][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  465.805728][ T5949] usb 5-1: device descriptor read/8, error -32
[  465.920842][ T5949] raw-gadget.0 gadget.4: failed to queue suspend event
[  465.958824][ T5949] raw-gadget.0 gadget.4: failed to queue reset event
[  466.048510][ T5949] raw-gadget.0 gadget.4: failed to queue resume event
[  466.138307][ T5949] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  466.173353][T12753] /dev/rnullb0: Can't open blockdev
[  466.192923][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  466.201060][ T5949] usb 5-1: device descriptor read/8, error -32
[  466.283661][  T981] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[  466.311722][  T981] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71
[  466.320363][ T5949] raw-gadget.0 gadget.4: failed to queue suspend event
[  466.348117][ T5949] usb usb5-port1: unable to enumerate USB device
[  466.383517][  T981] usb 8-1: USB disconnect, device number 12
[  466.390357][T12710] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  466.657551][T12764] /dev/rnullb0: Can't open blockdev
[  466.706805][T12764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1914'.
[  466.998586][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1915'.
[  467.234467][T12775] loop6: detected capacity change from 0 to 1
[  467.254146][T12775] Dev loop6: unable to read RDB block 1
[  467.259964][T12775]  loop6: unable to read partition table
[  467.265855][T12775] loop6: partition table beyond EOD, truncated
[  467.299490][T12777] netlink: 'syz.1.1919': attribute type 39 has an invalid length.
[  467.310737][T12775] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  467.503946][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1920'.
[  467.747675][T12785] /dev/rnullb0: Can't open blockdev
[  467.798566][T12787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.818688][T12787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.402156][T12795] /dev/rnullb0: Can't open blockdev
[  468.437166][T12786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  468.566363][T12804] /dev/rnullb0: Can't open blockdev
[  468.644375][T12807] /dev/rnullb0: Can't open blockdev
[  468.655861][T12807] /dev/rnullb0: Can't open blockdev
[  468.739960][T12811] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport)
[  469.178693][ T5940] usb 6-1: new full-speed USB device number 72 using dummy_hcd
[  469.256109][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.308779][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.390565][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  469.418339][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  469.460494][  T981] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  469.488670][ T5940] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  469.497921][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.540914][ T5940] usb 6-1: config 0 descriptor??
[  469.590902][T12829] /dev/rnullb0: Can't open blockdev
[  469.659656][  T981] usb 8-1: Using ep0 maxpacket: 32
[  469.700390][  T981] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  469.742072][  T981] usb 8-1: config 0 interface 0 has no altsetting 0
[  469.758394][  T981] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  469.767489][  T981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.831372][  T981] usb 8-1: config 0 descriptor??
[  469.962307][ T5940] zydacron 0003:13EC:0006.0018: item fetching failed at offset 2/5
[  469.983454][ T5940] zydacron 0003:13EC:0006.0018: parse failed
[  470.023924][ T5940] zydacron 0003:13EC:0006.0018: probe with driver zydacron failed with error -22
[  470.123349][T12835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.134624][T12835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.536202][ T5905] usb 6-1: USB disconnect, device number 72
[  470.605701][  T981] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0
[  470.658962][  T981] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0
[  470.666520][  T981] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0
[  470.719249][  T981] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0
[  470.747476][  T981] corsair-cpro 0003:1B1C:0C10.0019: unknown main item tag 0x0
[  470.770938][  T981] corsair-cpro 0003:1B1C:0C10.0019: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.7-1/input0
[  470.810573][T12844] hugetlbfs: syz.1.1939 (12844): Using mlock ulimits for SHM_HUGETLB is obsolete
[  471.221396][  T981] corsair-cpro 0003:1B1C:0C10.0019: probe with driver corsair-cpro failed with error -110
[  471.540743][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.588149][T12855] /dev/rnullb0: Can't open blockdev
[  471.623607][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.970322][   T30] audit: type=1326 audit(2000000296.373:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5df8e9a9 code=0x7fc00000
[  472.057957][T12862] /dev/rnullb0: Can't open blockdev
[  472.072617][  T981] usb 8-1: USB disconnect, device number 13
[  472.622815][T12872] binder: 12871:12872 ioctl c0306201 2000000003c0 returned -14
[  472.803613][T12872] binder: 12871:12872 ioctl c0306201 2000000001c0 returned -14
[  472.926208][T12876] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  473.101532][T12879] /dev/rnullb0: Can't open blockdev
[  474.290953][T12891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.359567][T12891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.420474][T12891] /dev/rnullb0: Can't open blockdev
[  474.890626][T12903] /dev/rnullb0: Can't open blockdev
[  474.978370][T12908] netlink: 'syz.5.1960': attribute type 12 has an invalid length.
[  475.027287][T12908] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1960'.
[  475.083663][T12912] tc_dump_action: action bad kind
[  475.128355][T12915] tc_dump_action: action bad kind
[  476.455376][T12929] /dev/rnullb0: Can't open blockdev
[  476.625139][T12934] /dev/rnullb0: Can't open blockdev
[  476.752322][   T30] audit: type=1800 audit(2000000301.133:421): pid=12937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1971" name="/" dev="9p" ino=2 res=0 errno=0
[  476.951052][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.994603][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.161711][T12949] /dev/rnullb0: Can't open blockdev
[  477.248785][  T981] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  477.281998][T12951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.373325][T12951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.418403][  T981] usb 6-1: Using ep0 maxpacket: 32
[  477.427519][T12951] /dev/rnullb0: Can't open blockdev
[  477.440334][  T981] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  477.468685][  T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.507305][T12953] /dev/rnullb0: Can't open blockdev
[  477.514172][  T981] usb 6-1: config 0 descriptor??
[  477.761532][T12954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.792156][  T981] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  477.830698][  T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  477.848765][T12954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.871390][  T981] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  477.888329][  T981] usb 6-1: media controller created
[  478.006940][  T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  478.166672][  T981] az6027: usb out operation failed. (-71)
[  478.180473][T12960] random: crng reseeded on system resumption
[  478.194495][  T981] az6027: usb out operation failed. (-71)
[  478.218286][  T981] stb0899_attach: Driver disabled by Kconfig
[  478.232545][  T981] az6027: no front-end attached
[  478.232545][  T981] 
[  478.270578][  T981] az6027: usb out operation failed. (-71)
[  478.278588][T12960] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1979'.
[  478.298437][  T981] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  478.308037][  T981] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input31
[  478.350851][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'.
[  478.400053][  T981] dvb-usb: schedule remote query interval to 400 msecs.
[  478.414120][T12963] /dev/rnullb0: Can't open blockdev
[  478.438244][  T981] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  478.494130][  T981] usb 6-1: USB disconnect, device number 73
[  478.564755][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.618794][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.656455][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.689887][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.725782][T12970] /dev/sg0: Can't lookup blockdev
[  478.733189][T12967] /dev/rnullb0: Can't open blockdev
[  478.742611][  T981] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  478.957529][T12973] Malformed UNC in devname
[  478.957529][T12973] 
[  478.983097][T12973] CIFS: VFS: Malformed UNC in devname
[  480.796955][T13004] /dev/rnullb0: Can't open blockdev
[  481.103573][T13008] /dev/rnullb0: Can't open blockdev
[  481.373410][T13017] netlink: 'syz.1.1993': attribute type 3 has an invalid length.
[  481.399376][T13017] netlink: 'syz.1.1993': attribute type 1 has an invalid length.
[  481.417417][T13017] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1993'.
[  481.501223][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.529639][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.556059][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.579103][ T5841] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  481.588122][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.766995][ T5841] usb 8-1: config 0 has an invalid interface number: 29 but max is 0
[  481.780030][ T5841] usb 8-1: config 0 has no interface number 0
[  481.806525][ T5841] usb 8-1: config 0 interface 29 has no altsetting 0
[  481.817975][T13021] /dev/rnullb0: Can't open blockdev
[  481.829647][ T5841] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  481.858291][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.866720][ T5841] usb 8-1: Product: syz
[  481.879358][ T5841] usb 8-1: Manufacturer: syz
[  481.894211][ T5841] usb 8-1: SerialNumber: syz
[  481.909283][ T5841] usb 8-1: config 0 descriptor??
[  482.146375][ T5841] peak_usb 8-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  482.347603][ T5841] peak_usb 8-1:0.29 can0: sending command failure: -22
[  482.365167][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.398328][ T5841] peak_usb 8-1:0.29 can0: sending command failure: -22
[  482.422125][ T5841] peak_usb 8-1:0.29 can0: sending command failure: -22
[  482.429944][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.431003][T13025] /dev/rnullb0: Can't open blockdev
[  482.443510][T13028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.513577][T13028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.525717][ T5841] peak_usb 8-1:0.29: probe with driver peak_usb failed with error -22
[  482.548924][T13014] /dev/rnullb0: Can't open blockdev
[  482.619020][T13028] /dev/rnullb0: Can't open blockdev
[  482.636049][    T9] usb 8-1: USB disconnect, device number 14
[  483.038474][T11890] Bluetooth: hci4: command 0x0405 tx timeout
[  483.113821][T13049] /dev/rnullb0: Can't open blockdev
[  483.119514][T13047] /dev/rnullb0: Can't open blockdev
[  483.942396][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.962731][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.023460][T13062] /dev/rnullb0: Can't open blockdev
[  484.361993][T13067] /dev/rnullb0: Can't open blockdev
[  484.405056][T13067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.439361][T13067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.660160][T13067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.682417][T13067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.792270][    T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  484.944062][    T9] usb 8-1: device descriptor read/64, error -71
[  485.104401][T13080] trusted_key: encrypted_key: hex blob is missing
[  485.225657][    T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  485.318163][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.337667][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.378534][T13082] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  485.385840][    T9] usb 8-1: device descriptor read/64, error -71
[  485.405807][T13082] /dev/rnullb0: Can't open blockdev
[  485.508147][    T9] usb usb8-port1: attempt power cycle
[  485.881734][    T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  485.910879][    T9] usb 8-1: device descriptor read/8, error -71
[  486.170890][    T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  486.201435][    T9] usb 8-1: device descriptor read/8, error -71
[  486.297905][T13087] /dev/rnullb0: Can't open blockdev
[  486.316506][    T9] usb usb8-port1: unable to enumerate USB device
[  486.476939][T13090] /dev/rnullb0: Can't open blockdev
[  487.012695][T13098] lo speed is unknown, defaulting to 1000
[  487.358760][T13104] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  487.425677][T13106] /dev/rnullb0: Can't open blockdev
[  487.638598][T13108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.661820][    T9] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  487.690606][T13108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.727351][T13108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.751664][T13108] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.814191][T13112] /dev/rnullb0: Can't open blockdev
[  487.848498][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.881676][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.913216][    T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[  487.941204][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.961291][    T9] usb 6-1: config 0 descriptor??
[  488.462347][    T9] wacom 0003:056A:0094.001A: unknown main item tag 0x0
[  488.582015][T13118] /dev/rnullb0: Can't open blockdev
[  488.770044][    T9] wacom 0003:056A:0094.001A: unknown main item tag 0x0
[  488.777006][    T9] wacom 0003:056A:0094.001A: unknown main item tag 0x0
[  488.791405][    T9] wacom 0003:056A:0094.001A: unknown main item tag 0x0
[  488.799085][    T9] wacom 0003:056A:0094.001A: unknown main item tag 0x0
[  488.817829][    T9] wacom 0003:056A:0094.001A: unknown main item tag 0x0
[  488.841761][    T9] wacom 0003:056A:0094.001A: unknown main item tag 0x0
[  488.861391][    T9] wacom 0003:056A:0094.001A: Using device in hidraw-only mode
[  488.876227][T13121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.881502][    T9] wacom 0003:056A:0094.001A: hidraw0: USB HID vff.fd Device [HID 056a:0094] on usb-dummy_hcd.5-1/input0
[  488.921724][T13121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.948169][    T9] usb 6-1: USB disconnect, device number 74
[  489.157368][T13122] fido_id[13122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  489.603715][T13139] /dev/rnullb0: Can't open blockdev
[  490.561527][T13161] /dev/rnullb0: Can't open blockdev
[  490.630223][T13163] /dev/rnullb0: Can't open blockdev
[  490.686373][T13165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.723316][T13165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.944858][T13170] /dev/rnullb0: Can't open blockdev
[  490.977451][T13165] netlink: 'syz.4.2039': attribute type 2 has an invalid length.
[  490.996318][T13165] netlink: 'syz.4.2039': attribute type 8 has an invalid length.
[  491.004104][T13165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2039'.
[  491.157581][ T5905] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  491.362691][ T5905] usb 8-1: config 0 has an invalid interface number: 11 but max is 0
[  491.372084][T13177] 8021q: VLANs not supported on caif0
[  491.384829][ T5905] usb 8-1: config 0 has no interface number 0
[  491.405203][ T5905] usb 8-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  491.439298][ T5905] usb 8-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  491.489864][ T5905] usb 8-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[  491.517028][ T5905] usb 8-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  491.540052][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.569347][ T5905] usb 8-1: Product: syz
[  491.577286][ T5905] usb 8-1: Manufacturer: syz
[  491.602182][ T5905] usb 8-1: SerialNumber: syz
[  491.614206][T13179] syzkaller1: entered promiscuous mode
[  491.619742][T13179] syzkaller1: entered allmulticast mode
[  491.722942][ T5905] usb 8-1: config 0 descriptor??
[  491.731894][T13169] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  491.739410][T13169] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  492.052996][T13169] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  492.094768][T13169] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  492.188987][ T5905] usb 8-1: No status endpoint found
[  492.243689][T13181] /dev/rnullb0: Can't open blockdev
[  492.578982][T13183] /dev/sg0: Can't lookup blockdev
[  492.658865][T13187] input: syz1 as /devices/virtual/input/input33
[  492.991844][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  493.056978][T13192] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  493.182813][   T31] INFO: task syz.3.1310:10703 blocked for more than 143 seconds.
[  493.217479][   T31]       Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
[  493.247122][   T31]       Blocked by coredump.
[  493.263376][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  493.301604][   T31] task:syz.3.1310      state:D stack:26920 pid:10703 tgid:10703 ppid:5851   task_flags:0x40044c flags:0x00004004
[  493.377894][   T31] Call Trace:
[  493.389145][   T31]  <TASK>
[  493.398013][   T31]  __schedule+0x1737/0x4d30
[  493.410602][   T31]  ? __lock_acquire+0xab9/0xd20
[  493.425856][   T31]  ? schedule+0x165/0x360
[  493.453541][   T31]  ? __lock_acquire+0xab9/0xd20
[  493.472580][   T31]  ? __pfx___schedule+0x10/0x10
[  493.492750][   T31]  ? schedule+0x91/0x360
[  493.503373][   T31]  schedule+0x165/0x360
[  493.522793][   T31]  schedule_preempt_disabled+0x13/0x30
[  493.539938][   T31]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  493.553623][   T31]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  493.571433][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  493.590984][   T31]  ? exit_mm+0xcc/0x2c0
[  493.602745][   T31]  ? __pfx_mm_release+0x10/0x10
[  493.613608][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  493.629405][   T31]  down_read+0x98/0x2e0
[  493.638254][   T31]  exit_mm+0xcc/0x2c0
[  493.647028][   T31]  ? __pfx_exit_mm+0x10/0x10
[  493.657420][   T31]  ? rcu_is_watching+0x15/0xb0
[  493.666835][   T31]  do_exit+0x648/0x2300
[  493.676730][   T31]  ? do_raw_spin_lock+0x121/0x290
[  493.692877][   T31]  ? __pfx_do_exit+0x10/0x10
[  493.712423][   T31]  do_group_exit+0x21c/0x2d0
[  493.724760][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  493.740611][   T31]  get_signal+0x1286/0x1340
[  493.750804][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  493.763499][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  493.778206][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  493.793362][   T31]  exit_to_user_mode_loop+0x75/0x110
[  493.809284][   T31]  do_syscall_64+0x2bd/0x3b0
[  493.820779][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  493.842104][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.862252][   T31]  ? clear_bhb_loop+0x60/0xb0
[  493.875375][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.893346][   T31] RIP: 0033:0x7f9f1618e9e3
[  493.902567][   T31] RSP: 002b:00007ffebfac9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  493.925541][   T31] RAX: fffffffffffffffc RBX: 00007f9f147f76c0 RCX: 00007f9f1618e9e3
[  493.942754][   T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
[  493.960863][   T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  493.978305][   T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffebfac9190
[  493.997139][   T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  494.015602][   T31]  </TASK>
[  494.022384][   T31] 
[  494.022384][   T31] Showing all locks held in the system:
[  494.045266][   T31] 1 lock held by khungtaskd/31:
[  494.127474][   T31]  #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  494.140789][   T31] 5 locks held by kworker/u8:7/2136:
[  494.146246][   T31] 2 locks held by getty/5610:
[  494.151790][   T31]  #0: ffff888033e7e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  494.165076][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  494.175977][   T31] 1 lock held by syz.3.1310/10703:
[  494.185874][   T31]  #0: ffff88802871cd20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  494.210767][   T31] 2 locks held by syz.3.1310/10704:
[  494.225165][   T31] 3 locks held by kworker/u8:6/11622:
[  494.238644][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[  494.259208][   T31]  #1: ffff8880b8624008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  494.281225][   T31]  #2: ffff8880b8625918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30
[  494.301347][   T31] 1 lock held by syz.6.1587/11669:
[  494.313312][   T31]  #0: ffff8880786ecd20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  494.332657][   T31] 1 lock held by syz.6.1587/11670:
[  494.345284][   T31]  #0: ffff8880786ecd20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  494.375155][   T31] 1 lock held by syz.6.1587/11672:
[  494.393955][   T31] 1 lock held by syz.6.1587/11675:
[  494.409386][   T31]  #0: ffff8880786ecd20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  494.442498][   T31] 2 locks held by syz.5.2031/13136:
[  494.456003][   T31] 1 lock held by syz.1.2050/13193:
[  494.475411][   T31]  #0: ffffffff8e543200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  494.496754][   T31] 
[  494.502544][   T31] =============================================
[  494.502544][   T31] 
[  494.523975][   T31] NMI backtrace for cpu 1
[  494.523995][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  494.524018][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  494.524030][   T31] Call Trace:
[  494.524038][   T31]  <TASK>
[  494.524045][   T31]  dump_stack_lvl+0x189/0x250
[  494.524080][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  494.524108][   T31]  ? __pfx__printk+0x10/0x10
[  494.524149][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  494.524176][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  494.524203][   T31]  ? __pfx__printk+0x10/0x10
[  494.524235][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  494.524261][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  494.524289][   T31]  watchdog+0xf93/0xfe0
[  494.524316][   T31]  ? watchdog+0x1de/0xfe0
[  494.524343][   T31]  kthread+0x70e/0x8a0
[  494.524375][   T31]  ? __pfx_watchdog+0x10/0x10
[  494.524396][   T31]  ? __pfx_kthread+0x10/0x10
[  494.524445][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  494.524472][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  494.524499][   T31]  ? __pfx_kthread+0x10/0x10
[  494.524529][   T31]  ret_from_fork+0x3f9/0x770
[  494.524557][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  494.524589][   T31]  ? __switch_to_asm+0x39/0x70
[  494.524606][   T31]  ? __switch_to_asm+0x33/0x70
[  494.524622][   T31]  ? __pfx_kthread+0x10/0x10
[  494.524654][   T31]  ret_from_fork_asm+0x1a/0x30
[  494.524696][   T31]  </TASK>
[  494.524704][   T31] Sending NMI from CPU 1 to CPUs 0:
[  494.679260][    C0] NMI backtrace for cpu 0
[  494.679277][    C0] CPU: 0 UID: 0 PID: 10704 Comm: syz.3.1310 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  494.679298][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  494.679308][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x3c/0x70
[  494.679329][    C0] Code: 8b 15 08 4f 27 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 83 fa 02 75 21 <48> 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c 16 00 00 48 39
[  494.679344][    C0] RSP: 0018:ffffc9000bfd7278 EFLAGS: 00000246
[  494.679359][    C0] RAX: ffffffff8b785afb RBX: ffff88802871cb80 RCX: ffff888046581e00
[  494.679371][    C0] RDX: 0000000000000002 RSI: 000000000000000d RDI: 000000000000000a
[  494.679381][    C0] RBP: ffffc9000bfd7450 R08: ffff888046581e00 R09: 0000000000000003
[  494.679393][    C0] R10: 0000000000000003 R11: 0000000000000002 R12: 000000000000000a
[  494.679402][    C0] R13: dffffc0000000000 R14: ffff888076fa9600 R15: 000000000000000d
[  494.679414][    C0] FS:  00007f9f16fc86c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000
[  494.679429][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  494.679440][    C0] CR2: 000000110c40e7e7 CR3: 0000000076cb6000 CR4: 00000000003526f0
[  494.679455][    C0] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000
[  494.679465][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  494.679476][    C0] Call Trace:
[  494.679482][    C0]  <TASK>
[  494.679488][    C0]  mt_validate+0x3d0b/0x4380
[  494.679521][    C0]  ? __pfx_mt_validate+0x10/0x10
[  494.679561][    C0]  validate_mm+0xb6/0x4b0
[  494.679586][    C0]  ? __pfx_validate_mm+0x10/0x10
[  494.679618][    C0]  vma_link+0x366/0x450
[  494.679650][    C0]  ? __pfx_vma_link+0x10/0x10
[  494.679677][    C0]  ? anon_vma_clone+0x49b/0x4f0
[  494.679695][    C0]  ? anon_vma_name+0x87/0xf0
[  494.679713][    C0]  ? vm_area_dup+0x4f5/0x680
[  494.679735][    C0]  copy_vma+0x70c/0x940
[  494.679763][    C0]  ? __pfx_copy_vma+0x10/0x10
[  494.679786][    C0]  ? rcu_is_watching+0x15/0xb0
[  494.679811][    C0]  ? __pfx_move_page_tables+0x10/0x10
[  494.679849][    C0]  move_vma+0x81f/0x1840
[  494.679871][    C0]  ? __lock_acquire+0xab9/0xd20
[  494.679899][    C0]  ? arch_get_unmapped_area_topdown+0x251/0xbc0
[  494.679922][    C0]  ? __pfx_move_vma+0x10/0x10
[  494.679949][    C0]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  494.679977][    C0]  ? cap_mmap_addr+0xb0/0x100
[  494.679998][    C0]  ? bpf_lsm_mmap_addr+0x9/0x20
[  494.680013][    C0]  ? security_mmap_addr+0x71/0x270
[  494.680038][    C0]  mremap_to+0x6d6/0x7a0
[  494.680065][    C0]  ? __pfx_mremap_to+0x10/0x10
[  494.680091][    C0]  ? check_prep_vma+0x740/0xae0
[  494.680119][    C0]  __se_sys_mremap+0xa0b/0xef0
[  494.680154][    C0]  ? __pfx___se_sys_mremap+0x10/0x10
[  494.680190][    C0]  ? do_syscall_64+0xbe/0x3b0
[  494.680214][    C0]  ? __x64_sys_mremap+0x20/0xc0
[  494.680238][    C0]  do_syscall_64+0xfa/0x3b0
[  494.680261][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  494.680290][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.680306][    C0]  ? clear_bhb_loop+0x60/0xb0
[  494.680325][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.680340][    C0] RIP: 0033:0x7f9f1618e9a9
[  494.680353][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.680367][    C0] RSP: 002b:00007f9f16fc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  494.680384][    C0] RAX: ffffffffffffffda RBX: 00007f9f163b5fa0 RCX: 00007f9f1618e9a9
[  494.680396][    C0] RDX: 0000000000001000 RSI: 0000000000001000 RDI: 0000200000d59000
[  494.680407][    C0] RBP: 00007f9f16210d69 R08: 0000200000a91000 R09: 0000000000000000
[  494.680418][    C0] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  494.680428][    C0] R13: 0000000000000000 R14: 00007f9f163b5fa0 R15: 00007ffebfac9098
[  494.680448][    C0]  </TASK>
[  495.079482][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  495.086384][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  495.097686][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  495.107766][   T31] Call Trace:
[  495.111061][   T31]  <TASK>
[  495.114009][   T31]  dump_stack_lvl+0x99/0x250
[  495.118633][   T31]  ? __asan_memcpy+0x40/0x70
[  495.123257][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  495.128487][   T31]  ? __pfx__printk+0x10/0x10
[  495.133123][   T31]  vpanic+0x281/0x750
[  495.137132][   T31]  ? __pfx_vpanic+0x10/0x10
[  495.141659][   T31]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  495.147237][   T31]  ? preempt_schedule+0xae/0xc0
[  495.152149][   T31]  ? preempt_schedule_common+0x83/0xd0
[  495.157639][   T31]  panic+0xb9/0xc0
[  495.161384][   T31]  ? __pfx_panic+0x10/0x10
[  495.165826][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  495.171226][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  495.177403][   T31]  watchdog+0xfd2/0xfe0
[  495.181587][   T31]  ? watchdog+0x1de/0xfe0
[  495.185957][   T31]  kthread+0x70e/0x8a0
[  495.190067][   T31]  ? __pfx_watchdog+0x10/0x10
[  495.194756][   T31]  ? __pfx_kthread+0x10/0x10
[  495.199371][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  495.204584][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  495.209797][   T31]  ? __pfx_kthread+0x10/0x10
[  495.214439][   T31]  ret_from_fork+0x3f9/0x770
[  495.219052][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  495.224183][   T31]  ? __switch_to_asm+0x39/0x70
[  495.228949][   T31]  ? __switch_to_asm+0x33/0x70
[  495.233735][   T31]  ? __pfx_kthread+0x10/0x10
[  495.238361][   T31]  ret_from_fork_asm+0x1a/0x30
[  495.243147][   T31]  </TASK>
[  495.246598][   T31] Kernel Offset: disabled
[  495.250946][   T31] Rebooting in 86400 seconds..