last executing test programs:

1m43.361200779s ago: executing program 3 (id=3564):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi3\x00', 0x8000, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @rand_addr=0x64010101}}, {{0x2, 0x0, @multicast2}}}, 0x108)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/222, &(0x7f0000000180)=0xde)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x0, 0xbe, 0x86, 0x6d, 0x1}}]}}]}}, 0x0)
ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000001c0)={0x8, 0x30000, 0x4, 0x1, 0x20, 0x5, 0x1, 0x7f, 0xffffffff, 0x5, 0x80, 0x1c, 0x0, 0x0, 0x0})

1m40.326562159s ago: executing program 3 (id=3578):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4)
write$tun(r0, &(0x7f0000000180)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x17}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @timestamp={0xd, 0x0, 0x0, 0x3a, 0x1, 0x8f8b, 0x80000000, 0x7}}}, 0x36)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0)

1m40.169804179s ago: executing program 3 (id=3579):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
setresuid(0xee01, 0x0, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x3)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0xc8}, 0x1, 0x0, 0x0, 0x4811}, 0x4000450)
recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000001c0)=""/130, 0x82, 0x40, &(0x7f0000000280)=@can, 0x80)
creat(&(0x7f0000000100)='./file0\x00', 0xac)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

1m40.034566869s ago: executing program 3 (id=3581):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_QUOTAON(r0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000040)={0x0})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGETCMAP(r2, 0x4605, &(0x7f00000001c0)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100), 0x0, 0x0})
fsync(r2)

1m39.983039676s ago: executing program 3 (id=3583):
mkdir(0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000005c0)={0x0, 0xfffffffffffffff7, 0x6, 0xbe, 0x4000000204, 0x80000001, 0x48cd, 0x9, 0x800000de})

1m39.625340206s ago: executing program 3 (id=3587):
syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000020c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x4f2, 0x1421, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xc0, 0xa, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x401, 0x7, 0x1, {0x22, 0xc02}}, {{{0x9, 0x5, 0x81, 0x3, 0x610, 0x0, 0x0, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x10, 0x53, 0xe}}]}}}]}}]}}, &(0x7f00000022c0)={0xa, &(0x7f0000002100)={0xa, 0x6, 0x200, 0x7c, 0x0, 0xed, 0x20}, 0x5f, &(0x7f0000002140)={0x5, 0xf, 0x5f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x2, 0x9}, @generic={0x1c, 0x10, 0x4, "456f2890bad02441bce85b4363d3f58a61446900eecedcdb8e"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x3, 0xf00f, 0x98, [0x3f00, 0xffc0cf, 0xff, 0xc00f, 0xffff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a14a46f76bd58b71c0f65496cfa46baf"}]}, 0x2, [{0x84, &(0x7f00000021c0)=@string={0x84, 0x3, "84d4a56339f450f7d276014013be68d00f8cb085e046ce1018e0889a259f19723650a745fd25184ff935f52ecc1196c87dec5b78c0f1ec8495cfbdf63483cb0d4ac190da96b9d36771fb032cb62020d3d3603b5cf0616f8600ee757a71901a91ff01ace38a99871fab3327166cb71c69c9235ef58d28b70b6153c9c413da54760919"}}, {0xb, &(0x7f0000002280)=@string={0xb, 0x3, "2336187b49854c7572"}}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0x2c000080)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x142000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000280)=""/193, 0xc1}], 0x3, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000000480), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/185, 0xb9}, {&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000000640)=""/113, 0x71}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/158, 0x9e}, {&(0x7f0000000940)=""/96, 0x60}, {&(0x7f00000009c0)=""/105, 0x69}], 0x4, &(0x7f0000000a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000bc0)=""/41, 0x29}, {&(0x7f0000000c00)=""/204, 0xcc}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/109, 0x6d}], 0x4, &(0x7f0000001dc0)=[@rights={{0x18, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x4, 0x10002, &(0x7f0000001f80)={0x77359400})
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001fc0)="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")
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0)
setns(r0, 0x20000)

1m39.325076838s ago: executing program 32 (id=3587):
syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000020c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x4f2, 0x1421, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xc0, 0xa, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x401, 0x7, 0x1, {0x22, 0xc02}}, {{{0x9, 0x5, 0x81, 0x3, 0x610, 0x0, 0x0, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x10, 0x53, 0xe}}]}}}]}}]}}, &(0x7f00000022c0)={0xa, &(0x7f0000002100)={0xa, 0x6, 0x200, 0x7c, 0x0, 0xed, 0x20}, 0x5f, &(0x7f0000002140)={0x5, 0xf, 0x5f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x2, 0x9}, @generic={0x1c, 0x10, 0x4, "456f2890bad02441bce85b4363d3f58a61446900eecedcdb8e"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x3, 0xf00f, 0x98, [0x3f00, 0xffc0cf, 0xff, 0xc00f, 0xffff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a14a46f76bd58b71c0f65496cfa46baf"}]}, 0x2, [{0x84, &(0x7f00000021c0)=@string={0x84, 0x3, "84d4a56339f450f7d276014013be68d00f8cb085e046ce1018e0889a259f19723650a745fd25184ff935f52ecc1196c87dec5b78c0f1ec8495cfbdf63483cb0d4ac190da96b9d36771fb032cb62020d3d3603b5cf0616f8600ee757a71901a91ff01ace38a99871fab3327166cb71c69c9235ef58d28b70b6153c9c413da54760919"}}, {0xb, &(0x7f0000002280)=@string={0xb, 0x3, "2336187b49854c7572"}}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0x2c000080)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x142000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000280)=""/193, 0xc1}], 0x3, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000000480), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/185, 0xb9}, {&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000000640)=""/113, 0x71}], 0x3, &(0x7f0000000700)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/158, 0x9e}, {&(0x7f0000000940)=""/96, 0x60}, {&(0x7f00000009c0)=""/105, 0x69}], 0x4, &(0x7f0000000a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000bc0)=""/41, 0x29}, {&(0x7f0000000c00)=""/204, 0xcc}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/109, 0x6d}], 0x4, &(0x7f0000001dc0)=[@rights={{0x18, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x4, 0x10002, &(0x7f0000001f80)={0x77359400})
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001fc0)="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")
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0)
setns(r0, 0x20000)

8.087531724s ago: executing program 2 (id=4152):
mount(&(0x7f0000000080)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x3}}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x100087, 0x100000, {r0}}, 0x20) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="c29a1a2231ad88eb238a81"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r4) (async)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1, 0xfcff}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x1e, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async)
r11 = fsmount(r6, 0x0, 0x0)
fchdir(r11) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x26)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r12, 0x2, 0x0)
getdents64(r12, 0x0, 0x22)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') (async)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x30, r5, 0x64bc7c9305072889, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38800000", @ANYRES16=r5, @ANYBLOB="040025bd7000fbdbdf250100000008000400010000001400050000000000000000000000ffffe000000208000800ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

7.938247266s ago: executing program 2 (id=4153):
pipe2(&(0x7f0000000200)={<r0=>0x0, <r1=>0x0}, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x40001043, r0, 0x0)
vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000100)="2bbc", 0x2}], 0x1, 0x1) (async)
sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000300)=0x10000) (async)
write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xceaf, 0x44008002, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x80, 0x800}}, 0x50)
mknod(&(0x7f00000002c0)='./file0\x00', 0x1000, 0x7)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0)
pwritev(r2, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) (async)
syz_usb_connect$uac1(0x3, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xf7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x3, 0x1, 0x7, 0x30, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0xf, 0xfc, 0xde, {0x7, 0x25, 0x1, 0x2, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x3, 0x81, 0xd, "", "5282ff"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf2, 0x6, 0x8, {0x7, 0x25, 0x1, 0x80, 0x40, 0x2000}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x1, 0xd, 0xa, 0x10, 0x3}, 0x11b, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x2, [{0x29, &(0x7f0000000200)=@string={0x29, 0x3, "00048049045779058614d7772c358f5ed22a72fb58fa26cd4f93ad3f9a6f43a8d16e858a0da25c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}]})

5.913095141s ago: executing program 0 (id=4167):
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "164d4590abfa9841113cd81c163319599b38f8862d4ad50415d9aad73c5f6e8fc5ddbee207a133ad142d5374142a009f1102f7a8f70ba4a2c9006efa6ff2b52d", 0x2f}, 0x48, 0xfffffffffffffffd)
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
syz_usb_connect(0x2, 0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="120100009b038b08e80430ffd1a601020301090222000100000000090400000129fddd0509d778"], 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x3000, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, 0x20, 0x0, 0x4, 0x10}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x6, 0x2}, {0xdddd1000, 0x5000, 0x3, 0x1, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x3000, 0xeeeed000, 0x0, 0x0, 0x2}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x75}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x2}, {0x10000, 0x5000, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x10}, {0x1000}, {}, 0xfdfcffdf, 0x0, 0x2000, 0x302034, 0x0, 0x500, 0x0, [0x0, 0x0, 0x1, 0xfffffffffffffffd]})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002900)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x880)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)

4.851876247s ago: executing program 2 (id=4169):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x29, 0x10, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) (async)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) (async)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0)
pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe)

3.099341335s ago: executing program 4 (id=4175):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600))
r1 = fsopen(0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000200))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
syz_open_dev$vim2m(&(0x7f0000000300), 0x100000001, 0x2) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0x100000001, 0x2)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
preadv(r3, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/198, 0xc6}], 0x1, 0x612, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x5480c1, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x5480c1, 0x0)
socket$netlink(0x10, 0x3, 0xa)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f00000010c0))
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x40, 0x8002, 0x6, 0x401, 0x7, 0x3, 0xdd54}, 0x0)
creat(0x0, 0x4)
dup(0xffffffffffffffff) (async)
dup(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)

2.901082084s ago: executing program 4 (id=4176):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) (async)
futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x400020000000a, 0x6}], 0x1, 0x0, 0x0, 0x2) (async)
r2 = add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="01000000020000000000006bb55a06630bf7c045f94cd97703942b", 0x1b, 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) (async)
r3 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)={0x3, 0x0, @auto=[0x40, 0x1b, 0x1e]}, 0xb, r2)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TCFLSH(r4, 0x400455c8, 0x1) (async)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) (async, rerun: 64)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x7ff, <r5=>0xffffffffffffffff, 0x3}) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000000)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x22) (async, rerun: 32)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r8, 0x128, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8001}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4044010)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r7, r7, 0x0, 0x7ffff000)

2.891463612s ago: executing program 0 (id=4177):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f000075a000/0xb000)=nil, 0xb000)
munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
munmap(&(0x7f0000ee4000/0x1000)=nil, 0x1000)
munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000eb0000/0x3000)=nil, 0x3000)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xca5b, 0x1, 0x1, 0x14c}, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

2.853566907s ago: executing program 4 (id=4178):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = dup3(r0, r0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x183081, 0x0)
ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000380)=""/180)
write$vga_arbiter(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='unlock i'], 0xa)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @loopback}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5, 0x8}, 0x8)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x51b2a000)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007)

2.749268114s ago: executing program 0 (id=4179):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x11, r0, 0xf648e000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x73e37000)

2.667734147s ago: executing program 0 (id=4182):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600))
fsopen(0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c8})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000300)={[0xffffffffffffffff, 0x4, 0xfffffffffffffffd, 0x4, 0x1000, 0x7, 0x2, 0x4, 0x80, 0x1, 0x3, 0xffffffffffffff80, 0x5, 0x30000, 0x7, 0x1150], 0x0, 0x80})
dup(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$IPC_INFO(r2, 0x3, 0x0)
clock_gettime(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

2.577294628s ago: executing program 4 (id=4183):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
exit(0xffff) (async)
fchdir(r0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x109080, 0x9f) (async)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0)

2.558266679s ago: executing program 1 (id=4184):
r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x1, 0x2)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001800)={0xb, @sdr={0x59555956, 0xfffffffe}})
r1 = socket$kcm(0x10, 0x400000002, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = fanotify_init(0x10, 0x40000)
fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100))
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000180)={0x8, 0x7fff, 0x0, 0x100000000, 0x80000001, 0xfffffffa})
r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r4, 0x7b3, &(0x7f00000001c0))
setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
close_range(r5, r1, 0x0)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003540)=""/4093, 0xffd}, {&(0x7f0000000840)=""/4080, 0xff0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f0000000340)=""/181, 0xb5}], 0x7}, 0x12140)

1.577787544s ago: executing program 0 (id=4185):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa80, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
shutdown(r1, 0x2)
recvmmsg$unix(r1, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000000280)=""/51, 0x33}], 0x1}}], 0x1, 0x101, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x12, r0, 0x910d0000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mlock(&(0x7f0000904000/0x1000)=nil, 0x1000)
mlock(&(0x7f00007c0000/0x1000)=nil, 0x1000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000000c0)={'ip_vti0\x00', <r5=>0x0, 0x20, 0x8000, 0x9, 0x8000, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast2, @local, {[@generic={0x82, 0x8, "7533a4bd42f6"}]}}}}})
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={<r6=>0x0, @dev, @broadcast}, &(0x7f0000000180)=0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
r9 = add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$search(0xa, r9, &(0x7f0000000280)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x2}, r9)
add_key$user(&(0x7f0000000280), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="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", 0xfa, r9)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361dea373"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x120, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x805}, 0x4000)

1.575165427s ago: executing program 4 (id=4186):
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x4, 0x14, 0x0, <r2=>0x0}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x6400, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000010c0)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={r3, 0x7f}, &(0x7f00000000c0)=0x8)
connect$802154_dgram(r4, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f00000001c0))

1.50960947s ago: executing program 1 (id=4187):
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80101, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\x00', 0x0, r1) (async, rerun: 32)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0x120) (rerun: 32)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='./file0\x00', r2) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00', &(0x7f00000001c0)='/dev/snapshot\x00', 0x0) (async)
fallocate(r2, 0x54, 0x8, 0x3)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000002c0)={&(0x7f0000000200)=""/142, 0x8e}) (async)
r3 = accept4$x25(r2, 0x0, &(0x7f0000000300), 0x80000)
ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000340)={'dummy0\x00', 0x9372, 0xe33}) (async)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000440)={0x0, 0x2, 0x1, 0x2}) (async)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000480))
renameat2(r2, &(0x7f00000004c0)='./file0\x00', r2, &(0x7f0000000500)='./file0\x00', 0x2) (async)
close(r3) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000540)={0x6, 'veth0_to_bond\x00', {0x8000}, 0xfffb})
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000580)=0x8, 0x4) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000005c0), &(0x7f0000000600)=0xe)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x174, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7dc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdc0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x122d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x4004040) (async, rerun: 32)
ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f00000008c0)={{r3}, "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"}) (async, rerun: 32)
r7 = fanotify_init(0x0, 0x1)
fanotify_mark(r7, 0x1, 0x0, r2, &(0x7f00000018c0)='./file0\x00') (async)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001900), 0x448000, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r8, 0x3312, 0x4) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001940)=<r9=>0x0)
kcmp$KCMP_EPOLL_TFD(r9, 0x0, 0x7, r1, &(0x7f0000001980)={r5, r3, 0x2}) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0)

1.409262107s ago: executing program 1 (id=4188):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10000000, 0xffffffffffffffff, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x1120081, 0x1, 0x0, 0xfffffffd}}, 0x50)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@nullb, 0x0, &(0x7f0000000780)='./file0/../file0\x00') (async)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@nullb, 0x0, &(0x7f0000000780)='./file0/../file0\x00')
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x7e1b22, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
write$UHID_CREATE(r3, &(0x7f0000000500)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x4, 0x2000000, 0x1, 0x40, 0x81}}, 0x120)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r3, &(0x7f0000000140)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/101, 0x65, 0x800, 0x8000, 0x1, 0x400, 0x3ff}}, 0x120) (async)
write$UHID_CREATE(r3, &(0x7f0000000140)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/101, 0x65, 0x800, 0x8000, 0x1, 0x400, 0x3ff}}, 0x120)
sendfile(r2, r5, 0x0, 0x7ffff002) (async)
sendfile(r2, r5, 0x0, 0x7ffff002)

1.39365723s ago: executing program 4 (id=4189):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)={0x40, 0x3, 0x2, "acd5"}, 0x0, 0x0})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000080), 0x10, &(0x7f0000000000)={&(0x7f0000000600)=@can={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "977e809d15632d16"}, 0x10}, 0x1, 0x0, 0x0, 0x2000}, 0x1)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000004ac0)={0x84, &(0x7f0000004640)={0x20, 0x7, 0x5, "a91cf829bb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$cec(0x0, 0x0, 0x0)

1.165043647s ago: executing program 0 (id=4190):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x11, r0, 0xf648e000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYBLOB="eded8ba4b32b7e66001e28114f5e4c37b52f733f048f64f95f943cefd0912f", @ANYRESDEC], 0x2c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r4, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x558d, 0x8}, 0x8)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"])
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x33fe0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
accept$nfc_llcp(r8, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
fcntl$getflags(r8, 0x40a)
syz_socket_connect_nvme_tcp()
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.039725853s ago: executing program 1 (id=4191):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002480)=""/4100, 0x1004}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f00000015c0)=""/192, 0xc0}], 0x4}}], 0x1, 0x40010122, 0x0)
write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@private2, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2, 0xfff, 0x8, 0x500, 0x2})
r3 = timerfd_create(0x0, 0x80000)
timerfd_gettime(r3, &(0x7f00000001c0))
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
timerfd_create(0x7, 0xc0000)
timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ppoll(&(0x7f0000000000)=[{r5}], 0x1, 0x0, 0x0, 0x0)
r6 = socket(0x8000000010, 0x2, 0x0)
write(r6, &(0x7f00000002c0)="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", 0xfc)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x0, 0x6, 0xd0, 0xb, 0x5, 0x2, 0x80, 0x8, 0xfc, [0x5, 0x8000, 0xfffffffe, 0x9, 0x8000, 0x100, 0xc, 0x2], [0x7, 0x2, 0xbb6, 0x4, 0x9, 0x7, 0x40, 0xd516, 0x401]}})
sendfile(r4, r0, 0x0, 0x7ffff002)

213.28249ms ago: executing program 2 (id=4192):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3ff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000002c0)={0x0, 0x9e6, 0x300c})
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, '\\', 0x3a, '(#]}!/#', 0x3a, './file1', 0x3a, [0x46]}, 0x30)
openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x2800, 0x0)
unshare(0x2c020400)
msgget$private(0x0, 0x240)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2], [0x0, 0x1], [0x6, 0xffffdfff, 0x0, 0x0, 0x0, 0x0, 0xb, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {}, {0xffffffff}, {0x0, 0x1, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1}, {}, {0x0, 0x4}, {}, {0x2}, {}, {0xfffffff8}], '\x00', 0x1, 0x0, 0x0, 0xf8})
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
r2 = socket(0x11, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "90ea753675b5679daf62dee8e1a5fc24a57baa4b17f6ab44cd7eec6274211e02", "32412be58d9771ec949b7b06231a426354837dcdb8d7999dd2f92740f8682632", "1dd94ef5ba0b37d17289d56cc3cd0715f70168158356c286b0f019d99c8bfd0a", "d86fa2a89f29f5594f959780cc5a44ee52663036cedac4683588e5ad39192ef8", "0a3ba13cdc47541322bc0abf9e0097b3699f53f336b4aa2952abb5d8b8b4c813", "bba9af7406ea7ab8c9b9e640", 0x7fff, 0x3, 0x4, 0x1, 0x1}})
msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r3, r4, 0x0, 0x7fffeffd)

100.637471ms ago: executing program 2 (id=4193):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'team_slave_0\x00', {0x3}, 0x1}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_virt_wifi\x00', {0x4}, 0x5}) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x809b}, @void, @arp=@generic={0x338, 0xa00, 0x6, 0x4, 0x9, @broadcast, "2994bb6b", @link_local, "d2fe773358c56f"}}, 0x23) (async)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'bond0\x00', {0x3}, 0x7f}) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140), 0x10)
close(r2) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'syzkaller1\x00', {0x4}, 0x100}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', <r3=>0x0, 0x80, 0x40, 0x1000, 0xff, {{0x21, 0x4, 0x3, 0x9, 0x84, 0x68, 0x0, 0xc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @local, {[@generic={0x44, 0xf, "6a5439bd2531ab45c3643c0324"}, @noop, @ssrr={0x89, 0x7, 0xa9, [@multicast2]}, @timestamp_prespec={0x44, 0x14, 0xe5, 0x3, 0x4, [{@rand_addr=0x64010101, 0x7}, {@multicast1, 0x6}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x2c, 0x22, 0x1, 0x9, [{@loopback, 0xfffffff8}, {@private=0xa010100, 0xba}, {@private=0xa010100, 0x1}, {@broadcast, 0x2}, {@local, 0x581b}]}, @timestamp_addr={0x44, 0x14, 0xf, 0x1, 0x0, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}]}]}}}}})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000300)={{r0}, "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"}) (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001300)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x2, &(0x7f0000001340))
r5 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000001380)="7845bc3e7cb2f5c1932eab2997ac06651743eac60ccd5f3c251293a470c095b1086e6c38d9533c043537abef0ebad2be3b2578514acc7dc99f432c60b73dbcefc4e07f90f0b95d9224edc64b913125dc43b9460346d22d9991754685d7ce255d50c0df19fed7f6b9584627818ac055187ff9e4b4cdcabd62b2d707072b7885773819227de8c5b886b32a1c9bf6fafbdfd7befb66c81ef1526f6ac85c2b7a3d50dc6f63aa8d8d96d75f05", 0xaa) (async)
getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000001440)=""/53, &(0x7f0000001480)=0x35) (async)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000014c0)={{r5}, "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"}) (async)
umount2(&(0x7f00000024c0)='./file0\x00', 0x0) (async)
getpeername$l2tp(r1, &(0x7f0000002500)={0x2, 0x0, @dev}, &(0x7f0000002540)=0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000025c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000002800)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000027c0)={&(0x7f0000002600)={0x198, r7, 0x510, 0x70bd2d, 0x7, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc55}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x53958d63}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c22}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xeb}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xac4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb5a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async)
syz_open_dev$vim2m(&(0x7f0000002840), 0x6a, 0x2)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000028c0), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x4c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x48000)
sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000001)

90.526617ms ago: executing program 1 (id=4194):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x52)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@loopback, 0x4e23, 0x3, 0x7, 0x0, 0xa, 0x80, 0x100, 0x0, r3, r4}, {0xe6, 0x5, 0x8, 0xfffffffffffffff8, 0x4, 0x4, 0x1000, 0x800}, {0xd, 0x8000000000000001, 0xf9, 0xb1a7}, 0x0, 0x6e6bb0, 0x1, 0x1, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x3504, 0x3, 0x2, 0x8, 0x6, 0x8, 0x4}}, 0xe8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x4b}})
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r5, r0, 0x0, 0x8)

38.920164ms ago: executing program 2 (id=4195):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/163, 0xa3}], 0x1, 0xe9c, 0x4)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x7079, 0x0, 0x4, 0x288}, 0x0, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x84, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x6d, 0x6, "38fd9de67617022e09716e1f4ab478af65485756ddf4ca8891300cdbc01b7ac750eb7a91a19789329c0f4e51641f22de90745b5bd18f5bc9c230994180df4c4e0a3bde952ed654bbde400af12b040389cf0ca6c38ff7b36f38f3a420376af09c306273e447a13f38fd"}]}, @NFT_MSG_NEWFLOWTABLE={0xc8, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b684fed}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x20, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xad8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}]}]}, @NFT_MSG_DELTABLE={0xf8, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x91, 0x6, "b1f3896aa8be009b9d858cf42a52a7360f95e84bacd68fd58ea1e96175c36ba615e5cee1b26683150af1f08439050edce0f415e5232adf7a96caa9c6ff6e5a8b8de58ae181c49158d2a40ba5dea096f2fb2e05b7042f8f62af85f074cce11fb8d4edc3efc29742370321bb86493a8c22d1b8c9c283921317ae1bbbdc87c9aeb8372a9cc5375ec932cf475687fc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r6 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2)
ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f00000004c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r6, 0xab00, r7)
ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0xbdf)
ioctl$NBD_SET_SOCK(r6, 0xab00, r7)
ioctl$NBD_DO_IT(r6, 0xab03)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r0], 0x78)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101)
sendfile(r0, r0, 0x0, 0x7ffff000)

0s ago: executing program 1 (id=4196):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0x4004556e, &(0x7f0000000000))
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x12, r1, 0x910d0000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000904000/0x1000)=nil, 0x1000)
mlock(&(0x7f00007c0000/0x1000)=nil, 0x1000)

kernel console output (not intermixed with test programs):

t's busy
[  798.635401][T17876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  798.654478][ T5945] usb 1-1: USB disconnect, device number 109
[  798.675227][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  798.768955][T17890] /dev/rnullb0: Can't open blockdev
[  798.908036][ T5945] usb 2-1: USB disconnect, device number 113
[  798.960415][ T5945] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  798.977058][ T5945] cyberjack 2-1:0.69: device disconnected
[  799.262333][ T3100] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  799.444832][ T3100] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  799.462527][ T3100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.470915][ T3100] usb 3-1: Product: syz
[  799.477005][ T3100] usb 3-1: Manufacturer: syz
[  799.482087][ T3100] usb 3-1: SerialNumber: syz
[  799.750987][   T13] team0 (unregistering): Port device team_slave_1 removed
[  799.820180][   T13] team0 (unregistering): Port device C removed
[  800.002698][T17531] Bluetooth: hci2: command tx timeout
[  800.867845][T17905] netlink: 'syz.2.3601': attribute type 3 has an invalid length.
[  800.876706][T17850] bridge0: port 1(bridge_slave_0) entered blocking state
[  800.931773][T17850] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.939158][T17850] bridge_slave_0: entered allmulticast mode
[  800.962781][T17850] bridge_slave_0: entered promiscuous mode
[  800.972371][T17905] netlink: 'syz.2.3601': attribute type 1 has an invalid length.
[  800.993989][T17850] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.001530][T17850] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.008949][T17850] bridge_slave_1: entered allmulticast mode
[  801.015087][T17905] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3601'.
[  801.024425][T17850] bridge_slave_1: entered promiscuous mode
[  801.210353][T17850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  801.257416][T17850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  801.351430][T15499] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  801.543598][T15499] usb 1-1: unable to get BOS descriptor or descriptor too short
[  801.566714][T15499] usb 1-1: config 3 has an invalid interface number: 157 but max is 0
[  801.586937][T15499] usb 1-1: config 3 has no interface number 0
[  801.616097][T17850] team0: Port device team_slave_0 added
[  801.618504][T15499] usb 1-1: config 3 interface 157 has no altsetting 0
[  801.650743][T15499] usb 1-1: New USB device found, idVendor=5032, idProduct=0fa1, bcdDevice=dd.74
[  801.677560][T15499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.701260][T15499] usb 1-1: Product: syz
[  801.705508][T15499] usb 1-1: Manufacturer: syz
[  801.724729][T15499] usb 1-1: SerialNumber: syz
[  801.748830][T17850] team0: Port device team_slave_1 added
[  801.908213][T17850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  801.928995][T17850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  801.980277][T17850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  802.022209][T17850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  802.063192][T17850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  802.092144][T12378] Bluetooth: hci2: command tx timeout
[  802.120008][T17850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.164024][ T3100] gspca_main: pac207-2.14.0 probing 093a:2476
[  802.175048][ T3100] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  802.188871][ T3100] usb 3-1: Found UVC 0.00 device syz (093a:2476)
[  802.225742][ T3100] usb 3-1: No valid video chain found.
[  802.268774][ T3100] usb 3-1: USB disconnect, device number 111
[  802.379621][T15499] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state.
[  802.411305][T15499] dvb-usb: bulk message failed: -22 (3/0)
[  802.459238][T15499] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  802.506734][T15499] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T)
[  802.534393][T15499] usb 1-1: media controller created
[  802.550098][T17850] hsr_slave_0: entered promiscuous mode
[  802.568851][T17850] hsr_slave_1: entered promiscuous mode
[  802.613367][T15499] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  802.702052][T15499] dvb-usb: bulk message failed: -22 (6/0)
[  802.731271][T15499] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T'
[  802.766494][T15499] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input83
[  802.784701][T15499] dvb-usb: schedule remote query interval to 150 msecs.
[  802.795398][T15499] dvb-usb: bulk message failed: -22 (3/0)
[  802.831693][T15499] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected.
[  802.846043][T15499] usb 1-1: USB disconnect, device number 110
[  802.865013][T17956] /dev/rnullb0: Can't open blockdev
[  802.870383][ T3100] IPVS: starting estimator thread 0...
[  802.981550][T17957] IPVS: using max 28 ests per chain, 67200 per kthread
[  803.005661][T15499] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected.
[  803.035931][T17959] /dev/rnullb0: Can't open blockdev
[  803.318138][T17850] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  803.336415][T17964] /dev/rnullb0: Can't open blockdev
[  803.361516][T15499] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  803.408218][T17850] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  803.477292][T17850] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  803.490530][T17850] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  803.522255][ T3100] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[  803.534065][T15499] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  803.558745][T15499] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  803.585669][T15499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.612499][T15499] usb 1-1: config 0 descriptor??
[  803.636358][T15499] pwc: Askey VC010 type 2 USB webcam detected.
[  803.720082][T17850] 8021q: adding VLAN 0 to HW filter on device bond0
[  803.725697][ T3100] usb 2-1: config 1 interface 0 has no altsetting 0
[  803.750876][ T3100] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  803.768985][T17850] 8021q: adding VLAN 0 to HW filter on device team0
[  803.773790][ T3100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.788494][ T3100] usb 2-1: Product: syz
[  803.794887][ T3100] usb 2-1: Manufacturer: syz
[  803.799548][ T3100] usb 2-1: SerialNumber: syz
[  803.822245][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.829432][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  803.855652][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.862959][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  804.051421][T15499] pwc: recv_control_msg error -32 req 02 val 2b00
[  804.163736][T12378] Bluetooth: hci2: command 0x0419 tx timeout
[  804.222107][ T3100] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  804.286508][T15499] pwc: recv_control_msg error -71 req 04 val 1000
[  804.318070][T15499] pwc: recv_control_msg error -71 req 04 val 1300
[  804.341372][T15499] pwc: recv_control_msg error -71 req 04 val 1400
[  804.368445][T15499] pwc: recv_control_msg error -71 req 02 val 2000
[  804.403213][T15499] pwc: recv_control_msg error -71 req 02 val 2100
[  804.421600][T15499] pwc: recv_control_msg error -71 req 04 val 1500
[  804.438920][T15499] pwc: recv_control_msg error -71 req 02 val 2500
[  804.477365][T15499] pwc: recv_control_msg error -71 req 02 val 2400
[  804.504007][T15499] pwc: recv_control_msg error -71 req 02 val 2600
[  804.523965][T15499] pwc: recv_control_msg error -71 req 02 val 2900
[  804.547598][T15499] pwc: recv_control_msg error -71 req 02 val 2800
[  804.562851][T15499] pwc: recv_control_msg error -71 req 04 val 1100
[  804.572865][T17850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  804.585237][T15499] pwc: recv_control_msg error -71 req 04 val 1200
[  804.604840][T15499] pwc: Registered as video103.
[  804.618299][T15499] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input84
[  804.673433][T15499] usb 1-1: USB disconnect, device number 111
[  805.091315][ T5908] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  805.267216][ T5908] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  805.290624][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.307443][T17850] veth0_vlan: entered promiscuous mode
[  805.315609][ T5908] usb 3-1: Product: syz
[  805.325525][ T5908] usb 3-1: Manufacturer: syz
[  805.337631][ T5908] usb 3-1: SerialNumber: syz
[  805.346247][T17850] veth1_vlan: entered promiscuous mode
[  805.359519][ T5908] usb 3-1: config 0 descriptor??
[  805.377839][ T5908] ch341 3-1:0.0: ch341-uart converter detected
[  805.428825][T17850] veth0_macvtap: entered promiscuous mode
[  805.448964][T17850] veth1_macvtap: entered promiscuous mode
[  805.507319][T17850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  805.543692][T17850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  805.592553][ T1084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  805.619682][ T1084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  805.631050][ T1084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  805.652791][ T1084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  805.854409][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  805.869567][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  805.943137][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  805.965401][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  806.027217][T18035] usb 2-1: USB disconnect, device number 114
[  806.079326][T17959] usblp0: removed
[  806.241740][T17531] Bluetooth: hci2: command 0x0419 tx timeout
[  806.261270][T18043] /dev/rnullb0: Can't open blockdev
[  806.267594][T18043] /dev/rnullb0: Can't open blockdev
[  806.295885][T18043] /dev/rnullb0: Can't open blockdev
[  806.328812][T18043] /dev/rnullb0: Can't open blockdev
[  806.353760][T18043] /dev/rnullb0: Can't open blockdev
[  806.372296][T18043] /dev/rnullb0: Can't open blockdev
[  806.378954][T18043] /dev/rnullb0: Can't open blockdev
[  806.390503][T18043] /dev/rnullb0: Can't open blockdev
[  806.399822][T18043] /dev/rnullb0: Can't open blockdev
[  806.414379][T18043] /dev/rnullb0: Can't open blockdev
[  806.420607][T18043] /dev/rnullb0: Can't open blockdev
[  806.429647][T18043] /dev/rnullb0: Can't open blockdev
[  806.446296][T18043] /dev/rnullb0: Can't open blockdev
[  806.460147][T18043] /dev/rnullb0: Can't open blockdev
[  806.468008][T18043] /dev/rnullb0: Can't open blockdev
[  806.478413][T18043] /dev/rnullb0: Can't open blockdev
[  806.488182][T18043] /dev/rnullb0: Can't open blockdev
[  806.502632][T18043] /dev/rnullb0: Can't open blockdev
[  806.508861][T18043] /dev/rnullb0: Can't open blockdev
[  806.521594][   T44] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  806.528741][T18043] /dev/rnullb0: Can't open blockdev
[  806.536691][T18043] /dev/rnullb0: Can't open blockdev
[  806.546695][T18043] /dev/rnullb0: Can't open blockdev
[  806.557076][T18043] /dev/rnullb0: Can't open blockdev
[  806.580138][T18043] /dev/rnullb0: Can't open blockdev
[  806.590237][T18043] /dev/rnullb0: Can't open blockdev
[  806.596653][ T5908] usb 3-1: ch341-uart converter now attached to ttyUSB0
[  806.612049][T18043] /dev/rnullb0: Can't open blockdev
[  806.645868][T18043] /dev/rnullb0: Can't open blockdev
[  806.668442][T18043] /dev/rnullb0: Can't open blockdev
[  806.686213][T18043] /dev/rnullb0: Can't open blockdev
[  806.687087][T18043] /dev/rnullb0: Can't open blockdev
[  806.699349][T18043] /dev/rnullb0: Can't open blockdev
[  806.713017][T18043] /dev/rnullb0: Can't open blockdev
[  806.713804][   T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  806.713831][   T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  806.713883][T18043] /dev/rnullb0: Can't open blockdev
[  806.713884][   T44] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  806.713912][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.714654][T18043] /dev/rnullb0: Can't open blockdev
[  806.715385][T18043] /dev/rnullb0: Can't open blockdev
[  806.716380][T18043] /dev/rnullb0: Can't open blockdev
[  806.717189][T18043] /dev/rnullb0: Can't open blockdev
[  806.718007][   T44] usb 5-1: config 0 descriptor??
[  806.719812][T18043] /dev/rnullb0: Can't open blockdev
[  806.720629][T18043] /dev/rnullb0: Can't open blockdev
[  806.730968][   T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  806.731016][   T44] dvb-usb: bulk message failed: -22 (3/0)
[  806.735134][T18043] /dev/rnullb0: Can't open blockdev
[  806.736023][T18043] /dev/rnullb0: Can't open blockdev
[  806.736727][T18043] /dev/rnullb0: Can't open blockdev
[  806.739961][T18043] /dev/rnullb0: Can't open blockdev
[  806.740799][T18043] /dev/rnullb0: Can't open blockdev
[  806.754042][T18043] /dev/rnullb0: Can't open blockdev
[  806.754876][T18043] /dev/rnullb0: Can't open blockdev
[  806.755685][T18043] /dev/rnullb0: Can't open blockdev
[  806.757076][T18043] /dev/rnullb0: Can't open blockdev
[  806.758097][T18043] /dev/rnullb0: Can't open blockdev
[  806.758903][T18043] /dev/rnullb0: Can't open blockdev
[  806.762202][T18043] /dev/rnullb0: Can't open blockdev
[  806.763007][T18043] /dev/rnullb0: Can't open blockdev
[  806.766721][T18043] /dev/rnullb0: Can't open blockdev
[  806.767509][T18043] /dev/rnullb0: Can't open blockdev
[  806.767677][   T44] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  806.768368][T18043] /dev/rnullb0: Can't open blockdev
[  806.769198][T18043] /dev/rnullb0: Can't open blockdev
[  806.770064][T18043] /dev/rnullb0: Can't open blockdev
[  806.770803][T18043] /dev/rnullb0: Can't open blockdev
[  806.776047][T18043] /dev/rnullb0: Can't open blockdev
[  806.777172][   T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  806.777227][   T44] usb 5-1: media controller created
[  806.779029][T18043] /dev/rnullb0: Can't open blockdev
[  806.781630][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  806.797974][T18043] /dev/rnullb0: Can't open blockdev
[  806.798787][T18043] /dev/rnullb0: Can't open blockdev
[  806.810407][   T10] usb 3-1: USB disconnect, device number 112
[  806.818681][T18043] /dev/rnullb0: Can't open blockdev
[  806.825915][   T44] dvb-usb: bulk message failed: -22 (6/0)
[  806.826005][   T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  806.832528][T18043] /dev/rnullb0: Can't open blockdev
[  806.833319][T18043] /dev/rnullb0: Can't open blockdev
[  806.855026][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input85
[  806.856636][   T10] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  806.857212][   T10] ch341 3-1:0.0: device disconnected
[  806.859969][   T44] dvb-usb: schedule remote query interval to 150 msecs.
[  806.859993][   T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  807.014418][T15499] dvb-usb: bulk message failed: -22 (1/0)
[  807.014505][T15499] dvb-usb: error while querying for an remote control event.
[  807.031876][T18060] /dev/rnullb0: Can't open blockdev
[  807.038477][T18060] netlink: 372 bytes leftover after parsing attributes in process `syz.4.3589'.
[  807.171417][T15499] dvb-usb: bulk message failed: -22 (1/0)
[  807.362428][T15499] dvb-usb: error while querying for an remote control event.
[  807.521226][   T44] dvb-usb: bulk message failed: -22 (1/0)
[  807.530978][   T44] dvb-usb: error while querying for an remote control event.
[  807.551704][ T5908] usb 5-1: USB disconnect, device number 2
[  807.623550][ T5908] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  807.742065][T15499] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  807.886983][T18075] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20001
[  807.899336][T18075] /dev/rnullb0: Can't open blockdev
[  807.918721][T15499] usb 2-1: Using ep0 maxpacket: 32
[  807.938149][T15499] usb 2-1: too many configurations: 15, using maximum allowed: 8
[  807.952927][T15499] usb 2-1: unable to read config index 0 descriptor/start: -61
[  807.960887][T15499] usb 2-1: can't read configurations, error -61
[  808.114097][T15499] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  808.281390][T15499] usb 2-1: Using ep0 maxpacket: 32
[  808.295506][T15499] usb 2-1: too many configurations: 15, using maximum allowed: 8
[  808.334293][T15499] usb 2-1: unable to read config index 0 descriptor/start: -61
[  808.364636][T15499] usb 2-1: can't read configurations, error -61
[  808.384156][T15499] usb usb2-port1: attempt power cycle
[  808.403898][T18097] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3637'.
[  808.414061][T18093] netlink: 'syz.0.3636': attribute type 58 has an invalid length.
[  808.430678][T18097] /dev/rnullb0: Can't open blockdev
[  808.641377][T18111] /dev/rnullb0: Can't open blockdev
[  808.893967][T15499] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  808.965560][T18119] /dev/rnullb0: Can't open blockdev
[  808.977797][T15499] usb 2-1: Using ep0 maxpacket: 32
[  808.988044][T15499] usb 2-1: too many configurations: 15, using maximum allowed: 8
[  809.016545][T15499] usb 2-1: unable to read config index 0 descriptor/start: -61
[  809.034979][T15499] usb 2-1: can't read configurations, error -61
[  809.181629][T15499] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  809.217104][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  809.234878][T15499] usb 2-1: Using ep0 maxpacket: 32
[  809.242124][T15499] usb 2-1: too many configurations: 15, using maximum allowed: 8
[  809.252084][T15499] usb 2-1: unable to read config index 0 descriptor/start: -61
[  809.259715][T15499] usb 2-1: can't read configurations, error -61
[  809.275372][T15499] usb usb2-port1: unable to enumerate USB device
[  809.500480][T18137] /dev/rnullb0: Can't open blockdev
[  809.686797][T18147] /dev/rnullb0: Can't open blockdev
[  809.932680][T15499] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  809.933198][T18160] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  809.978177][T18160] kvm: pic: non byte read
[  809.992507][T18160] kvm: pic: level sensitive irq not supported
[  809.992589][T18160] kvm: pic: non byte read
[  810.101252][T15499] usb 5-1: Using ep0 maxpacket: 16
[  810.117387][T15499] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  810.137083][T15499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.156915][T15499] usb 5-1: Product: syz
[  810.164399][T15499] usb 5-1: Manufacturer: syz
[  810.169446][T15499] usb 5-1: SerialNumber: syz
[  810.186048][T15499] usb 5-1: config 0 descriptor??
[  810.204209][T15499] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  810.283444][T18170] /dev/rnullb0: Can't open blockdev
[  810.378814][T18175] /dev/rnullb0: Can't open blockdev
[  810.557254][T18181] netlink: 'syz.1.3657': attribute type 21 has an invalid length.
[  810.569177][T18181] netlink: 'syz.1.3657': attribute type 30 has an invalid length.
[  810.586176][T18181] /dev/rnullb0: Can't open blockdev
[  810.655532][T15499] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71
[  810.723734][T15499] usb 5-1: USB disconnect, device number 3
[  810.725199][ T3100] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  810.911432][ T3100] usb 3-1: device descriptor read/64, error -71
[  811.165130][ T3100] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  811.181796][   T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  811.341447][ T3100] usb 3-1: device descriptor read/64, error -71
[  811.367356][   T10] usb 5-1: too many configurations: 27, using maximum allowed: 8
[  811.380395][   T10] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  811.391753][   T10] usb 5-1: config 0 has no interface number 0
[  811.399631][   T10] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  811.408495][   T10] usb 5-1: config 0 has no interface number 0
[  811.418297][   T10] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  811.427467][   T10] usb 5-1: config 0 has no interface number 0
[  811.435610][   T10] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  811.446027][   T10] usb 5-1: config 0 has no interface number 0
[  811.454825][   T10] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  811.466173][ T3100] usb usb3-port1: attempt power cycle
[  811.471296][ T5901] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  811.476358][   T10] usb 5-1: config 0 has no interface number 0
[  811.490269][   T10] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  811.499825][   T10] usb 5-1: config 0 has no interface number 0
[  811.511233][   T10] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  811.526940][   T10] usb 5-1: config 0 has no interface number 0
[  811.535045][   T10] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  811.547011][   T10] usb 5-1: config 0 has no interface number 0
[  811.558912][   T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  811.571869][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.580047][   T10] usb 5-1: Product: syz
[  811.588191][   T10] usb 5-1: Manufacturer: syz
[  811.596787][   T10] usb 5-1: SerialNumber: syz
[  811.610470][   T10] usb 5-1: config 0 descriptor??
[  811.643958][ T5901] usb 2-1: Using ep0 maxpacket: 32
[  811.650879][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  811.666266][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  811.684580][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  811.695717][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  811.713881][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  811.734034][ T5901] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  811.746567][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.755101][ T5901] usb 2-1: Product: syz
[  811.759400][ T5901] usb 2-1: Manufacturer: syz
[  811.767659][ T5901] usb 2-1: SerialNumber: syz
[  811.775988][ T5901] usb 2-1: config 0 descriptor??
[  811.821445][ T3100] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  811.848866][   T30] audit: type=1326 audit(6044448686.704:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18196 comm="syz.4.3660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcee638e9a9 code=0x0
[  811.873602][ T3100] usb 3-1: device descriptor read/8, error -71
[  812.132434][ T3100] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  812.166552][ T3100] usb 3-1: device descriptor read/8, error -71
[  812.187698][T18211] /dev/rnullb0: Can't open blockdev
[  812.231969][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.240576][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.248295][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.261895][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.269197][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.281458][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.289152][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.292384][ T3100] usb usb3-port1: unable to enumerate USB device
[  812.299291][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.309658][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.318615][T18231] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  812.326079][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.332828][T18231] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  812.340655][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.346113][T18231] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  812.351523][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.360043][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.371602][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.378216][T18231] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  812.384878][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.391473][T18231] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  812.399600][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.414090][T18231] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  812.423588][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.430304][ T5901] iforce 2-1:0.0: usb_submit_urb failed: -71
[  812.438892][ T5901] input input87: Timeout waiting for response from device.
[  812.476743][ T5901] usb 2-1: USB disconnect, device number 119
[  812.699571][T18251] /dev/rnullb0: Can't open blockdev
[  813.021261][ T5901] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  813.203245][ T5901] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  813.212579][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.220632][ T5901] usb 2-1: Product: syz
[  813.224956][ T5901] usb 2-1: Manufacturer: syz
[  813.229595][ T5901] usb 2-1: SerialNumber: syz
[  813.242319][ T5901] usb 2-1: config 0 descriptor??
[  813.253030][ T5901] ch341 2-1:0.0: ch341-uart converter detected
[  813.593759][T18259] netlink: 'syz.2.3673': attribute type 1 has an invalid length.
[  813.601877][T18259] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3673'.
[  813.871413][ T3100] usb 3-1: new full-speed USB device number 117 using dummy_hcd
[  813.993162][   T10] usb 5-1: USB disconnect, device number 4
[  814.012902][ T3100] usb 3-1: device descriptor read/64, error -71
[  814.251369][T17531] Bluetooth: hci1: command 0x0c1a tx timeout
[  814.271246][ T3100] usb 3-1: new full-speed USB device number 118 using dummy_hcd
[  814.401432][T12378] Bluetooth: hci3: command 0x0c1a tx timeout
[  814.407062][T17531] Bluetooth: hci2: command 0x0419 tx timeout
[  814.409594][T12378] Bluetooth: hci0: command 0x0c1a tx timeout
[  814.421972][ T3100] usb 3-1: device descriptor read/64, error -71
[  814.467635][ T5901] usb 2-1: ch341-uart converter now attached to ttyUSB0
[  814.534125][ T3100] usb usb3-port1: attempt power cycle
[  814.669411][ T5901] usb 2-1: USB disconnect, device number 120
[  814.680354][ T5901] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  814.690457][ T5901] ch341 2-1:0.0: device disconnected
[  814.769410][T18270] netlink: 'syz.4.3677': attribute type 8 has an invalid length.
[  814.775218][T18271] /dev/rnullb0: Can't open blockdev
[  814.783286][T18270] netlink: 'syz.4.3677': attribute type 8 has an invalid length.
[  814.783889][T18271] /dev/rnullb0: Can't open blockdev
[  814.791633][T18270] netlink: 'syz.4.3677': attribute type 8 has an invalid length.
[  814.791940][T18270] netlink: 'syz.4.3677': attribute type 8 has an invalid length.
[  814.808146][T18271] /dev/rnullb0: Can't open blockdev
[  814.813851][T18270] netlink: 'syz.4.3677': attribute type 8 has an invalid length.
[  814.828235][T18270] netlink: 'syz.4.3677': attribute type 8 has an invalid length.
[  814.833243][T18271] /dev/rnullb0: Can't open blockdev
[  814.836794][T18270] netlink: 'syz.4.3677': attribute type 8 has an invalid length.
[  814.848471][T18271] /dev/rnullb0: Can't open blockdev
[  814.849558][T18270] netlink: 'syz.4.3677': attribute type 8 has an invalid length.
[  814.855742][T18271] /dev/rnullb0: Can't open blockdev
[  814.863622][T18270] netlink: 'syz.4.3677': attribute type 8 has an invalid length.
[  814.874769][T18271] /dev/rnullb0: Can't open blockdev
[  814.881352][ T3100] usb 3-1: new full-speed USB device number 119 using dummy_hcd
[  814.895366][T18271] /dev/rnullb0: Can't open blockdev
[  814.903747][T18271] /dev/rnullb0: Can't open blockdev
[  814.909700][T18271] /dev/rnullb0: Can't open blockdev
[  814.915951][ T3100] usb 3-1: device descriptor read/8, error -71
[  814.918743][T18271] /dev/rnullb0: Can't open blockdev
[  814.928342][T18271] /dev/rnullb0: Can't open blockdev
[  814.934901][T18271] /dev/rnullb0: Can't open blockdev
[  814.940956][T18271] /dev/rnullb0: Can't open blockdev
[  814.947946][T18271] /dev/rnullb0: Can't open blockdev
[  814.954604][T18271] /dev/rnullb0: Can't open blockdev
[  814.960516][T18271] /dev/rnullb0: Can't open blockdev
[  814.967360][T18271] /dev/rnullb0: Can't open blockdev
[  814.974710][T18271] /dev/rnullb0: Can't open blockdev
[  814.980739][T18271] /dev/rnullb0: Can't open blockdev
[  814.987610][T18271] /dev/rnullb0: Can't open blockdev
[  814.993851][T18271] /dev/rnullb0: Can't open blockdev
[  815.001324][T15499] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  815.001501][T18271] /dev/rnullb0: Can't open blockdev
[  815.014907][T18271] /dev/rnullb0: Can't open blockdev
[  815.020802][T18271] /dev/rnullb0: Can't open blockdev
[  815.026878][T18271] /dev/rnullb0: Can't open blockdev
[  815.034357][T18271] /dev/rnullb0: Can't open blockdev
[  815.040241][T18271] /dev/rnullb0: Can't open blockdev
[  815.047450][T18271] /dev/rnullb0: Can't open blockdev
[  815.053693][T18271] /dev/rnullb0: Can't open blockdev
[  815.059790][T18271] /dev/rnullb0: Can't open blockdev
[  815.068000][T18271] /dev/rnullb0: Can't open blockdev
[  815.074298][T18271] /dev/rnullb0: Can't open blockdev
[  815.080140][T18271] /dev/rnullb0: Can't open blockdev
[  815.087343][T18271] /dev/rnullb0: Can't open blockdev
[  815.093413][T18271] /dev/rnullb0: Can't open blockdev
[  815.099653][T18271] /dev/rnullb0: Can't open blockdev
[  815.108467][T18271] /dev/rnullb0: Can't open blockdev
[  815.115125][T18271] /dev/rnullb0: Can't open blockdev
[  815.121784][T18271] /dev/rnullb0: Can't open blockdev
[  815.127909][T18271] /dev/rnullb0: Can't open blockdev
[  815.134195][T18271] /dev/rnullb0: Can't open blockdev
[  815.140778][T18271] /dev/rnullb0: Can't open blockdev
[  815.147576][T18271] /dev/rnullb0: Can't open blockdev
[  815.154227][T18271] /dev/rnullb0: Can't open blockdev
[  815.160319][T18271] /dev/rnullb0: Can't open blockdev
[  815.164982][T15499] usb 5-1: unable to get BOS descriptor or descriptor too short
[  815.166334][ T3100] usb 3-1: new full-speed USB device number 120 using dummy_hcd
[  815.180765][T18271] /dev/rnullb0: Can't open blockdev
[  815.188147][T18271] /dev/rnullb0: Can't open blockdev
[  815.195486][T15499] usb 5-1: config 16 has an invalid interface number: 195 but max is 0
[  815.210532][T15499] usb 5-1: config 16 has no interface number 0
[  815.212056][ T3100] usb 3-1: device descriptor read/8, error -71
[  815.217148][T15499] usb 5-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023
[  815.227613][T18271] /dev/rnullb0: Can't open blockdev
[  815.240534][T18271] /dev/rnullb0: Can't open blockdev
[  815.247123][T18271] /dev/rnullb0: Can't open blockdev
[  815.254982][T15499] usb 5-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024
[  815.255597][T18271] /dev/rnullb0: Can't open blockdev
[  815.272293][T18271] /dev/rnullb0: Can't open blockdev
[  815.278386][T18271] /dev/rnullb0: Can't open blockdev
[  815.287083][T18271] /dev/rnullb0: Can't open blockdev
[  815.294025][T15499] usb 5-1: config 16 interface 195 altsetting 128 endpoint 0xB has an invalid bInterval 251, changing to 11
[  815.295065][T18271] /dev/rnullb0: Can't open blockdev
[  815.307343][T15499] usb 5-1: config 16 interface 195 has no altsetting 0
[  815.320024][T18271] /dev/rnullb0: Can't open blockdev
[  815.327195][T18271] /dev/rnullb0: Can't open blockdev
[  815.336042][ T3100] usb usb3-port1: unable to enumerate USB device
[  815.346063][T18271] /dev/rnullb0: Can't open blockdev
[  815.350498][T15499] usb 5-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce
[  815.356685][T18271] /dev/rnullb0: Can't open blockdev
[  815.366894][T15499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.367020][T18271] /dev/rnullb0: Can't open blockdev
[  815.377332][T15499] usb 5-1: Product: syz
[  815.387562][T18271] /dev/rnullb0: Can't open blockdev
[  815.387634][T15499] usb 5-1: Manufacturer: syz
[  815.395504][T18271] /dev/rnullb0: Can't open blockdev
[  815.407024][T18271] /dev/rnullb0: Can't open blockdev
[  815.414063][T15499] usb 5-1: SerialNumber: syz
[  815.419961][T18271] /dev/rnullb0: Can't open blockdev
[  815.430851][T18269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  815.442631][T18269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  815.470464][T18277] can0: slcan on ttyS3.
[  815.542773][T18275] can0 (unregistered): slcan off ttyS3.
[  815.643477][T18282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3680'.
[  815.660775][T15499] usb 5-1: bad CDC descriptors
[  815.679249][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3680'.
[  815.694552][T15499] usb 5-1: USB disconnect, device number 5
[  815.835717][T18289] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3681'.
[  815.846449][T18289] /dev/rnullb0: Can't open blockdev
[  815.926064][T18295] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3682'.
[  815.935839][T18294] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3682'.
[  815.946565][T12378] Bluetooth: hci0: unexpected cc 0x040d length: 63 > 7
[  815.956748][T12378] Bluetooth: hci0: unexpected event for opcode 0x040d
[  816.181776][ T3100] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  816.342680][ T3100] usb 2-1: Using ep0 maxpacket: 8
[  816.353959][ T3100] usb 2-1: unable to get BOS descriptor or descriptor too short
[  816.365252][ T3100] usb 2-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30
[  816.378641][ T3100] usb 2-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[  816.395392][ T3100] usb 2-1: config 4 interface 0 has no altsetting 0
[  816.406773][ T3100] usb 2-1: string descriptor 0 read error: -22
[  816.418566][ T3100] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  816.430504][ T3100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.455013][ T3100] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  816.481250][T12378] Bluetooth: hci2: command 0x0419 tx timeout
[  816.505374][ T3100] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  816.517218][ T3100] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  816.525023][ T3100] usb 2-1: media controller created
[  816.543019][T11211] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  816.598489][ T3100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  816.701374][T11211] usb 5-1: Using ep0 maxpacket: 8
[  816.718058][T11211] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  816.739961][T11211] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  816.760420][ T3100] zl10353_read_register: readreg error (reg=127, ret==0)
[  816.781392][T11211] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  816.801048][T18317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3684'.
[  816.809161][T11211] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  816.820978][T18319] /dev/rnullb0: Can't open blockdev
[  816.824229][T11211] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  816.891339][T11211] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  816.900461][T11211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.909004][T18320] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  816.918867][ T3100] usb 2-1: USB disconnect, device number 121
[  816.928060][T18320] /dev/rnullb0: Can't open blockdev
[  817.176108][T18305] /dev/rnullb0: Can't open blockdev
[  817.192819][T18305] virtiofs: Unknown parameter 'user'
[  817.210788][T11211] usb 5-1: usb_control_msg returned -71
[  817.222316][T11211] usbtmc 5-1:16.0: can't read capabilities
[  817.266405][T11211] usb 5-1: USB disconnect, device number 6
[  817.302237][T18336] /dev/rnullb0: Can't open blockdev
[  817.361393][ T5901] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  817.541398][ T5901] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  817.575583][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.590898][ T5901] usb 3-1: Product: syz
[  817.606338][ T5901] usb 3-1: Manufacturer: syz
[  817.621916][ T5901] usb 3-1: SerialNumber: syz
[  817.636697][ T5901] usb 3-1: config 0 descriptor??
[  817.656024][ T5901] ch341 3-1:0.0: ch341-uart converter detected
[  817.719280][T18350] could not allocate digest TFM handle blake2s-160-x86
[  817.925490][T18366] /dev/rnullb0: Can't open blockdev
[  818.035008][T18372] /dev/rnullb0: Can't open blockdev
[  818.434206][T18388] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  818.441707][T18388] /dev/rnullb0: Can't open blockdev
[  818.515435][ T5908] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  818.561256][T12378] Bluetooth: hci2: command 0x0419 tx timeout
[  818.671253][ T5908] usb 5-1: Using ep0 maxpacket: 32
[  818.682813][ T5908] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  818.700187][ T5908] usb 5-1: config 0 has no interface number 0
[  818.711222][ T5908] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  818.741220][ T5908] usb 5-1: config 0 interface 85 has no altsetting 0
[  818.762798][ T5908] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  818.772220][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.780401][ T5908] usb 5-1: Product: syz
[  818.791221][ T5908] usb 5-1: Manufacturer: syz
[  818.795939][ T5908] usb 5-1: SerialNumber: syz
[  818.810102][ T5908] usb 5-1: config 0 descriptor??
[  818.863249][T18400] /dev/rnullb0: Can't open blockdev
[  818.897999][ T5901] usb 3-1: ch341-uart converter now attached to ttyUSB0
[  819.019276][T18406] /dev/rnullb0: Can't open blockdev
[  819.026151][ T5908] appletouch 5-1:0.85: Failed to read mode from device.
[  819.044996][ T5908] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  819.052257][T18385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.062316][   T30] audit: type=1800 audit(6044448693.894:123): pid=18385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3701" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  819.083594][T18385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.103574][T11211] usb 3-1: USB disconnect, device number 121
[  819.126583][T11211] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  819.142526][T11211] ch341 3-1:0.0: device disconnected
[  819.542015][ T5901] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  819.680659][T18414] /dev/rnullb0: Can't open blockdev
[  819.712542][ T5901] usb 2-1: Using ep0 maxpacket: 32
[  819.726712][ T5901] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  819.752479][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.774933][T18416] /dev/rnullb0: Can't open blockdev
[  819.779056][ T5901] usb 2-1: config 0 descriptor??
[  819.813867][ T5901] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  819.925868][   T30] audit: type=1326 audit(6044448694.784:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18417 comm="syz.2.3715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dddd8e9a9 code=0x0
[  820.003924][T12378] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  820.012775][T12378] Bluetooth: hci0: Injecting HCI hardware error event
[  820.023247][T12378] Bluetooth: hci0: hardware error 0x00
[  820.221316][T15499] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  820.421393][T15499] usb 3-1: Using ep0 maxpacket: 32
[  820.430434][T15499] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[  820.439515][T15499] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  820.450715][T15499] usb 3-1: config 0 has no interface number 0
[  820.458708][T15499] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  820.469318][T15499] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  820.480479][T15499] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  820.492414][T15499] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  820.503918][T15499] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  820.514263][T15499] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  820.526008][T15499] usb 3-1: config 0 interface 239 has no altsetting 0
[  820.536873][T15499] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  820.546110][T15499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.554423][T15499] usb 3-1: Product: syz
[  820.558688][T15499] usb 3-1: Manufacturer: syz
[  820.563536][T15499] usb 3-1: SerialNumber: syz
[  820.571922][T15499] usb 3-1: config 0 descriptor??
[  820.578770][T18419] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  820.586393][T18419] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  820.806104][T18419] /dev/rnullb0: Can't open blockdev
[  821.076924][T18412] /dev/rnullb0: Can't open blockdev
[  821.136753][ T5901] gspca_vc032x: reg_w err -71
[  821.142971][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.149605][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.155506][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.161008][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.166423][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.171988][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.177383][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.183009][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.188352][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.193931][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.199303][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.204868][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.210261][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.215843][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.222798][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.228533][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.235620][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.241686][ T5901] gspca_vc032x: I2c Bus Busy Wait 00
[  821.248154][ T5901] gspca_vc032x: Unknown sensor...
[  821.253447][ T5901] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  821.266892][ T5901] usb 2-1: USB disconnect, device number 122
[  821.314349][ T5908] usb 5-1: USB disconnect, device number 7
[  821.741243][ T5908] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  821.894901][ T5908] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  821.905047][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.918912][ T5908] usb 5-1: config 0 descriptor??
[  821.948160][ T5908] gspca_main: cpia1-2.14.0 probing 0813:0001
[  822.004543][T18035] usb 2-1: new full-speed USB device number 123 using dummy_hcd
[  822.082081][T12378] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  822.176913][T18035] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[  822.185226][T18035] usb 2-1: config 0 has no interface number 0
[  822.193754][T18035] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  822.205221][T18035] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  822.215614][T18035] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  822.225082][T18035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.238695][T18035] usb 2-1: config 0 descriptor??
[  822.261962][T18035] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input89
[  822.449692][T18433] sctp: [Deprecated]: syz.1.3720 (pid 18433) Use of int in maxseg socket option.
[  822.449692][T18433] Use struct sctp_assoc_value instead
[  822.470557][T15499] usb 2-1: USB disconnect, device number 123
[  822.547430][T18429] /dev/rnullb0: Can't open blockdev
[  822.564410][ T5908] gspca_cpia1: usb_control_msg 01, error -71
[  822.570489][ T5908] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[  822.588055][ T5908] usb 5-1: USB disconnect, device number 8
[  822.889198][ T5908] usb 3-1: USB disconnect, device number 122
[  823.141408][T18472] /dev/rnullb0: Can't open blockdev
[  823.381360][ T5908] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  823.568519][ T5908] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  823.602410][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.620832][ T5908] usb 3-1: Product: syz
[  823.639350][T18489] /dev/rnullb0: Can't open blockdev
[  823.651877][ T5908] usb 3-1: Manufacturer: syz
[  823.656553][ T5908] usb 3-1: SerialNumber: syz
[  823.680717][ T5908] usb 3-1: config 0 descriptor??
[  823.704457][ T5908] ch341 3-1:0.0: ch341-uart converter detected
[  823.872290][T18503] tmpfs: Bad value for 'mpol'
[  824.921672][ T5908] usb 3-1: ch341-uart converter now attached to ttyUSB0
[  825.120384][T15499] usb 3-1: USB disconnect, device number 123
[  825.172319][T15499] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  825.221854][T15499] ch341 3-1:0.0: device disconnected
[  825.603315][T18549] /dev/rnullb0: Can't open blockdev
[  825.728671][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  825.768923][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  825.789049][T18557] /dev/rnullb0: Can't open blockdev
[  825.864004][T18560] /dev/rnullb0: Can't open blockdev
[  826.254403][T18583] /dev/rnullb0: Can't open blockdev
[  826.289009][T18589] /dev/rnullb0: Can't open blockdev
[  826.316727][T18586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3747'.
[  826.581287][T11211] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  826.651392][T18035] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  826.749766][T11211] usb 3-1: device descriptor read/64, error -71
[  826.786792][T18601] /dev/rnullb0: Can't open blockdev
[  826.880997][T18035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  826.911297][T18035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  826.951619][T18035] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  826.960746][T18035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.002051][T11211] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  827.014243][T18035] usb 2-1: config 0 descriptor??
[  827.071791][ T5908] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  827.171324][T11211] usb 3-1: device descriptor read/64, error -71
[  827.193651][T18611] /dev/rnullb0: Can't open blockdev
[  827.258709][ T5908] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  827.281931][T11211] usb usb3-port1: attempt power cycle
[  827.294274][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.326393][ T5908] usb 5-1: Product: syz
[  827.349716][ T5908] usb 5-1: Manufacturer: syz
[  827.369844][ T5908] usb 5-1: SerialNumber: syz
[  827.399203][ T5908] usb 5-1: config 0 descriptor??
[  827.422523][ T5908] ch341 5-1:0.0: ch341-uart converter detected
[  827.521387][T18035] usbhid 2-1:0.0: can't add hid device: -71
[  827.541611][T18035] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  827.552447][T18035] usb 2-1: USB disconnect, device number 124
[  827.641221][T11211] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  827.681992][T11211] usb 3-1: device descriptor read/8, error -71
[  827.700022][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3754'.
[  827.963590][T11211] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  828.002469][T11211] usb 3-1: device descriptor read/8, error -71
[  828.143503][T11211] usb usb3-port1: unable to enumerate USB device
[  828.753713][T18639] /dev/rnullb0: Can't open blockdev
[  828.813828][ T5908] usb 5-1: ch341-uart converter now attached to ttyUSB0
[  829.034295][T18644] /dev/rnullb0: Can't open blockdev
[  829.044655][ T5908] usb 5-1: USB disconnect, device number 9
[  829.067738][ T5908] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  829.108382][ T5908] ch341 5-1:0.0: device disconnected
[  829.296010][T18650] /dev/rnullb0: Can't open blockdev
[  829.634180][T18660] /dev/rnullb0: Can't open blockdev
[  829.844170][T18666] /dev/rnullb0: Can't open blockdev
[  829.852516][T18668] nfs: Unknown parameter '\]{N@{.'
[  829.941749][T18035] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  830.112314][T18035] usb 3-1: Using ep0 maxpacket: 16
[  830.122724][T18035] usb 3-1: config 166 has an invalid interface number: 177 but max is 1
[  830.161318][T18035] usb 3-1: config 166 has an invalid interface number: 34 but max is 1
[  830.169662][T18035] usb 3-1: config 166 has no interface number 0
[  830.201048][T18035] usb 3-1: config 166 has no interface number 1
[  830.229447][T18035] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  830.257082][T18035] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  830.299948][T18035] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  830.347315][T18035] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  830.374518][T18035] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  830.386159][T18035] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  830.447472][T18035] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  830.497031][T18035] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[  830.534349][T18035] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  830.591227][T18035] usb 3-1: config 166 interface 177 has no altsetting 0
[  830.611156][T18035] usb 3-1: config 166 interface 34 has no altsetting 0
[  830.634210][T18688] program syz.0.3768 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  830.644973][T18035] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  830.664478][T18035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.678230][T18688] /dev/rnullb0: Can't open blockdev
[  830.694743][T18035] usb 3-1: Product: syz
[  830.704881][T18035] usb 3-1: Manufacturer: syz
[  830.715001][T18035] usb 3-1: SerialNumber: syz
[  830.944716][T18035] ums-realtek 3-1:166.177: USB Mass Storage device detected
[  831.072561][T18035] ums-realtek 3-1:166.34: USB Mass Storage device detected
[  831.271594][T18035] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5
[  831.314017][T18035] usb 3-1: Found UVC 0.00 device syz (0bda:0138)
[  831.337883][T18035] usb 3-1: No valid video chain found.
[  831.387412][T18035] usb 3-1: USB disconnect, device number 2
[  831.801271][ T5908] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  831.971284][ T5908] usb 2-1: Using ep0 maxpacket: 8
[  831.989051][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short
[  832.002772][ T5908] usb 2-1: config 8 has an invalid interface number: 24 but max is 1
[  832.028674][ T5908] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  832.058649][ T5908] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2
[  832.070415][ T5908] usb 2-1: config 8 has no interface number 0
[  832.071243][T18035] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  832.086507][ T5908] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0
[  832.109730][ T5908] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  832.144549][ T5908] usb 2-1: config 8 interface 24 has no altsetting 0
[  832.168281][ T5908] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  832.198322][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.220631][ T5908] usb 2-1: Product: syz
[  832.240668][ T5908] usb 2-1: Manufacturer: syz
[  832.263658][ T5908] usb 2-1: SerialNumber: syz
[  832.301628][T18035] usb 3-1: unable to get BOS descriptor or descriptor too short
[  832.326229][T18035] usb 3-1: config 1 has an invalid interface number: 255 but max is 1
[  832.353366][T18035] usb 3-1: config 1 has no interface number 1
[  832.380236][T18035] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  832.413884][T18035] usb 3-1: config 1 interface 0 has no altsetting 0
[  832.420560][T18035] usb 3-1: config 1 interface 255 has no altsetting 0
[  832.470783][T18035] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  832.490460][T18035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.510745][T18035] usb 3-1: Product: syz
[  832.521339][T18035] usb 3-1: Manufacturer: syz
[  832.526016][T18035] usb 3-1: SerialNumber: syz
[  832.554190][ T5908] vmk80xx 2-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  832.577957][ T5908] vmk80xx 2-1:8.24: probe with driver vmk80xx failed with error -22
[  832.599119][ T5908] usb 2-1: USB disconnect, device number 125
[  832.614613][T13617] udevd[13617]: setting mode of /dev/bus/usb/002/125 to 020664 failed: No such file or directory
[  832.652247][T13617] udevd[13617]: setting owner of /dev/bus/usb/002/125 to uid=0, gid=0 failed: No such file or directory
[  832.916985][T18035] smsusb:smsusb_probe: board id=8, interface number 0
[  832.934752][T18035] smsusb:smsusb_probe: board id=8, interface number 255
[  832.958648][T18035] usb 3-1: USB disconnect, device number 3
[  833.070570][T18726] FAULT_INJECTION: forcing a failure.
[  833.070570][T18726] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  833.101236][T18726] CPU: 0 UID: 0 PID: 18726 Comm: syz.0.3775 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  833.101268][T18726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  833.101287][T18726] Call Trace:
[  833.101295][T18726]  <TASK>
[  833.101305][T18726]  dump_stack_lvl+0x189/0x250
[  833.101341][T18726]  ? __pfx____ratelimit+0x10/0x10
[  833.101373][T18726]  ? __pfx_dump_stack_lvl+0x10/0x10
[  833.101402][T18726]  ? __pfx__printk+0x10/0x10
[  833.101432][T18726]  ? __might_fault+0xb0/0x130
[  833.101469][T18726]  should_fail_ex+0x414/0x560
[  833.101502][T18726]  _copy_from_user+0x2d/0xb0
[  833.101527][T18726]  quota_setquota+0x115/0x540
[  833.101560][T18726]  ? __pfx_quota_setquota+0x10/0x10
[  833.101618][T18726]  ? do_quotactl+0x734/0x860
[  833.101655][T18726]  __se_sys_quotactl_fd+0x272/0x410
[  833.101700][T18726]  do_syscall_64+0xfa/0x3b0
[  833.101730][T18726]  ? lockdep_hardirqs_on+0x9c/0x150
[  833.101758][T18726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.101779][T18726]  ? clear_bhb_loop+0x60/0xb0
[  833.101804][T18726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.101830][T18726] RIP: 0033:0x7f53bdf8e9a9
[  833.101853][T18726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  833.101872][T18726] RSP: 002b:00007f53beed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb
[  833.101895][T18726] RAX: ffffffffffffffda RBX: 00007f53be1b5fa0 RCX: 00007f53bdf8e9a9
[  833.101910][T18726] RDX: 000000000000ee01 RSI: ffffffff80000800 RDI: 0000000000000003
[  833.101925][T18726] RBP: 00007f53beed7090 R08: 0000000000000000 R09: 0000000000000000
[  833.101938][T18726] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  833.101952][T18726] R13: 0000000000000000 R14: 00007f53be1b5fa0 R15: 00007ffca7178628
[  833.101986][T18726]  </TASK>
[  833.294211][    C0] vkms_vblank_simulate: vblank timer overrun
[  833.601314][ T5908] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  833.767941][ T5908] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  833.784114][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.821254][ T5908] usb 2-1: Product: syz
[  833.837256][ T5908] usb 2-1: Manufacturer: syz
[  833.860707][ T5908] usb 2-1: SerialNumber: syz
[  833.884160][ T5908] usb 2-1: config 0 descriptor??
[  833.890094][T18740] /dev/rnullb0: Can't open blockdev
[  833.902143][ T5908] ch341 2-1:0.0: ch341-uart converter detected
[  834.103788][T18748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3782'.
[  834.116696][T18749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3782'.
[  834.203236][   T30] audit: type=1326 audit(6044448709.054:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18745 comm="syz.2.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dddd8e9a9 code=0x7fc00000
[  834.370542][T18754] /dev/rnullb0: Can't open blockdev
[  834.564469][T18762] FAULT_INJECTION: forcing a failure.
[  834.564469][T18762] name failslab, interval 1, probability 0, space 0, times 0
[  834.582781][T18762] CPU: 1 UID: 0 PID: 18762 Comm: syz.2.3787 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  834.582812][T18762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  834.582826][T18762] Call Trace:
[  834.582835][T18762]  <TASK>
[  834.582844][T18762]  dump_stack_lvl+0x189/0x250
[  834.582882][T18762]  ? __pfx____ratelimit+0x10/0x10
[  834.582913][T18762]  ? __pfx_dump_stack_lvl+0x10/0x10
[  834.582942][T18762]  ? __pfx__printk+0x10/0x10
[  834.582979][T18762]  ? __pfx___might_resched+0x10/0x10
[  834.583011][T18762]  should_fail_ex+0x414/0x560
[  834.583044][T18762]  should_failslab+0xa8/0x100
[  834.583071][T18762]  kmem_cache_alloc_noprof+0x73/0x3c0
[  834.583094][T18762]  ? dqget+0x3c1/0xf10
[  834.583118][T18762]  dqget+0x3c1/0xf10
[  834.583150][T18762]  dquot_set_dqblk+0x2b/0xfa0
[  834.583184][T18762]  quota_setquota+0x4b7/0x540
[  834.583217][T18762]  ? __pfx_quota_setquota+0x10/0x10
[  834.583274][T18762]  ? do_quotactl+0x734/0x860
[  834.583316][T18762]  __se_sys_quotactl_fd+0x272/0x410
[  834.583351][T18762]  do_syscall_64+0xfa/0x3b0
[  834.583380][T18762]  ? lockdep_hardirqs_on+0x9c/0x150
[  834.583409][T18762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.583430][T18762]  ? clear_bhb_loop+0x60/0xb0
[  834.583456][T18762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.583476][T18762] RIP: 0033:0x7f4dddd8e9a9
[  834.583495][T18762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  834.583513][T18762] RSP: 002b:00007f4ddec31038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb
[  834.583536][T18762] RAX: ffffffffffffffda RBX: 00007f4dddfb5fa0 RCX: 00007f4dddd8e9a9
[  834.583551][T18762] RDX: 000000000000ee01 RSI: ffffffff80000800 RDI: 0000000000000003
[  834.583565][T18762] RBP: 00007f4ddec31090 R08: 0000000000000000 R09: 0000000000000000
[  834.583579][T18762] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  834.583592][T18762] R13: 0000000000000000 R14: 00007f4dddfb5fa0 R15: 00007ffefa5b9288
[  834.583625][T18762]  </TASK>
[  834.793049][    C1] vkms_vblank_simulate: vblank timer overrun
[  834.918329][T18765] /dev/rnullb0: Can't open blockdev
[  835.093776][T18778] /dev/rnullb0: Can't open blockdev
[  835.243800][T18780] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  835.281257][T18780] CIFS: Unable to determine destination address
[  835.281708][ T5908] usb 2-1: ch341-uart converter now attached to ttyUSB0
[  835.466563][T18796] FAULT_INJECTION: forcing a failure.
[  835.466563][T18796] name failslab, interval 1, probability 0, space 0, times 0
[  835.496842][T18796] CPU: 1 UID: 0 PID: 18796 Comm: syz.0.3797 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  835.496872][T18796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  835.496884][T18796] Call Trace:
[  835.496893][T18796]  <TASK>
[  835.496902][T18796]  dump_stack_lvl+0x189/0x250
[  835.496934][T18796]  ? __pfx____ratelimit+0x10/0x10
[  835.496961][T18796]  ? __pfx_dump_stack_lvl+0x10/0x10
[  835.496987][T18796]  ? __pfx__printk+0x10/0x10
[  835.497018][T18796]  ? __pfx___might_resched+0x10/0x10
[  835.497039][T18796]  ? fs_reclaim_acquire+0x7d/0x100
[  835.497068][T18796]  should_fail_ex+0x414/0x560
[  835.497101][T18796]  should_failslab+0xa8/0x100
[  835.497129][T18796]  __kmalloc_cache_noprof+0x70/0x3d0
[  835.497153][T18796]  ? shmem_acquire_dquot+0x26e/0x640
[  835.497187][T18796]  shmem_acquire_dquot+0x26e/0x640
[  835.497216][T18796]  ? percpu_counter_add_batch+0xea/0x1e0
[  835.497247][T18796]  dqget+0x7b1/0xf10
[  835.497279][T18796]  dquot_set_dqblk+0x2b/0xfa0
[  835.497312][T18796]  quota_setquota+0x4b7/0x540
[  835.497345][T18796]  ? __pfx_quota_setquota+0x10/0x10
[  835.497404][T18796]  ? do_quotactl+0x734/0x860
[  835.497441][T18796]  __se_sys_quotactl_fd+0x272/0x410
[  835.497477][T18796]  do_syscall_64+0xfa/0x3b0
[  835.497506][T18796]  ? lockdep_hardirqs_on+0x9c/0x150
[  835.497543][T18796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.497565][T18796]  ? clear_bhb_loop+0x60/0xb0
[  835.497590][T18796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.497610][T18796] RIP: 0033:0x7f53bdf8e9a9
[  835.497629][T18796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  835.497650][T18796] RSP: 002b:00007f53beed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb
[  835.497672][T18796] RAX: ffffffffffffffda RBX: 00007f53be1b5fa0 RCX: 00007f53bdf8e9a9
[  835.497688][T18796] RDX: 000000000000ee01 RSI: ffffffff80000800 RDI: 0000000000000003
[  835.497702][T18796] RBP: 00007f53beed7090 R08: 0000000000000000 R09: 0000000000000000
[  835.497716][T18796] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  835.497730][T18796] R13: 0000000000000000 R14: 00007f53be1b5fa0 R15: 00007ffca7178628
[  835.497764][T18796]  </TASK>
[  835.509529][ T3100] usb 2-1: USB disconnect, device number 126
[  835.759776][ T3100] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  835.780455][ T3100] ch341 2-1:0.0: device disconnected
[  835.929514][T18804] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  835.974486][T18812] : Can't lookup blockdev
[  836.201529][T15499] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  836.235427][T18824] FAULT_INJECTION: forcing a failure.
[  836.235427][T18824] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  836.249478][T18824] CPU: 0 UID: 0 PID: 18824 Comm: syz.1.3806 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  836.249506][T18824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  836.249518][T18824] Call Trace:
[  836.249525][T18824]  <TASK>
[  836.249533][T18824]  dump_stack_lvl+0x189/0x250
[  836.249562][T18824]  ? __pfx____ratelimit+0x10/0x10
[  836.249588][T18824]  ? __pfx_dump_stack_lvl+0x10/0x10
[  836.249611][T18824]  ? __pfx__printk+0x10/0x10
[  836.249645][T18824]  should_fail_ex+0x414/0x560
[  836.249672][T18824]  _copy_to_user+0x31/0xb0
[  836.249693][T18824]  simple_read_from_buffer+0xe1/0x170
[  836.249721][T18824]  proc_fail_nth_read+0x1b3/0x220
[  836.249742][T18824]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  836.249763][T18824]  ? rw_verify_area+0x2a6/0x4d0
[  836.249783][T18824]  ? __lock_acquire+0xab9/0xd20
[  836.249801][T18824]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  836.249820][T18824]  vfs_read+0x1fd/0x980
[  836.249841][T18824]  ? fdget_pos+0x247/0x320
[  836.249859][T18824]  ? __pfx___mutex_lock+0x10/0x10
[  836.249885][T18824]  ? __pfx_vfs_read+0x10/0x10
[  836.249907][T18824]  ? __fget_files+0x2a/0x420
[  836.249935][T18824]  ? __fget_files+0x3a0/0x420
[  836.249959][T18824]  ? __fget_files+0x2a/0x420
[  836.249991][T18824]  ksys_read+0x145/0x250
[  836.250010][T18824]  ? __se_sys_quotactl_fd+0x3bf/0x410
[  836.250035][T18824]  ? __pfx_ksys_read+0x10/0x10
[  836.250061][T18824]  ? do_syscall_64+0xbe/0x3b0
[  836.250090][T18824]  do_syscall_64+0xfa/0x3b0
[  836.250113][T18824]  ? lockdep_hardirqs_on+0x9c/0x150
[  836.250137][T18824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.250153][T18824]  ? clear_bhb_loop+0x60/0xb0
[  836.250174][T18824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.250191][T18824] RIP: 0033:0x7fe5f898d3bc
[  836.250214][T18824] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  836.250230][T18824] RSP: 002b:00007fe5f67f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  836.250248][T18824] RAX: ffffffffffffffda RBX: 00007fe5f8bb5fa0 RCX: 00007fe5f898d3bc
[  836.250261][T18824] RDX: 000000000000000f RSI: 00007fe5f67f60a0 RDI: 0000000000000004
[  836.250271][T18824] RBP: 00007fe5f67f6090 R08: 0000000000000000 R09: 0000000000000000
[  836.250282][T18824] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  836.250293][T18824] R13: 0000000000000000 R14: 00007fe5f8bb5fa0 R15: 00007ffce1675788
[  836.250318][T18824]  </TASK>
[  836.574877][T15499] usb 3-1: Using ep0 maxpacket: 8
[  836.586616][T15499] usb 3-1: config index 0 descriptor too short (expected 19730, got 18)
[  836.595902][T15499] usb 3-1: config 0 has too many interfaces: 54, using maximum allowed: 32
[  836.607279][T15499] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 54
[  836.628477][T15499] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d
[  836.643307][T15499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.662913][T15499] usb 3-1: Product: syz
[  836.677588][T15499] usb 3-1: Manufacturer: syz
[  836.686992][T15499] usb 3-1: SerialNumber: syz
[  836.693341][T18831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3809'.
[  836.705593][T15499] usb 3-1: config 0 descriptor??
[  836.734594][T15499] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  836.933834][T18810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  836.985989][T18810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  837.025226][T15499] gspca_sn9c2028: read1 error -71
[  837.027930][T18838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3810'.
[  837.040492][T15499] gspca_sn9c2028: read1 error -71
[  837.053393][T18838] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  837.060584][T18838] /dev/rnullb0: Can't open blockdev
[  837.068882][T15499] gspca_sn9c2028: read1 error -71
[  837.084209][T15499] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71
[  837.102693][T15499] usb 3-1: USB disconnect, device number 4
[  837.223309][ T3100] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  837.381302][ T3100] usb 2-1: Using ep0 maxpacket: 16
[  837.388208][ T3100] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  837.400116][ T3100] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  837.412508][ T3100] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  837.426881][ T3100] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  837.438791][ T3100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.448007][ T3100] usb 2-1: Product: syz
[  837.452535][ T3100] usb 2-1: Manufacturer: syz
[  837.457540][ T3100] usb 2-1: SerialNumber: syz
[  837.682488][T18836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  837.698241][T18836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  837.748176][ T3100] usb 2-1: 0:2 : does not exist
[  837.794857][ T3100] usb 2-1: USB disconnect, device number 127
[  837.841850][T13617] udevd[13617]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  837.873210][T18035] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  837.943522][T15499] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  837.979701][T18860] /dev/rnullb0: Can't open blockdev
[  838.057617][T18035] usb 5-1: config 0 has an invalid interface number: 119 but max is 0
[  838.067595][T18035] usb 5-1: config 0 has no interface number 0
[  838.087157][T18035] usb 5-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=8e.db
[  838.096987][T18035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.106135][T18035] usb 5-1: Product: syz
[  838.109838][T15499] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  838.110458][T18035] usb 5-1: Manufacturer: syz
[  838.127403][T18035] usb 5-1: SerialNumber: syz
[  838.127740][T15499] usb 3-1: config 0 interface 0 has no altsetting 0
[  838.143143][T15499] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  838.152063][T18035] usb 5-1: config 0 descriptor??
[  838.161327][T15499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.167273][T18035] gspca_main: sonixj-2.14.0 probing 0c45:612a
[  838.181281][T15499] usb 3-1: Product: syz
[  838.185526][T15499] usb 3-1: Manufacturer: syz
[  838.190203][T15499] usb 3-1: SerialNumber: syz
[  838.202103][T15499] usb 3-1: config 0 descriptor??
[  838.219594][T15499] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  838.235134][T15499] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  838.250484][T15499] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  838.260128][T15499] usb 3-1: media controller created
[  838.289662][T15499] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  838.373735][T15499] DVB: Unable to find symbol tda10046_attach()
[  838.379980][T15499] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  838.396362][T15499] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  838.464171][T18873] validate_nla: 56 callbacks suppressed
[  838.464188][T18873] netlink: 'syz.1.3823': attribute type 21 has an invalid length.
[  838.480217][T18873] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3823'.
[  838.492388][T18873] /dev/rnullb0: Can't open blockdev
[  838.567797][T18035] gspca_sonixj: reg_r err -32
[  838.573063][T18035] sonixj 5-1:0.119: probe with driver sonixj failed with error -32
[  838.915256][T18884] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  838.926322][T18884] /dev/rnullb0: Can't open blockdev
[  838.961493][ T5901] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  838.998837][T18887] syz.0.3828: attempt to access beyond end of device
[  838.998837][T18887] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0
[  839.012373][T18887] XFS (nbd0): SB validate failed with error -5.
[  839.134165][T18895] netlink: 'syz.0.3829': attribute type 1 has an invalid length.
[  839.142816][T18895] netlink: 'syz.0.3829': attribute type 4 has an invalid length.
[  839.153656][ T5901] usb 2-1: no configurations
[  839.158357][ T5901] usb 2-1: can't read configurations, error -22
[  839.158417][T18895] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3829'.
[  839.304871][ T5901] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  839.439354][T15499] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  839.469905][T15499] usb 3-1: USB disconnect, device number 5
[  839.480297][ T5901] usb 2-1: no configurations
[  839.500753][ T5901] usb 2-1: can't read configurations, error -22
[  839.524196][ T5901] usb usb2-port1: attempt power cycle
[  839.882003][ T5901] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  839.916741][ T5901] usb 2-1: no configurations
[  839.924265][ T5901] usb 2-1: can't read configurations, error -22
[  840.071465][ T5901] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  840.115452][ T5901] usb 2-1: no configurations
[  840.120409][ T5901] usb 2-1: can't read configurations, error -22
[  840.141279][ T5901] usb usb2-port1: unable to enumerate USB device
[  840.177415][T18910] /dev/rnullb0: Can't open blockdev
[  840.270448][T18914] ntfs3(loop0): try to read out of volume at offset 0x0
[  840.613933][T18926] netlink: 679 bytes leftover after parsing attributes in process `syz.2.3835'.
[  840.640897][T18926] /dev/rnullb0: Can't open blockdev
[  840.897979][T18938] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  840.939531][T18938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3839'.
[  841.025928][T18940] /dev/rnullb0: Can't open blockdev
[  841.125737][T11211] usb 5-1: USB disconnect, device number 10
[  841.679998][T18960] /dev/rnullb0: Can't open blockdev
[  841.769625][T18963] /dev/rnullb0: Can't open blockdev
[  842.084017][T18976] /dev/rnullb0: Can't open blockdev
[  842.221370][T18035] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  842.406288][T18035] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  842.420626][T18035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.432028][T18035] usb 2-1: Product: syz
[  842.436248][T18035] usb 2-1: Manufacturer: syz
[  842.440861][T18035] usb 2-1: SerialNumber: syz
[  842.457625][T18035] usb 2-1: config 0 descriptor??
[  842.465601][T18035] ch341 2-1:0.0: ch341-uart converter detected
[  842.593591][T18996] /dev/rnullb0: Can't open blockdev
[  842.687676][T19000] overlayfs: failed to resolve './file0': -2
[  842.810394][T19006] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  842.926837][T19011] /dev/rnullb0: Can't open blockdev
[  843.084870][T19013] could not allocate digest TFM handle blake2s-160
[  843.101743][T19015] could not allocate digest TFM handle blake2s-160
[  843.280597][T19024] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000
[  843.369805][T19026] Malformed UNC in devname
[  843.369805][T19026] 
[  843.377245][T19026] CIFS: VFS: Malformed UNC in devname
[  843.417880][T11079] tipc: Subscription rejected, illegal request
[  843.555707][T19032] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3869'.
[  843.567003][T19032] /dev/rnullb0: Can't open blockdev
[  843.683776][T18035] ch341-uart ttyUSB0: failed to read break control: -71
[  843.695139][T18035] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  843.722786][T18035] usb 2-1: USB disconnect, device number 6
[  843.742478][T18035] ch341 2-1:0.0: device disconnected
[  843.848760][T19040] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  843.889730][T19040] /dev/rnullb0: Can't open blockdev
[  844.192204][T18267] Bluetooth: hci1: unexpected cc 0x0402 length: 81 > 1
[  844.199253][T18267] Bluetooth: hci1: unexpected event for opcode 0x0402
[  844.326706][T19058] /dev/rnullb0: Can't open blockdev
[  844.432231][T19063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3880'.
[  844.663087][T19076] /dev/rnullb0: Can't open blockdev
[  844.803652][T19080] /dev/rnullb0: Can't open blockdev
[  845.084285][T19097] /dev/rnullb0: Can't open blockdev
[  845.111344][ T3100] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  845.151611][ T5901] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  845.276195][ T3100] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  845.287400][ T3100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.311591][ T3100] usb 5-1: Product: syz
[  845.315828][ T3100] usb 5-1: Manufacturer: syz
[  845.322762][ T3100] usb 5-1: SerialNumber: syz
[  845.324389][ T5901] usb 2-1: Using ep0 maxpacket: 16
[  845.337906][ T3100] usb 5-1: config 0 descriptor??
[  845.342623][ T5901] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=71.c9
[  845.354190][ T3100] ch341 5-1:0.0: ch341-uart converter detected
[  845.363053][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.380175][ T5901] usb 2-1: Product: syz
[  845.384703][ T5901] usb 2-1: Manufacturer: syz
[  845.389667][ T5901] usb 2-1: SerialNumber: syz
[  845.410571][ T5901] usb 2-1: config 0 descriptor??
[  845.423217][ T5901] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32
[  845.441251][T18267] Bluetooth: hci2: command 0x0419 tx timeout
[  845.623015][T19087] /dev/rnullb0: Can't open blockdev
[  845.629492][ T5901] usb 2-1: USB disconnect, device number 7
[  846.103286][ T5901] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  846.265314][ T5901] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  846.278518][ T5901] usb 3-1: config 1 interface 0 has no altsetting 0
[  846.289874][ T5901] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.40
[  846.300023][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.312579][ T5901] usb 3-1: Product: syz
[  846.316800][ T5901] usb 3-1: Manufacturer: syz
[  846.324553][ T5901] usb 3-1: SerialNumber: syz
[  846.553537][ T5901] usbhid 3-1:1.0: can't add hid device: -71
[  846.559856][ T5901] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  846.577063][ T5901] usb 3-1: USB disconnect, device number 6
[  847.069178][T19118] 8021q: VLANs not supported on syzkaller1
[  847.180217][T19121] can0: slcan on ptm0.
[  847.198658][T19123] nbd: couldn't find device at index 587202560
[  847.217916][ T3100] ch341-uart ttyUSB0: failed to read break control: -110
[  847.236549][ T3100] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[  847.451506][T18035] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  847.631331][T18035] usb 3-1: Using ep0 maxpacket: 8
[  847.640605][T18035] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  847.662424][T18035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.677757][T18035] usb 3-1: Product: syz
[  847.690190][T18035] usb 3-1: Manufacturer: syz
[  847.700653][T18035] usb 3-1: SerialNumber: syz
[  847.721619][T18035] usb 3-1: config 0 descriptor??
[  847.887551][ T3100] usb 5-1: USB disconnect, device number 11
[  847.920242][ T3100] ch341 5-1:0.0: device disconnected
[  847.938528][T18035] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  847.988128][T19152] ./file0: Can't lookup blockdev
[  847.997198][T19152] ./file0: Can't lookup blockdev
[  848.671407][ T3100] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  848.844666][ T3100] usb 2-1: config 7 has an invalid interface number: 252 but max is 0
[  848.857328][ T3100] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  848.869067][ T3100] usb 2-1: config 7 has no interface number 0
[  848.880731][ T3100] usb 2-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  848.904948][ T3100] usb 2-1: config 7 interface 252 has no altsetting 0
[  848.916995][ T3100] usb 2-1: string descriptor 0 read error: -22
[  848.927461][ T3100] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  848.937480][ T3100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.222571][T18035] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  849.273713][T18035] usb 3-1: USB disconnect, device number 7
[  849.321190][ T5908] usb 2-1: USB disconnect, device number 8
[  849.362505][T19120] can0 (unregistered): slcan off ptm0.
[  849.995110][T19177] netlink: 'syz.1.3908': attribute type 32 has an invalid length.
[  850.062761][T19180] fuse: Bad value for 'fd'
[  850.067655][T19180] fuse: Bad value for 'fd'
[  850.243351][T19189] /dev/rnullb0: Can't open blockdev
[  850.351671][T19193] /dev/rnullb0: Can't open blockdev
[  850.456462][T19200] openvswitch: netlink: EtherType 0 is less than min 600
[  850.641604][ T5901] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  850.781416][T15499] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  850.804199][ T5901] usb 2-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config
[  850.816907][T19217] /dev/rnullb0: Can't open blockdev
[  850.822021][ T5901] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  850.843480][ T5901] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  850.861901][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.881328][ T5901] usb 2-1: Product: syz
[  850.885579][ T5901] usb 2-1: Manufacturer: syz
[  850.890247][ T5901] usb 2-1: SerialNumber: syz
[  850.904533][ T5901] usb 2-1: config 0 descriptor??
[  850.921229][T15499] usb 5-1: device descriptor read/64, error -71
[  850.935879][T19220] /dev/rnullb0: Can't open blockdev
[  851.181906][T15499] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  851.311560][T18035] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  851.321271][T15499] usb 5-1: device descriptor read/64, error -71
[  851.433680][T15499] usb usb5-port1: attempt power cycle
[  851.471263][T18035] usb 3-1: Using ep0 maxpacket: 16
[  851.478625][T18035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  851.489480][T18035] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  851.507079][T19247] /dev/rnullb0: Can't open blockdev
[  851.512480][T18035] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  851.523453][T18035] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  851.538028][T18035] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  851.562361][T18035] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  851.574815][T18035] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  851.583312][T18035] usb 3-1: Manufacturer: syz
[  851.595518][T18035] usb 3-1: config 0 descriptor??
[  851.771461][T15499] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  851.791916][T15499] usb 5-1: device descriptor read/8, error -71
[  851.871501][T18035] rc_core: IR keymap rc-hauppauge not found
[  851.877588][T18035] Registered IR keymap rc-empty
[  851.882950][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  851.902032][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  851.922493][T18035] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  851.936156][T18035] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input90
[  851.951512][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  851.971532][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  851.991275][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  852.011324][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  852.031312][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  852.031469][T15499] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  852.051511][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  852.063294][T15499] usb 5-1: device descriptor read/8, error -71
[  852.071325][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  852.091270][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  852.111338][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  852.131364][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  852.151291][T18035] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  852.173499][T15499] usb usb5-port1: unable to enumerate USB device
[  852.182448][T18035] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  852.193628][T18035] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  852.222953][T18035] usb 3-1: USB disconnect, device number 8
[  852.380813][T19262] can: request_module (can-proto-5) failed.
[  852.742434][T19271] /dev/rnullb0: Can't open blockdev
[  853.061823][T18035] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  853.214931][T18035] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  853.223842][T18035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  853.236381][T18035] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c
[  853.245820][T18035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.253898][T18035] usb 3-1: Product: syz
[  853.258224][T18035] usb 3-1: Manufacturer: syz
[  853.262977][T18035] usb 3-1: SerialNumber: syz
[  853.270057][T18035] usb 3-1: config 0 descriptor??
[  853.280492][T18035] ims_pcu 3-1:0.0: Missing CDC union descriptor
[  853.286956][T18035] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22
[  853.484130][T19273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  853.493374][T19273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  853.504026][T19273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  853.514155][T19273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  853.524288][T19273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  853.534013][T19273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  853.545972][ T5901] usb 3-1: USB disconnect, device number 9
[  853.636044][T19276] 9p filesystem being mounted at /70/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  853.820263][T19281] MTD: Couldn't look up '/dev/sr0': -2
[  853.872808][T19283] /dev/rnullb0: Can't open blockdev
[  853.887198][T19283] /dev/rnullb0: Can't open blockdev
[  854.190660][T18035] usb 2-1: USB disconnect, device number 9
[  854.397056][T19300] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  854.412417][T19300] /dev/rnullb0: Can't open blockdev
[  854.699796][T19312] /dev/rnullb0: Can't open blockdev
[  854.784007][T19315] binder: 19314:19315 ioctl c018620b 200000000140 returned -14
[  854.866971][T19315] binder: 19314:19315 ioctl c0306201 200000001bc0 returned -14
[  854.976190][   T30] audit: type=1400 audit(6044448729.834:126): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  855.079179][T19327] /dev/rnullb0: Can't open blockdev
[  855.437626][T19338] /dev/rnullb0: Can't open blockdev
[  855.438719][T19336] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3945'.
[  855.462426][T19339] program syz.2.3944 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  856.552122][T19355] overlayfs: missing 'lowerdir'
[  856.922459][T19372] overlayfs: unescaped trailing colons in lowerdir mount option.
[  857.211937][T18035] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  857.260196][T19389] /dev/sg0: Can't lookup blockdev
[  857.314452][T19391] /dev/rnullb0: Can't open blockdev
[  857.341758][T18035] usb 3-1: device descriptor read/64, error -71
[  857.593544][T18035] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  857.675181][T19401] /dev/rnullb0: Can't open blockdev
[  857.697365][T19400] /dev/rnullb0: Can't open blockdev
[  857.731396][T18035] usb 3-1: device descriptor read/64, error -71
[  857.765731][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'.
[  857.775016][T19406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3967'.
[  857.784098][T19406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3967'.
[  857.795676][T19406] No source specified
[  857.852316][T18035] usb usb3-port1: attempt power cycle
[  858.011007][T19414] netlink: 'syz.1.3970': attribute type 1 has an invalid length.
[  858.019322][T19414] netlink: 'syz.1.3970': attribute type 1 has an invalid length.
[  858.201215][T18035] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  858.207318][T19420] /dev/rnullb0: Can't open blockdev
[  858.221807][T18035] usb 3-1: device descriptor read/8, error -71
[  858.461268][T18035] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  858.497896][T18035] usb 3-1: device descriptor read/8, error -71
[  858.497918][T19428] /dev/rnullb0: Can't open blockdev
[  858.559671][T19430] /dev/rnullb0: Can't open blockdev
[  858.642655][T18035] usb usb3-port1: unable to enumerate USB device
[  858.737730][T19437] /dev/rnullb0: Can't open blockdev
[  858.745884][T19437] /dev/rnullb0: Can't open blockdev
[  859.251250][T18035] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  859.426234][T18035] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  859.435850][T18035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.445792][T18035] usb 2-1: Product: syz
[  859.450007][T18035] usb 2-1: Manufacturer: syz
[  859.454828][T18035] usb 2-1: SerialNumber: syz
[  859.462781][T18035] usb 2-1: config 0 descriptor??
[  859.470936][T18035] ch341 2-1:0.0: ch341-uart converter detected
[  859.829174][T19449] /dev/rnullb0: Can't open blockdev
[  860.068935][T19453] /dev/rnullb0: Can't open blockdev
[  860.356173][T19459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3987'.
[  860.366294][T19459] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  860.689889][T18035] usb 2-1: ch341-uart converter now attached to ttyUSB0
[  860.736543][T19465] /dev/rnullb0: Can't open blockdev
[  860.888961][ T3100] usb 2-1: USB disconnect, device number 10
[  860.912196][ T3100] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  860.932948][ T3100] ch341 2-1:0.0: device disconnected
[  861.121393][T18035] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  861.271316][T18035] usb 5-1: Using ep0 maxpacket: 8
[  861.278857][T18035] usb 5-1: unable to get BOS descriptor or descriptor too short
[  861.289594][T18035] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[  861.297993][T18035] usb 5-1: config 0 has no interface number 0
[  861.304339][T18035] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 162, changing to 11
[  861.316677][T18035] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 33781, setting to 1024
[  861.321305][   T44] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  861.328152][T18035] usb 5-1: config 0 interface 88 has no altsetting 0
[  861.345171][T18035] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.26
[  861.354319][T18035] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  861.362467][T18035] usb 5-1: Product: syz
[  861.366655][T18035] usb 5-1: Manufacturer: syz
[  861.371360][T18035] usb 5-1: SerialNumber: syz
[  861.378196][T18035] usb 5-1: config 0 descriptor??
[  861.456197][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3991'.
[  861.495157][   T44] usb 3-1: not running at top speed; connect to a high speed hub
[  861.504295][   T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  861.516599][   T44] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  861.530258][   T44] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  861.539973][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.548518][   T44] usb 3-1: Product: syz
[  861.553062][   T44] usb 3-1: Manufacturer: syz
[  861.557715][   T44] usb 3-1: SerialNumber: syz
[  861.568772][T19471] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  861.578723][   T44] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  861.595009][   T44] cdc_ncm 3-1:1.0: bind() failure
[  861.599058][T19468] /dev/rnullb0: Can't open blockdev
[  861.608852][   T44] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  861.618116][   T44] cdc_ncm 3-1:1.1: bind() failure
[  861.668598][T18035] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input92
[  861.729983][T18035] usb 5-1: USB disconnect, device number 16
[  861.736087][    C0] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -19
[  861.823476][T19481] /dev/rnullb0: Can't open blockdev
[  861.824681][T13500] udevd[13500]: Error opening device "/dev/input/event4": No such file or directory
[  861.838691][T19471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  861.859281][T19471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  861.883107][T13500] udevd[13500]: Unable to EVIOCGABS device "/dev/input/event4"
[  861.896776][T19485] /dev/rnullb0: Can't open blockdev
[  861.899072][T19471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  861.915798][T13500] udevd[13500]: Unable to EVIOCGABS device "/dev/input/event4"
[  861.932136][T19471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  862.077334][T19491] /dev/rnullb0: Can't open blockdev
[  862.308384][T19502] /dev/rnullb0: Can't open blockdev
[  862.362942][T19505] /dev/rnullb0: Can't open blockdev
[  862.491259][T18035] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  862.621279][T18035] usb 5-1: device descriptor read/64, error -71
[  862.649347][T19512] /dev/rnullb0: Can't open blockdev
[  862.700540][T19514] overlay: Unknown parameter 'euid<00000000000000000000'
[  862.861230][T18035] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  862.991431][T18035] usb 5-1: device descriptor read/64, error -71
[  863.102932][T18035] usb usb5-port1: attempt power cycle
[  863.461410][T18035] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  863.482051][T18035] usb 5-1: device descriptor read/8, error -71
[  863.591232][   T44] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  863.731298][T18035] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  863.743505][   T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  863.754406][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 255, setting to 64
[  863.761899][T18035] usb 5-1: device descriptor read/8, error -71
[  863.766916][   T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  863.786632][   T44] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  863.796783][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.805024][   T44] usb 2-1: Product: syz
[  863.809219][   T44] usb 2-1: Manufacturer: syz
[  863.813901][   T44] usb 2-1: SerialNumber: syz
[  863.821002][   T44] usb 2-1: config 0 descriptor??
[  863.827018][T19520] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[  863.835874][   T44] usb 2-1: ucan: probing device on interface #0
[  863.843112][   T44] usb 2-1: ucan: invalid EP count (1)
[  863.848531][   T44] usb 2-1: ucan: probe failed; try to update the device firmware
[  863.883388][T18035] usb usb5-port1: unable to enumerate USB device
[  864.040718][T19520] /dev/rnullb0: Can't open blockdev
[  864.050304][T18035] usb 2-1: USB disconnect, device number 11
[  864.082374][T11211] usb 3-1: USB disconnect, device number 14
[  864.949234][T19528] program syz.1.4012 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  865.099797][T19531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4013'.
[  865.109588][T19531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4013'.
[  865.131706][T19531] /dev/rnullb0: Can't open blockdev
[  865.307477][T19544] MTD: Couldn't look up './file0': -15
[  865.511516][T15499] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  865.550680][T19557] netlink: 884 bytes leftover after parsing attributes in process `syz.0.4023'.
[  865.563287][T19548] /dev/rnullb0: Can't open blockdev
[  865.570802][T19553] /dev/rnullb0: Can't open blockdev
[  865.648174][T19559] binder: BINDER_SET_CONTEXT_MGR bad uid 255 != 0
[  865.655116][T19559] binder: 19558:19559 ioctl 4018620d 200000000040 returned -1
[  865.683248][T15499] usb 2-1: Using ep0 maxpacket: 8
[  865.696131][T15499] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  865.710860][T15499] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  865.722589][T15499] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  865.734426][T15499] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  865.747414][T15499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  865.764162][T15499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  865.775340][T15499] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  865.800922][T15499] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  865.814894][T15499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.823556][T15499] usb 2-1: Product: syz
[  865.827912][T15499] usb 2-1: Manufacturer: syz
[  865.836289][T15499] usb 2-1: SerialNumber: syz
[  865.847422][T15499] usb 2-1: config 0 descriptor??
[  865.862382][T15499] hub 2-1:0.0: bad descriptor, ignoring hub
[  865.868501][T15499] hub 2-1:0.0: probe with driver hub failed with error -5
[  865.882662][T15499] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input93
[  866.171222][T15499] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  866.357206][T15499] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  866.381838][T15499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.389908][T15499] usb 5-1: Product: syz
[  866.396557][T15499] usb 5-1: Manufacturer: syz
[  866.430499][T15499] usb 5-1: SerialNumber: syz
[  866.462332][T15499] usb 5-1: config 0 descriptor??
[  866.479360][T15499] ch341 5-1:0.0: ch341-uart converter detected
[  866.544574][T19585] /dev/rnullb0: Can't open blockdev
[  866.903198][T11211] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  867.075277][T11211] usb 3-1: Using ep0 maxpacket: 8
[  867.085918][T11211] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  867.103165][T11211] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  867.199239][T11211] usb 3-1: string descriptor 0 read error: -22
[  867.216209][T11211] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  867.231162][T11211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.740458][T15499] usb 5-1: ch341-uart converter now attached to ttyUSB0
[  867.934744][T19567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  867.946754][T19567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  867.967316][T18035] usb 5-1: USB disconnect, device number 21
[  867.992348][T18035] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  868.032061][T18035] ch341 5-1:0.0: device disconnected
[  868.078313][T11211] cdc_ncm 3-1:1.0: bind() failure
[  868.120513][T11211] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  868.135931][T11211] cdc_ncm 3-1:1.1: bind() failure
[  868.150972][T11211] usb 3-1: USB disconnect, device number 15
[  868.262325][T15499] usb 2-1: USB disconnect, device number 12
[  868.416525][T19595] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  868.450617][T19595] Error validating options; rc = [-22]
[  868.569806][T19601] /dev/rnullb0: Can't open blockdev
[  868.665191][T11211] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  868.671716][T19605] /dev/rnullb0: Can't open blockdev
[  868.838466][T11211] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  868.854191][T11211] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  868.885405][T11211] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  868.904967][T11211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.919532][T11211] usb 3-1: Product: syz
[  868.926401][T11211] usb 3-1: Manufacturer: syz
[  868.931750][T11211] usb 3-1: SerialNumber: syz
[  869.010398][T19617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  869.024257][T19617] netlink: 'syz.1.4041': attribute type 1 has an invalid length.
[  869.032131][T19617] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4041'.
[  869.052365][T19616] overlay: ./file0 is not a directory
[  869.221688][T11211] cdc_ncm 3-1:1.0: bind() failure
[  869.236903][T11211] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  869.244352][T11211] cdc_ncm 3-1:1.1: bind() failure
[  869.255774][T11211] usb 3-1: USB disconnect, device number 16
[  869.449194][T19625] /dev/rnullb0: Can't open blockdev
[  869.715116][ T3100] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  869.740062][T19636] sctp: [Deprecated]: syz.1.4046 (pid 19636) Use of struct sctp_assoc_value in delayed_ack socket option.
[  869.740062][T19636] Use struct sctp_sack_info instead
[  869.788247][   T30] audit: type=1107 audit(6044448744.644:127): pid=19637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='…3ÎèvŸn‡îHPQ1ü!žTØ7©½JXëi9vv�ÎýWIi�þîu‚õÚRa”TP¨Ïvdý!2´cÁr¦U’'
[  869.911382][ T3100] usb 5-1: Using ep0 maxpacket: 8
[  869.924056][ T3100] usb 5-1: unable to get BOS descriptor or descriptor too short
[  869.935050][ T3100] usb 5-1: config 7 has an invalid interface number: 59 but max is 0
[  869.943807][ T3100] usb 5-1: config 7 has no interface number 0
[  869.952951][ T3100] usb 5-1: config 7 interface 59 has no altsetting 0
[  869.962276][ T3100] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70
[  869.971930][ T3100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.980045][ T3100] usb 5-1: Product: syz
[  869.990642][ T3100] usb 5-1: Manufacturer: syz
[  869.995439][ T3100] usb 5-1: SerialNumber: syz
[  870.001665][T15499] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  870.164951][T15499] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  870.175371][T15499] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  870.188294][T15499] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  870.198736][T15499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  870.207256][T15499] usb 2-1: SerialNumber: syz
[  870.213295][ T3100] kobil_sct 5-1:7.59: KOBIL USB smart card terminal converter detected
[  870.231826][ T3100] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  870.251023][ T3100] usb 5-1: USB disconnect, device number 22
[  870.268582][ T3100] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  870.280615][ T3100] kobil_sct 5-1:7.59: device disconnected
[  870.322018][   T44] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  870.437798][T19634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  870.447076][T19634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  870.481722][   T44] usb 3-1: Using ep0 maxpacket: 8
[  870.491873][T15499] usb 2-1: 0:2 : does not exist
[  870.497021][T15499] usb 2-1: unit 5: unexpected type 0x0e
[  870.510366][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  870.526993][   T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  870.546549][T15499] usb 2-1: USB disconnect, device number 13
[  870.559382][   T44] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  870.572264][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.590566][T13617] udevd[13617]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  870.608813][   T44] usb 3-1: Product: syz
[  870.615395][   T44] usb 3-1: Manufacturer: syz
[  870.620051][   T44] usb 3-1: SerialNumber: syz
[  870.637481][   T44] usb 3-1: config 0 descriptor??
[  870.656781][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  870.779598][T19650] /dev/rnullb0: Can't open blockdev
[  871.077044][T19646] /dev/rnullb0: Can't open blockdev
[  871.084712][T19646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  871.097086][T19646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  871.111308][T11211] usb 3-1: USB disconnect, device number 17
[  871.353053][T19658] /dev/rnullb0: Can't open blockdev
[  871.934051][T15499] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  872.081410][T15499] usb 3-1: device descriptor read/64, error -71
[  872.331662][T15499] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  872.484386][T15499] usb 3-1: device descriptor read/64, error -71
[  872.551205][T19669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  872.575938][T19677] /dev/sg0: Can't lookup blockdev
[  872.611899][T15499] usb usb3-port1: attempt power cycle
[  872.941302][T11211] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  872.961355][T15499] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  872.981721][T15499] usb 3-1: device descriptor read/8, error -71
[  873.071475][T11211] usb 2-1: device descriptor read/64, error -71
[  873.221321][T15499] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  873.243642][T15499] usb 3-1: device descriptor read/8, error -71
[  873.311321][T11211] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  873.351431][T15499] usb usb3-port1: unable to enumerate USB device
[  873.441589][T11211] usb 2-1: device descriptor read/64, error -71
[  873.552240][T11211] usb usb2-port1: attempt power cycle
[  873.896768][T11211] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  873.922876][T11211] usb 2-1: device descriptor read/8, error -71
[  874.131265][   T44] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  874.161372][T11211] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  874.192066][T11211] usb 2-1: device descriptor read/8, error -71
[  874.261288][   T44] usb 5-1: device descriptor read/64, error -71
[  874.312813][T11211] usb usb2-port1: unable to enumerate USB device
[  874.501259][   T44] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  874.631399][   T44] usb 5-1: device descriptor read/64, error -71
[  874.733830][T19686] /dev/rnullb0: Can't open blockdev
[  874.745043][   T44] usb usb5-port1: attempt power cycle
[  875.091220][   T44] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  875.111920][   T44] usb 5-1: device descriptor read/8, error -71
[  875.351298][   T44] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  875.372940][   T44] usb 5-1: device descriptor read/8, error -71
[  875.482512][   T44] usb usb5-port1: unable to enumerate USB device
[  875.811857][T19700] /dev/rnullb0: Can't open blockdev
[  875.990316][T19708] /dev/rnullb0: Can't open blockdev
[  876.121299][   T44] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  876.247261][T19713] /dev/rnullb0: Can't open blockdev
[  876.258653][T19714] /dev/rnullb0: Can't open blockdev
[  876.308396][   T44] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  876.321530][T19716] /dev/rnullb0: Can't open blockdev
[  876.330476][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.358747][   T44] usb 2-1: Product: syz
[  876.371239][   T44] usb 2-1: Manufacturer: syz
[  876.381321][   T44] usb 2-1: SerialNumber: syz
[  876.397282][   T44] usb 2-1: config 0 descriptor??
[  876.412539][T19718] /dev/rnullb0: Can't open blockdev
[  876.419779][   T44] ch341 2-1:0.0: ch341-uart converter detected
[  876.836295][T19698] /dev/rnullb0: Can't open blockdev
[  877.199452][T19734] /dev/rnullb0: Can't open blockdev
[  877.200653][T19736] /dev/rnullb0: Can't open blockdev
[  877.305051][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4079'.
[  877.338616][T19738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4079'.
[  877.400615][T19742] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4079'.
[  877.416577][T19738] /dev/rnullb0: Can't open blockdev
[  877.470168][T19744] /dev/rnullb0: Can't open blockdev
[  877.521676][T19746] /dev/rnullb0: Can't open blockdev
[  877.528600][T19747] /dev/rnullb0: Can't open blockdev
[  877.661553][   T44] usb 2-1: ch341-uart converter now attached to ttyUSB0
[  877.710910][T19756] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  877.968078][T19769] /dev/rnullb0: Can't open blockdev
[  878.829328][T19780] binder: BINDER_SET_CONTEXT_MGR already set
[  878.843670][T19780] binder: 19779:19780 ioctl 4018620d 2000000000c0 returned -16
[  878.983485][ T3100] usb 2-1: USB disconnect, device number 18
[  879.014961][ T3100] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  879.046474][ T3100] ch341 2-1:0.0: device disconnected
[  879.254716][T19771] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4090'.
[  879.279812][T19771] vcan0: tx drop: invalid sa for name 0x000003fffffffffd
[  879.381246][ T3100] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  879.553348][ T3100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.564703][ T3100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  879.579154][ T3100] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  879.589583][ T3100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.605597][ T3100] usb 2-1: config 0 descriptor??
[  879.618958][T19790] netlink: 'syz.0.4096': attribute type 1 has an invalid length.
[  879.633761][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4096'.
[  879.658693][T19790] netlink: 'syz.0.4096': attribute type 4 has an invalid length.
[  879.667019][T19790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4096'.
[  880.033620][ T3100] kone 0003:1E7D:2CED.002B: item fetching failed at offset 4/5
[  880.054516][ T3100] kone 0003:1E7D:2CED.002B: parse failed
[  880.069559][ T3100] kone 0003:1E7D:2CED.002B: probe with driver kone failed with error -22
[  880.071273][   T44] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  880.226532][T19785] /dev/rnullb0: Can't open blockdev
[  880.245863][ T3100] usb 2-1: USB disconnect, device number 19
[  880.262698][   T44] usb 5-1: Using ep0 maxpacket: 8
[  880.278185][   T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[  880.303906][   T44] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  880.321220][   T44] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  880.329962][   T44] usb 5-1: Product: syz
[  880.344216][   T44] usb 5-1: Manufacturer: syz
[  880.348899][   T44] usb 5-1: SerialNumber: syz
[  880.375037][   T44] usb 5-1: config 0 descriptor??
[  880.388084][   T44] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  880.788578][   T44] gspca_zc3xx: reg_w_i err -71
[  880.826951][T19815] /dev/rnullb0: Can't open blockdev
[  880.909923][T19820] /dev/rnullb0: Can't open blockdev
[  881.003420][T19799] /dev/rnullb0: Can't open blockdev
[  881.281933][T19838] netlink: 'syz.2.4110': attribute type 5 has an invalid length.
[  881.315589][T19840] netlink: 'syz.1.4109': attribute type 1 has an invalid length.
[  881.325032][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4109'.
[  881.362542][T19840] /dev/rnullb0: Can't open blockdev
[  881.393002][   T44] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  881.399422][   T44] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  881.442770][   T44] usb 5-1: USB disconnect, device number 27
[  881.730195][T19866] /dev/rnullb0: Can't open blockdev
[  881.794779][T19870] /dev/rnullb0: Can't open blockdev
[  881.831315][T15499] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  881.981668][T15499] usb 2-1: Using ep0 maxpacket: 8
[  881.992908][T15499] usb 2-1: config 0 has an invalid interface number: 48 but max is 0
[  882.001061][T15499] usb 2-1: config 0 has no interface number 0
[  882.010584][T15499] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  882.021931][T15499] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  882.035542][T15499] usb 2-1: config 0 interface 48 has no altsetting 0
[  882.054014][T15499] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  882.063301][T15499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.071838][T15499] usb 2-1: Product: syz
[  882.076245][T15499] usb 2-1: Manufacturer: syz
[  882.080903][T15499] usb 2-1: SerialNumber: syz
[  882.102266][T15499] usb 2-1: config 0 descriptor??
[  882.312105][T19856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.322053][T19856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  882.331012][T19856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.346769][T19856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  882.361619][T19856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.373258][T19856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  882.387257][T19856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.398357][T19856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  882.414776][T19856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.425068][T19856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  882.492805][T15499] usb 2-1: USB disconnect, device number 20
[  882.547348][T19887] /dev/rnullb0: Can't open blockdev
[  882.695767][T18267] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  883.526263][   T30] audit: type=1326 audit(6044448758.384:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19896 comm="syz.4.4127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee638e9a9 code=0x7fc00000
[  883.746751][T19911] /dev/rnullb0: Can't open blockdev
[  883.868134][T19921] /dev/rnullb0: Can't open blockdev
[  884.106864][ T3006] Bluetooth: hci4: Frame reassembly failed (-84)
[  884.124352][T19941] /dev/rnullb0: Can't open blockdev
[  884.129990][ T3006] Bluetooth: hci4: Frame reassembly failed (-84)
[  884.140048][T19936] /dev/rnullb0: Can't open blockdev
[  884.185315][ T3100] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  884.351553][ T3100] usb 3-1: Using ep0 maxpacket: 8
[  884.359269][ T3100] usb 3-1: config 7 has too many interfaces: 229, using maximum allowed: 32
[  884.368252][ T3100] usb 3-1: config 7 has an invalid descriptor of length 170, skipping remainder of the config
[  884.378680][ T3100] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 229
[  884.387864][ T3100] usb 3-1: config 7 has no interface number 0
[  884.394450][ T3100] usb 3-1: config 7 interface 148 altsetting 6 endpoint 0x1 has an invalid bInterval 195, changing to 11
[  884.407098][ T3100] usb 3-1: config 7 interface 148 altsetting 6 endpoint 0x1 has invalid maxpacket 9997, setting to 1024
[  884.418506][T11211] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  884.427645][ T3100] usb 3-1: config 7 interface 148 altsetting 6 endpoint 0xF has an invalid bInterval 251, changing to 11
[  884.439367][ T3100] usb 3-1: config 7 interface 148 altsetting 6 endpoint 0xB has invalid wMaxPacketSize 0
[  884.449819][ T3100] usb 3-1: config 7 interface 148 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  884.462958][ T3100] usb 3-1: config 7 interface 148 has no altsetting 0
[  884.474464][ T3100] usb 3-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=fc.a9
[  884.483757][ T3100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.492054][ T3100] usb 3-1: Product: syz
[  884.496257][ T3100] usb 3-1: Manufacturer: syz
[  884.500949][ T3100] usb 3-1: SerialNumber: syz
[  884.509979][T19926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  884.609401][T11211] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  884.618746][T11211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.626871][T11211] usb 5-1: Product: syz
[  884.632652][T11211] usb 5-1: Manufacturer: syz
[  884.637319][T11211] usb 5-1: SerialNumber: syz
[  884.645948][T11211] usb 5-1: config 0 descriptor??
[  884.655917][T11211] ch341 5-1:0.0: ch341-uart converter detected
[  884.670977][T19948] /dev/rnullb0: Can't open blockdev
[  884.772887][T19951] /dev/rnullb0: Can't open blockdev
[  884.960253][T19956] /dev/rnullb0: Can't open blockdev
[  884.960343][T19926] /dev/rnullb0: Can't open blockdev
[  885.063328][ T3100] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.148/input/input94
[  885.116177][ T5203] bcm5974 3-1:7.148: could not read from device
[  885.141771][ T5203] bcm5974 3-1:7.148: could not read from device
[  885.168908][ T5203] bcm5974 3-1:7.148: could not read from device
[  885.181151][ T3100] usb 3-1: USB disconnect, device number 22
[  885.192458][ T5203] bcm5974 3-1:7.148: could not read from device
[  885.323814][T19960] /dev/rnullb0: Can't open blockdev
[  885.871784][T11211] ch341-uart ttyUSB0: break control not supported, using simulated break
[  885.898085][T11211] usb 5-1: ch341-uart converter now attached to ttyUSB0
[  886.161241][T12378] Bluetooth: hci4: command 0x1003 tx timeout
[  886.165747][T18267] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  886.214469][T19971] /dev/rnullb0: Can't open blockdev
[  886.321509][T19974] syz.0.4150: attempt to access beyond end of device
[  886.321509][T19974] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  886.384809][T19974] SQUASHFS error: Failed to read block 0x0: -5
[  886.399339][T19978] /dev/sg0: Can't lookup blockdev
[  886.430229][T19974] unable to read squashfs_super_block
[  886.649808][T19987] /dev/rnullb0: Can't open blockdev
[  886.831556][T11211] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  886.981413][T11211] usb 3-1: device descriptor read/64, error -71
[  887.241525][T11211] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  887.271788][   T44] usb 5-1: USB disconnect, device number 28
[  887.284934][   T44] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  887.307557][   T44] ch341 5-1:0.0: device disconnected
[  887.381240][T11211] usb 3-1: device descriptor read/64, error -71
[  887.382363][T20000] /dev/rnullb0: Can't open blockdev
[  887.422540][T19999] /dev/rnullb0: Can't open blockdev
[  887.494461][T11211] usb usb3-port1: attempt power cycle
[  887.502961][T18267] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  887.762962][T20005] binder: 20004:20005 ioctl c0306201 200000000380 returned -14
[  887.825804][T20007] binder: 20006:20007 ioctl c00c6211 0 returned -14
[  887.871222][T11211] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  887.909127][T11211] usb 3-1: device descriptor read/8, error -71
[  888.032143][   T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  888.163068][T11211] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  888.181651][   T10] usb 5-1: device descriptor read/64, error -71
[  888.204516][T11211] usb 3-1: device descriptor read/8, error -71
[  888.229999][T20013] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4165'.
[  888.265518][T20013] /dev/rnullb0: Can't open blockdev
[  888.325462][T11211] usb usb3-port1: unable to enumerate USB device
[  888.354800][T20016] netlink: 'syz.0.4166': attribute type 1 has an invalid length.
[  888.354800][T20015] netlink: 'syz.0.4166': attribute type 1 has an invalid length.
[  888.354828][T20015] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4166'.
[  888.366930][T20016] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4166'.
[  888.431643][   T10] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  888.563915][   T10] usb 5-1: device descriptor read/64, error -71
[  888.671652][   T10] usb usb5-port1: attempt power cycle
[  889.011358][   T10] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  889.052045][   T10] usb 5-1: device descriptor read/8, error -71
[  889.321472][   T10] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  889.352248][   T10] usb 5-1: device descriptor read/8, error -71
[  889.451257][   T44] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  889.463193][   T10] usb usb5-port1: unable to enumerate USB device
[  889.611741][   T44] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  889.624318][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.635761][   T44] usb 2-1: Product: syz
[  889.640219][   T44] usb 2-1: Manufacturer: syz
[  889.645743][   T44] usb 2-1: SerialNumber: syz
[  889.653988][   T44] usb 2-1: config 0 descriptor??
[  889.663669][   T44] ch341 2-1:0.0: ch341-uart converter detected
[  890.892724][   T44] usb 2-1: ch341-uart converter now attached to ttyUSB0
[  890.907217][T20033] /dev/rnullb0: Can't open blockdev
[  891.084770][   T10] usb 2-1: USB disconnect, device number 21
[  891.105685][   T10] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  891.118700][   T10] ch341 2-1:0.0: device disconnected
[  891.727536][T20062] /dev/rnullb0: Can't open blockdev
[  892.922330][T20079] random: crng reseeded on system resumption
[  893.268258][T18035] hid-generic 0800:8000:0001.002C: unknown main item tag 0x0
[  893.292352][T18035] hid-generic 0800:8000:0001.002C: unknown main item tag 0x0
[  893.299907][T18035] hid-generic 0800:8000:0001.002C: unknown main item tag 0x0
[  893.308298][T18035] hid-generic 0800:8000:0001.002C: unknown main item tag 0x0
[  893.317353][T18035] hid-generic 0800:8000:0001.002C: unknown main item tag 0x0
[  893.325344][T18035] hid-generic 0800:8000:0001.002C: unknown main item tag 0x0
[  893.333039][T18035] hid-generic 0800:8000:0001.002C: unknown main item tag 0x0
[  893.342145][T18035] hid-generic 0800:8000:0001.002C: unknown main item tag 0x0
[  893.349598][T18035] hid-generic 0800:8000:0001.002C: unknown main item tag 0x0
[  893.357103][   T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  893.364746][T18035] hid-generic 0800:8000:0001.002C: unknown main item tag 0x0
[  893.380500][T18035] hid-generic 0800:8000:0001.002C: hidraw0: <UNKNOWN> HID v4.00 Device [syz1] on syz0
[  893.448611][T20099] fido_id[20099]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  893.509570][T20102] netlink: 'syz.1.4191': attribute type 12 has an invalid length.
[  893.526605][   T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  893.535950][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.545453][   T10] usb 5-1: Product: syz
[  893.549665][   T10] usb 5-1: Manufacturer: syz
[  893.554432][   T10] usb 5-1: SerialNumber: syz
[  893.561530][   T10] usb 5-1: config 0 descriptor??
[  893.569892][   T10] ch341 5-1:0.0: ch341-uart converter detected
[  894.675604][T20118] 
[  894.678032][T20118] ======================================================
[  894.685084][T20118] WARNING: possible circular locking dependency detected
[  894.692143][T20118] 6.16.0-rc6-next-20250718-syzkaller #0 Not tainted
[  894.698936][T20118] ------------------------------------------------------
[  894.705987][T20118] syz.2.4195/20118 is trying to acquire lock:
[  894.712122][T20118] ffffffff8e622c28 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0
[  894.721753][T20118] 
[  894.721753][T20118] but task is already holding lock:
[  894.729154][T20118] ffff8880254700a8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  894.739486][T20118] 
[  894.739486][T20118] which lock already depends on the new lock.
[  894.739486][T20118] 
[  894.749931][T20118] 
[  894.749931][T20118] the existing dependency chain (in reverse order) is:
[  894.758977][T20118] 
[  894.758977][T20118] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  894.767736][T20118]        lock_acquire+0x120/0x360
[  894.772806][T20118]        blk_alloc_queue+0x538/0x620
[  894.778228][T20118]        __blk_mq_alloc_disk+0x15c/0x340
[  894.783947][T20118]        nbd_dev_add+0x46c/0xae0
[  894.789017][T20118]        nbd_init+0x21a/0x2d0
[  894.793735][T20118]        do_one_initcall+0x233/0x820
[  894.799082][T20118]        do_initcall_level+0x137/0x1f0
[  894.804599][T20118]        do_initcalls+0x69/0xd0
[  894.809492][T20118]        kernel_init_freeable+0x3d9/0x590
[  894.815269][T20118]        kernel_init+0x1d/0x1d0
[  894.820169][T20118]        ret_from_fork+0x3f9/0x770
[  894.825335][T20118]        ret_from_fork_asm+0x1a/0x30
[  894.830682][T20118] 
[  894.830682][T20118] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  894.837948][T20118]        lock_acquire+0x120/0x360
[  894.843025][T20118]        fs_reclaim_acquire+0x72/0x100
[  894.848521][T20118]        prepare_alloc_pages+0x153/0x610
[  894.854206][T20118]        __alloc_frozen_pages_noprof+0x123/0x370
[  894.860559][T20118]        __alloc_pages_noprof+0xa/0x30
[  894.866034][T20118]        pcpu_populate_chunk+0x182/0xb30
[  894.871688][T20118]        pcpu_alloc_noprof+0xcbf/0x16b0
[  894.877259][T20118]        xt_percpu_counter_alloc+0x161/0x220
[  894.883350][T20118]        translate_table+0x12e9/0x2000
[  894.888832][T20118]        ipt_register_table+0x106/0x7c0
[  894.894397][T20118]        iptable_nat_table_init+0x43/0x2e0
[  894.900216][T20118]        xt_find_table_lock+0x309/0x3e0
[  894.905783][T20118]        xt_request_find_table_lock+0x26/0x100
[  894.911946][T20118]        do_ipt_get_ctl+0x730/0x1180
[  894.917248][T20118]        nf_getsockopt+0x26b/0x290
[  894.922375][T20118]        ip_getsockopt+0x1c4/0x220
[  894.927507][T20118]        do_sock_getsockopt+0x372/0x450
[  894.933062][T20118]        __x64_sys_getsockopt+0x1a5/0x250
[  894.938789][T20118]        do_syscall_64+0xfa/0x3b0
[  894.943829][T20118]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  894.950252][T20118] 
[  894.950252][T20118] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  894.958031][T20118]        validate_chain+0xb9b/0x2140
[  894.963353][T20118]        __lock_acquire+0xab9/0xd20
[  894.968582][T20118]        lock_acquire+0x120/0x360
[  894.973629][T20118]        __mutex_lock+0x187/0x1360
[  894.978761][T20118]        pcpu_alloc_noprof+0x286/0x16b0
[  894.984324][T20118]        sbitmap_init_node+0x1e1/0x630
[  894.989807][T20118]        sbitmap_queue_init_node+0x41/0x660
[  894.995707][T20118]        blk_mq_init_tags+0x110/0x280
[  895.001100][T20118]        blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  895.007102][T20118]        blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  895.013447][T20118]        nbd_start_device+0x17f/0xb10
[  895.018825][T20118]        nbd_ioctl+0x636/0xeb0
[  895.023612][T20118]        blkdev_ioctl+0x5a5/0x6d0
[  895.028663][T20118]        __se_sys_ioctl+0xf9/0x170
[  895.033799][T20118]        do_syscall_64+0xfa/0x3b0
[  895.038849][T20118]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.045282][T20118] 
[  895.045282][T20118] other info that might help us debug this:
[  895.045282][T20118] 
[  895.055532][T20118] Chain exists of:
[  895.055532][T20118]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#52
[  895.055532][T20118] 
[  895.069208][T20118]  Possible unsafe locking scenario:
[  895.069208][T20118] 
[  895.076666][T20118]        CPU0                    CPU1
[  895.082047][T20118]        ----                    ----
[  895.087421][T20118]   lock(&q->q_usage_counter(io)#52);
[  895.092821][T20118]                                lock(fs_reclaim);
[  895.099336][T20118]                                lock(&q->q_usage_counter(io)#52);
[  895.107267][T20118]   lock(pcpu_alloc_mutex);
[  895.111790][T20118] 
[  895.111790][T20118]  *** DEADLOCK ***
[  895.111790][T20118] 
[  895.119936][T20118] 4 locks held by syz.2.4195/20118:
[  895.125134][T20118]  #0: ffff888025461188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  895.136572][T20118]  #1: ffff8880254610d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x49/0x14c0
[  895.147585][T20118]  #2: ffff8880254700a8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  895.158336][T20118]  #3: ffff8880254700e0 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  895.169250][T20118] 
[  895.169250][T20118] stack backtrace:
[  895.175150][T20118] CPU: 1 UID: 0 PID: 20118 Comm: syz.2.4195 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  895.175178][T20118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  895.175198][T20118] Call Trace:
[  895.175208][T20118]  <TASK>
[  895.175216][T20118]  dump_stack_lvl+0x189/0x250
[  895.175247][T20118]  ? __pfx_dump_stack_lvl+0x10/0x10
[  895.175271][T20118]  ? __pfx__printk+0x10/0x10
[  895.175299][T20118]  ? print_lock_name+0xde/0x100
[  895.175325][T20118]  print_circular_bug+0x2ee/0x310
[  895.175351][T20118]  check_noncircular+0x134/0x160
[  895.175377][T20118]  validate_chain+0xb9b/0x2140
[  895.175409][T20118]  __lock_acquire+0xab9/0xd20
[  895.175432][T20118]  ? pcpu_alloc_noprof+0x286/0x16b0
[  895.175455][T20118]  lock_acquire+0x120/0x360
[  895.175473][T20118]  ? pcpu_alloc_noprof+0x286/0x16b0
[  895.175498][T20118]  __mutex_lock+0x187/0x1360
[  895.175524][T20118]  ? pcpu_alloc_noprof+0x286/0x16b0
[  895.175543][T20118]  ? stack_depot_save_flags+0x429/0x900
[  895.175569][T20118]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  895.175596][T20118]  ? kasan_save_track+0x4f/0x80
[  895.175612][T20118]  ? kasan_save_track+0x3e/0x80
[  895.175626][T20118]  ? __kasan_kmalloc+0x93/0xb0
[  895.175642][T20118]  ? pcpu_alloc_noprof+0x286/0x16b0
[  895.175662][T20118]  ? blk_mq_init_tags+0x85/0x280
[  895.175679][T20118]  ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  895.175706][T20118]  ? blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  895.175736][T20118]  ? __pfx___mutex_lock+0x10/0x10
[  895.175760][T20118]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.175785][T20118]  pcpu_alloc_noprof+0x286/0x16b0
[  895.175811][T20118]  sbitmap_init_node+0x1e1/0x630
[  895.175840][T20118]  ? __kasan_kmalloc+0x93/0xb0
[  895.175861][T20118]  sbitmap_queue_init_node+0x41/0x660
[  895.175877][T20118]  ? __raw_spin_lock_init+0x45/0x100
[  895.175903][T20118]  blk_mq_init_tags+0x110/0x280
[  895.175924][T20118]  blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  895.175952][T20118]  ? blk_mq_update_nr_hw_queues+0x678/0x14c0
[  895.175981][T20118]  ? kfree+0x18e/0x440
[  895.176001][T20118]  blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  895.176034][T20118]  nbd_start_device+0x17f/0xb10
[  895.176055][T20118]  nbd_ioctl+0x636/0xeb0
[  895.176074][T20118]  ? __pfx_nbd_ioctl+0x10/0x10
[  895.176095][T20118]  ? blkdev_common_ioctl+0xa8d/0xc50
[  895.176122][T20118]  ? __pfx_nbd_ioctl+0x10/0x10
[  895.176139][T20118]  blkdev_ioctl+0x5a5/0x6d0
[  895.176164][T20118]  ? __pfx_blkdev_ioctl+0x10/0x10
[  895.176186][T20118]  ? __fget_files+0x2a/0x420
[  895.176219][T20118]  ? bpf_lsm_file_ioctl+0x9/0x20
[  895.176236][T20118]  ? __pfx_blkdev_ioctl+0x10/0x10
[  895.176264][T20118]  __se_sys_ioctl+0xf9/0x170
[  895.176285][T20118]  do_syscall_64+0xfa/0x3b0
[  895.176311][T20118]  ? lockdep_hardirqs_on+0x9c/0x150
[  895.176334][T20118]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.176351][T20118]  ? clear_bhb_loop+0x60/0xb0
[  895.176370][T20118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.176389][T20118] RIP: 0033:0x7f4dddd8e9a9
[  895.176407][T20118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  895.176423][T20118] RSP: 002b:00007f4ddec31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  895.176442][T20118] RAX: ffffffffffffffda RBX: 00007f4dddfb5fa0 RCX: 00007f4dddd8e9a9
[  895.176455][T20118] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000008
[  895.176466][T20118] RBP: 00007f4ddde10d69 R08: 0000000000000000 R09: 0000000000000000
[  895.176476][T20118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  895.176487][T20118] R13: 0000000000000000 R14: 00007f4dddfb5fa0 R15: 00007ffefa5b9288
[  895.176505][T20118]  </TASK>
[  895.547385][T20124] block nbd2: shutting down sockets
[  895.569074][   T10] usb 5-1: ch341-uart converter now attached to ttyUSB0
[  895.751438][ T5908] usb 5-1: USB disconnect, device number 33
[  895.760051][ T5908] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  895.769169][ T5908] ch341 5-1:0.0: device disconnected