last executing test programs:

3m34.179965447s ago: executing program 3 (id=1701):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r2 = creat(0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000000, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xeb9a0000)
copy_file_range(r2, 0x0, r2, 0x0, 0x6, 0x0)
lseek(r1, 0x2004, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000029c0)={0x7f, <r3=>r2, 'id1\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0500001200f4ff4a6d645dcc3d0008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x67, r9})
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x2b, 0x1000}, 0x4)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x81c000)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r10, &(0x7f0000000380), 0xfffffffffffffeba)
ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000002ac0)={0x60, 0x2, &(0x7f000023d000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x1, &(0x7f0000002a80)=[{0x2, 0x6, 0xffffffff}, {0x1d, 0x1, 0xfffffffffffffff8}], 0x2, 0x4, 0x2, 0x3a, 0x21, 0x41})
open(&(0x7f0000002a40)='./file0\x00', 0x0, 0x5)
setsockopt$inet6_buf(r2, 0x29, 0xcc, &(0x7f0000000040)="a66007305a4ad214878e49f09135e4a26492205a20b4bdb4013b935d183427aaab31c982eca1ab4122fbf5cd7e8ba2166f93ac7fca35abb4070c7caaaa0c138dbb9adc458086a4b811c4590ec6172ba1bdd6e1aec13d84a14e36e29ac2d60333672eb0625bcc9fc72799274e55da1d9d1531cc2555006f1a58cf8a17f6e16fe8c62c9e12a26b3c411355f1218d8496e6aff262d9c0df8f6334e99a668dd38511b3ea5fcd2c6a36fb4aa495350c707fa208c9aab00f16613f24b33ee9b6a6ad031718fd0d05fd131ff9cbb7e77e1cc305cd89e816fc3e05a1c9f0561b7f27936b0ec493716923a009b4110ae3b57d723d9678c713ebbd911df76830cfebb0f917d54db50feb56d06bc716834a9c5056fec7e9921014f866e3628b5c15d109863982a9b0c919220478924b391ec251386c7459eb97bae0c313067ce8080803d780ef245a05001bb19e092c2f9bc2c02190953b761e7235edfb986a801e5e827b2a55806f7a8b63c0114145ec6612e90fa0f62b19e1a840a72bb3685c3442e5a94faef708d7a4b7bfce0fa8cd123a2bfcce3b7acbf67cc0f45b7b453ce63820a99e7ff1f2c7e3f8cc19e1fd605f124853ffc51aa4b17daa89a17a837d2f2a9337c64099e138d6057f1d4cb8645a16db77262d381206e519cbe676d2a9f57fd4772daeeefe017f7fae8ae584e99201a640e27a5143b45cce5f8012b97ea95995ebffff85aa26921c548f9ff750dc16ddc6544abd8cdbca8792ac04fb38359562fab34a01983a20f3cc3519888f402c1357eb208cc5cee973aded012fc5c961731ac0cb70d279c714b0352d5d8676cfaa51934fbf59bb6764581f64b8ab732caf1ac8f19c6cd06844497589e15a12544224dfbc76db8f2e4818c14cd4a3059b3a93bbd1c0ad05825482ca27a836dbbfe4fc19e35b76d30d4f6cc7da8b52771e4eb8b76818bf4c7d2078051fd55303fe64c16774619fb304679a1b50c3982236167cba2e767dff7e1c72b03aa1d2d20948304df70dbe3638461fd8ecd6cf5a3b86c43e53cb4bb471215bde3c67f4377a16ba262011c7bee00ee2e3737fea766586b7f3cdd91e6f1e92c9aa24a7ef8a1ad938f3c8a935ba3df45b7942dde00783c4e1dd6c47cb91d8dda78b77bce2b7515968c83c321795782595962570a40f68bf7f65afb3fd2ff1897d61ff0c127a47d4b0b0389383be365932a79e5d2d7126c9c127e005ce441138d01f36e80347c383aee2b184ac81c8cf28ab00e6f72b1bda7ca6896d3ff4b233c1aa0d85f36556d4a60814bd5868e5466889460fb13ede9764eb3e3e6077efbeee75f30a27153840de4df3de3631816a1b106fa0f4b185798f17e7e4dc2a17c478db613d2aaa0b45b672e6475725402548261997d514b8b397df4400e562eef8142f81b9e90985385400b81fc2c775657dd724784e2d5824b43a1812d8aab7ad28c3e1d3defdbfb9857d0e718b9c19a833442ea1d7191d519f798ca9e20cbfbc11a731a738f7e3fbea0e167e4db1aba4c41d5e21b2618bc98616b63a34961426af7a1b0f03a5b5a9a2fab7f2685afd510a901b7db66b1032d3b035e3ba16da8ae8d19fef3a434fed1e0ce56ce098cca3e4d51a6e1d98aabe36f8e34abecc74950541349027233f73c59d334e3b28685f21c3d9d24f55d971947279e6371f7d967b95e6cc8681e82f2ab4aa97f9c8dc48de532e9e7d54c55208d0e960af9f76cadfa5f2cab348f4a9584b8dc2740a732f86c5b00443c5e59f008833944dda7ac2ef6fcf4f7295f9b4cc7b3abbd4f2b25abfeebbd33108573df0bc18776b3fe8ed6b9dac777b4c921a8b299bb7c5dc1251c8788779f615143b74b4f48b7009b88c586ee50074e0624d9f97864be01b52df95fe7e0001747da7393eda6133bed30683008552592c7745f0a7277ef915a5f60a23f90685682b6d9d6fd4d66187edc7fb2e370a07d04548259c5a6b9df70a36042baf7ff6bd0730cb8b53b0feb876742f5c91fd256ff11386722bfbe036f2092c2bb2d8a08fe3bfd97550317d2db2e5c121cfeb4c96298a22cc05fca46d78af3d19f2143ead4aaa560ab979db0a00ac68143c31e641d87335ba5496e1786e9e76e08beaf6cf237050e2b9ccb7263e34d9934ba36a9a9a8ba815468bfd3320e24b367f808d502d5ea00ab99b32c3b1a0d0b2f9e3e96a49368be39b4ea9eca903fedb3da12900c52131730d77e2dca18b2d29b6b223025acaae5bfb4bb1b02f01b27206bb152c94fa2de3976baece13660e16b8680a86acd2a7f25d9c29a92450dda778d380b1512c7f08b90029b1c2cebaebf6d8044522b1eaabe15f727b2f210b2ad00f242522e5c2b2463d775db41cdd35d2e777d9b9f23fe109a062aa5d3a928d7d445eb13878293dad6092f45da183483ab57e563886b99068b88b7b7fbd76dd9e86575cc9fc3b58b0c0137ff86181dd082c588d9a69b63b779a12a8ade481828359c991ff0e6c18041362560e74e0aa71b20e3642e90d8331f4f51f865ff8b3669bf8430b2efe21fc7daa7ac99b7832030601768057134ba1b3630e0c8ff4fe517637aebd510774444aed1fb689a8f1a6f1ea1da91e6dbe368182560c2850dd2ef97809a25b53e1ef49252b731f7181c178500fe06075679e6b5e6028d255caeae97062c49c8fbf69c9db119790ed8a1ff31f12cbdc561bc07fdd3b038b474264edee18819765de3751692b078890f12a44ef8673c17c48fd2658c93c491a5c35d35cf580f23119433d5f35b0e03a17e0d671d6f6281f51bba77537eb67c57d4ec01eaac3d5f68d67ca4079427aebaee7a6579ca5ee9995c44db71eb5fc8c305dffea5fbe65f409ec7653891cdd40137fa9c9baa486819813e449545f3b9f92831142f1f51b5f5eb4af22a8044781c89fb33222ce2efb041ea1eb232a07b56b4641b34c20d762cdc47dbd64bb74a4302f37b70f22f20b5c0a25c35cbe2d6a34db9cc00d8ef900268beda7c08be6bc9c81999312944a719a6dec7c460ebe55f0014fc97d6e806b2f02d02f0f00f8854eadd354b9994f802a0e13b58514966b2b2b49f4e534fc4f6392a35c7ec630b4fdf488ef48e32ff2612ae802982cbafa96ac40718480a0a514b4abf56c304b60d2c4405a08c728e48fb56ce684868e88b3eb6087c2037631d851e4583806a652bc565205405bae81d7edd9466f9a4ea4bcbd0ccc7a8167a1dfd23caa6b3a93315f18d4d8a352fd47fdaa4f20b0c4ae6abe57de5a0133cec32ff8a6d9a6f6e383d94801677a77aeacc717402aa1657b24204ef610fb1f0986abc43220e384abe4be979ecf4eb5d712da67d7256b493cf7278af9c9b71e8f0b106f6d7bd1d19ed7dbe7e9d202f79c7d321a810c2e20839922377add9f41936c6d18176745e287f158f703c549d581cc0de266df3b9ff4f7d6c4e582110ba0c4c575fb326c0fbd87111c15679e03a1bb85e415f968a7170ee3f76d9191a43711e1aa501475b79d3bbc0ffd5051e4f608437f130c1e3f85154bbc35a21ea557e84e58917d7d147318a7a70b73539f5991f1582e205cc44de8b6a9446a86d8c18db82956054ef72a3fcf01ad933f3cfeb09e062b06e6b555ef673274c9599683168a3b0984d190ffc64a95c9b5512a521f7ed66edec40ebb61d19966ab2b506d3c139257b96d1c51290cc6a593b5e9b89e4af87b50d6df11dc41be82fe8db4a9e0ff50ba6042488a5076d153b36d3ea0271ff4b9c2db0d70315aed29dbc71e56fb31e13d291176a14b38d5699cabcd3c978a0e033b914d97f23799ab4fe620374e908a9fca9aaf4325260e7cf4a50417fccfea3858f19979f163aedc23f59804c747728cd5854e63b3907c8a7f26db15d17ece269623340c8e3d0bd87abed24f250a14af230d17c4d4c21f10ef3b6d2681f6610d179213809f44f09bf0a74fefbc2495b4ade68c794add3e988d4db5ca22b8a12cee3208f1c1eb10723114dfe112654afc9836311628b4a78c7d91827b12ccf6228d0a5f19b2b1aa1d8bb8c75c2b71632fa7e46b6078b8249ea707d9d14529edd8c753bbc10de619931f151d8a987186a3e78b691170f4169626518afba78b4e716b24f0b248a7552b55e73c01cf20c5cd5fb9be904a795c55a45376cb1d13710cdf8f8c9ac19a2fe564bbb453e75bbd2fe6bf3c32568ad669f904bd3311b668b00b13d7a66baf1fd73413340f276c3c660a29907155d84d81df1a921536e2c87fbbf609e886eb0b5929c0b94882e996356c78aa25658640d02250409e5d0871f4ebc2020e9b99a7a122fadc32ebf7f2947a26509b92bb5a573af3480b74a1398f1c54fe9b5c414acf2a3284c7accc08b6a2a6d043aed0e860c4160ae8259278561ad7bc4761e4e94aab22e86ac96b5e74a0a27e77c059bc1e702b11584e839f838b6b31531721fc8e257fc8678a6e7ff326be7efa910e93acd25c13cd299e9d8c899de15978a268dff0bcd5a185e394d342fc24b6fdde710a7c80395c80a68fa3926e752062e4e00881f4c1b2dfb06b2b7afbe0b5a7883fc29b4e74539ee0d70d06c6d01873140cd5f6adae9e336271c9f2539d271d3c02d34572b35c2e1b25ff41179ac1cc43022848fe708e47181ff290319854205b55a804f7fd51d391edd1c6ba109d5dff318fb743888e2fe7a83b8e9a052735aa159c472611d801d6304b8514a042fe40987d4dd2f70f52e72e0f146bb8b22cd8cccaf5064756467af39fd9d6b35e81b9a9631f976630f33a419b64329c900980f5d88519496a602b797607b4221dbcb1f5adc5c01ace7ce3384d6a18e57b3155ba8adcdb49eb1f2c9a6e252eb040e6a181c5c0b23d2533749b35c3bbb3090e202fe5717237e86e7c0522dda115d668a8fcfcc244dc65cde3d63687fdceedd8868387105ac606dbcd88327f35bcee9cc01b5fd8b8d90cc52583bf9970d7400d89ab332781a9552981d3dceee206e6cf736857bb8173827cf3e985b800a8e43b2899a67cbeca8ea1b925fe811ccc59ef5041ba63b94be5ad90c1d39103ec672734682a9474779a459897b34f664171d655814aaf7b3539453e3d3a741585f61a4cc27898e0e82ef21b66e9051d543e9e3731f68baf4eca40ddb0601884fc18e5c18accb35f35c339642e2c5e6640382ab12217d3614b356153c0f39c574fb5d916092fa10dcb8f6fb67255a269b441bd7c25e4bc61a2f5b828e23d14f5725e11ce0245dbcb9a62b8abcbb50d7f0314edf76adb0859dd0153cdf1a5c55c19d63024c66c28d49c2ae96d6761a2b851e50ed514a806d9c251755bc0aff1fe304dfc2f6deebceb8603ab62b20d5c7aca50e375699ceffc232f38be5415d9129904c5407de5d7f4ddf4280c977bf32e200ac81b311a9b3d71a93e0ce49ffa61d173e22f12dc08d80ce9c5849ec89a621c5f7c340a5ed84212aafcb6618a07ed8d5fadd828c7bc62d864546a3d7e520ed7513a1c750a77096e2f46120df61a9d727499f3df36ed8800215c2daf761a29215a18165141103bee65aae1a0bdc7648d76e23f4d693ee53a4d0c919e46073d9a4ef672945702981d1e769ec587c05a1be01a89461bea04b7e970acc7bc13c854f318bb3221dc41fc8d9cf9472fe7a9100c95e3d0eff451c43d2dcc43f959e87ad58726d28b2d42a2190e21bad17a8734823bc85ff18350c4e27d10c9e6dea13e17ef7df52da1f911b977469875c91083d870135bda0f27e491ac3ee132b7eee801acc13d4029b35aabd8ff421e78c11bf8904ba2417562444c77c73e63d5b74f6d34fe8fea94e2e4d10f49", 0x1000)

3m34.155549185s ago: executing program 3 (id=1702):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000440)={0x856, 0x0, 0x80006, 0xfffffff7, 0x48, "0e80706e6c06a71874343a0e0d13343972d01f"})
write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
r2 = socket(0x1d, 0x2, 0x6)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x3, {0x0, 0x1, 0x3}}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', <r5=>0x0, 0x29, 0x7, 0x7, 0x1, 0xc, @dev={0xfe, 0x80, '\x00', 0x24}, @private0, 0x20, 0x8, 0xff, 0x7}})
r6 = socket(0x11, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', <r9=>0x0, 0x2f, 0xb6, 0x1, 0x1, 0x8106ba77c986bcb2, @local, @loopback, 0x7800, 0x8010, 0x8, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', <r13=>0x0, 0x8, 0x10, 0x9000, 0x3, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, {[@end, @ra={0x94, 0x4, 0x1}]}}}}})
r14 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'sit0\x00', <r16=>0x0})
setsockopt$XDP_TX_RING(r14, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r14, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r14, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r14, &(0x7f0000000100)={0x2c, 0x0, r16}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r17=>0x0, 0x8000, 0x10, 0x9, 0xeee, {{0x1e, 0x4, 0x1, 0x2, 0x78, 0x67, 0x0, 0x2c, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0xa7, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x7f}, {@multicast1, 0x3}, {@multicast1, 0x81}, {@multicast1, 0x4}]}, @cipso={0x86, 0x2d, 0x2, [{0x1, 0x8, "4c6ff59ab182"}, {0x7, 0x10, "bf9cfc74aa17cb1f0acf5702fc02"}, {0x1, 0xf, "cd1c162ec7dbf58a1509185e3b"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)={'sit0\x00', <r18=>0x0, 0x80, 0x1, 0x3, 0x9, {{0x32, 0x4, 0x2, 0x5, 0xc8, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast2, @remote, {[@noop, @rr={0x7, 0x1f, 0xd3, [@local, @private=0xa010100, @private=0xa010100, @multicast1, @local, @rand_addr=0x64010101, @remote]}, @end, @timestamp_prespec={0x44, 0x2c, 0x1a, 0x3, 0x2, [{@loopback, 0x9b5d}, {@multicast1}, {@local, 0x5}, {@multicast2, 0x1927}, {@multicast1}]}, @cipso={0x86, 0x1c, 0x2, [{0x7, 0x8, "b47495f67a34"}, {0x0, 0xe, "d003208ec27635e3822e0393"}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x82, 0x3, 0x6, [{@broadcast, 0x9}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x616d}, {@empty, 0xff}, {@private=0xa010101, 0x8ff}]}, @end, @timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x9, [{@loopback, 0x1}, {@remote, 0x5}]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x4f4, 0x0, 0x200, 0x70bd27, 0x7, {}, [{{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6b1a}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x61}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x25c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcb9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x19b25f29}}, {0x8}}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x4040}, 0x2000c8c0)
read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020)

3m34.059074643s ago: executing program 3 (id=1703):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
listen(r0, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000000c0)={0x4, r1, 0x2})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000080)={&(0x7f00000013c0)=[0x4, 0x6, 0x7, 0xfffffff7, 0x3, 0x0, 0xe, 0xacfa, 0x8a2f, 0x4, 0x2, 0x80, 0xd7, 0xb, 0x0, 0x9, 0x2, 0xfffffff7, 0x3, 0x2, 0x7, 0x5, 0x40f5, 0x490, 0x9, 0x3, 0x34, 0x5, 0xa541, 0x7ff, 0x5, 0x400, 0x3, 0x10000, 0x9, 0xaf3b, 0x7, 0x8, 0x80000000, 0x0, 0x2, 0x3f27, 0x101, 0x2, 0x2, 0x9, 0x10, 0x2, 0x5, 0x800, 0x1ff, 0xd9ea0000, 0x400, 0x3, 0xf, 0x81, 0x5, 0x770, 0x7, 0x1, 0x6, 0x97, 0x100, 0xdb91, 0x7, 0xda, 0x0, 0x9, 0x0, 0x1, 0x3, 0x1e, 0x1, 0x2, 0x56, 0x800, 0x10, 0x6, 0x1ff, 0x9, 0xab9, 0x1, 0x1, 0xbc, 0x7ff, 0x7, 0x3, 0x101, 0x6, 0x7fff, 0x0, 0xfffffffb, 0x4, 0x7e3, 0x8b2, 0x6, 0x6, 0x10, 0x74, 0xdf, 0x36a, 0x1, 0x7ff, 0xe4ef, 0x9, 0x8, 0x40, 0x3018, 0x3, 0x7, 0x17, 0xc5, 0x0, 0x0, 0x7fff, 0x1f3, 0x3, 0x8, 0x0, 0x2, 0x8, 0xd, 0x8001, 0x4, 0x258, 0x3cb80, 0x324, 0xfffffffc, 0x5, 0x96a, 0x8a, 0x5, 0x80000000, 0x100, 0x0, 0x4, 0x4, 0xc2, 0xff, 0xa, 0x6, 0x401, 0x5, 0x80, 0x1, 0x2ae, 0x8, 0x1, 0x7, 0x7, 0xd3fb, 0x3, 0x7ff, 0x7c22, 0xfffffffb, 0x5, 0x2, 0x4d9, 0x170000, 0xd5c, 0x4, 0x8000, 0x1, 0x70b40981, 0x7fff, 0x400000, 0x1172, 0x0, 0x0, 0x4, 0xffffff00, 0x5945, 0x1, 0xb4d, 0x5, 0x31f5, 0xb162, 0x8, 0x6, 0x3, 0x3, 0x3, 0xfffffff1, 0x2, 0x2, 0x0, 0x5, 0xffff7fff, 0x4, 0xb4a, 0xd685, 0x7, 0x800, 0x1, 0x4, 0x9, 0xb487, 0x9, 0xed, 0xfffffff9, 0x3e1, 0x1, 0x1000, 0x4, 0x4, 0x7ff, 0x4, 0x1, 0x100, 0x8, 0x4, 0x9, 0x9, 0x3, 0x0, 0x7, 0x649, 0x4, 0xe00000, 0x3ff, 0xcb, 0x7, 0x6, 0x848, 0x7, 0x1, 0x9, 0x10000, 0x8001, 0x8, 0x43, 0x3, 0x7, 0x4, 0x0, 0x4, 0x3, 0xfffffffe, 0x6, 0x2b3, 0x1000, 0x705925f5, 0x4, 0x77, 0x11a0000, 0x8, 0x6, 0x7fff, 0x7fffffff, 0x3, 0x3dd8, 0x7, 0x0, 0x80, 0x7fffffff, 0x8, 0xb, 0x1f38, 0x400, 0x5066, 0x7ff, 0x6, 0x2, 0x1, 0x2, 0x6, 0x5, 0x7, 0x5, 0x5, 0x4cd9, 0x1, 0x0, 0x9, 0x5, 0x1, 0xa17, 0x1, 0x810a, 0x1, 0xffffff80, 0x6, 0xfbd2, 0x2, 0x7ff, 0x2, 0x80, 0xffffff23, 0x80000001, 0xf, 0x3, 0x5, 0x3, 0x7, 0x9, 0x8, 0x4, 0x7, 0x6, 0x100, 0x600000, 0x6, 0x8001, 0x80000001, 0x892c, 0x80, 0x7, 0x10000, 0x914, 0x0, 0x4, 0x8, 0x955, 0x5, 0x1, 0x7fff, 0x5, 0x0, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x7, 0x80000000, 0x10, 0x5b18, 0x7fff, 0x6, 0x8, 0x8, 0x2, 0xf, 0x1, 0x2, 0x7, 0x6, 0x8, 0x10, 0x9, 0x1, 0x4, 0x1, 0xcce1, 0x200, 0x3, 0x9, 0x2, 0xac, 0x1000, 0x2, 0xfffffffe, 0x1e00, 0x5, 0x6, 0xc8, 0xd8e, 0x9, 0x4, 0xc, 0x6, 0x2, 0xfffffffd, 0x0, 0xb, 0x0, 0x5, 0x8, 0x101, 0x9, 0x7, 0xcf3, 0x7fffffff, 0xc9d5126, 0xb, 0x3, 0x4, 0xf, 0x72, 0xfffffffa, 0x3, 0x5, 0x4, 0x1, 0x2, 0x6, 0xe, 0xe, 0x5a82, 0x401, 0xc5, 0x43f, 0x7c, 0x100, 0x8, 0x0, 0xc036, 0x6, 0x5, 0x3, 0x3ff, 0x5, 0x3b67, 0x200, 0x929, 0xffffffc0, 0x9, 0xbd1, 0x6, 0x4, 0x6, 0x4, 0xc2f, 0x1e4e629b, 0x6, 0x1000000, 0x1, 0xfc9, 0x5d9, 0x8713d78f, 0xde, 0x2, 0x4, 0x8, 0x4, 0x0, 0x8000, 0x1, 0x2400, 0xf41, 0x9, 0x4, 0xfffffffb, 0x2, 0x3, 0xa4, 0x401, 0xf90e, 0x1000, 0x7, 0x4, 0x4, 0x7f, 0x7, 0x1, 0x80000000, 0x1ff, 0x1, 0x3, 0x4, 0x4, 0x3, 0x9, 0x7, 0x6, 0x4, 0x8, 0x8, 0x7, 0x8, 0x3, 0xaf34, 0xfff, 0x5, 0x7, 0x8001, 0x16, 0x462f, 0x0, 0x32, 0x7f, 0x26d, 0x0, 0x0, 0x8, 0xffffffff, 0x3, 0x1, 0x0, 0xa, 0xfffffff6, 0x75, 0xe, 0x2, 0xefa, 0x5, 0xc27, 0xffff, 0xfc77, 0x3, 0x0, 0x9, 0x5, 0x5, 0x0, 0x8, 0x5, 0x1, 0xfffffff7, 0x5, 0x9, 0x0, 0x0, 0x1, 0x5, 0x1, 0x1, 0x5, 0x42e, 0x8, 0x7, 0xd6, 0x9, 0x4, 0x5, 0x1, 0x1, 0x0, 0xfffffff4, 0x60, 0x7fffffff, 0x6, 0xcd7, 0xffff, 0x4, 0x1ff, 0x6, 0xfffffffd, 0x1ff, 0x1, 0x0, 0x7, 0x4, 0x1, 0x3d, 0xc8, 0xff, 0x4, 0x70, 0x3, 0x4, 0x81, 0x1000, 0xfffff001, 0x5, 0x8, 0x4, 0x0, 0x1, 0x10001, 0x5, 0x8, 0x5, 0x1, 0x63, 0x5, 0x5, 0x272c, 0x7fffffff, 0x4, 0x2d1, 0x8, 0x400, 0x5, 0xf, 0x9, 0x0, 0x1, 0x10001, 0x7, 0x80000001, 0x9, 0x2, 0xef, 0x4, 0x862, 0x3, 0x56e, 0x3, 0xe9, 0x0, 0x81, 0x0, 0xffffff7f, 0x8000, 0x7fff, 0x20, 0xc1, 0xf5, 0x4, 0x7fff, 0x400, 0xfffffffd, 0xffffff81, 0x4160, 0x9, 0x7, 0x807, 0x10000, 0xe, 0x4, 0x0, 0xffffff00, 0xfffffff7, 0x72ec, 0xa, 0x0, 0x1, 0x2, 0x0, 0x8, 0x5, 0x5, 0x4, 0x0, 0x5, 0x2cc, 0x23eada94, 0x2000, 0xffff, 0x4836, 0x5, 0x8, 0x3, 0x4, 0x6, 0x9, 0x6, 0xb, 0x0, 0x4, 0x10000, 0x2, 0x1, 0xffffffff, 0x9, 0x2, 0xbeb, 0xffff, 0xc, 0x6, 0x99, 0x5, 0x7f, 0x3, 0x5, 0x0, 0xfffffffd, 0x4000000, 0x10, 0x0, 0x80000001, 0x2, 0x6, 0x1, 0x2, 0xffff, 0x0, 0x400, 0x3, 0x7be5, 0x4, 0x73, 0x80000000, 0xfff, 0x90c8, 0xffff, 0x7ff, 0x0, 0x9, 0x3, 0x2, 0x200, 0x47, 0x0, 0x6, 0x0, 0x2, 0x9, 0xffffffff, 0x7f7, 0x6, 0x0, 0x4, 0x1, 0x8, 0x5, 0x6, 0x6, 0xfff, 0xead, 0x97, 0x5, 0x7, 0x7, 0x58b5, 0x8b7, 0x5ee, 0x5, 0x9, 0x3, 0x4, 0x2, 0x42e, 0x7f, 0x5, 0x6, 0x400, 0x9, 0x0, 0x3, 0x9, 0x0, 0x80000000, 0xfffffff2, 0x2637c078, 0x6, 0x8, 0x0, 0x10000, 0x6, 0x9, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x4, 0x2, 0x8000, 0x7, 0xe0, 0xfff, 0x0, 0x7, 0xfcb, 0x7b6, 0x9283, 0x7, 0x1, 0x8, 0x1, 0xde8f, 0x4, 0x4, 0x7, 0x400, 0x1000, 0xaf4, 0x6, 0xffffbe38, 0x10000, 0x40800000, 0x0, 0x1c, 0xf, 0x7, 0x1, 0xffff, 0x4, 0x2, 0x80000001, 0x10001, 0x6, 0x10000, 0xc510, 0x8, 0x1ff, 0x800, 0x458b26fb, 0x0, 0x5, 0x80, 0x400, 0x4, 0x6, 0x4, 0x9, 0x8, 0x6d03, 0x7, 0xf, 0x80000000, 0x2, 0x7f, 0x9, 0x8, 0x7ff, 0x9, 0x3, 0x7, 0xe2, 0x6, 0x1c0, 0x9, 0x60000000, 0xa6a, 0xc, 0x8, 0x1, 0x7, 0x2a2, 0x0, 0xd07, 0x0, 0x8, 0x400, 0xe, 0xd, 0x401, 0x1, 0xf11, 0xfff, 0x7, 0xfffffff9, 0x2, 0x0, 0x1b7605f7, 0x7, 0x1, 0x9, 0x80000000, 0x3, 0x8, 0x80, 0x1, 0x1, 0x3, 0x401, 0xc, 0x7, 0x2, 0x3, 0x1ff, 0x6, 0xf37, 0x8000, 0x3, 0x1, 0x3, 0x8, 0x5, 0x5, 0x4, 0x93, 0x5b940b1d, 0x7fffffff, 0x3, 0x65e, 0x2, 0xfffffffa, 0x0, 0xa, 0xcdd, 0x0, 0xb, 0x480, 0xb, 0xfffff0e8, 0x101, 0x0, 0x10, 0x8, 0x3, 0x9, 0x8, 0x3, 0x5, 0x7fff, 0x6e7, 0x5, 0x8001, 0x7, 0x1, 0x1, 0x6000, 0xfff, 0xfff, 0xea, 0x2, 0xffff, 0x2b9, 0x4, 0xffffffff, 0x8001, 0x8, 0xdfa6, 0x0, 0x1b7, 0x0, 0x9, 0x1, 0x6fc8, 0xf, 0x0, 0x5, 0x100, 0xfbd, 0x683, 0x5, 0x6, 0x6, 0xc6, 0x2, 0x2, 0xaae3, 0x80000000, 0x5, 0x200, 0x3fc3, 0x1, 0x9, 0x3, 0x7fff, 0x7fff, 0x2, 0x6, 0x7, 0xffffffff, 0x5, 0x4, 0x9, 0xc2, 0x0, 0x6, 0x9, 0xfe54, 0x2, 0xffffff80, 0x5, 0xe, 0x2, 0x2, 0x81, 0x7, 0x455c, 0x3, 0x7e09d621, 0x1, 0xb, 0x1, 0x4, 0x81, 0x8, 0xcc, 0xd, 0x1000, 0x289d, 0xff, 0x90c, 0x5, 0xfffffff9, 0x7, 0x7, 0x2, 0x0, 0x1, 0x4f7, 0x300000, 0xd09, 0x0, 0x101, 0x400, 0x4, 0x0, 0x5, 0xff, 0x6, 0x3, 0x2, 0x10, 0xe, 0x3, 0x8, 0x3, 0x5b, 0x400, 0x1, 0x1350, 0x5, 0x100, 0x2, 0x80000001, 0x5, 0x7, 0x0, 0x6, 0x5981, 0xcf81, 0x622, 0x68f8bdf7, 0x5, 0x4, 0x8, 0x7d242090, 0x24b, 0x22, 0x7, 0xffffff01, 0x7fff, 0x81a, 0x6, 0xfffffff9, 0x0, 0x8001, 0x200, 0x0, 0x3, 0x463, 0x4447, 0x9, 0x6, 0x0, 0x7, 0x0, 0x3, 0x4, 0x7, 0x1, 0x2743, 0x9, 0x2, 0xfbc], 0x6, 0x400})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4})
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

3m33.919163213s ago: executing program 3 (id=1704):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0xa8002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48, 0x0, 0x8}]})
creat(&(0x7f0000001380)='./file0\x00', 0x0) (async)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x0, 0x34324241, 0x0, @stepwise})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0)

3m33.847910659s ago: executing program 3 (id=1705):
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x1a5543, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xd, 0x1, 0x0, "ac9ea3c75608cf7a74445673c1f1fe7bb3fe9603a055824fd5df22e9bd6c89a0"})
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x0, 0x63d, 0x0, 0x2ff, 0x0, "00000008000000fe630500000000000000001f"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000700)=0x8)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1]}})
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r0, 0x1, {0x0, 0x0, 0x0, 0x4, 0xa011, 0x0, 0x5, 0x1d, 0x0, "80cb61dcfcd283222935bdf2fedd9dbed5ae5f0dcfce4005ac84e454e483e8acc1882cae45626d98a0f198209d203f05248defe01a8f025ab97774227b62835f", "3d760abb7b1b321cf7d6f4f66c701ad2f7c662ed4ad8cd7a4ff7865b31f80bf39a15f27e24d5ae3da1737ed7f533bcab5ed748f658e3abe6bf89c4d78464322c", "ec41d1f5a6d0ebec0e841a2ebbc9bb1716ddd07e660d854b4955f8cddaa0170f", [0x3, 0x7]}})
openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000680)={0x7, 0xfff, 0x0, 0x9}, 0x10)
ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000640)={0x1, 0x7fffffff})
socket$rxrpc(0x21, 0x2, 0xa)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)

3m33.774840179s ago: executing program 3 (id=1706):
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f", @ANYRES8=r0], 0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x28a601, 0x0)
read(r1, 0x0, 0x0)
r2 = creat(&(0x7f0000000180)='./cgroup\x00', 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@host})
r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6})
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000440)=0x1)

3m18.470744322s ago: executing program 32 (id=1706):
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f", @ANYRES8=r0], 0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x28a601, 0x0)
read(r1, 0x0, 0x0)
r2 = creat(&(0x7f0000000180)='./cgroup\x00', 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@host})
r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6})
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000440)=0x1)

31.223113019s ago: executing program 4 (id=2890):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48641, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000f6ffffffffffff0180c200000c08060323011b06000002aaaaaaaaaaaaaaaaaa03aabb"], 0x26)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r4, 0x0, 0x0, 0x10fff9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r4, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000300)={0x28, 0x7, r5, r3, 0x0, 0x0, 0x0, 0x0, 0x0})
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0)

30.977882201s ago: executing program 4 (id=2892):
openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x82040, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00')
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd)
sysfs$3(0x3)
preadv(r0, &(0x7f0000002240)=[{&(0x7f0000000080)=""/262, 0x106}], 0x1, 0x7, 0xfff)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r3, 0x8b2c, &(0x7f0000000040))
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
tee(r4, r5, 0xfffffffffffffc01, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x280}, 0x1, 0x0, 0x0, 0x48000}, 0xc845)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000002280)={{0x1, 0x200, 0xffff, 0x0, 0x1, 0x401}, 0x19a, [0x1, 0x8, 0x7f, 0xc, 0x3, 0x6, 0x4, 0x7, 0x9, 0x4, 0x3, 0x1, 0x2, 0x5627, 0x7, 0x8, 0x9, 0x7, 0x7, 0x3ccfaf48, 0xd6, 0x3, 0xd, 0x5, 0x0, 0x8, 0x10000, 0x7, 0x401, 0x5, 0x1, 0xd, 0xfff, 0x8, 0x8, 0xffffffff, 0xd423, 0x8, 0x80, 0xbbbf, 0x8, 0x83, 0x6, 0xfffff9a1, 0x5, 0x9, 0x15a, 0xffff, 0x7, 0x6, 0x7, 0xfffffffa, 0x7, 0x0, 0xe, 0x39d, 0x5, 0xfffffffe, 0xdeb, 0x4, 0x40, 0x1, 0x0, 0x6, 0xfd, 0x4, 0x7, 0xfffffff2, 0x9, 0x7, 0x4ada, 0x8001, 0x2, 0xff, 0x800, 0x4, 0xbc, 0x3, 0x1fc, 0xfffffffa, 0x9, 0xfebe, 0x1, 0x90, 0xfffffff9, 0x8, 0x44ca, 0x0, 0x3, 0xb2, 0x3, 0x0, 0x8, 0x1, 0x6, 0x0, 0xd36, 0x8000, 0x2b, 0x6, 0xb2, 0x4, 0x4, 0xffffffff, 0x1, 0xf18, 0x3, 0x3, 0x7, 0x5, 0x3, 0x0, 0x2, 0x4, 0xd3, 0xff, 0x3, 0x55b3, 0x8, 0x4, 0x8, 0x0, 0x7e5e67ef, 0x8c, 0x1, 0x1, 0x4, 0x2, 0xec3b, 0x5b9, 0x9, 0x120, 0xa69, 0x5cb7, 0x7, 0x3, 0x2, 0xc, 0x7, 0xfffffff8, 0x800, 0x2, 0x7ff, 0x9, 0xc0000000, 0x7fffffff, 0xd3, 0x100, 0x6, 0x5, 0x9, 0x3, 0x9, 0x2, 0x3, 0x7, 0x3, 0x259, 0x7, 0x3, 0x6, 0x10001, 0x3, 0xfffffffc, 0x2f, 0x6, 0x5, 0xe0000, 0x6, 0x9, 0x40000000, 0x7, 0x2b7a, 0x4, 0x5, 0x3c, 0x1, 0x9b, 0x0, 0x6, 0x6, 0x0, 0x9, 0x8ca9, 0x22, 0x3, 0x6, 0x800, 0xc, 0x9ad, 0x3, 0x55f, 0xfffffffa, 0x8326, 0x401, 0x800, 0x6, 0x8, 0x80, 0xed, 0xd, 0x5, 0x3, 0x8, 0x2, 0x8, 0x9, 0x14af, 0x80000001, 0x4, 0x0, 0x74a, 0x0, 0x9, 0x1, 0x4, 0x7, 0x0, 0x4, 0x9, 0xe7c2, 0x8, 0x10000, 0x1, 0x1, 0x5c54, 0x5, 0x3ff, 0xa2a, 0xfffffff8, 0x648, 0x6456a39c, 0x6, 0x1, 0x1, 0xfffffffc, 0x2, 0x9, 0x5, 0x8, 0x6, 0x3, 0x101, 0x0, 0x9, 0x3ff, 0x0, 0x5, 0x4, 0x6b, 0x600, 0x101, 0xfffffff0, 0x5, 0xa, 0x4, 0xffffff1e, 0x7, 0x46f3a623, 0x9, 0x7f5, 0x100, 0x721a4f64, 0x0, 0x5, 0x6, 0xffff0000, 0x1ff, 0xa627, 0x19a, 0x5, 0x4, 0x3, 0x0, 0x0, 0x7, 0x7, 0x9, 0x5, 0x9, 0x200, 0x7, 0xe, 0x80000001, 0x7, 0x5, 0x10000, 0x0, 0x0, 0xfff, 0x9, 0x9, 0x4, 0x3, 0x81, 0xff, 0x7, 0xa, 0x4d, 0x9, 0x5, 0x7b8, 0x7f, 0xe9d1, 0x4, 0x3c57, 0x80000001, 0x3, 0x5, 0x7, 0x80, 0x40, 0x0, 0xfffffe02, 0x2, 0x8, 0x0, 0xe, 0x7, 0x3, 0x3, 0xff, 0x2, 0x8, 0xfa3, 0x5, 0x9, 0xd253, 0x4, 0x3, 0x6, 0xb, 0x200, 0x6, 0x4, 0x4, 0x7ff, 0x4ac, 0x9, 0x5, 0xb, 0x0, 0x8, 0x2, 0x4, 0x80000001, 0x8001, 0xc6c, 0x8ccc, 0x2, 0x9, 0x7fffffff, 0x8, 0x9, 0x75, 0x80, 0x4, 0xea7d, 0xfffffffc, 0xfffffff9, 0x7ff, 0x3, 0x4, 0xb31, 0x49fe, 0x2, 0x8, 0x2, 0x10, 0x2bb, 0x5, 0x0, 0x0, 0x8000, 0xfffffe01, 0xbfea, 0x3, 0x1, 0x8, 0x9, 0x6, 0x4, 0xfffffffd, 0xf, 0x8, 0x63, 0x455, 0x8, 0x8, 0x0, 0x0, 0x7, 0x10000, 0x1b, 0x6, 0x3, 0x3, 0x8000, 0x8000, 0x1, 0x6, 0x5, 0x2, 0x7, 0x2, 0x80, 0xf, 0x7f, 0x7, 0x3, 0x2, 0x5, 0x3ff, 0x9, 0x8001, 0xeb32, 0xfff, 0x49, 0xa8ea, 0xb8dc, 0x13, 0x5, 0x4, 0x7f, 0x0, 0xadd4, 0x9, 0xd68, 0x9, 0x3, 0xfffffc01, 0x16, 0x60df, 0x2, 0x10001, 0x7, 0x3, 0x8ce5, 0x6, 0x10000, 0xe1, 0x4107b34f, 0xb, 0x1, 0x0, 0x8, 0x8000, 0x3, 0x7, 0x1, 0xc, 0x5ff1, 0x4, 0x8, 0x1ff, 0x7, 0x1000, 0x3, 0x4, 0x9, 0x9, 0x6, 0x0, 0x0, 0x3, 0x1, 0x40000, 0x0, 0x1, 0x7fffffff, 0xf, 0x8001, 0xb0b, 0x5, 0x0, 0xa2, 0x7fffffff, 0x1ff, 0x5, 0x7fffffff, 0x5, 0x0, 0x2, 0x3, 0xf9, 0x8000, 0x1, 0x40, 0x9, 0x8000, 0x5, 0x6, 0xd0f, 0xaf, 0x4, 0x2, 0x7, 0x8, 0x2, 0x2, 0x7, 0xc, 0x8001, 0x0, 0x41a1, 0x7, 0x7, 0xffffffff, 0x0, 0x0, 0x7, 0x3, 0x7, 0x17, 0x1, 0x3, 0x9, 0x9, 0x6, 0x80, 0xffffff80, 0x9, 0x4, 0x3, 0x400, 0x0, 0x9, 0x70, 0x1, 0x0, 0x0, 0x5, 0x0, 0x9, 0x4, 0x1, 0x7, 0x5, 0x2, 0x0, 0x4, 0x83, 0x3, 0x4, 0x7, 0x9, 0x7, 0xad, 0x5, 0x150, 0x5, 0xffffff1d, 0x9, 0x1, 0x8, 0x454, 0x7fff, 0x1, 0xffffff80, 0x8000, 0x10001, 0x9, 0xdc73, 0x2, 0x5, 0x8, 0x8, 0x7f, 0xda, 0x4c, 0x10000, 0xd60d, 0x1, 0x9, 0x9, 0x6b, 0xffff, 0xa139, 0x800, 0x3, 0x0, 0x1, 0x1, 0x3ff, 0x8, 0x3fb, 0x1, 0x2, 0x1aba, 0x0, 0x4, 0x7, 0x4, 0xb, 0x2, 0x9, 0x9, 0x1, 0x7, 0x7, 0x9, 0x7, 0xb, 0x7f, 0x0, 0x3, 0xfff, 0x3, 0xffffffff, 0x5, 0x1, 0x4, 0x6, 0x4, 0xd2, 0xb, 0x63, 0x2, 0x0, 0x3, 0x3, 0x1470, 0x80000, 0x7f, 0xb39e, 0x33a, 0x2, 0x2, 0x0, 0x8be, 0x6, 0x0, 0x6, 0xffff96bf, 0xff, 0x1, 0x6, 0x4, 0x80000000, 0xb, 0x1, 0x7, 0xc84b, 0x81, 0x0, 0x5, 0xb, 0xa, 0x9, 0x0, 0x6, 0x5, 0x1b1b2a6a, 0x7, 0x1000, 0xd, 0x4, 0xfffffffb, 0x9, 0x6, 0x0, 0x1000, 0x7fffffff, 0xf, 0x70, 0xc2, 0x2, 0x9, 0x40, 0x80000000, 0x2, 0xf1d9, 0xc, 0x3, 0xcdbb, 0x5350, 0x1, 0x8, 0x4, 0xffff0000, 0x8000, 0x80000000, 0xa9, 0x5, 0x3, 0x7fff, 0x400, 0xaa, 0x2, 0x2, 0x4, 0x3, 0x9, 0x0, 0x7, 0x4, 0x800, 0x2, 0x7, 0xe, 0x8, 0x9fd, 0x7fffffff, 0x5, 0x7, 0x1, 0x6, 0x0, 0x3, 0xd0, 0xe811, 0x32f6, 0x8, 0x7, 0x3, 0xc5, 0x1, 0x2, 0x6, 0xffffffff, 0x0, 0x7fff, 0x1, 0x3, 0xfffffffe, 0x3, 0xf7a, 0x3, 0x5, 0x7, 0x2, 0x6, 0x5, 0x7ff, 0x0, 0x200, 0x48000000, 0x26, 0x5, 0x6, 0x6, 0x3, 0x7fffffff, 0x8001, 0x6, 0xef, 0x8, 0x10000, 0x0, 0x6, 0x9, 0x7ff, 0x1000, 0x1, 0x800, 0x50, 0x9a11, 0x8, 0x6, 0x5, 0x5, 0x9, 0x1c000, 0xef, 0x400, 0x8, 0x5, 0x2, 0x7, 0x5, 0x6, 0xffff3040, 0x850, 0x7, 0x8000, 0x7, 0x6, 0xff, 0x7, 0xfff, 0x2, 0x6, 0x3, 0x16, 0xb0, 0x8, 0x1, 0x1, 0x8, 0x174, 0x8, 0x3ff, 0x0, 0x56, 0x5, 0x36b, 0x5, 0x44, 0xb57c, 0x9, 0x8, 0x6, 0x2, 0x9, 0x39ae85dc, 0x1, 0xa, 0xfffffffa, 0x59, 0x7, 0x5, 0x21b, 0xa0, 0x7fffffff, 0x0, 0xfffffff8, 0x9, 0xdcb, 0x2, 0x6, 0xfffffff8, 0x68cd9302, 0x6, 0x4, 0x2, 0x1, 0x6e6a938f, 0xffff, 0xc6, 0x6, 0x80, 0x2, 0x8, 0x8, 0x8000, 0x80, 0x2, 0x0, 0x6, 0xffff, 0x6, 0x3, 0x8b0, 0xc, 0x4, 0x8, 0x7, 0xac24, 0x9, 0xffffffff, 0x455b, 0x3, 0x10001, 0x6, 0x1ff, 0x4, 0x100, 0x5, 0x101, 0x5, 0x3, 0x5, 0x5, 0xff, 0x401, 0x2, 0x2, 0x200, 0x5, 0xfffffff5, 0x0, 0x2, 0x7fffffff, 0x3e8, 0x0, 0x7, 0x1000, 0x68c, 0x5, 0x9, 0x1000, 0x10000, 0x32c, 0x9d3f, 0x7, 0x3, 0x9, 0x2, 0x0, 0x1, 0x25, 0x80000001, 0x0, 0x8000, 0x4, 0x5, 0x2, 0x4, 0x7, 0x9, 0x9, 0x9, 0x1, 0x3, 0x0, 0x8, 0x7, 0xcb, 0x758, 0x5, 0x4, 0x3, 0x2, 0x4, 0x7b, 0x2, 0x7, 0x9, 0x5, 0x6, 0x1000, 0xfff, 0x6225, 0xf, 0x1, 0x3ff, 0x9, 0x5, 0x2, 0x3, 0x101, 0x1, 0x3, 0x6, 0x200008, 0x1f, 0x8, 0x2, 0xfff, 0x2, 0x9, 0x189c0, 0x0, 0xa8, 0x2, 0x7, 0x6, 0x9, 0x6, 0x8, 0x7fffffff, 0x8, 0x2, 0x2, 0x9, 0x6, 0x7f, 0x0, 0x3, 0x3, 0xa, 0x2, 0x15, 0x8, 0x0, 0x8, 0x8, 0x7f, 0xfffffffc, 0xf263, 0x7ff, 0x9, 0x7, 0x6, 0x3, 0x7, 0x3, 0x3, 0x1204, 0xffff, 0x8001, 0x8, 0x4cb, 0xd, 0x8, 0x8, 0x6, 0x6, 0x8, 0x7, 0x2, 0x2, 0x3, 0x3, 0xffffffff, 0x1df1, 0x79a, 0x2, 0x5, 0x9, 0x40, 0x200, 0x7, 0xfffffff5, 0x7, 0x2, 0xe50e, 0x7, 0x0, 0x1, 0x80000000, 0x0, 0xa, 0x1, 0x1ff, 0x9, 0x1, 0xfa9f, 0x2, 0x8, 0x8001, 0xca, 0x8000, 0xffffffff]})
read$alg(r6, &(0x7f0000000540)=""/4104, 0x1008)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000001100)={0x3, 0x0, 0xc, 0x3, r8}, &(0x7f0000000040)=0x10)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

29.976263075s ago: executing program 4 (id=2897):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x902, 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x20000)

29.934457839s ago: executing program 4 (id=2898):
r0 = msgget$private(0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f2101e3bb9ad809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x401, 0x0, 0xffff})
msgrcv(r0, &(0x7f0000000100)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
waitid(0x0, 0x0, 0x0, 0x61000006, &(0x7f0000000380))
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14}}, 0x50}, 0x1, 0x1200, 0x0, 0x20000090}, 0x8040080)
clock_gettime(0x0, &(0x7f00000004c0)={<r7=>0x0, <r8=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)={0x6, 0xb00, 0x0, {0x0, 0xea60}, {r7, r8/1000+10000}, {0x2}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "deee69b60af11ac9f73cfea3be463c1975b9b85d954fe7f6b54a03483c092c4bf46bc939c067a9783e23e8b1ab3346fa014e509cf3395d0d84283a4a63913e82"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x64}}, 0x0)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r9, &(0x7f0000000400)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="010000020008000001ac13b75f802f2c384600008000000000c68cbdc59d506217c207881591700fff2d2a3744d8b90dc712689ee6fa07ce04d726079edeceaa931711aaa36694c0d811c87b0cef51785c40dd55a4f5d20f878c56bb2c4f48f067e9b60921dc7a79c61a95ff1934adb79d895ba481d3b006caede6ab58875d147fe77407a3f5735f66065b99ede41978e9f5fb7f18f95b7ebb0c206a97b179a89e45eecfaef03e0b0adef1936ba31f2d5055ea481652e3abf6645dea1c35b5d7ccb184ca4e40be06a748d7a6e24e4c266a87e599e4783dca451d04c1a68bf491b40d3e", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000e001000000000000e03d0000004590bfee8998bad9402ea96738528659682fe6e0b36151f3a7e7750bf91459412483a116946c513e3c32d50072f86da6b060eb4492cbb9e71d4bbdc23b86f1f3"], 0x80}, 0x1, 0x0, 0x0, 0x26048001}, 0x4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0)

29.048909963s ago: executing program 4 (id=2902):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket(0xa, 0x3, 0x3a)
r6 = socket$kcm(0x2, 0xa, 0x2)
r7 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0)
r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="ae", 0x1, 0xfffffffffffffffc)
keyctl$describe(0x6, r8, &(0x7f0000000480)=""/4081, 0xff1)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40046f41, &(0x7f0000000440)=0x1f)
socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r11, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x1, 0x3, 0x2, 0x0, [{0x2, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x1, '\x00', 0xa0}, {0x1, 0x9}, {0xa, 0x3, 0x5, '\x00', 0x6}, {0xb8, 0xda, 0x8, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x0, 0x6, 0x4, '\x00', 0x5}, {0x7, 0x5, 0xd, '\x00', 0xa}, {0x0, 0x1, 0x45, '\x00', 0xc2}, {0x8, 0x4e, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x4, 0x6, '\x00', 0x9}, {0xc2, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x8}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x18, 0x80, '\x00', 0x10}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0xb, 0xc, '\x00', 0x8}, {0x86, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}})
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0)
syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)

28.655252275s ago: executing program 4 (id=2904):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@empty}, 0x14)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
alarm(0x81)
ptrace(0x10, r1)
ptrace$setregs(0xf, r1, 0xba, &(0x7f0000000040))
r2 = syz_open_procfs(0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x3, 0x3)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0)
socket(0x8, 0x1, 0x3)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)

28.501165752s ago: executing program 33 (id=2904):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@empty}, 0x14)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
alarm(0x81)
ptrace(0x10, r1)
ptrace$setregs(0xf, r1, 0xba, &(0x7f0000000040))
r2 = syz_open_procfs(0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x3, 0x3)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0)
socket(0x8, 0x1, 0x3)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)

23.206473454s ago: executing program 0 (id=2934):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl')
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58)
r1 = socket(0x2, 0x3, 0x6)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4)
sendto$inet(r1, 0x0, 0x0, 0xdfedac7253303320, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0)

22.679573538s ago: executing program 0 (id=2937):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x200000, 0x200000, 0x7}) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
writev(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async, rerun: 64)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async, rerun: 64)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r3, 0x99b33000) (async, rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (rerun: 32)

22.358161978s ago: executing program 0 (id=2939):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14)
listen(r1, 0x1ff)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r2, &(0x7f00000000c0)="ab", 0xffe0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000d, 0x11, r0, 0x2000)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x40800, &(0x7f00000001c0)='-\x00')
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x101000, 0x120)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)

22.038361079s ago: executing program 0 (id=2940):
r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f0100000000000000000009058103200000000009058202080080000009050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) (async)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0)

19.619964121s ago: executing program 2 (id=2941):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0)
r1 = creat(0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000000, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xeb9a0000)
copy_file_range(r1, 0x0, r1, 0x0, 0x6, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000240)="ea", 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000198000000", 0x8)
lseek(r0, 0x2004, 0x0)
sendfile(r0, r0, 0x0, 0x80c000)

19.528130735s ago: executing program 2 (id=2943):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x6, 0xf, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x7ff, 0x6, 0x5, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0x4, 0xa}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x80000, 0xc)
r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f00000000c0)={0x3})

19.480825121s ago: executing program 0 (id=2944):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mmap(&(0x7f0000a6d000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x1c32000)
setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x8, 0x4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x3f2, 0x2, 0x70bd27, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

19.326559516s ago: executing program 2 (id=2947):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250f0000000500140024000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x30000801}, 0x800)
arch_prctl$ARCH_GET_CPUID(0x1011)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)

19.149349896s ago: executing program 0 (id=2948):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000180))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0})
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x808000, 0x0)

19.027359507s ago: executing program 2 (id=2950):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0)

18.863025232s ago: executing program 2 (id=2951):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x7cd4, 0xb43}, 0x8)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa8300, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000440)=""/139, &(0x7f0000000100)=0x8b)
mkdir(&(0x7f0000000080)='./file1\x00', 0x18)
mount$fuse(0x0, 0x0, 0x0, 0x1102080, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
ioprio_get$pid(0x1, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="fd8d00000000000000000300000008000300", @ANYRES32=r4], 0x30}}, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0680, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r6}, './file0\x00'})
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000)

18.728449513s ago: executing program 2 (id=2952):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='geneve1\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
pipe2$9p(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000000000e3f3e6b68d64c8223f554d1c8b00e7ac687f6254a9c38d"], 0xb8)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
truncate(&(0x7f0000000200)='./file0\x00', 0x6)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0)

8.70359263s ago: executing program 1 (id=2996):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x382, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0080904530002058d9d0009ff7f000000000000090582"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/../file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:*'], 0x8)
sendmsg$AUDIT_USER_TTY(r1, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x1010}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004890)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x410102, 0x0, 0x10}, 0x18)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000406a05160040000102f60009022d00010107107c0904000d020301020109210800000122dc0e090581030800fb56000905020308000e0208"], &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7, 0x3, 0x5, 0x40, 0x2}, 0x27, &(0x7f0000000080)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x32, 0x5, 0x1, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x0, 0x0, 0x1, [0xf0, 0xff3f00, 0xc000]}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2009}}]})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$setsig(0x4203, r2, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000380)="c5d41ba193d50382918912cd65e57da10441ac4f5f716e72c367c612fc50fd30c7151c7151784fbb2ac81accb8de42fc86b7a5d26657714ecc81aad5e0dbce87fb50775e0325cf4ce224b6", 0x4b, 0x5846, 0x0, 0xffffffffffffff3a)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0x8, 0x89102130, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))

6.431482425s ago: executing program 5 (id=3006):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
r2 = syz_open_dev$I2C(0x0, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0xffffffd6, 0x0}, 0x400020f3)
ioctl$I2C_SMBUS(r2, 0x720, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r5, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0)
getsockopt$inet_udp_int(r4, 0x11, 0x1, 0x0, &(0x7f0000000040))
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x10006, 0x1, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x20010, r0, 0x45809000)
r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0xd, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"})
ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f00000000c0)=""/231)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0)

6.327755233s ago: executing program 5 (id=3007):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x0, 0xd, 0x11, {0x11, 0xe, "2469b7799657868fa49b80841e897a"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x8, "84"}, @global=@item_4={0x3, 0x1, 0x4, "927e6bb4"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x7f, 0x1, {0x22, 0xf09}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x3a, "a2a9e05c0b8e837e5a01353a6146a0fb19b9cf5de2bd761f84295b7f58eec8255ae25bd444e78ae59669af8a5152c30d3a768dba8738b34c5dc2"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000280)={0x20, 0x1, 0x90, "fc648a12d36f88953a60959cdf41a6e8cfc1a0fcebfe4dc63aa45c1facab197066173b815216d300b68af03e8390e4bd86c3fff734904f6d605810932335a13a9e058fb71c57f099f5a492c745955963d86a8e9df59b0bfe06b0bb90c5aea408b5524ee5afee57690b420ef7fcba3451e4bd400e910b7fe3a6df660792349182825cd44f39b0a2227abf5c44852a05d2"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xf9}})
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x300, 0x8000005, 0x590f, 0x9})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)

5.632469616s ago: executing program 1 (id=3008):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001180)={{r0}, r1, 0x2, @inherit={0x70, &(0x7f0000000000)={0x0, 0x5, 0x3, 0xddd3, {0x21, 0x5, 0x7, 0x2, 0x6}, [0x2, 0x8, 0x7f, 0x0, 0x3]}}, @name="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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
socket$inet6(0xa, 0x5, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
mlock2(&(0x7f0000ba0000/0x1000)=nil, 0x1000, 0x1)

5.484392945s ago: executing program 1 (id=3009):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 32)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011e0091e2bdf71308a75b000000000000030109021200010000000009040000002ac59800"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x1, "fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_NMI(r4, 0xae9a) (async)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000002, 0x0, 0x100000000000000, 0x100000, 0x5, 0x2004c8, 0x8000000, 0xffffffffffff8000, 0x0, 0xfffffffffffffff8, 0x0, 0x400, 0xfffffffffffffffe], 0x0, 0x1040}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async)
shutdown(r0, 0x1) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async)
sendfile(r0, r5, 0x0, 0xffffffff004)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={<r7=>0xffffffffffffffff, 0xffffffffffffff00})
close_range(r7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0)

3.972886314s ago: executing program 34 (id=2948):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000180))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0})
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x808000, 0x0)

3.93167481s ago: executing program 5 (id=3011):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x9}, 0x8)
r1 = syz_open_dev$I2C(0x0, 0x0, 0x0)
ioctl$I2C_SMBUS(r1, 0x720, 0x0)
r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80, 0x101, 0x1}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1048c, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00')
ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000080))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0)

3.358151893s ago: executing program 35 (id=2952):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='geneve1\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
pipe2$9p(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000000000e3f3e6b68d64c8223f554d1c8b00e7ac687f6254a9c38d"], 0xb8)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
truncate(&(0x7f0000000200)='./file0\x00', 0x6)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0)

3.351189415s ago: executing program 5 (id=3013):
timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{r2, r3+10000000}, {r0, r1+60000000}}, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
ioctl$LOOP_GET_STATUS64(r5, 0x4c05, 0x0)
nanosleep(&(0x7f0000000100)={0x77359400}, &(0x7f0000000140))
sendfile(r4, r4, 0x0, 0x7ffff000)

2.35982365s ago: executing program 1 (id=3014):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0)
r1 = creat(0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000000, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xeb9a0000)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x400})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0)
copy_file_range(r1, 0x0, r1, 0x0, 0x6, 0x0)
lseek(r0, 0x2004, 0x0)
sendfile(r0, r0, 0x0, 0x80c000)

2.147930636s ago: executing program 1 (id=3015):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x22052, r0, 0x2000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xb, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
sendto$inet(r3, &(0x7f0000000000)="752d1e79e93ee9e54caffb83ca6418b65de2fc90e71529a4b63334b3573767199e3a6f886e2c6b7c7f0037328ab2e4832f9936b0040e903d792627ee43ca3d7628997317266480862ef5bdacf20ce840ee1d899c0967f5c7f849cc99df6d8e129460877f8a7c3615b7bc9ccf83d2c72e1740a1a33cfe8113fcb767f14570e05fe443c649e78b93654ea74ade45fb6b87a0728ff7cc63fb2c1497696c30a7bd8e542d7f7f6361075a9f4d549e9366b50aa486d26b966b35241775", 0xba, 0x20040000, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10)

1.105155898s ago: executing program 5 (id=3016):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201500273eda608aa14010346980100030109021200010908708d090446040009e24900"], &(0x7f00000003c0)={0x0, 0x0, 0x48, 0x0})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
ioctl$LOOP_CHANGE_FD(r3, 0x4c08, r4)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200)
rt_sigsuspend(0x0, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"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"})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
mq_notify(r4, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={&(0x7f0000001840)="549e7dd8b7d241e368746e352f20aedfedce2dff1c87fddd58751fcda65617de6c53a029fcbc7fcfc3465b2d3a857130cb42d401e11aacbec8ec25d9175ab562090d094632a8c63f8f443ac355a5b6c9d927c2cb277356de404e38c542145ce87cc48c7eefe870240756df7ffa4c2802195996ddb68a81251bca79b073bb78e12f915769d944fdcb36", &(0x7f0000001900)="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"}})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140))
modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
modify_ldt$read(0x0, &(0x7f0000000840)=""/4068, 0xfe4)
setreuid(0x0, r8)
mmap(&(0x7f0000786000/0x2000)=nil, 0x2000, 0x5a051feb1f984a1d, 0x1010, r4, 0x7dfff000)
landlock_restrict_self(0xffffffffffffffff, 0x4)

1.081353546s ago: executing program 1 (id=3017):
r0 = syz_open_procfs(0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x27)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x4010, r3, 0x45809000)
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000740)=0x800, 0x4)

0s ago: executing program 5 (id=3018):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r4, &(0x7f0000002580)=[{&(0x7f0000000400)="b4", 0x1}], 0x1)
write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98)
socket(0x1f, 0x1, 0xaa2f)
splice(r2, 0x0, r2, 0x0, 0x82, 0x6)
sendfile(r0, r0, 0x0, 0x7ffff000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
pipe(&(0x7f00000001c0)) (async)
writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) (async)
pipe(&(0x7f0000000380)) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async)
syz_usb_control_io(r3, 0x0, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
writev(r4, &(0x7f0000002580)=[{&(0x7f0000000400)="b4", 0x1}], 0x1) (async)
write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) (async)
socket(0x1f, 0x1, 0xaa2f) (async)
splice(r2, 0x0, r2, 0x0, 0x82, 0x6) (async)
sendfile(r0, r0, 0x0, 0x7ffff000) (async)

kernel console output (not intermixed with test programs):

ter parsing attributes in process `syz.2.2447'.
[  414.947483][T14206] lo speed is unknown, defaulting to 1000
[  415.102067][ T5158] Bluetooth: hci1: command tx timeout
[  415.269912][T14206] lo speed is unknown, defaulting to 1000
[  415.391775][T14206] lo speed is unknown, defaulting to 1000
[  415.399466][T14206] lo speed is unknown, defaulting to 1000
[  415.488205][   T12] hsr_slave_0: left promiscuous mode
[  415.516462][   T12] hsr_slave_1: left promiscuous mode
[  415.534370][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  415.561760][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  415.621409][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  415.635959][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  415.801093][   T12] veth1_macvtap: left promiscuous mode
[  415.836418][   T12] veth0_macvtap: left promiscuous mode
[  415.849015][   T12] veth1_vlan: left promiscuous mode
[  415.861692][   T12] veth0_vlan: left promiscuous mode
[  415.871080][T14249] /dev/rnullb0: Can't open blockdev
[  416.456019][   T12] team0 (unregistering): Port device team_slave_1 removed
[  416.497703][   T12] team0 (unregistering): Port device team_slave_0 removed
[  416.832012][T14258] /dev/rnullb0: Can't open blockdev
[  416.909110][T14261] /dev/rnullb0: Can't open blockdev
[  417.181499][ T5158] Bluetooth: hci1: command tx timeout
[  417.319319][T14275] /dev/rnullb0: Can't open blockdev
[  417.441494][T13412] usb 3-1: new full-speed USB device number 121 using dummy_hcd
[  417.646677][   T12] IPVS: stop unused estimator thread 0...
[  417.673015][T13412] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[  417.699917][T13412] usb 3-1: config 0 has no interface number 0
[  417.704557][T14169] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  417.715337][T13412] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  417.732932][T13412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.751577][T13412] usb 3-1: Product: syz
[  417.755693][T14169] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  417.755767][T13412] usb 3-1: Manufacturer: syz
[  417.777478][T13412] usb 3-1: SerialNumber: syz
[  417.804441][T13412] usb 3-1: config 0 descriptor??
[  417.810045][T14169] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  417.841072][T14169] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  418.005731][T14169] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.015534][T13412] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected
[  418.052045][T13412] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81
[  418.066111][T14169] 8021q: adding VLAN 0 to HW filter on device team0
[  418.070299][T13412] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1
[  418.082623][T13412] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2
[  418.098106][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.105326][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.113944][T13412] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  418.188617][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.195795][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.221615][T14308] XFS (rnullb0): Invalid superblock magic number
[  418.354677][T14169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  418.386938][T14169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  418.454508][T14271] /dev/rnullb0: Can't open blockdev
[  418.461666][T13547] usb 3-1: USB disconnect, device number 121
[  418.505630][T13547] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  418.530997][T13547] keyspan 3-1:0.133: device disconnected
[  418.744340][T14169] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.834681][T14169] veth0_vlan: entered promiscuous mode
[  418.856301][T14169] veth1_vlan: entered promiscuous mode
[  418.904886][T14169] veth0_macvtap: entered promiscuous mode
[  418.917498][T14169] veth1_macvtap: entered promiscuous mode
[  418.949176][T14169] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.993505][T14169] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.035381][ T1111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.062812][ T1111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.088104][ T1111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.116228][ T1111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.255640][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.263836][ T5158] Bluetooth: hci1: command tx timeout
[  419.279129][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.329998][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.340354][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.877205][T14352] input: syz0 as /devices/virtual/input/input59
[  420.516007][T14377] XFS (rnullb0): Invalid superblock magic number
[  420.739793][T14390] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  420.749244][T14390] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  420.762175][T14391] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  420.769276][T14391] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  421.160989][T13547] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  421.189233][T14408] XFS (rnullb0): Invalid superblock magic number
[  421.322047][T13547] usb 5-1: Using ep0 maxpacket: 8
[  421.338052][T13547] usb 5-1: config 0 has an invalid interface number: 54 but max is 0
[  421.362573][T13547] usb 5-1: config 0 has no interface number 0
[  421.369366][T13547] usb 5-1: too many endpoints for config 0 interface 54 altsetting 232: 175, using maximum allowed: 30
[  421.389888][T13547] usb 5-1: config 0 interface 54 altsetting 232 has 0 endpoint descriptors, different from the interface descriptor's value: 175
[  421.403823][T13547] usb 5-1: config 0 interface 54 has no altsetting 0
[  421.432895][T13547] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  421.457000][T13547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.475661][T13547] usb 5-1: Product: syz
[  421.479986][T13547] usb 5-1: Manufacturer: syz
[  421.490142][T13547] usb 5-1: SerialNumber: syz
[  421.521393][T13547] usb 5-1: config 0 descriptor??
[  421.756441][T13547] usb 5-1: USB disconnect, device number 30
[  422.130798][ T5969] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  422.220594][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  422.280908][ T5969] usb 1-1: Using ep0 maxpacket: 32
[  422.292471][ T5969] usb 1-1: config 40 has an invalid interface number: 93 but max is 0
[  422.305729][ T5969] usb 1-1: config 40 has no interface number 0
[  422.323177][ T5969] usb 1-1: config 40 interface 93 has no altsetting 0
[  422.333501][ T5969] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=11.6c
[  422.343026][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.353755][ T5969] usb 1-1: Product: syz
[  422.360196][ T5969] usb 1-1: Manufacturer: syz
[  422.372990][ T5969] usb 1-1: SerialNumber: syz
[  422.615577][ T5969] usb 1-1: USB disconnect, device number 9
[  422.690709][ T5896] usb 3-1: new full-speed USB device number 122 using dummy_hcd
[  422.780260][T14431] netlink: 'syz.4.2485': attribute type 10 has an invalid length.
[  422.845465][T14431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  422.854064][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  422.870718][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  422.887997][T14431] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  422.896851][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  422.908142][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  422.917957][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  422.939714][ T5896] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  422.949214][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  422.957356][ T5896] usb 3-1: Product: syz
[  422.965427][ T5896] usb 3-1: Manufacturer: syz
[  422.970042][ T5896] usb 3-1: SerialNumber: syz
[  422.975269][T14432] CIFS mount error: No usable UNC path provided in device string!
[  422.975269][T14432] 
[  422.995771][ T5896] usb 3-1: config 0 descriptor??
[  423.002132][T14432] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  423.211963][ T5896] radio-si470x 3-1:0.0: DeviceID=0x5225 ChipID=0x50ba
[  423.365112][T14444] XFS (rnullb0): Invalid superblock magic number
[  423.417032][ T5896] radio-si470x 3-1:0.0: software version 82, hardware version 37
[  423.561764][ T5969] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  423.618873][ T5896] radio-si470x 3-1:0.0: submitting int urb failed (-90)
[  423.627118][T14452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  423.640700][T14452] omfs: Invalid superblock (0)
[  423.733175][ T5969] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  423.743117][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.756481][ T5969] usb 5-1: config 0 descriptor??
[  423.771322][ T5969] cp210x 5-1:0.0: cp210x converter detected
[  423.979207][ T5969] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121
[  423.993090][ T5969] cp210x 5-1:0.0: querying part number failed
[  424.003988][ T5969] usb 5-1: cp210x converter now attached to ttyUSB0
[  424.023947][ T5896] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71
[  424.051566][ T5896] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22
[  424.081516][ T5896] usb 3-1: USB disconnect, device number 122
[  424.090047][ T5986] udevd[5986]: setting mode of /dev/bus/usb/003/122 to 020664 failed: No such file or directory
[  424.109206][ T5986] udevd[5986]: setting owner of /dev/bus/usb/003/122 to uid=0, gid=0 failed: No such file or directory
[  424.283838][T14473] /dev/sg0: Can't lookup blockdev
[  424.571540][T14479] /dev/rnullb0: Can't open blockdev
[  424.624897][T14481] /dev/rnullb0: Can't open blockdev
[  424.910520][ T5896] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  425.063207][ T5896] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  425.071788][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  425.082738][ T5896] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  425.091899][ T5896] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  425.099964][ T5896] usb 3-1: Manufacturer: syz
[  425.107062][ T5896] usb 3-1: config 0 descriptor??
[  425.170642][ T5896] rc_core: IR keymap rc-hauppauge not found
[  425.178348][ T5896] Registered IR keymap rc-empty
[  425.185554][ T5896] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  425.195933][T13547] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  425.204799][ T5896] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input60
[  425.340493][T13547] usb 1-1: device descriptor read/64, error -71
[  425.522060][T14487] rc rc0: two consecutive events of type space
[  425.590474][T13547] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  425.730444][T13547] usb 1-1: device descriptor read/64, error -71
[  425.779239][T14488] vxfs: WRONG superblock magic 00000000 at 1
[  425.785629][T14488] vxfs: WRONG superblock magic 00000000 at 8
[  425.792003][T14488] vxfs: can't find superblock.
[  425.841188][T13547] usb usb1-port1: attempt power cycle
[  426.190407][T13547] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  426.199702][  T984] usb 5-1: USB disconnect, device number 31
[  426.217731][T13547] usb 1-1: device descriptor read/8, error -71
[  426.225039][  T984] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  426.247504][  T984] cp210x 5-1:0.0: device disconnected
[  426.470333][T13547] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  426.493213][T13547] usb 1-1: device descriptor read/8, error -71
[  426.611870][T13547] usb usb1-port1: unable to enumerate USB device
[  426.631986][  T984] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  426.790242][  T984] usb 5-1: Using ep0 maxpacket: 8
[  426.800208][  T984] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  426.812437][  T984] usb 5-1: config 179 has no interface number 0
[  426.818723][  T984] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  426.833117][  T984] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  426.844608][  T984] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  426.856623][  T984] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  426.869586][  T984] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  426.884408][  T984] usb 5-1: config 179 interface 65 has no altsetting 0
[  426.892495][  T984] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  426.901600][  T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.933176][  T984] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input61
[  427.001640][ T5193] input input61: unable to receive magic message: -110
[  427.015182][ T5193] input input61: unable to receive magic message: -32
[  427.032661][ T5193] input input61: unable to receive magic message: -32
[  427.050509][ T5193] input input61: unable to receive magic message: -32
[  427.058902][ T5193] input input61: unable to receive magic message: -32
[  427.068952][ T5193] input input61: unable to receive magic message: -32
[  427.124442][   T30] audit: type=1326 audit(1751074018.745:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14491 comm="syz.4.2505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8988f8e929 code=0x0
[  427.213956][T14494] XFS (rnullb0): Invalid superblock magic number
[  427.252024][T14500] /dev/rnullb0: Can't open blockdev
[  427.261420][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  427.277871][  T984] usb 5-1: USB disconnect, device number 32
[  427.287838][  T984] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  427.700387][  T984] usb 3-1: USB disconnect, device number 123
[  427.757324][T14503] XFS (rnullb0): Invalid superblock magic number
[  427.806093][T14503] FAULT_INJECTION: forcing a failure.
[  427.806093][T14503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  427.819552][T14503] CPU: 1 UID: 0 PID: 14503 Comm: syz.2.2507 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) 
[  427.819568][T14503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  427.819575][T14503] Call Trace:
[  427.819580][T14503]  <TASK>
[  427.819586][T14503]  dump_stack_lvl+0x189/0x250
[  427.819603][T14503]  ? __pfx____ratelimit+0x10/0x10
[  427.819616][T14503]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.819626][T14503]  ? __pfx__printk+0x10/0x10
[  427.819637][T14503]  ? __might_fault+0xb0/0x130
[  427.819654][T14503]  should_fail_ex+0x414/0x560
[  427.819668][T14503]  _copy_from_user+0x2d/0xb0
[  427.819680][T14503]  __sys_connect+0x123/0x440
[  427.819694][T14503]  ? __fget_files+0x3a0/0x420
[  427.819708][T14503]  ? __pfx___sys_connect+0x10/0x10
[  427.819727][T14503]  ? __pfx_ksys_write+0x10/0x10
[  427.819739][T14503]  ? rcu_is_watching+0x15/0xb0
[  427.819761][T14503]  __x64_sys_connect+0x7a/0x90
[  427.819783][T14503]  do_syscall_64+0xfa/0x3b0
[  427.819801][T14503]  ? lockdep_hardirqs_on+0x9c/0x150
[  427.819820][T14503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.819835][T14503]  ? clear_bhb_loop+0x60/0xb0
[  427.819847][T14503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.819857][T14503] RIP: 0033:0x7f438ed8e929
[  427.819867][T14503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.819875][T14503] RSP: 002b:00007f438fc59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  427.819887][T14503] RAX: ffffffffffffffda RBX: 00007f438efb5fa0 RCX: 00007f438ed8e929
[  427.819894][T14503] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000005
[  427.819900][T14503] RBP: 00007f438fc59090 R08: 0000000000000000 R09: 0000000000000000
[  427.819906][T14503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.819912][T14503] R13: 0000000000000000 R14: 00007f438efb5fa0 R15: 00007ffc1fa82d18
[  427.819926][T14503]  </TASK>
[  428.010841][    C1] vkms_vblank_simulate: vblank timer overrun
[  428.380922][T14524] syz.1.2513: attempt to access beyond end of device
[  428.380922][T14524] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  428.394056][T14524] exFAT-fs (loop1): unable to read boot sector
[  428.404648][T14524] exFAT-fs (loop1): failed to read boot sector
[  428.413738][T14524] exFAT-fs (loop1): failed to recognize exfat type
[  429.196127][T14530] syz.0.2522: attempt to access beyond end of device
[  429.196127][T14530] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0
[  429.210860][T14530] gfs2: error -5 reading superblock
[  429.333532][T14539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2518'.
[  429.440042][  T983] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  429.603113][  T983] usb 3-1: Using ep0 maxpacket: 32
[  429.611862][  T983] usb 3-1: config 40 has an invalid interface number: 93 but max is 0
[  429.636977][  T983] usb 3-1: config 40 has no interface number 0
[  429.645218][  T983] usb 3-1: config 40 interface 93 has no altsetting 0
[  429.654435][  T983] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=11.6c
[  429.663940][  T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.672285][  T983] usb 3-1: Product: syz
[  429.676457][  T983] usb 3-1: Manufacturer: syz
[  429.684136][  T983] usb 3-1: SerialNumber: syz
[  429.809874][T13547] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  429.930650][  T983] usb 3-1: USB disconnect, device number 124
[  429.960504][T13547] usb 5-1: Using ep0 maxpacket: 16
[  429.972425][T13547] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  429.983354][T13547] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  429.994879][T13547] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  430.004196][T13547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.013032][T13547] usb 5-1: Product: syz
[  430.017282][T13547] usb 5-1: Manufacturer: syz
[  430.022025][T13547] usb 5-1: SerialNumber: syz
[  430.327998][T14558] /dev/rnullb0: Can't open blockdev
[  430.411946][T14560] XFS (rnullb0): Invalid superblock magic number
[  430.460052][T13547] usb 5-1: cannot find UAC_HEADER
[  430.532363][T13547] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  430.536922][T14568] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.611091][T14568] bond0: (slave rose0): Enslaving as an active interface with an up link
[  430.644185][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  430.647850][  T983] usb 5-1: USB disconnect, device number 33
[  430.943098][T14586] cgroup: Unknown subsys name 'cpuset'
[  430.987029][T14586] /dev/rnullb0: Can't open blockdev
[  431.094128][T14591] /dev/rnullb0: Can't open blockdev
[  431.693085][T14619] /dev/rnullb0: Can't open blockdev
[  431.886093][T14626] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2538'.
[  431.917652][T14615] /dev/rnullb0: Can't open blockdev
[  432.307345][T14640] /dev/rnullb0: Can't open blockdev
[  432.669756][  T984] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  432.834272][  T984] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  432.852835][  T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  432.865696][  T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  432.878738][  T984] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  432.897361][  T984] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  432.906708][  T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.928048][  T984] usb 5-1: config 0 descriptor??
[  433.060588][   T30] audit: type=1800 audit(1751074024.686:16): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2547" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  433.241762][T14683] /dev/rnullb0: Can't open blockdev
[  433.378047][  T984] plantronics 0003:047F:FFFF.002E: ignoring exceeding usage max
[  433.403343][  T984] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  433.565763][T14697] /dev/rnullb0: Can't open blockdev
[  433.704317][  T983] usb 5-1: USB disconnect, device number 34
[  433.989559][ T5896] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  434.139988][ T5896] usb 1-1: Using ep0 maxpacket: 8
[  434.147159][ T5896] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  434.158387][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  434.168474][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  434.178420][ T5896] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  434.191699][ T5896] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  434.200966][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.220570][  T983] usb 3-1: new full-speed USB device number 125 using dummy_hcd
[  434.266866][T14712] /dev/rnullb0: Can't open blockdev
[  434.369369][  T983] usb 3-1: device descriptor read/64, error -71
[  434.425983][ T5896] usb 1-1: GET_CAPABILITIES returned 0
[  434.434242][ T5896] usbtmc 1-1:16.0: can't read capabilities
[  434.574222][T14718] /dev/rnullb0: Can't open blockdev
[  434.609835][  T983] usb 3-1: new full-speed USB device number 126 using dummy_hcd
[  434.759325][  T983] usb 3-1: device descriptor read/64, error -71
[  434.869551][  T983] usb usb3-port1: attempt power cycle
[  434.950467][ T5914] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  435.089276][ T5914] usb 5-1: device descriptor read/64, error -71
[  435.230857][  T983] usb 3-1: new full-speed USB device number 127 using dummy_hcd
[  435.251158][  T983] usb 3-1: device descriptor read/8, error -71
[  435.329222][ T5914] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  435.459180][ T5914] usb 5-1: device descriptor read/64, error -71
[  435.489253][  T983] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  435.509824][  T983] usb 3-1: device descriptor read/8, error -71
[  435.570806][ T5914] usb usb5-port1: attempt power cycle
[  435.619423][  T983] usb usb3-port1: unable to enumerate USB device
[  435.909890][ T5914] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  435.929604][ T5914] usb 5-1: device descriptor read/8, error -71
[  436.169103][ T5914] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  436.189932][ T5914] usb 5-1: device descriptor read/8, error -71
[  436.300304][ T5914] usb usb5-port1: unable to enumerate USB device
[  436.579033][ T5914] usb 1-1: USB disconnect, device number 14
[  436.782309][T14732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2562'.
[  437.079103][ T5896] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  437.179498][  T983] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  437.243341][T14730] /dev/rnullb0: Can't open blockdev
[  437.251287][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short
[  437.261422][ T5896] usb 1-1: no configurations
[  437.266019][ T5896] usb 1-1: can't read configurations, error -22
[  437.309059][  T983] usb 3-1: device descriptor read/64, error -71
[  437.559671][  T983] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  437.650835][T14738] /dev/rnullb0: Can't open blockdev
[  437.690245][  T983] usb 3-1: device descriptor read/64, error -71
[  437.834534][  T983] usb usb3-port1: attempt power cycle
[  437.946798][T14752] /dev/rnullb0: Can't open blockdev
[  438.089027][  T984] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  438.189004][  T983] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  438.221771][  T983] usb 3-1: device descriptor read/8, error -71
[  438.249582][  T984] usb 5-1: Using ep0 maxpacket: 8
[  438.262518][  T984] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  438.272847][  T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.285056][  T984] usb 5-1: Product: syz
[  438.290294][  T984] usb 5-1: Manufacturer: syz
[  438.295802][  T984] usb 5-1: SerialNumber: syz
[  438.310587][  T984] usb 5-1: config 0 descriptor??
[  438.478845][  T983] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  438.510873][  T983] usb 3-1: device descriptor read/8, error -71
[  438.528879][  T984] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  438.619349][  T983] usb usb3-port1: unable to enumerate USB device
[  438.693595][T14754] /dev/rnullb0: Can't open blockdev
[  438.845553][T14766] /dev/rnullb0: Can't open blockdev
[  438.913997][T14768] syzkaller1: entered promiscuous mode
[  438.920564][T14768] syzkaller1: entered allmulticast mode
[  438.927460][T14768] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  438.937145][T14768] /dev/rnullb0: Can't open blockdev
[  439.078976][  T983] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  439.087915][T14772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2579'.
[  439.113169][T14772] netlink: 'syz.1.2579': attribute type 10 has an invalid length.
[  439.136582][T14772] team0: Port device wlan1 added
[  439.218809][  T983] usb 1-1: device descriptor read/64, error -71
[  439.458837][  T983] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  439.588728][  T983] usb 1-1: device descriptor read/64, error -71
[  439.700797][  T983] usb usb1-port1: attempt power cycle
[  439.855135][T14781] /dev/rnullb0: Can't open blockdev
[  439.901438][T14786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.915661][T14786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.033474][  T984] usb write operation failed. (-71)
[  440.040710][  T983] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  440.052719][  T984] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  440.074081][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  440.100571][  T983] usb 1-1: device descriptor read/8, error -71
[  440.119103][  T984] dvbdev: DVB: registering new adapter (Terratec H7)
[  440.125871][  T984] usb 5-1: media controller created
[  440.136738][  T984] usb read operation failed. (-71)
[  440.142947][  T984] usb write operation failed. (-71)
[  440.160088][  T984] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  440.179066][  T984] usb 5-1: USB disconnect, device number 39
[  440.241530][T14794] /dev/rnullb0: Can't open blockdev
[  440.276562][T14799] /dev/rnullb0: Can't open blockdev
[  440.348735][  T983] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  440.372740][  T983] usb 1-1: device descriptor read/8, error -71
[  440.410613][T14808] /dev/rnullb0: Can't open blockdev
[  440.502738][  T983] usb usb1-port1: unable to enumerate USB device
[  440.672904][T14815] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xee
[  440.722499][T14818] FAULT_INJECTION: forcing a failure.
[  440.722499][T14818] name failslab, interval 1, probability 0, space 0, times 0
[  440.737079][T14818] CPU: 1 UID: 0 PID: 14818 Comm: syz.2.2593 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) 
[  440.737105][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  440.737116][T14818] Call Trace:
[  440.737124][T14818]  <TASK>
[  440.737132][T14818]  dump_stack_lvl+0x189/0x250
[  440.737156][T14818]  ? __pfx____ratelimit+0x10/0x10
[  440.737179][T14818]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.737197][T14818]  ? __pfx__printk+0x10/0x10
[  440.737221][T14818]  ? __pfx___might_resched+0x10/0x10
[  440.737238][T14818]  ? fs_reclaim_acquire+0x7d/0x100
[  440.737263][T14818]  should_fail_ex+0x414/0x560
[  440.737287][T14818]  should_failslab+0xa8/0x100
[  440.737308][T14818]  __kmalloc_cache_noprof+0x70/0x3d0
[  440.737327][T14818]  ? snd_pcm_oss_change_params_locked+0x172/0x3e40
[  440.737352][T14818]  snd_pcm_oss_change_params_locked+0x172/0x3e40
[  440.737377][T14818]  ? __pfx___mutex_trylock_common+0x10/0x10
[  440.737401][T14818]  ? rcu_is_watching+0x15/0xb0
[  440.737418][T14818]  ? trace_contention_end+0x39/0x120
[  440.737434][T14818]  ? __mutex_lock+0x330/0xe80
[  440.737456][T14818]  ? __might_fault+0xb0/0x130
[  440.737480][T14818]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  440.737497][T14818]  ? snd_pcm_oss_read+0x1f9/0x8d0
[  440.737518][T14818]  ? __pfx___mutex_lock+0x10/0x10
[  440.737554][T14818]  ? __asan_memset+0x22/0x50
[  440.737580][T14818]  snd_pcm_oss_read+0x26a/0x8d0
[  440.737613][T14818]  vfs_readv+0x5aa/0x850
[  440.737637][T14818]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  440.737656][T14818]  ? __pfx_vfs_readv+0x10/0x10
[  440.737691][T14818]  ? __fget_files+0x2a/0x420
[  440.737717][T14818]  ? __fget_files+0x3a0/0x420
[  440.737737][T14818]  ? __fget_files+0x2a/0x420
[  440.737766][T14818]  do_readv+0x14d/0x2d0
[  440.737791][T14818]  ? __pfx_do_readv+0x10/0x10
[  440.737811][T14818]  ? rcu_is_watching+0x15/0xb0
[  440.737832][T14818]  ? do_syscall_64+0xbe/0x3b0
[  440.737857][T14818]  do_syscall_64+0xfa/0x3b0
[  440.737877][T14818]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.737897][T14818]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.737914][T14818]  ? clear_bhb_loop+0x60/0xb0
[  440.737941][T14818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.737957][T14818] RIP: 0033:0x7f438ed8e929
[  440.737973][T14818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.737988][T14818] RSP: 002b:00007f438fc59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  440.738008][T14818] RAX: ffffffffffffffda RBX: 00007f438efb5fa0 RCX: 00007f438ed8e929
[  440.738020][T14818] RDX: 0000000000000002 RSI: 0000200000002d40 RDI: 0000000000000003
[  440.738032][T14818] RBP: 00007f438fc59090 R08: 0000000000000000 R09: 0000000000000000
[  440.738043][T14818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.738054][T14818] R13: 0000000000000000 R14: 00007f438efb5fa0 R15: 00007ffc1fa82d18
[  440.738083][T14818]  </TASK>
[  441.498497][ T5896] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  441.660450][ T5896] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[  441.668921][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  441.679156][ T5896] usb 5-1: config 0 has no interface number 0
[  441.685251][ T5896] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  441.695399][ T5896] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  441.712722][ T5896] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  441.722218][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.730607][ T5896] usb 5-1: Product: syz
[  441.734770][ T5896] usb 5-1: Manufacturer: syz
[  441.739882][ T5896] usb 5-1: SerialNumber: syz
[  441.746348][ T5896] usb 5-1: config 0 descriptor??
[  441.909978][ T1111] wlan1: Trigger new scan to find an IBSS to join
[  442.110566][ T5896] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71
[  442.152304][ T5896] usb 5-1: USB disconnect, device number 40
[  442.330083][T14849] FAULT_INJECTION: forcing a failure.
[  442.330083][T14849] name failslab, interval 1, probability 0, space 0, times 0
[  442.347934][T14849] CPU: 1 UID: 0 PID: 14849 Comm: syz.4.2603 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) 
[  442.347961][T14849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  442.347972][T14849] Call Trace:
[  442.347980][T14849]  <TASK>
[  442.347989][T14849]  dump_stack_lvl+0x189/0x250
[  442.348012][T14849]  ? __pfx____ratelimit+0x10/0x10
[  442.348034][T14849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  442.348053][T14849]  ? __pfx__printk+0x10/0x10
[  442.348078][T14849]  ? __pfx___might_resched+0x10/0x10
[  442.348095][T14849]  ? fs_reclaim_acquire+0x7d/0x100
[  442.348121][T14849]  should_fail_ex+0x414/0x560
[  442.348145][T14849]  should_failslab+0xa8/0x100
[  442.348167][T14849]  __kmalloc_cache_noprof+0x70/0x3d0
[  442.348186][T14849]  ? snd_pcm_oss_change_params_locked+0x1b3/0x3e40
[  442.348211][T14849]  snd_pcm_oss_change_params_locked+0x1b3/0x3e40
[  442.348241][T14849]  ? __pfx___mutex_trylock_common+0x10/0x10
[  442.348262][T14849]  ? rcu_is_watching+0x15/0xb0
[  442.348278][T14849]  ? trace_contention_end+0x39/0x120
[  442.348295][T14849]  ? __mutex_lock+0x330/0xe80
[  442.348313][T14849]  ? __might_fault+0xb0/0x130
[  442.348337][T14849]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  442.348354][T14849]  ? snd_pcm_oss_read+0x1f9/0x8d0
[  442.348371][T14849]  ? __pfx___mutex_lock+0x10/0x10
[  442.348401][T14849]  ? __asan_memset+0x22/0x50
[  442.348425][T14849]  snd_pcm_oss_read+0x26a/0x8d0
[  442.348455][T14849]  vfs_readv+0x5aa/0x850
[  442.348479][T14849]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  442.348499][T14849]  ? __pfx_vfs_readv+0x10/0x10
[  442.348534][T14849]  ? __fget_files+0x2a/0x420
[  442.348559][T14849]  ? __fget_files+0x3a0/0x420
[  442.348578][T14849]  ? __fget_files+0x2a/0x420
[  442.348607][T14849]  do_readv+0x14d/0x2d0
[  442.348632][T14849]  ? __pfx_do_readv+0x10/0x10
[  442.348650][T14849]  ? rcu_is_watching+0x15/0xb0
[  442.348670][T14849]  ? do_syscall_64+0xbe/0x3b0
[  442.348694][T14849]  do_syscall_64+0xfa/0x3b0
[  442.348713][T14849]  ? lockdep_hardirqs_on+0x9c/0x150
[  442.348733][T14849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.348758][T14849]  ? clear_bhb_loop+0x60/0xb0
[  442.348778][T14849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.348795][T14849] RIP: 0033:0x7f8988f8e929
[  442.348810][T14849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.348825][T14849] RSP: 002b:00007f8989dad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  442.348843][T14849] RAX: ffffffffffffffda RBX: 00007f89891b5fa0 RCX: 00007f8988f8e929
[  442.348856][T14849] RDX: 0000000000000002 RSI: 0000200000002d40 RDI: 0000000000000003
[  442.348867][T14849] RBP: 00007f8989dad090 R08: 0000000000000000 R09: 0000000000000000
[  442.348878][T14849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.348889][T14849] R13: 0000000000000000 R14: 00007f89891b5fa0 R15: 00007ffde94e43b8
[  442.348918][T14849]  </TASK>
[  442.636128][ T5914] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  442.831152][ T5914] usb 3-1: Using ep0 maxpacket: 8
[  442.838843][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short
[  442.848994][ T5914] usb 3-1: config 5 has no interfaces?
[  442.856432][ T5914] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=6f.03
[  442.865632][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.873723][ T5914] usb 3-1: Product: syz
[  442.877889][ T5914] usb 3-1: Manufacturer: syz
[  442.882553][ T5914] usb 3-1: SerialNumber: syz
[  443.030538][ T5896] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  443.159525][T14847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.171345][T14847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.198357][ T5896] usb 5-1: Using ep0 maxpacket: 32
[  443.205391][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.227527][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.246281][ T5896] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  443.255716][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.272500][T14868] lo speed is unknown, defaulting to 1000
[  443.284770][ T5896] usb 5-1: config 0 descriptor??
[  443.342448][ T5914] usb 3-1: USB disconnect, device number 7
[  443.770567][T14875] /dev/rnullb0: Can't open blockdev
[  443.916794][ T5896] hid-u2fzero 0003:10C4:8ACF.002F: unknown main item tag 0x4
[  443.962891][ T5896] hid-u2fzero 0003:10C4:8ACF.002F: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0
[  443.995771][T14886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.024254][ T5896] hid-u2fzero 0003:10C4:8ACF.002F: U2F Zero LED initialised
[  444.054033][ T5896] hid-u2fzero 0003:10C4:8ACF.002F: U2F Zero RNG initialised
[  444.110612][ T5896] usb 5-1: USB disconnect, device number 41
[  444.203992][T14884] fido_id[14884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  444.361863][T14894] /dev/rnullb0: Can't open blockdev
[  444.553469][T14904] FAULT_INJECTION: forcing a failure.
[  444.553469][T14904] name failslab, interval 1, probability 0, space 0, times 0
[  444.566195][T14904] CPU: 0 UID: 0 PID: 14904 Comm: syz.2.2615 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) 
[  444.566217][T14904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  444.566228][T14904] Call Trace:
[  444.566235][T14904]  <TASK>
[  444.566242][T14904]  dump_stack_lvl+0x189/0x250
[  444.566265][T14904]  ? __pfx____ratelimit+0x10/0x10
[  444.566286][T14904]  ? __pfx_dump_stack_lvl+0x10/0x10
[  444.566303][T14904]  ? __pfx__printk+0x10/0x10
[  444.566328][T14904]  ? __pfx___might_resched+0x10/0x10
[  444.566344][T14904]  ? fs_reclaim_acquire+0x7d/0x100
[  444.566370][T14904]  should_fail_ex+0x414/0x560
[  444.566394][T14904]  should_failslab+0xa8/0x100
[  444.566416][T14904]  __kmalloc_cache_noprof+0x70/0x3d0
[  444.566435][T14904]  ? snd_pcm_oss_change_params_locked+0x1fe/0x3e40
[  444.566461][T14904]  snd_pcm_oss_change_params_locked+0x1fe/0x3e40
[  444.566487][T14904]  ? __pfx___mutex_trylock_common+0x10/0x10
[  444.566511][T14904]  ? rcu_is_watching+0x15/0xb0
[  444.566529][T14904]  ? trace_contention_end+0x39/0x120
[  444.566547][T14904]  ? __mutex_lock+0x330/0xe80
[  444.566577][T14904]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  444.566594][T14904]  ? snd_pcm_oss_read+0x1f9/0x8d0
[  444.566614][T14904]  ? __pfx___mutex_lock+0x10/0x10
[  444.566651][T14904]  ? __asan_memset+0x22/0x50
[  444.566677][T14904]  snd_pcm_oss_read+0x26a/0x8d0
[  444.566711][T14904]  vfs_readv+0x5aa/0x850
[  444.566735][T14904]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  444.566755][T14904]  ? __pfx_vfs_readv+0x10/0x10
[  444.566793][T14904]  ? __fget_files+0x2a/0x420
[  444.566820][T14904]  ? __fget_files+0x3a0/0x420
[  444.566848][T14904]  ? __fget_files+0x2a/0x420
[  444.566878][T14904]  do_readv+0x14d/0x2d0
[  444.566903][T14904]  ? __pfx_do_readv+0x10/0x10
[  444.566923][T14904]  ? rcu_is_watching+0x15/0xb0
[  444.566945][T14904]  ? do_syscall_64+0xbe/0x3b0
[  444.566970][T14904]  do_syscall_64+0xfa/0x3b0
[  444.566990][T14904]  ? lockdep_hardirqs_on+0x9c/0x150
[  444.567010][T14904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.567027][T14904]  ? clear_bhb_loop+0x60/0xb0
[  444.567048][T14904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.567065][T14904] RIP: 0033:0x7f438ed8e929
[  444.567081][T14904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  444.567097][T14904] RSP: 002b:00007f438fc59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  444.567116][T14904] RAX: ffffffffffffffda RBX: 00007f438efb5fa0 RCX: 00007f438ed8e929
[  444.567129][T14904] RDX: 0000000000000002 RSI: 0000200000002d40 RDI: 0000000000000003
[  444.567140][T14904] RBP: 00007f438fc59090 R08: 0000000000000000 R09: 0000000000000000
[  444.567150][T14904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  444.567160][T14904] R13: 0000000000000000 R14: 00007f438efb5fa0 R15: 00007ffc1fa82d18
[  444.567189][T14904]  </TASK>
[  444.846934][    C0] vkms_vblank_simulate: vblank timer overrun
[  444.983912][T14907] /dev/rnullb0: Can't open blockdev
[  445.174178][T14912] FAULT_INJECTION: forcing a failure.
[  445.174178][T14912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  445.205736][T14912] CPU: 1 UID: 0 PID: 14912 Comm: syz.2.2618 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) 
[  445.205764][T14912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  445.205775][T14912] Call Trace:
[  445.205783][T14912]  <TASK>
[  445.205791][T14912]  dump_stack_lvl+0x189/0x250
[  445.205816][T14912]  ? __pfx____ratelimit+0x10/0x10
[  445.205837][T14912]  ? __pfx_dump_stack_lvl+0x10/0x10
[  445.205856][T14912]  ? __pfx__printk+0x10/0x10
[  445.205876][T14912]  ? __might_fault+0xb0/0x130
[  445.205904][T14912]  should_fail_ex+0x414/0x560
[  445.205929][T14912]  _copy_from_iter+0x1db/0x16f0
[  445.205950][T14912]  ? rcu_is_watching+0x15/0xb0
[  445.205969][T14912]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  445.205989][T14912]  ? __pfx__copy_from_iter+0x10/0x10
[  445.206008][T14912]  ? __build_skb_around+0x257/0x3e0
[  445.206036][T14912]  ? netlink_sendmsg+0x642/0xb30
[  445.206056][T14912]  ? skb_put+0x11b/0x210
[  445.206082][T14912]  netlink_sendmsg+0x6b2/0xb30
[  445.206117][T14912]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.206142][T14912]  ? aa_sock_msg_perm+0xf1/0x1d0
[  445.206166][T14912]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  445.206189][T14912]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.206212][T14912]  __sock_sendmsg+0x219/0x270
[  445.206235][T14912]  ____sys_sendmsg+0x505/0x830
[  445.206265][T14912]  ? __pfx_____sys_sendmsg+0x10/0x10
[  445.206298][T14912]  ? import_iovec+0x74/0xa0
[  445.206320][T14912]  ___sys_sendmsg+0x21f/0x2a0
[  445.206346][T14912]  ? __pfx____sys_sendmsg+0x10/0x10
[  445.206405][T14912]  ? __fget_files+0x2a/0x420
[  445.206426][T14912]  ? __fget_files+0x3a0/0x420
[  445.206457][T14912]  __x64_sys_sendmsg+0x19b/0x260
[  445.206476][T14912]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  445.206509][T14912]  ? __pfx_ksys_write+0x10/0x10
[  445.206526][T14912]  ? rcu_is_watching+0x15/0xb0
[  445.206547][T14912]  ? do_syscall_64+0xbe/0x3b0
[  445.206572][T14912]  do_syscall_64+0xfa/0x3b0
[  445.206592][T14912]  ? lockdep_hardirqs_on+0x9c/0x150
[  445.206612][T14912]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.206629][T14912]  ? clear_bhb_loop+0x60/0xb0
[  445.206649][T14912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.206666][T14912] RIP: 0033:0x7f438ed8e929
[  445.206681][T14912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.206697][T14912] RSP: 002b:00007f438fc59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  445.206721][T14912] RAX: ffffffffffffffda RBX: 00007f438efb5fa0 RCX: 00007f438ed8e929
[  445.206735][T14912] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  445.206746][T14912] RBP: 00007f438fc59090 R08: 0000000000000000 R09: 0000000000000000
[  445.206756][T14912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.206767][T14912] R13: 0000000000000000 R14: 00007f438efb5fa0 R15: 00007ffc1fa82d18
[  445.206795][T14912]  </TASK>
[  445.668868][  T984] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  445.788413][T14916] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  445.873781][  T984] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  445.891699][  T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  445.908959][   T12] wlan1: Trigger new scan to find an IBSS to join
[  445.928301][  T984] usb 5-1: SerialNumber: syz
[  445.949320][  T984] usb 5-1: config 0 descriptor??
[  445.997327][T14922] overlay: ./file0 is not a directory
[  446.321385][T14932] FAULT_INJECTION: forcing a failure.
[  446.321385][T14932] name failslab, interval 1, probability 0, space 0, times 0
[  446.335655][T14932] CPU: 0 UID: 0 PID: 14932 Comm: syz.2.2627 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) 
[  446.335682][T14932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  446.335692][T14932] Call Trace:
[  446.335700][T14932]  <TASK>
[  446.335707][T14932]  dump_stack_lvl+0x189/0x250
[  446.335731][T14932]  ? __pfx____ratelimit+0x10/0x10
[  446.335753][T14932]  ? __pfx_dump_stack_lvl+0x10/0x10
[  446.335772][T14932]  ? __pfx__printk+0x10/0x10
[  446.335798][T14932]  ? ref_tracker_alloc+0x318/0x460
[  446.335821][T14932]  should_fail_ex+0x414/0x560
[  446.335845][T14932]  should_failslab+0xa8/0x100
[  446.335867][T14932]  kmem_cache_alloc_noprof+0x73/0x3c0
[  446.335885][T14932]  ? skb_clone+0x212/0x3a0
[  446.335907][T14932]  skb_clone+0x212/0x3a0
[  446.335929][T14932]  __netlink_deliver_tap+0x404/0x850
[  446.335963][T14932]  ? netlink_deliver_tap+0x2e/0x1b0
[  446.335987][T14932]  netlink_deliver_tap+0x19c/0x1b0
[  446.336010][T14932]  netlink_unicast+0x72f/0x8d0
[  446.336040][T14932]  netlink_sendmsg+0x805/0xb30
[  446.336071][T14932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.336097][T14932]  ? aa_sock_msg_perm+0xf1/0x1d0
[  446.336121][T14932]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.336144][T14932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.336166][T14932]  __sock_sendmsg+0x219/0x270
[  446.336190][T14932]  ____sys_sendmsg+0x505/0x830
[  446.336220][T14932]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.336255][T14932]  ? import_iovec+0x74/0xa0
[  446.336278][T14932]  ___sys_sendmsg+0x21f/0x2a0
[  446.336304][T14932]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.336365][T14932]  ? __fget_files+0x2a/0x420
[  446.336386][T14932]  ? __fget_files+0x3a0/0x420
[  446.336419][T14932]  __x64_sys_sendmsg+0x19b/0x260
[  446.336439][T14932]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  446.336480][T14932]  ? __pfx_ksys_write+0x10/0x10
[  446.336498][T14932]  ? rcu_is_watching+0x15/0xb0
[  446.336520][T14932]  ? do_syscall_64+0xbe/0x3b0
[  446.336546][T14932]  do_syscall_64+0xfa/0x3b0
[  446.336568][T14932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.336584][T14932]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  446.336602][T14932]  ? clear_bhb_loop+0x60/0xb0
[  446.336623][T14932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.336640][T14932] RIP: 0033:0x7f438ed8e929
[  446.336656][T14932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.336671][T14932] RSP: 002b:00007f438fc59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.336691][T14932] RAX: ffffffffffffffda RBX: 00007f438efb5fa0 RCX: 00007f438ed8e929
[  446.336704][T14932] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  446.336715][T14932] RBP: 00007f438fc59090 R08: 0000000000000000 R09: 0000000000000000
[  446.336726][T14932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.336736][T14932] R13: 0000000000000000 R14: 00007f438efb5fa0 R15: 00007ffc1fa82d18
[  446.336765][T14932]  </TASK>
[  446.623739][    C0] vkms_vblank_simulate: vblank timer overrun
[  446.769842][  T984] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f
[  446.792628][  T984] hackrf 5-1:0.0: Could not detect board
[  446.805125][  T984] hackrf 5-1:0.0: probe with driver hackrf failed with error -71
[  446.863337][  T984] usb 5-1: USB disconnect, device number 42
[  446.999327][ T5896] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  447.103256][ T1164] wlan1: Creating new IBSS network, BSSID c6:36:de:a2:c9:5a
[  447.178169][ T5896] usb 1-1: Using ep0 maxpacket: 8
[  447.191356][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short
[  447.200947][ T5896] usb 1-1: config 5 has an invalid interface number: 238 but max is 0
[  447.212976][ T5896] usb 1-1: config 5 has no interface number 0
[  447.228095][ T5896] usb 1-1: config 5 interface 238 altsetting 6 bulk endpoint 0xF has invalid maxpacket 32
[  447.242970][ T5896] usb 1-1: config 5 interface 238 has no altsetting 0
[  447.253987][ T5896] usb 1-1: New USB device found, idVendor=10f5, idProduct=c545, bcdDevice=25.3f
[  447.269087][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.306689][ T5896] usb 1-1: Product: syz
[  447.306713][ T5896] usb 1-1: Manufacturer: syz
[  447.306728][ T5896] usb 1-1: SerialNumber: syz
[  447.313953][T14926] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  447.360511][T14946] Invalid option length (1048467) for dns_resolver key
[  447.537793][T14926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.567592][T14926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.592682][T14926] syzkaller1: entered promiscuous mode
[  447.601517][T14926] syzkaller1: entered allmulticast mode
[  447.739366][T14954] /dev/rnullb0: Can't open blockdev
[  447.796932][ T5896] usb 1-1: USB disconnect, device number 21
[  447.903275][T14964] FAULT_INJECTION: forcing a failure.
[  447.903275][T14964] name failslab, interval 1, probability 0, space 0, times 0
[  447.959441][T14964] CPU: 0 UID: 0 PID: 14964 Comm: syz.2.2636 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) 
[  447.959472][T14964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  447.959483][T14964] Call Trace:
[  447.959491][T14964]  <TASK>
[  447.959499][T14964]  dump_stack_lvl+0x189/0x250
[  447.959522][T14964]  ? __pfx____ratelimit+0x10/0x10
[  447.959545][T14964]  ? __pfx_dump_stack_lvl+0x10/0x10
[  447.959564][T14964]  ? __pfx__printk+0x10/0x10
[  447.959588][T14964]  ? __pfx___might_resched+0x10/0x10
[  447.959610][T14964]  should_fail_ex+0x414/0x560
[  447.959634][T14964]  should_failslab+0xa8/0x100
[  447.959656][T14964]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  447.959675][T14964]  ? __alloc_skb+0x112/0x2d0
[  447.959696][T14964]  ? __pfx___mutex_trylock_common+0x10/0x10
[  447.959719][T14964]  __alloc_skb+0x112/0x2d0
[  447.959744][T14964]  netlink_dump+0x22b/0xe20
[  447.959769][T14964]  ? __netlink_lookup+0xbd/0x810
[  447.959798][T14964]  ? __pfx_netlink_dump+0x10/0x10
[  447.959831][T14964]  ? netlink_lookup+0x30/0x200
[  447.959851][T14964]  ? netlink_lookup+0x30/0x200
[  447.959868][T14964]  ? netlink_lookup+0x30/0x200
[  447.959894][T14964]  __netlink_dump_start+0x5cb/0x7e0
[  447.959924][T14964]  rtnetlink_rcv_msg+0x9eb/0xb70
[  447.959947][T14964]  ? __pfx_tc_dump_qdisc+0x10/0x10
[  447.959966][T14964]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  447.959987][T14964]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  447.960006][T14964]  ? ref_tracker_free+0x63a/0x7d0
[  447.960024][T14964]  ? __pfx_rtnl_dumpit+0x10/0x10
[  447.960062][T14964]  ? __pfx_tc_dump_qdisc+0x10/0x10
[  447.960082][T14964]  ? __skb_clone+0x63/0x7a0
[  447.960106][T14964]  netlink_rcv_skb+0x208/0x470
[  447.960128][T14964]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  447.960151][T14964]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  447.960186][T14964]  ? netlink_deliver_tap+0x2e/0x1b0
[  447.960207][T14964]  ? netlink_deliver_tap+0x2e/0x1b0
[  447.960233][T14964]  netlink_unicast+0x75b/0x8d0
[  447.960264][T14964]  netlink_sendmsg+0x805/0xb30
[  447.960295][T14964]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.960320][T14964]  ? aa_sock_msg_perm+0xf1/0x1d0
[  447.960344][T14964]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  447.960366][T14964]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.960389][T14964]  __sock_sendmsg+0x219/0x270
[  447.960412][T14964]  ____sys_sendmsg+0x505/0x830
[  447.960442][T14964]  ? __pfx_____sys_sendmsg+0x10/0x10
[  447.960482][T14964]  ? import_iovec+0x74/0xa0
[  447.960505][T14964]  ___sys_sendmsg+0x21f/0x2a0
[  447.960532][T14964]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.960593][T14964]  ? __fget_files+0x2a/0x420
[  447.960614][T14964]  ? __fget_files+0x3a0/0x420
[  447.960646][T14964]  __x64_sys_sendmsg+0x19b/0x260
[  447.960666][T14964]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  447.960699][T14964]  ? __pfx_ksys_write+0x10/0x10
[  447.960725][T14964]  ? do_syscall_64+0xbe/0x3b0
[  447.960750][T14964]  do_syscall_64+0xfa/0x3b0
[  447.960773][T14964]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.960789][T14964]  ? asm_common_interrupt+0x26/0x40
[  447.960804][T14964]  ? clear_bhb_loop+0x60/0xb0
[  447.960825][T14964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.960841][T14964] RIP: 0033:0x7f438ed8e929
[  447.960857][T14964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  447.960873][T14964] RSP: 002b:00007f438fc59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.960892][T14964] RAX: ffffffffffffffda RBX: 00007f438efb5fa0 RCX: 00007f438ed8e929
[  447.960905][T14964] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  447.960916][T14964] RBP: 00007f438fc59090 R08: 0000000000000000 R09: 0000000000000000
[  447.960928][T14964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.960938][T14964] R13: 0000000000000000 R14: 00007f438efb5fa0 R15: 00007ffc1fa82d18
[  447.960966][T14964]  </TASK>
[  448.338663][    C0] vkms_vblank_simulate: vblank timer overrun
[  448.412333][T14968] /dev/rnullb0: Can't open blockdev
[  448.427783][T14968] overlayfs: missing 'lowerdir'
[  448.799343][T14977] /dev/rnullb0: Can't open blockdev
[  449.015497][T14993] /dev/rnullb0: Can't open blockdev
[  449.237790][T15000] /dev/rnullb0: Can't open blockdev
[  449.497517][ T5896] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  449.561947][T15009] /dev/rnullb0: Can't open blockdev
[  449.591225][T15009] netlink: 4344 bytes leftover after parsing attributes in process `syz.1.2650'.
[  449.600453][T13547] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  449.661678][ T5896] usb 1-1: Using ep0 maxpacket: 8
[  449.686040][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short
[  449.694759][ T5896] usb 1-1: unable to read config index 0 descriptor/start: -71
[  449.703161][ T5896] usb 1-1: can't read configurations, error -71
[  449.757578][T13547] usb 5-1: Using ep0 maxpacket: 8
[  449.765014][T13547] usb 5-1: unable to get BOS descriptor or descriptor too short
[  449.776995][T13547] usb 5-1: config 5 has an invalid interface number: 238 but max is 0
[  449.797484][T13547] usb 5-1: config 5 has no interface number 0
[  449.803632][T13547] usb 5-1: config 5 interface 238 altsetting 6 bulk endpoint 0xF has invalid maxpacket 32
[  449.817213][T13547] usb 5-1: config 5 interface 238 has no altsetting 0
[  449.830655][T13547] usb 5-1: New USB device found, idVendor=10f5, idProduct=c545, bcdDevice=25.3f
[  449.842967][T13547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.851386][T13547] usb 5-1: Product: syz
[  449.855626][T13547] usb 5-1: Manufacturer: syz
[  449.865233][T13547] usb 5-1: SerialNumber: syz
[  449.874349][T15004] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  450.062561][ T5914] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  450.107059][T13547] usb 5-1: USB disconnect, device number 43
[  450.210575][   T30] audit: type=1800 audit(1751074041.838:17): pid=15024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2655" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  450.217603][ T5914] usb 3-1: Using ep0 maxpacket: 16
[  450.230992][    C0] vkms_vblank_simulate: vblank timer overrun
[  450.294245][ T5914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  450.339297][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.367344][ T5914] usb 3-1: Product: syz
[  450.377371][ T5914] usb 3-1: Manufacturer: syz
[  450.387335][ T5914] usb 3-1: SerialNumber: syz
[  450.553003][T15030] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  450.561669][T15030] /dev/rnullb0: Can't open blockdev
[  450.769156][T15035] /dev/rnullb0: Can't open blockdev
[  450.827017][ T5914] cdc_ncm 3-1:1.0: bind() failure
[  450.847188][ T5914] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  450.867802][ T5914] cdc_ncm 3-1:1.1: bind() failure
[  450.897430][ T5914] usb 3-1: USB disconnect, device number 8
[  451.521547][T15056] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2665'.
[  451.709688][T15061] omfs: Invalid superblock (0)
[  452.067306][ T5914] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  452.177905][T14032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  452.187830][T14032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  452.200251][T14032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  452.213150][T14032] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  452.217590][ T5914] usb 5-1: device descriptor read/64, error -71
[  452.237174][T14032] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  452.284158][T15067] /dev/rnullb0: Can't open blockdev
[  452.404596][T15064] lo speed is unknown, defaulting to 1000
[  452.467327][ T5914] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  452.553261][T14254] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.607199][ T5914] usb 5-1: device descriptor read/64, error -71
[  452.692656][T14254] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.718185][ T5914] usb usb5-port1: attempt power cycle
[  452.942416][T14254] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.065308][ T5914] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  453.087434][T14254] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.124507][ T5914] usb 5-1: device descriptor read/8, error -71
[  453.133168][T15064] chnl_net:caif_netlink_parms(): no params data found
[  453.367979][ T5914] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  453.397920][ T5914] usb 5-1: device descriptor read/8, error -71
[  453.431341][T15064] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.460696][T15064] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.477129][T15064] bridge_slave_0: entered allmulticast mode
[  453.497078][T15064] bridge_slave_0: entered promiscuous mode
[  453.524480][ T5914] usb usb5-port1: unable to enumerate USB device
[  453.542982][T15064] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.560718][T15064] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.584151][T15064] bridge_slave_1: entered allmulticast mode
[  453.592147][T15064] bridge_slave_1: entered promiscuous mode
[  453.648109][T15037] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  453.750613][T15064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.777388][T14254] bridge_slave_1: left allmulticast mode
[  453.793642][T14254] bridge_slave_1: left promiscuous mode
[  453.808219][T14254] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.830415][T14254] bridge_slave_0: left allmulticast mode
[  453.868581][T14254] bridge_slave_0: left promiscuous mode
[  453.874384][T14254] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.290140][T15093] /dev/rnullb0: Can't open blockdev
[  454.297335][ T5158] Bluetooth: hci3: command tx timeout
[  454.321246][T14254] dvmrp1 (unregistering): left allmulticast mode
[  454.373916][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  454.385730][T15098] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2678'.
[  454.396227][T15098] netlink: zone id is out of range
[  454.401758][T15098] netlink: zone id is out of range
[  454.407091][T15098] netlink: zone id is out of range
[  454.412429][T15098] netlink: zone id is out of range
[  454.421032][T15098] netlink: get zone limit has 8 unknown bytes
[  454.428915][T15098] /dev/rnullb0: Can't open blockdev
[  454.552007][T14254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  454.563658][T14254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  454.574218][T14254] bond0 (unregistering): Released all slaves
[  454.593779][T15064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.604522][T15101] /dev/rnullb0: Can't open blockdev
[  454.675073][T14254] : left promiscuous mode
[  454.751350][T15106] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2680'.
[  454.754378][T15064] team0: Port device team_slave_0 added
[  454.776129][T15106] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2680'.
[  454.789893][T15064] team0: Port device team_slave_1 added
[  454.795868][T14254] tipc: Disabling bearer <udp:syz2>
[  454.803073][T14254] tipc: Left network mode
[  454.861044][T15106] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2680'.
[  454.977939][T15106] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2680'.
[  455.008882][T14254] team0: Port device wlan1 removed
[  455.055897][T15106] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2680'.
[  455.117649][T15064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.124629][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  455.150507][    C0] vkms_vblank_simulate: vblank timer overrun
[  455.300868][T15064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.339563][T15064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.346569][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  455.428956][T15064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.661504][T15106] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2680'.
[  455.683391][T15064] hsr_slave_0: entered promiscuous mode
[  455.714539][T15064] hsr_slave_1: entered promiscuous mode
[  455.732258][T15064] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  455.752149][T15064] Cannot create hsr debugfs directory
[  455.780965][T14254] hsr_slave_0: left promiscuous mode
[  455.816889][T14254] hsr_slave_1: left promiscuous mode
[  455.837465][T14254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.863913][T14254] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.882233][T14254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.891066][T14254] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.927904][T14254] veth1_macvtap: left promiscuous mode
[  455.938287][T14254] veth0_macvtap: left promiscuous mode
[  455.949624][T14254] veth1_vlan: left promiscuous mode
[  455.959945][T14254] veth0_vlan: left promiscuous mode
[  456.320111][T15146] /dev/rnullb0: Can't open blockdev
[  456.380249][ T5158] Bluetooth: hci3: command tx timeout
[  456.393273][T15158] /dev/rnullb0: Can't open blockdev
[  456.824260][T14254] team0 (unregistering): Port device team_slave_1 removed
[  456.881890][T14254] team0 (unregistering): Port device team_slave_0 removed
[  457.761505][T15175] /dev/rnullb0: Can't open blockdev
[  458.194900][T14254] IPVS: stop unused estimator thread 0...
[  458.279610][ T5914] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  458.421688][T15192] /dev/rnullb0: Can't open blockdev
[  458.456437][ T5158] Bluetooth: hci3: command tx timeout
[  458.464007][ T5914] usb 1-1: unable to get BOS descriptor or descriptor too short
[  458.481316][ T5914] usb 1-1: not running at top speed; connect to a high speed hub
[  458.497714][ T5914] usb 1-1: config 4 has an invalid interface number: 92 but max is 0
[  458.508621][ T5914] usb 1-1: config 4 has no interface number 0
[  458.527323][ T5914] usb 1-1: config 4 interface 92 has no altsetting 0
[  458.536525][ T5914] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  458.545743][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.557590][ T5914] usb 1-1: Product: syz
[  458.564706][ T5914] usb 1-1: Manufacturer: syz
[  458.576351][ T5914] usb 1-1: SerialNumber: syz
[  458.808484][T15183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.839896][T15183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.881183][ T5914] radioshark 1-1:4.92: Invalid radioSHARK device
[  458.899790][ T5914] radioshark 1-1:4.92: probe with driver radioshark failed with error -22
[  458.939376][ T5914] usbhid 1-1:4.92: couldn't find an input interrupt endpoint
[  458.968271][ T5914] usb 1-1: USB disconnect, device number 24
[  458.982783][T15064] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  459.011819][T15064] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  459.052313][T15064] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  459.072958][T15064] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  459.196705][ T5896] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  459.295162][T15064] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.342761][T15064] 8021q: adding VLAN 0 to HW filter on device team0
[  459.358104][ T5896] usb 5-1: Using ep0 maxpacket: 16
[  459.367635][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.370011][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  459.374788][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  459.385556][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  459.433724][ T5896] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  459.443454][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.473123][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.476379][ T5896] usb 5-1: Product: syz
[  459.480315][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.504801][ T5896] usb 5-1: Manufacturer: syz
[  459.520699][ T5896] usb 5-1: SerialNumber: syz
[  459.761330][T15205] /dev/rnullb0: Can't open blockdev
[  459.820104][ T5896] usb 5-1: 0:2 : does not exist
[  459.886610][ T5896] usb 5-1: USB disconnect, device number 48
[  459.940857][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  459.990658][T15234] /dev/rnullb0: Can't open blockdev
[  460.184163][T15064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.351131][T15064] veth0_vlan: entered promiscuous mode
[  460.385184][T15064] veth1_vlan: entered promiscuous mode
[  460.393624][T15249] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  460.479713][T15064] veth0_macvtap: entered promiscuous mode
[  460.499174][T15251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.501281][T15064] veth1_macvtap: entered promiscuous mode
[  460.541228][ T5158] Bluetooth: hci3: command tx timeout
[  460.582447][T15064] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.594888][T15064] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.614359][ T3564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.665913][ T3564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.695462][ T3564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.731908][ T3564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.756655][T15259] /dev/rnullb0: Can't open blockdev
[  460.890211][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.926166][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.000740][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.009681][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.056746][T15269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2713'.
[  461.309509][T15284] netlink: 'syz.4.2716': attribute type 23 has an invalid length.
[  461.494028][T15291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.629612][T15302] /dev/rnullb0: Can't open blockdev
[  462.025426][T15322] /dev/rnullb0: Can't open blockdev
[  462.496589][ T5969] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  462.657748][ T5969] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  462.672170][ T5969] usb 3-1: config 0 interface 0 has no altsetting 0
[  462.687565][ T5969] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  462.697325][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  462.711110][ T5969] usb 3-1: Product: syz
[  462.715429][ T5969] usb 3-1: Manufacturer: syz
[  462.721646][ T5969] usb 3-1: SerialNumber: syz
[  462.735911][ T5969] usb 3-1: config 0 descriptor??
[  462.749326][ T5969] usb 3-1: selecting invalid altsetting 0
[  462.907181][T15347] /dev/rnullb0: Can't open blockdev
[  463.396864][T15363] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  463.397074][T15363] /dev/rnullb0: Can't open blockdev
[  463.604992][T15366] /dev/rnullb0: Can't open blockdev
[  464.009463][T15371] /dev/rnullb0: Can't open blockdev
[  464.134390][T15374] /dev/rnullb0: Can't open blockdev
[  465.002876][T15380] /dev/rnullb0: Can't open blockdev
[  465.275509][T13412] usb 3-1: USB disconnect, device number 9
[  465.332652][T15387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.354271][T15387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.596169][ T1215] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  465.687928][T15395] syz.2.2749: attempt to access beyond end of device
[  465.687928][T15395] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  465.702476][T15395] hpfs: hpfs_map_sector(): read error
[  465.736892][ T1215] usb 1-1: device descriptor read/64, error -71
[  465.986095][ T1215] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  466.053903][T15401] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2751'.
[  466.070079][T15401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2751'.
[  466.079828][T15401] /dev/rnullb0: Can't open blockdev
[  466.126083][ T1215] usb 1-1: device descriptor read/64, error -71
[  466.237252][ T1215] usb usb1-port1: attempt power cycle
[  466.353424][T15407] tipc: Started in network mode
[  466.358791][T15407] tipc: Node identity 861d2eed6f0c, cluster identity 4711
[  466.367003][T15407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  466.376244][ T5914] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  466.413395][T15407] syzkaller0: entered promiscuous mode
[  466.418967][T15407] syzkaller0: entered allmulticast mode
[  466.425141][T15407] tipc: Resetting bearer <eth:syzkaller0>
[  466.526071][ T5914] usb 3-1: device descriptor read/64, error -71
[  466.576066][ T1215] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  466.606698][ T1215] usb 1-1: device descriptor read/8, error -71
[  466.666030][ T5969] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  466.786141][ T5914] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  466.829517][ T5969] usb 5-1: config index 0 descriptor too short (expected 12324, got 36)
[  466.838108][ T5969] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[  466.847074][ T5969] usb 5-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[  466.847376][ T1215] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  466.857652][ T5969] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[  466.874742][ T5969] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  466.883810][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.888041][ T1215] usb 1-1: device descriptor read/8, error -71
[  466.926169][ T5914] usb 3-1: device descriptor read/64, error -71
[  467.017189][ T1215] usb usb1-port1: unable to enumerate USB device
[  467.036266][ T5914] usb usb3-port1: attempt power cycle
[  467.304968][ T5969] usb 5-1: USB disconnect, device number 49
[  467.311132][T15406] tipc: Resetting bearer <eth:syzkaller0>
[  467.396823][ T5914] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  467.437028][ T5914] usb 3-1: device descriptor read/8, error -71
[  467.460093][    T9] tipc: Node number set to 3910217453
[  467.685097][T15411] /dev/rnullb0: Can't open blockdev
[  467.690526][ T5914] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  467.731578][ T5914] usb 3-1: device descriptor read/8, error -71
[  467.860770][ T5914] usb usb3-port1: unable to enumerate USB device
[  468.537252][T15422] /dev/rnullb0: Can't open blockdev
[  470.532387][T15406] tipc: Disabling bearer <eth:syzkaller0>
[  470.735989][T15432] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  470.743396][T15432] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  470.790844][T15432] /dev/rnullb0: Can't open blockdev
[  471.551058][T15459] /dev/rnullb0: Can't open blockdev
[  471.785079][T15466] netlink: 'syz.0.2770': attribute type 28 has an invalid length.
[  471.905011][ T5914] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  472.067742][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  472.080120][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  472.091547][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  472.101830][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  472.126677][ T5914] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  472.150273][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.174825][ T5914] usb 3-1: config 0 descriptor??
[  472.504995][T15480] /dev/rnullb0: Can't open blockdev
[  472.584540][T15482] input: syz1 as /devices/virtual/input/input64
[  472.607568][T15484] /dev/rnullb0: Can't open blockdev
[  472.666843][T15486] /dev/rnullb0: Can't open blockdev
[  472.830655][T15491] /dev/rnullb0: Can't open blockdev
[  472.863321][T15492] /dev/rnullb0: Can't open blockdev
[  472.899849][T15496] /dev/rnullb0: Can't open blockdev
[  472.960493][ T5914] usbhid 3-1:0.0: can't add hid device: -71
[  472.968057][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  472.983064][ T5914] usb 3-1: USB disconnect, device number 14
[  473.266166][    T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  473.421136][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  473.432857][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  473.444032][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  473.457100][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  473.473103][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  473.482487][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.493512][    T9] usb 1-1: config 0 descriptor??
[  473.898306][T15519] /dev/rnullb0: Can't open blockdev
[  473.911847][T15518] CIFS mount error: No usable UNC path provided in device string!
[  473.911847][T15518] 
[  473.919615][    T9] plantronics 0003:047F:FFFF.0030: ignoring exceeding usage max
[  473.931539][T15518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  473.940115][    T9] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  473.960491][T15518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2787'.
[  474.666514][ T1215] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  474.827541][ T1215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.840062][ T1215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.850562][ T1215] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  474.860014][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.869976][ T1215] usb 5-1: config 0 descriptor??
[  475.085288][ T1215] kone 0003:1E7D:2CED.0031: unknown main item tag 0x6
[  475.111330][ T1215] kone 0003:1E7D:2CED.0031: hidraw1: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0
[  475.131551][ T1215] usb 5-1: USB disconnect, device number 50
[  475.172754][T15539] /dev/rnullb0: Can't open blockdev
[  475.191663][T15537] fido_id[15537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  475.291388][T15544] netlink: 'syz.1.2795': attribute type 32 has an invalid length.
[  475.606631][ T1215] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  475.722291][T15561] /dev/rnullb0: Can't open blockdev
[  475.732769][T15561] /dev/rnullb0: Can't open blockdev
[  475.788303][ T1215] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  475.797110][ T1215] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  475.836287][ T1215] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  475.845316][ T1215] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  475.874614][ T1215] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  475.899035][ T1215] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  475.911447][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  475.932238][ T1215] usb 5-1: Product: syz
[  475.949885][ T1215] usb 5-1: Manufacturer: syz
[  475.971691][ T1215] cdc_wdm 5-1:1.0: skipping garbage
[  475.978015][ T1215] cdc_wdm 5-1:1.0: skipping garbage
[  475.997503][ T1215] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device
[  476.003447][ T1215] cdc_wdm 5-1:1.0: Unknown control protocol
[  476.027639][ T5969] usb 1-1: USB disconnect, device number 29
[  476.122425][T15574] /dev/rnullb0: Can't open blockdev
[  476.181712][ T1215] usb 5-1: USB disconnect, device number 51
[  476.234901][T15579] /dev/rnullb0: Can't open blockdev
[  476.334210][T15582] /dev/rnullb0: Can't open blockdev
[  476.486070][  T983] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  476.537030][T15592] /dev/rnullb0: Can't open blockdev
[  476.582421][T15595] /dev/rnullb0: Can't open blockdev
[  476.649690][  T983] usb 3-1: Using ep0 maxpacket: 16
[  476.656807][  T983] usb 3-1: config 0 has an invalid interface number: 174 but max is 0
[  476.665256][  T983] usb 3-1: config 0 has no interface number 0
[  476.677359][  T983] usb 3-1: New USB device found, idVendor=106c, idProduct=b770, bcdDevice=7b.dd
[  476.690377][  T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.699245][  T983] usb 3-1: Product: syz
[  476.703531][  T983] usb 3-1: Manufacturer: syz
[  476.708720][  T983] usb 3-1: SerialNumber: syz
[  476.718305][  T983] usb 3-1: config 0 descriptor??
[  476.734395][  T983] qmi_wwan 3-1:0.174: probe with driver qmi_wwan failed with error -22
[  476.894415][T15601] /dev/rnullb0: Can't open blockdev
[  476.950229][T15579] netlink: 'syz.2.2804': attribute type 1 has an invalid length.
[  476.961511][T15579] netlink: 'syz.2.2804': attribute type 2 has an invalid length.
[  476.981409][  T983] usb 3-1: USB disconnect, device number 15
[  477.081025][T15606] netlink: zone id is out of range
[  477.088239][T15606] netlink: zone id is out of range
[  477.093473][T15606] netlink: zone id is out of range
[  477.099427][T15606] netlink: zone id is out of range
[  477.104630][T15606] netlink: zone id is out of range
[  477.110476][T15606] netlink: zone id is out of range
[  477.115664][T15606] netlink: zone id is out of range
[  477.121280][T15606] netlink: zone id is out of range
[  477.129409][T15606] netlink: zone id is out of range
[  477.135804][T15606] netlink: zone id is out of range
[  477.310565][T15619] /dev/rnullb0: Can't open blockdev
[  477.432112][T15628] batadv_slave_1: entered promiscuous mode
[  477.441140][T15627] batadv_slave_1: left promiscuous mode
[  477.613265][T15639] /dev/rnullb0: Can't open blockdev
[  477.627106][ T1215] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  477.722069][T15645] /dev/rnullb0: Can't open blockdev
[  477.793893][ T1215] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  477.807998][ T1215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  477.829988][ T1215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  477.842223][ T1215] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  477.859714][ T1215] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  477.870799][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.889765][ T1215] usb 5-1: config 0 descriptor??
[  477.938608][T15658] /dev/rnullb0: Can't open blockdev
[  478.065027][T15667] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2835'.
[  478.259638][T15670] /dev/rnullb0: Can't open blockdev
[  478.325432][T15625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.336850][T15625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.347984][ T1215] usbhid 5-1:0.0: can't add hid device: -71
[  478.354012][ T1215] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  478.389374][ T1215] usb 5-1: USB disconnect, device number 52
[  478.656113][T13412] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  478.816132][T13412] usb 1-1: Using ep0 maxpacket: 32
[  478.822867][T13412] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  478.834831][T13412] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  478.843994][T13412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.852054][T13412] usb 1-1: Product: syz
[  478.856431][T13412] usb 1-1: Manufacturer: syz
[  478.861020][T13412] usb 1-1: SerialNumber: syz
[  478.868525][T13412] usb 1-1: config 0 descriptor??
[  478.874203][T15677] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  478.898984][T13412] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input65
[  478.963157][T15679] /dev/rnullb0: Can't open blockdev
[  479.152743][  T983] usb 1-1: USB disconnect, device number 30
[  479.152864][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  479.259986][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'.
[  479.905199][T15695] /dev/rnullb0: Can't open blockdev
[  479.937340][T15702] /dev/rnullb0: Can't open blockdev
[  479.973679][T15705] cgroup2: Unknown parameter 'uuid'
[  480.154360][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2849'.
[  480.166436][T15712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2849'.
[  480.426131][  T925] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  480.586074][  T925] usb 1-1: Using ep0 maxpacket: 32
[  480.593188][  T925] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  480.602874][  T925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.614737][  T925] usb 1-1: config 0 descriptor??
[  480.639394][  T925] gspca_main: nw80x-2.14.0 probing 055f:d001
[  480.682286][T15722] /dev/rnullb0: Can't open blockdev
[  480.819690][T15731] /dev/rnullb0: Can't open blockdev
[  480.825597][T15729] /dev/rnullb0: Can't open blockdev
[  480.894444][T15736] /dev/rnullb0: Can't open blockdev
[  481.276360][  T983] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  481.300847][T15758] /dev/rnullb0: Can't open blockdev
[  481.418577][T15763] /dev/rnullb0: Can't open blockdev
[  481.431146][T15761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  481.441474][T15761] /dev/rnullb0: Can't open blockdev
[  481.446867][  T983] usb 3-1: Using ep0 maxpacket: 16
[  481.463613][  T983] usb 3-1: config 0 has no interfaces?
[  481.497831][T15712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.512885][  T983] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  481.527092][  T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.540544][T15712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.554924][  T983] usb 3-1: Product: syz
[  481.562661][  T983] usb 3-1: Manufacturer: syz
[  481.570059][  T983] usb 3-1: SerialNumber: syz
[  481.591020][  T983] usb 3-1: config 0 descriptor??
[  481.747019][  T925] gspca_nw80x: reg_r err -110
[  481.757389][  T925] nw80x 1-1:0.0: probe with driver nw80x failed with error -110
[  482.142214][  T925] usb 3-1: USB disconnect, device number 16
[  482.413905][T15802] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  482.544867][T15807] /dev/rnullb0: Can't open blockdev
[  482.838260][T15824] /dev/rnullb0: Can't open blockdev
[  483.131707][T15838] /dev/rnullb0: Can't open blockdev
[  483.156301][  T925] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  483.173747][T15842] Unsupported ieee802154 address type: 0
[  483.329694][  T925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  483.339158][  T925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.352113][  T925] usb 3-1: Product: syz
[  483.356377][  T925] usb 3-1: Manufacturer: syz
[  483.360992][  T925] usb 3-1: SerialNumber: syz
[  483.367651][  T925] usb 3-1: config 0 descriptor??
[  483.406155][ T5914] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  483.566072][ T5914] usb 5-1: Using ep0 maxpacket: 32
[  483.574664][ T5914] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  483.583814][  T925] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  483.593236][ T5914] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  483.603461][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  483.612626][ T5914] usb 5-1: config 1 has no interface number 0
[  483.618781][ T5914] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  483.629791][ T5914] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  483.642789][ T5914] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  483.651902][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.665170][ T5914] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  483.869521][ T5914] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  483.990805][ T5914] usb 1-1: USB disconnect, device number 31
[  483.997707][  T925] usb write operation failed. (-71)
[  484.033472][  T925] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  484.062881][  T925] usb write operation failed. (-71)
[  484.075644][T15844] /dev/rnullb0: Can't open blockdev
[  484.091659][T15842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.093494][  T925] usb 3-1: USB disconnect, device number 17
[  484.138510][T15842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.284351][ T1215] usb 5-1: USB disconnect, device number 53
[  484.311414][ T1215] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  484.534656][T15866] /dev/rnullb0: Can't open blockdev
[  484.654881][T15875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2887'.
[  484.665241][T15875] /dev/rnullb0: Can't open blockdev
[  484.996392][ T5914] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  485.054751][T15891] /dev/rnullb0: Can't open blockdev
[  485.062979][T15888] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  485.112768][T15891] net_ratelimit: 30 callbacks suppressed
[  485.112785][T15891] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xee
[  485.132442][T15891] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xee
[  485.186318][ T5914] usb 1-1: Using ep0 maxpacket: 8
[  485.193352][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  485.210357][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  485.239120][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  485.249438][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  485.273273][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  485.296127][ T5914] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  485.305226][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.337142][ T5914] usb 1-1: config 0 descriptor??
[  485.345660][T15879] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  485.440419][T15902] /dev/rnullb0: Can't open blockdev
[  485.469498][T15905] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20001
[  485.781733][T15879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.800471][T15879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.811553][ T5896] usb 1-1: USB disconnect, device number 32
[  485.821230][ T5158] Bluetooth: hci0: Opcode 0x0c03 failed: -71
[  486.011263][T15921] /dev/rnullb0: Can't open blockdev
[  486.017452][ T1215] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  486.160985][ T1215] usb 3-1: device descriptor read/64, error -71
[  486.192085][T15930] /dev/rnullb0: Can't open blockdev
[  486.238955][T15932] netlink: 'syz.4.2898': attribute type 21 has an invalid length.
[  486.247604][T15932] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2898'.
[  486.328836][T15933] /dev/rnullb0: Can't open blockdev
[  486.378824][   T30] audit: type=1800 audit(1751074335.006:18): pid=15936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2899" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  486.427031][ T1215] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  486.502867][T15940] /dev/rnullb0: Can't open blockdev
[  486.558145][ T1215] usb 3-1: device descriptor read/64, error -71
[  486.676419][ T1215] usb usb3-port1: attempt power cycle
[  487.026175][ T1215] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  487.066626][ T1215] usb 3-1: device descriptor read/8, error -71
[  487.328418][ T1215] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  487.370161][ T1215] usb 3-1: device descriptor read/8, error -71
[  487.487315][ T1215] usb usb3-port1: unable to enumerate USB device
[  487.567999][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.681482][T15949] ieee802154 phy1 wpan1: encryption failed: -22
[  487.715012][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.815314][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.964806][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.981185][T15956] /dev/rnullb0: Can't open blockdev
[  488.082177][T14032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  488.096599][T14032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  488.107031][T14032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  488.115065][T14032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  488.123964][T14032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  488.320484][T15958] lo speed is unknown, defaulting to 1000
[  488.327484][   T12] bridge_slave_1: left allmulticast mode
[  488.333138][   T12] bridge_slave_1: left promiscuous mode
[  488.351898][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.373069][   T12] bridge_slave_0: left allmulticast mode
[  488.381278][   T12] bridge_slave_0: left promiscuous mode
[  488.398391][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.642088][T15976] /dev/rnullb0: Can't open blockdev
[  488.763615][T15979] PKCS7: Unknown OID: [4] 0.0
[  488.768512][T15979] PKCS7: Only support pkcs7_signedData type
[  488.947369][T15982] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  488.969993][T15982] /dev/rnullb0: Can't open blockdev
[  489.414271][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  489.424587][T15995] /dev/rnullb0: Can't open blockdev
[  489.430653][T15995] /dev/rnullb0: Can't open blockdev
[  489.437833][T15995] /dev/rnullb0: Can't open blockdev
[  489.448023][T15995] /dev/rnullb0: Can't open blockdev
[  489.453918][T15995] /dev/rnullb0: Can't open blockdev
[  489.460221][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  489.471077][T15995] /dev/rnullb0: Can't open blockdev
[  489.485539][   T12] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  489.503601][T15995] /dev/rnullb0: Can't open blockdev
[  489.517194][T15995] /dev/rnullb0: Can't open blockdev
[  489.529684][   T12] bond0 (unregistering): Released all slaves
[  489.547752][T15995] /dev/rnullb0: Can't open blockdev
[  489.553672][T15995] /dev/rnullb0: Can't open blockdev
[  489.569909][T15995] /dev/rnullb0: Can't open blockdev
[  489.575841][T15995] /dev/rnullb0: Can't open blockdev
[  489.601603][T15995] /dev/rnullb0: Can't open blockdev
[  489.613657][T15995] /dev/rnullb0: Can't open blockdev
[  489.643506][T15995] /dev/rnullb0: Can't open blockdev
[  489.665578][T15995] /dev/rnullb0: Can't open blockdev
[  489.671685][T15995] /dev/rnullb0: Can't open blockdev
[  489.679189][T15995] /dev/rnullb0: Can't open blockdev
[  489.685112][T15995] /dev/rnullb0: Can't open blockdev
[  489.698368][T15995] /dev/rnullb0: Can't open blockdev
[  489.704421][T15995] /dev/rnullb0: Can't open blockdev
[  489.711854][   T12] tipc: Left network mode
[  489.730440][T15995] /dev/rnullb0: Can't open blockdev
[  489.736428][T15995] /dev/rnullb0: Can't open blockdev
[  489.758323][T15995] /dev/rnullb0: Can't open blockdev
[  489.764297][T15995] /dev/rnullb0: Can't open blockdev
[  489.790118][T15995] /dev/rnullb0: Can't open blockdev
[  489.817256][T15995] /dev/rnullb0: Can't open blockdev
[  489.826845][T15995] /dev/rnullb0: Can't open blockdev
[  489.835254][T15995] /dev/rnullb0: Can't open blockdev
[  489.883918][T15995] /dev/rnullb0: Can't open blockdev
[  489.907211][T16001] /dev/rnullb0: Can't open blockdev
[  489.937613][T15995] /dev/rnullb0: Can't open blockdev
[  489.950958][T15995] /dev/rnullb0: Can't open blockdev
[  489.966077][T15995] /dev/rnullb0: Can't open blockdev
[  490.006978][T15995] /dev/rnullb0: Can't open blockdev
[  490.029715][T15995] /dev/rnullb0: Can't open blockdev
[  490.056204][T15995] /dev/rnullb0: Can't open blockdev
[  490.087339][T15995] /dev/rnullb0: Can't open blockdev
[  490.106907][T15995] /dev/rnullb0: Can't open blockdev
[  490.110943][T16006] /dev/rnullb0: Can't open blockdev
[  490.122227][T15995] /dev/rnullb0: Can't open blockdev
[  490.131264][T15995] /dev/rnullb0: Can't open blockdev
[  490.139978][   T12] hsr_slave_0: left promiscuous mode
[  490.144132][T15995] /dev/rnullb0: Can't open blockdev
[  490.159016][   T12] hsr_slave_1: left promiscuous mode
[  490.160516][T15995] /dev/rnullb0: Can't open blockdev
[  490.173582][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.173794][T15995] /dev/rnullb0: Can't open blockdev
[  490.193089][T15995] /dev/rnullb0: Can't open blockdev
[  490.196377][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.216039][ T5158] Bluetooth: hci0: command tx timeout
[  490.217981][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.223567][T15995] /dev/rnullb0: Can't open blockdev
[  490.238961][T15995] /dev/rnullb0: Can't open blockdev
[  490.263877][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  490.299939][   T12] veth1_macvtap: left promiscuous mode
[  490.316070][   T12] veth0_macvtap: left promiscuous mode
[  490.321764][   T12] veth1_vlan: left promiscuous mode
[  490.335354][   T12] veth0_vlan: left promiscuous mode
[  490.935679][T16034] netlink: 'syz.2.2926': attribute type 1 has an invalid length.
[  490.954115][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2926'.
[  491.217049][   T12] team0 (unregistering): Port device team_slave_1 removed
[  491.258978][   T12] team0 (unregistering): Port device team_slave_0 removed
[  491.724053][  T984] lo speed is unknown, defaulting to 1000
[  491.730489][  T984] syz0: Port: 1 Link DOWN
[  491.792221][T16041] /dev/rnullb0: Can't open blockdev
[  491.935190][T15958] chnl_net:caif_netlink_parms(): no params data found
[  492.145997][  T925] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  492.217150][T15958] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.224361][T15958] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.234114][T15958] bridge_slave_0: entered allmulticast mode
[  492.242478][T15958] bridge_slave_0: entered promiscuous mode
[  492.266366][T15958] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.273634][T15958] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.281291][T15958] bridge_slave_1: entered allmulticast mode
[  492.289404][T15958] bridge_slave_1: entered promiscuous mode
[  492.296131][ T5158] Bluetooth: hci0: command tx timeout
[  492.338646][  T925] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  492.354935][  T925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.386049][T15958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  492.402383][  T925] usb 3-1: config 0 descriptor??
[  492.414072][  T925] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  492.432958][T15958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.503281][T15958] team0: Port device team_slave_0 added
[  492.514686][T15958] team0: Port device team_slave_1 added
[  492.575672][T15958] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.605284][T15958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.668559][  T925] gp8psk: usb out operation failed.
[  492.673806][  T925] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  492.714343][  T925] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  492.732668][T15958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  492.760464][  T925] usb 3-1: USB disconnect, device number 22
[  492.776997][T15958] batman_adv: batadv0: Adding interface: batadv_slave_1
[  492.783968][T15958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.876026][T15958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  493.000675][T16082] /dev/sg0: Can't lookup blockdev
[  493.063836][T15958] hsr_slave_0: entered promiscuous mode
[  493.085316][T16085] /dev/rnullb0: Can't open blockdev
[  493.097530][T15958] hsr_slave_1: entered promiscuous mode
[  493.755206][T15958] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  493.779848][T15958] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  493.837260][T15958] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  493.886558][T15958] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  494.223172][T15958] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.252742][T15958] 8021q: adding VLAN 0 to HW filter on device team0
[  494.273357][T14254] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.280568][T14254] bridge0: port 1(bridge_slave_0) entered forwarding state
[  494.317996][T14254] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.325278][T14254] bridge0: port 2(bridge_slave_1) entered forwarding state
[  494.378360][ T5158] Bluetooth: hci0: command tx timeout
[  494.440278][ T5914] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  494.566169][T16075] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  494.572729][T16075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  494.621851][T16075] vhci_hcd vhci_hcd.0: Device attached
[  494.638764][ T5914] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  494.660124][ T5914] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  494.693680][ T5914] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  494.703313][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  494.732978][ T5914] usb 1-1: SerialNumber: syz
[  494.767862][ T5914] usb 1-1: bad CDC descriptors
[  494.773287][ T5914] usb-storage 1-1:1.0: USB Mass Storage device detected
[  494.818908][ T5914] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  494.838731][ T5914] scsi host1: usb-storage 1-1:1.0
[  494.866266][  T983] usb 37-1: new low-speed USB device number 3 using vhci_hcd
[  494.901220][T15958] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.980515][T16131] usb 37-1: recv xbuf, 0
[  494.985051][ T3564] vhci_hcd: stop threads
[  494.989899][ T3564] vhci_hcd: release socket
[  495.001551][ T3564] vhci_hcd: disconnect device
[  495.056270][  T983] vhci_hcd: vhci_device speed not set
[  495.486782][T16075] fuse: Bad value for 'fd'
[  495.547087][T15958] veth0_vlan: entered promiscuous mode
[  495.580838][T15958] veth1_vlan: entered promiscuous mode
[  495.657458][T15958] veth0_macvtap: entered promiscuous mode
[  495.683340][T15958] veth1_macvtap: entered promiscuous mode
[  495.744639][T15958] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.780581][T15958] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.820412][ T3564] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.840180][ T3564] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.856573][ T3564] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.880061][ T3564] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.106862][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.134994][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.213252][T16163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.247566][T16163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.445088][T16172] No control pipe specified
[  496.456599][ T5158] Bluetooth: hci0: command tx timeout
[  496.610814][T16178] overlay: ./file0 is not a directory
[  496.754591][T16181] /dev/rnullb0: Can't open blockdev
[  496.786664][T16183] /dev/rnullb0: Can't open blockdev
[  496.874727][T16190] /dev/rnullb0: Can't open blockdev
[  496.894969][T16186] /dev/rnullb0: Can't open blockdev
[  496.949435][ T5914] usb 1-1: USB disconnect, device number 33
[  496.972023][T16192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2947'.
[  497.029431][T16192] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  497.043405][T16192] /dev/rnullb0: Can't open blockdev
[  497.099702][T16195] syz.0.2948: attempt to access beyond end of device
[  497.099702][T16195] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0
[  497.141112][T16195] syz.0.2948: attempt to access beyond end of device
[  497.141112][T16195] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0
[  497.206465][T16200] /dev/rnullb0: Can't open blockdev
[  497.215644][T16195] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  497.252213][T16195] syz.0.2948: attempt to access beyond end of device
[  497.252213][T16195] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0
[  497.279981][T16195] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  497.297750][T16195] syz.0.2948: attempt to access beyond end of device
[  497.297750][T16195] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[  497.314082][T16195] syz.0.2948: attempt to access beyond end of device
[  497.314082][T16195] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[  497.332819][T16204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2951'.
[  497.349520][T16195] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  497.359738][T16195] syz.0.2948: attempt to access beyond end of device
[  497.359738][T16195] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[  497.379014][T16195] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  497.391012][T16195] syz.0.2948: attempt to access beyond end of device
[  497.391012][T16195] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[  497.407576][T16195] syz.0.2948: attempt to access beyond end of device
[  497.407576][T16195] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[  497.423783][T16195] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  497.439715][T16195] syz.0.2948: attempt to access beyond end of device
[  497.439715][T16195] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[  497.476120][T16195] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  497.487200][T16195] syz.0.2948: attempt to access beyond end of device
[  497.487200][T16195] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[  497.505565][T16195] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  497.509329][ T5969] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  497.518296][T16195] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  497.533934][T16195] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  497.686206][ T5969] usb 6-1: Using ep0 maxpacket: 8
[  497.693866][ T5969] usb 6-1: config 2 has an invalid interface number: 76 but max is 0
[  497.704357][ T5969] usb 6-1: config 2 has no interface number 0
[  497.713292][ T5969] usb 6-1: config 2 interface 76 altsetting 9 endpoint 0xB has an invalid bInterval 252, changing to 11
[  497.731790][ T5969] usb 6-1: config 2 interface 76 altsetting 9 has an invalid endpoint descriptor of length 4, skipping
[  497.751601][ T5969] usb 6-1: config 2 interface 76 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  497.770043][ T5969] usb 6-1: config 2 interface 76 has no altsetting 0
[  497.781207][ T5969] usb 6-1: New USB device found, idVendor=10cf, idProduct=8062, bcdDevice=50.79
[  497.798026][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.806732][ T5969] usb 6-1: Product: syz
[  497.810914][ T5969] usb 6-1: Manufacturer: syz
[  497.815513][ T5969] usb 6-1: SerialNumber: syz
[  497.824042][T16202] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  498.044485][T16202] /dev/rnullb0: Can't open blockdev
[  498.080579][ T5969] vmk80xx 6-1:2.76: driver 'vmk80xx' failed to auto-configure device.
[  498.104178][ T5969] usb 6-1: USB disconnect, device number 2
[  499.009038][T16266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2959'.
[  499.011105][ T5969] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  499.166153][ T5969] usb 6-1: device descriptor read/64, error -71
[  499.222713][T16273] /dev/rnullb0: Can't open blockdev
[  499.278393][T16278] /dev/rnullb0: Can't open blockdev
[  499.361311][T16285] netlink: 'syz.1.2965': attribute type 10 has an invalid length.
[  499.371630][T16285] lo: entered promiscuous mode
[  499.379416][T16285] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  499.392294][T16285] ceph: Path missing in source
[  499.417081][ T5969] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  499.546076][ T5969] usb 6-1: device descriptor read/64, error -71
[  499.668637][ T5969] usb usb6-port1: attempt power cycle
[  500.016172][ T5969] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  500.046710][ T5969] usb 6-1: device descriptor read/8, error -71
[  500.286064][ T5969] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  500.307525][ T5969] usb 6-1: device descriptor read/8, error -71
[  500.416442][ T5969] usb usb6-port1: unable to enumerate USB device
[  501.498334][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  502.286290][T16312] /dev/rnullb0: Can't open blockdev
[  502.583106][T16321] /dev/rnullb0: Can't open blockdev
[  503.256178][  T925] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  503.429405][  T925] usb 6-1: unable to get BOS descriptor or descriptor too short
[  503.438443][  T925] usb 6-1: config 1 has an invalid interface number: 199 but max is 0
[  503.446695][  T925] usb 6-1: config 1 has no interface number 0
[  503.452792][  T925] usb 6-1: config 1 interface 199 altsetting 172 endpoint 0x3 has invalid maxpacket 1023, setting to 8
[  503.463877][  T925] usb 6-1: config 1 interface 199 has no altsetting 0
[  503.474362][  T925] usb 6-1: string descriptor 0 read error: -22
[  503.481211][  T925] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e3.6a
[  503.490382][  T925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.507260][  T925] hub 6-1:1.199: bad descriptor, ignoring hub
[  503.513374][  T925] hub 6-1:1.199: probe with driver hub failed with error -5
[  503.710347][T16342] /dev/rnullb0: Can't open blockdev
[  503.837293][  T925] usb 6-1: USB disconnect, device number 7
[  504.261259][T16347] /dev/rnullb0: Can't open blockdev
[  504.516009][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  504.696028][    T9] usb 6-1: Using ep0 maxpacket: 32
[  504.702965][    T9] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  504.713728][    T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  504.723991][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[  504.733235][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.745526][    T9] usb 6-1: config 0 descriptor??
[  504.961043][   T43] usb 6-1: USB disconnect, device number 8
[  505.502523][T16357] usb usb1: usbfs: process 16357 (syz.5.2983) did not claim interface 0 before use
[  505.766129][   T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  505.830185][   T30] audit: type=1326 audit(1751074354.456:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.1.2984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649718e929 code=0x0
[  505.916058][   T43] usb 6-1: Using ep0 maxpacket: 16
[  505.923586][   T43] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11
[  505.937474][   T43] usb 6-1: config 1 interface 0 has no altsetting 0
[  505.947360][   T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40
[  505.956556][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.964544][   T43] usb 6-1: Product: syz
[  505.968923][   T43] usb 6-1: Manufacturer: syz
[  505.973526][   T43] usb 6-1: SerialNumber: syz
[  506.203726][   T43] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input66
[  506.228598][   T43] usb 6-1: USB disconnect, device number 9
[  506.689941][T16362] fuse: Unknown parameter 'fd'
[  507.150345][T16378] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  507.165752][T16378] Error validating options; rc = [-22]
[  507.410918][T16385] /dev/rnullb0: Can't open blockdev
[  507.639705][T16399] /dev/rnullb0: Can't open blockdev
[  508.276074][    T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  508.426017][    T9] usb 6-1: Using ep0 maxpacket: 16
[  508.434571][    T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  508.443704][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.451753][    T9] usb 6-1: Product: syz
[  508.455936][    T9] usb 6-1: Manufacturer: syz
[  508.460531][    T9] usb 6-1: SerialNumber: syz
[  508.470699][    T9] r8152-cfgselector 6-1: Unknown version 0x0000
[  508.477212][    T9] r8152-cfgselector 6-1: config 0 descriptor??
[  508.695873][T16411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.706381][T16411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.944389][    T9] r8152-cfgselector 6-1: Unknown version 0x0000
[  508.951008][    T9] r8152-cfgselector 6-1: bad CDC descriptors
[  508.970351][    T9] r8152-cfgselector 6-1: USB disconnect, device number 10
[  509.689148][T16442] /dev/rnullb0: Can't open blockdev
[  510.056019][ T5969] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  510.244693][ T5969] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.262895][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  510.274307][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  510.284545][ T5969] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  510.299326][ T5969] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  510.308743][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.323713][ T5969] usb 6-1: config 0 descriptor??
[  510.754436][ T5969] plantronics 0003:047F:FFFF.0032: ignoring exceeding usage max
[  510.792315][ T5969] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  511.600012][ T1215] usb 6-1: USB disconnect, device number 11
[  512.644436][T14032] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  512.654682][T14032] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  512.663514][T14032] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  512.677176][T14032] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  512.685715][T14032] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  512.990519][T16550] chnl_net:caif_netlink_parms(): no params data found
[  513.244628][T14032] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  513.258930][T14032] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  513.267647][T14032] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  513.287434][T14032] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  513.298096][T14032] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  513.334109][T16550] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.341543][T16550] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.348876][T16550] bridge_slave_0: entered allmulticast mode
[  513.357513][T16550] bridge_slave_0: entered promiscuous mode
[  513.370861][T16550] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.378356][T16550] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.385639][T16550] bridge_slave_1: entered allmulticast mode
[  513.394236][T16550] bridge_slave_1: entered promiscuous mode
[  513.475344][T16550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  513.509688][T16550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  513.594370][T16550] team0: Port device team_slave_0 added
[  513.614303][T16550] team0: Port device team_slave_1 added
[  513.664087][T16550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.671172][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.698096][T16550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.712083][T16550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  513.719409][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.747019][T16550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.990440][T16550] hsr_slave_0: entered promiscuous mode
[  514.001879][T16550] hsr_slave_1: entered promiscuous mode
[  514.018034][T16550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  514.025735][T16550] Cannot create hsr debugfs directory
[  514.072179][T16570] binder: 16567:16570 ioctl c0306201 200000000080 returned -14
[  514.309249][T16562] chnl_net:caif_netlink_parms(): no params data found
[  514.579541][T16562] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.591588][T16562] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.599183][T16562] bridge_slave_0: entered allmulticast mode
[  514.612154][T16562] bridge_slave_0: entered promiscuous mode
[  514.633153][T16550] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  514.654885][T16562] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.671065][T16562] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.678697][T16562] bridge_slave_1: entered allmulticast mode
[  514.691526][T16562] bridge_slave_1: entered promiscuous mode
[  514.698987][T16550] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  514.735190][T16550] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  514.765482][T16550] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  514.776076][ T5158] Bluetooth: hci4: command tx timeout
[  514.799532][T16562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.820122][T16562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.889486][T16562] team0: Port device team_slave_0 added
[  514.907100][T16562] team0: Port device team_slave_1 added
[  514.976824][T16562] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.984443][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.017271][T16562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  515.044595][T16562] batman_adv: batadv0: Adding interface: batadv_slave_1
[  515.053088][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.079774][T16562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  515.188966][T16562] hsr_slave_0: entered promiscuous mode
[  515.195705][T16562] hsr_slave_1: entered promiscuous mode
[  515.204171][T16562] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  515.212297][T16562] Cannot create hsr debugfs directory
[  515.224176][T16550] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.290726][T16550] 8021q: adding VLAN 0 to HW filter on device team0
[  515.320385][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.327589][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state
[  515.336123][ T5158] Bluetooth: hci5: command tx timeout
[  515.391082][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.398297][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.418777][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  515.526225][T16562] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  515.541997][T16562] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  515.554113][T16562] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  515.573211][T16562] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  515.581420][    T9] usb 6-1: Using ep0 maxpacket: 8
[  515.588751][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  515.603597][    T9] usb 6-1: config 9 has an invalid interface number: 70 but max is 0
[  515.614605][    T9] usb 6-1: config 9 has no interface number 0
[  515.621802][    T9] usb 6-1: config 9 interface 70 has no altsetting 0
[  515.631756][    T9] usb 6-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=98.46
[  515.643576][    T9] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  515.652923][    T9] usb 6-1: Manufacturer: syz
[  515.663014][    T9] usb 6-1: SerialNumber: syz
[  515.779062][T16550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.794166][T16562] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.822155][T16562] 8021q: adding VLAN 0 to HW filter on device team0
[  515.837911][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.845076][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  515.862909][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.870130][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.941282][T16584] kvm: Disabled LAPIC found during irq injection
[  516.032558][    T9] hub 6-1:9.70: bad descriptor, ignoring hub
[  516.059503][    T9] hub 6-1:9.70: probe with driver hub failed with error -5
[  516.087209][    T9] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state.
[  516.108742][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  516.114507][    T9] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  516.132068][    T9] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U))
[  516.154223][    T9] usb 6-1: media controller created
[  516.172758][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  516.223707][    T9] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  516.240232][    T9] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  516.365747][T16550] veth0_vlan: entered promiscuous mode
[  516.376798][    T9] rc_core: IR keymap rc-dtt200u not found
[  516.388380][    T9] Registered IR keymap rc-empty
[  516.392402][T16550] veth1_vlan: entered promiscuous mode
[  516.404754][    T9] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  516.420490][    T9] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input67
[  516.442461][    T9] dvb-usb: schedule remote query interval to 300 msecs.
[  516.449915][    T9] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected.
[  516.458147][T16562] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.481409][    T9] usb 6-1: USB disconnect, device number 12
[  516.482032][T16550] veth0_macvtap: entered promiscuous mode
[  516.521231][T16550] veth1_macvtap: entered promiscuous mode
[  516.580292][T16550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.603113][T16550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.621426][    T9] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected.
[  516.667040][ T3564] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.686993][ T3564] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.709026][ T3564] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.731418][ T3564] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.805105][T14254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.829067][T14254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.858536][   T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds.
[  516.859336][ T5158] Bluetooth: hci4: command tx timeout
[  516.867615][   T31]       Not tainted 6.16.0-rc3-next-20250627-syzkaller #0
[  516.890167][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  516.900057][   T31] task:kworker/0:1     state:D stack:20504 pid:10    tgid:10    ppid:2      task_flags:0x4208060 flags:0x00004000
[  516.917143][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.924980][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.936671][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  516.976146][   T31] Workqueue: events_power_efficient hub_init_func3
[  517.008777][   T31] Call Trace:
[  517.012103][   T31]  <TASK>
[  517.048172][   T31]  __schedule+0x16f5/0x4d00
[  517.052754][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  517.084496][   T31]  ? schedule+0x165/0x360
[  517.096259][   T31]  ? __pfx___schedule+0x10/0x10
[  517.101174][   T31]  ? schedule+0x91/0x360
[  517.105444][   T31]  schedule+0x165/0x360
[  517.130652][   T31]  schedule_preempt_disabled+0x13/0x30
[  517.136498][    T9] usb 6-1: Using ep0 maxpacket: 32
[  517.156060][   T31]  __mutex_lock+0x724/0xe80
[  517.160648][   T31]  ? __mutex_lock+0x51b/0xe80
[  517.165353][   T31]  ? hub_activate+0xb7/0x1ea0
[  517.176244][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  517.181371][   T31]  ? __lock_acquire+0xab9/0xd20
[  517.187187][   T31]  hub_activate+0xb7/0x1ea0
[  517.191758][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  517.205938][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  517.212510][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  517.220505][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  517.226448][   T31]  process_scheduled_works+0xade/0x17b0
[  517.232070][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  517.245421][   T31]  worker_thread+0x8a0/0xda0
[  517.250148][   T31]  kthread+0x711/0x8a0
[  517.259283][   T31]  ? __pfx_worker_thread+0x10/0x10
[  517.264457][   T31]  ? __pfx_kthread+0x10/0x10
[  517.270295][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  517.275540][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  517.281998][   T31]  ? __pfx_kthread+0x10/0x10
[  517.286909][   T31]  ret_from_fork+0x3fc/0x770
[  517.291873][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  517.297343][   T31]  ? __switch_to_asm+0x39/0x70
[  517.302123][   T31]  ? __switch_to_asm+0x33/0x70
[  517.309698][   T31]  ? __pfx_kthread+0x10/0x10
[  517.314610][   T31]  ret_from_fork_asm+0x1a/0x30
[  517.319574][   T31]  </TASK>
[  517.343445][   T31] INFO: task kworker/0:3:5870 blocked for more than 143 seconds.
[  517.386154][   T31]       Not tainted 6.16.0-rc3-next-20250627-syzkaller #0
[  517.394333][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  517.416980][ T5158] Bluetooth: hci5: command tx timeout
[  517.455946][   T31] task:kworker/0:3     state:D stack:20408 pid:5870  tgid:5870  ppid:2      task_flags:0x4288060 flags:0x00004000
[  517.475933][   T31] Workqueue: usb_hub_wq hub_event
[  517.481012][   T31] Call Trace:
[  517.484300][   T31]  <TASK>
[  517.496891][   T31]  __schedule+0x16f5/0x4d00
[  517.501485][   T31]  ? schedule+0x165/0x360
[  517.505833][   T31]  ? __pfx___schedule+0x10/0x10
[  517.536097][   T31]  ? preempt_schedule_common+0x83/0xd0
[  517.541613][   T31]  ? __pfx_preempt_schedule+0x10/0x10
[  517.556073][   T31]  ? schedule+0x91/0x360
[  517.560367][   T31]  schedule+0x165/0x360
[  517.564537][   T31]  schedule_timeout+0x9a/0x270
[  517.585932][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  517.591366][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  517.616027][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  517.621570][   T31]  ? wait_for_completion+0x267/0x5d0
[  517.636035][   T31]  wait_for_completion+0x2bf/0x5d0
[  517.641201][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  517.665951][   T31]  ? __flush_work+0xd2/0xbc0
[  517.670600][   T31]  ? __flush_work+0xd2/0xbc0
[  517.675207][   T31]  __flush_work+0x9b9/0xbc0
[  517.697363][   T31]  ? __flush_work+0xd2/0xbc0
[  517.712887][   T31]  ? __pfx___flush_work+0x10/0x10
[  517.723020][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  517.759946][   T31]  ? __queue_work+0xc56/0xfb0
[  517.764691][   T31]  ? flush_delayed_work+0x11d/0x190
[  517.787418][   T31]  flush_delayed_work+0x13e/0x190
[  517.792490][   T31]  ? __pfx_flush_delayed_work+0x10/0x10
[  517.830805][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  517.849774][   T31]  ? usb_hcd_flush_endpoint+0x3e9/0x400
[  517.855382][   T31]  hub_quiesce+0x1f0/0x330
[  517.876040][   T31]  hub_disconnect+0xc8/0x470
[  517.880685][   T31]  usb_unbind_interface+0x26e/0x910
[  517.907074][   T31]  ? __pfx_usb_unbind_interface+0x10/0x10
[  517.912864][   T31]  device_release_driver_internal+0x4d9/0x7c0
[  517.931824][   T31]  bus_remove_device+0x34d/0x410
[  517.940146][   T31]  device_del+0x511/0x8e0
[  517.944501][   T31]  ? kfree+0x18e/0x440
[  517.948691][   T31]  ? __pfx_device_del+0x10/0x10
[  517.953553][   T31]  ? kobject_put+0x446/0x480
[  517.958376][   T31]  usb_disable_device+0x3e9/0x8a0
[  517.963587][   T31]  usb_disconnect+0x330/0x950
[  517.968433][   T31]  hub_event+0x1cdb/0x4a00
[  517.972862][   T31]  ? kasan_save_track+0x4f/0x80
[  517.981153][   T31]  ? kasan_save_track+0x3e/0x80
[  517.986110][   T31]  ? do_raw_spin_lock+0x121/0x290
[  517.991144][   T31]  ? register_lock_class+0x51/0x320
[  517.996555][   T31]  ? __pfx_hub_event+0x10/0x10
[  518.001329][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  518.008189][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.013414][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  518.019631][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  518.025385][   T31]  process_scheduled_works+0xade/0x17b0
[  518.031375][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  518.037667][   T31]  worker_thread+0x8a0/0xda0
[  518.042290][   T31]  ? __kthread_parkme+0x7b/0x200
[  518.047410][   T31]  kthread+0x711/0x8a0
[  518.051489][   T31]  ? __pfx_worker_thread+0x10/0x10
[  518.057228][   T31]  ? __pfx_kthread+0x10/0x10
[  518.061851][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.067078][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.072279][   T31]  ? __pfx_kthread+0x10/0x10
[  518.077040][   T31]  ret_from_fork+0x3fc/0x770
[  518.081650][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  518.086796][   T31]  ? __switch_to_asm+0x39/0x70
[  518.091562][   T31]  ? __switch_to_asm+0x33/0x70
[  518.096474][   T31]  ? __pfx_kthread+0x10/0x10
[  518.101077][   T31]  ret_from_fork_asm+0x1a/0x30
[  518.105864][   T31]  </TASK>
[  518.122252][   T31] 
[  518.122252][   T31] Showing all locks held in the system:
[  518.143860][   T31] 5 locks held by kworker/0:0/9:
[  518.151431][   T31]  #0: ffff8881442d1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  518.171258][   T31]  #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  518.184476][   T31]  #2: ffff888028980198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[  518.194667][   T31]  #3: ffff888028983510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00
[  518.204879][   T31]  #4: ffff888028895968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00
[  518.215096][   T31] 3 locks held by kworker/0:1/10:
[  518.220521][   T31]  #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  518.234913][   T31]  #1: ffffc900000f7bc0 ((work_completion)(&(&hub->init_work)->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  518.248923][   T31]  #2: ffff88805663f198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0
[  518.258216][   T31] 4 locks held by kworker/u8:0/12:
[  518.263337][   T31]  #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  518.274524][   T31]  #1: ffffc90000117bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  518.289795][   T31]  #2: ffffffff8f71d250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  518.299539][   T31]  #3: ffffffff8e341900 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  518.314860][   T31] 1 lock held by khungtaskd/31:
[  518.319973][   T31]  #0: ffffffff8e33bf20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  518.330191][   T31] 2 locks held by kworker/u8:4/59:
[  518.335308][   T31]  #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  518.352106][   T31]  #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0
[  518.364181][   T31] 3 locks held by kworker/1:2/925:
[  518.370502][   T31]  #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  518.381843][   T31]  #1: ffffc90003a9fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  518.397475][   T31]  #2: ffffffff8e341a38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  518.412580][   T31] 3 locks held by kworker/u8:6/1111:
[  518.420520][   T31]  #0: ffff888144eab148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  518.435661][   T31]  #1: ffffc90003fe7bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  518.450174][   T31]  #2: ffff88802737c6e0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  518.464387][   T31] 4 locks held by kworker/u8:10/3523:
[  518.469922][   T31] 2 locks held by getty/5600:
[  518.474800][   T31]  #0: ffff8880347cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  518.485034][   T31]  #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  518.495329][   T31] 5 locks held by kworker/0:3/5870:
[  518.500602][   T31]  #0: ffff8881442d1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  518.511999][   T31]  #1: ffffc900040b7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  518.524121][   T31]  #2: ffff888145358198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[  518.533085][   T31]  #3: ffff88805663f198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950
[  518.543666][   T31]  #4: ffff888033e48160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0
[  518.554570][   T31] 7 locks held by kworker/0:5/5896:
[  518.560209][   T31]  #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  518.570315][   T31]  #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0
[  518.582078][   T31]  #2: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0xe5/0x250
[  518.593542][   T31]  #3: ffffffff99f58dc0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420
[  518.604260][   T31]  #4: ffffffff8e33bf20 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0
[  518.614173][   T31]  #5: ffff8880b8627ad8 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x602/0xc60
[  518.625776][   T31]  #6: ffffffff99d32388 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x3e/0x1f0
[  518.635267][   T31] 3 locks held by kworker/1:7/5969:
[  518.640706][   T31]  #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  518.652655][   T31]  #1: ffffc900044c7bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  518.665582][   T31]  #2: ffff888079848240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  518.675807][   T31] 4 locks held by syz.1.2815/15608:
[  518.681134][   T31]  #0: ffff88807c268dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  518.691140][   T31]  #1: ffff88807c2680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  518.701003][   T31]  #2: ffffffff8f890ee8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  518.711276][   T31]  #3: ffff88807be0d338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  518.720784][   T31] 1 lock held by syz.0.2948/16194:
[  518.727370][   T31]  #0: ffff888145358198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[  518.736491][   T31] 3 locks held by syz-executor/16550:
[  518.741891][   T31]  #0: ffff8880243b4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  518.752938][   T31]  #1: ffff8880243b40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  518.762730][   T31]  #2: ffffffff8f890ee8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  518.772913][   T31] 2 locks held by syz-executor/16562:
[  518.778672][   T31]  #0: ffff888033decdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  518.789000][   T31]  #1: ffff888033dec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  518.798806][   T31] 3 locks held by syz.5.3018/16603:
[  518.804014][   T31]  #0: ffff8880674c4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  518.814352][   T31]  #1: ffff8880674c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  518.824103][   T31]  #2: ffffffff8f890ee8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  518.834412][   T31] 
[  518.838962][   T31] =============================================
[  518.838962][   T31] 
[  518.847506][   T31] NMI backtrace for cpu 0
[  518.847523][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) 
[  518.847542][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  518.847551][   T31] Call Trace:
[  518.847559][   T31]  <TASK>
[  518.847568][   T31]  dump_stack_lvl+0x189/0x250
[  518.847593][   T31]  ? __wake_up_klogd+0xd9/0x110
[  518.847616][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.847630][   T31]  ? __pfx__printk+0x10/0x10
[  518.847655][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  518.847675][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  518.847688][   T31]  ? _printk+0xcf/0x120
[  518.847708][   T31]  ? __pfx__printk+0x10/0x10
[  518.847726][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  518.847749][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  518.847765][   T31]  watchdog+0xfee/0x1030
[  518.847787][   T31]  ? watchdog+0x1de/0x1030
[  518.847816][   T31]  kthread+0x711/0x8a0
[  518.847838][   T31]  ? __pfx_watchdog+0x10/0x10
[  518.847858][   T31]  ? __pfx_kthread+0x10/0x10
[  518.847888][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.847906][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.847924][   T31]  ? __pfx_kthread+0x10/0x10
[  518.847944][   T31]  ret_from_fork+0x3fc/0x770
[  518.847971][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  518.847999][   T31]  ? __switch_to_asm+0x39/0x70
[  518.848017][   T31]  ? __switch_to_asm+0x33/0x70
[  518.848034][   T31]  ? __pfx_kthread+0x10/0x10
[  518.848055][   T31]  ret_from_fork_asm+0x1a/0x30
[  518.848088][   T31]  </TASK>
[  518.848118][   T31] Sending NMI from CPU 0 to CPUs 1:
[  518.946128][ T5158] Bluetooth: hci4: command tx timeout
[  518.949790][    C1] NMI backtrace for cpu 1
[  518.949805][    C1] CPU: 1 UID: 0 PID: 5158 Comm: kworker/u9:1 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) 
[  518.949825][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  518.949842][    C1] Workqueue: hci4 hci_cmd_timeout
[  518.949867][    C1] RIP: 0010:io_serial_out+0x7c/0xc0
[  518.949891][    C1] Code: d9 6b fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7c d9 cf fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 c7 d5 24 06 cc 44 89 f9 80 e1 07 38 c1
[  518.949906][    C1] RSP: 0018:ffffc9000fe67310 EFLAGS: 00000002
[  518.949921][    C1] RAX: 0000000000000038 RBX: 0000000000000038 RCX: 0000000000000000
[  518.949932][    C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020
[  518.949943][    C1] RBP: 00000000000003f8 R08: ffff888024ec0237 R09: 1ffff110049d8046
[  518.949955][    C1] R10: dffffc0000000000 R11: ffffffff85544810 R12: dffffc0000000000
[  518.949968][    C1] R13: ffffffff99d2e8c8 R14: ffffffff9a0338e0 R15: 0000000000000000
[  518.949981][    C1] FS:  0000000000000000(0000) GS:ffff888125ae6000(0000) knlGS:0000000000000000
[  518.949995][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  518.950007][    C1] CR2: 00007ff76beede9c CR3: 000000000e136000 CR4: 00000000003526f0
[  518.950021][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144
[  518.950031][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  518.950042][    C1] Call Trace:
[  518.950050][    C1]  <TASK>
[  518.950059][    C1]  serial8250_console_write+0x1410/0x1ba0
[  518.950094][    C1]  ? __lock_acquire+0xab9/0xd20
[  518.950118][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  518.950140][    C1]  ? console_flush_all+0x13a/0xc40
[  518.950160][    C1]  ? console_flush_all+0x13a/0xc40
[  518.950181][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  518.950201][    C1]  ? console_flush_all+0x13a/0xc40
[  518.950218][    C1]  ? console_flush_all+0x13a/0xc40
[  518.950237][    C1]  console_flush_all+0x725/0xc40
[  518.950257][    C1]  ? console_flush_all+0x13a/0xc40
[  518.950278][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  518.950301][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  518.950325][    C1]  console_unlock+0xc4/0x270
[  518.950342][    C1]  ? __pfx_console_unlock+0x10/0x10
[  518.950361][    C1]  ? vprintk_emit+0x444/0x7a0
[  518.950376][    C1]  ? vprintk_emit+0x444/0x7a0
[  518.950393][    C1]  vprintk_emit+0x5b7/0x7a0
[  518.950408][    C1]  ? vprintk_emit+0x444/0x7a0
[  518.950425][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  518.950444][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  518.950464][    C1]  ? sched_clock_cpu+0x74/0x430
[  518.950482][    C1]  _printk+0xcf/0x120
[  518.950503][    C1]  ? __pfx__printk+0x10/0x10
[  518.950520][    C1]  ? do_raw_spin_lock+0x121/0x290
[  518.950537][    C1]  ? look_up_lock_class+0x74/0x170
[  518.950560][    C1]  bt_err+0x10b/0x160
[  518.950575][    C1]  ? __lock_acquire+0xab9/0xd20
[  518.950599][    C1]  ? __pfx_bt_err+0x10/0x10
[  518.950620][    C1]  hci_cmd_timeout+0xff/0x1e0
[  518.950637][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  518.950662][    C1]  process_scheduled_works+0xade/0x17b0
[  518.950698][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  518.950730][    C1]  worker_thread+0x8a0/0xda0
[  518.950747][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  518.950769][    C1]  ? __kthread_parkme+0x7b/0x200
[  518.950789][    C1]  kthread+0x711/0x8a0
[  518.950809][    C1]  ? __pfx_worker_thread+0x10/0x10
[  518.950824][    C1]  ? __pfx_kthread+0x10/0x10
[  518.950842][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.950859][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.950878][    C1]  ? __pfx_kthread+0x10/0x10
[  518.950897][    C1]  ret_from_fork+0x3fc/0x770
[  518.950921][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  518.950947][    C1]  ? __switch_to_asm+0x39/0x70
[  518.950965][    C1]  ? __switch_to_asm+0x33/0x70
[  518.950983][    C1]  ? __pfx_kthread+0x10/0x10
[  518.951002][    C1]  ret_from_fork_asm+0x1a/0x30
[  518.951028][    C1]  </TASK>
[  518.952544][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  518.952563][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) 
[  518.952583][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  518.952594][   T31] Call Trace:
[  518.952604][   T31]  <TASK>
[  518.952612][   T31]  dump_stack_lvl+0x99/0x250
[  518.952635][   T31]  ? __asan_memcpy+0x40/0x70
[  518.952659][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.952678][   T31]  ? __pfx__printk+0x10/0x10
[  518.952708][   T31]  panic+0x2db/0x790
[  518.952748][   T31]  ? __pfx_panic+0x10/0x10
[  518.952763][   T31]  ? __pfx_delay_tsc+0x10/0x10
[  518.952778][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  518.952800][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  518.952824][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  518.952856][   T31]  watchdog+0x102d/0x1030
[  518.952880][   T31]  ? watchdog+0x1de/0x1030
[  518.952909][   T31]  kthread+0x711/0x8a0
[  518.952932][   T31]  ? __pfx_watchdog+0x10/0x10
[  518.952953][   T31]  ? __pfx_kthread+0x10/0x10
[  518.952974][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  518.952992][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.953011][   T31]  ? __pfx_kthread+0x10/0x10
[  518.953031][   T31]  ret_from_fork+0x3fc/0x770
[  518.953058][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  518.953086][   T31]  ? __switch_to_asm+0x39/0x70
[  518.953104][   T31]  ? __switch_to_asm+0x33/0x70
[  518.953123][   T31]  ? __pfx_kthread+0x10/0x10
[  518.953143][   T31]  ret_from_fork_asm+0x1a/0x30
[  518.953176][   T31]  </TASK>
[  518.955144][   T31] Kernel Offset: disabled