last executing test programs:

8m25.330583386s ago: executing program 3 (id=74):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON=@special})
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48)
ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
close(r6)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x6c2, 0x268b00)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r7, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007)

8m24.659290613s ago: executing program 3 (id=77):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1, {0x3}}, './file0\x00'})
setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, 0x1403, 0x300, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40400}, 0x24000050)
ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000200)={0x40, 0x8000000000000001, 0x3, 0x8, 0xc84f, 0x7})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000680)={&(0x7f0000000240)={{@hyper, 0x9}, {@any, 0x8}, 0x400, "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"}, 0x418, 0x9})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000006c0)={0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000700)={0x3, <r4=>0x0, 0x10001})
ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000740)={r4})
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x84, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
getsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000940), &(0x7f0000000980)=0x4)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000009c0)={<r6=>0x0})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000a40)={r6, &(0x7f0000000a00)=""/48})
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000b00)=@multiplanar_fd={0x3, 0x3, 0x4, 0x800, 0x1000, {}, {0x2, 0x8, 0x0, 0xb, 0xd, 0x0, "5805aee3"}, 0x1, 0x4, {&(0x7f0000000a80)=[{0x6, 0x1, {<r7=>0xffffffffffffffff}, 0x800}, {0x7be6, 0xd, {r1}, 0x69437b30}]}, 0x6dd, 0x0, r2})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x10)
sendfile(r3, r0, &(0x7f0000000cc0)=0x3, 0x1ff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_FLUSH(r9, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r10, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x14c, 0xa, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x88, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'geneve0\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge0\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="f9b977b5da56"}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve0\x00'}, @IPSET_ATTR_COMMENT={0x13, 0x1a, 'batadv_slave_0\x00'}]}, @IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x98}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6gre0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_virt_wifi\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x10, r7, 0xcef5e000)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6)
openat$vmci(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001080)={0x15, 0x65, 0xffff, 0xa41, 0x8, '9P2000.L'}, 0x15)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001100)={0x188, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}, @NFTA_SET_EXPRESSIONS={0x160, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", ""]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_TTL={0x5, 0x2, 0x30}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}]}}}, {0x58, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xf}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8}]}}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4004000}, 0xc0f5)
socket$kcm(0x29, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000016c0)={0x2c, &(0x7f00000014c0)={0x20, 0x1a, 0x8a, {0x8a, 0x1, "ac84cf5b0b706860406050db8929269305ffb382859a3330de5f74d1a17f8f64d86fb9ba0b6f1948c8595f9ea3588d9b3b9bd3874280dc64f4d3b57ff3e677f59b72b32a62f3ae613e458a5fe08a01bc24a4cf3b6a502d06347b479fa98a6b16740c1bd0d0c25d326f9fd31022cce6baea92b50abd2bea33e496d2622d36305bd90e32ce6737da7c"}}, &(0x7f0000001580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f00000015c0)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0xc9, 0x8, 0x8, 0x8, 0x71}, @ssp_cap={0x14, 0x10, 0xa, 0x9c, 0x2, 0x100, 0x870f, 0x1, [0xf0, 0x0]}, @ssp_cap={0xc, 0x10, 0xa, 0x81, 0x0, 0x1ff, 0xf00, 0xf00}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x5, 0x51}, @ssp_cap={0x14, 0x10, 0xa, 0xb, 0x2, 0x3, 0xf000, 0xa0df, [0x7f80ff, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x5, 0x80, 0x8, 0x6}]}}, &(0x7f0000001640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x70, 0x7f, 0x2, "7659cdbe", "0309d9fb"}}, &(0x7f0000001680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0x0, 0x1, 0x7, 0xffff}}}, &(0x7f0000001bc0)={0x84, &(0x7f0000001700)={0x20, 0x13, 0xbd, "175896f589d2aaab7f08865da7a97c58c164983da3df0120934022816347ea96d5f82535ed0f1ac88cf19eba380c346dd82d9cf9416694b1f360b0951dad07ae984238130a7365cbd2dd1fcc2973a1cd20ed4dd0b9ad87f47be23c5ecc1bf343bb1a7ded5e9f396fc2d0a983ea36994d4b0b7d273d4c6d0bc2f5dace2375098dff798ff42543b5e454b418f94f0cfbdced4165ac93acd24fa3d7593db42c59329789d1bb5e944762643c78fd4a83d5b73ed3175752b75d8851ee7dcb37"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0xce}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000018c0)={0x20, 0x0, 0x8, {0x160, 0x10, [0x0]}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001980)={0x40, 0xb, 0x2, "bdad"}, &(0x7f00000019c0)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000001a00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000001a40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001a80)={0x40, 0x19, 0x2, "127a"}, &(0x7f0000001ac0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001b00)={0x40, 0x1c, 0x1, 0xcd}, &(0x7f0000001b40)={0x40, 0x1e, 0x1, 0x52}, &(0x7f0000001b80)={0x40, 0x21, 0x1, 0x81}})

8m23.743950708s ago: executing program 3 (id=82):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x11, 0x10010, r0, 0xe78ca000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x90)
socket$kcm(0x29, 0x7, 0x0)
dup(r1)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_dev$vcsu(&(0x7f0000000000), 0x7ff, 0x4000)

8m23.071376676s ago: executing program 3 (id=86):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000380)=""/141, 0x8d)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
ptrace$cont(0x7, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x93771000)

8m22.61116271s ago: executing program 3 (id=90):
modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
modify_ldt$read(0x0, &(0x7f0000000c80)=""/4096, 0x1000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0)

8m22.289522744s ago: executing program 3 (id=91):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800) (async)
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x93771000)

8m21.902131616s ago: executing program 32 (id=91):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800) (async)
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x93771000)

3m32.905694813s ago: executing program 1 (id=2044):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x430182, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="9febcd4cdbf16e5d033f35c8c4db542375ba308c9384cd362330cf71d344bf8d7610a2fc6caaab76498c6954eedc8c52dd4bd8027c939e7568e84766bea447780b4201f87d6ca20858c75b021c65f56b7b3bfb594ea29bc262dbf131a89ebcdab96da55407aecdcc40271d8b7c5f1bb011a6c5e83a8647918990280e402d54daba04a1657196ad4da0a4eca4"])
syz_usb_connect(0x0, 0x2d, &(0x7f0000001180)=ANY=[@ANYBLOB="1201410123f58bd25fe6af5fa18a5c8b71c620402020659d1c0102030109021b00010080100009049c020118029d03e235a23bfff1cb60efacbe17dfa7701eb3f3e0a7cf8ab07f1ce55bbeaad561abf92db8e32c5b2c3a8db2b1b69111b4c10d94643c1b0c71e53e4ae96dd283ef1107da1152149b103416b5e450d67e310e1f0f726189804598af4dc15f5162def683db6e59caba17e0d2f20dfd1082a5b222cdaf0561ceb33300000000000000000000000000000000ecc275561c14c4a56ba10d89cf40b67f5a8066308c4357b3630d65da073053ea9f48044d81fe08c735785efd4251ed"], 0x0)
setxattr$incfs_metadata(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, 0x0, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f0000001100), &(0x7f0000001140)=0x4)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006)
r7 = openat$rdma_cm(0xffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x7fffffff}}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)

3m29.791837464s ago: executing program 1 (id=2059):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
r1 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
syz_open_procfs(r1, &(0x7f0000000180)='attr/fscreate\x00')
r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = dup3(r0, r3, 0x0)
ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6})
creat(&(0x7f0000001380)='./file0\x00', 0x4)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = epoll_create1(0x0)
epoll_pwait(r5, &(0x7f0000000000)=[{}], 0x1, 0x240000, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x3)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={0x0, 0x3a, &(0x7f00000000c0)=""/58})
ptrace(0x10, r7)
ptrace$setsig(0x4203, r7, 0x66db, &(0x7f0000001180)={0x80000a, 0x9, 0x2})
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb, 0x0, 0x8e, 0x0, 0x0, 0x2000000}})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)

3m29.183977862s ago: executing program 1 (id=2067):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0)
write(r4, &(0x7f0000000100)="97", 0x1)
close(r3)
socket$pppl2tp(0x18, 0x1, 0x1)
close(r3)
recvmmsg$unix(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
r5 = gettid()
capset(&(0x7f0000000280)={0x19980330, r5}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) (async)
write(r4, &(0x7f0000000100)="97", 0x1) (async)
close(r3) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
close(r3) (async)
recvmmsg$unix(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) (async)
gettid() (async)
capset(&(0x7f0000000280)={0x19980330, r5}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async)

3m28.391115529s ago: executing program 1 (id=2072):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) (async)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$9p_unix(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0) (async)
mount$9p_unix(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x11)
sendfile(r9, r8, 0x0, 0x80000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648b000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)

3m27.323294473s ago: executing program 1 (id=2081):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = open(&(0x7f0000000240)='./cgroup\x00', 0x2000, 0x1)
ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000280)=[0x8, 0x5, 0x8000, 0x25fa, 0x4, 0x3, 0x40, 0x4])
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'multiq3\x00', [0x4f27, 0x5, 0x2, 0xa, 0x5, 0xcc5, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x103, 0x0, 0x1a449, 0x7, 0x40000003, 0x8, 0xcaa7, 0x0, 0x20001e5c, 0x7, 0xe6b, 0x3c, 0x8, 0x2, 0xfffffffe, 0xfffffff8]})
r2 = fsopen(&(0x7f00000002c0)='omfs\x00', 0x0)
r3 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x15)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wg2\x00'})
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000300)={0xce, 0xd})
lsetxattr$security_ima(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)=@md5={0x1, "cab86732f075055f4e8b776df99b404c"}, 0x11, 0x0)
fsopen(&(0x7f0000000340)='jfs\x00', 0x1)
write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x7}, 0x2)

3m26.231711131s ago: executing program 1 (id=2086):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x73052, r0, 0x93771000)

3m25.80107486s ago: executing program 33 (id=2086):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x73052, r0, 0x93771000)

2m35.867646729s ago: executing program 2 (id=2342):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x141080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x4000, 0xfffe, 0x8004, 0xa, 0x20, 0x0, 0x29}, {@in=@dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x32}, @in=@broadcast, {0x326, 0x0, 0x0, 0x0, 0x1000, 0xfffffffffffffff9}, {0x40, 0xfffffffffffffffd}, {0x1, 0x800000, 0xfffffff8}, 0x70bd29, 0x3503, 0xa, 0x4, 0xf7}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sec_ctx={0xc, 0x8, {0xfdf5, 0x8, 0x0, 0x7, 0x0, "a626e12a094d37e3ca56584fe231307057eb43050970478c9da64c10eb0bcfc210c2ad6d25f0dc4ff82b872b3c74f38d46fcce7e9615684cede2f699"}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x48014)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'bond0\x00'})
r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
recvmsg$unix(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/72, 0x48}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/151, 0x97}, {&(0x7f0000000140)=""/61, 0x3d}], 0x6}, 0x2001)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f028, 0x105})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2c40)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x2000042, 0x0)

2m32.758026186s ago: executing program 2 (id=2357):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff002)

2m32.676616825s ago: executing program 2 (id=2358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}}, 0x20006001)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000)
ustat(0xffffffffbfc8be9c, &(0x7f0000000000))
ioctl$BLKRRPART(r2, 0x125f, 0x0)

2m32.006270174s ago: executing program 2 (id=2362):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x2, 0x36, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @remote, @private}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @local, @empty}}}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xb, 0xe}}}}, 0x11) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0)

2m31.371918169s ago: executing program 2 (id=2366):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)

2m31.337401733s ago: executing program 2 (id=2367):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3, 0x0, 0x4}}, 0x20)
r4 = openat$uhid(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$UHID_INPUT(r4, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f00001a1000/0x1000)=nil, 0x1000, 0x2000003, 0x24013, r1, 0xc0372000)
connect$netrom(r1, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @bcast, @bcast, @null]}, 0x48)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1000, 0x301000)
ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000180))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f000052e000/0x4000)=nil, 0x4000, 0x14)
ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000218000/0x1000)=nil, 0x1000})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m16.042936685s ago: executing program 34 (id=2367):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3, 0x0, 0x4}}, 0x20)
r4 = openat$uhid(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$UHID_INPUT(r4, &(0x7f0000001440)={0x8, {"fd634b4a6a2f105afb14814a0a38c47508ad86be7696302da5e6c82366825b02b7db7b945008f3042ffbf29ba0eabd8c5c0bfac768ed0ce6e23cb1d166148336c95612b74d80b963b8de708fdfde4ef4c267a18dac94cd6cda5010edd82044829cc58d3d312649ab4a2d91573f847aeda3c4c7adf1e1d8e2063612ea66555c19578c0ba83f21cd6c06c3fe2c5c288ee86c5398cefbc7022e5423c72e34706dc4a3406150289451f9bac3e6fa0c784c2ecd1af4d413dfabca0a16ceecb346bd4cef7c4027c978d2e29e44cfb1abaa5bba2a2d9c0753ae37f348009b89c0d3bdeae3c878e4416db1eced318928cd5547f6de0af6ff7315fbfbd7f6660fcd602b885e1d2d15519ff8728dfd61bda40ce3736c9f34951e96c76fb57fa185231a0cc3c7dfc0381cc2d24b5f1f8a5333726c781c57488f911e7b392cd85dad43d2138e00a3cdff691f5506d5a33b85599cfc92d655a3b9e38c1a75f261aa96b4a4b9c6bf4131abfbdce63f0ff2e53437f1361cab87caf4822b18ce79bb18f277d9a1ade6bbf627266da0ab4f23ea3cbd2dcdaa3c092db5b08f4fb655bdc38a804e7c246b9b6f48015a431f9a1995e82510e0aeebc15e4c275f1b39d0f8ba978d0104e40384623adc1911af9ec7d41d33e3c187c30cd0408bdb22dbd204576a962f47ae76800f036fee473f054065851c07cd49cc0e7fbdcd9714fbf9ceb239a037e09d9d9af0b6955608d6fa43743dd0fdd9facc9694e71d3fe657b84e4116e1457dfda29d9b15811bc2ecae9a5c00cebb45879083a219fa3432fa3596c90661b2cadfcda8781ade4e1d594669a3f6161a9973cc9b2ed2ab01fb6e37b4ba9874fd8bf9f521a00ee9f3e6158a73abb4cf781ac27346ffa8422c0a8b26d8164cb793f3edf8271b1bfc753048c96b57b9dd3465fdb8e0835f14335483e701f55150416496014ec07b3669f30895c64ca369cf423f8c0d291cddcfc61e6fab076d096a927c7378fe8f73710a6566614ffa1c08eea8a8ca32541bb5fb18e5b0b23a7390fc1814cfb50f625848289fd030b4922418b4020f4f0acb711c9c63cd6f99f589cc708a2e5fa8511e90cebfdfc9beb2ec66aeb7926f0396412012edc92f28838e4ac9760dbe5d60ef21859b87ffedc03dffa72a3fa5efc3b80e0aec49231dd38ca6284f0868e486ab20202cbebe975ca8a9a9eac4a8ec30d94af450ac78715641a2f790fab18072a474886b99715ea45770f89929b6bea4b1629b952bf9cecedc3be1a1347e1c6b147769abb12b4abe240b104540b6ad3978ae5c2027199a8bf1c365a086e0ec7e693a2a2623864eed4dd43aeba408a40750dfe56a3f5d004723950280bdb825f8c30ed61154e03f5e3f863e033e6d80bb8b3f84207f54c7d3bdb5d5639ef159c1bb614a3bd0ec6f68403b38224285659eb20e9ee6625bb1030f498450715750650e91b7b5f8b594aad637b832e87b87076d5761c67a7756bfb7d169321acc4c1ca7f1bedac1e7630b45150ed5474d493982cbf389f3f2961c08eb7628394314dd0bf8144a52cf3f25a0d67237cec6357b9aa71aefdef85fcf3c464744da7b3e4238b04438c5ea486f303c6f8e24e2cebf58fb2cd7adaf53a321551395353f38da669d1035f22bc88a1363cc65444d78509d0fadff75b78dfd8803d9b8be5b94fb56d2f5c5c41d30b525649001cf588bee7ad871dee0bbfb4b7847c95b8cb2f297ed66695915f32c7961e509488066fb51024f35af28a097d2522d7e661f596af6ebd309f0783832fb39ba6eb5e6fd058c163e494c30213db1ccd73c87e2bdbbcf91baa3653206c581464ed691798d351f2c2d0063bd66befe3d53ab313178eef812d2bec31674935fae5f7933656ee70118bfd66f8cfc5af4085e2add8a56afa282ab6ac4baa885bb35bcee8577440e86faa75ce2baecc5c8f11160a1977718530c6866fab89dab4c35eafed9b3dd117f634b9d0e68ed6dd6b9f9b37d4c8242bee1dd96b4d79b6f90a3c980533a2403f0e8718a5a580ffe54303bb2d4cd28d42371bd3b6cbe0c1336a631ed9e61ab8b6e464b23a13e357372581cf48ab34fca306203440a4f3f6052bc70e0f3124a57a3fa88fb9452e4c109b443863dc79cd210c96cfbe6db725ebbde6272bf1ccc93e3a548f4300912c423bf9f5bf596d37c6fc740656cd27f0e8a8507c3e19086c40caf7725e3c2334de81748cf934a9e86f92e033e5543fcc4fe857c57ea9eb133793896f33d18de48511484c31725be30a36363faa75bfc649b2f41806c62f0f562b02091cd1f6cab9505b90d5fddc7a91c17b15d54974e969bffa944481c1e7e85ab6e2fe1720e5d631d9e1d18a5fffab87022255ff5ccf9b3ecc7cefaca96bcc58ad5678aa76db7777c19f1b9964f010ee9fdbcdd2a97349f2aa373819a02a46ecb8cad1a641edc507cee75c8199fedc31f8b84e98b86a5a4aec7aa196d810f232b8edaf2b9a2e281a7d00615324a24be410bbeedc01a6fd56c81a8ca8b3fed701f766c709d686fe7bfb81b311bb1c8e9b59a0eb94d39c8e9874fa12b4d21c1f647381e4628cdca87d24f624f93821eb17218d03bd6efacafcd209150fa45f0884964b266f5dacf162b04e2764409a81f4d41866b764ad9810c833aaa152a4b47e2acaf2bc899ad31726bc863291ebf871c5486c4d3e5edf1e4db4b86ed12e7d54a17141bba564dd4eeabda75c10a17905769324655066e0cc296d282878d0113784791b25b4fc0021116a559517a383e71f59921322c29ed346a9f68fea4d5fbb645df76c9ef6026b18b440af8b255b0d7328665b7106a113a7ac728a62a1e510fbc99edd6f95d5e9d6144f69caf40f100c243b28d2933854a2723413a353b0d2fcc6517fdbf6f9f111f5575f35f635e2d5ae22a7db19e1619ad567cdca6200f35d93b4cefc1ac20057cd9547a185123f98b426e85882087f7b343759aeb26193a6dad231f98f961f2545e58edcd55baf5444a8dd95495ae799ec4ff43d7ec4d674172907e3b6e98216878d07d929a1287481982abd6233338364d59eaed2a6fff423749f721cd043ab36f9525730b16d8886d58177f54d25045957927f4844f274ba74a249d57829086aef740b830647773efedaec0ebf0439182074947dce85f03c2b98dddc22ea741c97c30a7c1edad149a77c5608b60d0f5d461287738011f0613f974147388b057926d28a0e38f73341c8eb9d0ac49266c5c0f8d5875cac6674cea1f45a0af9f3ce1b9903b44240beca990ae325e9a4284a1f07897ce2eeadb75474859011a048e756f1bca6a3f9abac2c7d294655ae7b09647d68a3b7db2d47dfc11680ac857fec976bfbea96724f85b6d3e8e6d65e29b1fea97da3d753061b4e8f6493c546694cfdfb00bc1a2e875fbc0c94624f6e8c393c6f23e88e24ba68e4150765df6829b85e1db089f9c87cf7d0e38a3d09b25cb0469db16fc547a8bef6232e7967fd733bcd982cf14d191adb71d95fe1f6406ca31c4228cff1310269eb7865bf15e5b0cf5ac2609cef93de5c8969e7bcfa609f2c8b68f187d0b05c22f55ce12347a0baa6a956b40088f6a514d68ffe220361f82da1afa29b45bd704e777de7ad3bd5fcbc5ad8ac596e7bf60897f174932d5193ea5df5e6536fa6aeb62727f0f581025878e99a3cd48a56071402c58b36a3c94cbb71b9a3a1b79fc34a799c130f203bc2ca732f6167b3c3ff5860b2544ed55f07a3f03abfaccd9338a0f582cad2e7e8437101349fb396bd0138c319a945f5501bd10ab85d11af67b24c2ea8176662a72c2170ede4462826d8d1414ca70fd55a9c5101fcc0121d90a35f39ca63205c3ef8423f13731d0f198c518c9b7c8960f1d9b32ffb16e1d7c13043d3558039741cc7e9aae56bd9f875b29a94a8eaa8f2994a965df995078cd3b752ebfb86c80095a7888ed2a9b2f5594721a47d422e585bfa124918af0902fdb119c71065765b1bdcd7a1bd32b8d2bcec6f29537c96a174fe2d30ef467aef6ea8219175dd977d916e3bbd5871f52e40f046227d20a6f2805f9e8b711dbcf68ac746ab441cb3c1b942739e0bc7dca8eae18c2606a6d79196f193c348a6ce141a48cdfa650c6f38c91d234cf3ef01fd8c5dd1abe8a8b487102262889ab172a2346455bd58a9caf64e4772c2b75ef10b5b13eeb957ee7d14eda0809ee981ac11457eb8a257cd4385554723bd0de766946d166a3322b1397e75e0f6ebbcc74a701534dae0f12f41cfda3ed7ae30b721005f20ec4077c7df97f045f458cedde9fea2dea6bf9c0eca011c5198a41e838ed009db88367638807a6d55ee2640326efaae184d54c2e6ba2bcb87c7aa6619ec221dc922f317026bb6b7bee929da7d33f9d516d7e78f12927c524448ef918c361ebdbb219b8922c7f81cbdf994aed042b57a63e5a313a07847ad36f8e54f7196b39b9f9dc6a9662025b9e6f42330970d8a2939590a0da3d2bd9e534c7c7f92153a0a22d0bf7ef829b0dcb36b2923575eb89c3284f9acde39b6df891bfcc56f4bd8b958671b388f5d844309c92c66690680ce958d7acc571ea8d7b823b00051356010addf6af6a6a2929cf9376e7cbaa509dd0e1becfe05a911c1f6e22b8b705df7714df7e48a371491ebab498ffb426698c29b4f8457de3a86c411c6d23d04f610d7842fe3569be4249d7d53856430a11f73591552999684bf72af84f1996d418886ffa4d8c14c47ac057ea7c2b157e1ad6261ac88835076887ea169ce85a465a9bc7fbb70c228052bb6f8924284a91919d600972d1241236d9f954ccc4e51d5abfc9c1852f541f8c441bf70119448748464b566be3c1fb13bf29188a155f969ba768852ac76a44547bbbb843bc2fa7173e23bb4468d0675bb2f0860c39b18859fa8e265022a43c0ba067e048d0a7265c69ffff3ab27fc5106d6c697c4e44301f1725acb9421a3e8a59a7b8b6c66ce655fa8de98446765ef7bbfb0363b4d8ea82167aea9f495b28cb944247f7cdcfe12925bc70b408e453d62e95e7e00eeec5db1aca1549772d4e3183754a0a063e9164b8f902687b09a21396bc13a517cdac50e35ed9c3813c3050aa0698b41c8e3dd56bd51d095f8131c11eadd1ce879e26840ce5ea2144052f866ce72fa28ac7f930888532f478f8c39118d5f9cb0c6137912f56e371d65a2cb80b37dcb8d0ead5c73b439e0db39af6dc44c1969e62b706a925d97b88db0a7c678fadbbb531e99e34ed14e7fe1cf0910a78c04ab25b7f9093f3f13c74d6944fe827918ad0fa3ddde00038e8578a2929b7df10f6343fea135f1663dc69d1158120aedcae9d85bf1cd2b2acb54c937f46176f8d6e80afe7c087f82898e074c9116bc2f1ad96992ac374463ec9856d2cf796c32502134ec18d6cbeab2d233dfdbd9706ca28ae469f57d1c572a2c20ee817dcad05b04a0f1a94936e96efb2d2e533cce32a32fb71c11d4920c41da9a3dbce4d6f1829506b216db4ea4a5465add1ca507cd246d183ad07b3adc0de309f28ad9cc889555373d92806a9cb84675d363b0d69ed0e500e16732fc7c0ac0c0a3fa624e20487f64ea4025e3635902b227814b7342f3dc2b4e1d2dccf3fa203bee3720451a54aa30f78433afbe8ccf3219c434d7902e472fcec112ef4fd640e99e9cb29e27b5e4eb617989ca9c1bd18abaab56ed3d6120f78c7325aab6ccec02bcc28404ac766c4fd1c5ac43b38d77cb7d8d4c2d328d12aaf57ffffaab46c00b1db25c45c48fde7482184be026c8eec29a93897fda46dd3bb751df66cbde6e0a2020e2a036f4777", 0x1000}}, 0x1006)
mmap(&(0x7f00001a1000/0x1000)=nil, 0x1000, 0x2000003, 0x24013, r1, 0xc0372000)
connect$netrom(r1, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @bcast, @bcast, @null]}, 0x48)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1000, 0x301000)
ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000180))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f000052e000/0x4000)=nil, 0x4000, 0x14)
ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000218000/0x1000)=nil, 0x1000})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m4.089602405s ago: executing program 0 (id=2465):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x40000000015, 0x800, 0x0)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ppoll(&(0x7f0000002080)=[{r4, 0x11}, {r3, 0x2}], 0x2, 0x0, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="080000001e00210800000000000000000a000600"], 0x14}}, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/29, 0x1d}, 0xffff7fff}], 0x1, 0x20102, 0x0)
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={<r8=>0x0, 0x400, 0x2}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x8, 0x9, 0x7, 0x7, 0xed8f, 0x1, 0x38, 0xa, r8}, 0x20)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, 0x0, 0x0)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
setreuid(0x0, r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
mmap$binder(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0xfd)

2m3.583977383s ago: executing program 0 (id=2468):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 6)

2m3.022237603s ago: executing program 0 (id=2472):
socket$unix(0x1, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140))
socket(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$pppoe(0x18, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000f06010200000000000000000200000805000100"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r4, 0xf648b000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m1.914630417s ago: executing program 0 (id=2480):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0x0, 0x40, 0x0})
r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000400)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0xa6d47960d1d42ccf, 0x41, &(0x7f0000000640)=""/65}]})
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af04, &(0x7f0000000200))
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000280)=0x1)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in6={0xa, 0x4e22, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}], 0x38)
sendto$inet6(r3, &(0x7f0000000380)="ea", 0x1, 0x80, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @local}, 0xbba5}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x23, &(0x7f0000000340), 0x8)
add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc", 0x1, r1)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x0, 'queue1\x00', 0xb})
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ptrace$getregset(0x4204, r5, 0x200, &(0x7f00000001c0)={0x0})
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)

2m1.615811493s ago: executing program 0 (id=2481):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 7)

2m1.194608034s ago: executing program 0 (id=2486):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2000000)

2m0.579495627s ago: executing program 35 (id=2486):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2000000)

1m40.004785296s ago: executing program 5 (id=2552):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63e71f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000006480)={0x28, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x28}], 0x1}, 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000380)={0x9, 0x3, {0xfffffffffffffffe, @usage=0x4, 0x0, 0x3, 0x1, 0x8, 0x9, 0x6, 0x8a, @usage=0x9, 0xff, 0x2, [0x5, 0xc, 0xffffffffffffffff, 0x9, 0x7f, 0xf]}, {0x100000, @usage=0x9, 0x0, 0xb2, 0x36, 0x6, 0xff, 0x2cd, 0xa, @struct={0x1, 0x8}, 0x2, 0x61, [0x9, 0x3, 0x5ed4, 0x75b, 0xd, 0x1]}, {0x8, @usage=0x6, <r2=>0x0, 0x80, 0x80000000, 0xe014, 0x9, 0xcf, 0x11, @usage=0xb, 0x3, 0x2, [0x806, 0xdd2, 0x9, 0x7fffffffffffffff, 0x1]}, {0x80000000, 0x400, 0x2}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000780)={r2, "067b0f61687cda117a75b1b809d6f8c5"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

1m39.735795783s ago: executing program 5 (id=2553):
r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
close(0x3)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x10000, 0xff3, 0x3, 0x8, 0xfaa, 0x3, 0x3, 0x3, 0xfffffffeffffffff, 0x8, 0x2, 0x8, 0x8303, 0x5, 0x0, 0x2c7], 0xd000, 0x400})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x124}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x20050800)
r7 = syz_open_dev$vcsn(&(0x7f0000001f80), 0x1, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0xff, 0x5, 0xe8})
read$char_usb(r7, 0x0, 0x60ff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x18, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0xc000)
membarrier(0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x296c12, 0x0)

1m37.739902289s ago: executing program 5 (id=2559):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x20, 0x17, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x20, 0xc, 0x3, "0b2298"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x84, 0x1, "ac"}, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m34.104298342s ago: executing program 5 (id=2570):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r2=>0x0})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0xd, r3, 0x0, 0x0)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x1}, 0x3}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x2, 0xff}, 0x1}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote})
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

1m33.750452302s ago: executing program 5 (id=2573):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000002c0))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)

1m33.308588153s ago: executing program 5 (id=2575):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0xfea8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r2, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) (async)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
close(r3)
r4 = timerfd_create(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x3fe, 0x1, 0x2, "42d350db3d2745138cca09b91fc24947a9ad646fecc5beb8b6c0af17894ed4c3", 0x30314247})

1m32.725885491s ago: executing program 36 (id=2575):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0xfea8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r2, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) (async)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
close(r3)
r4 = timerfd_create(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x3fe, 0x1, 0x2, "42d350db3d2745138cca09b91fc24947a9ad646fecc5beb8b6c0af17894ed4c3", 0x30314247})

5.438281268s ago: executing program 7 (id=2980):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc8280, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'})

5.231179699s ago: executing program 7 (id=2982):
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
lgetxattr(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000008c0)=@random={'user.', 'keyring\x00'}, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x1fff, 0x0, 0x1}, 0x7c, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)

5.031888039s ago: executing program 8 (id=2984):
creat(&(0x7f0000000080)='./file0\x00', 0xac)
mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

4.913781377s ago: executing program 8 (id=2985):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22052, r0, 0x2000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x20000241, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a03000000000000000000010000090900010073797a30000000000800024000000010"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d34001280200001800a00010071756f7461000000100002800c0001400000000300000000000000800a00010071756f746100000008000340000001"], 0xc0}}, 0x20050800)

4.826846462s ago: executing program 8 (id=2986):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8f, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x4000000, 0x0, 0x2020, 0x5, 0x48e2626042fa775a, 0x3, 0x2}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
getpeername$qrtr(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc)
r3 = openat$cgroup_procs(r1, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0)
syz_usb_connect(0x0, 0x4f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000075b21f408680630bf3ca0102030109023d0001000000000904540003ccc8ac00090504041806d8030409044299d83e091515090505022000836282090512002000000a0c0705e6ea"], 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5})
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
r8 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x10000000)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r5, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1})
syz_clone(0x802000, &(0x7f00000002c0)="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", 0xfe, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="337ca0d9e07ed8f41d18a8cbf0b7837804fac80e605be93ec9ec6d10a9b5bee384880e942da7a6c4f3ca51f6eac12cdd6b76bd2151abf315d5b857f97edfd8dde7282dc0f4783a6e055815e39b5f5cfa9f8600dadf605a30058fd26f93022f7f34efd034663de6dae44427232dca7e613ffbd94c39bfec4a3297c0f9c28d6f8d8c1cd3cc87b171bd951f")
write$cgroup_freezer_state(r3, &(0x7f0000000040)='THAWED\x00', 0x7)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x0, {{@in=@multicast2, @in6=@private0, 0x1fe, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0xfffffffffffffffd, 0x2, 0x40}, {0x0, 0x0, 0x0, 0x400}}}, 0xb8}}, 0x24044800)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
r13 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r13, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
accept(r13, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x4000)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd2d, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x300, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2}}}, 0xb8}}, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)

3.80053712s ago: executing program 6 (id=2991):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f01f})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000f4c000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r1)
sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040)
prctl$PR_SVE_GET_VL(0x33, 0x828)

3.621765942s ago: executing program 6 (id=2992):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad4300000000010000000f"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0)
r2 = syz_clone(0x808700, &(0x7f0000000000)="63a4bb5352df1089e7f56aa9cf7e465dab142597c341f2ecb32f4ca62f221ba2a0ecf90c6fd1fd0905375e51f7fa86a182246dd5771e996227b66fc942a25a43264ff0b1ed04fe2fc5659de7f862a2b4", 0x50, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="7747c73c7998c7f077613324e8744830a92cad4951fdac14c79d0024b0494dbb72ae997654527d006bce0cd2dae1617a8aa97216f8768938ec68d1bdbf391a8656570bdbc44663d14b53c62ee33fe6fbe7d2beb083d9df73ba4f88d023800aadc78a64aabd35df15bbcd2c64078616e1585b45d3011990fea58730edadaceb416990a1bb103a0fad89d581122947ed28e8ba703a74522715199554e205adc3f7160c70f8ac437470a550e8b758a19310fccf124b1ed9e4a9a77b72d0b502b0b062ae5a59cf4efc5f79e4b1c884466ea09fe616e6262c49c983172485746451fe2748c6eeeede11755e6589583026fd85ddd56ed3a8bf51")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x2, &(0x7f0000000200)=""/132)

3.175761341s ago: executing program 6 (id=2993):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x2, [0x6, 0x3]}, &(0x7f0000000040)=0xc) (async)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000100)=0x2c)
fadvise64(r0, 0x92, 0x5, 0x2)
r1 = socket(0x1e, 0x1, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}]]}, 0x24}}, 0x0) (async)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000080)=0xc7d, 0x4) (async)
syz_usb_connect(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x8c, 0xf7, 0xb9, 0x40, 0x1608, 0x21b, 0x4536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0xf8, 0xa0, 0xc1, [{{0x9, 0x4, 0x7f, 0x0, 0x2, 0xa5, 0xcb, 0xec, 0x9, [], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0xd, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x8, 0x7}}]}}]}}]}}, 0x0) (async)
connect$can_bcm(r1, &(0x7f00000000c0)={0x1e}, 0x10) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000)

2.873378823s ago: executing program 6 (id=2994):
syz_usb_connect(0x2, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x310, 0x1b, 0xf9, 0x17, 0x10, 0xd46, 0x2011, 0xe88a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x4, 0xd0, 0x3, [{{0x9, 0x4, 0x6a, 0xa, 0x2, 0x4d, 0x78, 0x27, 0x62, [], [{{0x9, 0x5, 0xd, 0x3, 0x200, 0xa, 0x9, 0x2}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xd, 0x6, 0x6}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0xc000002, 0xfffffffffffffe16, 0x0, 0x42010003, 0x80000001})
ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff})
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x1)
fanotify_mark(0xffffffffffffffff, 0xc0, 0x8001001, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendfile(r6, r0, 0x0, 0x7ffff002)

2.698996876s ago: executing program 8 (id=2995):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendfile(r0, r0, 0x0, 0x7ffff000)

2.075475584s ago: executing program 7 (id=2997):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf6486000)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.820068174s ago: executing program 4 (id=2998):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r1 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x31, 0x2, 0x0, "bc3e098e0000000100591da86b97000009002b00030400"})
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000200)=';R', 0x2, 0x20004810, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa)
r2 = socket(0x1e, 0x805, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10)
connect$tipc(r2, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10)
close(r2)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x1200)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0)

1.615976831s ago: executing program 4 (id=2999):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000400)="240000001a005f0400f9f407000904018000200000008800000000000800010000000000", 0x24)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.593818675s ago: executing program 7 (id=3000):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
fadvise64(r0, 0xffffffffffffff7f, 0x4, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async, rerun: 32)
r6 = openat$nullb(0xffffff9c, &(0x7f00000023c0), 0x0, 0x0) (rerun: 32)
ioctl$BLKRESETZONE(r6, 0x40101283, 0x0) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80104000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r7, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffb37, 0x6a}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4048050}, 0x220008c0)
read(r3, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x7) (async)
setreuid(0x0, r2) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (rerun: 32)

1.493565149s ago: executing program 8 (id=3001):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2) (async, rerun: 32)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) (async, rerun: 32)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000002240)={<r2=>0xffffffffffffffff}, 0x80)
r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) (async)
pipe2$watch_queue(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x6) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xffffffffffffffff) (async)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="bec5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000)

1.342529363s ago: executing program 7 (id=3002):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x6000, 0x3, &(0x7f000030b000/0x6000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040))
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040044)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x419}}}, 0x7)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000005c0)="c03d3633be3d7b1f", 0x8}], 0x1, &(0x7f0000000440)=ANY=[], 0x138}}], 0x1, 0x200048cc)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)

1.33533389s ago: executing program 4 (id=3003):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000000c0)=0x1)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

1.024883032s ago: executing program 4 (id=3004):
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00')
readv(r4, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1)
symlinkat(&(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00')
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ecryptfs\x00', 0x63ca0, 0x0)

971.970311ms ago: executing program 8 (id=3005):
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400000034240f0100000000000000000006241a008000090581030800fd00000904010000020d9e9fcb3ee0350f5123b000000904010102020d00"], 0x0) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0)

843.977658ms ago: executing program 4 (id=3006):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000080)=0x281000, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x22052, r0, 0xa4717000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

636.389425ms ago: executing program 6 (id=3007):
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x9, 0x14200) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x15)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x41)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x8}) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) (async)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) (async)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x67) (async)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r7 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x13, r7, 0x0) (async)
ftruncate(r7, 0x0) (async)
sendfile(r6, r6, 0x0, 0x7ffff000)

443.68871ms ago: executing program 7 (id=3008):
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
socket$inet(0x2, 0xa, 0x7)
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
fchmodat(r2, &(0x7f0000000580)='./cgroup\x00', 0x80)
fchdir(r2)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mkdir(&(0x7f00000005c0)='./cgroup\x00', 0x48)
write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {0xffff, 0x3, 0x5, 0x400}, 0x5, [0x4, 0xfffffffc, 0x9, 0x4, 0x6, 0x144, 0x4, 0x7, 0xd3d, 0x0, 0x3, 0x6, 0x0, 0x4, 0x1, 0x0, 0x6, 0x1, 0xffffffff, 0x8, 0x12ea, 0x9, 0x6, 0x8, 0x7, 0x8, 0xfffffff0, 0x4, 0x9, 0x390, 0x1, 0xd, 0x0, 0x800, 0x1, 0xfffffffe, 0x2, 0x1, 0x40008, 0xff, 0x2, 0x0, 0x9, 0xffffffff, 0x80, 0x2, 0x2, 0xa188, 0x4, 0x1, 0xa7, 0xff, 0xefc, 0x1, 0x1, 0x6, 0x2, 0x9, 0x9, 0xfffffffd, 0x90b, 0xd99, 0xffffe201, 0x3], [0x9, 0xda01, 0x6000000, 0x2, 0x5, 0x3, 0x80000000, 0x2, 0x1c91257e, 0x200, 0x6, 0x3ff, 0x7fff, 0x1ff8, 0x9, 0x4, 0x400000, 0x0, 0x3, 0x5, 0x0, 0x5, 0xffff0001, 0xd6c8, 0x7fff, 0x7, 0x60, 0x2f, 0x76, 0x3, 0x1, 0x4c000, 0x6, 0x2, 0x5, 0x7fffffff, 0xcb, 0x38f, 0x8, 0x0, 0x4, 0x7fffffff, 0x5, 0x101, 0xe, 0x8, 0xb441, 0x1, 0x1, 0x1, 0x3, 0x74, 0x8000, 0xbd66, 0x8, 0x4, 0x0, 0x2, 0xbf8f, 0xd7f, 0x80000000, 0x4, 0x8, 0x6725], [0x3ba4, 0xc, 0x7, 0x9, 0x1, 0x3, 0x80000000, 0x7, 0x401, 0x9, 0x1ff, 0x5, 0x2, 0x4, 0xfffffffa, 0x10, 0x6, 0x7fff, 0x1, 0x3, 0x5, 0x7, 0x4, 0x7, 0x80000001, 0x1, 0xc1f, 0xa, 0x4ed6, 0x6, 0x462c000, 0x6de, 0xa6, 0x0, 0xfffffffc, 0x7, 0x6, 0x74, 0x37f, 0x6, 0x1, 0x6, 0x0, 0x1, 0x1, 0x73, 0x2, 0x6, 0x9, 0xb7a, 0x93, 0x0, 0x1, 0x501, 0x6, 0x0, 0x6, 0x99, 0x4, 0x8, 0x3, 0x4, 0x0, 0x40], [0x2, 0x9, 0x4, 0x7, 0x6, 0x7, 0x5, 0x3, 0x7fffffff, 0x0, 0x34e, 0x80000000, 0x4, 0x5, 0x27ac, 0x32c6, 0x5, 0x6, 0x14, 0xa9bd, 0x9, 0x8a, 0x7fff, 0x6, 0x1, 0x0, 0x80000001, 0x1fe0, 0x5, 0x4, 0x0, 0x7ff, 0x9, 0x79fd, 0xb183, 0x7, 0x1, 0x9, 0x6, 0x80000001, 0x0, 0x8001, 0x8, 0xc31, 0x10, 0x5, 0x6, 0x3ff, 0x0, 0x5, 0x8, 0x9, 0x100, 0x80, 0xbaf, 0x8, 0xfffffffc, 0x80, 0x7fff, 0x2, 0x0, 0x5, 0x7, 0xfffffff9]}, 0x45c)
mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x120805d, 0x0)

22.313636ms ago: executing program 6 (id=3009):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) (async)

0s ago: executing program 4 (id=3010):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000380)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x2, 0x3a, '\\', 0x3a, '@', 0x3a, './file0', 0x3a, [0x4f]}, 0x2a)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg$can_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/217, 0xd9}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000c40)=""/95, 0x5f}, {&(0x7f0000000cc0)=""/208, 0xd0}, {&(0x7f00000004c0)=""/124, 0x7c}, {&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000380)=""/75, 0x4b}], 0x8}, 0x40000000)
r3 = syz_open_procfs(0x0, &(0x7f0000000840)='net/dev_snmp6\x00')
lseek(r3, 0x1, 0x0)
getdents(r3, 0x0, 0x51)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)="f8abaa3a0351d2759cc700000000", 0xe}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000004)
syz_usb_control_io$printer(r4, 0x0, 0x0)
getcwd(&(0x7f0000000480)=""/9, 0x9)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000600)={0x0, 0x16, 0x6, "20fc94453a41"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000680)={0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="200902"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000b40)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000b00)=0x4)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000700)=@loop={'/dev/loop', 0x0}, r7, &(0x7f0000000880)={0x400, 0x8, 0x3, 0x3ff, 0x5, 0x2, 0xae, 0x9c6, 0x10000})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/116, 0x74, 0x1, &(0x7f0000000980)=""/178, 0xb2}, &(0x7f0000000a80)=0x40)

kernel console output (not intermixed with test programs):


[  483.640662][T14737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.640674][T14737] R13: 0000000000000000 R14: 00007f339d9b5fa0 R15: 00007ffd0b32ce98
[  483.640706][T14737]  </TASK>
[  483.662250][T14704] bridge_slave_1: entered promiscuous mode
[  483.799679][ T5918] usb 6-1: Using ep0 maxpacket: 16
[  483.809808][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[  483.905231][ T5918] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  483.918524][ T5918] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  483.981551][T14739] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  483.990146][T14741] ubi0: attaching mtd0
[  483.995750][ T5918] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  484.007384][T14741] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65)
[  484.026426][ T5918] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  484.051903][T14746] Mount JFS Failure: -22
[  484.056838][ T5918] usb 6-1: config 1 interface 0 has no altsetting 0
[  484.071091][ T5918] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  484.085665][T14746] Mount JFS Failure: -22
[  484.112206][T14746] Mount JFS Failure: -22
[  484.116609][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.135281][T14746] Mount JFS Failure: -22
[  484.145861][T14704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  484.154341][T14746] Mount JFS Failure: -22
[  484.165171][ T5918] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[  484.173514][T14746] Mount JFS Failure: -22
[  484.182255][T14746] Mount JFS Failure: -22
[  484.189487][T14746] Mount JFS Failure: -22
[  484.195579][T14746] Mount JFS Failure: -22
[  484.201788][T14746] Mount JFS Failure: -22
[  484.205186][T14704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  484.207718][T14746] Mount JFS Failure: -22
[  484.221337][T14746] Mount JFS Failure: -22
[  484.227995][T14746] Mount JFS Failure: -22
[  484.234481][T14746] Mount JFS Failure: -22
[  484.240328][T14746] Mount JFS Failure: -22
[  484.245922][T14746] Mount JFS Failure: -22
[  484.252027][T14746] Mount JFS Failure: -22
[  484.257430][T14746] Mount JFS Failure: -22
[  484.262994][T14746] Mount JFS Failure: -22
[  484.268453][T14746] Mount JFS Failure: -22
[  484.273988][T14746] Mount JFS Failure: -22
[  484.279724][T14746] Mount JFS Failure: -22
[  484.285217][T14746] Mount JFS Failure: -22
[  484.291868][T14746] Mount JFS Failure: -22
[  484.297258][T14746] Mount JFS Failure: -22
[  484.303016][T14746] Mount JFS Failure: -22
[  484.308385][T14746] Mount JFS Failure: -22
[  484.317322][T14746] Mount JFS Failure: -22
[  484.323005][T14746] Mount JFS Failure: -22
[  484.328504][T14746] Mount JFS Failure: -22
[  484.337661][T14746] Mount JFS Failure: -22
[  484.343187][T14746] Mount JFS Failure: -22
[  484.348779][T14746] Mount JFS Failure: -22
[  484.356282][T14746] Mount JFS Failure: -22
[  484.360957][ T5171] Bluetooth: hci0: command tx timeout
[  484.394025][T14746] Mount JFS Failure: -22
[  484.399323][T14746] Mount JFS Failure: -22
[  484.404042][ T5918] scsi host1: usb-storage 6-1:1.0
[  484.417128][T14746] Mount JFS Failure: -22
[  484.422675][T14746] Mount JFS Failure: -22
[  484.428012][T14746] Mount JFS Failure: -22
[  484.433761][T14746] Mount JFS Failure: -22
[  484.434198][T14704] team0: Port device team_slave_0 added
[  484.439157][T14746] Mount JFS Failure: -22
[  484.449116][T14746] Mount JFS Failure: -22
[  484.454339][T14746] Mount JFS Failure: -22
[  484.465342][T14746] Mount JFS Failure: -22
[  484.472127][T14746] Mount JFS Failure: -22
[  484.477853][T14746] Mount JFS Failure: -22
[  484.484164][T14746] Mount JFS Failure: -22
[  484.494036][T14746] Mount JFS Failure: -22
[  484.495494][T14704] team0: Port device team_slave_1 added
[  484.503905][T14746] Mount JFS Failure: -22
[  484.505551][T14746] Mount JFS Failure: -22
[  484.531416][T14746] Mount JFS Failure: -22
[  484.547081][T14746] Mount JFS Failure: -22
[  484.557149][T14746] Mount JFS Failure: -22
[  484.567315][T14746] Mount JFS Failure: -22
[  484.609803][T14746] Mount JFS Failure: -22
[  484.615089][T14746] Mount JFS Failure: -22
[  484.622791][T14746] Mount JFS Failure: -22
[  484.628087][T14746] Mount JFS Failure: -22
[  484.631666][T14730] dvmrp0: entered allmulticast mode
[  484.636991][T14746] Mount JFS Failure: -22
[  484.665491][ T5917] usb 6-1: USB disconnect, device number 18
[  484.677300][T14704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.694709][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.722034][T14746] Mount JFS Failure: -22
[  484.728391][T14746] Mount JFS Failure: -22
[  484.737473][T14746] Mount JFS Failure: -22
[  484.742994][T14746] Mount JFS Failure: -22
[  484.771151][T14704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.776232][T14746] Mount JFS Failure: -22
[  484.789289][T14746] Mount JFS Failure: -22
[  484.798564][T14704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.809384][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.840469][ T5918] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  484.856639][T14704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.979612][ T5918] usb 5-1: device descriptor read/64, error -71
[  484.998416][T14704] hsr_slave_0: entered promiscuous mode
[  485.013597][T14704] hsr_slave_1: entered promiscuous mode
[  485.020381][T14704] debugfs: 'hsr0' already exists in 'hsr'
[  485.026144][T14704] Cannot create hsr debugfs directory
[  485.220199][  T986] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  485.229645][ T5918] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  485.359845][ T5918] usb 5-1: device descriptor read/64, error -71
[  485.384990][  T986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.422278][T14704] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  485.434045][  T986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.459998][  T986] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  485.477585][T14704] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  485.488003][  T986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.490391][ T5918] usb usb5-port1: attempt power cycle
[  485.538121][  T986] usb 1-1: config 0 descriptor??
[  485.543951][T14704] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  485.577851][T14704] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  485.809379][T14704] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.863432][T14704] 8021q: adding VLAN 0 to HW filter on device team0
[  485.889692][ T5918] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  485.923647][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.930916][ T8313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.950641][ T5918] usb 5-1: device descriptor read/8, error -71
[  485.956380][  T986] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0
[  485.983776][  T986] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  485.997448][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.004717][ T8313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  486.157684][  T986] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x4D
[  486.189838][ T5918] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  486.269954][ T5918] usb 5-1: device descriptor read/8, error -71
[  486.358772][T14785] FAULT_INJECTION: forcing a failure.
[  486.358772][T14785] name failslab, interval 1, probability 0, space 0, times 0
[  486.381843][ T5918] usb usb5-port1: unable to enumerate USB device
[  486.398591][T14785] CPU: 0 UID: 0 PID: 14785 Comm: syz.5.2440 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  486.398623][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  486.398636][T14785] Call Trace:
[  486.398645][T14785]  <TASK>
[  486.398653][T14785]  dump_stack_lvl+0x189/0x250
[  486.398695][T14785]  ? __pfx____ratelimit+0x10/0x10
[  486.398726][T14785]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.398756][T14785]  ? __pfx__printk+0x10/0x10
[  486.398793][T14785]  ? __pfx___might_resched+0x10/0x10
[  486.398818][T14785]  ? fs_reclaim_acquire+0x7d/0x100
[  486.398850][T14785]  should_fail_ex+0x414/0x560
[  486.398883][T14785]  should_failslab+0xa8/0x100
[  486.398910][T14785]  __kmalloc_noprof+0xcb/0x4f0
[  486.398932][T14785]  ? kfree+0x4d/0x440
[  486.398965][T14785]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  486.398992][T14785]  tomoyo_realpath_from_path+0xe3/0x5d0
[  486.399014][T14785]  ? tomoyo_domain+0xd9/0x130
[  486.399040][T14785]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  486.399069][T14785]  tomoyo_path_number_perm+0x1e8/0x5a0
[  486.399100][T14785]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  486.399126][T14785]  ? __lock_acquire+0xab9/0xd20
[  486.399195][T14785]  ? __pfx_current_check_access_path+0x10/0x10
[  486.399230][T14785]  ? lookup_one_qstr_excl+0x1d8/0x360
[  486.399258][T14785]  tomoyo_path_mkdir+0xa8/0xe0
[  486.399281][T14785]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  486.399307][T14785]  ? __pfx_filename_create+0x10/0x10
[  486.399340][T14785]  security_path_mkdir+0x171/0x380
[  486.399364][T14785]  do_mkdirat+0x1bd/0x590
[  486.399393][T14785]  ? __pfx_do_mkdirat+0x10/0x10
[  486.399424][T14785]  ? getname_flags+0x1e5/0x540
[  486.399448][T14785]  __x64_sys_mkdirat+0x87/0xa0
[  486.399476][T14785]  do_syscall_64+0xfa/0x3b0
[  486.399510][T14785]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.399539][T14785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.399559][T14785]  ? clear_bhb_loop+0x60/0xb0
[  486.399582][T14785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.399602][T14785] RIP: 0033:0x7fd43e18e9a9
[  486.399620][T14785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  486.399636][T14785] RSP: 002b:00007fd43f00c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  486.399658][T14785] RAX: ffffffffffffffda RBX: 00007fd43e3b5fa0 RCX: 00007fd43e18e9a9
[  486.399674][T14785] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  486.399688][T14785] RBP: 00007fd43f00c090 R08: 0000000000000000 R09: 0000000000000000
[  486.399712][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.399724][T14785] R13: 0000000000000000 R14: 00007fd43e3b5fa0 R15: 00007ffdf0cbf488
[  486.399756][T14785]  </TASK>
[  486.737108][ T5171] Bluetooth: hci0: command tx timeout
[  486.744045][T14785] ERROR: Out of memory at tomoyo_realpath_from_path.
[  486.914067][T14704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  487.025274][T14759] cp2112 0003:10C4:EA90.0014: Error starting transaction: -38
[  487.110851][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2441'.
[  487.144524][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2441'.
[  487.167936][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2441'.
[  487.184022][T14793] /dev/rnullb0: Can't open blockdev
[  487.210325][  T986] cp2112 0003:10C4:EA90.0014: error reading lock byte: -71
[  487.242151][  T986] usb 1-1: USB disconnect, device number 41
[  487.537158][T14800] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  487.570741][T14800] bond0: (slave lo): Error: Device type is different from other slaves
[  487.678279][T14704] veth0_vlan: entered promiscuous mode
[  487.697256][T14704] veth1_vlan: entered promiscuous mode
[  487.755046][T14704] veth0_macvtap: entered promiscuous mode
[  487.776506][T14704] veth1_macvtap: entered promiscuous mode
[  487.806129][T14704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  487.829815][  T986] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  487.836537][T14704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  487.866674][ T8313] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.880282][ T5918] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  487.886900][ T8313] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.907848][ T8313] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.936593][ T8313] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.010504][  T986] usb 6-1: Using ep0 maxpacket: 8
[  488.042226][  T986] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  488.050563][ T5918] usb 5-1: Using ep0 maxpacket: 8
[  488.058501][ T5918] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  488.068332][ T5918] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  488.075728][  T986] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  488.090188][ T5918] usb 5-1: config 0 has no interface number 0
[  488.106563][ T5918] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  488.113777][  T986] usb 6-1: config 0 has no interface number 0
[  488.129133][ T5918] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  488.139655][  T986] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  488.164086][ T8313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.169630][ T5918] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  488.181176][  T986] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  488.194747][ T8313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.209785][   T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  488.211728][ T5918] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  488.237107][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  488.238768][  T986] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  488.262770][  T986] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4
[  488.264952][ T5918] usb 5-1: Product: syz
[  488.272159][  T986] usb 6-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0
[  488.272184][  T986] usb 6-1: Product: syz
[  488.272200][  T986] usb 6-1: Manufacturer: syz
[  488.285686][  T986] usb 6-1: config 0 descriptor??
[  488.302447][T14800] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  488.316185][ T8313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.328957][ T8313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.363873][ T5918] usb 5-1: config 0 descriptor??
[  488.371290][T14803] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  488.379801][   T24] usb 1-1: Using ep0 maxpacket: 16
[  488.393435][   T24] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  488.404470][   T24] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.415854][   T24] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.436014][   T24] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  488.473980][   T24] usb 1-1: config 7 interface 0 has no altsetting 0
[  488.487185][   T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  488.509683][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.570790][T14808] /dev/rnullb0: Can't open blockdev
[  488.759797][ T5171] Bluetooth: hci0: command tx timeout
[  488.934675][  T986] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input44
[  488.999210][ T5918] usb 5-1: USB disconnect, device number 69
[  489.070029][   T24] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0015/input/input46
[  489.134573][T14800] NILFS (rnullb0): couldn't find nilfs on the device
[  489.143868][T14818] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  489.147863][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.218928][T14818] bond0: (slave lo): Error: Device type is different from other slaves
[  489.241862][T14822] futex_wake_op: syz.6.2449 tries to shift op by -1; fix this program
[  489.253621][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.337935][T14822] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  489.367345][T14822] UDF-fs: Scanning with blocksize 4096 failed
[  489.400291][   T10] usb 6-1: USB disconnect, device number 19
[  489.400336][    C1] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  489.478540][   T24] kye 0003:0458:5010.0015: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0
[  489.759863][T14830] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd6": -EINTR
[  489.999647][   T10] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  490.208284][   T10] usb 6-1: config 255 has an invalid interface number: 75 but max is 0
[  490.217973][   T10] usb 6-1: config 255 has no interface number 0
[  490.232540][   T10] usb 6-1: config 255 interface 75 altsetting 123 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  490.254120][   T10] usb 6-1: config 255 interface 75 has no altsetting 0
[  490.270397][   T10] usb 6-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice= 3.9d
[  490.284234][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.300129][   T10] usb 6-1: Product: syz
[  490.308911][   T10] usb 6-1: Manufacturer: syz
[  490.318082][   T10] usb 6-1: SerialNumber: syz
[  490.336009][T14829] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  490.779047][   T10] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state.
[  490.805680][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  490.833474][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  490.840145][ T5171] Bluetooth: hci0: command tx timeout
[  490.864822][   T10] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0)
[  490.884230][   T10] usb 6-1: media controller created
[  490.906663][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  490.942830][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  490.965460][   T10] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0'
[  490.997211][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input47
[  491.033258][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  491.047161][   T10] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected.
[  491.087820][   T10] usb 6-1: USB disconnect, device number 20
[  491.217815][   T10] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected.
[  491.634604][T14850] hpfs: Bad magic ... probably not HPFS
[  491.651512][  T986] usb 1-1: USB disconnect, device number 42
[  491.748602][T14854] FAULT_INJECTION: forcing a failure.
[  491.748602][T14854] name failslab, interval 1, probability 0, space 0, times 0
[  491.824372][T14854] CPU: 1 UID: 0 PID: 14854 Comm: syz.4.2456 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  491.824404][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  491.824417][T14854] Call Trace:
[  491.824425][T14854]  <TASK>
[  491.824434][T14854]  dump_stack_lvl+0x189/0x250
[  491.824467][T14854]  ? __pfx____ratelimit+0x10/0x10
[  491.824497][T14854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  491.824526][T14854]  ? __pfx__printk+0x10/0x10
[  491.824558][T14854]  ? __pfx___might_resched+0x10/0x10
[  491.824584][T14854]  ? fs_reclaim_acquire+0x7d/0x100
[  491.824615][T14854]  should_fail_ex+0x414/0x560
[  491.824646][T14854]  should_failslab+0xa8/0x100
[  491.824674][T14854]  __kmalloc_noprof+0xcb/0x4f0
[  491.824696][T14854]  ? tomoyo_encode+0x28b/0x550
[  491.824720][T14854]  tomoyo_encode+0x28b/0x550
[  491.824746][T14854]  tomoyo_realpath_from_path+0x58d/0x5d0
[  491.824779][T14854]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  491.824806][T14854]  tomoyo_path_number_perm+0x1e8/0x5a0
[  491.824837][T14854]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  491.824863][T14854]  ? __lock_acquire+0xab9/0xd20
[  491.824931][T14854]  ? __pfx_current_check_access_path+0x10/0x10
[  491.824974][T14854]  ? lookup_one_qstr_excl+0x1d8/0x360
[  491.825002][T14854]  tomoyo_path_mkdir+0xa8/0xe0
[  491.825023][T14854]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  491.825049][T14854]  ? __pfx_filename_create+0x10/0x10
[  491.825081][T14854]  security_path_mkdir+0x171/0x380
[  491.825104][T14854]  do_mkdirat+0x1bd/0x590
[  491.825133][T14854]  ? __pfx_do_mkdirat+0x10/0x10
[  491.825163][T14854]  ? getname_flags+0x1e5/0x540
[  491.825186][T14854]  __x64_sys_mkdirat+0x87/0xa0
[  491.825214][T14854]  do_syscall_64+0xfa/0x3b0
[  491.825242][T14854]  ? lockdep_hardirqs_on+0x9c/0x150
[  491.825270][T14854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.825299][T14854]  ? clear_bhb_loop+0x60/0xb0
[  491.825325][T14854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.825344][T14854] RIP: 0033:0x7fde4518e9a9
[  491.825362][T14854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  491.825379][T14854] RSP: 002b:00007fde4604a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  491.825405][T14854] RAX: ffffffffffffffda RBX: 00007fde453b5fa0 RCX: 00007fde4518e9a9
[  491.825420][T14854] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  491.825433][T14854] RBP: 00007fde4604a090 R08: 0000000000000000 R09: 0000000000000000
[  491.825445][T14854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  491.825458][T14854] R13: 0000000000000000 R14: 00007fde453b5fa0 R15: 00007ffcdfc771a8
[  491.825491][T14854]  </TASK>
[  491.825585][T14854] ERROR: Out of memory at tomoyo_realpath_from_path.
[  491.895122][T14859] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2458'.
[  492.044868][    C0] vkms_vblank_simulate: vblank timer overrun
[  492.256747][T14863] /dev/rnullb0: Can't open blockdev
[  492.267889][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.304490][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.480203][  T983] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  492.531768][T14868] /dev/rnullb0: Can't open blockdev
[  492.629775][  T983] usb 6-1: device descriptor read/64, error -71
[  492.656914][T14870] /dev/rnullb0: Can't open blockdev
[  492.875041][T14876] netlink: 'syz.0.2465': attribute type 10 has an invalid length.
[  492.896258][T14876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2465'.
[  492.905426][  T983] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  492.990725][T14876] team0: Port device geneve0 added
[  493.049589][  T983] usb 6-1: device descriptor read/64, error -71
[  493.169979][  T983] usb usb6-port1: attempt power cycle
[  493.386450][T14886] FAULT_INJECTION: forcing a failure.
[  493.386450][T14886] name failslab, interval 1, probability 0, space 0, times 0
[  493.421588][T14884] fuse: Unknown parameter 'df'
[  493.460258][T14886] CPU: 0 UID: 0 PID: 14886 Comm: syz.0.2468 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  493.460289][T14886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  493.460303][T14886] Call Trace:
[  493.460311][T14886]  <TASK>
[  493.460320][T14886]  dump_stack_lvl+0x189/0x250
[  493.460355][T14886]  ? __pfx____ratelimit+0x10/0x10
[  493.460385][T14886]  ? __pfx_dump_stack_lvl+0x10/0x10
[  493.460414][T14886]  ? __pfx__printk+0x10/0x10
[  493.460449][T14886]  ? __pfx___might_resched+0x10/0x10
[  493.460480][T14886]  should_fail_ex+0x414/0x560
[  493.460509][T14886]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  493.460534][T14886]  should_failslab+0xa8/0x100
[  493.460559][T14886]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  493.460582][T14886]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  493.460604][T14886]  ? shmem_alloc_inode+0x28/0x40
[  493.460633][T14886]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  493.460657][T14886]  shmem_alloc_inode+0x28/0x40
[  493.460681][T14886]  alloc_inode+0x6a/0x1b0
[  493.460712][T14886]  new_inode+0x22/0x170
[  493.460746][T14886]  shmem_get_inode+0x346/0xe90
[  493.460783][T14886]  shmem_mknod+0x18c/0x3e0
[  493.460823][T14886]  shmem_mkdir+0x33/0x70
[  493.460852][T14886]  vfs_mkdir+0x303/0x510
[  493.460885][T14886]  do_mkdirat+0x247/0x590
[  493.460918][T14886]  ? __pfx_do_mkdirat+0x10/0x10
[  493.460948][T14886]  ? getname_flags+0x1e5/0x540
[  493.460972][T14886]  __x64_sys_mkdirat+0x87/0xa0
[  493.460999][T14886]  do_syscall_64+0xfa/0x3b0
[  493.461028][T14886]  ? lockdep_hardirqs_on+0x9c/0x150
[  493.461057][T14886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.461077][T14886]  ? clear_bhb_loop+0x60/0xb0
[  493.461102][T14886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.461121][T14886] RIP: 0033:0x7f339d78e9a9
[  493.461139][T14886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  493.461157][T14886] RSP: 002b:00007f339e682038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  493.461179][T14886] RAX: ffffffffffffffda RBX: 00007f339d9b5fa0 RCX: 00007f339d78e9a9
[  493.461194][T14886] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  493.461208][T14886] RBP: 00007f339e682090 R08: 0000000000000000 R09: 0000000000000000
[  493.461221][T14886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.461233][T14886] R13: 0000000000000000 R14: 00007f339d9b5fa0 R15: 00007ffd0b32ce98
[  493.461265][T14886]  </TASK>
[  493.710091][    C0] vkms_vblank_simulate: vblank timer overrun
[  493.732764][T14889] openvswitch: netlink: Unknown key attributes 2
[  493.806085][  T983] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  493.842859][  T983] usb 6-1: device descriptor read/8, error -71
[  494.041972][T14903] ./cgroup: Can't lookup blockdev
[  494.089703][  T983] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  494.123646][  T983] usb 6-1: device descriptor read/8, error -71
[  494.260102][  T983] usb usb6-port1: unable to enumerate USB device
[  494.656478][T14912] tipc: Started in network mode
[  494.669850][T14912] tipc: Node identity , cluster identity 4711
[  494.700720][T14912] tipc: Failed to obtain node identity
[  494.713991][T14912] tipc: Enabling of bearer <eth:caif0> rejected, failed to enable media
[  495.203506][T14925] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[  495.466302][T14932] AppArmor: change_hat: Invalid input ''
[  495.605354][T14937] /dev/rnullb0: Can't open blockdev
[  495.617316][T14936] /dev/rnullb0: Can't open blockdev
[  495.640795][T14937] /dev/rnullb0: Can't open blockdev
[  495.930778][T14939] netlink: 'syz.6.2487': attribute type 4 has an invalid length.
[  496.007919][   T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.224113][   T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.409379][T14947] gadgetfs: Unknown parameter 'usrquota'
[  496.438821][   T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.668025][   T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.180520][   T62] bridge_slave_1: left allmulticast mode
[  497.186247][   T62] bridge_slave_1: left promiscuous mode
[  497.239944][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.278152][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  497.290799][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  497.301728][   T62] bridge_slave_0: left allmulticast mode
[  497.307415][   T62] bridge_slave_0: left promiscuous mode
[  497.313469][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  497.322839][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.332427][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  497.343009][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  497.600654][ T5918] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  497.790722][ T5918] usb 5-1: Using ep0 maxpacket: 8
[  497.807989][ T5918] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  497.828348][ T5918] usb 5-1: config 0 has no interface number 0
[  497.836193][T14974] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  497.861218][ T5918] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  497.870343][T14974] UDF-fs: Scanning with blocksize 4096 failed
[  497.884014][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.898017][ T5918] usb 5-1: Product: syz
[  497.909822][ T5918] usb 5-1: Manufacturer: syz
[  497.914483][ T5918] usb 5-1: SerialNumber: syz
[  497.944800][ T5918] usb 5-1: config 0 descriptor??
[  498.142772][   T62] team0: Port device geneve0 removed
[  498.275219][T14968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.352700][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2497'.
[  498.503285][T14991] XFS (rnullb0): Invalid superblock magic number
[  498.870844][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  498.917803][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  498.952351][   T62] bond0 (unregistering): Released all slaves
[  499.408272][ T5171] Bluetooth: hci1: command tx timeout
[  499.899756][   T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  500.089706][   T24] usb 6-1: Using ep0 maxpacket: 8
[  500.120266][   T24] usb 6-1: config 1 interface 0 altsetting 14 bulk endpoint 0x1 has invalid maxpacket 1024
[  500.171470][   T24] usb 6-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 511
[  500.249750][   T24] usb 6-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 8
[  500.331842][   T24] usb 6-1: config 1 interface 0 has no altsetting 0
[  500.338707][T14965] chnl_net:caif_netlink_parms(): no params data found
[  500.379154][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  500.405327][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.450009][   T24] usb 6-1: Product: 䰙鷐恻럝؀腚텩䏈㩫謇敲쌝⾿楾เ蛲ಐ͌皰밆賡뀷쥬館搉ᚧ꤃薦㬉譵ሼ欞퓳㚭끌軫럥ವ裪ꋳ〭硼㥡㴼៬쑂쮯蓛樂䷲쟦⎠窮猸鮧羫걦뱢경鰲푄䁃纄䅓竃﯂卖軄拣쌦䀳훈ᇍ脟얣傠⊦ᆒ譖䖩ネͨᙙ䥜ꈤ줵ꡐ쩄ີ彬䮫裗䨇胝箠㯪츣苫髀룬
[  500.600190][   T24] usb 6-1: Manufacturer: ࠁ
[  500.619719][   T24] usb 6-1: SerialNumber: syz
[  500.651185][T15005] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  500.674666][T15005] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  500.837587][ T5918] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[  500.845023][ T5918] usb 5-1: No valid video chain found.
[  500.870141][ T5918] usb 5-1: USB disconnect, device number 70
[  501.113539][   T24] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 14 proto 3 vid 0x0525 pid 0xA4A8
[  501.196409][   T24] usb 6-1: USB disconnect, device number 25
[  501.242677][   T24] usblp0: removed
[  501.264909][T15039] /dev/rnullb0: Can't open blockdev
[  501.274820][T14965] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.294902][T14965] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.326533][T14965] bridge_slave_0: entered allmulticast mode
[  501.354825][T14965] bridge_slave_0: entered promiscuous mode
[  501.479709][ T5171] Bluetooth: hci1: command tx timeout
[  501.572807][T14965] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.594338][T14965] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.620723][   T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  501.626855][T14965] bridge_slave_1: entered allmulticast mode
[  501.643574][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  501.650569][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  501.672025][T14965] bridge_slave_1: entered promiscuous mode
[  501.757310][   T62] hsr_slave_0: left promiscuous mode
[  501.781797][   T62] hsr_slave_1: left promiscuous mode
[  501.791458][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  501.802446][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.802473][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  501.832834][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  501.833457][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.878660][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  501.889368][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.896912][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  501.951325][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  501.974334][   T62] veth1_macvtap: left promiscuous mode
[  501.980925][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  501.994543][   T62] veth0_macvtap: left promiscuous mode
[  502.000663][   T62] veth1_vlan: left promiscuous mode
[  502.009427][   T62] veth0_vlan: left promiscuous mode
[  502.025242][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  502.034664][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  502.051847][   T24] usb 6-1: SerialNumber: syz
[  502.082405][   T24] usb 6-1: bad CDC descriptors
[  502.765622][T15048] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  502.776665][T15048] /dev/rnullb0: Can't open blockdev
[  503.565031][ T5171] Bluetooth: hci1: command tx timeout
[  503.963849][   T62] team0 (unregistering): Port device team_slave_1 removed
[  504.097566][   T62] team0 (unregistering): Port device team_slave_0 removed
[  504.117066][   T10] usb 6-1: USB disconnect, device number 26
[  504.896055][T14965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.955816][T14965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.155596][T14965] team0: Port device team_slave_0 added
[  505.178755][T14965] team0: Port device team_slave_1 added
[  505.492102][T14965] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.508217][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.599707][T14965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.640008][ T5171] Bluetooth: hci1: command tx timeout
[  505.658607][T14965] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.680623][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.707722][T14965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.976900][T14965] hsr_slave_0: entered promiscuous mode
[  505.995525][T15074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2516'.
[  506.019016][T14965] hsr_slave_1: entered promiscuous mode
[  506.289934][   T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  506.471586][   T24] usb 5-1: Using ep0 maxpacket: 16
[  506.500257][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  506.533920][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  506.588101][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  506.620589][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.628641][   T24] usb 5-1: Product: syz
[  506.665663][   T24] usb 5-1: Manufacturer: syz
[  506.681805][   T24] usb 5-1: SerialNumber: syz
[  507.065452][T14965] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  507.140427][T14965] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  507.159909][   T24] usb 5-1: 0:2 : does not exist
[  507.176880][   T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  507.267995][   T24] usb 5-1: USB disconnect, device number 71
[  507.294149][T14965] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  507.334611][T14965] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  507.384974][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  507.663149][T14965] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.719299][T14965] 8021q: adding VLAN 0 to HW filter on device team0
[  507.781160][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.788402][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.848190][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.855370][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.116284][T15130] /dev/rnullb0: Can't open blockdev
[  508.143062][T15130] /dev/rnullb0: Can't open blockdev
[  508.310551][   T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  508.432200][T15141] /dev/rnullb0: Can't open blockdev
[  508.499896][   T24] usb 6-1: Using ep0 maxpacket: 32
[  508.538999][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  508.569713][   T24] usb 6-1: config 0 interface 0 has no altsetting 1
[  508.627718][   T24] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  508.643607][  T983] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  508.659601][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  508.697789][   T24] usb 6-1: SerialNumber: syz
[  508.729440][   T24] usb 6-1: config 0 descriptor??
[  508.753936][   T24] usb-storage 6-1:0.0: USB Mass Storage device detected
[  508.821485][   T24] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  508.829544][  T983] usb 7-1: Using ep0 maxpacket: 8
[  508.831626][  T983] usb 7-1: config index 0 descriptor too short (expected 19730, got 18)
[  508.872588][  T983] usb 7-1: config 0 has too many interfaces: 54, using maximum allowed: 32
[  508.941883][  T983] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 54
[  508.957495][T14965] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.988541][  T983] usb 7-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d
[  509.018397][  T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.288321][   T10] usb 6-1: USB disconnect, device number 27
[  509.329551][  T983] usb 7-1: Product: syz
[  509.333779][  T983] usb 7-1: Manufacturer: syz
[  509.338394][  T983] usb 7-1: SerialNumber: syz
[  509.366038][  T983] usb 7-1: config 0 descriptor??
[  509.394071][  T983] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  509.728757][  T983] gspca_sn9c2028: read1 error -71
[  509.739763][  T986] usb 5-1: new full-speed USB device number 72 using dummy_hcd
[  509.756191][  T983] gspca_sn9c2028: read1 error -71
[  509.786758][  T983] gspca_sn9c2028: read1 error -71
[  509.820495][  T983] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71
[  509.856142][  T983] usb 7-1: USB disconnect, device number 2
[  509.913238][  T986] usb 5-1: device descriptor read/64, error -71
[  510.095891][T14965] veth0_vlan: entered promiscuous mode
[  510.139717][T14965] veth1_vlan: entered promiscuous mode
[  510.200585][  T986] usb 5-1: new full-speed USB device number 73 using dummy_hcd
[  510.237078][T14965] veth0_macvtap: entered promiscuous mode
[  510.287550][T14965] veth1_macvtap: entered promiscuous mode
[  510.377509][T14965] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.391336][  T986] usb 5-1: device descriptor read/64, error -71
[  510.463218][T14965] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.510379][  T986] usb usb5-port1: attempt power cycle
[  510.524249][ T3026] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.568415][ T3026] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.625558][ T3026] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.653047][ T3026] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.779798][  T983] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  510.858441][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.879669][  T986] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  510.882111][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.960919][  T983] usb 6-1: Using ep0 maxpacket: 32
[  510.968196][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88804cc34000: rx timeout, send abort
[  510.989257][  T986] usb 5-1: device descriptor read/8, error -71
[  511.003614][  T983] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  511.045988][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.063032][  T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.073828][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.097416][  T983] usb 6-1: Product: syz
[  511.112462][  T983] usb 6-1: Manufacturer: syz
[  511.134230][  T983] usb 6-1: SerialNumber: syz
[  511.157167][  T983] usb 6-1: config 0 descriptor??
[  511.263917][  T986] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  511.336622][  T986] usb 5-1: device descriptor read/8, error -71
[  511.478190][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88804cc34000: abort rx timeout. Force session deactivation
[  511.509679][  T986] usb usb5-port1: unable to enumerate USB device
[  511.569000][  T983] airspy 6-1:0.0: Board ID: 00
[  511.590023][  T983] airspy 6-1:0.0: Firmware version: 
[  511.626302][T15196] /dev/rnullb0: Can't open blockdev
[  511.675501][T15198] /dev/rnullb0: Can't open blockdev
[  512.057556][T15203] overlay: ./file0 is not a directory
[  512.862655][  T983] airspy 6-1:0.0: usb_control_msg() failed -110 request 0e
[  512.994694][  T983] airspy 6-1:0.0: Registered as swradio24
[  513.009537][  T983] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  513.500494][T15218] exFAT-fs (rnullb0): invalid boot record signature
[  513.514878][T15218] exFAT-fs (rnullb0): failed to read boot sector
[  513.559595][T15218] exFAT-fs (rnullb0): failed to recognize exfat type
[  513.567387][   T24] usb 6-1: USB disconnect, device number 28
[  513.936129][T15231] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2541'.
[  513.978814][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  513.990566][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  513.999648][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  514.029446][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  514.040158][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  514.091125][   T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  514.293419][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.299983][   T24] usb 6-1: Using ep0 maxpacket: 32
[  514.323801][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.329787][   T24] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  514.352842][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.381601][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.385129][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.421540][   T24] usb 6-1: Product: syz
[  514.425768][   T24] usb 6-1: Manufacturer: syz
[  514.428255][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.438620][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.460832][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.466815][   T24] usb 6-1: SerialNumber: syz
[  514.490560][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.515155][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.550538][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.570730][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.600590][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.643297][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.660872][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.670652][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.702283][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.710192][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.715870][T15251] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2544'.
[  514.717613][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.736618][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.744041][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.745764][   T24] visor 6-1:1.0: Handspring Visor / Palm OS converter detected
[  514.751371][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.765893][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.790330][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.817424][   T24] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  514.844826][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.861871][   T24] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  514.891567][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  514.975720][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  515.050614][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  515.074092][T15242] hfs: can't find a HFS filesystem on dev rnullb0
[  515.124980][T15259] program syz.7.2545 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  515.164656][T15233] chnl_net:caif_netlink_parms(): no params data found
[  515.902645][T15233] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.933486][T15233] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.954573][T15233] bridge_slave_0: entered allmulticast mode
[  515.981505][T15233] bridge_slave_0: entered promiscuous mode
[  516.121538][ T5850] Bluetooth: hci5: command tx timeout
[  516.212426][ T5939] usb 6-1: USB disconnect, device number 29
[  516.242078][ T5939] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  516.286896][ T5939] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  516.324213][ T5939] visor 6-1:1.0: device disconnected
[  516.578330][T15233] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.600105][T15233] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.622675][T15233] bridge_slave_1: entered allmulticast mode
[  516.653835][T15233] bridge_slave_1: entered promiscuous mode
[  516.702532][T15279] Mount JFS Failure: -22
[  516.810313][T15233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  516.836565][T15233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.986387][T15288] IPv6: Can't replace route, no match found
[  517.012969][T15233] team0: Port device team_slave_0 added
[  517.041060][T15233] team0: Port device team_slave_1 added
[  517.363742][T15233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  517.389777][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.473061][T15233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  517.521281][T15233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  517.529590][   T24] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  517.544891][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.649843][T15233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  517.735721][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  517.764720][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  517.826515][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  517.839693][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  517.853709][   T24] usb 6-1: Product: syz
[  517.858367][   T24] usb 6-1: Manufacturer: syz
[  517.878787][   T24] usb 6-1: SerialNumber: syz
[  517.888239][T15299] Mount JFS Failure: -22
[  517.960354][T15233] hsr_slave_0: entered promiscuous mode
[  517.967780][T15233] hsr_slave_1: entered promiscuous mode
[  517.997729][T15233] debugfs: 'hsr0' already exists in 'hsr'
[  518.013071][T15233] Cannot create hsr debugfs directory
[  518.141315][   T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  518.199650][ T5850] Bluetooth: hci5: command tx timeout
[  518.309625][ T5939] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  518.344549][   T24] usb 6-1: USB disconnect, device number 30
[  518.490099][ T5939] usb 7-1: Using ep0 maxpacket: 32
[  518.520234][T15291] usblp0: removed
[  518.529917][ T5939] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  518.538043][ T5939] usb 7-1: config 0 has no interface number 0
[  518.572533][ T5939] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  518.619455][ T5939] usb 7-1: config 0 interface 85 has no altsetting 0
[  518.646299][ T5939] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  518.672183][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.701980][ T5939] usb 7-1: Product: syz
[  518.706262][ T5939] usb 7-1: Manufacturer: syz
[  518.716123][ T5939] usb 7-1: SerialNumber: syz
[  518.725292][T15233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.739731][ T5939] usb 7-1: config 0 descriptor??
[  518.868621][T15233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.960762][ T5939] appletouch 7-1:0.85: Failed to read mode from device.
[  518.967973][ T5939] appletouch 7-1:0.85: probe with driver appletouch failed with error -5
[  519.011066][T15233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.167722][T15233] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.383518][ T5939] usb 7-1: USB disconnect, device number 3
[  519.495684][ T5918] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  519.577393][T15329] Mount JFS Failure: -22
[  519.606564][T15233] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  519.626330][T15233] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  519.654229][T15233] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  519.692441][T15233] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  519.699612][ T5918] usb 6-1: Using ep0 maxpacket: 16
[  519.725422][ T5918] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  519.771093][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.803931][ T5918] usb 6-1: Product: syz
[  519.808152][ T5918] usb 6-1: Manufacturer: syz
[  519.834151][ T5918] usb 6-1: SerialNumber: syz
[  519.866672][ T5918] usb 6-1: config 0 descriptor??
[  519.900892][ T5918] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  520.038189][T15233] 8021q: adding VLAN 0 to HW filter on device bond0
[  520.094092][ T5918] gp8psk: usb in 128 operation failed.
[  520.120039][ T5918] gp8psk: usb in 137 operation failed.
[  520.123528][T15233] 8021q: adding VLAN 0 to HW filter on device team0
[  520.141905][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  520.167061][ T5918] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  520.197577][ T5918] usb 6-1: media controller created
[  520.213628][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.220915][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state
[  520.278989][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.286287][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  520.294352][ T5850] Bluetooth: hci5: command tx timeout
[  520.310365][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  520.351525][ T5918] gp8psk_fe: Frontend revision 1 attached
[  520.357358][ T5918] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  520.372878][ T5918] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  520.441047][T15350] /dev/rnullb0: Can't open blockdev
[  520.531585][ T5918] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  520.561472][ T5918] gp8psk: found Genpix USB device pID = 201 (hex)
[  521.683649][ T5918] usb 6-1: USB disconnect, device number 31
[  521.952965][T15233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.102337][ T5918] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  522.359985][ T5850] Bluetooth: hci5: command tx timeout
[  522.913710][T15233] veth0_vlan: entered promiscuous mode
[  522.934281][T15233] veth1_vlan: entered promiscuous mode
[  522.957354][T15398] vxcan1: entered allmulticast mode
[  523.027623][T15233] veth0_macvtap: entered promiscuous mode
[  523.053168][T15233] veth1_macvtap: entered promiscuous mode
[  523.152445][T15233] batman_adv: batadv0: Interface activated: batadv_slave_0
[  523.174918][T15233] batman_adv: batadv0: Interface activated: batadv_slave_1
[  523.216211][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  523.245650][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  523.257859][T15406] qnx4: no qnx4 filesystem (no root dir).
[  523.277196][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  523.296740][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  523.317133][   T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  523.513072][   T24] usb 7-1: config 11 has an invalid interface number: 206 but max is 1
[  523.528835][   T24] usb 7-1: config 11 has an invalid interface number: 4 but max is 1
[  523.561130][   T24] usb 7-1: config 11 has an invalid interface number: 5 but max is 1
[  523.579565][   T24] usb 7-1: config 11 has 3 interfaces, different from the descriptor's value: 2
[  523.593684][   T24] usb 7-1: config 11 has no interface number 0
[  523.608753][   T24] usb 7-1: config 11 has no interface number 1
[  523.627063][   T24] usb 7-1: config 11 has no interface number 2
[  523.641109][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.648971][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.659597][   T24] usb 7-1: config 11 interface 206 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  523.712497][   T24] usb 7-1: too many endpoints for config 11 interface 4 altsetting 9: 166, using maximum allowed: 30
[  523.749750][   T24] usb 7-1: config 11 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 166
[  523.783364][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.784000][   T24] usb 7-1: config 11 interface 5 altsetting 48 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  523.829769][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.859636][   T24] usb 7-1: config 11 interface 206 has no altsetting 0
[  523.866577][   T24] usb 7-1: config 11 interface 4 has no altsetting 0
[  523.889596][   T24] usb 7-1: config 11 interface 5 has no altsetting 0
[  523.940908][   T24] usb 7-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=6e.cc
[  523.948466][ T8313] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.959828][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.968807][   T24] usb 7-1: Product: Г
[  523.989583][   T24] usb 7-1: Manufacturer: Ь
[  523.994158][   T24] usb 7-1: SerialNumber: ɜ퍟쭄ⴀ绹氡蚡㣗蘿䎐ﰣ쯮䣋׺晏誌螙息ᖫ퀙䬩뀈涥큼欄⺧§ิ趖䛢뢯껨勺竩詂㵖蘶셀࢑햳ꮂ␱䬠涰輠뇅늛識⺳犪룃缗蛴ퟅ庁ꃄ먁廴
[  524.173324][ T8313] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.208319][T15414] FAT-fs (rnullb0): bogus number of reserved sectors
[  524.297044][T15414] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  524.360311][ T8313] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.541682][ T8313] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.780022][  T983] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  524.959585][  T983] usb 5-1: Using ep0 maxpacket: 8
[  524.965578][ T8313] bridge_slave_1: left allmulticast mode
[  524.974730][  T983] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  524.989573][ T8313] bridge_slave_1: left promiscuous mode
[  525.002692][  T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.006337][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.061205][ T8313] bridge_slave_0: left allmulticast mode
[  525.066961][ T8313] bridge_slave_0: left promiscuous mode
[  525.069288][  T983] pvrusb2: Hardware description: Terratec Grabster AV400
[  525.086616][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.112964][  T983] pvrusb2: **********
[  525.127014][  T983] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  525.162779][  T983] pvrusb2: Important functionality might not be entirely working.
[  525.196447][  T983] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  525.245496][  T983] pvrusb2: **********
[  525.285216][ T2348] pvrusb2: Invalid write control endpoint
[  525.397313][ T5171] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  525.412429][ T5171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  525.421278][ T5171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  525.430803][ T5171] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  525.472395][ T5171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  525.519520][ T2348] pvrusb2: Invalid write control endpoint
[  525.526449][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  525.540376][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  525.548558][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  525.561387][ T2348] pvrusb2: Device being rendered inoperable
[  525.570528][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  525.578733][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  525.597331][ T2348] pvrusb2: Attached sub-driver cx25840
[  525.603392][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  525.614342][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  525.928794][ T8313] dvmrp0 (unregistering): left allmulticast mode
[  526.060888][   T24] usb 7-1: USB disconnect, device number 4
[  526.098470][T15449] Mount JFS Failure: -22
[  526.364294][ T8313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.376933][ T8313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.390017][ T8313] bond0 (unregistering): Released all slaves
[  527.101918][ T8313] hsr_slave_0: left promiscuous mode
[  527.143891][ T8313] hsr_slave_1: left promiscuous mode
[  527.190825][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.248615][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.321123][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.328580][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.487971][ T8313] veth1_macvtap: left promiscuous mode
[  527.542292][ T8313] veth0_macvtap: left promiscuous mode
[  527.560275][ T8313] veth1_vlan: left promiscuous mode
[  527.567172][ T8313] veth0_vlan: left promiscuous mode
[  527.569631][ T5171] Bluetooth: hci2: command tx timeout
[  527.679934][   T43] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[  527.862830][   T43] usb 7-1: Invalid ep0 maxpacket: 16
[  528.009869][   T43] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  528.179318][T15484] hpfs: Bad magic ... probably not HPFS
[  528.200146][   T43] usb 7-1: Invalid ep0 maxpacket: 16
[  528.210500][   T43] usb usb7-port1: attempt power cycle
[  528.569847][   T43] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[  528.619956][   T43] usb 7-1: Invalid ep0 maxpacket: 16
[  528.759934][   T43] usb 7-1: new low-speed USB device number 8 using dummy_hcd
[  528.790291][   T43] usb 7-1: Invalid ep0 maxpacket: 16
[  528.796203][   T43] usb usb7-port1: unable to enumerate USB device
[  528.974844][ T8313] team0 (unregistering): Port device team_slave_1 removed
[  529.167283][ T8313] team0 (unregistering): Port device team_slave_0 removed
[  529.643048][ T5171] Bluetooth: hci2: command tx timeout
[  530.330933][T15439] chnl_net:caif_netlink_parms(): no params data found
[  530.970995][T15439] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.996953][T15439] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.036694][T15439] bridge_slave_0: entered allmulticast mode
[  531.065621][T15439] bridge_slave_0: entered promiscuous mode
[  531.108047][T15439] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.149725][T15439] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.157042][T15439] bridge_slave_1: entered allmulticast mode
[  531.263036][T15439] bridge_slave_1: entered promiscuous mode
[  531.374839][T15530] tipc: Started in network mode
[  531.390251][T15530] tipc: Node identity ac1414aa, cluster identity 4711
[  531.412188][T15530] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  531.538841][T15439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  531.603265][T15439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  531.719987][ T5171] Bluetooth: hci2: command tx timeout
[  531.778644][T15439] team0: Port device team_slave_0 added
[  531.804808][T15439] team0: Port device team_slave_1 added
[  531.846966][T15553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.920046][T15553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.017221][T15439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  532.055749][T15439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.138455][T15439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.179021][T15439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.218162][T15439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.333057][T15439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.757657][T15439] hsr_slave_0: entered promiscuous mode
[  532.784891][T15439] hsr_slave_1: entered promiscuous mode
[  532.806288][T15439] debugfs: 'hsr0' already exists in 'hsr'
[  532.828376][T15439] Cannot create hsr debugfs directory
[  533.187347][  T983] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  533.236147][  T983] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  533.451147][T15439] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  533.496358][T15439] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  533.507554][T15439] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  533.531376][T15439] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  533.776851][T15439] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.799888][ T5171] Bluetooth: hci2: command tx timeout
[  533.852310][T15439] 8021q: adding VLAN 0 to HW filter on device team0
[  533.911469][ T8314] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.918672][ T8314] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.967742][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.974990][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  534.656174][T15599] NILFS (rnullb0): couldn't find nilfs on the device
[  534.701116][T15439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.012971][T15610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.069775][T15610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.390289][T15453] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  535.568901][T15453] usb 7-1: config 0 has an invalid interface number: 192 but max is 0
[  535.597687][T15453] usb 7-1: config 0 has no interface number 0
[  535.667596][T15453] usb 7-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7
[  535.690481][T15453] usb 7-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  535.699088][T15453] usb 7-1: Product: syz
[  535.723358][T15453] usb 7-1: Manufacturer: syz
[  535.743313][T15453] usb 7-1: SerialNumber: syz
[  535.753399][T15439] veth0_vlan: entered promiscuous mode
[  535.786086][T15453] usb 7-1: config 0 descriptor??
[  535.825486][T15439] veth1_vlan: entered promiscuous mode
[  535.988069][T15439] veth0_macvtap: entered promiscuous mode
[  536.071845][T15439] veth1_macvtap: entered promiscuous mode
[  536.154976][T15439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.312418][T15439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.336543][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.460866][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.484204][T15629] /dev/rnullb0: Can't open blockdev
[  536.489638][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.489685][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.875005][T15442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.931752][T15442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.967250][T15635] /dev/rnullb0: Can't open blockdev
[  536.981130][T15442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.988989][T15442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.335342][T15643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.358903][T15643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.425473][T15646] tmpfs: Unknown parameter '00000000000000000000006'
[  537.564951][T14806] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  537.778905][T15653] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  537.846403][T15653] tmpfs: Unknown parameter 'usrquota
'
[  537.860774][ T3026] bridge_slave_1: left allmulticast mode
[  537.893147][ T3026] bridge_slave_1: left promiscuous mode
[  537.907093][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.975026][ T3026] bridge_slave_0: left allmulticast mode
[  538.006288][ T3026] bridge_slave_0: left promiscuous mode
[  538.038534][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.804750][T15670] binder: 15669:15670 ioctl 40046210 0 returned -14
[  539.000254][ T5171] Bluetooth: hci2: command tx timeout
[  539.114055][ T3026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  539.129424][ T3026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  539.145248][ T3026] bond0 (unregistering): Released all slaves
[  539.153174][T15680] /dev/rnullb0: Can't open blockdev
[  539.189679][ T5939] usb 7-1: USB disconnect, device number 9
[  540.011612][ T3026] hsr_slave_0: left promiscuous mode
[  540.050671][ T3026] hsr_slave_1: left promiscuous mode
[  540.056815][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.119938][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.243589][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.274906][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  540.701834][ T3026] veth1_macvtap: left promiscuous mode
[  540.707444][ T3026] veth0_macvtap: left promiscuous mode
[  540.771888][ T3026] veth1_vlan: left promiscuous mode
[  540.824716][ T3026] veth0_vlan: left promiscuous mode
[  541.347624][T15732] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  541.354979][T15734] 9pnet_virtio: no channels available for device /dev/sg0
[  541.580229][T15737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.000250][T15742] exFAT-fs (rnullb0): invalid boot record signature
[  542.019755][T15742] exFAT-fs (rnullb0): failed to read boot sector
[  542.026147][T15742] exFAT-fs (rnullb0): failed to recognize exfat type
[  542.223858][T15744] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2628'.
[  542.491410][T15746] /dev/rnullb0: Can't open blockdev
[  542.791119][ T3026] team0 (unregistering): Port device team_slave_1 removed
[  542.910772][ T3026] team0 (unregistering): Port device team_slave_0 removed
[  543.153028][T15750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.181790][T15750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.970639][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2631'.
[  544.079266][T15762] netlink: 'syz.8.2632': attribute type 83 has an invalid length.
[  544.150984][T15767] Mount JFS Failure: -22
[  544.417479][T15778] qnx4: no qnx4 filesystem (no root dir).
[  544.439647][  T983] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  544.652326][  T983] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  544.699546][  T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  544.760859][  T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 189, setting to 64
[  544.807485][  T983] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  544.838212][  T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.859565][  T983] usb 7-1: Product: syz
[  544.869998][  T983] usb 7-1: Manufacturer: syz
[  544.874702][  T983] usb 7-1: SerialNumber: syz
[  544.940247][  T983] usb 7-1: config 0 descriptor??
[  544.946211][T15770] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  544.959269][T15786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2639'.
[  545.160720][  T983] rc_core: IR keymap rc-streamzap not found
[  545.179527][  T983] Registered IR keymap rc-empty
[  545.185452][T15770] gfs2: not a GFS2 filesystem
[  545.205400][T15796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.206057][T15797] gfs2: not a GFS2 filesystem
[  545.222067][  T983] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  545.275093][T15794] netlink: 'syz.4.2641': attribute type 1 has an invalid length.
[  545.283032][  T983] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input49
[  545.297447][T15796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.325758][T15802] omfs: Invalid superblock (0)
[  545.361374][   T43] usb 7-1: USB disconnect, device number 10
[  545.382478][T15794] netlink: 'syz.4.2641': attribute type 2 has an invalid length.
[  545.430487][T15794] netlink: 'syz.4.2641': attribute type 1 has an invalid length.
[  545.439663][T15794] netlink: 'syz.4.2641': attribute type 1 has an invalid length.
[  545.489189][T15794] netlink: 'syz.4.2641': attribute type 2 has an invalid length.
[  545.518029][T15803] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000
[  545.540839][T15794] netlink: 'syz.4.2641': attribute type 2 has an invalid length.
[  545.593436][T15794] netlink: 'syz.4.2641': attribute type 2 has an invalid length.
[  545.672905][T15794] netlink: 'syz.4.2641': attribute type 1 has an invalid length.
[  546.161545][T15818] NILFS (rnullb0): couldn't find nilfs on the device
[  547.219663][   T43] usb 7-1: new low-speed USB device number 11 using dummy_hcd
[  548.039380][T15878] /dev/rnullb0: Can't open blockdev
[  548.090391][T15878] /dev/rnullb0: Can't open blockdev
[  548.096446][T15878] /dev/rnullb0: Can't open blockdev
[  548.137457][T15881] sp0: Synchronizing with TNC
[  548.167200][T15878] gfs2: not a GFS2 filesystem
[  548.211633][T15878] gfs2: not a GFS2 filesystem
[  548.220759][T15878] gfs2: not a GFS2 filesystem
[  548.250629][T15878] gfs2: not a GFS2 filesystem
[  548.271370][T15878] gfs2: not a GFS2 filesystem
[  548.281476][T15878] gfs2: not a GFS2 filesystem
[  548.320666][T15878] gfs2: not a GFS2 filesystem
[  548.344070][T15878] gfs2: not a GFS2 filesystem
[  548.368166][T15878] gfs2: not a GFS2 filesystem
[  548.384434][T15878] gfs2: not a GFS2 filesystem
[  548.410891][T15878] gfs2: not a GFS2 filesystem
[  548.435932][T15878] gfs2: not a GFS2 filesystem
[  548.462884][T15878] gfs2: not a GFS2 filesystem
[  548.479345][T15892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.499290][T15878] gfs2: not a GFS2 filesystem
[  548.511147][T15878] gfs2: not a GFS2 filesystem
[  548.527618][T15892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.540904][T15878] gfs2: not a GFS2 filesystem
[  548.558246][T15878] gfs2: not a GFS2 filesystem
[  548.563283][ T5939] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  548.582959][T15878] gfs2: not a GFS2 filesystem
[  548.601348][T15878] gfs2: not a GFS2 filesystem
[  548.616737][T15878] gfs2: not a GFS2 filesystem
[  548.641014][T15878] gfs2: not a GFS2 filesystem
[  548.647582][T15878] gfs2: not a GFS2 filesystem
[  548.653856][T15878] gfs2: not a GFS2 filesystem
[  548.659986][T15878] gfs2: not a GFS2 filesystem
[  548.680139][T15878] gfs2: not a GFS2 filesystem
[  548.707557][T15878] gfs2: not a GFS2 filesystem
[  548.748832][T15878] gfs2: not a GFS2 filesystem
[  548.753764][ T5939] usb 7-1: Using ep0 maxpacket: 32
[  548.773249][T15878] gfs2: not a GFS2 filesystem
[  548.779791][T15901] /dev/rnullb0: Can't open blockdev
[  548.809603][ T5939] usb 7-1: config 0 has an invalid interface number: 29 but max is 0
[  548.817748][ T5939] usb 7-1: config 0 has no interface number 0
[  548.825200][T15878] gfs2: not a GFS2 filesystem
[  548.841383][T15878] gfs2: not a GFS2 filesystem
[  548.847448][T15878] gfs2: not a GFS2 filesystem
[  548.862971][ T5939] usb 7-1: config 0 interface 29 has no altsetting 0
[  548.945328][T15908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.949721][ T5939] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  548.997643][T15908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.003780][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.040230][ T5939] usb 7-1: Product: syz
[  549.044555][ T5939] usb 7-1: Manufacturer: syz
[  549.086670][ T5939] usb 7-1: SerialNumber: syz
[  549.128767][ T5939] usb 7-1: config 0 descriptor??
[  549.254537][T15916] /dev/rnullb0: Can't open blockdev
[  549.410489][ T5939] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  549.564502][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  549.597902][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  549.597902][T15926] 
[  549.629728][ T5939] peak_usb 7-1:0.29 can0: sending command failure: -22
[  549.636717][ T5939] peak_usb 7-1:0.29 can0: sending command failure: -22
[  549.654709][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  549.674331][ T5939] peak_usb 7-1:0.29 can0: sending command failure: -22
[  549.690013][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  549.690013][T15926] 
[  549.722327][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  549.729378][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  549.729378][T15926] 
[  549.817957][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  549.854527][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  549.854527][T15926] 
[  549.875824][ T5939] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -22
[  549.928724][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  549.939965][ T5939] usb 7-1: USB disconnect, device number 12
[  549.966611][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  549.966611][T15926] 
[  550.022623][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  550.051238][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  550.051238][T15926] 
[  550.070556][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  550.080295][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  550.080295][T15926] 
[  550.125657][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  550.161782][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  550.161782][T15926] 
[  550.180338][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  550.187414][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  550.187414][T15926] 
[  550.235761][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  550.251777][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  550.251777][T15926] 
[  550.278613][T15939] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8903, magic 89 != 6b]
[  550.291459][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  550.298568][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  550.298568][T15926] 
[  550.330909][T15939] /dev/rnullb0: Can't open blockdev
[  550.349046][T15926] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  550.388467][T15926] VFS: Can't find a romfs filesystem on dev rnullb0.
[  550.388467][T15926] 
[  550.829561][T15958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.850139][T15958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.858824][T15955] /dev/rnullb0: Can't open blockdev
[  550.872253][T15958] pvrusb2: Attempted to execute control transfer when device not ok
[  550.881995][T15955] /dev/rnullb0: Can't open blockdev
[  552.348337][T15989] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input50
[  552.460527][T15996] /dev/rnullb0: Can't open blockdev
[  553.789672][T14806] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  553.879286][T16043] fuse: Bad value for 'user_id'
[  553.894006][T16043] fuse: Bad value for 'user_id'
[  553.956587][T14806] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  553.983584][T14806] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.005476][T14806] usb 9-1: Product: syz
[  554.025532][T14806] usb 9-1: Manufacturer: syz
[  554.040013][T14806] usb 9-1: SerialNumber: syz
[  554.130620][  T986] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  554.155373][T14806] usb 9-1: config 0 descriptor??
[  554.786735][T14806] usb 9-1: Firmware version (0.0) predates our first public release.
[  554.815537][T14806] usb 9-1: Please update to version 0.2 or newer
[  554.928771][T14806] usb 9-1: USB disconnect, device number 3
[  555.139246][T16071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.163315][T16071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.180151][  T986] usb 7-1: device descriptor read/64, error -71
[  555.429715][  T986] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  555.606637][  T986] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  555.629610][  T986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.643959][  T986] usb 7-1: Product: syz
[  555.648340][  T986] usb 7-1: Manufacturer: syz
[  555.654261][  T986] usb 7-1: SerialNumber: syz
[  555.676257][  T986] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  555.728092][T14806] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  556.027108][T16088] exFAT-fs (rnullb0): invalid boot record signature
[  556.079687][T16088] exFAT-fs (rnullb0): failed to read boot sector
[  556.086108][T16088] exFAT-fs (rnullb0): failed to recognize exfat type
[  556.133248][T16062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.150316][T16095] Can't find a SQUASHFS superblock on rnullb0
[  556.158654][T16062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.188655][T16062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.230784][T16062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.262264][T16062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.294837][T16062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.332748][T16062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.376628][T16062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.636542][T16062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.668181][T16062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.751109][   T43] usb 7-1: USB disconnect, device number 14
[  556.839648][T14806] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  556.846807][T14806] ath9k_htc: Failed to initialize the device
[  556.874363][   T43] usb 7-1: ath9k_htc: USB layer deinitialized
[  556.980726][T16119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2706'.
[  557.022230][T15453] IPVS: starting estimator thread 0...
[  557.047573][T16119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2706'.
[  557.135439][T16122] IPVS: using max 24 ests per chain, 57600 per kthread
[  558.234406][T16155] program syz.6.2713 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  558.291778][T16157] netlink: 57 bytes leftover after parsing attributes in process `syz.4.2714'.
[  558.293789][T16158] bridge0: entered allmulticast mode
[  558.321533][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2713'.
[  558.382808][T16158] bridge_slave_1: left allmulticast mode
[  558.478053][T16158] bridge_slave_1: left promiscuous mode
[  558.515218][T16163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.539864][T16158] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.552470][T16163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.737123][T16158] bridge_slave_0: left allmulticast mode
[  558.769594][T16158] bridge_slave_0: left promiscuous mode
[  558.883248][T16158] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.999267][T16178] /dev/rnullb0: Can't open blockdev
[  559.258400][T16180] /dev/rnullb0: Can't open blockdev
[  559.542513][T16158] bridge0 (unregistering): left allmulticast mode
[  559.648567][T16185] /dev/rnullb0: Can't open blockdev
[  560.479701][T16212] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2725'.
[  560.939604][T14806] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  561.137886][T14806] usb 7-1: config 0 has an invalid interface number: 156 but max is 1
[  561.179557][T14806] usb 7-1: config 0 has no interface number 1
[  561.185752][T14806] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  561.251541][T14806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.291253][T14806] usb 7-1: config 0 descriptor??
[  561.323704][T14806] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  561.349892][T14806] usb 7-1: MIDIStreaming interface descriptor not found
[  561.435776][T16235] gfs2: not a GFS2 filesystem
[  561.505311][T16216] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  561.524686][T16216] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  561.558498][T14806] gspca_main: spca561-2.14.0 probing abcd:cdee
[  561.642485][T14806] spca561 7-1:0.0: probe with driver spca561 failed with error -22
[  561.680588][T14806] usb 7-1: USB disconnect, device number 15
[  562.473883][T16259] vxfs: WRONG superblock magic 8013f000 at 1
[  562.512984][T16259] vxfs: WRONG superblock magic 00000000 at 8
[  562.519080][T16259] vxfs: can't find superblock.
[  562.727378][T16262] qnx4: no qnx4 filesystem (no root dir).
[  562.773053][T16262] qnx4: no qnx4 filesystem (no root dir).
[  562.790424][T16262] qnx4: no qnx4 filesystem (no root dir).
[  562.796922][T16262] qnx4: no qnx4 filesystem (no root dir).
[  562.809841][T16270] /dev/rnullb0: Can't open blockdev
[  562.870333][T16262] qnx4: no qnx4 filesystem (no root dir).
[  562.911552][T16262] qnx4: no qnx4 filesystem (no root dir).
[  562.918152][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.019985][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.026494][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.068828][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.100165][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  563.106755][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  563.114991][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.134199][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.160798][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.177070][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.205613][T16280] netlink: 'syz.8.2741': attribute type 21 has an invalid length.
[  563.223448][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.234957][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.249193][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.257354][T16280] netlink: 'syz.8.2741': attribute type 30 has an invalid length.
[  563.258155][T16282] /dev/rnullb0: Can't open blockdev
[  563.270646][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.277336][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.288576][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.295377][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.301520][ T5939] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  563.360586][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.372375][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.397434][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.410438][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.424593][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.453994][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.468541][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.486030][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.503743][ T5939] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  563.522956][T16262] qnx4: no qnx4 filesystem (no root dir).
[  563.525811][ T5939] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  563.585383][ T5939] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  563.629360][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.693544][ T5939] usb 7-1: config 0 descriptor??
[  563.902910][T16276] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  564.021324][T16306] /dev/rnullb0: Can't open blockdev
[  564.086516][T16308] /dev/rnullb0: Can't open blockdev
[  564.888101][   T10] usb 7-1: USB disconnect, device number 16
[  565.159878][ T5171] Bluetooth: hci4: command 0x0406 tx timeout
[  565.185605][T16342] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  565.839554][T16348] syz.7.2754: attempt to access beyond end of device
[  565.839554][T16348] loop7: rw=4096, sector=0, nr_sectors = 1 limit=0
[  566.114270][T16362] dlm: no local IP address has been set
[  566.159649][T16362] dlm: cannot start dlm midcomms -107
[  566.502706][T16331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.544811][T15453] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  566.550693][T16377] /dev/rnullb0: Can't open blockdev
[  566.586543][T16331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.843449][T15453] usb 9-1: config 5 has an invalid interface number: 1 but max is 0
[  566.851735][T15453] usb 9-1: config 5 has no interface number 0
[  566.857869][T15453] usb 9-1: config 5 interface 1 altsetting 255 has an invalid descriptor for endpoint zero, skipping
[  566.891579][T15453] usb 9-1: config 5 interface 1 has no altsetting 0
[  566.905119][T15453] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=a1.bd
[  566.927183][T15453] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.959748][T15453] usb 9-1: Product: syz
[  566.963977][T15453] usb 9-1: Manufacturer: syz
[  566.968600][T15453] usb 9-1: SerialNumber: syz
[  567.208739][T16362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.223449][T16362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.239900][  T986] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  567.429769][  T986] usb 7-1: Using ep0 maxpacket: 8
[  567.451504][  T986] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.506391][  T986] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  567.532270][  T986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.254276][T15453] usb 9-1: unknown interface protocol 0x38, assuming v1
[  568.270813][  T986] usb 7-1: config 0 descriptor??
[  568.306764][  T986] gspca_main: vc032x-2.14.0 probing 046d:0892
[  568.313059][T15453] usb 9-1: cannot find UAC_HEADER
[  568.430050][T16396] program syz.4.2764 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  568.452611][T15453] snd-usb-audio 9-1:5.1: probe with driver snd-usb-audio failed with error -22
[  568.502186][  T986] gspca_vc032x: reg_r err -32
[  568.507014][  T986] vc032x 7-1:0.0: probe with driver vc032x failed with error -32
[  568.519795][T15453] usb 9-1: USB disconnect, device number 4
[  568.595398][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  568.874329][  T986] usb 7-1: USB disconnect, device number 17
[  568.975856][T16406] /dev/rnullb0: Can't open blockdev
[  569.080748][T16408] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  569.118448][T16408] /dev/rnullb0: Can't open blockdev
[  569.359449][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2771'.
[  569.379725][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2771'.
[  569.420598][T16421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  569.436115][T16422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  569.452366][T16424] /dev/rnullb0: Can't open blockdev
[  569.577153][T16428] /dev/rnullb0: Can't open blockdev
[  569.675338][T16434] hfs: can't find a HFS filesystem on dev rnullb0
[  569.847301][T16440] /dev/rnullb0: Can't open blockdev
[  570.019592][   T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  570.052616][T16449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  570.086889][T16449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  570.141431][T15453] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  570.189614][   T10] usb 7-1: Using ep0 maxpacket: 32
[  570.203906][   T10] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  570.220473][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.272348][   T10] usb 7-1: config 0 descriptor??
[  570.299738][T15453] usb 9-1: device descriptor read/64, error -71
[  570.327197][   T10] as10x_usb: device has been detected
[  570.369442][   T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  570.587397][T15453] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  570.620078][   T10] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  570.701372][   T10] as10x_usb: error during firmware upload part1
[  570.708363][   T10] Registered device nBox DVB-T Dongle
[  570.829548][T15453] usb 9-1: device descriptor read/64, error -71
[  570.980013][T15453] usb usb9-port1: attempt power cycle
[  571.339859][T15453] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  571.382874][T15453] usb 9-1: device descriptor read/8, error -71
[  571.639637][T15453] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  571.711607][T15453] usb 9-1: device descriptor read/8, error -71
[  571.821287][T15453] usb usb9-port1: unable to enumerate USB device
[  572.725057][T15453] usb 7-1: USB disconnect, device number 18
[  572.771488][T15453] Unregistered device nBox DVB-T Dongle
[  572.775450][T15453] as10x_usb: device has been disconnected
[  573.329751][ T5918] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  573.509529][ T5918] usb 9-1: Using ep0 maxpacket: 16
[  573.520519][ T5918] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  573.531120][ T5918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.549787][ T5918] usb 9-1: Product: syz
[  573.555194][ T5918] usb 9-1: Manufacturer: syz
[  573.583520][ T5918] usb 9-1: SerialNumber: syz
[  573.809701][ T5939] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  573.840763][ T5918] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  573.897571][ T5918] snd-usb-audio 9-1:222.0: probe with driver snd-usb-audio failed with error -71
[  573.923229][ T5918] usb 9-1: USB disconnect, device number 9
[  573.971646][ T6105] udevd[6105]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  574.002605][ T5939] usb 7-1: Using ep0 maxpacket: 16
[  574.024589][ T5939] usb 7-1: config 6 has an invalid interface number: 43 but max is 0
[  574.032926][ T5939] usb 7-1: config 6 has no interface number 0
[  574.039080][ T5939] usb 7-1: config 6 interface 43 has no altsetting 0
[  574.076418][ T5939] usb 7-1: string descriptor 0 read error: -71
[  574.083584][ T5939] usb 7-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  574.114903][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.131349][T16521] /dev/rnullb0: Can't open blockdev
[  574.170657][ T5939] usb 7-1: rejected 1 configuration due to insufficient available bus power
[  574.189539][ T5939] usb 7-1: no configuration chosen from 1 choice
[  574.220975][ T5939] usb 7-1: USB disconnect, device number 19
[  574.387248][T16526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.426560][T16526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.465927][T16531] binder: 16530:16531 ioctl c018620c 200000000140 returned -1
[  574.564140][T16533] /dev/rnullb0: Can't open blockdev
[  574.923083][ T5850] Bluetooth: hci5: command 0x0406 tx timeout
[  575.092988][T16544] /dev/rnullb0: Can't open blockdev
[  575.319832][T14494] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  575.366334][T16551] /dev/rnullb0: Can't open blockdev
[  575.491128][T14494] usb 9-1: Using ep0 maxpacket: 32
[  575.511777][T14494] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  575.535371][T14494] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.574052][T14494] usb 9-1: Product: syz
[  575.588630][T14494] usb 9-1: Manufacturer: syz
[  575.608469][T14494] usb 9-1: SerialNumber: syz
[  575.720882][T14494] usb 9-1: config 0 descriptor??
[  576.134809][T14494] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  576.150826][T14494] peak_usb 9-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  576.302132][T14494] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71
[  576.353630][T14494] usb 9-1: USB disconnect, device number 10
[  576.524618][T16574] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  576.532181][T16574] /dev/rnullb0: Can't open blockdev
[  577.012384][T16583] /dev/rnullb0: Can't open blockdev
[  578.369235][T16614] /dev/rnullb0: Can't open blockdev
[  578.658537][T16618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.703771][T16618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.762769][T16621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  578.812747][T16621] overlayfs: missing 'workdir'
[  579.003002][   T30] audit: type=1326 audit(1753656601.792:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16610 comm="syz.7.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b4f8e9a9 code=0x7fc00000
[  579.627551][T16636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.686356][T16636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.943387][T16639] random: crng reseeded on system resumption
[  580.451227][T16659] /dev/rnullb0: Can't open blockdev
[  580.484827][T16660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.514399][T16660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.220138][T16687] Malformed UNC in devname
[  581.220138][T16687] 
[  581.226795][T16687] CIFS: VFS: Malformed UNC in devname
[  582.001517][T16717] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2835'.
[  582.014487][T16717] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.073132][T16719] /dev/rnullb0: Can't open blockdev
[  582.125192][T16717] bridge_slave_0 (unregistering): left allmulticast mode
[  582.149603][T16717] bridge_slave_0 (unregistering): left promiscuous mode
[  582.156797][T16717] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.471325][T16728] QAT: Stopping all acceleration devices.
[  582.485484][T16728] /dev/rnullb0: Can't open blockdev
[  582.636816][T16733] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  582.748031][T16733] Error validating options; rc = [-22]
[  583.295570][T16752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2844'.
[  583.360583][T16749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2844'.
[  583.399387][T16749] /dev/rnullb0: Can't open blockdev
[  584.212406][T16781] /dev/rnullb0: Can't open blockdev
[  584.463471][T16790] binder: 16788:16790 ioctl c0306201 2000000002c0 returned -14
[  585.123115][ T5171] Bluetooth: hci2: Malformed HCI Event: 0x22
[  585.692226][T16817] vxfs: WRONG superblock magic 00000000 at 1
[  585.718766][T16817] vxfs: WRONG superblock magic 00000000 at 8
[  585.739612][T16817] vxfs: can't find superblock.
[  585.752611][T16818] vxfs: WRONG superblock magic 00000000 at 1
[  585.778390][T16818] vxfs: WRONG superblock magic 00000000 at 8
[  585.826833][T16818] vxfs: can't find superblock.
[  586.014100][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2859'.
[  586.286807][T16845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.328141][T16845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.777463][T16842] /dev/rnullb0: Can't open blockdev
[  588.080873][T16887] syz.6.2872: attempt to access beyond end of device
[  588.080873][T16887] loop6: rw=0, sector=64, nr_sectors = 8 limit=0
[  588.140513][T16887] syz.6.2872: attempt to access beyond end of device
[  588.140513][T16887] loop6: rw=0, sector=120, nr_sectors = 8 limit=0
[  588.182617][T16887] Mount JFS Failure: -5
[  589.018428][T16907] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  589.148398][T16907] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  590.024084][T16938] pim6reg: entered allmulticast mode
[  590.044300][T16938] pim6reg: left allmulticast mode
[  590.821273][ T5917] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  590.999692][ T5917] usb 9-1: Using ep0 maxpacket: 16
[  591.016275][ T5917] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  591.044609][ T5917] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  591.099550][ T5917] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  591.162793][ T5917] usb 9-1: config 1 interface 0 has no altsetting 0
[  591.191848][ T5917] usb 9-1: New USB device found, idVendor=7525, idProduct=a4a8, bcdDevice= 0.40
[  591.220628][ T5917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.243752][ T5917] usb 9-1: Product: syz
[  591.247980][ T5917] usb 9-1: Manufacturer: syz
[  591.293480][ T5917] usb 9-1: SerialNumber: syz
[  591.634453][ T5917] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x7525 pid 0xA4A8
[  591.793988][T16960] /dev/rnullb0: Can't open blockdev
[  591.802596][ T5917] usb 9-1: USB disconnect, device number 11
[  591.840374][ T5917] usblp0: removed
[  592.469568][ T5917] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  592.503586][T17020] bridge0: entered allmulticast mode
[  592.551782][T17020] pim6reg: entered allmulticast mode
[  592.648110][ T5917] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  592.661210][ T5917] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  592.680487][T17023] netlink: 624 bytes leftover after parsing attributes in process `syz.8.2900'.
[  592.685084][ T5917] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  592.702228][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.730191][ T5917] usb 7-1: Product: syz
[  592.739859][ T5917] usb 7-1: Manufacturer: syz
[  592.744501][ T5917] usb 7-1: SerialNumber: syz
[  592.792923][T17026] hpfs: Bad magic ... probably not HPFS
[  593.473279][T17033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  593.502235][T17033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.777521][T17005] random: crng reseeded on system resumption
[  594.052022][ T5917] cdc_ncm 7-1:1.0: bind() failure
[  594.100683][ T5917] usbtest 7-1:1.1: probe with driver usbtest failed with error -71
[  594.124353][ T5917] usb 7-1: USB disconnect, device number 20
[  594.726898][T17058] openvswitch: netlink: IPv4 tunnel dst address is zero
[  594.849742][  T983] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  595.004771][   T30] audit: type=1326 audit(1753656617.792:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.4.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ea58e9a9 code=0x7ffc0000
[  595.029738][  T983] usb 9-1: Using ep0 maxpacket: 16
[  595.030481][   T30] audit: type=1326 audit(1753656617.792:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.4.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb3ea58e9a9 code=0x7ffc0000
[  595.039613][  T983] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  595.063712][   T30] audit: type=1326 audit(1753656617.792:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.4.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ea58e9a9 code=0x7ffc0000
[  595.094526][   T30] audit: type=1326 audit(1753656617.792:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.4.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ea58e9a9 code=0x7ffc0000
[  595.109592][  T983] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  595.117787][   T30] audit: type=1326 audit(1753656617.792:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.4.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3ea58e9a9 code=0x7ffc0000
[  595.151088][   T30] audit: type=1326 audit(1753656617.792:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.4.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3ea58d310 code=0x7ffc0000
[  595.174890][   T30] audit: type=1326 audit(1753656617.792:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.4.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb3ea5901d7 code=0x7ffc0000
[  595.189042][  T983] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  595.199097][   T30] audit: type=1326 audit(1753656617.792:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.4.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3ea58e9a9 code=0x7ffc0000
[  595.229962][  T983] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  595.234248][   T30] audit: type=1326 audit(1753656617.792:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.4.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb3ea5901d7 code=0x7ffc0000
[  595.249530][  T983] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  595.269062][   T30] audit: type=1326 audit(1753656617.792:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.4.2917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb3ea58d60a code=0x7ffc0000
[  595.307491][T17070] hfs: can't find a HFS filesystem on dev rnullb0
[  595.316048][  T983] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  595.331720][  T983] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  595.343211][  T983] usb 9-1: Manufacturer: syz
[  595.361123][  T983] usb 9-1: config 0 descriptor??
[  595.669646][  T983] rc_core: IR keymap rc-hauppauge not found
[  595.689425][  T983] Registered IR keymap rc-empty
[  595.696225][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  595.742963][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  595.806932][  T983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  595.849890][  T983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input51
[  595.895337][T17073] vxfs: WRONG superblock magic 00000000 at 1
[  595.902419][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  595.926942][T17073] vxfs: WRONG superblock magic 00000000 at 8
[  595.968858][T17073] vxfs: can't find superblock.
[  595.979676][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  596.020376][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  596.079688][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  596.090558][T17078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.112015][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  596.134556][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  596.142500][T17078] vxfs: WRONG superblock magic 00000000 at 1
[  596.149050][T17078] vxfs: WRONG superblock magic 00000000 at 8
[  596.160060][T17078] vxfs: can't find superblock.
[  596.436075][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2921'.
[  596.471080][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  596.499789][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  596.519576][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  596.550601][  T983] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  596.582063][  T983] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  596.599498][  T983] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  596.659915][  T983] usb 9-1: USB disconnect, device number 12
[  596.919787][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  597.110452][T17096] syz.4.2925: attempt to access beyond end of device
[  597.110452][T17096] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  597.162056][T17102] program syz.7.2926 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  597.199658][T17096] exFAT-fs (nbd4): unable to read boot sector
[  597.206046][T17096] exFAT-fs (nbd4): failed to read boot sector
[  597.219706][T17096] exFAT-fs (nbd4): failed to recognize exfat type
[  597.609002][T17111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.625190][T17110] FAT-fs (rnullb0): bogus number of FAT structure
[  597.639368][T17110] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  597.641784][T17111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.691080][T17111] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  597.839678][T15453] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  597.857195][T17114] /dev/rnullb0: Can't open blockdev
[  598.027295][T15453] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  598.055410][T15453] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  598.079518][T15453] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.103367][T15453] usb 7-1: config 0 descriptor??
[  598.323708][T15453] usbhid 7-1:0.0: can't add hid device: -71
[  598.359743][T15453] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  598.399150][T15453] usb 7-1: USB disconnect, device number 21
[  598.829745][T15453] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  599.000046][T15453] usb 7-1: Using ep0 maxpacket: 32
[  599.012079][T15453] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.059790][T15453] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  599.083011][T15453] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.133461][T15453] usb 7-1: config 0 descriptor??
[  599.162611][T15453] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  599.205728][T15453] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  599.631506][T17146] /dev/rnullb0: Can't open blockdev
[  599.862247][  T983] usb 7-1: USB disconnect, device number 22
[  599.879490][  T983] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  600.033092][T17129] kexec: Could not allocate control_code_buffer
[  600.277610][ T8314] Bluetooth: hci3: Frame reassembly failed (-84)
[  600.294106][T17159] Bluetooth: hci3: Frame reassembly failed (-84)
[  600.625305][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2943'.
[  600.811273][T17170] /dev/rnullb0: Can't open blockdev
[  600.984258][T17176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.012086][T17176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.114590][T17176] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  601.122263][T17177] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  601.585037][T17185] syzkaller0: entered promiscuous mode
[  601.585066][T17185] syzkaller0: entered allmulticast mode
[  601.641679][T17185] /dev/rnullb0: Can't open blockdev
[  602.279796][ T5850] Bluetooth: hci3: command 0xfc11 tx timeout
[  602.291391][ T5171] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  602.426043][T17190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.479948][T17190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.523528][T17190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2950'.
[  602.549591][T17190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2950'.
[  602.568937][T17190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2950'.
[  602.975108][T17204] /dev/rnullb0: Can't open blockdev
[  603.081336][ T8314] Bluetooth: (null): Invalid header checksum
[  603.129984][ T8314] Bluetooth: (null): Invalid header checksum
[  603.192078][ T8314] Bluetooth: (null): Invalid header checksum
[  603.299101][ T8314] Bluetooth: (null): Invalid header checksum
[  603.403543][ T8314] Bluetooth: (null): Invalid header checksum
[  603.517915][   T13] Bluetooth: (null): Invalid header checksum
[  603.621061][   T12] Bluetooth: (null): Invalid header checksum
[  603.742187][   T13] Bluetooth: (null): Invalid header checksum
[  603.840812][   T13] Bluetooth: (null): Invalid header checksum
[  603.953139][   T13] Bluetooth: (null): Invalid header checksum
[  604.062190][T15442] Bluetooth: (null): Invalid header checksum
[  604.172621][   T13] Bluetooth: (null): Invalid header checksum
[  604.211204][   T10] usb 7-1: new low-speed USB device number 23 using dummy_hcd
[  604.282111][   T12] Bluetooth: (null): Invalid header checksum
[  604.349576][   T10] usb 7-1: device descriptor read/64, error -71
[  604.393048][ T8313] Bluetooth: (null): Invalid header checksum
[  604.504620][ T8313] Bluetooth: (null): Invalid header checksum
[  604.591289][   T10] usb 7-1: new low-speed USB device number 24 using dummy_hcd
[  604.612662][ T8313] Bluetooth: (null): Invalid header checksum
[  604.722122][   T13] Bluetooth: (null): Invalid header checksum
[  604.741937][   T10] usb 7-1: device descriptor read/64, error -71
[  604.831510][   T12] Bluetooth: (null): Invalid header checksum
[  604.852827][   T10] usb usb7-port1: attempt power cycle
[  604.942039][ T8313] Bluetooth: (null): Invalid header checksum
[  605.054237][ T8313] Bluetooth: (null): Invalid header checksum
[  605.161353][ T8313] Bluetooth: (null): Invalid header checksum
[  605.199534][   T10] usb 7-1: new low-speed USB device number 25 using dummy_hcd
[  605.230278][   T10] usb 7-1: device descriptor read/8, error -71
[  605.271423][T15442] Bluetooth: (null): Invalid header checksum
[  605.382105][T15442] Bluetooth: (null): Invalid header checksum
[  605.489639][   T10] usb 7-1: new low-speed USB device number 26 using dummy_hcd
[  605.503520][T15442] Bluetooth: (null): Invalid header checksum
[  605.520273][   T10] usb 7-1: device descriptor read/8, error -71
[  605.603278][T15442] Bluetooth: (null): Invalid header checksum
[  605.639981][   T10] usb usb7-port1: unable to enumerate USB device
[  605.717936][ T8313] Bluetooth: (null): Invalid header checksum
[  605.826849][T15442] Bluetooth: (null): Invalid header checksum
[  605.934197][   T13] Bluetooth: (null): Invalid header checksum
[  606.161422][T17215] fuse: Bad value for 'user_id'
[  606.166358][T17215] fuse: Bad value for 'user_id'
[  606.261998][T17217] /dev/rnullb0: Can't open blockdev
[  606.268677][T17217] fuse: Bad value for 'user_id'
[  606.275224][T17217] fuse: Bad value for 'user_id'
[  606.379714][T14806] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  606.559951][T14806] usb 7-1: config 1 interface 0 altsetting 80 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  606.574973][T14806] usb 7-1: config 1 interface 0 altsetting 80 endpoint 0x2 has an invalid bInterval 64, changing to 10
[  606.605586][T14806] usb 7-1: config 1 interface 0 has no altsetting 0
[  606.631214][T14806] usb 7-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40
[  606.647775][T14806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.664349][T14806] usb 7-1: Product: చ
[  606.668555][T14806] usb 7-1: Manufacturer: 靿놽榟ࣖ㏜䊸尤ꞅ嚃騦鑖Ο랈캐⥧﫵ꭨ䧛∡倐뻘폯䌍聼ႛ誠䋎郤ꅎ잉웠䗬麗У㮃侻ࣲ㺰욕䳇逓訊控賢᮶窗ᎁ풲鲷꯯죐莑⭲굗唍찯䖴챃掀ﲠԀ퇒핇鼽⩊髚ᙢ␾ႜ뫁篁ۚ咬臑
[  606.695790][T14806] usb 7-1: SerialNumber: syz
[  606.947989][T14806] usbhid 7-1:1.0: can't add hid device: -71
[  606.960227][T14806] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  606.984577][T14806] usb 7-1: USB disconnect, device number 27
[  607.595820][T17230] ocfs2_dlmfs: Unknown parameter '/dev/rnullb0'
[  607.607144][T17232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2960'.
[  607.630463][T17232] /dev/rnullb0: Can't open blockdev
[  607.635501][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2962'.
[  607.780600][T17239] /dev/rnullb0: Can't open blockdev
[  607.869600][  T983] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  608.060171][  T983] usb 7-1: Using ep0 maxpacket: 32
[  608.075224][  T983] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  608.105519][  T983] usb 7-1: config 0 has no interface number 0
[  608.119936][  T983] usb 7-1: config 0 interface 85 has no altsetting 0
[  608.152728][  T983] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  608.182268][  T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.208643][  T983] usb 7-1: Product: syz
[  608.220073][  T983] usb 7-1: Manufacturer: syz
[  608.224719][  T983] usb 7-1: SerialNumber: syz
[  608.265833][  T983] usb 7-1: config 0 descriptor??
[  608.332844][  T983] appletouch 7-1:0.85: Could not find int-in endpoint
[  608.343884][  T983] appletouch 7-1:0.85: probe with driver appletouch failed with error -5
[  608.354069][  T983] usbhid 7-1:0.85: couldn't find an input interrupt endpoint
[  608.543636][T17234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.582489][T17234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.627656][  T983] usb 7-1: USB disconnect, device number 28
[  608.962717][T17254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.977517][T17254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.033632][T17257] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  609.047281][T17257] /dev/rnullb0: Can't open blockdev
[  609.749645][ T5917] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  609.927774][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  609.947364][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  609.962614][ T5917] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  609.976850][ T5917] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  609.999139][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.025764][ T5917] usb 7-1: config 0 descriptor??
[  610.297501][T17276] /dev/rnullb0: Can't open blockdev
[  610.578623][ T5917] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  610.622780][ T5917] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  610.646847][ T5917] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  610.662320][ T5917] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  610.697475][ T5917] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  610.967771][T17280] /dev/rnullb0: Can't open blockdev
[  611.558269][T17289] /dev/rnullb0: Can't open blockdev
[  611.658511][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2981'.
[  611.786766][T17296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.810263][T17296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.902459][T17298] ./file0: Can't lookup blockdev
[  612.339568][ T5917] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  612.512782][ T5917] usb 9-1: config 0 has an invalid interface number: 84 but max is 0
[  612.538972][ T5917] usb 9-1: config 0 has an invalid interface number: 66 but max is 0
[  612.559549][ T5917] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  612.568586][ T5917] usb 9-1: config 0 has no interface number 0
[  612.583235][ T5917] usb 9-1: config 0 has no interface number 1
[  612.589412][ T5917] usb 9-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[  612.626438][ T5917] usb 9-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  612.661392][ T5917] usb 9-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[  612.691277][ T5917] usb 9-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[  612.717808][T14806] usb 7-1: USB disconnect, device number 29
[  612.720361][ T5917] usb 9-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2
[  612.755745][ T5917] usb 9-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86
[  612.787075][ T5917] usb 9-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid wMaxPacketSize 0
[  612.806210][ T5917] usb 9-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 0
[  612.817738][ T5917] usb 9-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[  612.818428][T17305] /dev/rnullb0: Can't open blockdev
[  612.835669][ T5917] usb 9-1: config 0 interface 66 has no altsetting 0
[  612.890529][ T5917] usb 9-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  612.932831][ T5917] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.960610][ T5917] usb 9-1: Product: syz
[  612.964901][ T5917] usb 9-1: Manufacturer: syz
[  612.983507][ T5917] usb 9-1: SerialNumber: syz
[  612.997773][T17314] /dev/rnullb0: Can't open blockdev
[  613.020539][ T5917] usb 9-1: config 0 descriptor??
[  613.032089][ T5917] ljca 9-1:0.84: bulk endpoints not found
[  613.241903][T17303] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  613.412786][T17320] /dev/rnullb0: Can't open blockdev
[  613.435332][T17322] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2986'.
[  614.480551][  T983] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[  614.824320][  T983] usb 7-1: unable to get BOS descriptor or descriptor too short
[  614.870317][  T983] usb 7-1: not running at top speed; connect to a high speed hub
[  614.896280][  T983] usb 7-1: config 3 has an invalid interface number: 106 but max is 0
[  614.959573][  T983] usb 7-1: config 3 has no interface number 0
[  614.977101][  T983] usb 7-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64
[  614.992125][  T983] usb 7-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  615.010884][  T983] usb 7-1: config 3 interface 106 has no altsetting 0
[  615.024743][  T983] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a
[  615.049543][  T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.069314][  T983] usb 7-1: Product: syz
[  615.080148][  T983] usb 7-1: Manufacturer: syz
[  615.084844][  T983] usb 7-1: SerialNumber: syz
[  615.107539][T17331] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  615.137423][T17331] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  615.145525][T17343] /dev/rnullb0: Can't open blockdev
[  615.508266][  T983] kobil_sct 7-1:3.106: KOBIL USB smart card terminal converter detected
[  615.581804][  T983] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  615.626098][  T983] usb 7-1: USB disconnect, device number 30
[  615.665499][  T983] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  615.690476][T17357] /dev/rnullb0: Can't open blockdev
[  615.714261][  T983] kobil_sct 7-1:3.106: device disconnected
[  616.053019][T17353] /dev/rnullb0: Can't open blockdev
[  616.073527][T17363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.087512][T17365] /dev/rnullb0: Can't open blockdev
[  616.151672][T17363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.375270][ T5171] Bluetooth: hci0: command 0x0406 tx timeout
[  616.840271][   T31] INFO: task syz.2.2367:14436 blocked for more than 143 seconds.
[  616.868125][   T31]       Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
[  616.909788][   T31]       Blocked by coredump.
[  616.914752][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  616.973443][   T31] task:syz.2.2367      state:D stack:26920 pid:14436 tgid:14436 ppid:13888  task_flags:0x40044c flags:0x00004004
[  617.011277][T17377] /dev/rnullb0: Can't open blockdev
[  617.027196][   T31] Call Trace:
[  617.039509][   T31]  <TASK>
[  617.042549][   T31]  __schedule+0x1737/0x4d30
[  617.047139][   T31]  ? __lock_acquire+0xab9/0xd20
[  617.086776][   T31]  ? schedule+0x165/0x360
[  617.091361][   T31]  ? __lock_acquire+0xab9/0xd20
[  617.096287][   T31]  ? __pfx___schedule+0x10/0x10
[  617.116592][T17380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.117549][   T31]  ? schedule+0x91/0x360
[  617.149526][   T31]  schedule+0x165/0x360
[  617.153893][   T31]  schedule_preempt_disabled+0x13/0x30
[  617.158521][T17380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.166739][   T31]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  617.198575][T17380] ieee802154 phy0 wpan0: encryption failed: -22
[  617.199590][   T31]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  617.224095][T17381] /dev/rnullb0: Can't open blockdev
[  617.229946][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  617.246404][   T31]  ? exit_mm+0xcc/0x2c0
[  617.259575][   T31]  ? __pfx_mm_release+0x10/0x10
[  617.264534][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  617.292517][   T31]  down_read+0x98/0x2e0
[  617.296801][   T31]  exit_mm+0xcc/0x2c0
[  617.322959][   T31]  ? __pfx_exit_mm+0x10/0x10
[  617.327688][   T31]  ? rcu_is_watching+0x15/0xb0
[  617.359544][   T31]  do_exit+0x648/0x2300
[  617.363891][   T31]  ? do_raw_spin_lock+0x121/0x290
[  617.369035][   T31]  ? __pfx_do_exit+0x10/0x10
[  617.399576][   T31]  do_group_exit+0x21c/0x2d0
[  617.404292][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  617.419517][   T31]  get_signal+0x1286/0x1340
[  617.429543][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  617.445638][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  617.465860][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  617.479595][   T31]  exit_to_user_mode_loop+0x75/0x110
[  617.485327][   T31]  do_syscall_64+0x2bd/0x3b0
[  617.499526][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  617.511281][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.529524][   T31]  ? clear_bhb_loop+0x60/0xb0
[  617.534323][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.559558][   T31] RIP: 0033:0x7fab8558e9e3
[  617.564064][   T31] RSP: 002b:00007ffe853f4fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  617.599497][   T31] RAX: fffffffffffffffc RBX: 00007fab83bf76c0 RCX: 00007fab8558e9e3
[  617.617758][   T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
[  617.648114][   T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  617.669506][   T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe853f5120
[  617.687782][   T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  617.718450][   T31]  </TASK>
[  617.722291][   T31] 
[  617.722291][   T31] Showing all locks held in the system:
[  617.741436][   T31] 1 lock held by khungtaskd/31:
[  617.760747][   T31]  #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  617.792065][   T31] 2 locks held by kworker/u8:5/62:
[  617.804299][   T31]  #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  617.829739][   T31]  #1: ffff8880b8724008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  617.854305][   T31] 2 locks held by getty/5617:
[  617.865983][   T31]  #0: ffff888033e330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  617.878162][ T5917] ljca 9-1:0.66: submit rx urb failed: -90
[  617.891975][ T5917] ljca 9-1:0.66: probe with driver ljca failed with error -90
[  617.909582][   T31]  #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  617.935961][ T5917] usb 9-1: USB disconnect, device number 13
[  617.944474][   T31] 3 locks held by kworker/0:3/5917:
[  617.961851][   T31] 1 lock held by udevd/6105:
[  617.975946][   T31]  #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  618.001419][   T31] 1 lock held by syz.2.2367/14436:
[  618.013455][   T31]  #0: ffff88806a481760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  618.035244][   T31] 1 lock held by syz.2.2367/14437:
[  618.048458][   T31] 2 locks held by syz.6.2992/17323:
[  618.059644][   T31] 2 locks held by syz.6.3009/17379:
[  618.072078][   T31]  #0: ffffffff9a4490b8 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x9dc/0x1130
[  618.092628][   T31]  #1: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  618.116631][   T31] 
[  618.136956][   T31] =============================================
[  618.136956][   T31] 
[  618.179230][   T31] NMI backtrace for cpu 0
[  618.179252][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  618.179276][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  618.179289][   T31] Call Trace:
[  618.179298][   T31]  <TASK>
[  618.179307][   T31]  dump_stack_lvl+0x189/0x250
[  618.179344][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  618.179374][   T31]  ? __pfx__printk+0x10/0x10
[  618.179450][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  618.179479][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  618.179507][   T31]  ? __pfx__printk+0x10/0x10
[  618.179538][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  618.179566][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  618.179594][   T31]  watchdog+0xf93/0xfe0
[  618.179621][   T31]  ? watchdog+0x1de/0xfe0
[  618.179647][   T31]  kthread+0x70e/0x8a0
[  618.179679][   T31]  ? __pfx_watchdog+0x10/0x10
[  618.179699][   T31]  ? __pfx_kthread+0x10/0x10
[  618.179730][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  618.179756][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  618.179783][   T31]  ? __pfx_kthread+0x10/0x10
[  618.179813][   T31]  ret_from_fork+0x3f9/0x770
[  618.179841][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  618.179872][   T31]  ? __switch_to_asm+0x39/0x70
[  618.179889][   T31]  ? __switch_to_asm+0x33/0x70
[  618.179905][   T31]  ? __pfx_kthread+0x10/0x10
[  618.179935][   T31]  ret_from_fork_asm+0x1a/0x30
[  618.179969][   T31]  </TASK>
[  618.322318][    C0] vkms_vblank_simulate: vblank timer overrun
[  618.329732][   T31] Sending NMI from CPU 0 to CPUs 1:
[  618.335923][    C1] NMI backtrace for cpu 1
[  618.335943][    C1] CPU: 1 UID: 0 PID: 17323 Comm: syz.6.2992 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  618.335968][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  618.335981][    C1] RIP: 0010:clear_page_erms+0xb/0x20
[  618.336008][    C1] Code: 48 8d 7f 40 75 d9 90 e9 53 1c 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 00 10 00 00 31 c0 <f3> aa c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  618.336026][    C1] RSP: 0018:ffffc9000aa8e430 EFLAGS: 00010246
[  618.336043][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000001000
[  618.336061][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888040ee9000
[  618.336074][    C1] RBP: 1ffffffff1bd168f R08: ffffffff8fe3cf37 R09: 0000000000000000
[  618.336088][    C1] R10: ffffed10081dd200 R11: fffffbfff1fc79e7 R12: fffa800040ee9000
[  618.336103][    C1] R13: fffa800000000000 R14: 1ffffffff1bd168d R15: 0000000000000001
[  618.336117][    C1] FS:  00007f2b017f66c0(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000
[  618.336135][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  618.336150][    C1] CR2: 000000110c401360 CR3: 0000000062768000 CR4: 00000000003526f0
[  618.336167][    C1] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000
[  618.336179][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  618.336192][    C1] Call Trace:
[  618.336200][    C1]  <TASK>
[  618.336208][    C1]  post_alloc_hook+0x1bd/0x2a0
[  618.336236][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  618.336292][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  618.336321][    C1]  ? prepare_alloc_pages+0x213/0x610
[  618.336351][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  618.336380][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  618.336428][    C1]  ? policy_nodemask+0x27c/0x720
[  618.336454][    C1]  alloc_pages_mpol+0x232/0x4a0
[  618.336479][    C1]  folio_alloc_mpol_noprof+0x39/0x70
[  618.336502][    C1]  shmem_alloc_and_add_folio+0x447/0xf60
[  618.336527][    C1]  ? filemap_get_entry+0xad/0x2f0
[  618.336552][    C1]  ? filemap_get_entry+0xad/0x2f0
[  618.336576][    C1]  ? filemap_get_entry+0xad/0x2f0
[  618.336601][    C1]  ? filemap_get_entry+0x28f/0x2f0
[  618.336628][    C1]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  618.336653][    C1]  ? shmem_allowable_huge_orders+0x1f8/0x420
[  618.336677][    C1]  shmem_get_folio_gfp+0x59d/0x1660
[  618.336703][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  618.336738][    C1]  shmem_write_begin+0xf7/0x2b0
[  618.336763][    C1]  generic_perform_write+0x2c5/0x900
[  618.336801][    C1]  ? __pfx_generic_perform_write+0x10/0x10
[  618.336830][    C1]  ? down_write+0x162/0x1f0
[  618.336853][    C1]  ? file_update_time+0x2da/0x490
[  618.336877][    C1]  shmem_file_write_iter+0xf8/0x120
[  618.336898][    C1]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  618.336922][    C1]  __kernel_write_iter+0x393/0x860
[  618.336948][    C1]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  618.336972][    C1]  ? __pfx___kernel_write_iter+0x10/0x10
[  618.336995][    C1]  ? __up_read+0x280/0x680
[  618.337026][    C1]  ? __asan_memset+0x22/0x50
[  618.337057][    C1]  ? iov_iter_bvec+0xb8/0x180
[  618.337080][    C1]  dump_user_range+0x8a0/0xc90
[  618.337118][    C1]  ? __pfx_dump_user_range+0x10/0x10
[  618.337146][    C1]  ? elf_coredump_extra_notes_write+0x42e/0x4b0
[  618.337174][    C1]  ? __pfx_elf_coredump_extra_notes_write+0x10/0x10
[  618.337200][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  618.337223][    C1]  ? dump_emit+0xa6/0xe0
[  618.337248][    C1]  ? elf_core_dump+0x2cfc/0x3990
[  618.337279][    C1]  elf_core_dump+0x3378/0x3990
[  618.337319][    C1]  ? __pfx_elf_core_dump+0x10/0x10
[  618.337349][    C1]  ? kasan_save_track+0x4f/0x80
[  618.337366][    C1]  ? kasan_save_track+0x3e/0x80
[  618.337383][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  618.337409][    C1]  ? __kvmalloc_node_noprof+0x30d/0x5f0
[  618.337430][    C1]  ? coredump_write+0x340/0x1900
[  618.337456][    C1]  ? vfs_coredump+0x1a4b/0x2ab0
[  618.337481][    C1]  ? get_signal+0x1109/0x1340
[  618.337502][    C1]  ? arch_do_signal_or_restart+0x9a/0x750
[  618.337524][    C1]  ? irqentry_exit_to_user_mode+0x81/0x120
[  618.337551][    C1]  ? exc_page_fault+0x9f/0xf0
[  618.337577][    C1]  ? asm_exc_page_fault+0x26/0x30
[  618.337623][    C1]  ? 0xffffffffff600000
[  618.337643][    C1]  ? up_write+0x1c4/0x420
[  618.337672][    C1]  coredump_write+0x1169/0x1900
[  618.337711][    C1]  ? __pfx_coredump_write+0x10/0x10
[  618.337742][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  618.337775][    C1]  ? unshare_files+0xfd/0x140
[  618.337805][    C1]  vfs_coredump+0x1a4b/0x2ab0
[  618.337844][    C1]  ? __pfx_vfs_coredump+0x10/0x10
[  618.337873][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  618.337901][    C1]  ? __lock_acquire+0xab9/0xd20
[  618.337932][    C1]  ? __lock_acquire+0xab9/0xd20
[  618.337958][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  618.337992][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  618.338018][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  618.338042][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  618.338067][    C1]  ? kernel_text_address+0xa5/0xe0
[  618.338087][    C1]  ? __kernel_text_address+0xd/0x40
[  618.338106][    C1]  ? unwind_get_return_address+0x4d/0x90
[  618.338133][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  618.338164][    C1]  ? arch_stack_walk+0xfc/0x150
[  618.338203][    C1]  ? stack_depot_save_flags+0x40/0x900
[  618.338235][    C1]  ? kasan_save_track+0x4f/0x80
[  618.338254][    C1]  ? kasan_save_track+0x3e/0x80
[  618.338272][    C1]  ? kasan_save_free_info+0x46/0x50
[  618.338299][    C1]  ? __kasan_slab_free+0x62/0x70
[  618.338320][    C1]  ? kmem_cache_free+0x18f/0x400
[  618.338341][    C1]  ? get_signal+0xa4c/0x1340
[  618.338362][    C1]  ? arch_do_signal_or_restart+0x9a/0x750
[  618.338391][    C1]  ? irqentry_exit_to_user_mode+0x81/0x120
[  618.338420][    C1]  ? exc_page_fault+0x9f/0xf0
[  618.338445][    C1]  ? asm_exc_page_fault+0x26/0x30
[  618.338495][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  618.338521][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  618.338550][    C1]  get_signal+0x1109/0x1340
[  618.338585][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  618.338611][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  618.338632][    C1]  ? __bad_area_nosemaphore+0x3fb/0x780
[  618.338663][    C1]  ? local_irq_enable_exit_to_user+0x5/0x10
[  618.338688][    C1]  irqentry_exit_to_user_mode+0x81/0x120
[  618.338717][    C1]  exc_page_fault+0x9f/0xf0
[  618.338745][    C1]  asm_exc_page_fault+0x26/0x30
[  618.338762][    C1] RIP: 0033:0xf
[  618.338775][    C1] Code: Unable to access opcode bytes at 0xffffffffffffffe5.
[  618.338787][    C1] RSP: 002b:0000200000000058 EFLAGS: 00010217
[  618.338803][    C1] RAX: 0000000000000000 RBX: 00007f2b03bb5fa0 RCX: 00007f2b0398e9a9
[  618.338817][    C1] RDX: 0000200000000080 RSI: 0000200000000050 RDI: 0000000000808600
[  618.338831][    C1] RBP: 00007f2b03a10d69 R08: 0000200000000100 R09: 0000200000000100
[  618.338845][    C1] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000
[  618.338857][    C1] R13: 0000000000000000 R14: 00007f2b03bb5fa0 R15: 00007ffff2b5a708
[  618.338881][    C1]  </TASK>
[  618.526369][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  618.526411][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  618.526440][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  618.526456][   T31] Call Trace:
[  618.526466][   T31]  <TASK>
[  618.526477][   T31]  dump_stack_lvl+0x99/0x250
[  618.526553][   T31]  ? __asan_memcpy+0x40/0x70
[  618.526603][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  618.526647][   T31]  ? __pfx__printk+0x10/0x10
[  618.526705][   T31]  vpanic+0x281/0x750
[  618.526741][   T31]  ? __pfx_vpanic+0x10/0x10
[  618.526767][   T31]  ? preempt_schedule+0xae/0xc0
[  618.526801][   T31]  ? preempt_schedule_common+0x83/0xd0
[  618.526841][   T31]  panic+0xb9/0xc0
[  618.526868][   T31]  ? __pfx_panic+0x10/0x10
[  618.526896][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  618.526931][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  618.526971][   T31]  watchdog+0xfd2/0xfe0
[  618.527004][   T31]  ? watchdog+0x1de/0xfe0
[  618.527055][   T31]  kthread+0x70e/0x8a0
[  618.527100][   T31]  ? __pfx_watchdog+0x10/0x10
[  618.527138][   T31]  ? __pfx_kthread+0x10/0x10
[  618.527199][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  618.527244][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  618.527284][   T31]  ? __pfx_kthread+0x10/0x10
[  618.527325][   T31]  ret_from_fork+0x3f9/0x770
[  618.527359][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  618.527395][   T31]  ? __switch_to_asm+0x39/0x70
[  618.527415][   T31]  ? __switch_to_asm+0x33/0x70
[  618.527435][   T31]  ? __pfx_kthread+0x10/0x10
[  618.527470][   T31]  ret_from_fork_asm+0x1a/0x30
[  618.527511][   T31]  </TASK>
[  619.178151][   T31] Kernel Offset: disabled
[  619.182477][   T31] Rebooting in 86400 seconds..