last executing test programs:

7m4.33392267s ago: executing program 32 (id=220):
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffff801}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x40000)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd70fffffff5000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)

6m23.33930849s ago: executing program 33 (id=495):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3, 0x0, 0x5})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x8100000)

6m13.127060945s ago: executing program 0 (id=682):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904"], 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x80000001, 0x0, 0x3, "e363d13efd74eb08b619954e8698cde162c3e076b68dfb4b957e2fbaf46c4340", 0x20385655})
mkdir(&(0x7f0000000040)='./file1\x00', 0x28)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xc6)
getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078)

6m12.527067143s ago: executing program 0 (id=683):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a4c010000030a010200000000000000000a00000508000a400000000111000c002630a5731dc81fc880847b83df00000008000540fffffffdc8000c009d89f651d3d9dcdb91a4b6d2a3be68b81716927844140f475051e5d724f8f57bc7c3b2976c33d5e7e23592de5c316f7e1505a209db428b401c3ae0d8ddc618ba3bd0fa7b5492f77910349130c02a7b5c7f88b3d8f8f5c4e4b84425e04cc4003f708a8251426709a3dbee1b7c8b9319ca6d77d8946a6264c8abb04cfa0078c7cc29e25aa1b42400851fe6282d7e64bfea1cbbae4c0c78e450d6623c7c69a127033d686133283e8fd2c48822defc63840e879456cbcadf2bbfec9c543cd90da206d58fcde60900010073797a300000000008000540fffffffd0900010073797a31000000000900030073797a310000000013000c00409cc58de1fb37f434f4a605571d2a000900030073797a32"], 0x174}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

6m12.524542976s ago: executing program 0 (id=684):
set_mempolicy(0x4003, &(0x7f0000000200)=0x8000000007, 0x5fff)
openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4000000000000)

6m12.422559047s ago: executing program 0 (id=685):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010007bd7000fddbdf2555000000080401007f3f56da08000300cbf1bf46417707110be4b5bf0a9ea9e50a8b3fcb1ed8e131798a688134c7233eabf2ba9dd5e8a310e05556a7a1c13b689111e6380f6a3b1a6fb5284134982596ae0bb3639f8c7afd34fc9a2b839ceff50a18e75e065a7ca1ce4b110c1b56d25da8ef0d9f1cb28ae3e8bfddf1243f8c4eaa", @ANYRES32, @ANYBLOB="0c0099000b00000043000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24004044)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x3, 0x81, 0x3}, {0x61, 0xf}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil)
syz_clone(0x4240000, &(0x7f00000004c0)="82cdd4efc06d482a68d3bdb9a0d782c4a7db7baab835e31d14917d0b7c7932840d0ce19401bcfd22f3019bf5fe67bf2319e4b491aa50d09a2cf7ccbd95f322af0462d701ee1f783250beff9a8daa890ba0b098897d8e4bbd82faac5f8780072b0eb487c38396ae698dee97941d1f6746eb35487b81beb03fe062f17394e24392312d92222d406ca1d298578ace4070afc99db20de66fbb4e63a0df7ad16f85d24f9f9aab3d48737657cb52a0b246ac800391c22ef0bd4214888fd449be72c43e99f7c0eaeab4d17412b750138bf25d44a798f6", 0xd3, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0))
ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0x80480911, 0x0)

6m12.212472196s ago: executing program 0 (id=686):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0xffffffffffffffdd}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x4)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, &(0x7f00000001c0)={@hyper, 0x101})

6m11.695990971s ago: executing program 0 (id=692):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000a00)={0x0, &(0x7f00000006c0)=[@code={0x1, 0x5b, {"66baa100ec66baf80cb8dce19880ef66bafc0cb86ef28ea6ef0fc79b070000000f00d0c4027d5810b9800000c00f3235008000000f300f01d10fc653740bb9870b00000f3266460fe729"}}], 0x5b})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @pic={0x50, 0x5, 0x3, 0x0, 0x0, 0x7, 0xd, 0x75, 0x2, 0x1, 0x7d, 0x3, 0x0, 0x5, 0x40, 0x10}})
ioctl$KVM_RUN(r3, 0xae80, 0x8000000000000)

6m11.444353299s ago: executing program 34 (id=692):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000a00)={0x0, &(0x7f00000006c0)=[@code={0x1, 0x5b, {"66baa100ec66baf80cb8dce19880ef66bafc0cb86ef28ea6ef0fc79b070000000f00d0c4027d5810b9800000c00f3235008000000f300f01d10fc653740bb9870b00000f3266460fe729"}}], 0x5b})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @pic={0x50, 0x5, 0x3, 0x0, 0x0, 0x7, 0xd, 0x75, 0x2, 0x1, 0x7d, 0x3, 0x0, 0x5, 0x40, 0x10}})
ioctl$KVM_RUN(r3, 0xae80, 0x8000000000000)

5m56.124073306s ago: executing program 5 (id=772):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x1)
poll(&(0x7f0000000000)=[{r0, 0x51c}, {r1, 0x2210}, {r1, 0x4a4}, {r1, 0x400}], 0x4, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r2 = getpid()
ioprio_set$pid(0x3, r2, 0x6000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)
writev(r0, 0x0, 0x0)

5m55.579226485s ago: executing program 5 (id=774):
r0 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0xffffff91}, 0x1c)

5m55.509440061s ago: executing program 5 (id=775):
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x4, 0x0, 0x2, 0x0, 0xffff, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b32, &(0x7f0000000040))
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
accept(r0, 0x0, 0x0)
setreuid(0x0, 0x0)

5m55.401692015s ago: executing program 5 (id=776):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x3100000000000000, 0x0, 0x296})

5m55.051011861s ago: executing program 5 (id=777):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10)
r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r3 = getpgid(r2)
setpgid(0x0, r3)
creat(&(0x7f0000001380)='./file0\x00', 0x4)

5m54.132655971s ago: executing program 5 (id=781):
ioprio_set$pid(0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000080)=0x100000, 0x7f03)

5m39.048991797s ago: executing program 35 (id=781):
ioprio_set$pid(0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000080)=0x100000, 0x7f03)

5m35.870385555s ago: executing program 1 (id=881):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00070013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00060004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

5m35.618987514s ago: executing program 1 (id=883):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000340)=0x4, 0x12)
r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="186536410f017d0048b8dc4b13b61e0b813a0f23d82e260f0178100f23f8660f2263c4c17c77fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x40}], 0x1, 0x34, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x17, 0x9, 0xf909, 0x899d, 0x80, 0xfffffffb, 0x7, 0x10, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x8811, 0x0], 0x1, 0x4000007})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb00000000000086dd67f8463b00200000fe80000000000000000000000000001ffc020000000000000000000000000001000200000000000007080000000020004701070800000000000b0f0000000000708766b8ab2e0e7adae9b23ddda5fe8015e9ffda57338bec2c1391690800e91d031b459ab98d2808a1ad0cf3a243d0d756595f7eb1de12cee541e9a9a086d777686714ebe2b019ae71fbe690b2e6e0924ecd624147681b439ae5e1e98546108543169c271f7ce811543438c02340c519cf0640aea6b38751edf0664cebb25ac28feffba4f825521aac9e3a8f0767864ff318dd42"], 0x5a)

5m34.223034423s ago: executing program 1 (id=889):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', 0x0, 0x0, 0xff0f)

5m33.998747068s ago: executing program 1 (id=890):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001800000000000000040000ff020000000000000000000000000001000003d1680000004f1c"], 0x52)

5m32.103775587s ago: executing program 1 (id=895):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = getpgid(r1)
setpgid(0x0, r2)
creat(&(0x7f0000001380)='./file0\x00', 0xc)

5m31.062883827s ago: executing program 1 (id=902):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}}, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0x20, 0xc45, 0x760b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x9, 0xd, 0x1, {0x22, 0xcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x1, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x83, 0x4c}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x0, 0xb, 0x40, 0x2}, 0x149, &(0x7f0000000100)={0x5, 0xf, 0x149, 0x6, [@generic={0xff, 0x10, 0x2, "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"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x1000, 0xf000, 0x1ff, [0x3f0f, 0x3f18, 0xc0, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x7, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x7, 0xf00, 0xfff9, [0xf, 0xff0000, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x3, 0x2}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c4}}]})
syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, &(0x7f0000000340)={0x20, 0x22, 0x91, {0x91, 0x23, "a73d0e81130e1f415c5d381067af32bd87dcad411fd28d87c98bc8a244ba7b31cb418bad11155b519cf61ffe19ac3cd072b6c8d595ced3e6c711f27e126ae7320ac8ce59c7fcfdedbf2abf5187494bbb964d434e04258c64ba711c1da9e5f7f4b56b18c299dd94c447965938d59032db4d2663a6ca32a50c3a03230f403a353a939f896a3d7136954326a785fb863c"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x9, "d4bd5a8e"}, @global=@item_4={0x3, 0x1, 0x3, "6907e5a2"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "f7dcd5ea"}, @global=@item_012={0x2, 0x1, 0x5, "0985"}, @global=@item_012={0x2, 0x1, 0x7, "e42f"}, @global=@item_4={0x3, 0x1, 0xb, "041a42f7"}, @global=@item_012={0x2, 0x1, 0x5, 'iJ'}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x3, 0x1, {0x22, 0x610}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x0, 0x7, 0x5c, "ab1f1d0a72514e2c6a660beae9ffefd88dd1529d71e2cb7229cb6403cd4507d11b24d669faed637a8592cf2a0c10b2fd8aae98d9710defa84fa7b9813fbf7eff700b1ee5f1777d6a0f6307fd6457f99bc82db605ec77fdc52c8c4d9e"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000600)={0x20, 0x1, 0x86, "2459f825affbb5162b9898c002c89f76f69e823118077db4b4108d7e60ff7ecbeb6a6edf16d0278b08a5f8521e4e14bdcbb874b73ce761569eb81f4f383989bde4084df28179150f4eea2442cf22da38a651da49c2602e5aa4e192e83b266115ebcff4c0487256c6be4465f02f03f7e4fb7ddf22dfdcfb052d19e83a1bc9ad37ee2ded4e861d"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x99}})
bind$inet6(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4)

5m16.045322759s ago: executing program 36 (id=902):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}}, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0x20, 0xc45, 0x760b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x9, 0xd, 0x1, {0x22, 0xcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x1, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x83, 0x4c}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x0, 0xb, 0x40, 0x2}, 0x149, &(0x7f0000000100)={0x5, 0xf, 0x149, 0x6, [@generic={0xff, 0x10, 0x2, "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"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x1000, 0xf000, 0x1ff, [0x3f0f, 0x3f18, 0xc0, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x7, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x7, 0xf00, 0xfff9, [0xf, 0xff0000, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x3, 0x2}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c4}}]})
syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, &(0x7f0000000340)={0x20, 0x22, 0x91, {0x91, 0x23, "a73d0e81130e1f415c5d381067af32bd87dcad411fd28d87c98bc8a244ba7b31cb418bad11155b519cf61ffe19ac3cd072b6c8d595ced3e6c711f27e126ae7320ac8ce59c7fcfdedbf2abf5187494bbb964d434e04258c64ba711c1da9e5f7f4b56b18c299dd94c447965938d59032db4d2663a6ca32a50c3a03230f403a353a939f896a3d7136954326a785fb863c"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000440)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x9, "d4bd5a8e"}, @global=@item_4={0x3, 0x1, 0x3, "6907e5a2"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "f7dcd5ea"}, @global=@item_012={0x2, 0x1, 0x5, "0985"}, @global=@item_012={0x2, 0x1, 0x7, "e42f"}, @global=@item_4={0x3, 0x1, 0xb, "041a42f7"}, @global=@item_012={0x2, 0x1, 0x5, 'iJ'}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x3, 0x1, {0x22, 0x610}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x0, 0x7, 0x5c, "ab1f1d0a72514e2c6a660beae9ffefd88dd1529d71e2cb7229cb6403cd4507d11b24d669faed637a8592cf2a0c10b2fd8aae98d9710defa84fa7b9813fbf7eff700b1ee5f1777d6a0f6307fd6457f99bc82db605ec77fdc52c8c4d9e"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000600)={0x20, 0x1, 0x86, "2459f825affbb5162b9898c002c89f76f69e823118077db4b4108d7e60ff7ecbeb6a6edf16d0278b08a5f8521e4e14bdcbb874b73ce761569eb81f4f383989bde4084df28179150f4eea2442cf22da38a651da49c2602e5aa4e192e83b266115ebcff4c0487256c6be4465f02f03f7e4fb7ddf22dfdcfb052d19e83a1bc9ad37ee2ded4e861d"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x99}})
bind$inet6(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4)

5m13.410848043s ago: executing program 6 (id=1004):
openat$userio(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = dup2(r0, 0xffffffffffffffff)
r5 = accept$alg(r4, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000240)="e8700e44", 0x4}], 0x2, 0x0, 0x0, 0x9cde14b4b725c073}], 0x1, 0x448d4)
socket$netlink(0x10, 0x3, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/227, 0xe3}], 0x1, 0x76, 0x1007)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x2d0600, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000327bd7000fbdbdf253b0000000c0099000000000059000000a3a2106ee30a2891af48db68526713abc1cba5fb6c1ad5a52380939aae6f69cdd032e3cae981ec9c287ec810e3d99e28d59dbba7bcac315f40dbbe93e3837373a4efa7a453016063f608d3c475560e577b321bb68f3f8740e586d4b7120ef0628961a09500dbbd0f3905"], 0x20}, 0x1, 0x0, 0x0, 0x20048810}, 0x4004000)

5m13.200432129s ago: executing program 6 (id=1006):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="44001c00", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="200033004003000008021100800008021100000011f5030f216bb400ac0146c00600cd00"], 0x44}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080)

5m12.502791476s ago: executing program 6 (id=1009):
kexec_load(0x10000000000000, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0)

5m12.259105494s ago: executing program 6 (id=1010):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

5m12.096328499s ago: executing program 6 (id=1011):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0xfff, 0x9})
close(r1)
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r3 = getpgid(r2)
setpgid(0x0, r3)
creat(&(0x7f0000001380)='./file0\x00', 0x4)

5m11.71852682s ago: executing program 6 (id=1013):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"})
r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee5, 0x8031, r1, 0x20004000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x204400, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100)={'L+', 0xfffffffffffffffe}, 0x16, 0x2)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)

4m56.662010634s ago: executing program 37 (id=1013):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"})
r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee5, 0x8031, r1, 0x20004000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x204400, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100)={'L+', 0xfffffffffffffffe}, 0x16, 0x2)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)

4m55.128157332s ago: executing program 7 (id=1101):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x0)

4m54.747199894s ago: executing program 7 (id=1103):
r0 = socket(0x400000010, 0x3, 0x0)
write(r0, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000200000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc)

4m54.550730491s ago: executing program 7 (id=1105):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
chmod(&(0x7f0000000000)='./file0\x00', 0x42)

4m54.30816422s ago: executing program 7 (id=1107):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x4, 0x0, 0x1})

4m54.106833647s ago: executing program 7 (id=1108):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r3 = getpgid(r2)
setpgid(0x0, r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0xfdfe}])
io_submit(r5, 0x5, &(0x7f00000005c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x8000, r0, &(0x7f0000000080)="48260a588e483e0b4661b9dc16b16656462de51b2b540908ec5f14961e826b1e50802959e0d56883b3fdf38a9b8809dccca1afe8accb77486a9052d6bb59ed9243ac7aae4eb8", 0x46, 0xef, 0x0, 0x3, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xffff, r0, &(0x7f0000000240)="1725208816617f8d0b110be29285cff2e05dc035ce647a55624aa061692377c3b1c4de0045815c39412a102406d5883393ca034810ef14141624bf0dfd3bff13b700c979b45bf867ccdfa527b42020982fb61bd9a3320a9797e3416b5b4542db6321", 0x62, 0x1ff, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0xe7, r1, &(0x7f00000002c0)="8bb97b469943a6d2a2ae7b3326e00cdf041fc18c60ae4f8fcf1600aeae31ece931bf06501b26d90273ff9a539a0e9492871a197338abe1f192315076b2c846191267872af402bd6e97b3c4498597d7f7ef78f4e263690ab1eef2f2933d7686fb11067ff8b1a529a776111bfab01a89359b7802cb9ef6a3fd148a77e298e723688d7cb89fd0e4", 0x86, 0x0, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x5, r0, &(0x7f0000000440)="0c4d3360a709d59d697a417d76b970aa4a186d4070f2137256c4a3bb699d0b85a440fa095e4b83ae73", 0x29, 0x9, 0x0, 0x1, r1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x14f, r1, &(0x7f00000004c0)="e226f068c5c1efd0a057d9af7519ee650116e055df21bdf6329b130ff5bfb0074653cb4b762344be6c770921219917c5f5058ad83040837e9fe0c2b21e70a774d8159108da32fa5af1abc313f815b2cfbc061c4d1aad70a9ad4ec8657509aa50f8e5745b393bb948ce15445011c55a6b823f58dc6862279635b489a580ee2ab28dc2807fa8c762c241033ef5ff", 0x8d, 0x1, 0x0, 0x3}])
creat(&(0x7f0000001380)='./file0\x00', 0x4)

4m53.128837739s ago: executing program 7 (id=1111):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', 0x0, 0x0, 0x100000)

4m38.076251952s ago: executing program 38 (id=1111):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', 0x0, 0x0, 0x100000)

2m59.023036323s ago: executing program 9 (id=2006):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, r0, 0x801, 0x700, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x48}}, 0x0)

2m59.000855515s ago: executing program 9 (id=2007):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0xa4ffffff, @empty}}, 0x5c)

2m58.890969905s ago: executing program 9 (id=2009):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20181, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000040))
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d", 0x39, 0xc001, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffffffffffffffbb)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r2, 0x0, 0x20)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
read$FUSE(r4, &(0x7f00000077c0)={0x2020}, 0x2020)
read$midi(r2, &(0x7f0000000180)=""/124, 0xfffffffffffffe38)
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)

2m57.999891667s ago: executing program 9 (id=2015):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, <r3=>0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r2, <r5=>0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, <r6=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r6, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1})
ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000300)={0x8, r6})
ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000340)={0x8, r5})
ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r4, 0x1c, &(0x7f00000003c0)=""/28})
ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000400)={0x8, r3})
ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000440)={0x8, r2})
close(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000)

2m57.247005549s ago: executing program 9 (id=2025):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000180)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = getpgid(r1)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r3=>0x0)
setpgid(r3, r2)
creat(&(0x7f0000001380)='./file0\x00', 0x4)

2m56.375391407s ago: executing program 9 (id=2036):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0)={0x6}, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)='P', 0x1, 0x8091, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x2c01}, 0x2}, 0x1c)

2m41.287693051s ago: executing program 39 (id=2036):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0)={0x6}, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)='P', 0x1, 0x8091, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x2c01}, 0x2}, 0x1c)

7.153359246s ago: executing program 4 (id=3126):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x8000000}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)

6.925633786s ago: executing program 4 (id=3129):
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffff801}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x40000)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000008000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)

6.691659042s ago: executing program 4 (id=3132):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x6, 0x72, {0x72, 0x10, "5544df58b5360a167c69dd69e38803d9a338fdbef2f2a5494b13d62b0f23185c8a4a1cd3c0c09f648bc05ea7337a5df6daa351693b29f4ae611d7e1aeb823ec96c7f882e43384878ca31cabacadb6eaa571381253659a2081fbfd4ab5053cceeb31d80a7566c19260e7ac77ab73c154f"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0x16, 0x51, "2b8ee47b4ef6262e2f1f449b1a6a468d88ca1eff1246dd6a4a1b3bdfcdf14905b0993b8401fa2da8dced518efe4c4b4c0f9ca6b0e24971526f5a94443d658b1f5eeed8810122cefa26396a6d74220aab08"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000500)={0x20, 0x0, 0x7e, {0x7c, "ab3072402c65e100d89deba6be37e3b7f632b065c944b2651e7ab8881fc99a1ce755770324d121ae7f9983c0501c01abb67cbe43d216d032b1de1de1cd4210caf402e493231e2be83f14978927c99759ede09a621326d7e148db5b8573ee3fe245df3d4c4494994f3176a36a4a63fae93efe904abae2890b51fa52be"}}, &(0x7f0000000340)={0x20, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0xf}})

3.589468225s ago: executing program 3 (id=3160):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xd0040, 0x0)
r1 = getpgrp(0x0)
ioprio_set$pid(0x2, r1, 0x0) (async)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000040)=0x6, 0x4) (async, rerun: 64)
sendfile(r0, r0, 0x0, 0x7ffff000) (rerun: 64)

3.537364113s ago: executing program 4 (id=3161):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0)

3.41506528s ago: executing program 3 (id=3162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000020c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x200000000000000, 0x4000850}, 0x40)

3.40253961s ago: executing program 4 (id=3163):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0xbfffd000, 0x4002000000}], 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x4, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x40)
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
kexec_load(0x400, 0x7, &(0x7f0000000580)=[{&(0x7f0000000180)="678583e0f71fef8158600be953b9a2b38c3335d6eb86309de28b11afe8cda842d5a4d93e9a64f9e3135a348120f9aa", 0x2f, 0xf, 0x1}, {&(0x7f0000000280)="ec9cec49fcdc64645bc2cccf65c85c41f38f0d71218ffc17c5a62c062c0533c6ab2f78ae9894d19d42021ade85806e2921081a0ee402d1", 0x37, 0x7fffffffffffffff, 0xd5d0}, {&(0x7f00000002c0)="0ed2d438153ade181424e33361cd7b2dd60a8df67ff74b6419ce5e5ecb5ce256b6f12b0cd0682b5c5a6fdc5b8d2c2433bf92a580c5bf3b877b6aeaaf1723b161795b8b8570c03095a1bb6f4c9c6b0ba04e2a2c2192d8278be992131008f3470e9bbd2ca565da8d9323049070bbbf9593500b4d36c03b0565f2aac4e6fcd49fd69737d79111204d0d741abb660800d84311fb6c734e8cbc97fc91e4be74ed5fdf5e76d42f628b60fca0e0b260205c7e0e20d03ce8cd6384025ad2a53c666a4bfffd974cfbd469e2955cf67f1af23b0b", 0xcf, 0xa0, 0x1}, {&(0x7f00000003c0)="32edcdd1687fe17c2ac623b65c446e853406330dcbe86363f9ecb403634423168d88a0c9326c83fb49ae2024e6ceec6acdf558487ff8d4efde65e90fbe4de30dca0f2336ef0a2fd481bb48166de77118bb4454033688bf7c5600cb122aaee09380", 0x61, 0x100000001, 0x1}, {&(0x7f0000001c00)="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", 0x1000, 0x7fffffffffffffff, 0xfffffffffffffffb}, {&(0x7f0000002c00)="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", 0x1000, 0x5, 0x4}, {&(0x7f00000004c0)="109007c7fd5de120a31ed9edc0a37486525a32fbe051fce59bfaa2e2cdf2c0de6da9d25c18e3241739d3d34f22a01c943cc21e9b3d507d756acc3e19697b6f4dbbfadf2a89fa83f9153664a66ae00b59bcfcad98d8a65e5be153e2e07881e4724ccadd8a22c1b77580349a31e2b88066aa82d5ad34fec4786919dd1d5acd11fa09f5db", 0x83, 0x10000, 0x1}], 0x320000)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(xtea-generic)\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x80010, r3, 0x80000000)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000440), 0x4)
sendmmsg$alg(r4, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x20041000)
recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000bc0)=""/4093, 0xffd}], 0x1}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x649, 0x0, 0x2}]})
r6 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000100)={0x0, 0x1})
modify_ldt$write(0x1, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)

3.377016281s ago: executing program 3 (id=3164):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000000c0)={0x2, 0x380, 0x1c0, &(0x7f0000000340)=[0x5, 0x9, 0x100, 0xffff, 0xfffffffffffffffc, 0x3, 0x8001, 0x4, 0x8, 0x3, 0xfffffffffffffffe, 0x3ff, 0x4, 0x8, 0x9, 0x800, 0x7, 0xcd67, 0x8a1, 0xf9ab, 0x2, 0x1, 0x0, 0xf55, 0xe, 0x1, 0x10001, 0x4, 0x7f, 0xfffffffffffffffe, 0x0, 0x4000000, 0xfffffffffffffffc, 0xffffffffd52eae20, 0x6, 0x6, 0x3, 0x726f, 0x256a5943, 0x64f, 0x97, 0xff, 0x3, 0xfffffffffffffff8, 0x6, 0x7, 0x107, 0xdaa, 0x0, 0xa, 0xa89, 0x8919, 0x6, 0x0, 0x83, 0x51, 0xfffffffffffffff7, 0x400, 0xa, 0x400, 0x8000000000000001, 0xcd3, 0x9, 0x95, 0x6, 0x1, 0x9, 0x4, 0x3ff, 0xd, 0x1, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe, 0xfa, 0xb, 0xa0, 0x8, 0x3, 0x0, 0x0, 0x100000001, 0x100000001, 0x7b0, 0xbd, 0x1, 0x6, 0x3f, 0x101, 0x100000000, 0x2, 0x7, 0x6, 0x6, 0xc18d, 0xc, 0xff, 0xfff, 0x8, 0xcc34, 0x5, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2b, 0x4, 0x3, 0x8001, 0x5, 0x9, 0x6, 0xeffe, 0x80000001, 0x8000000000000000, 0x8, 0xb60f, 0x2, 0x1, 0x1, 0x3, 0x7, 0x2, 0xda]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040))
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0xd000000000000, 0x0})

3.056587452s ago: executing program 3 (id=3167):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000026006bac9a3fe3d86e1730015baa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4709c5bb5b64f69853362ac340", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x33}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10)
listen(r0, 0xb42)

2.891156976s ago: executing program 4 (id=3169):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x6, 0x72, {0x72, 0x10, "5544df58b5360a167c69dd69e38803d9a338fdbef2f2a5494b13d62b0f23185c8a4a1cd3c0c09f648bc05ea7337a5df6daa351693b29f4ae611d7e1aeb823ec96c7f882e43384878ca31cabacadb6eaa571381253659a2081fbfd4ab5053cceeb31d80a7566c19260e7ac77ab73c154f"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0x16, 0x51, "2b8ee47b4ef6262e2f1f449b1a6a468d88ca1eff1246dd6a4a1b3bdfcdf14905b0993b8401fa2da8dced518efe4c4b4c0f9ca6b0e24971526f5a94443d658b1f5eeed8810122cefa26396a6d74220aab08"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000500)={0x20, 0x0, 0x7e, {0x7c, "ab3072402c65e100d89deba6be37e3b7f632b065c944b2651e7ab8881fc99a1ce755770324d121ae7f9983c0501c01abb67cbe43d216d032b1de1de1cd4210caf402e493231e2be83f14978927c99759ede09a621326d7e148db5b8573ee3fe245df3d4c4494994f3176a36a4a63fae93efe904abae2890b51fa52be"}}, &(0x7f0000000340)={0x20, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0xf}})

2.88660507s ago: executing program 3 (id=3170):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0xa00, 0x20008000}, 0x0)

2.814634055s ago: executing program 3 (id=3171):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'wg0\x00', 0x2})
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="02000000020001000003be8c5ee1768810003c08030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff0601150039", 0x79)
syz_open_dev$sndctrl(&(0x7f0000001680), 0xffffffffffffffff, 0x2040)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="0fcbb5ffe9e8606b1f39243ef7624e2afb3a1e875be859167fc4db8c310c5c587869cec2bfcdd786a92cf89042eede6fba1f47cfa0839447bf72fd99b10fd785035ccd61a7d5fc9c32b21ebe95a19146fa061edcc53d063c41f0a907ae991a59000a76d93c667541f03a80c408f4e4244a7ad82725efe363a28d0292dd01f8f4746ee4b5e39a6f694e9d6dd57f60e0220c36d8cf4eaad4e15eb50a9bb0f9fa96253d0ebfca787dcb8a56b251a99c1f4d38591d25c2c4b87809a35f54aa408a43346bcc5fe38614c1ac44", @ANYRES32=r3, @ANYRES32, @ANYRES32=r3], 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000000040)="be9b5683", 0x4)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628)
ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4140aecd, &(0x7f0000000080))
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r7, 0x2000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000180)=""/93, &(0x7f0000000200)=0x5d)
r10 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x200440)
ioctl$BLKRASET(r10, 0x1262, &(0x7f00000002c0)=0x5)

755.12043ms ago: executing program 2 (id=3192):
socket$igmp6(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300ff8000003000000060ec970012302c00fe8000000000400000000000000000aaff0200000000000000000000000000013a"], 0xfdef)

682.627363ms ago: executing program 2 (id=3193):
mount$afs(&(0x7f0000000000)=@cell={0x25, 'syz0:', 'syz0', '.backup'}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x260020, &(0x7f00000000c0)={[], [{@audit}, {@dont_appraise}, {@smackfsdef}, {@dont_appraise}, {@dont_measure}]}) (async)
umount2(&(0x7f0000000100)='./file0\x00', 0x1) (async)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x800c0, 0x4, 0xc}, 0x18)
getdents64(r0, &(0x7f00000001c0)=""/78, 0x4e) (async)
chdir(&(0x7f0000000240)='./file1\x00') (async, rerun: 32)
renameat(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1403, 0x2, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x10) (async, rerun: 64)
r1 = socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0)
ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000500)={0x80000001, 0xa6, 0x6, 0x7, 0x6, 0xffff6ed4, 0x8}) (async)
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000540)={0x2d, 0x6, 0x0, {0x5, 0x3, 0x4, 0x0, 'rxe\x00'}}, 0x2d)
getdents(r3, &(0x7f0000000580)=""/15, 0xf)
fspick(r3, &(0x7f00000005c0)='./file1\x00', 0x0) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000600)={0x62, "a9bedea0716d8db4741233162e755b42718172d1e071ab2df2f4e3d2628be4e8", <r4=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r5=>r4, {0x9}}, './file1\x00'})
mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700), 0x21000, 0x0) (async)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000740)=@sr0, r2, &(0x7f0000000780)) (async)
r6 = socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x0, 0x300) (async, rerun: 32)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000800)=0x9d3b, 0x4) (async, rerun: 32)
getdents64(r3, &(0x7f0000000840)=""/145, 0x91)
r7 = dup(r6)
getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000900)={'filter\x00', 0xd6, "31d7719c5b39e527bbdc9bf0e70374ddb05e5c629b6ae647b297900e89c4aff5c3427c6a5b260677ad3f77a2c2b817e44b529eb2f73272fcf3f0f77d9d73d58b9e014e8e758b7415e51eb1a06f875397b9b8cd919f578a139e6f9f92e9284f80a1c835ab8a91e2ee687be8803ae2a6cbacd12b94c23accd7c282b39cb1cd8dc5595693a512509d7c6d8d79b1e2a3f579d7c780cb404af25928f8d3812f6bb63f6fde3f832e63616d3199bff56ffe6680bac2ac04b26469863a26d659dce7f1897b7c72c71a6bab00143dfc1319f829e2b49a733273f1"}, &(0x7f0000000a00)=0xfa) (async, rerun: 64)
read$midi(r3, &(0x7f0000000a40)=""/8, 0x8) (rerun: 64)
read$FUSE(r3, &(0x7f0000000a80)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_LSEEK(r7, &(0x7f0000002ac0)={0x18, 0x0, r8, {0xfffffffffffffca7}}, 0x18) (async)
connect$inet6(r3, &(0x7f0000002b00)={0xa, 0x4e20, 0x7ff, @rand_addr=' \x01\x00', 0x3}, 0x1c) (async)
read(r5, &(0x7f0000002b40)=""/117, 0x75) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000002c80)={0x16, 0x98, 0xfa00, {&(0x7f0000002bc0), 0x0, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x55}}}, 0xa0)

629.031092ms ago: executing program 2 (id=3194):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x80, 0xa, 0x0, 0x0, 0x8003, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x4, 0x0, 0x1})

538.851918ms ago: executing program 2 (id=3195):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)

538.092329ms ago: executing program 8 (id=3196):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001", 0x27}], 0x1)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000"])
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f00001fa000/0x2000)=nil, &(0x7f000063e000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000274000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000543000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
listen(r0, 0x0)
listen(r0, 0xf)
r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0xe, 0x1f})
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000080)=0x200007, 0x12)
sendmsg$802154_raw(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000480)={&(0x7f0000000540)="6ced52d227c3da4a2cdb85e74f5a353ce4dffe8c979c95b5a7cf6e046e7f294b2eee4bac7e3ba3d353cf240292d143df8c0813547bc374f090e834f7496a733f219f83f1a8bd3b86e07b2ba776832b80468c284c5e812c7d9f3d64b6d8173a", 0x5f}, 0x1, 0x0, 0x0, 0x1}, 0x4048841)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000dc0)={0x8, 'vlan1\x00', {'ip6_vti0\x00'}})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f048})
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSBRKP(r7, 0x5425, 0x4)

454.231886ms ago: executing program 2 (id=3197):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xf5, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg$sock(r0, 0x0, 0x400c0)

408.350718ms ago: executing program 8 (id=3198):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x100000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000000c0)=' }', 0x2}], 0x1}, 0x4000000}, {{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="c1", 0x1}], 0x1}}], 0x2, 0x200400c0)

338.597562ms ago: executing program 2 (id=3199):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x45809000)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000063000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000368000/0x3000)=nil, &(0x7f00007f7000/0x2000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000063000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000368000/0x3000)=nil, &(0x7f00007f7000/0x2000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
r2 = syz_open_dev$video(&(0x7f0000002c40), 0x7fffffff, 0x0)
ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x1}) (async)
ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r3 = socket(0x2, 0x2, 0x1)
bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e)
bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_io_uring_setup(0x3f17, &(0x7f0000000100)={0x0, 0x887f, 0x2, 0x1, 0xac}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000180))
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000)
r6 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6}, './file1\x00'})
r7 = fcntl$dupfd(r0, 0x0, r0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r7, 0x40, 0x0, 0x8})
connect(r0, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80)
open$dir(&(0x7f0000000000)='./file0\x00', 0x84000, 0x101) (async)
open$dir(&(0x7f0000000000)='./file0\x00', 0x84000, 0x101)

295.292339ms ago: executing program 8 (id=3200):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0xffa4}}, 0x5c)

193.172264ms ago: executing program 8 (id=3201):
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)

19.970282ms ago: executing program 8 (id=3202):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x70fe}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

0s ago: executing program 8 (id=3203):
r0 = socket$kcm(0xa, 0x1, 0x106)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@ll={0x11, 0x1c, r1, 0x1, 0x7, 0x6, @remote}, 0xfffffffffffffffe, 0x0}, 0x20000001)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)='@', 0x1}], 0x1}, 0x400c0)
openat$rnullb(0xffffffffffffff9c, 0x0, 0x28200, 0x0)

kernel console output (not intermixed with test programs):

38647][   T44] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  487.852067][   T93] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  487.878609][ T5901] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  487.993820][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.004950][   T44] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  488.015654][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.024016][   T93] usb 5-1: Using ep0 maxpacket: 16
[  488.031808][   T44] usb 4-1: config 0 descriptor??
[  488.036709][   T93] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  488.038626][ T5901] usb 3-1: Using ep0 maxpacket: 16
[  488.046885][   T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.066053][   T93] usb 5-1: Product: syz
[  488.071969][   T93] usb 5-1: Manufacturer: syz
[  488.076729][   T93] usb 5-1: SerialNumber: syz
[  488.077159][ T5901] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  488.091912][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.094914][   T93] usb 5-1: config 0 descriptor??
[  488.100909][ T5901] usb 3-1: Product: syz
[  488.115904][ T5901] usb 3-1: Manufacturer: syz
[  488.121567][ T5901] usb 3-1: SerialNumber: syz
[  488.123268][   T93] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  488.134234][ T5901] usb 3-1: config 0 descriptor??
[  488.144158][ T5901] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  488.319268][   T93] usb 5-1: clie_3_5_startup: get config number failed: -71
[  488.328264][   T93] visor 5-1:0.0: probe with driver visor failed with error -71
[  488.350100][ T5901] usb 3-1: clie_3_5_startup: get config number failed: -71
[  488.354139][   T93] usb 5-1: USB disconnect, device number 71
[  488.364283][ T5901] visor 3-1:0.0: probe with driver visor failed with error -71
[  488.385967][ T5901] usb 3-1: USB disconnect, device number 51
[  488.475816][   T44] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor
[  488.488185][   T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0011/input/input52
[  488.502828][ T5915] usb write operation failed. (-71)
[  488.516108][ T5915] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  488.527595][ T5915] dvbdev: DVB: registering new adapter (Terratec H7)
[  488.534400][ T5915] usb 9-1: media controller created
[  488.541083][ T5915] usb read operation failed. (-71)
[  488.547874][ T5915] usb write operation failed. (-71)
[  488.557756][ T5915] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  488.583674][ T5915] usb 9-1: USB disconnect, device number 55
[  488.634425][   T44] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  488.962208][T15783] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2809'.
[  489.072545][T15787] netlink: 'syz.2.2811': attribute type 10 has an invalid length.
[  489.175882][T15785] /dev/rnullb0: Can't open blockdev
[  489.638550][   T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  489.688779][   T93] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  489.698694][   T44] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[  489.798621][   T24] usb 5-1: Using ep0 maxpacket: 8
[  489.808365][   T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  489.817705][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.826181][   T24] usb 5-1: Product: syz
[  489.830504][   T24] usb 5-1: Manufacturer: syz
[  489.835167][   T24] usb 5-1: SerialNumber: syz
[  489.842534][   T93] usb 3-1: Using ep0 maxpacket: 16
[  489.844061][   T24] usb 5-1: config 0 descriptor??
[  489.857867][   T93] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  489.868621][   T44] usb 9-1: Using ep0 maxpacket: 16
[  489.871616][   T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.883087][   T93] usb 3-1: Product: syz
[  489.886058][   T44] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  489.887374][   T93] usb 3-1: Manufacturer: syz
[  489.903432][   T93] usb 3-1: SerialNumber: syz
[  489.907477][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.913255][   T93] usb 3-1: config 0 descriptor??
[  489.926713][   T44] usb 9-1: Product: syz
[  489.929028][   T93] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  489.942645][   T44] usb 9-1: Manufacturer: syz
[  489.947333][   T44] usb 9-1: SerialNumber: syz
[  489.961475][   T44] usb 9-1: config 0 descriptor??
[  489.971665][   T44] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  490.062876][   T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  490.125837][   T93] usb 3-1: clie_3_5_startup: get config number failed: -71
[  490.133472][   T93] visor 3-1:0.0: probe with driver visor failed with error -71
[  490.151888][   T93] usb 3-1: USB disconnect, device number 52
[  490.174537][   T44] usb 9-1: clie_3_5_startup: get config number failed: -71
[  490.190534][   T44] visor 9-1:0.0: probe with driver visor failed with error -71
[  490.204905][   T44] usb 9-1: USB disconnect, device number 56
[  490.601918][   T93] usb 4-1: USB disconnect, device number 63
[  490.775050][T15811] /dev/rnullb0: Can't open blockdev
[  491.074098][T15828] /dev/rnullb0: Can't open blockdev
[  491.158603][   T44] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  491.190148][T15832] FAULT_INJECTION: forcing a failure.
[  491.190148][T15832] name failslab, interval 1, probability 0, space 0, times 0
[  491.205211][T15832] CPU: 1 UID: 0 PID: 15832 Comm: syz.8.2829 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  491.205242][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  491.205256][T15832] Call Trace:
[  491.205276][T15832]  <TASK>
[  491.205284][T15832]  dump_stack_lvl+0x189/0x250
[  491.205312][T15832]  ? __pfx____ratelimit+0x10/0x10
[  491.205333][T15832]  ? __pfx_dump_stack_lvl+0x10/0x10
[  491.205358][T15832]  ? __pfx__printk+0x10/0x10
[  491.205393][T15832]  should_fail_ex+0x414/0x560
[  491.205423][T15832]  should_failslab+0xa8/0x100
[  491.205442][T15832]  kmem_cache_alloc_noprof+0x73/0x3c0
[  491.205467][T15832]  ? skb_clone+0x212/0x3a0
[  491.205492][T15832]  skb_clone+0x212/0x3a0
[  491.205517][T15832]  __netlink_deliver_tap+0x404/0x850
[  491.205544][T15832]  ? netlink_deliver_tap+0x2e/0x1b0
[  491.205563][T15832]  netlink_deliver_tap+0x19c/0x1b0
[  491.205582][T15832]  netlink_sendskb+0x68/0x140
[  491.205616][T15832]  netlink_rcv_skb+0x28c/0x470
[  491.205634][T15832]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  491.205654][T15832]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  491.205681][T15832]  ? netlink_deliver_tap+0x2e/0x1b0
[  491.205698][T15832]  ? netlink_deliver_tap+0x2e/0x1b0
[  491.205720][T15832]  netlink_unicast+0x75c/0x8e0
[  491.205755][T15832]  netlink_sendmsg+0x805/0xb30
[  491.205780][T15832]  ? __pfx_netlink_sendmsg+0x10/0x10
[  491.205801][T15832]  ? aa_sock_msg_perm+0xf1/0x1d0
[  491.205824][T15832]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  491.205845][T15832]  ? __pfx_netlink_sendmsg+0x10/0x10
[  491.205864][T15832]  __sock_sendmsg+0x21c/0x270
[  491.205891][T15832]  ____sys_sendmsg+0x505/0x830
[  491.205916][T15832]  ? __pfx_____sys_sendmsg+0x10/0x10
[  491.205944][T15832]  ? import_iovec+0x74/0xa0
[  491.205970][T15832]  ___sys_sendmsg+0x21f/0x2a0
[  491.205993][T15832]  ? __pfx____sys_sendmsg+0x10/0x10
[  491.206042][T15832]  ? __fget_files+0x2a/0x420
[  491.206063][T15832]  ? __fget_files+0x3a0/0x420
[  491.206092][T15832]  __x64_sys_sendmsg+0x19b/0x260
[  491.206115][T15832]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  491.206144][T15832]  ? __pfx_ksys_write+0x10/0x10
[  491.206160][T15832]  ? rcu_is_watching+0x15/0xb0
[  491.206185][T15832]  ? do_syscall_64+0xbe/0x3b0
[  491.206206][T15832]  do_syscall_64+0xfa/0x3b0
[  491.206223][T15832]  ? lockdep_hardirqs_on+0x9c/0x150
[  491.206238][T15832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.206255][T15832]  ? clear_bhb_loop+0x60/0xb0
[  491.206275][T15832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.206291][T15832] RIP: 0033:0x7effde38e929
[  491.206305][T15832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  491.206319][T15832] RSP: 002b:00007effdf1ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  491.206338][T15832] RAX: ffffffffffffffda RBX: 00007effde5b5fa0 RCX: 00007effde38e929
[  491.206350][T15832] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  491.206360][T15832] RBP: 00007effdf1ad090 R08: 0000000000000000 R09: 0000000000000000
[  491.206370][T15832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  491.206380][T15832] R13: 0000000000000000 R14: 00007effde5b5fa0 R15: 00007ffc5361ce88
[  491.206404][T15832]  </TASK>
[  491.531043][   T96] block nbd0: Possible stuck request ffff888025630000: control (read@0,1024B). Runtime 270 seconds
[  491.542645][   T96] block nbd0: Possible stuck request ffff8880256301c0: control (read@1024,1024B). Runtime 270 seconds
[  491.554063][   T96] block nbd0: Possible stuck request ffff888025630380: control (read@2048,1024B). Runtime 270 seconds
[  491.565214][   T96] block nbd0: Possible stuck request ffff888025630540: control (read@3072,1024B). Runtime 270 seconds
[  491.598589][   T44] usb 3-1: Using ep0 maxpacket: 32
[  491.608074][   T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  491.620170][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  491.631867][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  491.644463][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  491.655830][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  491.667398][ T9731] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  491.677479][   T44] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  491.686654][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.694759][   T44] usb 3-1: Product: syz
[  491.698996][   T44] usb 3-1: Manufacturer: syz
[  491.703645][   T44] usb 3-1: SerialNumber: syz
[  491.711882][   T44] usb 3-1: config 0 descriptor??
[  491.793587][   T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  491.806047][   T24] usb 5-1: USB disconnect, device number 72
[  491.828544][ T9731] usb 4-1: Using ep0 maxpacket: 16
[  491.830902][   T93] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[  491.840922][ T9731] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  491.850540][ T9731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.858701][ T9731] usb 4-1: Product: syz
[  491.862916][ T9731] usb 4-1: Manufacturer: syz
[  491.867595][ T9731] usb 4-1: SerialNumber: syz
[  491.876913][ T9731] usb 4-1: config 0 descriptor??
[  491.885758][ T9731] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  492.048718][   T93] usb 9-1: Using ep0 maxpacket: 16
[  492.058642][   T93] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  492.067792][   T93] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.082747][   T93] usb 9-1: Product: syz
[  492.086949][   T93] usb 9-1: Manufacturer: syz
[  492.088826][ T9731] usb 4-1: clie_3_5_startup: get config number failed: -71
[  492.092713][   T93] usb 9-1: SerialNumber: syz
[  492.110364][ T9731] visor 4-1:0.0: probe with driver visor failed with error -71
[  492.113810][   T93] usb 9-1: config 0 descriptor??
[  492.125230][   T44] iforce 3-1:0.0: usb_submit_urb failed: -32
[  492.137759][ T9731] usb 4-1: USB disconnect, device number 64
[  492.144476][   T44] input input53: Device does not respond to id packet M
[  492.148031][   T93] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  492.162743][   T44] iforce 3-1:0.0: usb_submit_urb failed: -32
[  492.173873][   T44] input input53: Device does not respond to id packet P
[  492.183101][   T44] input input53: Device does not respond to id packet B
[  492.362465][   T93] usb 9-1: clie_3_5_startup: get config number failed: -71
[  492.372886][T15836] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2831'.
[  492.377466][   T93] visor 9-1:0.0: probe with driver visor failed with error -71
[  492.394740][   T44] iforce 3-1:0.0: usb_submit_urb failed: -71
[  492.405949][   T93] usb 9-1: USB disconnect, device number 57
[  492.413177][   T44] input input53: Device does not respond to id packet N
[  492.414243][   T44] iforce 3-1:0.0: usb_submit_urb failed: -71
[  492.458338][   T44] iforce 3-1:0.0: usb_submit_urb failed: -71
[  492.468751][   T44] iforce 3-1:0.0: usb_submit_urb failed: -71
[  492.483319][   T44] iforce 3-1:0.0: usb_submit_urb failed: -71
[  492.497374][   T44] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input53
[  492.526027][   T44] usb 3-1: USB disconnect, device number 53
[  492.705164][T15847] NILFS (nbd3): device size too small
[  492.785874][T15851] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  492.804702][T15851] Error validating options; rc = [-22]
[  492.855605][T15853] FAULT_INJECTION: forcing a failure.
[  492.855605][T15853] name failslab, interval 1, probability 0, space 0, times 0
[  492.874130][T15853] CPU: 0 UID: 0 PID: 15853 Comm: syz.3.2838 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  492.874159][T15853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  492.874172][T15853] Call Trace:
[  492.874181][T15853]  <TASK>
[  492.874191][T15853]  dump_stack_lvl+0x189/0x250
[  492.874228][T15853]  ? __pfx____ratelimit+0x10/0x10
[  492.874250][T15853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  492.874280][T15853]  ? __pfx__printk+0x10/0x10
[  492.874317][T15853]  ? __pfx___might_resched+0x10/0x10
[  492.874343][T15853]  ? fs_reclaim_acquire+0x7d/0x100
[  492.874373][T15853]  should_fail_ex+0x414/0x560
[  492.874411][T15853]  should_failslab+0xa8/0x100
[  492.874433][T15853]  __kmalloc_noprof+0xcb/0x4f0
[  492.874470][T15853]  ? iter_file_splice_write+0x1cb/0x1000
[  492.874502][T15853]  iter_file_splice_write+0x1cb/0x1000
[  492.874558][T15853]  ? __pfx_iter_file_splice_write+0x10/0x10
[  492.874593][T15853]  ? rcu_read_lock_any_held+0xb3/0x120
[  492.874622][T15853]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  492.874652][T15853]  ? ovl_real_file_path+0x145/0x310
[  492.874688][T15853]  backing_file_splice_write+0x3c1/0x5e0
[  492.874734][T15853]  ovl_splice_write+0x3b7/0x4e0
[  492.874759][T15853]  ? __lock_acquire+0xab9/0xd20
[  492.874793][T15853]  ? __pfx_ovl_splice_write+0x10/0x10
[  492.874821][T15853]  ? __pfx_ovl_file_end_write+0x10/0x10
[  492.874851][T15853]  ? rcu_read_lock_any_held+0xb3/0x120
[  492.874894][T15853]  ? __pfx_ovl_splice_write+0x10/0x10
[  492.874923][T15853]  direct_splice_actor+0xfe/0x160
[  492.874953][T15853]  splice_direct_to_actor+0x5a8/0xcc0
[  492.875003][T15853]  ? __pfx_direct_splice_actor+0x10/0x10
[  492.875029][T15853]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  492.875068][T15853]  do_splice_direct+0x181/0x270
[  492.875096][T15853]  ? __pfx_do_splice_direct+0x10/0x10
[  492.875123][T15853]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  492.875159][T15853]  ? rw_verify_area+0x255/0x4d0
[  492.875186][T15853]  do_sendfile+0x4da/0x7e0
[  492.875226][T15853]  ? __pfx_do_sendfile+0x10/0x10
[  492.875272][T15853]  __se_sys_sendfile64+0xd9/0x190
[  492.875303][T15853]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  492.875329][T15853]  ? rcu_is_watching+0x15/0xb0
[  492.875362][T15853]  ? do_syscall_64+0xbe/0x3b0
[  492.875389][T15853]  do_syscall_64+0xfa/0x3b0
[  492.875410][T15853]  ? lockdep_hardirqs_on+0x9c/0x150
[  492.875430][T15853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.875456][T15853]  ? clear_bhb_loop+0x60/0xb0
[  492.875483][T15853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.875503][T15853] RIP: 0033:0x7f56efd8e929
[  492.875522][T15853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.875540][T15853] RSP: 002b:00007f56f0ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  492.875562][T15853] RAX: ffffffffffffffda RBX: 00007f56effb5fa0 RCX: 00007f56efd8e929
[  492.875578][T15853] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003
[  492.875591][T15853] RBP: 00007f56f0ba5090 R08: 0000000000000000 R09: 0000000000000000
[  492.875604][T15853] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002
[  492.875629][T15853] R13: 0000000000000000 R14: 00007f56effb5fa0 R15: 00007ffe4a0c5928
[  492.875661][T15853]  </TASK>
[  493.194781][    C0] vkms_vblank_simulate: vblank timer overrun
[  493.258980][ T5934] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  493.410211][ T5934] usb 5-1: Using ep0 maxpacket: 8
[  493.421687][ T5934] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  493.433238][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.441381][ T5934] usb 5-1: Product: syz
[  493.445616][ T5934] usb 5-1: Manufacturer: syz
[  493.450313][ T5934] usb 5-1: SerialNumber: syz
[  493.457934][ T5934] usb 5-1: config 0 descriptor??
[  493.509354][T15868] /dev/rnullb0: Can't open blockdev
[  493.576843][T15870] overlayfs: missing 'workdir'
[  493.618755][   T44] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[  493.667929][ T5934] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  493.768660][   T44] usb 9-1: Using ep0 maxpacket: 16
[  493.778530][   T44] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  493.787701][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.795815][   T44] usb 9-1: Product: syz
[  493.803814][   T44] usb 9-1: Manufacturer: syz
[  493.808557][   T44] usb 9-1: SerialNumber: syz
[  493.821807][   T44] usb 9-1: config 0 descriptor??
[  493.836198][   T44] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  494.036268][   T44] usb 9-1: clie_3_5_startup: get config number failed: -71
[  494.044042][   T44] visor 9-1:0.0: probe with driver visor failed with error -71
[  494.059953][   T44] usb 9-1: USB disconnect, device number 58
[  494.070290][   T93] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  494.228617][   T93] usb 4-1: Using ep0 maxpacket: 16
[  494.237752][   T93] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  494.247693][   T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.255782][   T93] usb 4-1: Product: syz
[  494.260177][   T93] usb 4-1: Manufacturer: syz
[  494.264827][   T93] usb 4-1: SerialNumber: syz
[  494.272539][   T93] usb 4-1: config 0 descriptor??
[  494.285798][   T93] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  494.428605][ T9731] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  494.484187][ T5934] usb write operation failed. (-71)
[  494.495637][   T93] usb 4-1: clie_3_5_startup: get config number failed: -71
[  494.505515][ T5934] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  494.515846][   T93] visor 4-1:0.0: probe with driver visor failed with error -71
[  494.525770][ T5934] dvbdev: DVB: registering new adapter (Terratec H7)
[  494.533694][   T93] usb 4-1: USB disconnect, device number 65
[  494.540169][ T5934] usb 5-1: media controller created
[  494.554269][ T5934] usb read operation failed. (-71)
[  494.561605][ T5934] usb write operation failed. (-71)
[  494.576418][ T5934] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  494.590020][ T9731] usb 3-1: Using ep0 maxpacket: 32
[  494.599784][ T5934] usb 5-1: USB disconnect, device number 73
[  494.612916][ T9731] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  494.636618][ T9731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  494.656033][ T9731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  494.666031][ T9731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  494.692944][ T9731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  494.707394][ T9731] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  494.716647][ T9731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.724781][ T9731] usb 3-1: Product: syz
[  494.729673][ T9731] usb 3-1: Manufacturer: syz
[  494.734290][ T9731] usb 3-1: SerialNumber: syz
[  494.743374][ T9731] usb 3-1: config 0 descriptor??
[  494.928565][   T24] usb 9-1: new full-speed USB device number 59 using dummy_hcd
[  495.101354][   T24] usb 9-1: config 255 has an invalid interface number: 75 but max is 0
[  495.118658][   T24] usb 9-1: config 255 has no interface number 0
[  495.143665][   T24] usb 9-1: config 255 interface 75 altsetting 123 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  495.165065][ T9731] iforce 3-1:0.0: usb_submit_urb failed: -32
[  495.172883][T15887] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  495.173996][   T24] usb 9-1: config 255 interface 75 has no altsetting 0
[  495.186813][ T9731] input input54: Device does not respond to id packet M
[  495.199270][ T9731] iforce 3-1:0.0: usb_submit_urb failed: -32
[  495.205645][ T9731] input input54: Device does not respond to id packet P
[  495.215459][ T9731] input input54: Device does not respond to id packet B
[  495.216774][   T24] usb 9-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice= 3.9d
[  495.238590][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.256860][   T24] usb 9-1: Product: syz
[  495.261347][   T24] usb 9-1: Manufacturer: syz
[  495.266967][   T24] usb 9-1: SerialNumber: syz
[  495.282079][T15880] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  495.417772][ T9731] iforce 3-1:0.0: usb_submit_urb failed: -71
[  495.427712][ T9731] input input54: Device does not respond to id packet N
[  495.449982][ T9731] iforce 3-1:0.0: usb_submit_urb failed: -71
[  495.456670][ T9731] iforce 3-1:0.0: usb_submit_urb failed: -71
[  495.468195][ T9731] iforce 3-1:0.0: usb_submit_urb failed: -71
[  495.477797][ T9731] iforce 3-1:0.0: usb_submit_urb failed: -71
[  495.494650][ T9731] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54
[  495.540986][ T9731] usb 3-1: USB disconnect, device number 54
[  495.576185][   T24] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state.
[  495.603335][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  495.634850][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  495.664779][   T24] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0)
[  495.685066][   T24] usb 9-1: media controller created
[  495.695928][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  495.711450][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  495.717611][   T24] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0'
[  495.737551][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input55
[  495.754184][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  495.765425][   T24] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected.
[  495.789781][   T24] usb 9-1: USB disconnect, device number 59
[  495.818166][T15900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2858'.
[  495.841311][T15900] /dev/rnullb0: Can't open blockdev
[  495.887698][   T24] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected.
[  496.238977][   T93] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  496.268373][T15918] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  496.412655][   T93] usb 4-1: Using ep0 maxpacket: 16
[  496.434079][   T93] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  496.464831][   T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.478622][   T93] usb 4-1: Product: syz
[  496.482973][   T93] usb 4-1: Manufacturer: syz
[  496.510075][   T93] usb 4-1: SerialNumber: syz
[  496.520264][T15926] netlink: 'syz.4.2869': attribute type 39 has an invalid length.
[  496.537628][   T93] usb 4-1: config 0 descriptor??
[  496.549580][   T93] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  496.751365][   T93] usb 4-1: clie_3_5_startup: get config number failed: -71
[  496.764190][   T93] visor 4-1:0.0: probe with driver visor failed with error -71
[  496.781532][   T93] usb 4-1: USB disconnect, device number 66
[  496.819781][T15937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.828773][T15937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  496.895805][T15940] netlink: 'syz.8.2874': attribute type 2 has an invalid length.
[  496.907329][T15940] netlink: 'syz.8.2874': attribute type 4 has an invalid length.
[  496.908669][    T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  496.915326][   T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  497.068739][    T9] usb 3-1: Using ep0 maxpacket: 32
[  497.076758][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  497.088704][   T24] usb 5-1: Using ep0 maxpacket: 32
[  497.089750][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  497.105445][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 25507, setting to 1024
[  497.115730][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  497.121939][    T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  497.130558][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  497.150590][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  497.152945][    T9] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  497.160475][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  497.160506][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  497.164914][   T24] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  497.207917][    T9] usb 3-1: Product: syz
[  497.209449][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.222537][    T9] usb 3-1: Manufacturer: syz
[  497.224968][   T24] usb 5-1: Product: syz
[  497.227205][    T9] usb 3-1: SerialNumber: syz
[  497.231403][   T24] usb 5-1: Manufacturer: syz
[  497.231423][   T24] usb 5-1: SerialNumber: syz
[  497.239565][   T24] usb 5-1: config 0 descriptor??
[  497.275880][    T9] usb 3-1: config 0 descriptor??
[  497.329702][    T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  497.371389][T15953] /dev/rnullb0: Can't open blockdev
[  497.505994][    T9] usb 3-1: USB disconnect, device number 55
[  497.511737][ T3554] usb 3-1: Failed to submit usb control message: -71
[  497.523322][ T3554] usb 3-1: unable to send the bmi data to the device: -71
[  497.531947][ T3554] usb 3-1: unable to get target info from device
[  497.540126][ T3554] usb 3-1: could not get target info (-71)
[  497.547218][ T3554] usb 3-1: could not probe fw (-71)
[  497.675063][   T24] iforce 5-1:0.0: usb_submit_urb failed: -32
[  497.682374][   T24] input input56: Device does not respond to id packet M
[  497.693057][   T24] iforce 5-1:0.0: usb_submit_urb failed: -32
[  497.700093][   T24] input input56: Device does not respond to id packet P
[  497.708045][   T24] input input56: Device does not respond to id packet B
[  497.838591][ T5915] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  497.923495][   T24] iforce 5-1:0.0: usb_submit_urb failed: -71
[  497.938046][   T24] input input56: Device does not respond to id packet N
[  497.945933][   T24] iforce 5-1:0.0: usb_submit_urb failed: -71
[  497.958624][   T24] iforce 5-1:0.0: usb_submit_urb failed: -71
[  497.965553][   T24] iforce 5-1:0.0: usb_submit_urb failed: -71
[  497.980470][   T24] iforce 5-1:0.0: usb_submit_urb failed: -71
[  497.988813][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  497.995199][   T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input56
[  498.003153][ T5915] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  498.034367][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.042933][   T24] usb 5-1: USB disconnect, device number 74
[  498.067564][ T5915] usb 4-1: Product: syz
[  498.083368][ T5915] usb 4-1: Manufacturer: syz
[  498.088058][ T5915] usb 4-1: SerialNumber: syz
[  498.109772][ T5915] usb 4-1: config 0 descriptor??
[  498.147195][ T5915] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  498.258336][T15975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2888'.
[  498.334396][ T5915] usb 4-1: clie_3_5_startup: get config number failed: -71
[  498.343305][ T5915] visor 4-1:0.0: probe with driver visor failed with error -71
[  498.361903][ T5915] usb 4-1: USB disconnect, device number 67
[  498.428755][ T5901] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[  498.591177][ T5901] usb 9-1: Using ep0 maxpacket: 16
[  498.606884][ T5901] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  498.625181][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.633726][ T5901] usb 9-1: Product: syz
[  498.638179][ T5901] usb 9-1: Manufacturer: syz
[  498.658374][ T5901] usb 9-1: SerialNumber: syz
[  498.673689][ T5901] usb 9-1: config 0 descriptor??
[  498.691916][ T5901] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  498.902308][ T5901] usb 9-1: clie_3_5_startup: get config number failed: -71
[  498.909792][ T5901] visor 9-1:0.0: probe with driver visor failed with error -71
[  498.928852][ T5901] usb 9-1: USB disconnect, device number 60
[  498.956912][T15986] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2893'.
[  499.044456][T15987] /dev/rnullb0: Can't open blockdev
[  499.428580][ T5915] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  499.585074][ T5915] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  499.594264][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.602801][ T5915] usb 4-1: Product: syz
[  499.607688][ T5915] usb 4-1: Manufacturer: syz
[  499.612398][ T5915] usb 4-1: SerialNumber: syz
[  499.620544][ T5915] usb 4-1: config 0 descriptor??
[  499.830986][ T5915] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22
[  499.842942][ T5915] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  499.853057][ T5915] usb 4-1: USB disconnect, device number 68
[  500.778619][ T5853] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  500.779672][ T5851] Bluetooth: hci3: command 0x1003 tx timeout
[  501.504516][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  501.512315][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  503.805278][ T5218] udevd[5218]: worker [6236] /devices/virtual/block/nbd0 timeout; kill it
[  503.815421][ T5218] udevd[5218]: seq 14934 '/devices/virtual/block/nbd0' killed
[  521.990992][   T55] block nbd0: Possible stuck request ffff888025630000: control (read@0,1024B). Runtime 300 seconds
[  522.001831][   T55] block nbd0: Possible stuck request ffff8880256301c0: control (read@1024,1024B). Runtime 300 seconds
[  522.012946][   T55] block nbd0: Possible stuck request ffff888025630380: control (read@2048,1024B). Runtime 300 seconds
[  522.025000][   T55] block nbd0: Possible stuck request ffff888025630540: control (read@3072,1024B). Runtime 300 seconds
[  525.884609][T16007] input: syz1 as /devices/virtual/input/input57
[  525.941258][T16012] /dev/rnullb0: Can't open blockdev
[  526.067202][T16018] netlink: 'syz.3.2900': attribute type 2 has an invalid length.
[  526.081208][T16018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2900'.
[  526.092275][T16018] /dev/rnullb0: Can't open blockdev
[  526.419883][T16030] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  526.449556][   T44] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  526.468790][ T5915] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  526.528994][ T5908] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[  526.610588][   T44] usb 5-1: Using ep0 maxpacket: 16
[  526.621328][   T44] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  526.630654][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.638532][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  526.639054][   T44] usb 5-1: Product: syz
[  526.651301][   T44] usb 5-1: Manufacturer: syz
[  526.654715][ T5915] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  526.655927][   T44] usb 5-1: SerialNumber: syz
[  526.668389][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.677031][   T44] usb 5-1: config 0 descriptor??
[  526.678089][ T5915] usb 4-1: Product: syz
[  526.687808][ T5915] usb 4-1: Manufacturer: syz
[  526.694632][   T44] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  526.695961][ T5915] usb 4-1: SerialNumber: syz
[  526.708980][ T5908] usb 9-1: Using ep0 maxpacket: 32
[  526.717545][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  526.729467][   T93] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  526.737688][ T5915] usb 4-1: config 0 descriptor??
[  526.744734][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  526.759122][ T5915] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  526.765769][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  526.775927][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  526.787083][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  526.803893][ T5908] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  526.813101][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.822941][ T5908] usb 9-1: Product: syz
[  526.827173][ T5908] usb 9-1: Manufacturer: syz
[  526.832209][ T5908] usb 9-1: SerialNumber: syz
[  526.843073][ T5908] usb 9-1: config 0 descriptor??
[  526.891757][   T44] usb 5-1: clie_3_5_startup: get config number failed: -71
[  526.900555][   T44] visor 5-1:0.0: probe with driver visor failed with error -71
[  526.908988][   T93] usb 3-1: Using ep0 maxpacket: 32
[  526.918868][   T44] usb 5-1: USB disconnect, device number 75
[  526.927191][   T93] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  526.941673][   T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.951822][   T93] usb 3-1: Product: syz
[  526.956104][   T93] usb 3-1: Manufacturer: syz
[  526.966107][ T5915] usb 4-1: clie_3_5_startup: get config number failed: -71
[  526.974337][   T93] usb 3-1: SerialNumber: syz
[  526.984460][ T5915] visor 4-1:0.0: probe with driver visor failed with error -71
[  526.998950][   T93] usb 3-1: config 0 descriptor??
[  527.012432][ T5915] usb 4-1: USB disconnect, device number 69
[  527.206464][   T93] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[  527.228557][   T93] 00 00 00 00 00 00 00 00 
[  527.233193][   T93] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  527.256167][   T93] usb 3-1: USB disconnect, device number 56
[  527.264918][ T5908] iforce 9-1:0.0: usb_submit_urb failed: -32
[  527.282021][ T5908] input input58: Device does not respond to id packet M
[  527.297253][ T5908] iforce 9-1:0.0: usb_submit_urb failed: -32
[  527.311980][ T5908] input input58: Device does not respond to id packet P
[  527.322107][ T5908] input input58: Device does not respond to id packet B
[  527.332761][T16037] netlink: 'syz.2.2908': attribute type 39 has an invalid length.
[  527.505706][T16042] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  527.526628][ T5908] iforce 9-1:0.0: usb_submit_urb failed: -71
[  527.540515][ T5908] input input58: Device does not respond to id packet N
[  527.552149][ T5908] iforce 9-1:0.0: usb_submit_urb failed: -71
[  527.571760][ T5908] iforce 9-1:0.0: usb_submit_urb failed: -71
[  527.583553][ T5908] iforce 9-1:0.0: usb_submit_urb failed: -71
[  527.598666][ T5908] iforce 9-1:0.0: usb_submit_urb failed: -71
[  527.607242][ T5908] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input58
[  527.643667][ T5908] usb 9-1: USB disconnect, device number 61
[  527.698538][   T93] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  527.797883][T16055] /dev/rnullb0: Can't open blockdev
[  527.806197][T16056] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2914'.
[  527.827772][T16056] /dev/rnullb0: Can't open blockdev
[  527.864905][   T93] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  527.888620][   T93] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  527.909898][   T93] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  527.931630][   T93] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  527.945855][   T93] usb 3-1: SerialNumber: syz
[  528.083821][T16064] /dev/rnullb0: Can't open blockdev
[  528.156272][T16068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  528.162582][T16039] /dev/rnullb0: Can't open blockdev
[  528.181373][   T93] usb 3-1: 0:2 : does not exist
[  528.186544][   T93] usb 3-1: unit 5: unexpected type 0x0c
[  528.206882][   T93] usb 3-1: USB disconnect, device number 57
[  528.219194][   T44] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  528.237839][T16069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  528.247912][ T6858] udevd[6858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  528.325113][T16068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  528.388572][ T5894] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[  528.408551][   T44] usb 5-1: Using ep0 maxpacket: 16
[  528.417119][   T44] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  528.428491][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.436614][   T44] usb 5-1: Product: syz
[  528.440969][   T44] usb 5-1: Manufacturer: syz
[  528.445598][   T44] usb 5-1: SerialNumber: syz
[  528.454046][   T44] usb 5-1: config 0 descriptor??
[  528.462365][   T44] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  528.538509][ T5894] usb 9-1: Using ep0 maxpacket: 16
[  528.548487][ T5894] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  528.557690][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.565823][ T5894] usb 9-1: Product: syz
[  528.571940][ T5894] usb 9-1: Manufacturer: syz
[  528.576605][ T5894] usb 9-1: SerialNumber: syz
[  528.586113][ T5894] usb 9-1: config 0 descriptor??
[  528.595684][ T5894] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  528.663378][   T44] usb 5-1: clie_3_5_startup: get config number failed: -71
[  528.673195][   T44] visor 5-1:0.0: probe with driver visor failed with error -71
[  528.690515][   T44] usb 5-1: USB disconnect, device number 76
[  528.795966][ T5894] usb 9-1: clie_3_5_startup: get config number failed: -71
[  528.815332][ T5894] visor 9-1:0.0: probe with driver visor failed with error -71
[  528.832262][ T5894] usb 9-1: USB disconnect, device number 62
[  528.891009][T16077] /dev/rnullb0: Can't open blockdev
[  528.903090][T16074] /dev/rnullb0: Can't open blockdev
[  528.961796][T16079] FAULT_INJECTION: forcing a failure.
[  528.961796][T16079] name failslab, interval 1, probability 0, space 0, times 0
[  528.975003][T16079] CPU: 1 UID: 0 PID: 16079 Comm: syz.3.2925 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  528.975032][T16079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  528.975069][T16079] Call Trace:
[  528.975078][T16079]  <TASK>
[  528.975087][T16079]  dump_stack_lvl+0x189/0x250
[  528.975140][T16079]  ? __pfx____ratelimit+0x10/0x10
[  528.975162][T16079]  ? __pfx_dump_stack_lvl+0x10/0x10
[  528.975192][T16079]  ? __pfx__printk+0x10/0x10
[  528.975229][T16079]  ? __pfx___might_resched+0x10/0x10
[  528.975254][T16079]  ? fs_reclaim_acquire+0x7d/0x100
[  528.975282][T16079]  should_fail_ex+0x414/0x560
[  528.975320][T16079]  should_failslab+0xa8/0x100
[  528.975343][T16079]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  528.975380][T16079]  ? __alloc_skb+0x112/0x2d0
[  528.975408][T16079]  __alloc_skb+0x112/0x2d0
[  528.975443][T16079]  tcp_stream_alloc_skb+0x3d/0x340
[  528.975479][T16079]  tcp_connect+0x1087/0x46f0
[  528.975516][T16079]  ? tcp_fastopen_defer_connect+0xf0/0x370
[  528.975564][T16079]  tcp_v6_connect+0x11f7/0x1870
[  528.975599][T16079]  ? __pfx_tcp_v6_connect+0x10/0x10
[  528.975621][T16079]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  528.975653][T16079]  ? look_up_lock_class+0x74/0x170
[  528.975670][T16079]  ? register_lock_class+0x51/0x320
[  528.975694][T16079]  __inet_stream_connect+0x295/0xf10
[  528.975724][T16079]  ? __local_bh_enable_ip+0x12d/0x1c0
[  528.975743][T16079]  ? __pfx___inet_stream_connect+0x10/0x10
[  528.975766][T16079]  ? __local_bh_enable_ip+0x12d/0x1c0
[  528.975784][T16079]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  528.975811][T16079]  inet_stream_connect+0x66/0xa0
[  528.975835][T16079]  __sys_connect+0x316/0x440
[  528.975851][T16079]  ? __fget_files+0x3a0/0x420
[  528.975872][T16079]  ? __pfx___sys_connect+0x10/0x10
[  528.975897][T16079]  ? __pfx_ksys_write+0x10/0x10
[  528.975912][T16079]  ? rcu_is_watching+0x15/0xb0
[  528.975937][T16079]  __x64_sys_connect+0x7a/0x90
[  528.975955][T16079]  do_syscall_64+0xfa/0x3b0
[  528.975970][T16079]  ? lockdep_hardirqs_on+0x9c/0x150
[  528.975984][T16079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.976000][T16079]  ? clear_bhb_loop+0x60/0xb0
[  528.976018][T16079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.976032][T16079] RIP: 0033:0x7f56efd8e929
[  528.976046][T16079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  528.976059][T16079] RSP: 002b:00007f56f0ba5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  528.976075][T16079] RAX: ffffffffffffffda RBX: 00007f56effb5fa0 RCX: 00007f56efd8e929
[  528.976086][T16079] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000003
[  528.976095][T16079] RBP: 00007f56f0ba5090 R08: 0000000000000000 R09: 0000000000000000
[  528.976105][T16079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.976114][T16079] R13: 0000000000000000 R14: 00007f56effb5fa0 R15: 00007ffe4a0c5928
[  528.976137][T16079]  </TASK>
[  529.286194][ T5851] Bluetooth: hci2: command 0x0406 tx timeout
[  529.680254][   T93] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  529.850382][   T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  529.864843][   T93] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  529.874722][   T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  529.888480][   T93] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  529.903331][   T93] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  529.912662][   T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.935227][   T93] usb 4-1: config 0 descriptor??
[  530.152069][   T93] hdpvr 4-1:0.0: unexpected answer of status request, len -32
[  530.161277][T16086] overlayfs: failed to decode file handle (len=1, type=0, flags=0, err=-22)
[  530.175751][   T93] hdpvr 4-1:0.0: device init failed
[  530.193031][   T93] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  530.223612][T16109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  530.236890][   T93] usb 4-1: USB disconnect, device number 70
[  530.807772][T16123] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  530.841139][   T93] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  530.887679][T16128] FAULT_INJECTION: forcing a failure.
[  530.887679][T16128] name failslab, interval 1, probability 0, space 0, times 0
[  530.905243][T16128] CPU: 1 UID: 0 PID: 16128 Comm: syz.8.2942 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  530.905272][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  530.905286][T16128] Call Trace:
[  530.905295][T16128]  <TASK>
[  530.905304][T16128]  dump_stack_lvl+0x189/0x250
[  530.905340][T16128]  ? __pfx____ratelimit+0x10/0x10
[  530.905361][T16128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  530.905390][T16128]  ? __pfx__printk+0x10/0x10
[  530.905425][T16128]  ? __pfx___might_resched+0x10/0x10
[  530.905456][T16128]  should_fail_ex+0x414/0x560
[  530.905494][T16128]  should_failslab+0xa8/0x100
[  530.905516][T16128]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  530.905549][T16128]  ? __alloc_skb+0x112/0x2d0
[  530.905577][T16128]  __alloc_skb+0x112/0x2d0
[  530.905603][T16128]  netlink_sendmsg+0x5c6/0xb30
[  530.905636][T16128]  ? __pfx_netlink_sendmsg+0x10/0x10
[  530.905662][T16128]  ? aa_sock_msg_perm+0xf1/0x1d0
[  530.905690][T16128]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  530.905716][T16128]  ? __pfx_netlink_sendmsg+0x10/0x10
[  530.905740][T16128]  __sock_sendmsg+0x21c/0x270
[  530.905775][T16128]  ____sys_sendmsg+0x505/0x830
[  530.905807][T16128]  ? __pfx_____sys_sendmsg+0x10/0x10
[  530.905842][T16128]  ? import_iovec+0x74/0xa0
[  530.905873][T16128]  ___sys_sendmsg+0x21f/0x2a0
[  530.905902][T16128]  ? __pfx____sys_sendmsg+0x10/0x10
[  530.905964][T16128]  ? __fget_files+0x2a/0x420
[  530.905991][T16128]  ? __fget_files+0x3a0/0x420
[  530.906035][T16128]  __x64_sys_sendmsg+0x19b/0x260
[  530.906061][T16128]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  530.906092][T16128]  ? __pfx_ksys_write+0x10/0x10
[  530.906120][T16128]  ? do_syscall_64+0xbe/0x3b0
[  530.906146][T16128]  do_syscall_64+0xfa/0x3b0
[  530.906165][T16128]  ? lockdep_hardirqs_on+0x9c/0x150
[  530.906185][T16128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.906205][T16128]  ? clear_bhb_loop+0x60/0xb0
[  530.906228][T16128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.906247][T16128] RIP: 0033:0x7effde38e929
[  530.906264][T16128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.906281][T16128] RSP: 002b:00007effdf1ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  530.906301][T16128] RAX: ffffffffffffffda RBX: 00007effde5b5fa0 RCX: 00007effde38e929
[  530.906315][T16128] RDX: 0000000000000850 RSI: 0000200000000240 RDI: 0000000000000003
[  530.906328][T16128] RBP: 00007effdf1ad090 R08: 0000000000000000 R09: 0000000000000000
[  530.906340][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  530.906351][T16128] R13: 0000000000000000 R14: 00007effde5b5fa0 R15: 00007ffc5361ce88
[  530.906381][T16128]  </TASK>
[  530.908573][ T5908] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  532.222991][   T93] usb 5-1: Using ep0 maxpacket: 16
[  532.245341][   T93] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  532.499448][ T5908] usb 3-1: Using ep0 maxpacket: 16
[  533.057899][ T5908] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  533.067481][   T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.087799][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.120037][   T93] usb 5-1: Product: syz
[  533.141694][ T5908] usb 3-1: Product: syz
[  533.184105][T16139] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2944'.
[  533.316086][   T93] usb 5-1: Manufacturer: syz
[  533.320838][ T5908] usb 3-1: Manufacturer: syz
[  533.325477][ T5908] usb 3-1: SerialNumber: syz
[  533.330164][   T93] usb 5-1: SerialNumber: syz
[  533.344770][ T5908] usb 3-1: config 0 descriptor??
[  533.455374][   T93] usb 5-1: config 0 descriptor??
[  533.504158][ T5908] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  533.517590][   T93] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  533.636085][   T93] usb 5-1: clie_3_5_startup: get config number failed: -71
[  533.658829][   T93] visor 5-1:0.0: probe with driver visor failed with error -71
[  533.683304][   T93] usb 5-1: USB disconnect, device number 77
[  533.718554][ T5908] usb 3-1: clie_3_5_startup: get config number failed: -71
[  533.726109][ T5908] visor 3-1:0.0: probe with driver visor failed with error -71
[  533.771897][ T5908] usb 3-1: USB disconnect, device number 58
[  533.889593][ T5894] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  533.968003][T16157] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  534.061155][ T5894] usb 4-1: Using ep0 maxpacket: 32
[  534.082792][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  534.112938][T16161] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  534.115875][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  534.153264][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  534.158537][   T93] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  534.163431][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  534.184348][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  534.200308][ T5894] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  534.209589][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.217740][ T5894] usb 4-1: Product: syz
[  534.222148][ T5894] usb 4-1: Manufacturer: syz
[  534.226783][ T5894] usb 4-1: SerialNumber: syz
[  534.245350][ T5894] usb 4-1: config 0 descriptor??
[  534.358522][   T93] usb 5-1: Using ep0 maxpacket: 16
[  534.367800][   T93] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  534.384671][   T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.392909][   T93] usb 5-1: Product: syz
[  534.397096][   T93] usb 5-1: Manufacturer: syz
[  534.401957][   T93] usb 5-1: SerialNumber: syz
[  534.412090][   T93] r8152-cfgselector 5-1: Unknown version 0x0000
[  534.427771][   T93] r8152-cfgselector 5-1: config 0 descriptor??
[  534.478675][ T5908] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  534.608516][ T5908] usb 3-1: device descriptor read/64, error -71
[  534.654895][ T5894] iforce 4-1:0.0: usb_submit_urb failed: -32
[  534.661214][ T5894] input input59: Device does not respond to id packet M
[  534.669495][ T5894] iforce 4-1:0.0: usb_submit_urb failed: -32
[  534.675680][ T5894] input input59: Device does not respond to id packet P
[  534.684411][ T5894] input input59: Device does not respond to id packet B
[  534.848934][ T5908] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  534.888650][ T5894] iforce 4-1:0.0: usb_submit_urb failed: -71
[  534.894876][ T5894] input input59: Device does not respond to id packet N
[  534.902802][ T5894] iforce 4-1:0.0: usb_submit_urb failed: -71
[  534.909958][ T5894] iforce 4-1:0.0: usb_submit_urb failed: -71
[  534.916810][ T5894] iforce 4-1:0.0: usb_submit_urb failed: -71
[  534.932419][ T5894] iforce 4-1:0.0: usb_submit_urb failed: -71
[  534.947462][ T5894] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input59
[  534.978273][ T5894] usb 4-1: USB disconnect, device number 71
[  534.978817][ T5908] usb 3-1: device descriptor read/64, error -71
[  535.097825][T16168] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  535.109826][ T5908] usb usb3-port1: attempt power cycle
[  535.458864][ T5908] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  535.468913][   T93] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[  535.479091][ T5908] usb 3-1: device descriptor read/8, error -71
[  535.619524][   T93] usb 9-1: Using ep0 maxpacket: 16
[  535.632188][   T93] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  535.641329][   T93] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.649576][   T93] usb 9-1: Product: syz
[  535.654432][   T93] usb 9-1: Manufacturer: syz
[  535.659479][   T93] usb 9-1: SerialNumber: syz
[  535.667965][   T93] usb 9-1: config 0 descriptor??
[  535.675720][   T93] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  535.682300][ T5915] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  535.718761][ T5908] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  535.749334][ T5908] usb 3-1: device descriptor read/8, error -71
[  535.839019][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  535.854026][ T5915] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  535.864002][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.872245][ T5908] usb usb3-port1: unable to enumerate USB device
[  535.878842][   T93] usb 9-1: clie_3_5_startup: get config number failed: -71
[  535.888572][ T5915] usb 4-1: Product: syz
[  535.892824][ T5915] usb 4-1: Manufacturer: syz
[  535.897446][ T5915] usb 4-1: SerialNumber: syz
[  535.902532][   T93] visor 9-1:0.0: probe with driver visor failed with error -71
[  535.916054][T16178] /dev/rnullb0: Can't open blockdev
[  535.923500][   T93] usb 9-1: USB disconnect, device number 63
[  535.930854][ T5915] usb 4-1: config 0 descriptor??
[  535.947271][ T5915] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  536.142397][ T5915] usb 4-1: clie_3_5_startup: get config number failed: -71
[  536.151587][ T5915] visor 4-1:0.0: probe with driver visor failed with error -71
[  536.168849][ T5915] usb 4-1: USB disconnect, device number 72
[  536.429177][T16180] FAULT_INJECTION: forcing a failure.
[  536.429177][T16180] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  536.444871][T16180] CPU: 0 UID: 0 PID: 16180 Comm: syz.8.2957 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  536.444900][T16180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  536.444913][T16180] Call Trace:
[  536.444921][T16180]  <TASK>
[  536.444930][T16180]  dump_stack_lvl+0x189/0x250
[  536.444963][T16180]  ? __pfx____ratelimit+0x10/0x10
[  536.444983][T16180]  ? __pfx_dump_stack_lvl+0x10/0x10
[  536.445010][T16180]  ? __pfx__printk+0x10/0x10
[  536.445050][T16180]  should_fail_ex+0x414/0x560
[  536.445085][T16180]  _copy_to_user+0x31/0xb0
[  536.445114][T16180]  simple_read_from_buffer+0xe1/0x170
[  536.445142][T16180]  proc_fail_nth_read+0x1df/0x250
[  536.445173][T16180]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  536.445205][T16180]  ? rw_verify_area+0x2a6/0x4d0
[  536.445225][T16180]  ? __lock_acquire+0xab9/0xd20
[  536.445242][T16180]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  536.445272][T16180]  vfs_read+0x1fd/0x980
[  536.445298][T16180]  ? __pfx___mutex_lock+0x10/0x10
[  536.445319][T16180]  ? __pfx_vfs_read+0x10/0x10
[  536.445341][T16180]  ? __fget_files+0x2a/0x420
[  536.445370][T16180]  ? __fget_files+0x3a0/0x420
[  536.445391][T16180]  ? __fget_files+0x2a/0x420
[  536.445423][T16180]  ksys_read+0x145/0x250
[  536.445462][T16180]  ? __pfx_ksys_read+0x10/0x10
[  536.445480][T16180]  ? rcu_is_watching+0x15/0xb0
[  536.445509][T16180]  ? do_syscall_64+0xbe/0x3b0
[  536.445535][T16180]  do_syscall_64+0xfa/0x3b0
[  536.445574][T16180]  ? lockdep_hardirqs_on+0x9c/0x150
[  536.445594][T16180]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.445614][T16180]  ? clear_bhb_loop+0x60/0xb0
[  536.445637][T16180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.445656][T16180] RIP: 0033:0x7effde38d33c
[  536.445674][T16180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  536.445691][T16180] RSP: 002b:00007effdf1ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  536.445712][T16180] RAX: ffffffffffffffda RBX: 00007effde5b5fa0 RCX: 00007effde38d33c
[  536.445727][T16180] RDX: 000000000000000f RSI: 00007effdf1ad0a0 RDI: 0000000000000004
[  536.445739][T16180] RBP: 00007effdf1ad090 R08: 0000000000000000 R09: 0000000000000000
[  536.445751][T16180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.445763][T16180] R13: 0000000000000000 R14: 00007effde5b5fa0 R15: 00007ffc5361ce88
[  536.445795][T16180]  </TASK>
[  536.683381][    C0] vkms_vblank_simulate: vblank timer overrun
[  536.941489][T16184] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2959'.
[  536.969512][ T5901] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[  536.983155][ T5915] r8152-cfgselector 5-1: USB disconnect, device number 78
[  537.155485][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  537.183434][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  537.200807][ T5901] usb 9-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  537.213953][ T5901] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.257604][ T5901] usb 9-1: config 0 descriptor??
[  537.488795][ T5915] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  537.662838][ T5915] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.5a
[  537.672440][ T5915] usb 5-1: New USB device strings: Mfr=248, Product=2, SerialNumber=3
[  537.680768][ T5915] usb 5-1: Product: syz
[  537.684956][ T5915] usb 5-1: Manufacturer: syz
[  537.690021][ T5915] usb 5-1: SerialNumber: syz
[  537.699412][ T5915] usb 5-1: config 0 descriptor??
[  537.722440][ T5901] uclogic 0003:5543:0005.0012: unknown main item tag 0x0
[  537.729801][ T5901] uclogic 0003:5543:0005.0012: unknown main item tag 0x0
[  537.736900][ T5901] uclogic 0003:5543:0005.0012: unknown main item tag 0x0
[  537.744126][ T5901] uclogic 0003:5543:0005.0012: unknown main item tag 0x0
[  537.751431][   T44] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  537.759321][ T5901] uclogic 0003:5543:0005.0012: unknown main item tag 0x0
[  537.766395][ T5901] uclogic 0003:5543:0005.0012: unknown main item tag 0x0
[  537.774540][ T5901] uclogic 0003:5543:0005.0012: unknown main item tag 0x0
[  537.785199][ T5901] uclogic 0003:5543:0005.0012: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.8-1/input0
[  537.868683][ T5908] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  537.919517][   T44] usb 4-1: Using ep0 maxpacket: 16
[  537.920276][T16182] binder: 16181:16182 ioctl c018620c 200000000540 returned -22
[  537.936875][   T44] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  537.939274][   T93] usb 9-1: USB disconnect, device number 64
[  537.948358][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.969632][   T44] usb 4-1: Product: syz
[  537.973984][   T44] usb 4-1: Manufacturer: syz
[  537.987129][   T44] usb 4-1: SerialNumber: syz
[  537.997338][   T44] usb 4-1: config 0 descriptor??
[  538.012298][   T44] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  538.029904][ T5908] usb 3-1: Using ep0 maxpacket: 16
[  538.041772][ T5908] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  538.051763][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.059952][ T5908] usb 3-1: Product: syz
[  538.064524][ T5908] usb 3-1: Manufacturer: syz
[  538.069225][ T5908] usb 3-1: SerialNumber: syz
[  538.077652][ T5908] usb 3-1: config 0 descriptor??
[  538.087474][ T5908] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  538.109844][ T5915] usb 5-1: Firmware version (0.0) predates our first public release.
[  538.118115][ T5915] usb 5-1: Please update to version 0.2 or newer
[  538.210641][   T44] usb 4-1: clie_3_5_startup: get config number failed: -71
[  538.221602][   T44] visor 4-1:0.0: probe with driver visor failed with error -71
[  538.232929][   T44] usb 4-1: USB disconnect, device number 73
[  538.286319][ T5908] usb 3-1: clie_3_5_startup: get config number failed: -71
[  538.294107][ T5908] visor 3-1:0.0: probe with driver visor failed with error -71
[  538.313722][T16189] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  538.326921][T16189] /dev/rnullb0: Can't open blockdev
[  538.328236][ T5908] usb 3-1: USB disconnect, device number 63
[  538.392902][ T5915] usb 5-1: USB disconnect, device number 79
[  538.965907][T16220] overlayfs: failed to resolve './file0': -2
[  539.035552][T16217] could not allocate digest TFM handle sha1-asm
[  539.048939][ T5915] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  539.218549][   T44] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  539.228567][ T5915] usb 4-1: Using ep0 maxpacket: 16
[  539.276491][T16227] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  539.389906][   T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  539.398028][ T5915] usb 4-1: config 0 has an invalid interface number: 126 but max is 0
[  539.409692][ T5915] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  539.428117][ T5915] usb 4-1: config 0 has no interface number 0
[  539.429035][   T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  539.465404][ T5915] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  539.487520][ T5915] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  539.487686][   T44] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  539.513632][ T5915] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  539.515062][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.540849][   T44] usb 3-1: Product: syz
[  539.545196][ T5915] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024
[  539.545675][   T44] usb 3-1: Manufacturer: syz
[  539.569034][   T44] usb 3-1: SerialNumber: syz
[  539.576861][   T44] usb 3-1: config 0 descriptor??
[  539.598040][ T5915] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  539.609083][T16220] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  539.616395][T16220] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  539.624037][ T5915] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  539.641486][ T5915] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  539.651703][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.681335][ T5915] usb 4-1: config 0 descriptor??
[  539.697340][T16215] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  539.708737][T16215] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  539.722976][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  539.854796][T16217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.877350][T16217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.903167][T16217] comedi comedi3: dt2814: I/O port conflict (0x404f27,2)
[  539.916128][T16217] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  539.927495][T16217] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  540.011544][T16215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.020589][T16215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.044538][   T93] usb 4-1: USB disconnect, device number 74
[  540.188850][ T5908] usb 5-1: new full-speed USB device number 80 using dummy_hcd
[  540.268537][ T5894] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[  540.328564][ T5908] usb 5-1: device descriptor read/64, error -71
[  540.352085][   T44] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  540.429933][ T5894] usb 9-1: Using ep0 maxpacket: 16
[  540.439010][ T5894] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  540.448155][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.456228][ T5894] usb 9-1: Product: syz
[  540.460741][ T5894] usb 9-1: Manufacturer: syz
[  540.465931][ T5894] usb 9-1: SerialNumber: syz
[  540.474700][ T5894] usb 9-1: config 0 descriptor??
[  540.484983][ T5894] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  540.551041][   T44] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  540.568673][ T5908] usb 5-1: new full-speed USB device number 81 using dummy_hcd
[  540.579057][   T44] usb 3-1: USB disconnect, device number 64
[  540.684249][ T5894] usb 9-1: clie_3_5_startup: get config number failed: -71
[  540.692692][ T5894] visor 9-1:0.0: probe with driver visor failed with error -71
[  540.707800][ T5894] usb 9-1: USB disconnect, device number 65
[  540.739507][ T5908] usb 5-1: device descriptor read/64, error -71
[  540.849956][ T5908] usb usb5-port1: attempt power cycle
[  540.927247][   T93] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  541.088501][   T93] usb 4-1: Using ep0 maxpacket: 16
[  541.097307][   T93] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  541.106657][   T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.115517][   T93] usb 4-1: Product: syz
[  541.119864][   T93] usb 4-1: Manufacturer: syz
[  541.124498][   T93] usb 4-1: SerialNumber: syz
[  541.132182][   T93] usb 4-1: config 0 descriptor??
[  541.144432][   T93] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  541.198566][ T5908] usb 5-1: new full-speed USB device number 82 using dummy_hcd
[  541.229361][ T5908] usb 5-1: device descriptor read/8, error -71
[  541.343483][   T93] usb 4-1: clie_3_5_startup: get config number failed: -71
[  541.354296][   T93] visor 4-1:0.0: probe with driver visor failed with error -71
[  541.373850][   T93] usb 4-1: USB disconnect, device number 75
[  541.471428][ T5908] usb 5-1: new full-speed USB device number 83 using dummy_hcd
[  541.501392][ T5908] usb 5-1: device descriptor read/8, error -71
[  541.546364][T16260] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2983'.
[  541.629302][ T5908] usb usb5-port1: unable to enumerate USB device
[  542.181144][   T93] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  542.348618][   T93] usb 4-1: Using ep0 maxpacket: 32
[  542.385806][   T93] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  542.416416][   T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  542.434118][   T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  542.451980][   T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  542.471946][   T93] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  542.500080][   T93] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  542.515032][   T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.523625][   T93] usb 4-1: Product: syz
[  542.528156][   T93] usb 4-1: Manufacturer: syz
[  542.532967][   T93] usb 4-1: SerialNumber: syz
[  542.549513][   T93] usb 4-1: config 0 descriptor??
[  542.648577][ T5894] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  542.798493][ T5894] usb 3-1: Using ep0 maxpacket: 16
[  542.815814][ T5894] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  542.825299][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.833476][ T5894] usb 3-1: Product: syz
[  542.837679][ T5894] usb 3-1: Manufacturer: syz
[  542.842907][ T5894] usb 3-1: SerialNumber: syz
[  542.850428][ T5894] usb 3-1: config 0 descriptor??
[  542.874196][ T5894] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  542.962665][   T93] iforce 4-1:0.0: usb_submit_urb failed: -32
[  542.969695][   T93] input input60: Device does not respond to id packet M
[  542.985405][   T93] iforce 4-1:0.0: usb_submit_urb failed: -32
[  542.991624][   T93] input input60: Device does not respond to id packet P
[  543.001864][   T93] input input60: Device does not respond to id packet B
[  543.058638][ T5901] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[  543.074075][ T5894] usb 3-1: clie_3_5_startup: get config number failed: -71
[  543.085301][ T5894] visor 3-1:0.0: probe with driver visor failed with error -71
[  543.099893][ T5894] usb 3-1: USB disconnect, device number 65
[  543.203965][   T93] iforce 4-1:0.0: usb_submit_urb failed: -71
[  543.211700][   T93] input input60: Device does not respond to id packet N
[  543.218561][ T5901] usb 9-1: Using ep0 maxpacket: 8
[  543.220548][   T93] iforce 4-1:0.0: usb_submit_urb failed: -71
[  543.232889][ T5901] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  543.234667][   T93] iforce 4-1:0.0: usb_submit_urb failed: -71
[  543.243625][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.255293][   T93] iforce 4-1:0.0: usb_submit_urb failed: -71
[  543.257449][ T5901] usb 9-1: Product: syz
[  543.266885][ T5901] usb 9-1: Manufacturer: syz
[  543.267633][   T93] iforce 4-1:0.0: usb_submit_urb failed: -71
[  543.279396][ T5901] usb 9-1: SerialNumber: syz
[  543.281436][   T93] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input60
[  543.290219][ T5901] usb 9-1: config 0 descriptor??
[  543.305371][   T44] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  543.329927][   T93] usb 4-1: USB disconnect, device number 76
[  543.478651][   T44] usb 5-1: Using ep0 maxpacket: 16
[  543.489805][   T44] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  543.499510][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.507571][   T44] usb 5-1: Product: syz
[  543.516905][   T44] usb 5-1: Manufacturer: syz
[  543.521785][   T44] usb 5-1: SerialNumber: syz
[  543.527227][ T5901] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  543.538481][   T44] usb 5-1: config 0 descriptor??
[  543.549528][   T44] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  543.761207][   T44] usb 5-1: clie_3_5_startup: get config number failed: -71
[  543.761374][   T44] visor 5-1:0.0: probe with driver visor failed with error -71
[  543.790777][   T44] usb 5-1: USB disconnect, device number 84
[  543.915570][T16294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2997'.
[  544.007100][T16296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2998'.
[  544.568650][   T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  544.578623][ T5915] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  544.728621][ T5915] usb 5-1: Using ep0 maxpacket: 32
[  544.728621][   T24] usb 4-1: Using ep0 maxpacket: 16
[  544.743177][   T24] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  544.747915][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  544.752815][ T5901] usb write operation failed. (-71)
[  544.770765][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.772175][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  544.779225][   T24] usb 4-1: Product: syz
[  544.794578][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  544.797792][   T24] usb 4-1: Manufacturer: syz
[  544.804853][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  544.811392][ T5901] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  544.831185][   T24] usb 4-1: SerialNumber: syz
[  544.832573][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  544.838645][ T5901] dvbdev: DVB: registering new adapter (Terratec H7)
[  544.855744][   T24] usb 4-1: config 0 descriptor??
[  544.861629][ T5901] usb 9-1: media controller created
[  544.867320][ T5915] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  544.869582][   T24] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  544.885713][ T5901] usb read operation failed. (-71)
[  544.887100][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.891911][ T5901] usb write operation failed. (-71)
[  544.904292][ T5915] usb 5-1: Product: syz
[  544.908788][ T5915] usb 5-1: Manufacturer: syz
[  544.913616][ T5915] usb 5-1: SerialNumber: syz
[  544.916373][ T5901] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  544.927833][ T5915] usb 5-1: config 0 descriptor??
[  544.944581][ T5901] usb 9-1: USB disconnect, device number 66
[  545.090888][   T24] usb 4-1: clie_3_5_startup: get config number failed: -71
[  545.109214][   T24] visor 4-1:0.0: probe with driver visor failed with error -71
[  545.137455][   T24] usb 4-1: USB disconnect, device number 77
[  545.271902][T16319] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  545.356224][ T5915] iforce 5-1:0.0: usb_submit_urb failed: -32
[  545.362940][ T5915] input input61: Device does not respond to id packet M
[  545.377106][ T5915] iforce 5-1:0.0: usb_submit_urb failed: -32
[  545.386492][ T5915] input input61: Device does not respond to id packet P
[  545.402369][ T5915] input input61: Device does not respond to id packet B
[  545.604578][ T5915] iforce 5-1:0.0: usb_submit_urb failed: -71
[  545.627415][ T5915] input input61: Device does not respond to id packet N
[  545.638371][ T5915] iforce 5-1:0.0: usb_submit_urb failed: -71
[  545.646786][ T5915] iforce 5-1:0.0: usb_submit_urb failed: -71
[  545.656985][ T5915] iforce 5-1:0.0: usb_submit_urb failed: -71
[  545.662803][   T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  545.670109][ T5915] iforce 5-1:0.0: usb_submit_urb failed: -71
[  545.684241][ T5915] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input61
[  545.714752][ T5915] usb 5-1: USB disconnect, device number 85
[  545.823862][   T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  545.833093][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.844959][   T24] usb 3-1: config 0 descriptor??
[  545.853119][   T24] cp210x 3-1:0.0: cp210x converter detected
[  545.931879][ T5901] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  546.118561][ T5901] usb 4-1: Using ep0 maxpacket: 32
[  546.127829][ T5901] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 248, changing to 11
[  546.139211][ T5901] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  546.157562][ T5901] usb 4-1: config 1 interface 0 has no altsetting 0
[  546.168292][ T5901] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40
[  546.181250][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.189793][ T5901] usb 4-1: Product: syz
[  546.194319][ T5901] usb 4-1: Manufacturer: Щ
[  546.204028][ T5901] usb 4-1: SerialNumber: syz
[  546.252965][T16330] netlink: 'syz.4.3012': attribute type 2 has an invalid length.
[  546.261714][   T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  546.272519][T16330] netlink: 'syz.4.3012': attribute type 4 has an invalid length.
[  546.444999][ T5901] usbhid 4-1:1.0: can't add hid device: -71
[  546.451397][ T5901] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  546.471534][ T5901] usb 4-1: USB disconnect, device number 78
[  546.492506][   T24] usb 3-1: cp210x converter now attached to ttyUSB0
[  546.539089][   T44] usb 9-1: new high-speed USB device number 67 using dummy_hcd
[  546.708667][   T44] usb 9-1: Using ep0 maxpacket: 16
[  546.719289][   T44] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  546.728914][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.736944][   T44] usb 9-1: Product: syz
[  546.744469][   T44] usb 9-1: Manufacturer: syz
[  546.749508][   T44] usb 9-1: SerialNumber: syz
[  546.759465][   T44] usb 9-1: config 0 descriptor??
[  546.768538][   T24] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  546.790436][   T44] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  546.893400][ T5915] usb 3-1: USB disconnect, device number 66
[  546.910808][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  546.941736][ T5915] cp210x 3-1:0.0: device disconnected
[  546.949106][   T24] usb 5-1: Using ep0 maxpacket: 8
[  546.977675][   T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  546.987120][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.996138][   T24] usb 5-1: Product: syz
[  547.000909][   T24] usb 5-1: Manufacturer: syz
[  547.010477][   T44] usb 9-1: clie_3_5_startup: get config number failed: -71
[  547.021405][   T24] usb 5-1: SerialNumber: syz
[  547.029155][   T44] visor 9-1:0.0: probe with driver visor failed with error -71
[  547.037902][   T24] usb 5-1: config 0 descriptor??
[  547.053255][   T44] usb 9-1: USB disconnect, device number 67
[  547.271008][   T24] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  547.746831][T16351] loop8: detected capacity change from 0 to 7
[  547.760600][ T6858] Dev loop8: unable to read RDB block 7
[  547.766648][ T6858]  loop8: unable to read partition table
[  547.780703][ T6858] loop8: partition table beyond EOD, truncated
[  547.795820][T16351] Dev loop8: unable to read RDB block 7
[  547.808492][T16351]  loop8: unable to read partition table
[  547.809095][T16353] /dev/rnullb0: Can't open blockdev
[  547.814668][T16351] loop8: partition table beyond EOD, 
[  547.824456][   T44] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  547.846095][T16351] truncated
[  547.854852][T16351] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  547.998555][   T44] usb 3-1: Using ep0 maxpacket: 16
[  548.006180][   T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  548.032799][   T44] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  548.047927][   T44] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  548.057714][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  548.065846][   T44] usb 3-1: SerialNumber: syz
[  548.269760][ T5901] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  548.306302][T16349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.316045][T16349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.448534][ T5901] usb 4-1: Using ep0 maxpacket: 32
[  548.455735][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  548.467455][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  548.478654][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  548.488600][   T24] usb write operation failed. (-71)
[  548.496043][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  548.498868][ T5908] usb 9-1: new full-speed USB device number 68 using dummy_hcd
[  548.508708][   T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  548.525362][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  548.537153][   T24] dvbdev: DVB: registering new adapter (Terratec H7)
[  548.545323][   T24] usb 5-1: media controller created
[  548.551575][   T24] usb read operation failed. (-71)
[  548.557939][   T24] usb write operation failed. (-71)
[  548.564167][ T5901] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  548.574607][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.584856][   T24] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  548.594009][ T5901] usb 4-1: Product: syz
[  548.598206][ T5901] usb 4-1: Manufacturer: syz
[  548.605933][   T24] usb 5-1: USB disconnect, device number 86
[  548.611955][ T5901] usb 4-1: SerialNumber: syz
[  548.632648][ T5901] usb 4-1: config 0 descriptor??
[  548.682002][ T5908] usb 9-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  548.692912][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  548.705630][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 30768, setting to 64
[  548.717139][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  548.737648][ T5908] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  548.753978][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  548.763298][ T5908] usb 9-1: Product: syz
[  548.767504][ T5908] usb 9-1: Manufacturer: syz
[  548.772468][ T5908] usb 9-1: SerialNumber: syz
[  548.780984][ T5908] usb 9-1: config 0 descriptor??
[  549.047863][ T5901] iforce 4-1:0.0: usb_submit_urb failed: -32
[  549.059458][ T5901] input input62: Device does not respond to id packet M
[  549.067982][ T5901] iforce 4-1:0.0: usb_submit_urb failed: -32
[  549.082997][ T5901] input input62: Device does not respond to id packet P
[  549.099504][ T5908] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  549.101630][ T5901] input input62: Device does not respond to id packet B
[  549.113365][ T5908] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  549.258824][   T24] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  549.304814][ T5901] iforce 4-1:0.0: usb_submit_urb failed: -71
[  549.316157][ T5901] input input62: Device does not respond to id packet N
[  549.325798][ T5908] radio-si470x 9-1:0.0: software version 0, hardware version 0
[  549.334795][ T5901] iforce 4-1:0.0: usb_submit_urb failed: -71
[  549.335572][ T5908] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  549.347324][ T5901] iforce 4-1:0.0: usb_submit_urb failed: -71
[  549.359571][ T5908] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  549.374932][T16377] /dev/rnullb0: Can't open blockdev
[  549.405024][ T5901] iforce 4-1:0.0: usb_submit_urb failed: -71
[  549.415759][ T5901] iforce 4-1:0.0: usb_submit_urb failed: -71
[  549.428893][   T24] usb 5-1: Using ep0 maxpacket: 16
[  549.443471][   T24] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  549.463414][ T5901] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input62
[  549.475618][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.490705][   T24] usb 5-1: Product: syz
[  549.494992][   T24] usb 5-1: Manufacturer: syz
[  549.507235][   T24] usb 5-1: SerialNumber: syz
[  549.526378][ T5901] usb 4-1: USB disconnect, device number 79
[  549.535758][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.539860][   T24] usb 5-1: config 0 descriptor??
[  549.542630][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.555483][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.559568][   T24] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  549.565246][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.575601][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.582805][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.590376][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.598153][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.605269][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.613337][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.620344][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.627195][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.634036][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.640710][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.647349][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.654009][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.661268][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.667920][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.674610][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.681495][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.688309][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.694952][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.701600][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.708234][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.714908][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.721651][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.728307][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.735037][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.741723][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.748337][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.754982][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.761629][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.768271][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.774236][   T24] usb 5-1: clie_3_5_startup: get config number failed: -71
[  549.775138][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.787019][T16363] /dev/rnullb0: Can't open blockdev
[  549.788993][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.800658][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.807316][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.814029][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.820675][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.827337][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.833983][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.840642][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.840833][   T24] visor 5-1:0.0: probe with driver visor failed with error -71
[  549.847323][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.861553][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.868216][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.874940][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.881547][ T5908] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71
[  549.881672][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.891648][T16382] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3031'.
[  549.906406][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.907213][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.913820][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.920619][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.927196][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.933969][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.940600][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.943321][   T24] usb 5-1: USB disconnect, device number 87
[  549.947177][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.966360][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.973005][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.978726][T16382] IPv6: NLM_F_CREATE should be specified when creating new route
[  549.979717][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  549.994338][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.001238][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.007884][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.014523][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.021157][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.027790][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.034467][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.037577][T16382] IPv6: Can't replace route, no match found
[  550.041158][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.053684][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.060492][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.067131][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.074012][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.080713][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.087389][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.094709][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.101661][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.108313][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.114965][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.121594][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.128249][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.134872][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.141506][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.148130][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.154758][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.161380][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.168009][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.174628][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.181255][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.187904][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.196081][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.203072][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.209721][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.216370][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.223263][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.229963][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.236608][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.243279][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.249941][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.256570][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.263243][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.269865][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.276665][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.283301][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.289948][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.297122][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.303762][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.310398][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.317052][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.323697][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.330372][    C0] radio-si470x 9-1:0.0: non-zero urb status (-71)
[  550.337539][ T5908] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22
[  550.362995][ T5908] usb 9-1: USB disconnect, device number 68
[  550.519107][T16392] loop8: detected capacity change from 0 to 7
[  550.543766][T16392] Dev loop8: unable to read RDB block 7
[  550.551369][T16392]  loop8: unable to read partition table
[  550.557416][T16392] loop8: partition table beyond EOD, truncated
[  550.564236][T16392] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  550.570904][T16388] /dev/rnullb0: Can't open blockdev
[  550.802462][T16402] tipc: Started in network mode
[  550.807575][T16402] tipc: Node identity 8, cluster identity 4711
[  550.850135][T16402] tipc: Node number set to 8
[  550.862388][T16402] tipc: Cannot configure node identity twice
[  550.962971][T16406] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  551.017831][T16406] FAULT_INJECTION: forcing a failure.
[  551.017831][T16406] name failslab, interval 1, probability 0, space 0, times 0
[  551.034798][T16406] CPU: 1 UID: 0 PID: 16406 Comm: syz.2.3040 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  551.034839][T16406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  551.034856][T16406] Call Trace:
[  551.034865][T16406]  <TASK>
[  551.034873][T16406]  dump_stack_lvl+0x189/0x250
[  551.034908][T16406]  ? __pfx____ratelimit+0x10/0x10
[  551.034931][T16406]  ? __pfx_dump_stack_lvl+0x10/0x10
[  551.034960][T16406]  ? __pfx__printk+0x10/0x10
[  551.035015][T16406]  ? __pfx___might_resched+0x10/0x10
[  551.035042][T16406]  ? fs_reclaim_acquire+0x7d/0x100
[  551.035071][T16406]  should_fail_ex+0x414/0x560
[  551.035125][T16406]  should_failslab+0xa8/0x100
[  551.035147][T16406]  __kmalloc_noprof+0xcb/0x4f0
[  551.035176][T16406]  ? kfree+0x4d/0x440
[  551.035201][T16406]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  551.035235][T16406]  tomoyo_realpath_from_path+0xe3/0x5d0
[  551.035265][T16406]  ? tomoyo_domain+0xd9/0x130
[  551.035299][T16406]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  551.035321][T16406]  tomoyo_path_number_perm+0x1e8/0x5a0
[  551.035348][T16406]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  551.035371][T16406]  ? register_lock_class+0x51/0x320
[  551.035433][T16406]  ? chmod_common+0x161/0x400
[  551.035458][T16406]  ? down_write_killable+0x178/0x230
[  551.035487][T16406]  ? __pfx_down_write_killable+0x10/0x10
[  551.035510][T16406]  ? mnt_get_write_access+0x223/0x2a0
[  551.035549][T16406]  security_path_chmod+0x136/0x350
[  551.035586][T16406]  chmod_common+0x182/0x400
[  551.035619][T16406]  ? __pfx_chmod_common+0x10/0x10
[  551.035645][T16406]  ? kasan_quarantine_put+0xdd/0x220
[  551.035683][T16406]  ? user_path_at+0x44/0x60
[  551.035699][T16406]  ? kmem_cache_free+0x18f/0x400
[  551.035741][T16406]  do_fchmodat+0x12d/0x200
[  551.035763][T16406]  ? __pfx_do_fchmodat+0x10/0x10
[  551.035783][T16406]  ? __pfx_ksys_write+0x10/0x10
[  551.035803][T16406]  ? rcu_is_watching+0x15/0xb0
[  551.035839][T16406]  __x64_sys_chmod+0x62/0x70
[  551.035866][T16406]  do_syscall_64+0xfa/0x3b0
[  551.035887][T16406]  ? lockdep_hardirqs_on+0x9c/0x150
[  551.035906][T16406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.035926][T16406]  ? clear_bhb_loop+0x60/0xb0
[  551.035951][T16406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.035970][T16406] RIP: 0033:0x7f771158e929
[  551.035988][T16406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  551.036005][T16406] RSP: 002b:00007f771235c038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a
[  551.036026][T16406] RAX: ffffffffffffffda RBX: 00007f77117b5fa0 RCX: 00007f771158e929
[  551.036041][T16406] RDX: 0000000000000000 RSI: 0000000000000042 RDI: 0000200000000000
[  551.036054][T16406] RBP: 00007f771235c090 R08: 0000000000000000 R09: 0000000000000000
[  551.036067][T16406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  551.036079][T16406] R13: 0000000000000000 R14: 00007f77117b5fa0 R15: 00007ffe41203558
[  551.036111][T16406]  </TASK>
[  551.036142][T16406] ERROR: Out of memory at tomoyo_realpath_from_path.
[  551.319265][ T5908] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  551.427933][T16418] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3044'.
[  551.479123][T16420] /dev/rnullb0: Can't open blockdev
[  551.499606][T16420] /dev/rnullb0: Can't open blockdev
[  551.515967][T16420] /dev/rnullb0: Can't open blockdev
[  551.526132][T16420] /dev/rnullb0: Can't open blockdev
[  551.538529][ T5908] usb 5-1: Using ep0 maxpacket: 16
[  551.552360][ T5908] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  551.568588][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.586842][ T5908] usb 5-1: Product: syz
[  551.617374][ T5908] usb 5-1: Manufacturer: syz
[  551.622389][ T5908] usb 5-1: SerialNumber: syz
[  551.642692][ T5908] usb 5-1: config 0 descriptor??
[  551.659166][ T5908] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  551.674396][T16427] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  551.862596][ T5908] usb 5-1: clie_3_5_startup: get config number failed: -71
[  551.882007][ T5908] visor 5-1:0.0: probe with driver visor failed with error -71
[  551.893718][ T5908] usb 5-1: USB disconnect, device number 88
[  552.002864][T16436] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  552.080037][   T55] block nbd0: Possible stuck request ffff888025630000: control (read@0,1024B). Runtime 330 seconds
[  552.080654][T16440] FAULT_INJECTION: forcing a failure.
[  552.080654][T16440] name failslab, interval 1, probability 0, space 0, times 0
[  552.091047][   T55] block nbd0: Possible stuck request ffff8880256301c0: control (read@1024,1024B). Runtime 330 seconds
[  552.091080][   T55] block nbd0: Possible stuck request ffff888025630380: control (read@2048,1024B). Runtime 330 seconds
[  552.091108][   T55] block nbd0: Possible stuck request ffff888025630540: control (read@3072,1024B). Runtime 330 seconds
[  552.137688][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'.
[  552.147763][T16440] CPU: 0 UID: 0 PID: 16440 Comm: syz.3.3051 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  552.147792][T16440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  552.147819][T16440] Call Trace:
[  552.147827][T16440]  <TASK>
[  552.147836][T16440]  dump_stack_lvl+0x189/0x250
[  552.147889][T16440]  ? __pfx____ratelimit+0x10/0x10
[  552.147910][T16440]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.147941][T16440]  ? __pfx__printk+0x10/0x10
[  552.147977][T16440]  ? __pfx___might_resched+0x10/0x10
[  552.148010][T16440]  should_fail_ex+0x414/0x560
[  552.148048][T16440]  should_failslab+0xa8/0x100
[  552.148071][T16440]  __kmalloc_noprof+0xcb/0x4f0
[  552.148112][T16440]  ? ovl_cache_entry_new+0x49/0x820
[  552.148138][T16440]  ovl_cache_entry_new+0x49/0x820
[  552.148168][T16440]  ovl_fill_merge+0x3a9/0x800
[  552.148194][T16440]  ? __pfx_ovl_fill_merge+0x10/0x10
[  552.148214][T16440]  offset_readdir+0x1e6/0x560
[  552.148235][T16440]  ? down_read_killable+0x1d1/0x350
[  552.148265][T16440]  iterate_dir+0x399/0x570
[  552.148293][T16440]  ovl_dir_read+0x146/0x5f0
[  552.148323][T16440]  ? __pfx_ovl_dir_read+0x10/0x10
[  552.148340][T16440]  ? ovl_path_upper+0x105/0x170
[  552.148370][T16440]  ? ovl_path_next+0x3b8/0x470
[  552.148399][T16440]  ovl_dir_read_merged+0x19d/0x360
[  552.148438][T16440]  ? __pfx_ovl_dir_read_merged+0x10/0x10
[  552.148481][T16440]  ? __pfx_ovl_fill_merge+0x10/0x10
[  552.148512][T16440]  ? __kasan_kmalloc+0x93/0xb0
[  552.148546][T16440]  ? ovl_iterate+0xcf6/0x1f40
[  552.148569][T16440]  ovl_iterate+0xdbd/0x1f40
[  552.148588][T16440]  ? __lock_acquire+0xab9/0xd20
[  552.148630][T16440]  ? __pfx_ovl_iterate+0x10/0x10
[  552.148650][T16440]  ? aa_file_perm+0x13e/0x11b0
[  552.148696][T16440]  ? __lock_acquire+0xab9/0xd20
[  552.148730][T16440]  ? wrap_directory_iterator+0x5a/0xe0
[  552.148767][T16440]  ? down_write+0x162/0x1f0
[  552.148790][T16440]  ? __pfx_down_write+0x10/0x10
[  552.148814][T16440]  ? wrap_directory_iterator+0x52/0xe0
[  552.148836][T16440]  ? __pfx_ovl_iterate+0x10/0x10
[  552.148857][T16440]  wrap_directory_iterator+0x96/0xe0
[  552.148882][T16440]  iterate_dir+0x399/0x570
[  552.148909][T16440]  __se_sys_getdents+0xe4/0x250
[  552.148934][T16440]  ? __pfx___se_sys_getdents+0x10/0x10
[  552.148953][T16440]  ? ksys_write+0x22a/0x250
[  552.148973][T16440]  ? __pfx_filldir+0x10/0x10
[  552.148996][T16440]  ? __pfx_ksys_write+0x10/0x10
[  552.149025][T16440]  ? do_syscall_64+0xbe/0x3b0
[  552.149051][T16440]  do_syscall_64+0xfa/0x3b0
[  552.149071][T16440]  ? lockdep_hardirqs_on+0x9c/0x150
[  552.149091][T16440]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.149111][T16440]  ? clear_bhb_loop+0x60/0xb0
[  552.149136][T16440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.149155][T16440] RIP: 0033:0x7f56efd8e929
[  552.149173][T16440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  552.149190][T16440] RSP: 002b:00007f56f0b84038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  552.149211][T16440] RAX: ffffffffffffffda RBX: 00007f56effb6080 RCX: 00007f56efd8e929
[  552.149226][T16440] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000003
[  552.149239][T16440] RBP: 00007f56f0b84090 R08: 0000000000000000 R09: 0000000000000000
[  552.149252][T16440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.149263][T16440] R13: 0000000000000001 R14: 00007f56effb6080 R15: 00007ffe4a0c5928
[  552.149295][T16440]  </TASK>
[  552.484162][    C0] vkms_vblank_simulate: vblank timer overrun
[  552.729660][T16449] FAULT_INJECTION: forcing a failure.
[  552.729660][T16449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  552.743749][T16449] CPU: 0 UID: 0 PID: 16449 Comm: syz.3.3055 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  552.743779][T16449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  552.743793][T16449] Call Trace:
[  552.743802][T16449]  <TASK>
[  552.743811][T16449]  dump_stack_lvl+0x189/0x250
[  552.743847][T16449]  ? __pfx____ratelimit+0x10/0x10
[  552.743870][T16449]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.743900][T16449]  ? __pfx__printk+0x10/0x10
[  552.743931][T16449]  ? __might_fault+0xb0/0x130
[  552.743975][T16449]  should_fail_ex+0x414/0x560
[  552.744014][T16449]  _copy_from_user+0x2d/0xb0
[  552.744046][T16449]  ___sys_sendmsg+0x158/0x2a0
[  552.744077][T16449]  ? __pfx____sys_sendmsg+0x10/0x10
[  552.744142][T16449]  ? __fget_files+0x2a/0x420
[  552.744169][T16449]  ? __fget_files+0x3a0/0x420
[  552.744215][T16449]  __x64_sys_sendmsg+0x19b/0x260
[  552.744245][T16449]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  552.744283][T16449]  ? __pfx_ksys_write+0x10/0x10
[  552.744304][T16449]  ? rcu_is_watching+0x15/0xb0
[  552.744338][T16449]  ? do_syscall_64+0xbe/0x3b0
[  552.744366][T16449]  do_syscall_64+0xfa/0x3b0
[  552.744387][T16449]  ? lockdep_hardirqs_on+0x9c/0x150
[  552.744408][T16449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.744429][T16449]  ? clear_bhb_loop+0x60/0xb0
[  552.744454][T16449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.744480][T16449] RIP: 0033:0x7f56efd8e929
[  552.744498][T16449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  552.744516][T16449] RSP: 002b:00007f56f0ba5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  552.744538][T16449] RAX: ffffffffffffffda RBX: 00007f56effb5fa0 RCX: 00007f56efd8e929
[  552.744554][T16449] RDX: 0000000000000850 RSI: 0000200000000240 RDI: 0000000000000003
[  552.744567][T16449] RBP: 00007f56f0ba5090 R08: 0000000000000000 R09: 0000000000000000
[  552.744579][T16449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.744592][T16449] R13: 0000000000000000 R14: 00007f56effb5fa0 R15: 00007ffe4a0c5928
[  552.744624][T16449]  </TASK>
[  552.955372][    C0] vkms_vblank_simulate: vblank timer overrun
[  553.153797][T16461] sp0: Synchronizing with TNC
[  553.187932][T16461] /dev/rnullb0: Can't open blockdev
[  553.209527][T16461] /dev/rnullb0: Can't open blockdev
[  553.215473][T16461] /dev/rnullb0: Can't open blockdev
[  553.218631][   T44] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  553.270609][   T44] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[  553.274522][T16465] /dev/rnullb0: Can't open blockdev
[  553.277085][   T44] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  553.284060][T16461] /dev/rnullb0: Can't open blockdev
[  553.529390][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3065'.
[  553.716184][T16480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.726988][T16480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.241602][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3075'.
[  554.345274][T16498] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3077'.
[  554.435211][T16501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.474037][T16501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.869011][ T5908] usb 4-1: new full-speed USB device number 80 using dummy_hcd
[  554.885780][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3084'.
[  555.030936][ T5908] usb 4-1: config 255 has an invalid interface number: 75 but max is 0
[  555.039577][ T5908] usb 4-1: config 255 has no interface number 0
[  555.045895][ T5908] usb 4-1: config 255 interface 75 altsetting 123 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  555.058210][ T5908] usb 4-1: config 255 interface 75 has no altsetting 0
[  555.069321][ T5908] usb 4-1: New USB device found, idVendor=06e1, idProduct=a334, bcdDevice= 3.9d
[  555.078728][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.086746][ T5908] usb 4-1: Product: syz
[  555.091951][ T5908] usb 4-1: Manufacturer: syz
[  555.096591][ T5908] usb 4-1: SerialNumber: syz
[  555.107871][T16510] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  555.178696][ T5915] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  555.212829][T16527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.223114][T16527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.328515][ T5915] usb 5-1: Using ep0 maxpacket: 16
[  555.343185][ T5915] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  555.352885][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.361703][ T5915] usb 5-1: Product: syz
[  555.366156][ T5915] usb 5-1: Manufacturer: syz
[  555.376260][ T5915] usb 5-1: SerialNumber: syz
[  555.386195][ T5908] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in warm state.
[  555.396260][ T5908] dvb-usb: bulk message failed: -22 (3/0)
[  555.403176][ T5915] usb 5-1: config 0 descriptor??
[  555.411254][ T5915] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  555.424288][ T5908] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  555.433794][ T5908] dvbdev: DVB: registering new adapter (KWorld/ADSTech Instant DVB-T USB2.0)
[  555.442807][ T5908] usb 4-1: media controller created
[  555.450608][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  555.466213][ T5908] dvb-usb: bulk message failed: -22 (6/0)
[  555.472162][ T5908] dvb-usb: no frontend was attached by 'KWorld/ADSTech Instant DVB-T USB2.0'
[  555.484637][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input63
[  555.498167][ T5908] dvb-usb: schedule remote query interval to 150 msecs.
[  555.505320][ T5908] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully initialized and connected.
[  555.524824][ T5908] usb 4-1: USB disconnect, device number 80
[  555.597291][ T5908] dvb-usb: KWorld/ADSTech Instant DVB-T USB2.0 successfully deinitialized and disconnected.
[  555.627664][ T5915] usb 5-1: clie_3_5_startup: get config number failed: -71
[  555.643324][ T5915] visor 5-1:0.0: probe with driver visor failed with error -71
[  555.667440][ T5915] usb 5-1: USB disconnect, device number 89
[  555.967627][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3093'.
[  556.038067][T16541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.053041][T16541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.439011][ T5915] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  556.501262][T16556] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  556.527822][T16556] /dev/rnullb0: Can't open blockdev
[  556.589965][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  556.607740][ T5915] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  556.618299][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.635510][ T5915] usb 4-1: Product: syz
[  556.640127][ T5915] usb 4-1: Manufacturer: syz
[  556.646886][ T5915] usb 4-1: SerialNumber: syz
[  556.657275][ T5915] usb 4-1: config 0 descriptor??
[  556.660366][T16558] FAULT_INJECTION: forcing a failure.
[  556.660366][T16558] name failslab, interval 1, probability 0, space 0, times 0
[  556.679425][T16558] CPU: 1 UID: 0 PID: 16558 Comm: syz.4.3103 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  556.679453][T16558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  556.679466][T16558] Call Trace:
[  556.679475][T16558]  <TASK>
[  556.679485][T16558]  dump_stack_lvl+0x189/0x250
[  556.679519][T16558]  ? __pfx____ratelimit+0x10/0x10
[  556.679541][T16558]  ? __pfx_dump_stack_lvl+0x10/0x10
[  556.679571][T16558]  ? __pfx__printk+0x10/0x10
[  556.679607][T16558]  ? __pfx___might_resched+0x10/0x10
[  556.679634][T16558]  ? fs_reclaim_acquire+0x7d/0x100
[  556.679667][T16558]  should_fail_ex+0x414/0x560
[  556.679705][T16558]  should_failslab+0xa8/0x100
[  556.679728][T16558]  __kmalloc_noprof+0xcb/0x4f0
[  556.679758][T16558]  ? iter_file_splice_write+0x1cb/0x1000
[  556.679789][T16558]  iter_file_splice_write+0x1cb/0x1000
[  556.679849][T16558]  ? __pfx_iter_file_splice_write+0x10/0x10
[  556.679881][T16558]  ? rcu_read_lock_any_held+0xb3/0x120
[  556.679911][T16558]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  556.679941][T16558]  ? ovl_real_file_path+0x145/0x310
[  556.679975][T16558]  backing_file_splice_write+0x3c1/0x5e0
[  556.680007][T16558]  ovl_splice_write+0x3b7/0x4e0
[  556.680024][T16558]  ? __lock_acquire+0xab9/0xd20
[  556.680044][T16558]  ? __pfx_ovl_splice_write+0x10/0x10
[  556.680069][T16558]  ? __pfx_ovl_file_end_write+0x10/0x10
[  556.680097][T16558]  ? rcu_read_lock_any_held+0xb3/0x120
[  556.680139][T16558]  ? __pfx_ovl_splice_write+0x10/0x10
[  556.680159][T16558]  direct_splice_actor+0xfe/0x160
[  556.680180][T16558]  splice_direct_to_actor+0x5a8/0xcc0
[  556.680214][T16558]  ? __pfx_direct_splice_actor+0x10/0x10
[  556.680241][T16558]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  556.680278][T16558]  do_splice_direct+0x181/0x270
[  556.680305][T16558]  ? __pfx_do_splice_direct+0x10/0x10
[  556.680324][T16558]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  556.680349][T16558]  ? rw_verify_area+0x255/0x4d0
[  556.680367][T16558]  do_sendfile+0x4da/0x7e0
[  556.680409][T16558]  ? __pfx_do_sendfile+0x10/0x10
[  556.680451][T16558]  __se_sys_sendfile64+0xd9/0x190
[  556.680489][T16558]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  556.680506][T16558]  ? rcu_is_watching+0x15/0xb0
[  556.680533][T16558]  ? do_syscall_64+0xbe/0x3b0
[  556.680578][T16558]  do_syscall_64+0xfa/0x3b0
[  556.680600][T16558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.680618][T16558]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  556.680639][T16558]  ? clear_bhb_loop+0x60/0xb0
[  556.680657][T16558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.680672][T16558] RIP: 0033:0x7f545978e929
[  556.680686][T16558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  556.680703][T16558] RSP: 002b:00007f545a625038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  556.680726][T16558] RAX: ffffffffffffffda RBX: 00007f54599b5fa0 RCX: 00007f545978e929
[  556.680740][T16558] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003
[  556.680752][T16558] RBP: 00007f545a625090 R08: 0000000000000000 R09: 0000000000000000
[  556.680763][T16558] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002
[  556.680775][T16558] R13: 0000000000000000 R14: 00007f54599b5fa0 R15: 00007ffd4a123178
[  556.680802][T16558]  </TASK>
[  557.027802][ T5915] usb read operation failed. (-32)
[  557.330451][   T30] audit: type=1326 audit(1752685743.276:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16495 comm="syz.8.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effde38e929 code=0x7fc00000
[  557.446292][ T5915] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  557.456903][ T5915] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  557.483909][ T5915] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  557.488620][ T5901] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  557.532912][T16571] /dev/rnullb0: Can't open blockdev
[  557.636019][T16575] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3110'.
[  557.656790][T16577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3111'.
[  557.672453][ T5901] usb 5-1: Using ep0 maxpacket: 16
[  557.712478][ T5901] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  557.725327][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.734367][ T5901] usb 5-1: Product: syz
[  557.743816][ T5901] usb 5-1: Manufacturer: syz
[  557.749079][ T5901] usb 5-1: SerialNumber: syz
[  557.757631][ T5901] usb 5-1: config 0 descriptor??
[  557.773587][ T5901] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  557.862933][T16583] /dev/rnullb0: Can't open blockdev
[  557.883100][T16584] /dev/rnullb0: Can't open blockdev
[  557.984435][ T5901] usb 5-1: clie_3_5_startup: get config number failed: -71
[  558.010807][ T5901] visor 5-1:0.0: probe with driver visor failed with error -71
[  558.034652][ T5901] usb 5-1: USB disconnect, device number 90
[  558.626815][T16600] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  560.368537][ T5908] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  560.568733][ T5908] usb 5-1: Using ep0 maxpacket: 8
[  560.588682][ T5908] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  560.597780][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.631174][ T5908] usb 5-1: Product: syz
[  560.635404][ T5908] usb 5-1: Manufacturer: syz
[  560.680545][ T5908] usb 5-1: SerialNumber: syz
[  560.700358][ T5908] usb 5-1: config 0 descriptor??
[  560.847942][T16660] FAULT_INJECTION: forcing a failure.
[  560.847942][T16660] name failslab, interval 1, probability 0, space 0, times 0
[  560.898523][T16660] CPU: 1 UID: 0 PID: 16660 Comm: syz.3.3137 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  560.898555][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  560.898569][T16660] Call Trace:
[  560.898577][T16660]  <TASK>
[  560.898586][T16660]  dump_stack_lvl+0x189/0x250
[  560.898621][T16660]  ? __pfx____ratelimit+0x10/0x10
[  560.898643][T16660]  ? __pfx_dump_stack_lvl+0x10/0x10
[  560.898672][T16660]  ? __pfx__printk+0x10/0x10
[  560.898699][T16660]  ? ip6t_do_table+0x1db/0x1560
[  560.898727][T16660]  ? __pfx_ip6t_do_table+0x10/0x10
[  560.898768][T16660]  should_fail_ex+0x414/0x560
[  560.898806][T16660]  should_failslab+0xa8/0x100
[  560.898829][T16660]  __kmalloc_noprof+0xcb/0x4f0
[  560.898859][T16660]  ? ___neigh_create+0x6d5/0x2260
[  560.898897][T16660]  ___neigh_create+0x6d5/0x2260
[  560.898938][T16660]  ? __ipv6_neigh_lookup_noref+0x531/0x710
[  560.898984][T16660]  ip6_finish_output2+0xb4d/0x16a0
[  560.899015][T16660]  ? ip6_finish_output2+0x701/0x16a0
[  560.899049][T16660]  ? __pfx_ip6_finish_output2+0x10/0x10
[  560.899076][T16660]  ? ip6_mtu+0x7d/0x3f0
[  560.899100][T16660]  ? ip6_mtu+0x7d/0x3f0
[  560.899126][T16660]  ip6_finish_output+0x234/0x7d0
[  560.899154][T16660]  ip6_xmit+0x107a/0x1840
[  560.899191][T16660]  ? __pfx_ip6_xmit+0x10/0x10
[  560.899220][T16660]  ? inet6_csk_xmit+0x1c5/0x720
[  560.899264][T16660]  inet6_csk_xmit+0x473/0x720
[  560.899298][T16660]  ? inet6_csk_xmit+0x1c5/0x720
[  560.899327][T16660]  ? __pfx_inet6_csk_xmit+0x10/0x10
[  560.899365][T16660]  ? csum_ipv6_magic+0x1ea/0x2f0
[  560.899406][T16660]  ? __pfx_inet6_csk_xmit+0x10/0x10
[  560.899435][T16660]  __tcp_transmit_skb+0x1dd5/0x36c0
[  560.899492][T16660]  ? __pfx___tcp_transmit_skb+0x10/0x10
[  560.899537][T16660]  ? tcp_rbtree_insert+0x11e/0x170
[  560.899564][T16660]  ? tcp_connect+0x1952/0x46f0
[  560.899592][T16660]  tcp_connect+0x1a30/0x46f0
[  560.899657][T16660]  tcp_v6_connect+0x11f7/0x1870
[  560.899694][T16660]  ? __pfx_tcp_v6_connect+0x10/0x10
[  560.899714][T16660]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  560.899759][T16660]  ? look_up_lock_class+0x74/0x170
[  560.899782][T16660]  ? register_lock_class+0x51/0x320
[  560.899816][T16660]  __inet_stream_connect+0x295/0xf10
[  560.899858][T16660]  ? __local_bh_enable_ip+0x12d/0x1c0
[  560.899884][T16660]  ? __pfx___inet_stream_connect+0x10/0x10
[  560.899914][T16660]  ? __local_bh_enable_ip+0x12d/0x1c0
[  560.899940][T16660]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  560.899978][T16660]  inet_stream_connect+0x66/0xa0
[  560.900012][T16660]  __sys_connect+0x316/0x440
[  560.900034][T16660]  ? __fget_files+0x3a0/0x420
[  560.900063][T16660]  ? __pfx___sys_connect+0x10/0x10
[  560.900100][T16660]  ? __pfx_ksys_write+0x10/0x10
[  560.900120][T16660]  ? rcu_is_watching+0x15/0xb0
[  560.900155][T16660]  __x64_sys_connect+0x7a/0x90
[  560.900179][T16660]  do_syscall_64+0xfa/0x3b0
[  560.900199][T16660]  ? lockdep_hardirqs_on+0x9c/0x150
[  560.900219][T16660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.900241][T16660]  ? clear_bhb_loop+0x60/0xb0
[  560.900266][T16660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.900286][T16660] RIP: 0033:0x7f56efd8e929
[  560.900304][T16660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  560.900322][T16660] RSP: 002b:00007f56f0ba5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  560.900344][T16660] RAX: ffffffffffffffda RBX: 00007f56effb5fa0 RCX: 00007f56efd8e929
[  560.900360][T16660] RDX: 000000000000001c RSI: 0000200000000180 RDI: 0000000000000003
[  560.900373][T16660] RBP: 00007f56f0ba5090 R08: 0000000000000000 R09: 0000000000000000
[  560.900386][T16660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  560.900398][T16660] R13: 0000000000000000 R14: 00007f56effb5fa0 R15: 00007ffe4a0c5928
[  560.900431][T16660]  </TASK>
[  561.306858][ T5908] usb read operation failed. (-32)
[  561.418501][T16666] /dev/rnullb0: Can't open blockdev
[  561.733277][T16675] /dev/rnullb0: Can't open blockdev
[  561.762865][T16676] /dev/rnullb0: Can't open blockdev
[  561.799798][ T5908] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  561.947226][T16682] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  562.128179][T16689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.190593][T16689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.270669][T16689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.407389][T16700] /dev/rnullb0: Can't open blockdev
[  562.513120][T16703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3150'.
[  562.523313][T16703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3150'.
[  562.542952][T16703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3150'.
[  562.564057][T16703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3150'.
[  562.712290][T16707] /dev/rnullb0: Can't open blockdev
[  562.904340][T16720] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3156'.
[  562.915049][T16720] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3156'.
[  562.926464][T16720] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3156'.
[  562.950846][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  562.957302][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  563.060850][T16726] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3159'.
[  563.078630][ T5863] usb 9-1: new high-speed USB device number 69 using dummy_hcd
[  563.238870][ T5863] usb 9-1: Using ep0 maxpacket: 16
[  563.258095][ T5863] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  563.267874][ T5863] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.288178][ T5863] usb 9-1: Product: syz
[  563.321131][ T5863] usb 9-1: Manufacturer: syz
[  563.325818][ T5863] usb 9-1: SerialNumber: syz
[  563.359773][ T5863] usb 9-1: config 0 descriptor??
[  563.391177][ T5863] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  563.519440][T16744] /dev/rnullb0: Can't open blockdev
[  563.585041][ T5863] usb 9-1: clie_3_5_startup: get config number failed: -71
[  563.612619][ T5863] visor 9-1:0.0: probe with driver visor failed with error -71
[  563.646107][ T5863] usb 9-1: USB disconnect, device number 69
[  563.771918][T16754] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3167'.
[  563.789171][T16755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.802372][T16755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.842352][T16755] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  564.393081][T16775] netlink: 'syz.8.3176': attribute type 1 has an invalid length.
[  564.482965][T16779] FAULT_INJECTION: forcing a failure.
[  564.482965][T16779] name failslab, interval 1, probability 0, space 0, times 0
[  564.497221][T16779] CPU: 0 UID: 0 PID: 16779 Comm: syz.2.3177 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) 
[  564.497251][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  564.497265][T16779] Call Trace:
[  564.497273][T16779]  <TASK>
[  564.497283][T16779]  dump_stack_lvl+0x189/0x250
[  564.497317][T16779]  ? __pfx____ratelimit+0x10/0x10
[  564.497338][T16779]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.497368][T16779]  ? __pfx__printk+0x10/0x10
[  564.497403][T16779]  ? __pfx___might_resched+0x10/0x10
[  564.497433][T16779]  should_fail_ex+0x414/0x560
[  564.497471][T16779]  should_failslab+0xa8/0x100
[  564.497493][T16779]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  564.497525][T16779]  ? __alloc_skb+0x112/0x2d0
[  564.497553][T16779]  __alloc_skb+0x112/0x2d0
[  564.497580][T16779]  netlink_sendmsg+0x5c6/0xb30
[  564.497613][T16779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  564.497639][T16779]  ? aa_sock_msg_perm+0xf1/0x1d0
[  564.497668][T16779]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  564.497692][T16779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  564.497716][T16779]  __sock_sendmsg+0x21c/0x270
[  564.497750][T16779]  ____sys_sendmsg+0x505/0x830
[  564.497781][T16779]  ? __pfx_____sys_sendmsg+0x10/0x10
[  564.497833][T16779]  ? import_iovec+0x74/0xa0
[  564.497867][T16779]  ___sys_sendmsg+0x21f/0x2a0
[  564.497896][T16779]  ? __pfx____sys_sendmsg+0x10/0x10
[  564.497971][T16779]  ? __fget_files+0x2a/0x420
[  564.497996][T16779]  ? __fget_files+0x3a0/0x420
[  564.498032][T16779]  __x64_sys_sendmsg+0x19b/0x260
[  564.498060][T16779]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  564.498095][T16779]  ? __pfx_ksys_write+0x10/0x10
[  564.498115][T16779]  ? rcu_is_watching+0x15/0xb0
[  564.498158][T16779]  ? do_syscall_64+0xbe/0x3b0
[  564.498184][T16779]  do_syscall_64+0xfa/0x3b0
[  564.498209][T16779]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.498229][T16779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.498250][T16779]  ? clear_bhb_loop+0x60/0xb0
[  564.498275][T16779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.498295][T16779] RIP: 0033:0x7f771158e929
[  564.498319][T16779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.498337][T16779] RSP: 002b:00007f771235c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  564.498376][T16779] RAX: ffffffffffffffda RBX: 00007f77117b5fa0 RCX: 00007f771158e929
[  564.498396][T16779] RDX: 0000000000000850 RSI: 0000200000000240 RDI: 0000000000000003
[  564.498410][T16779] RBP: 00007f771235c090 R08: 0000000000000000 R09: 0000000000000000
[  564.498423][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  564.498435][T16779] R13: 0000000000000000 R14: 00007f77117b5fa0 R15: 00007ffe41203558
[  564.498479][T16779]  </TASK>
[  564.765593][    C0] vkms_vblank_simulate: vblank timer overrun
[  564.795343][T16781] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  565.158305][T16796] netlink: 624 bytes leftover after parsing attributes in process `syz.8.3185'.
[  565.258238][T16802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.267391][T16802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.638966][T16830] 
[  566.641363][T16830] ================================================
[  566.647874][T16830] WARNING: lock held when returning to user space!
[  566.654398][T16830] 6.16.0-rc6-next-20250716-syzkaller #0 Not tainted
[  566.661003][T16830] ------------------------------------------------
[  566.667514][T16830] syz.2.3199/16830 is leaving the kernel with locks still held!
[  566.675161][T16830] 1 lock held by syz.2.3199/16830:
[  566.680288][T16830]  #0: ffff888066173308 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0