last executing test programs:

15m41.593920103s ago: executing program 3 (id=5557):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
mmap(&(0x7f000063c000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0xcab6b000)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000100)=""/89)
mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000004000/0x3000)=nil)
mount(&(0x7f0000000040)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='fuse\x00', 0x210884, 0x0)

15m41.439604617s ago: executing program 3 (id=5560):
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x4001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000080)="b922cdd771b1024c1f1f9b3c77606d888451227d5749c538f96ba541525cc189dadadc7e38bd85b7ddf7f7091d9c", 0x2e)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x2200, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

15m41.020587926s ago: executing program 3 (id=5562):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0xfff5, 0x1448f10f1ad261b2}, 0x480d0)

15m40.915895004s ago: executing program 3 (id=5563):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_cmd={0x49, 0x2, 0x2, 0x37f, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x7, 0x101, 0x142f, 0x8, 0x1, 0x0, 0xa, [0x4000000, 0xff]}})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

15m40.731919764s ago: executing program 3 (id=5566):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r1 = dup(r0)
write$UHID_INPUT(r1, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1406, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0)

15m40.567649261s ago: executing program 3 (id=5569):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="05c8"], 0x11) (async)
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x71)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x6, 0xc8, @none, 0x1, 0x0, 0x10, 0x4, 0x9, 0x3}}}, 0x14) (async)
ioctl$SNAPSHOT_FREE(r1, 0x3305) (async)
ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000540)=0x2)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1080008, 0x0)

15m25.545302003s ago: executing program 32 (id=5569):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="05c8"], 0x11) (async)
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x71)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x6, 0xc8, @none, 0x1, 0x0, 0x10, 0x4, 0x9, 0x3}}}, 0x14) (async)
ioctl$SNAPSHOT_FREE(r1, 0x3305) (async)
ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000540)=0x2)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1080008, 0x0)

14m10.245476661s ago: executing program 0 (id=6383):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000005c000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007000000df038b0100000000"], 0x38}, 0x0)

14m10.123677381s ago: executing program 0 (id=6385):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$phonet(0x23, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$tipc(0x1e, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000fff000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r2], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

14m9.943691505s ago: executing program 0 (id=6389):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r2 = syz_open_dev$ndb(&(0x7f0000001900), 0x0, 0x0)
ioctl$BLKPBSZGET(r2, 0x80081280, &(0x7f0000000000))
r3 = syz_usb_connect$uac1(0x1, 0x9e, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0xc, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x1, 0x6, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc4, 0x2, 0x80, 0x0, '$'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x80, 0xc1, {0x7, 0x25, 0x1, 0x0, 0x9, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x10, 0x4, 0xf, 0x2, "5ac3216ca4e5a3"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xb9, 0x2, 0x5, 0xa4, "ce29c293"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xa, 0x9, 0xd, {0x7, 0x25, 0x1, 0x5, 0x3, 0x962e}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0xfb, 0x7, 0x7, 0x8, 0x1}, 0x29, &(0x7f0000000200)={0x5, 0xf, 0x29, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x7f, 0x3da}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1, 0x8, 0xf179}, @ssp_cap={0xffffffffffffffd3, 0x10, 0xa, 0x5, 0x1, 0x4, 0xf000, 0x8, [0xf]}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x9975d7d857c4f8af}}, {0xce, &(0x7f00000002c0)=@string={0xce, 0x3, "4ae269083484e0c383b897c48a96eddfb2158e73d875a58cab6e5c7c40fc3f8002798bc7f199f81626db167298e2013b8b4478b2a9698480be4c559f0cebbaf6355bc5d8616d04c4a4e284a7fba9dea19ad5db95d64d7b6ae5979a84412fac34ebdb6a4410422cfc9a89b69467c5b2421b7496892fc060047497c34e1068f954659a2facd865702a62760b3e385b5e631dbbe8b9a65df8a997a350b2f6d51afb81bd707df4b2304b0dcc76bc85575eb513242ae70e074dd0ec66f7519235f159454964d9239c672bd6470000"}}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "ebbf8f619b07fa224ff615ac4404a12af34c89032ce977b263e2b8668247b0d7af246f8d72287199afc878d08139919e8bb5d560da69c9350e5d9419b1094dacf6644a1e7564ec50f7c55a9bdc3b4af1859c7bcfa4968e163585b0b49dfb7a11a3604dba82715f41fed752779755de8675f7212d20e45ec93a4da249008f81362b4362"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1044}}, {0xfc, &(0x7f0000000580)=@string={0xfc, 0x3, "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"}}]})
syz_usb_control_io$uac1(r3, &(0x7f0000000840)={0x14, &(0x7f0000000700)={0x20, 0xe, 0x1c, {0x1c, 0x11, "ca33f343c665ae22d835779bcc96b8decb708347fb2d03e2245f"}}, &(0x7f0000000740)={0x0, 0x3, 0xbe, @string={0xbe, 0x3, "4136e16e67d075aa83f8d523bcb7f203cc3036ca82930e80f8a70030d93e2841fbb1ce4a08c02d54838985f1f0a5cd328ff6cf1713f924838b0a02e39184f8afa406c7b66d3abfc13fc9114c2698bfe6d2d68269538b38d1f2f9fc1f217bda6984ae0c19b65bff9415e2af47ff4b4249570242b2f335a76daa03c372afef8080f2c1e1ca1586e549a18fb0ab2ca7ddc010a4e387db5b751eecebc9a913674ee533e12290b7f6356b07219d649536408da3c3bfd74ff08634f9929981"}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000880)={0x60, 0x1, 0xbd, "fe2cc741747b683163b3c1fb876bc391da7147586454d10311d30bd643a570d17ae8913e4076528326f0fa0c2bd8b6b61ee71a9ddab479da458d2fef7f90e68fd82a6ff752acd6c75aeb5dc500ba4273c2ba3fef478ef6ec0f3f1a88df841873b3987036e18bfe3433b78f935ebd8ca0a4e844db50046ae76cba25bd08e33b7361ac7122895cd18a255b3a65bf0d98f65d6b9932e909f68dfcedccf891f49d4a759d9ad7f3adafc2c212e73540af62daaf762434a53dd90365860b5a20"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000ac0)={0x20, 0x81, 0x1, '='}, &(0x7f0000000b00)={0x20, 0x82, 0x2, 'aJ'}, &(0x7f0000000b40)={0x20, 0x83, 0x1, 'g'}, &(0x7f0000000b80)={0x20, 0x84, 0x1, 'Y'}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, "745089"}})
socket$l2tp(0x2, 0x2, 0x73)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x181)
close(0x5)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c)
r4 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x4b}})
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x5, 0x7ffffd}, 0x10)
write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080003000d000000", 0x24)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)

14m8.284477622s ago: executing program 0 (id=6393):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r1, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x15, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@fda={0x77622a85, 0x9, 0x2, 0x1d}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x37}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

14m8.100151463s ago: executing program 0 (id=6394):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010a5740000000000000000000000000a48000000170a01080000000000000000020000000900020073797a30000000000900010073797a30"], 0x70}}, 0x24040880)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)

14m7.795869504s ago: executing program 0 (id=6397):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg0\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000680)=[{0x23, 0x2, 0x0, 0xfffff010}]})
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x480000)
poll(&(0x7f0000000100)=[{r1, 0x13a}], 0x1, 0x4)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x348, 0x4)

14m7.504120288s ago: executing program 33 (id=6397):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg0\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000680)=[{0x23, 0x2, 0x0, 0xfffff010}]})
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x480000)
poll(&(0x7f0000000100)=[{r1, 0x13a}], 0x1, 0x4)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x348, 0x4)

12m17.288838543s ago: executing program 4 (id=7404):
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pipe(&(0x7f0000000600))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000012000700ff020000000000000000000000000001"], 0xfdef)

12m17.048863412s ago: executing program 4 (id=7405):
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x28c9802, 0x0)
r0 = fanotify_init(0xf00, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYRES64=0x0, @ANYRESOCT], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
prctl$PR_MCE_KILL_GET(0x22)
syz_usb_control_io$uac1(r2, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x183e}}}, 0x0)
fanotify_mark(r0, 0x105, 0x4800002c, r1, 0x0)
r3 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="04020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2400000044fe80000000000000000000000000002637200000200002000a"], 0x204}}, 0x0)
flock(r4, 0x1780f9c373410dea)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
flock(r3, 0x5)
flock(r3, 0x5)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)={0x14b00, 0x90, 0x8}, 0x18)

12m16.150675922s ago: executing program 1 (id=7406):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000001160ec97000fc83c00fe8000000000000000000000000000aaf50200"], 0xffe)

12m15.949738816s ago: executing program 1 (id=7408):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0)
openat2(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8040, 0x162, 0x1}, 0x18)
sendmsg$qrtr(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2a, 0x4, 0x8000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000080)="aff915b64c012f7a818c77585a306cf253b14cff47dea772fa71235ae2eff3a1bbe661fddbff98315bf5a83b1b410a487d615c9fa2d4acb1828a17299e523c1a", 0x40}, {&(0x7f00000000c0)="8249c28faf746fc745d200bd70486b70747dff4fe9f05719e1a46eeb73c857180a42e7bab61a42334369d87e05ae177142635234c0e0678d00a8b0fa478efe5cdae4d150e9f6f22993c9c7d892579e783a3b5a77e9c0f8be4cb2ad2fb02edc3a5aed3f8acf492acc00283ebc7312a32496662feae28cdf0d4989efb609b25433a4c9ba453701eec56edb360729d7780b78ed0008bec928518c8d8f446842a06ea025aa414d5fe8b57183657b66620ed1f0cb93ee1417ebfda0fe51eb1116e80747707289fdbc60c5bda63f39be9ea9d6e83262f82dadc3e4c5039b", 0xdb}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="c0000042776efb1870e35b0f4100000000001100000002080000defc216d9492ade8d02e07c2f7e5c5d62d4bc6c0189ba83de20f9675bbb844f4248b090b22567f2ce637d632653cdd8223cc94682415df9ad5dfb709946cc70d21309511fd2b6939061a414fd932ace5a6a2a23df4a679efcb325c1f80e34cd5e2e95f0c2f7435ced6aab3fe491983933567ac66a5ace7124e6a46521d7a47177e1aad70cbda92d477a2bd8c1cb8af53204804016b62cc3ef9a0bf040868cce8dec3e0d8fccab2b4bddd01f00ee40000"], 0xc0, 0x4804}, 0x38)

12m15.808333809s ago: executing program 1 (id=7410):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x12, &(0x7f0000000180)='lo\x00', 0x1100000000000000})

12m15.743378184s ago: executing program 1 (id=7412):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r4, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
r8 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r8)
syz_open_procfs(r8, &(0x7f00000000c0)='environ\x00')
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r5, 0x7dfff000)

12m15.492731206s ago: executing program 1 (id=7415):
r0 = socket$inet6(0xa, 0x5, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='\a', 0x1, 0x40008d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}, 0xf5ffffff}, 0x1c)

12m15.305339974s ago: executing program 4 (id=7417):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000600000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007000000df038b0100000000"], 0x38}, 0x0)

12m15.171955638s ago: executing program 4 (id=7419):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
open$dir(&(0x7f00000001c0)='./file2\x00', 0x1a50c0, 0x100)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2092)
syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f00000046c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000006e40)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x20c5, {0xee9b, 0xe5, 0x0, {0x5, 0x7, 0x8, 0x90d, 0x6, 0x70000000000, 0x6, 0x1, 0xe, 0x2000, 0xffff, r2, r3, 0x10, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
truncate(&(0x7f0000000200)='./file2\x00', 0x80000002328)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141f02, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
sendfile(r4, r4, 0x0, 0x7ffff000)

12m15.171686049s ago: executing program 1 (id=7420):
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff)

12m14.597295544s ago: executing program 34 (id=7420):
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff)

12m14.575163199s ago: executing program 4 (id=7423):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x208100, 0x0)
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r5)
sendmmsg$unix(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x20, 0x1}}], 0x1, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x60)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
ptrace$poke(0x6, 0x0, 0x0, 0x0)
fchown(r1, r2, r5)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000180)={0x0, "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"})
bind$rose(r1, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x40)

12m14.52472782s ago: executing program 4 (id=7424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x17}}}}}, 0x20}, 0x1, 0x1800}, 0x4000054)

12m14.056788216s ago: executing program 35 (id=7424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x17}}}}}, 0x20}, 0x1, 0x1800}, 0x4000054)

19.616170385s ago: executing program 7 (id=12982):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd70800500000005000000080009000200"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x820) (fail_nth: 10)

19.103521462s ago: executing program 7 (id=12986):
syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc1105511, &(0x7f0000000280)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
ftruncate(r2, 0x5)
mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0)

18.8281191s ago: executing program 7 (id=12989):
creat(&(0x7f0000000140)='./file0\x00', 0x71)
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1c9e01)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0xffffffffffffffff)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)

18.685470888s ago: executing program 7 (id=12991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x700000000000000, 0xe79cccea089a010}, 0x20004050)

18.106459776s ago: executing program 7 (id=12993):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
read$FUSE(r1, &(0x7f00000047c0)={0x2020}, 0x2020)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}], 0x1, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
write$uinput_user_dev(r0, &(0x7f0000000440)={'syz0\x00', {0xef6, 0x1, 0x9, 0xf800}, 0x4a, [0x10, 0xfffffffe, 0x0, 0x400, 0xfffffff0, 0x10, 0x6, 0xa, 0x1, 0x3, 0x2, 0x5, 0x6, 0xe, 0x9067, 0x5, 0x2400000, 0x5e5031cc, 0x80a1, 0x10001, 0x57, 0x400, 0x80, 0x1, 0x8, 0xffffffff, 0x7, 0x939a, 0x4, 0x78ca, 0x7, 0xd1a0, 0x10000, 0x6, 0x8, 0xbd20, 0x9, 0x100, 0x8, 0x7, 0x6, 0x2, 0x5, 0x4, 0x2a, 0x5, 0x6, 0x9ee, 0x3, 0x2, 0xe, 0x20b, 0x0, 0x8, 0xd, 0x7fffffff, 0x54, 0x9, 0x6, 0x1, 0x6, 0x80, 0x3, 0xf3], [0x2, 0x10, 0x5, 0x5, 0x7, 0x9, 0x10001, 0x5, 0x6, 0x2, 0xffff, 0xdf06, 0x308a41f, 0x7, 0x3, 0x80000000, 0x80a, 0x7, 0x2, 0x80, 0x8e5b, 0x6, 0x8f, 0x5, 0x3, 0x1, 0x7fff, 0x6, 0x3ff, 0x80000001, 0x6, 0x1, 0x11dca0d4, 0x259a, 0x7fff, 0x13db, 0xaf, 0x7fffffff, 0x6, 0x3, 0x4, 0x0, 0x6, 0xd, 0x6, 0x5, 0x10000, 0x5a2, 0xffff, 0x1, 0x4, 0x3, 0x342, 0x9, 0x80000001, 0x30fd, 0x7, 0x0, 0x5, 0xae, 0x338, 0x81, 0x7f800000, 0x9], [0x1ff, 0x9, 0x1, 0xc72, 0xe69f, 0x2b, 0x3, 0x5, 0xb2, 0x0, 0x6, 0x9, 0x3, 0x5, 0x3ee, 0x1, 0xd6, 0x0, 0x0, 0x80, 0x7, 0x80, 0x0, 0x0, 0x5, 0x7d, 0x8, 0xfb, 0x401, 0xd1a, 0x0, 0x0, 0x0, 0x6, 0x80, 0x6, 0x10001, 0x8, 0x4, 0x9, 0x1, 0xfffffffe, 0x4, 0x1, 0x5339f7b8, 0x4, 0x5, 0x2, 0x9, 0x8, 0xc61f, 0x2b, 0x7, 0x2, 0x3ff, 0x6, 0x9, 0xe0, 0x6, 0x8000, 0x4, 0x1ff, 0x7, 0xffff], [0x3, 0x6, 0x1, 0x8f3, 0x400, 0x6, 0x8, 0xee5, 0x6, 0x9, 0x3b6, 0x0, 0x6, 0x7ff, 0x0, 0xc, 0x9, 0x4, 0x1, 0x80000000, 0x227b6dc8, 0x5, 0x5, 0x0, 0x0, 0x7fb, 0x4, 0x0, 0x6, 0x4, 0x1, 0x2, 0xfffffffe, 0x5, 0xffffffff, 0x40, 0x0, 0x38aa, 0x0, 0x5, 0x3dd2, 0xab, 0x5, 0x6, 0x4, 0xffffff98, 0x101, 0xc, 0x37, 0x5, 0x7fff, 0xa, 0x10, 0x8, 0xaa, 0x3, 0x80000001, 0x3, 0x3, 0x811d, 0xe686, 0x3bdd, 0xfff, 0x8]}, 0x45c)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chmod(&(0x7f00000001c0)='./file0\x00', 0x153)
chdir(&(0x7f0000000080)='./file1\x00')
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x85080)
write$P9_RVERSION(r3, &(0x7f0000001480)=ANY=[@ANYBLOB="1500000065ffff0400000008003950323030302e75603df65b303d982728ee71674a6fe6a02d9cbcabaa58c5ade85ddb964c8098150de3701eb3ae4c77e18ac2abda6fd763849886a55b55f525ad9d620b347db6202a540cefd9f014d54ae270741ce772fc97e05af35d6a775e2057d75ae9b4238e59ebe6a5e504200883623e37aacec456229e8e76d065aeab8ce29b49d45167622c76b5dee7297321c71ef068e84a5c54ca27bd9e15e80728f4d7916b7d3b5c1c9987b6624600d025fa8e65f16660a9e2456ea268050c030b13dfbca94d47e0db90ed9b7e060e4db9fc4cbe028d12f2ed1927"], 0x15)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/power/freeze_filesystems', 0x141a82, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000802, 0x0, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006)
r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0x9361, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mount$binder(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000180)={[{@max={'max', 0x3d, 0x1}}]})
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0)

18.105655603s ago: executing program 7 (id=12995):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001020000002800000121f", 0x2e}], 0x1}, 0x0)

6.93770897s ago: executing program 5 (id=13059):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x15}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)

6.812100279s ago: executing program 5 (id=13060):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000140)=0x3, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0)
r4 = socket$phonet(0x23, 0x2, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200})
setsockopt$sock_linger(r4, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340))
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000240)={r6})
r7 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5})
quotactl_fd$Q_GETFMT(r3, 0xffffffff80000400, 0x0, &(0x7f0000000280))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r8, 0x3ba0, &(0x7f00000000c0)={0x48, 0x4, 0x0, 0x0, 0xd0, &(0x7f0000000380)="78ce426882db21a24fe9e44ccea17e402bc3f272e3572b1ffddcc54ec27718aa2e517046698399888935029f8d5bace5b7120e4406201690cac0a18827dd9352f988102e7a376661de00834b7dd8230f117532af72a7d2be45f458892540f5b872da11b9241bea00e07ba38fc1c43548e39ab0cd136a7855d9b417af1888760a5766bdcfe5e9a7e6ba478bbc0c8f75576ed1515313f64e88650b2faf46783bfa5bf4ebfadcc558d9d84bb0d724fda525641a269e281d3560d0d0f98161e22afafbd90ad96564efb424cbb60d25c331f7", 0x3})

6.285715111s ago: executing program 5 (id=13062):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250700000008000500020000000a0004007770616e3400000008000300", @ANYRES32=0x0, @ANYBLOB="0c001700010055555555555508000500020000000c00170700000100000000aa080001"], 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)

5.690418602s ago: executing program 5 (id=13065):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000180)="4123a012a594", 0x6, 0x40050, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed9", 0x5e}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11a2cd1b83edf4ee89f557882a6e115f6f313802bf3c797417d7b969c918598823448ed396000e44f8cc6a7a99db9bc97830b2df7971360f878a6cb35677e337e3ea1f", 0x59}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d", 0x1f}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134", 0xbf}, {&(0x7f0000000740)="5be3b011e12323e4ab88c0472f0700000011000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24baedcc72d41798c95c01626c311e9f1262dfa4dedd161672c578a7af36c8a95437f295e14a1e0c7245cb53f83cc7b4b9294bb13473331502b7735a955080f7c2fd79d3fe0de99505840905376e957c012fc4e4e0ea1c8db07a", 0x1ed}, {&(0x7f0000001280)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c7860699155818885020000000000000046b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7bc8cff9b37ae8b1a03b", 0x55}], 0x4}}], 0x2, 0xc0)

5.688838925s ago: executing program 5 (id=13067):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{r0}, 0x1}]})
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800})
ioctl$RTC_AIE_ON(r0, 0x7001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x80000000086)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000880)={0x2c, &(0x7f00000006c0)={0x20, 0xa, 0x2d, {0x2d, 0xa, "96c47e0b60297353973b46bb7d448023f7ec5402d49da62a4a5ac90f15e0bbf422ed61b6f68a07b80be5a3"}}, &(0x7f0000000700)={0x0, 0x3, 0x83, @string={0x83, 0x3, "bb5b8ba1f7bc3211075e35816d5c5c52164b4dcc8af0bde4b4c6e61f39f2feff254b449eb416b2c9763d76ea24515aad5744b7864f7737f1c135a9a5430a410ee7440431d9b2b36bf52d146c6ad8176887d864de60ab183d6d3423723c2a632468c75fd1321d8a252838143170ec7909acd49450fc615b9476c4a1c5fca2f88d3b"}}, &(0x7f00000007c0)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x5, 0x5, 0xbb20, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x7, 0xc3, 0x800}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x4, 0x1e00, 0x8, [0x3f00]}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x10, 0x4, 0x67, "cd46f3de", "b70a9221"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x16, 0x1f, 0x55, 0x7}}}, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x0, 0x0, 0xaf, "6d5d0c64e2ba3c0596c14bc5b0f0a6c98d9680da856582f84414227172f9871bd2797fe70f780f510d9daa4f3bdc8991ae3a343a4c8165df79e5011af21803546d46aacc9f1f41294e3c7f9d01e9a3167a7884b0af356f7e165894d7a6947513e631643023cc18b0bcb59f8e849d589cb75ba591dcb177f1bf9634300a60ed64fbc7ffed59b5ec079c568a8ae81c233ae7cbe01f46d4e2ddca7215d23ff455a8b6a0732819b97d1283bfce6e31db68"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x60, 0x20, [0xff00]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0xfffd}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "a15d"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @random="7a77d6c50280"}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "aa20"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0xa, 0xf6, {0xf6, 0x22, "ee2b1e7a0f443c03d15b6e145336b34ce502264fc7c0b87c379883e0f18af769d96580410f0ae8846aa1e41e0c0d5ee4eaceb8e5b31dcbe0bf7ba8f52bb2e05af3f4617c297d26016e4b0aae41f05bb36b8f501e33d8e5d61af7043144163648cbda036bb08a80fb185ebddaf89b2e33e6a488dabb752a0284833170d92254a18b4193129d5caf4824d3ffe943d355619276fdccd64ff01007bc3c4a327089bc4e0d3fde850b56f5b936448e31fe05aabd4697a8ef4bfa2bbdf55380f7991bfa190c7ecbc62edce71cabd831c31c588492b48a8fb49ac2ae8fdf6c75d783ad03123ecb55877f312caab325e83b3d7af2bfd3bc26"}}, &(0x7f0000000300)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "e65ac8f92656d1891b063755c1d84fd9d3c3186552ec4485c0f46d6c785de2b699c604439620291dc906412f5d2204bcd47b6d5e3e75c0a6ae976d0f67c61732883abcd9080bcf65ee864d55a820256cb0c72cd9d11dd14f7502657703dfac4d38088298952847237bbf63d63349c652e9f5bd5700d36f1072708bdbfaa0bf4555468add61d0af8c9a70d921734358f4b1fe987a6e1b217e3ecaa4c65f47ab8059761a8aefd4bd77ef73e375b587ffb700cdf127edb59359f0a18ccb52b42c32e3eb1998b23994692344af21411931e442f053e8d45ee3bd480ffb956f627c784daeede047"}}}, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x0, 0x3, 0x4d, "84a4581d5c9939e27b826f242967890b6f2f78b5f692bb341ccd33143cca092d8e1c1a18636dae437ef7ad33518929d15a6c1d33471769d8a10054ede929d8e9624ad0fb8a85c7289dceba08c0"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x44}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x81, 0x2, "59a7"}, &(0x7f0000000500)={0x20, 0x82, 0x2, "c923"}, &(0x7f0000000540)={0x20, 0x83, 0x3, "70ff1b"}, &(0x7f0000000580)={0x20, 0x84, 0x2, "0bfc"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "b306b0"}})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)

4.94802106s ago: executing program 2 (id=13070):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001740)={0x34, &(0x7f0000001440)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 64)
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x3}, 0x10) (async, rerun: 32)
close(r2) (rerun: 32)
r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000440)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x1, 0x5, 0x7, 0x2, 0x5, {0x5, 0x9, 0x0, 0xfff, 0x2, 0x0, 0xffff8001, 0x0, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x3}}, {0x0, 0x2}}}, 0xa0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) (async, rerun: 64)
ioctl$BINDER_CTL_ADD(r5, 0xc1086201, &(0x7f0000000300)={'binder0\x00'}) (async, rerun: 64)
sendmmsg$alg(r3, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="b7d3772235fa90c21cbcfeb521b85429d41476c2e9e568de9de94a04f87186d6d3fcb035ef996ad0623f3d53843019e54cc547", 0x33}, {&(0x7f0000000540)="cf1607220e39070b08485896e9ca94dc0fd0e62bbbc644a3351e17c601af68d4a4f0f73917", 0x25}, {&(0x7f0000000080)="36e0fd03e9daffda1a6ea08bb80f18b72c0f9f034a06c492", 0x18}], 0x3, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x40800) (async)
r7 = syz_open_dev$vcsn(&(0x7f0000000600), 0x8000000000000001, 0x1351c5) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f0000000180)={<r8=>0x0, 0x1, r6})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000580)={r8})
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x80) (async, rerun: 32)
mount(&(0x7f0000000080)=@sr0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) (rerun: 32)

3.780639878s ago: executing program 2 (id=13074):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000500000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

3.52887418s ago: executing program 2 (id=13076):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0xe, 0x6e, {0x6e, 0xa, "5a5553b96146d807eb545b552dd987abf9b41fe59abe53635d543eb8fa2133a0f77f13e946a66da02d86d52288954986dbf88572adfca8ed24e10bae96d7168b0160edf72ac5c37018ec49f2b479a72d38ce2e02484353d3d3832a6479dc035c0660eec6d361c1d9af0b1365"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x20, 0x3, 0x27, "36be8e251e3fe8f21bf4614a5ae2ed15e4ecb7f4b0b9045a74535f92d69e34108de407933c8323"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}})

3.224135188s ago: executing program 6 (id=13078):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$phonet(0x23, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$tipc(0x1e, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000410000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r2], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

3.221625304s ago: executing program 36 (id=12995):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001020000002800000121f", 0x2e}], 0x1}, 0x0)

2.829274123s ago: executing program 6 (id=13080):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0xd8, 0x1000040, &(0x7f0000000480)="c9ea87d1c0e550f1a28fbc590fe3489fc3b1fa4828b551545d337b76b362d12de25d965d8ebc69c08ff64b72f94c9fde5b730f488f9a6f961aead38ece4e5a72e772805d1e5192819db1d15a6571e6c30246899c933f27eb61a36c978d828f5b691493d08ade579aa4dd705321af6e52887f1952b34e55ded07093432234ba4fbfe9bee9fc7fb0a78c7b852d6d75192a0338e929ed579b39161524e66360b5f1f882436829db4e911f66fe969db8b2c399b45fad8fdb4152dd739bbee9ec9f4d4e764bdeed866cda0daed68ad1afabde09fd11c92f50bbe4"})
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000300)="bc5d", 0x2, r2)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1ac5638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf070000004debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec29712deb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db9952cc407d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe8c8e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff3460200000000000000f867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f7046616490d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00fd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b217206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a11ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf030000000000000004c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x1, 0x0, 0x9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x30883, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

2.541208472s ago: executing program 6 (id=13081):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$phonet(0x23, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000100001000000000000f5ff000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r3], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

1.924125371s ago: executing program 6 (id=13082):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82b00fe8000000000000000000000000000aaff020000000002000000000000000001"], 0xffe)

1.573368379s ago: executing program 5 (id=13083):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402312070100000000000109022400010000a00009040000020300020009210000000122450009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x0, 0x9, 0x45, {0x45, 0xc, "c52f80df93194625350863688fdf03a42570e09205fd9a70e82b9557f0692aaeb90b78cbe1b7c477944c4c40439bd94051c50d65b9782dbf6455e73d878dbc03d60662"}}, 0x0}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1, 0x7}}, 0x4, 0x1}, &(0x7f00000001c0)=0x90)
syz_open_dev$evdev(&(0x7f0000000280), 0x8d, 0x10000)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000002c0)={{0x80, 0x2}, 'port1\x00', 0x63, 0x1b1c07})
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/62, 0x3e}], 0x1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000380)={0x68000000, 0x9, 0x0, 0x9, 0xffff428a, 0x401})
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x2c, 0x1a, 0x15, 0x0, 0xfeffffff, "", [@typed={0x1c, 0x0, 0x0, 0x0, @str='\x02\x12\x00ew\xaa\x05\x14$\xb9\xcaY\x96\x02\x01$>\xf4\xebG,\x11\x90\xee'}]}, 0x2c}], 0x1}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f00000010c0)=0x11)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$UHID_INPUT(r4, &(0x7f0000001100)={0x8, {"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", 0xffffffffffffff70}}, 0x1006)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
r5 = fanotify_init(0x200, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r5, 0x161, 0x40000867, r6, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0)

1.345748784s ago: executing program 6 (id=13084):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

1.079113996s ago: executing program 6 (id=13085):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x4001)
r3 = socket(0x18, 0x5, 0x0)
listen(r3, 0x0)
socket(0x28, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd000012000000010002006000e1aa00102c00fe8000000000000000000000000000aaff0200000000000500000000000000013a0000"], 0x46)

322.213968ms ago: executing program 2 (id=13086):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, r0, 0x8c411000)

200.215908ms ago: executing program 2 (id=13087):
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000240000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

0s ago: executing program 2 (id=13088):
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x4001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000080)="b922cdd771b1024c1f1f9b3c77606d888451227d5749c538f96ba541525cc189dadadc7e38bd85b7ddf7f7091d9c", 0x2e)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

kernel console output (not intermixed with test programs):

6.587377][T20284] gspca_stk1135: Sensor read failed
[ 1546.587408][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1546.646001][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1546.661842][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12565'.
[ 1546.707843][   T10] usb 3-1: Product: syz
[ 1546.720091][   T10] usb 3-1: Manufacturer: syz
[ 1546.736299][   T10] usb 3-1: SerialNumber: syz
[ 1546.760169][   T10] usb 3-1: config 0 descriptor??
[ 1546.774203][ T6955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1546.789507][T20284] gspca_stk1135: Sensor read failed
[ 1546.791087][ T6955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1546.805819][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1546.835823][T20284] gspca_stk1135: Sensor write failed
[ 1546.841184][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1546.881286][T20284] gspca_stk1135: Sensor write failed
[ 1546.911951][T20284] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1546.920790][ T6964] loop4: detected capacity change from 0 to 7
[ 1546.935712][ T6964] Dev loop4: unable to read RDB block 7
[ 1546.970415][ T6964]  loop4: unable to read partition table
[ 1546.981636][T20284] usb 6-1: USB disconnect, device number 23
[ 1546.991552][ T6964] loop4: partition table beyond EOD, truncated
[ 1547.011157][ T6964] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1547.030500][ T6955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1547.043862][ T6955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1547.322926][ T6973] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1547.468697][   T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32
[ 1547.923185][T26083] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1548.153072][T26083] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[ 1548.161219][T26083] usb 7-1: config 0 has no interface number 0
[ 1548.203704][T26083] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 1548.252221][T26083] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1548.296024][T26083] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 1548.334109][T26083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1548.342143][T26083] usb 7-1: Product: syz
[ 1548.382853][T26083] usb 7-1: Manufacturer: syz
[ 1548.387999][T26083] usb 7-1: SerialNumber: syz
[ 1548.422481][T20284] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1548.444395][T26083] usb 7-1: config 0 descriptor??
[ 1548.453375][ T6986] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1548.474671][T26083] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 1548.523413][T26083] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1548.615272][T20284] usb 6-1: Using ep0 maxpacket: 32
[ 1548.672303][T20284] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1548.691950][T20284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1548.714652][T20284] usb 6-1: Product: syz
[ 1548.718885][T20284] usb 6-1: Manufacturer: syz
[ 1548.736586][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[ 1548.737827][T20284] usb 6-1: SerialNumber: syz
[ 1548.772682][T20284] usb 6-1: config 0 descriptor??
[ 1548.785578][T20284] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1548.962383][T27758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1548.971777][T27758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1548.984723][T27758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1549.010431][T27758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1549.018236][T27758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1549.110549][ T5905] usb 3-1: USB disconnect, device number 115
[ 1549.145886][ T3081] usb 7-1: USB disconnect, device number 39
[ 1549.196776][ T3081] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1549.234094][ T3081] cyberjack 7-1:0.69: device disconnected
[ 1549.474230][ T7012] overlay: Unknown parameter 'subj_type'
[ 1549.552525][ T3549] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1550.004311][ T3549] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1550.222983][ T3549] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1550.397962][ T3549] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1550.639186][ T7003] chnl_net:caif_netlink_parms(): no params data found
[ 1550.852981][ T3549] bridge_slave_1: left allmulticast mode
[ 1550.879581][ T3549] bridge_slave_1: left promiscuous mode
[ 1550.889908][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1550.909468][ T3549] bridge_slave_0: left allmulticast mode
[ 1550.924524][ T3549] bridge_slave_0: left promiscuous mode
[ 1550.944273][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1551.034529][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12588'.
[ 1551.125102][T17569] Bluetooth: hci2: command tx timeout
[ 1551.137594][ T3081] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1551.304334][ T3081] usb 7-1: Using ep0 maxpacket: 16
[ 1551.312543][ T3081] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[ 1551.327081][ T3081] usb 7-1: config 0 has no interface number 0
[ 1551.333433][ T3081] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1551.348655][ T3081] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1551.359195][ T3081] usb 7-1: config 0 interface 41 has no altsetting 0
[ 1551.380976][ T3081] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1551.400070][ T3081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1551.409055][ T3081] usb 7-1: Product: syz
[ 1551.413322][ T3081] usb 7-1: Manufacturer: syz
[ 1551.423001][ T3081] usb 7-1: SerialNumber: syz
[ 1551.432694][ T3081] usb 7-1: config 0 descriptor??
[ 1551.443798][ T7032] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1551.452252][ T7032] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1551.674159][ T7032] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1551.690776][ T7032] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1551.861238][T20284] gspca_stk1135: reg_w 0x352 err -71
[ 1551.871706][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1551.886700][T20284] gspca_stk1135: Sensor write failed
[ 1551.892818][ T3549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1551.904499][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1551.910895][T20284] gspca_stk1135: Sensor write failed
[ 1551.918794][ T3549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1551.934548][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1551.939817][ T3549] bond0 (unregistering): Released all slaves
[ 1551.940920][T20284] gspca_stk1135: Sensor read failed
[ 1551.940955][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1551.974537][T20284] gspca_stk1135: Sensor read failed
[ 1551.990575][T20284] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1552.023333][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1552.054632][T20284] gspca_stk1135: Sensor read failed
[ 1552.059884][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1552.070020][T20284] gspca_stk1135: Sensor read failed
[ 1552.107436][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1552.113810][T20284] gspca_stk1135: Sensor write failed
[ 1552.133767][ T3081] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -32
[ 1552.167453][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1552.173836][T20284] gspca_stk1135: Sensor write failed
[ 1552.186559][T20284] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1552.188035][ T3549] tipc: Disabling bearer <udp:syz2>
[ 1552.197557][T20284] usb 6-1: USB disconnect, device number 24
[ 1552.215102][ T3549] tipc: Left network mode
[ 1552.219814][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1552.244449][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1552.258361][ T7003] bridge_slave_0: entered allmulticast mode
[ 1552.265410][ T7042] /dev/rnullb0: Can't open blockdev
[ 1552.274272][ T7003] bridge_slave_0: entered promiscuous mode
[ 1552.358302][ T7044] FAULT_INJECTION: forcing a failure.
[ 1552.358302][ T7044] name failslab, interval 1, probability 0, space 0, times 0
[ 1552.372005][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1552.380537][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1552.388027][ T7044] CPU: 1 UID: 0 PID: 7044 Comm: syz.2.12591 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1552.388053][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1552.388065][ T7044] Call Trace:
[ 1552.388074][ T7044]  <TASK>
[ 1552.388082][ T7044]  dump_stack_lvl+0x189/0x250
[ 1552.388108][ T7044]  ? __pfx____ratelimit+0x10/0x10
[ 1552.388150][ T7044]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1552.388172][ T7044]  ? __pfx__printk+0x10/0x10
[ 1552.388201][ T7044]  ? __pfx___might_resched+0x10/0x10
[ 1552.388226][ T7044]  should_fail_ex+0x414/0x560
[ 1552.388263][ T7044]  should_failslab+0xa8/0x100
[ 1552.388290][ T7044]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1552.388314][ T7044]  ? __alloc_skb+0x112/0x2d0
[ 1552.388355][ T7044]  __alloc_skb+0x112/0x2d0
[ 1552.388387][ T7044]  netlink_sendmsg+0x5c6/0xb30
[ 1552.388427][ T7044]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1552.388458][ T7044]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1552.388483][ T7044]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1552.388511][ T7044]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1552.388541][ T7044]  __sock_sendmsg+0x219/0x270
[ 1552.388569][ T7044]  ____sys_sendmsg+0x505/0x830
[ 1552.388595][ T7044]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1552.388624][ T7044]  ? import_iovec+0x74/0xa0
[ 1552.388648][ T7044]  ___sys_sendmsg+0x21f/0x2a0
[ 1552.388670][ T7044]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1552.388727][ T7044]  ? __fget_files+0x2a/0x420
[ 1552.388752][ T7044]  ? __fget_files+0x3a0/0x420
[ 1552.388790][ T7044]  __x64_sys_sendmsg+0x19b/0x260
[ 1552.388813][ T7044]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1552.388843][ T7044]  ? __pfx_ksys_write+0x10/0x10
[ 1552.388865][ T7044]  ? rcu_is_watching+0x15/0xb0
[ 1552.388890][ T7044]  ? do_syscall_64+0xbe/0x3b0
[ 1552.388920][ T7044]  do_syscall_64+0xfa/0x3b0
[ 1552.388945][ T7044]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1552.388970][ T7044]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1552.388990][ T7044]  ? clear_bhb_loop+0x60/0xb0
[ 1552.389013][ T7044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1552.389033][ T7044] RIP: 0033:0x7f7e11b8e929
[ 1552.389050][ T7044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1552.389068][ T7044] RSP: 002b:00007f7e1291e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1552.389089][ T7044] RAX: ffffffffffffffda RBX: 00007f7e11db5fa0 RCX: 00007f7e11b8e929
[ 1552.389104][ T7044] RDX: 0000000000000820 RSI: 0000200000000000 RDI: 0000000000000005
[ 1552.389129][ T7044] RBP: 00007f7e1291e090 R08: 0000000000000000 R09: 0000000000000000
[ 1552.389141][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1552.389152][ T7044] R13: 0000000000000000 R14: 00007f7e11db5fa0 R15: 00007ffca5d2a288
[ 1552.389179][ T7044]  </TASK>
[ 1552.665148][ T7003] bridge_slave_1: entered allmulticast mode
[ 1552.673215][ T7003] bridge_slave_1: entered promiscuous mode
[ 1552.892078][ T7003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1552.972341][ T7003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1553.152725][ T7003] team0: Port device team_slave_0 added
[ 1553.205897][T17569] Bluetooth: hci2: command tx timeout
[ 1553.249778][ T7003] team0: Port device team_slave_1 added
[ 1553.384146][ T3549] hsr_slave_0: left promiscuous mode
[ 1553.411021][ T3549] hsr_slave_1: left promiscuous mode
[ 1553.428524][ T3549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1553.460427][ T3549] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1553.481112][ T3549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1553.498800][ T3549] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1553.529843][ T3549] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1553.551549][ T3549] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1553.598973][ T7059] binder: 7058:7059 ioctl c0306201 2000000003c0 returned -14
[ 1553.634843][ T3549] veth1_macvtap: left promiscuous mode
[ 1553.653107][ T3549] veth0_macvtap: left promiscuous mode
[ 1553.670857][ T3549] veth1_vlan: left promiscuous mode
[ 1553.677094][ T3549] veth0_vlan: left promiscuous mode
[ 1553.883373][ T5905] usb 7-1: USB disconnect, device number 40
[ 1554.190697][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12601'.
[ 1554.325970][ T5905] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1554.515647][ T5905] usb 7-1: Using ep0 maxpacket: 32
[ 1554.524839][ T5905] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1554.534611][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1554.547199][ T5905] usb 7-1: Product: syz
[ 1554.551525][ T5905] usb 7-1: Manufacturer: syz
[ 1554.560406][ T5905] usb 7-1: SerialNumber: syz
[ 1554.572868][ T5905] usb 7-1: config 0 descriptor??
[ 1554.581492][ T5905] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1555.013684][ T3549] team0 (unregistering): Port device team_slave_1 removed
[ 1555.103943][ T3549] team0 (unregistering): Port device team_slave_0 removed
[ 1555.291068][T17569] Bluetooth: hci2: command tx timeout
[ 1556.039272][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1556.056325][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1556.084049][ T7003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1556.124480][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1556.138108][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1556.174204][ T7003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1556.382980][ T7003] hsr_slave_0: entered promiscuous mode
[ 1556.398399][ T7003] hsr_slave_1: entered promiscuous mode
[ 1556.405402][ T7003] debugfs: 'hsr0' already exists in 'hsr'
[ 1556.424337][ T7003] Cannot create hsr debugfs directory
[ 1557.226978][ T4800] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1557.369568][T17569] Bluetooth: hci2: command tx timeout
[ 1557.392507][ T4800] usb 6-1: Using ep0 maxpacket: 16
[ 1557.403319][ T4800] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 1557.412355][ T4800] usb 6-1: config 0 has no interface number 0
[ 1557.421754][ T4800] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1557.432659][ T4800] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1557.446439][ T4800] usb 6-1: config 0 interface 41 has no altsetting 0
[ 1557.473655][ T4800] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1557.501048][ T4800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.519757][ T4800] usb 6-1: Product: syz
[ 1557.529957][ T4800] usb 6-1: Manufacturer: syz
[ 1557.544945][ T4800] usb 6-1: SerialNumber: syz
[ 1557.562215][ T4800] usb 6-1: config 0 descriptor??
[ 1557.578023][ T7089] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1557.597122][ T7089] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1557.617248][T20284] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1557.653355][ T7003] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1557.660960][ T5905] gspca_stk1135: reg_w 0x352 err -71
[ 1557.667431][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[ 1557.673917][ T5905] gspca_stk1135: Sensor write failed
[ 1557.679766][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[ 1557.686159][ T5905] gspca_stk1135: Sensor write failed
[ 1557.688727][ T7003] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1557.692309][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[ 1557.711155][ T5905] gspca_stk1135: Sensor read failed
[ 1557.721335][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[ 1557.730252][ T5905] gspca_stk1135: Sensor read failed
[ 1557.735592][ T5905] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1557.737777][ T7003] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1557.744637][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[ 1557.755917][ T5905] gspca_stk1135: Sensor read failed
[ 1557.761527][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[ 1557.770252][ T5905] gspca_stk1135: Sensor read failed
[ 1557.771167][ T7003] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1557.782592][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[ 1557.782608][ T5905] gspca_stk1135: Sensor write failed
[ 1557.782638][ T5905] gspca_stk1135: serial bus timeout: status=0x00
[ 1557.782649][ T5905] gspca_stk1135: Sensor write failed
[ 1557.782725][ T5905] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[ 1557.797369][ T5905] usb 7-1: USB disconnect, device number 41
[ 1557.828507][ T7089] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1557.841883][T20284] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[ 1557.846512][ T7089] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1557.851084][T20284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.875717][T20284] usb 3-1: Product: syz
[ 1557.880059][T20284] usb 3-1: Manufacturer: syz
[ 1557.885044][T20284] usb 3-1: SerialNumber: syz
[ 1557.901115][T20284] usb 3-1: config 0 descriptor??
[ 1557.931385][T20284] gspca_main: sonixb-2.14.0 probing 0c45:608f
[ 1558.042435][ T7003] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1558.073100][ T7003] 8021q: adding VLAN 0 to HW filter on device team0
[ 1558.096618][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1558.103872][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1558.128270][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1558.140144][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1558.147461][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1558.147638][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1558.203819][ T7003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1558.258019][T20284] sonixb 3-1:0.0: Error reading register 00: -71
[ 1558.292500][T20284] usb 3-1: USB disconnect, device number 116
[ 1558.302651][ T4800] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32
[ 1558.643136][ T7003] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1559.120506][ T7125] /dev/rnullb0: Can't open blockdev
[ 1559.223793][ T7128] netlink: 'syz.2.12617': attribute type 10 has an invalid length.
[ 1559.233504][ T7128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12617'.
[ 1559.285804][ T7003] veth0_vlan: entered promiscuous mode
[ 1559.307708][ T7128] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1559.314364][ T7128] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[ 1559.329669][ T7131] loop4: detected capacity change from 0 to 7
[ 1559.341597][ T7131] Dev loop4: unable to read RDB block 7
[ 1559.348079][ T7131]  loop4: unable to read partition table
[ 1559.359614][ T7131] loop4: partition table beyond EOD, truncated
[ 1559.396001][ T7131] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1559.457053][ T7003] veth1_vlan: entered promiscuous mode
[ 1559.549654][ T7003] veth0_macvtap: entered promiscuous mode
[ 1559.676956][ T7003] veth1_macvtap: entered promiscuous mode
[ 1559.726873][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1559.758598][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1559.828078][T20284] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1559.837962][T30700] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.852514][ T7141] tipc: Started in network mode
[ 1559.857426][ T7141] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1559.870613][ T7141] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[ 1559.879522][ T7141] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1559.887377][T30700] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.921450][T30700] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1559.949010][T30700] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1560.018774][T20284] usb 7-1: Using ep0 maxpacket: 32
[ 1560.037003][ T7143] /dev/rnullb0: Can't open blockdev
[ 1560.039780][T20284] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1560.069443][ T1216] usb 6-1: USB disconnect, device number 25
[ 1560.123323][T20284] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1560.156377][T20284] usb 7-1: Product: syz
[ 1560.161091][T20284] usb 7-1: Manufacturer: syz
[ 1560.178574][T20284] usb 7-1: SerialNumber: syz
[ 1560.194213][T20284] usb 7-1: config 0 descriptor??
[ 1560.204774][T30700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1560.212145][T20284] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1560.247896][T30700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1560.375160][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1560.392057][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1560.524436][ T7154] FAULT_INJECTION: forcing a failure.
[ 1560.524436][ T7154] name failslab, interval 1, probability 0, space 0, times 0
[ 1560.541246][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.7.12577 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1560.541273][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1560.541286][ T7154] Call Trace:
[ 1560.541312][ T7154]  <TASK>
[ 1560.541321][ T7154]  dump_stack_lvl+0x189/0x250
[ 1560.541350][ T7154]  ? __pfx____ratelimit+0x10/0x10
[ 1560.541378][ T7154]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1560.541400][ T7154]  ? __pfx__printk+0x10/0x10
[ 1560.541429][ T7154]  ? __pfx___might_resched+0x10/0x10
[ 1560.541449][ T7154]  ? fs_reclaim_acquire+0x7d/0x100
[ 1560.541482][ T7154]  should_fail_ex+0x414/0x560
[ 1560.541519][ T7154]  should_failslab+0xa8/0x100
[ 1560.541545][ T7154]  __kmalloc_noprof+0xcb/0x4f0
[ 1560.541566][ T7154]  ? kfree+0x4d/0x440
[ 1560.541582][ T7154]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1560.541611][ T7154]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1560.541637][ T7154]  ? tomoyo_domain+0xd9/0x130
[ 1560.541665][ T7154]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1560.541694][ T7154]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1560.541726][ T7154]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1560.541773][ T7154]  ? __lock_acquire+0xab9/0xd20
[ 1560.541822][ T7154]  ? __fget_files+0x2a/0x420
[ 1560.541852][ T7154]  ? __fget_files+0x2a/0x420
[ 1560.541878][ T7154]  ? __fget_files+0x3a0/0x420
[ 1560.541905][ T7154]  ? __fget_files+0x2a/0x420
[ 1560.541935][ T7154]  security_file_ioctl+0xcb/0x2d0
[ 1560.541974][ T7154]  __se_sys_ioctl+0x47/0x170
[ 1560.541999][ T7154]  do_syscall_64+0xfa/0x3b0
[ 1560.542025][ T7154]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1560.542050][ T7154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1560.542069][ T7154]  ? clear_bhb_loop+0x60/0xb0
[ 1560.542093][ T7154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1560.542112][ T7154] RIP: 0033:0x7f441338e929
[ 1560.542130][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1560.542148][ T7154] RSP: 002b:00007f44142c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1560.542170][ T7154] RAX: ffffffffffffffda RBX: 00007f44135b5fa0 RCX: 00007f441338e929
[ 1560.542187][ T7154] RDX: 0000200000001280 RSI: 00000000c018ae85 RDI: 0000000000000005
[ 1560.542200][ T7154] RBP: 00007f44142c6090 R08: 0000000000000000 R09: 0000000000000000
[ 1560.542213][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1560.542225][ T7154] R13: 0000000000000000 R14: 00007f44135b5fa0 R15: 00007ffdd7c83198
[ 1560.542257][ T7154]  </TASK>
[ 1560.542266][ T7154] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1560.738626][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1560.975981][ T7161] /dev/rnullb0: Can't open blockdev
[ 1561.008221][ T4800] tipc: Node number set to 1
[ 1561.168986][ T7169] /dev/rnullb0: Can't open blockdev
[ 1561.176372][ T7170] /dev/rnullb0: Can't open blockdev
[ 1561.524375][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12637'.
[ 1561.600846][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12638'.
[ 1561.701321][ T7182] /dev/rnullb0: Can't open blockdev
[ 1561.712544][ T7182] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1561.920104][ T7188] /dev/rnullb0: Can't open blockdev
[ 1562.114750][ T7194] /dev/rnullb0: Can't open blockdev
[ 1562.378745][   T24] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1562.488403][ T7198] binder: 7197:7198 ioctl c0306201 2000000003c0 returned -14
[ 1562.540948][   T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1562.569312][   T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1562.588739][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1562.598034][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1562.613741][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1562.626218][   T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1562.642275][   T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1562.651819][   T24] usb 3-1: Product: syz
[ 1562.656161][   T24] usb 3-1: Manufacturer: syz
[ 1562.673337][   T24] cdc_wdm 3-1:1.0: skipping garbage
[ 1562.678806][   T24] cdc_wdm 3-1:1.0: skipping garbage
[ 1562.688290][   T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1562.701410][   T24] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1562.877382][   T24] usb 3-1: USB disconnect, device number 117
[ 1563.173574][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12649'.
[ 1563.258425][T20284] gspca_stk1135: reg_w 0x352 err -71
[ 1563.267372][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1563.277581][T20284] gspca_stk1135: Sensor write failed
[ 1563.285957][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1563.294328][T20284] gspca_stk1135: Sensor write failed
[ 1563.300939][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1563.307497][T20284] gspca_stk1135: Sensor read failed
[ 1563.313743][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1563.320665][T20284] gspca_stk1135: Sensor read failed
[ 1563.326120][T20284] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1563.333607][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1563.341656][T20284] gspca_stk1135: Sensor read failed
[ 1563.348228][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1563.355362][T20284] gspca_stk1135: Sensor read failed
[ 1563.384108][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1563.399265][T20284] gspca_stk1135: Sensor write failed
[ 1563.412599][T20284] gspca_stk1135: serial bus timeout: status=0x00
[ 1563.430619][T20284] gspca_stk1135: Sensor write failed
[ 1563.436407][T20284] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[ 1563.447660][T20284] usb 7-1: USB disconnect, device number 42
[ 1563.460720][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12651'.
[ 1564.199524][T20284] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1564.373343][T20284] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1564.394326][T20284] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1564.415999][T20284] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1564.449516][T20284] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1564.468662][T20284] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1564.497097][T20284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1564.509066][T20284] usb 3-1: Product: syz
[ 1564.516363][T20284] usb 3-1: Manufacturer: syz
[ 1564.521533][T20284] usb 3-1: SerialNumber: syz
[ 1564.842035][ T7231] /dev/rnullb0: Can't open blockdev
[ 1565.140320][ T1216] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1565.186058][ T7246] loop4: detected capacity change from 0 to 7
[ 1565.197534][ T7246] Dev loop4: unable to read RDB block 7
[ 1565.205705][ T7246]  loop4: unable to read partition table
[ 1565.216214][ T7246] loop4: partition table beyond EOD, truncated
[ 1565.223584][ T7246] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1565.319928][ T1216] usb 7-1: Using ep0 maxpacket: 32
[ 1565.341325][ T1216] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1565.376292][ T1216] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1565.387891][ T1216] usb 7-1: Product: syz
[ 1565.393874][ T7252] netlink: 'syz.5.12670': attribute type 10 has an invalid length.
[ 1565.411438][ T1216] usb 7-1: Manufacturer: syz
[ 1565.421613][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12670'.
[ 1565.431812][ T1216] usb 7-1: SerialNumber: syz
[ 1565.451725][ T1216] usb 7-1: config 0 descriptor??
[ 1565.471094][ T1216] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1565.516560][   T24] usb 3-1: USB disconnect, device number 118
[ 1565.880529][T26083] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1566.042039][T26083] usb 6-1: Using ep0 maxpacket: 16
[ 1566.055021][T26083] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 1566.068014][T26083] usb 6-1: config 0 has no interface number 0
[ 1566.084961][T26083] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1566.111472][T26083] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1566.151116][T26083] usb 6-1: config 0 interface 41 has no altsetting 0
[ 1566.183429][T26083] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1566.212432][T26083] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1566.243239][T26083] usb 6-1: Product: syz
[ 1566.247456][T26083] usb 6-1: Manufacturer: syz
[ 1566.254551][T26083] usb 6-1: SerialNumber: syz
[ 1566.274178][T26083] usb 6-1: config 0 descriptor??
[ 1566.291100][ T7257] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1566.312892][ T7257] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1566.326952][ T7261] tipc: Started in network mode
[ 1566.344634][ T7261] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1566.365878][ T7261] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[ 1566.387145][ T7261] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1566.545385][ T7257] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1566.566523][ T7257] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1566.781617][ T5905] hid-generic 0000:0000:0000.003C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[ 1567.083008][ T7273] FAULT_INJECTION: forcing a failure.
[ 1567.083008][ T7273] name failslab, interval 1, probability 0, space 0, times 0
[ 1567.097059][ T7273] CPU: 1 UID: 0 PID: 7273 Comm: syz.2.12680 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1567.097091][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1567.097104][ T7273] Call Trace:
[ 1567.097114][ T7273]  <TASK>
[ 1567.097123][ T7273]  dump_stack_lvl+0x189/0x250
[ 1567.097156][ T7273]  ? __pfx____ratelimit+0x10/0x10
[ 1567.097185][ T7273]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1567.097209][ T7273]  ? __pfx__printk+0x10/0x10
[ 1567.097236][ T7273]  ? __pfx___might_resched+0x10/0x10
[ 1567.097258][ T7273]  ? fs_reclaim_acquire+0x7d/0x100
[ 1567.097290][ T7273]  should_fail_ex+0x414/0x560
[ 1567.097330][ T7273]  should_failslab+0xa8/0x100
[ 1567.097358][ T7273]  __kmalloc_noprof+0xcb/0x4f0
[ 1567.097381][ T7273]  ? tomoyo_encode+0x28b/0x550
[ 1567.097411][ T7273]  tomoyo_encode+0x28b/0x550
[ 1567.097441][ T7273]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1567.097476][ T7273]  ? tomoyo_domain+0xd9/0x130
[ 1567.097508][ T7273]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1567.097541][ T7273]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1567.097576][ T7273]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1567.097628][ T7273]  ? __lock_acquire+0xab9/0xd20
[ 1567.097681][ T7273]  ? __fget_files+0x2a/0x420
[ 1567.097714][ T7273]  ? __fget_files+0x2a/0x420
[ 1567.097740][ T7273]  ? __fget_files+0x3a0/0x420
[ 1567.097767][ T7273]  ? __fget_files+0x2a/0x420
[ 1567.097798][ T7273]  security_file_ioctl+0xcb/0x2d0
[ 1567.097832][ T7273]  __se_sys_ioctl+0x47/0x170
[ 1567.097857][ T7273]  do_syscall_64+0xfa/0x3b0
[ 1567.097883][ T7273]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1567.097910][ T7273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1567.097930][ T7273]  ? clear_bhb_loop+0x60/0xb0
[ 1567.097956][ T7273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1567.097977][ T7273] RIP: 0033:0x7f7e11b8e929
[ 1567.097997][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1567.098015][ T7273] RSP: 002b:00007f7e1291e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1567.098038][ T7273] RAX: ffffffffffffffda RBX: 00007f7e11db5fa0 RCX: 00007f7e11b8e929
[ 1567.098054][ T7273] RDX: 0000200000001280 RSI: 00000000c018ae85 RDI: 0000000000000005
[ 1567.098068][ T7273] RBP: 00007f7e1291e090 R08: 0000000000000000 R09: 0000000000000000
[ 1567.098081][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1567.098095][ T7273] R13: 0000000000000000 R14: 00007f7e11db5fa0 R15: 00007ffca5d2a288
[ 1567.098128][ T7273]  </TASK>
[ 1567.098175][ T7273] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1567.199820][T26083] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1567.510924][ T5905] tipc: Node number set to 1
[ 1567.576012][ T7278] fuseblk: Unknown parameter 'Ñ%'
[ 1567.914885][ T7284] /dev/rnullb0: Can't open blockdev
[ 1568.253278][ T7290] /dev/rnullb0: Can't open blockdev
[ 1568.479440][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12690'.
[ 1568.503983][ T1216] gspca_stk1135: reg_w 0x352 err -71
[ 1568.510716][ T1216] gspca_stk1135: serial bus timeout: status=0x00
[ 1568.527086][ T1216] gspca_stk1135: Sensor write failed
[ 1568.546294][ T1216] gspca_stk1135: serial bus timeout: status=0x00
[ 1568.561000][ T1216] gspca_stk1135: Sensor write failed
[ 1568.572308][ T1216] gspca_stk1135: serial bus timeout: status=0x00
[ 1568.578926][ T1216] gspca_stk1135: Sensor read failed
[ 1568.587214][T26083] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1568.592122][ T1216] gspca_stk1135: serial bus timeout: status=0x00
[ 1568.604785][ T1216] gspca_stk1135: Sensor read failed
[ 1568.610029][ T1216] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1568.617589][ T1216] gspca_stk1135: serial bus timeout: status=0x00
[ 1568.624598][T26083] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1568.625130][T26083] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[ 1568.638750][ T1216] gspca_stk1135: Sensor read failed
[ 1568.648807][ T1216] gspca_stk1135: serial bus timeout: status=0x00
[ 1568.665587][ T1216] gspca_stk1135: Sensor read failed
[ 1568.676880][ T1216] gspca_stk1135: serial bus timeout: status=0x00
[ 1568.683128][T26083] usb 6-1: USB disconnect, device number 26
[ 1568.684280][ T1216] gspca_stk1135: Sensor write failed
[ 1568.704526][ T1216] gspca_stk1135: serial bus timeout: status=0x00
[ 1568.712211][ T1216] gspca_stk1135: Sensor write failed
[ 1568.717691][ T1216] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[ 1568.737480][ T1216] usb 7-1: USB disconnect, device number 43
[ 1568.766508][ T7299] /dev/rnullb0: Can't open blockdev
[ 1569.242304][ T7311] FAULT_INJECTION: forcing a failure.
[ 1569.242304][ T7311] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1569.283196][ T7311] CPU: 1 UID: 0 PID: 7311 Comm: syz.5.12696 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1569.283244][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1569.283258][ T7311] Call Trace:
[ 1569.283266][ T7311]  <TASK>
[ 1569.283276][ T7311]  dump_stack_lvl+0x189/0x250
[ 1569.283305][ T7311]  ? __pfx____ratelimit+0x10/0x10
[ 1569.283333][ T7311]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1569.283354][ T7311]  ? __pfx__printk+0x10/0x10
[ 1569.283376][ T7311]  ? __might_fault+0xb0/0x130
[ 1569.283410][ T7311]  should_fail_ex+0x414/0x560
[ 1569.283448][ T7311]  _copy_from_iter+0x1db/0x16f0
[ 1569.283483][ T7311]  ? rcu_is_watching+0x15/0xb0
[ 1569.283505][ T7311]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[ 1569.283531][ T7311]  ? __pfx__copy_from_iter+0x10/0x10
[ 1569.283563][ T7311]  ? __build_skb_around+0x257/0x3e0
[ 1569.283596][ T7311]  ? netlink_sendmsg+0x642/0xb30
[ 1569.283623][ T7311]  ? skb_put+0x11b/0x210
[ 1569.283656][ T7311]  netlink_sendmsg+0x6b2/0xb30
[ 1569.283695][ T7311]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1569.283727][ T7311]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1569.283761][ T7311]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1569.283789][ T7311]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1569.283817][ T7311]  __sock_sendmsg+0x219/0x270
[ 1569.283845][ T7311]  ____sys_sendmsg+0x505/0x830
[ 1569.283874][ T7311]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1569.283920][ T7311]  ? import_iovec+0x74/0xa0
[ 1569.283961][ T7311]  ___sys_sendmsg+0x21f/0x2a0
[ 1569.283984][ T7311]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1569.284050][ T7311]  ? __fget_files+0x2a/0x420
[ 1569.284079][ T7311]  ? __fget_files+0x3a0/0x420
[ 1569.284119][ T7311]  __x64_sys_sendmsg+0x19b/0x260
[ 1569.284143][ T7311]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1569.284174][ T7311]  ? __pfx_ksys_write+0x10/0x10
[ 1569.284197][ T7311]  ? rcu_is_watching+0x15/0xb0
[ 1569.284222][ T7311]  ? do_syscall_64+0xbe/0x3b0
[ 1569.284253][ T7311]  do_syscall_64+0xfa/0x3b0
[ 1569.284278][ T7311]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1569.284303][ T7311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1569.284322][ T7311]  ? clear_bhb_loop+0x60/0xb0
[ 1569.284344][ T7311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1569.284364][ T7311] RIP: 0033:0x7f6d4f18e929
[ 1569.284382][ T7311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1569.284400][ T7311] RSP: 002b:00007f6d500d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1569.284421][ T7311] RAX: ffffffffffffffda RBX: 00007f6d4f3b5fa0 RCX: 00007f6d4f18e929
[ 1569.284437][ T7311] RDX: 0000000000000820 RSI: 0000200000000000 RDI: 0000000000000005
[ 1569.284451][ T7311] RBP: 00007f6d500d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1569.284464][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1569.284477][ T7311] R13: 0000000000000000 R14: 00007f6d4f3b5fa0 R15: 00007fff25bbccc8
[ 1569.284509][ T7311]  </TASK>
[ 1569.626000][ T7316] binder: 7315:7316 ioctl c0306201 2000000003c0 returned -14
[ 1569.894919][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12702'.
[ 1570.002772][T26083] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1570.191520][T26083] usb 7-1: Using ep0 maxpacket: 32
[ 1570.199322][T26083] usb 7-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1570.214730][T26083] usb 7-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 8
[ 1570.240909][T26083] usb 7-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1570.275194][T26083] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1570.286801][T26083] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1570.300978][T26083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.309741][T26083] usb 7-1: Product: 症艉뙘�跾⻊ꖻ衾㜂ڥ孵饿줿ٳᣕ�὾뫕霶�嗙∓ՠᑢ镧綟ด✪ソᵈ�枮킟�ｺ㢷ꆀ�籆늊㄂뱗궿魷Ժࡠ畻䧀쫻鷶桛௪귩Ќ빢ಾꮓ鋽뭨뗉㙖ꩲꌑ֓�얀⡟쭆黷᳤�鱤撘壷਴ﰒ๦
[ 1570.338891][T26083] usb 7-1: Manufacturer: �
[ 1570.345415][T26083] usb 7-1: SerialNumber: syz
[ 1570.354846][   T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1570.356464][ T7321] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1570.375325][ T7321] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1570.513820][ T5924] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1570.535036][   T24] usb 6-1: Using ep0 maxpacket: 32
[ 1570.558253][   T24] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1570.577799][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.591491][   T24] usb 6-1: Product: syz
[ 1570.595701][   T24] usb 6-1: Manufacturer: syz
[ 1570.610529][   T24] usb 6-1: SerialNumber: syz
[ 1570.633249][   T24] usb 6-1: config 0 descriptor??
[ 1570.633378][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1570.656530][   T24] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1570.666773][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1570.681540][ T5924] usb 3-1: Using ep0 maxpacket: 16
[ 1570.693981][ T5924] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 1570.722564][ T5924] usb 3-1: config 0 has no interface number 0
[ 1570.728770][ T5924] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1570.742890][ T7321] /dev/rnullb0: Can't open blockdev
[ 1570.749322][ T5924] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1570.759930][ T5924] usb 3-1: config 0 interface 41 has no altsetting 0
[ 1570.803707][ T5924] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1570.835300][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.858198][T26083] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[ 1570.868057][ T5924] usb 3-1: Product: syz
[ 1570.875361][ T5924] usb 3-1: Manufacturer: syz
[ 1570.886224][ T5924] usb 3-1: SerialNumber: syz
[ 1570.898591][T26083] usb 7-1: USB disconnect, device number 44
[ 1570.908483][ T5924] usb 3-1: config 0 descriptor??
[ 1570.921701][ T7331] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1570.935417][ T7331] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1571.165505][ T7331] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1571.182955][ T7331] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1571.796346][ T7346] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[ 1571.819278][ T5924] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1571.876031][ T7347] /dev/rnullb0: Can't open blockdev
[ 1572.078020][ T7353] netlink: 'syz.7.12715': attribute type 10 has an invalid length.
[ 1572.267320][ T7357] overlay: Unknown parameter 'mask'
[ 1572.441572][ T7361] loop4: detected capacity change from 0 to 7
[ 1572.449323][ T7361] Dev loop4: unable to read RDB block 7
[ 1572.460391][ T7361]  loop4: unable to read partition table
[ 1572.468585][ T7361] loop4: partition table beyond EOD, truncated
[ 1572.478824][ T7361] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1572.772331][ T7371] netlink: 'syz.7.12721': attribute type 10 has an invalid length.
[ 1572.792639][ T7371] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12721'.
[ 1572.818326][ T7371] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1572.830161][ T7371] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[ 1573.058006][ T5924] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1573.058676][ T7377] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1573.082347][ T1216] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1573.090010][ T5924] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1573.090504][ T5924] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[ 1573.166772][ T5924] usb 3-1: USB disconnect, device number 119
[ 1573.283664][ T1216] usb 7-1: Using ep0 maxpacket: 8
[ 1573.291611][ T1216] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1573.312357][ T1216] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1573.322130][ T1216] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1573.352431][ T1216] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1573.381474][ T1216] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1573.396994][ T1216] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1573.409787][ T1216] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1573.458783][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12727'.
[ 1573.634796][ T1216] usb 7-1: usb_control_msg returned -32
[ 1573.640647][ T1216] usbtmc 7-1:16.0: can't read capabilities
[ 1573.694980][   T24] gspca_stk1135: reg_w 0x352 err -71
[ 1573.701340][   T24] gspca_stk1135: serial bus timeout: status=0x00
[ 1573.725665][   T24] gspca_stk1135: Sensor write failed
[ 1573.731017][   T24] gspca_stk1135: serial bus timeout: status=0x00
[ 1573.771578][ T1216] usb 7-1: USB disconnect, device number 45
[ 1573.784415][   T24] gspca_stk1135: Sensor write failed
[ 1573.791057][   T24] gspca_stk1135: serial bus timeout: status=0x00
[ 1573.806211][   T24] gspca_stk1135: Sensor read failed
[ 1573.818062][   T24] gspca_stk1135: serial bus timeout: status=0x00
[ 1573.826964][   T24] gspca_stk1135: Sensor read failed
[ 1573.832193][   T24] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1573.839257][   T24] gspca_stk1135: serial bus timeout: status=0x00
[ 1573.848688][   T24] gspca_stk1135: Sensor read failed
[ 1573.872560][   T24] gspca_stk1135: serial bus timeout: status=0x00
[ 1573.878956][   T24] gspca_stk1135: Sensor read failed
[ 1573.892760][   T24] gspca_stk1135: serial bus timeout: status=0x00
[ 1573.903109][   T24] gspca_stk1135: Sensor write failed
[ 1573.908822][   T24] gspca_stk1135: serial bus timeout: status=0x00
[ 1573.916857][   T24] gspca_stk1135: Sensor write failed
[ 1573.922267][   T24] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1573.951542][   T24] usb 6-1: USB disconnect, device number 27
[ 1574.495110][ T7407] /dev/rnullb0: Can't open blockdev
[ 1574.509485][ T7390] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1574.520826][ T7390] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1574.536753][ T7390] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1574.545485][ T7390] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1574.551617][ T7390] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1574.562035][ T7390] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1574.570894][ T7390] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1574.577281][ T7390] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1574.587721][ T7390] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1574.822705][ T7411] netlink: 'syz.7.12737': attribute type 4 has an invalid length.
[ 1575.003910][ T5924] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1575.133385][T26083] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[ 1575.182984][ T5924] usb 6-1: Using ep0 maxpacket: 16
[ 1575.190641][ T5924] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 1575.202002][ T5924] usb 6-1: config 0 has no interface number 0
[ 1575.209752][ T5924] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1575.224562][ T5924] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1575.236293][ T5924] usb 6-1: config 0 interface 41 has no altsetting 0
[ 1575.246787][ T5924] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1575.257521][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1575.265819][ T5905] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1575.274071][ T5924] usb 6-1: Product: syz
[ 1575.278492][ T5924] usb 6-1: Manufacturer: syz
[ 1575.286136][ T5924] usb 6-1: SerialNumber: syz
[ 1575.299452][ T5924] usb 6-1: config 0 descriptor??
[ 1575.307863][T26083] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86
[ 1575.322060][T26083] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1575.334411][ T7413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1575.341693][ T7413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1575.355181][T26083] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[ 1575.364904][T26083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1575.373540][T26083] usb 7-1: Product: syz
[ 1575.377977][T26083] usb 7-1: Manufacturer: syz
[ 1575.382632][T26083] usb 7-1: SerialNumber: syz
[ 1575.391471][T26083] usb 7-1: config 0 descriptor??
[ 1575.433100][ T5905] usb 3-1: Using ep0 maxpacket: 16
[ 1575.443692][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1575.455532][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1575.466041][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1575.481835][ T5905] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1575.496040][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1575.510139][ T5905] usb 3-1: config 0 descriptor??
[ 1575.571827][ T7413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1575.589636][ T7413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1575.628372][ T7421] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12740'.
[ 1575.649947][T26083] powermate: unknown product id 0240
[ 1575.658384][T26083] powermate: Expected payload of 3--6 bytes, found 255 bytes!
[ 1575.675232][T26083] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input161
[ 1575.715027][    C0] powermate: config urb returned -71
[ 1575.722374][    C0] powermate: config urb returned -71
[ 1575.730272][    C0] powermate: config urb returned -71
[ 1575.735815][    C0] powermate: config urb returned -71
[ 1575.752483][T26083] usb 7-1: USB disconnect, device number 46
[ 1575.758712][    C0] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[ 1575.933199][T17569] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1575.948958][ T5905] hid_parser_main: 5 callbacks suppressed
[ 1575.949003][ T5905] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[ 1575.967571][ T5905] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[ 1575.976087][ T5905] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[ 1575.984133][ T5905] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[ 1575.991534][ T5905] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[ 1575.999044][ T5905] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[ 1576.007324][ T5905] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[ 1576.015626][ T5905] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[ 1576.023093][ T5905] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[ 1576.030566][ T5905] microsoft 0003:045E:07DA.003D: unknown main item tag 0x0
[ 1576.049933][ T5905] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.003D/input/input162
[ 1576.135661][ T5905] microsoft 0003:045E:07DA.003D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 1576.207895][ T5924] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[ 1576.405081][ T7431] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1576.432456][ T7425] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1576.525604][T26083] usb 3-1: USB disconnect, device number 120
[ 1576.573862][T17569] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1576.573891][T27758] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1576.604351][ T7441] binder: 7440:7441 ioctl c0306201 2000000003c0 returned -14
[ 1576.697133][ T7443] FAULT_INJECTION: forcing a failure.
[ 1576.697133][ T7443] name failslab, interval 1, probability 0, space 0, times 0
[ 1576.717148][ T7443] CPU: 0 UID: 0 PID: 7443 Comm: syz.6.12748 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1576.717179][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1576.717193][ T7443] Call Trace:
[ 1576.717202][ T7443]  <TASK>
[ 1576.717211][ T7443]  dump_stack_lvl+0x189/0x250
[ 1576.717240][ T7443]  ? __pfx____ratelimit+0x10/0x10
[ 1576.717269][ T7443]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1576.717293][ T7443]  ? __pfx__printk+0x10/0x10
[ 1576.717323][ T7443]  ? ref_tracker_alloc+0x318/0x460
[ 1576.717350][ T7443]  should_fail_ex+0x414/0x560
[ 1576.717388][ T7443]  should_failslab+0xa8/0x100
[ 1576.717417][ T7443]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1576.717439][ T7443]  ? skb_clone+0x212/0x3a0
[ 1576.717467][ T7443]  skb_clone+0x212/0x3a0
[ 1576.717493][ T7443]  __netlink_deliver_tap+0x404/0x850
[ 1576.717537][ T7443]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1576.717568][ T7443]  netlink_deliver_tap+0x19c/0x1b0
[ 1576.717615][ T7443]  netlink_unicast+0x72f/0x8d0
[ 1576.717652][ T7443]  netlink_sendmsg+0x805/0xb30
[ 1576.717690][ T7443]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1576.717729][ T7443]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1576.717754][ T7443]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1576.717783][ T7443]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1576.717813][ T7443]  __sock_sendmsg+0x219/0x270
[ 1576.717843][ T7443]  ____sys_sendmsg+0x505/0x830
[ 1576.717869][ T7443]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1576.717900][ T7443]  ? import_iovec+0x74/0xa0
[ 1576.717924][ T7443]  ___sys_sendmsg+0x21f/0x2a0
[ 1576.717947][ T7443]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1576.718006][ T7443]  ? __fget_files+0x2a/0x420
[ 1576.718033][ T7443]  ? __fget_files+0x3a0/0x420
[ 1576.718072][ T7443]  __x64_sys_sendmsg+0x19b/0x260
[ 1576.718096][ T7443]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1576.718127][ T7443]  ? __pfx_ksys_write+0x10/0x10
[ 1576.718149][ T7443]  ? rcu_is_watching+0x15/0xb0
[ 1576.718176][ T7443]  ? do_syscall_64+0xbe/0x3b0
[ 1576.718208][ T7443]  do_syscall_64+0xfa/0x3b0
[ 1576.718234][ T7443]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1576.718279][ T7443]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.718299][ T7443]  ? clear_bhb_loop+0x60/0xb0
[ 1576.718325][ T7443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.718346][ T7443] RIP: 0033:0x7fbac758e929
[ 1576.718365][ T7443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1576.718383][ T7443] RSP: 002b:00007fbac83ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1576.718405][ T7443] RAX: ffffffffffffffda RBX: 00007fbac77b5fa0 RCX: 00007fbac758e929
[ 1576.718421][ T7443] RDX: 0000000000000820 RSI: 0000200000000000 RDI: 0000000000000005
[ 1576.718434][ T7443] RBP: 00007fbac83ed090 R08: 0000000000000000 R09: 0000000000000000
[ 1576.718448][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1576.718461][ T7443] R13: 0000000000000000 R14: 00007fbac77b5fa0 R15: 00007fff4cb928e8
[ 1576.718494][ T7443]  </TASK>
[ 1576.718559][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12748'.
[ 1576.959372][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1577.160702][ T7445] syz.6.12749: attempt to access beyond end of device
[ 1577.160702][ T7445] loop6: rw=0, sector=64, nr_sectors = 1 limit=0
[ 1577.179275][ T7445] syz.6.12749: attempt to access beyond end of device
[ 1577.179275][ T7445] loop6: rw=0, sector=256, nr_sectors = 1 limit=0
[ 1577.200108][ T7445] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1577.212843][ T7445] syz.6.12749: attempt to access beyond end of device
[ 1577.212843][ T7445] loop6: rw=0, sector=512, nr_sectors = 1 limit=0
[ 1577.226289][ T7445] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[ 1577.237006][ T7445] syz.6.12749: attempt to access beyond end of device
[ 1577.237006][ T7445] loop6: rw=0, sector=64, nr_sectors = 2 limit=0
[ 1577.251263][ T7445] syz.6.12749: attempt to access beyond end of device
[ 1577.251263][ T7445] loop6: rw=0, sector=512, nr_sectors = 2 limit=0
[ 1577.265741][ T7445] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1577.278231][ T7445] syz.6.12749: attempt to access beyond end of device
[ 1577.278231][ T7445] loop6: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 1577.295996][ T7445] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[ 1577.307938][ T7445] syz.6.12749: attempt to access beyond end of device
[ 1577.307938][ T7445] loop6: rw=0, sector=64, nr_sectors = 4 limit=0
[ 1577.327739][ T7445] syz.6.12749: attempt to access beyond end of device
[ 1577.327739][ T7445] loop6: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 1577.344382][ T7445] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1577.359125][ T7445] syz.6.12749: attempt to access beyond end of device
[ 1577.359125][ T7445] loop6: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 1577.373931][ T7445] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[ 1577.393913][ T7445] syz.6.12749: attempt to access beyond end of device
[ 1577.393913][ T7445] loop6: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1577.418870][ T7445] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1577.438662][ T7449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12751'.
[ 1577.438831][ T7445] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[ 1577.466624][ T7445] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1)
[ 1577.480652][ T5924] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[ 1577.495301][ T5924] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[ 1577.508872][ T5924] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[ 1577.541446][ T5924] usb 6-1: USB disconnect, device number 28
[ 1577.874168][ T7458] /dev/sg0: Can't lookup blockdev
[ 1578.013310][T27758] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1578.086752][ T7465] /dev/rnullb0: Can't open blockdev
[ 1578.290646][ T7476] netlink: 'syz.7.12762': attribute type 10 has an invalid length.
[ 1578.380604][ T7477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1578.460373][ T7477] ceph: Path missing in source
[ 1578.577488][ T7471] tipc: Resetting bearer <eth:syzkaller0>
[ 1578.653543][T27758] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1578.657211][T17569] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1578.795632][ T7491] loop4: detected capacity change from 0 to 7
[ 1578.810480][ T7491] Dev loop4: unable to read RDB block 7
[ 1578.847262][ T7491]  loop4: unable to read partition table
[ 1578.853402][ T7491] loop4: partition table beyond EOD, truncated
[ 1578.894052][ T7491] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1579.933461][ T5924] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1580.093303][ T5924] usb 6-1: Using ep0 maxpacket: 32
[ 1580.093551][T17569] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1580.118351][ T5924] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1580.153309][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1580.173369][ T5924] usb 6-1: Product: syz
[ 1580.177747][ T5924] usb 6-1: Manufacturer: syz
[ 1580.194860][ T5924] usb 6-1: SerialNumber: syz
[ 1580.213326][ T5924] usb 6-1: config 0 descriptor??
[ 1580.234287][ T5924] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1580.741172][T17569] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1580.747389][T17569] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1581.940985][ T7471] tipc: Disabling bearer <eth:syzkaller0>
[ 1582.332186][ T7513] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1582.417623][ T7514] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12773'.
[ 1582.454239][ T7514] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1582.493698][ T1216] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1582.526412][ T7518] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[ 1582.567434][ T7518] /dev/rnullb0: Can't open blockdev
[ 1582.666199][ T1216] usb 7-1: Using ep0 maxpacket: 8
[ 1582.676817][ T1216] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1582.703099][ T1216] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1582.747262][ T1216] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1582.764748][ T1216] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1582.793434][ T1216] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1582.809073][ T1216] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1582.819723][ T1216] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1583.034724][ T1216] usb 7-1: usb_control_msg returned -32
[ 1583.046584][ T1216] usbtmc 7-1:16.0: can't read capabilities
[ 1583.267442][ T7526] /dev/rnullb0: Can't open blockdev
[ 1583.276295][ T7526] /dev/rnullb0: Can't open blockdev
[ 1583.287012][ T5924] gspca_stk1135: reg_w 0x352 err -71
[ 1583.315196][ T5924] gspca_stk1135: serial bus timeout: status=0x00
[ 1583.332443][ T5924] gspca_stk1135: Sensor write failed
[ 1583.346753][ T5924] gspca_stk1135: serial bus timeout: status=0x00
[ 1583.353805][ T5924] gspca_stk1135: Sensor write failed
[ 1583.359289][ T5924] gspca_stk1135: serial bus timeout: status=0x00
[ 1583.370575][ T5924] gspca_stk1135: Sensor read failed
[ 1583.387859][ T5924] gspca_stk1135: serial bus timeout: status=0x00
[ 1583.395383][ T5924] gspca_stk1135: Sensor read failed
[ 1583.400887][ T5924] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1583.410174][ T5924] gspca_stk1135: serial bus timeout: status=0x00
[ 1583.418553][ T5924] gspca_stk1135: Sensor read failed
[ 1583.428084][ T5924] gspca_stk1135: serial bus timeout: status=0x00
[ 1583.436403][ T5924] gspca_stk1135: Sensor read failed
[ 1583.441759][ T5924] gspca_stk1135: serial bus timeout: status=0x00
[ 1583.451858][ T5924] gspca_stk1135: Sensor write failed
[ 1583.478035][ T5924] gspca_stk1135: serial bus timeout: status=0x00
[ 1583.490408][ T5924] gspca_stk1135: Sensor write failed
[ 1583.506897][ T5924] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1583.519242][ T5924] usb 6-1: USB disconnect, device number 29
[ 1583.969688][ T7542] /dev/rnullb0: Can't open blockdev
[ 1584.007549][ T7544] /dev/rnullb0: Can't open blockdev
[ 1584.406711][ T7560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12791'.
[ 1584.597983][ T7562] /dev/rnullb0: Can't open blockdev
[ 1585.019373][ T7574] binder: 7573:7574 ioctl c0306201 2000000003c0 returned -14
[ 1585.027020][T26083] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1585.178740][ T7576] FAULT_INJECTION: forcing a failure.
[ 1585.178740][ T7576] name failslab, interval 1, probability 0, space 0, times 0
[ 1585.201260][ T7578] /dev/rnullb0: Can't open blockdev
[ 1585.211310][T26083] usb 6-1: Using ep0 maxpacket: 32
[ 1585.213500][ T7576] CPU: 1 UID: 0 PID: 7576 Comm: syz.7.12798 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1585.213531][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1585.213549][ T7576] Call Trace:
[ 1585.213558][ T7576]  <TASK>
[ 1585.213567][ T7576]  dump_stack_lvl+0x189/0x250
[ 1585.213599][ T7576]  ? __pfx____ratelimit+0x10/0x10
[ 1585.213627][ T7576]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1585.213651][ T7576]  ? __pfx__printk+0x10/0x10
[ 1585.213695][ T7576]  ? __pfx___might_resched+0x10/0x10
[ 1585.213719][ T7576]  ? fs_reclaim_acquire+0x7d/0x100
[ 1585.213754][ T7576]  should_fail_ex+0x414/0x560
[ 1585.213794][ T7576]  should_failslab+0xa8/0x100
[ 1585.213825][ T7576]  __kmalloc_noprof+0xcb/0x4f0
[ 1585.213846][ T7576]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 1585.213880][ T7576]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 1585.213915][ T7576]  genl_family_rcv_msg_doit+0xb8/0x300
[ 1585.213948][ T7576]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1585.213987][ T7576]  ? rcu_is_watching+0x15/0xb0
[ 1585.214011][ T7576]  ? apparmor_capable+0x137/0x1b0
[ 1585.214042][ T7576]  ? bpf_lsm_capable+0x9/0x20
[ 1585.214063][ T7576]  ? security_capable+0x7e/0x2e0
[ 1585.214099][ T7576]  genl_rcv_msg+0x60e/0x790
[ 1585.214129][ T7576]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1585.214148][ T7576]  ? ref_tracker_free+0x63a/0x7d0
[ 1585.214169][ T7576]  ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10
[ 1585.214197][ T7576]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1585.214233][ T7576]  netlink_rcv_skb+0x208/0x470
[ 1585.214264][ T7576]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1585.214288][ T7576]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1585.214355][ T7576]  ? down_read+0x1ad/0x2e0
[ 1585.214390][ T7576]  genl_rcv+0x28/0x40
[ 1585.214412][ T7576]  netlink_unicast+0x75b/0x8d0
[ 1585.214452][ T7576]  netlink_sendmsg+0x805/0xb30
[ 1585.214498][ T7576]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1585.214533][ T7576]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1585.214559][ T7576]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1585.214590][ T7576]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1585.214622][ T7576]  __sock_sendmsg+0x219/0x270
[ 1585.214656][ T7576]  ____sys_sendmsg+0x505/0x830
[ 1585.214685][ T7576]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1585.214730][ T7576]  ? import_iovec+0x74/0xa0
[ 1585.214754][ T7576]  ___sys_sendmsg+0x21f/0x2a0
[ 1585.214778][ T7576]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1585.214837][ T7576]  ? __fget_files+0x2a/0x420
[ 1585.214865][ T7576]  ? __fget_files+0x3a0/0x420
[ 1585.214904][ T7576]  __x64_sys_sendmsg+0x19b/0x260
[ 1585.214928][ T7576]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1585.214961][ T7576]  ? __pfx_ksys_write+0x10/0x10
[ 1585.214983][ T7576]  ? rcu_is_watching+0x15/0xb0
[ 1585.215010][ T7576]  ? do_syscall_64+0xbe/0x3b0
[ 1585.215041][ T7576]  do_syscall_64+0xfa/0x3b0
[ 1585.215067][ T7576]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1585.215102][ T7576]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1585.215124][ T7576]  ? clear_bhb_loop+0x60/0xb0
[ 1585.215149][ T7576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1585.215169][ T7576] RIP: 0033:0x7f441338e929
[ 1585.215190][ T7576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1585.215207][ T7576] RSP: 002b:00007f44142c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1585.215231][ T7576] RAX: ffffffffffffffda RBX: 00007f44135b5fa0 RCX: 00007f441338e929
[ 1585.215247][ T7576] RDX: 0000000000000820 RSI: 0000200000000000 RDI: 0000000000000005
[ 1585.215260][ T7576] RBP: 00007f44142c6090 R08: 0000000000000000 R09: 0000000000000000
[ 1585.215274][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1585.215286][ T7576] R13: 0000000000000000 R14: 00007f44135b5fa0 R15: 00007ffdd7c83198
[ 1585.215319][ T7576]  </TASK>
[ 1585.491699][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12801'.
[ 1585.496376][   T10] usb 7-1: USB disconnect, device number 47
[ 1585.610274][T26083] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1585.633084][T26083] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1585.661004][T26083] usb 6-1: Product: syz
[ 1585.685323][T26083] usb 6-1: Manufacturer: syz
[ 1585.690008][T26083] usb 6-1: SerialNumber: syz
[ 1585.732163][T26083] usb 6-1: config 0 descriptor??
[ 1585.787706][T26083] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1586.463327][   T10] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1586.623498][   T10] usb 7-1: Using ep0 maxpacket: 8
[ 1586.641328][   T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice= 0.6d
[ 1586.667121][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1586.677314][   T10] usb 7-1: Product: syz
[ 1586.681545][   T10] usb 7-1: Manufacturer: syz
[ 1586.686935][   T10] usb 7-1: SerialNumber: syz
[ 1586.707257][   T10] usb 7-1: config 0 descriptor??
[ 1586.717913][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1586.965487][ T7604] netlink: 'syz.2.12811': attribute type 10 has an invalid length.
[ 1586.980713][ T7604] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1586.990487][ T7604] team0: Port device bond0 added
[ 1587.100613][ T7606] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1587.127696][ T7606] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1588.436924][ T7617] loop4: detected capacity change from 0 to 7
[ 1588.446382][ T7617] Dev loop4: unable to read RDB block 7
[ 1588.452082][ T7617]  loop4: unable to read partition table
[ 1588.458919][ T7617] loop4: partition table beyond EOD, truncated
[ 1588.465579][ T7617] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1588.772378][ T7621] /dev/rnullb0: Can't open blockdev
[ 1588.841310][T26083] gspca_stk1135: reg_w 0x352 err -71
[ 1588.850423][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1588.866562][T26083] gspca_stk1135: Sensor write failed
[ 1588.872110][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1588.878964][T26083] gspca_stk1135: Sensor write failed
[ 1588.885296][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1588.891714][T26083] gspca_stk1135: Sensor read failed
[ 1588.905555][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1588.913422][T26083] gspca_stk1135: Sensor read failed
[ 1588.918730][T26083] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1588.926657][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1588.933671][T26083] gspca_stk1135: Sensor read failed
[ 1588.939121][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1588.948698][T26083] gspca_stk1135: Sensor read failed
[ 1588.964135][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1588.977288][T26083] gspca_stk1135: Sensor write failed
[ 1588.990401][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1589.003858][T26083] gspca_stk1135: Sensor write failed
[ 1589.011990][T26083] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1589.027488][T26083] usb 6-1: USB disconnect, device number 30
[ 1589.218162][ T7627] /dev/rnullb0: Can't open blockdev
[ 1589.237113][ T7627] /dev/rnullb0: Can't open blockdev
[ 1589.266885][ T7631] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1589.416206][ T7636] netlink: 'syz.2.12823': attribute type 10 has an invalid length.
[ 1589.448487][ T7636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12823'.
[ 1590.427313][ T7144] usb 7-1: USB disconnect, device number 48
[ 1590.550539][ T7652] /dev/rnullb0: Can't open blockdev
[ 1590.863380][ T7144] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1591.033181][ T7144] usb 7-1: Using ep0 maxpacket: 16
[ 1591.045931][ T7144] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[ 1591.060924][ T7144] usb 7-1: config 0 has no interface number 0
[ 1591.063482][T26083] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1591.067685][ T7144] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1591.088215][ T7144] usb 7-1: config 0 interface 41 has no altsetting 0
[ 1591.097898][ T7144] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1591.114337][ T7144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.122355][ T7144] usb 7-1: Product: syz
[ 1591.129427][ T7144] usb 7-1: Manufacturer: syz
[ 1591.136865][ T7144] usb 7-1: SerialNumber: syz
[ 1591.148385][ T7144] usb 7-1: config 0 descriptor??
[ 1591.155534][ T7654] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1591.168477][ T7144] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22
[ 1591.233086][T26083] usb 6-1: Using ep0 maxpacket: 32
[ 1591.250143][T26083] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1591.260925][T26083] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.269190][T26083] usb 6-1: Product: syz
[ 1591.273598][T26083] usb 6-1: Manufacturer: syz
[ 1591.278220][T26083] usb 6-1: SerialNumber: syz
[ 1591.285926][T26083] usb 6-1: config 0 descriptor??
[ 1591.293230][ T5924] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1591.303622][T26083] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1591.463276][ T5924] usb 3-1: Using ep0 maxpacket: 32
[ 1591.475642][ T5924] usb 3-1: config 38 has an invalid descriptor of length 0, skipping remainder of the config
[ 1591.491070][ T5924] usb 3-1: config 38 has 0 interfaces, different from the descriptor's value: 25
[ 1591.505629][ T5924] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[ 1591.522172][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.531209][ T5924] usb 3-1: Product: syz
[ 1591.541218][ T5924] usb 3-1: Manufacturer: syz
[ 1591.547699][ T5924] usb 3-1: SerialNumber: syz
[ 1591.762709][ T5924] usb 3-1: USB disconnect, device number 121
[ 1592.229174][   T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1592.412209][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1592.425883][   T10] usb 3-1: config 38 has an invalid descriptor of length 0, skipping remainder of the config
[ 1592.459253][   T10] usb 3-1: config 38 has 0 interfaces, different from the descriptor's value: 25
[ 1592.504293][   T10] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[ 1592.516105][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1592.525236][   T10] usb 3-1: Product: syz
[ 1592.529801][   T10] usb 3-1: Manufacturer: syz
[ 1592.536200][   T10] usb 3-1: SerialNumber: syz
[ 1592.766746][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12837'.
[ 1592.803765][   T10] usb 3-1: USB disconnect, device number 122
[ 1593.312870][ T7686] binder: 7685:7686 ioctl c0306201 2000000003c0 returned -14
[ 1593.405490][ T7688] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12845'.
[ 1593.415576][ T7688] FAULT_INJECTION: forcing a failure.
[ 1593.415576][ T7688] name failslab, interval 1, probability 0, space 0, times 0
[ 1593.429630][ T7688] CPU: 0 UID: 0 PID: 7688 Comm: syz.7.12845 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1593.429657][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1593.429670][ T7688] Call Trace:
[ 1593.429681][ T7688]  <TASK>
[ 1593.429689][ T7688]  dump_stack_lvl+0x189/0x250
[ 1593.429717][ T7688]  ? __pfx____ratelimit+0x10/0x10
[ 1593.429759][ T7688]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1593.429781][ T7688]  ? __pfx__printk+0x10/0x10
[ 1593.429810][ T7688]  ? __pfx___might_resched+0x10/0x10
[ 1593.429829][ T7688]  ? fs_reclaim_acquire+0x7d/0x100
[ 1593.429861][ T7688]  should_fail_ex+0x414/0x560
[ 1593.429896][ T7688]  should_failslab+0xa8/0x100
[ 1593.429922][ T7688]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1593.429944][ T7688]  ? __alloc_skb+0x112/0x2d0
[ 1593.429987][ T7688]  __alloc_skb+0x112/0x2d0
[ 1593.430017][ T7688]  netlink_ack+0x146/0xa50
[ 1593.430041][ T7688]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1593.430059][ T7688]  ? ref_tracker_free+0x63a/0x7d0
[ 1593.430082][ T7688]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1593.430112][ T7688]  netlink_rcv_skb+0x28c/0x470
[ 1593.430139][ T7688]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1593.430161][ T7688]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1593.430204][ T7688]  ? down_read+0x1ad/0x2e0
[ 1593.430232][ T7688]  genl_rcv+0x28/0x40
[ 1593.430250][ T7688]  netlink_unicast+0x75b/0x8d0
[ 1593.430284][ T7688]  netlink_sendmsg+0x805/0xb30
[ 1593.430320][ T7688]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1593.430350][ T7688]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1593.430373][ T7688]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1593.430399][ T7688]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1593.430426][ T7688]  __sock_sendmsg+0x219/0x270
[ 1593.430453][ T7688]  ____sys_sendmsg+0x505/0x830
[ 1593.430478][ T7688]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1593.430506][ T7688]  ? import_iovec+0x74/0xa0
[ 1593.430535][ T7688]  ___sys_sendmsg+0x21f/0x2a0
[ 1593.430557][ T7688]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1593.430609][ T7688]  ? __fget_files+0x2a/0x420
[ 1593.430634][ T7688]  ? __fget_files+0x3a0/0x420
[ 1593.430668][ T7688]  __x64_sys_sendmsg+0x19b/0x260
[ 1593.430689][ T7688]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1593.430717][ T7688]  ? __pfx_ksys_write+0x10/0x10
[ 1593.430736][ T7688]  ? rcu_is_watching+0x15/0xb0
[ 1593.430760][ T7688]  ? do_syscall_64+0xbe/0x3b0
[ 1593.430788][ T7688]  do_syscall_64+0xfa/0x3b0
[ 1593.430812][ T7688]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1593.430844][ T7688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1593.430862][ T7688]  ? clear_bhb_loop+0x60/0xb0
[ 1593.430884][ T7688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1593.430901][ T7688] RIP: 0033:0x7f441338e929
[ 1593.430917][ T7688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1593.430932][ T7688] RSP: 002b:00007f44142c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1593.430951][ T7688] RAX: ffffffffffffffda RBX: 00007f44135b5fa0 RCX: 00007f441338e929
[ 1593.430964][ T7688] RDX: 0000000000000820 RSI: 0000200000000000 RDI: 0000000000000005
[ 1593.430976][ T7688] RBP: 00007f44142c6090 R08: 0000000000000000 R09: 0000000000000000
[ 1593.430988][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1593.430998][ T7688] R13: 0000000000000000 R14: 00007f44135b5fa0 R15: 00007ffdd7c83198
[ 1593.431026][ T7688]  </TASK>
[ 1593.752899][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1593.832472][ T5924] usb 7-1: USB disconnect, device number 49
[ 1593.886508][ T7690] /dev/rnullb0: Can't open blockdev
[ 1594.059932][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12848'.
[ 1594.521776][ T7712] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1594.547803][ T7713] /dev/rnullb0: Can't open blockdev
[ 1594.636469][T26083] gspca_stk1135: reg_w 0x352 err -71
[ 1594.642899][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1594.655646][T26083] gspca_stk1135: Sensor write failed
[ 1594.660990][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1594.683016][T26083] gspca_stk1135: Sensor write failed
[ 1594.698633][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1594.722664][T26083] gspca_stk1135: Sensor read failed
[ 1594.742885][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1594.755729][T26083] gspca_stk1135: Sensor read failed
[ 1594.771157][T26083] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1594.790495][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1594.803201][T26083] gspca_stk1135: Sensor read failed
[ 1594.808498][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1594.822281][   T10] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1594.837720][T26083] gspca_stk1135: Sensor read failed
[ 1594.851653][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1594.862200][T26083] gspca_stk1135: Sensor write failed
[ 1594.871990][T26083] gspca_stk1135: serial bus timeout: status=0x00
[ 1594.879108][T26083] gspca_stk1135: Sensor write failed
[ 1594.889045][T26083] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1594.925376][T26083] usb 6-1: USB disconnect, device number 31
[ 1595.013197][   T10] usb 3-1: Using ep0 maxpacket: 16
[ 1595.034361][   T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 1595.035494][ T7724] netlink: 'syz.7.12858': attribute type 10 has an invalid length.
[ 1595.042510][   T10] usb 3-1: config 0 has no interface number 0
[ 1595.042564][   T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1595.105036][   T10] usb 3-1: config 0 interface 41 has no altsetting 0
[ 1595.125489][   T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1595.135165][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1595.153086][   T10] usb 3-1: Product: syz
[ 1595.157331][   T10] usb 3-1: Manufacturer: syz
[ 1595.161961][   T10] usb 3-1: SerialNumber: syz
[ 1595.186837][   T10] usb 3-1: config 0 descriptor??
[ 1595.192562][ T7715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1595.216577][   T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22
[ 1595.596489][ T7740] loop4: detected capacity change from 0 to 7
[ 1595.610874][ T7740] Dev loop4: unable to read RDB block 7
[ 1595.621066][ T7740]  loop4: unable to read partition table
[ 1595.627504][ T7740] loop4: partition table beyond EOD, truncated
[ 1595.638067][ T7740] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1595.648632][ T7743] random: crng reseeded on system resumption
[ 1596.051127][ T7758] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1596.213861][ T7763] /dev/rnullb0: Can't open blockdev
[ 1596.343148][ T7768] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12871'.
[ 1596.385083][ T7768] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1596.470274][ T7771] /dev/rnullb0: Can't open blockdev
[ 1596.493080][   T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1596.599846][ T7775] input: syz1 as /devices/virtual/input/input167
[ 1596.673142][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1596.696542][   T10] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1596.721249][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.752720][   T10] usb 6-1: Product: syz
[ 1596.761367][   T10] usb 6-1: Manufacturer: syz
[ 1596.786270][   T10] usb 6-1: SerialNumber: syz
[ 1596.824256][   T10] usb 6-1: config 0 descriptor??
[ 1596.853711][   T10] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1597.525220][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12887'.
[ 1597.602733][ T7801] /dev/rnullb0: Can't open blockdev
[ 1597.656927][T26083] usb 3-1: USB disconnect, device number 123
[ 1597.768663][ T7813] binder: 7811:7813 ioctl c0306201 2000000003c0 returned -14
[ 1597.777336][ T7812] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12890'.
[ 1597.829850][ T7815] /dev/rnullb0: Can't open blockdev
[ 1597.900709][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12893'.
[ 1598.585356][ T3081] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1598.753369][ T3081] usb 7-1: Using ep0 maxpacket: 16
[ 1598.766327][ T3081] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[ 1598.778988][ T3081] usb 7-1: config 0 has no interface number 0
[ 1598.789477][ T3081] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1598.812992][ T3081] usb 7-1: config 0 interface 41 has no altsetting 0
[ 1598.835734][ T3081] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1598.863076][ T3081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1598.891615][ T3081] usb 7-1: Product: syz
[ 1598.899371][ T3081] usb 7-1: Manufacturer: syz
[ 1598.907920][ T3081] usb 7-1: SerialNumber: syz
[ 1598.917015][ T3081] usb 7-1: config 0 descriptor??
[ 1598.923869][ T7830] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1598.948758][ T3081] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22
[ 1599.068045][ T7839] /dev/rnullb0: Can't open blockdev
[ 1599.485188][ T7843] netlink: 'syz.2.12903': attribute type 10 has an invalid length.
[ 1599.506837][ T7843] team0: Port device bond0 removed
[ 1599.618617][ T7846] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1599.894105][   T10] gspca_stk1135: reg_w 0x352 err -71
[ 1599.900468][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1599.926666][   T10] gspca_stk1135: Sensor write failed
[ 1599.932019][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1599.957484][   T10] gspca_stk1135: Sensor write failed
[ 1599.965855][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1599.972236][   T10] gspca_stk1135: Sensor read failed
[ 1599.981097][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1599.987881][   T10] gspca_stk1135: Sensor read failed
[ 1599.998732][   T10] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1600.006083][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1600.020338][   T10] gspca_stk1135: Sensor read failed
[ 1600.026071][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1600.032502][   T10] gspca_stk1135: Sensor read failed
[ 1600.041469][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1600.048268][   T10] gspca_stk1135: Sensor write failed
[ 1600.057533][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1600.064174][   T10] gspca_stk1135: Sensor write failed
[ 1600.069693][   T10] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1600.098192][   T10] usb 6-1: USB disconnect, device number 32
[ 1600.619081][ T7859] loop4: detected capacity change from 0 to 7
[ 1600.645205][ T7859] Dev loop4: unable to read RDB block 7
[ 1600.661068][ T7859]  loop4: unable to read partition table
[ 1600.667315][ T7859] loop4: partition table beyond EOD, truncated
[ 1600.685502][ T7859] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1600.797575][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.823858][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.843730][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.852691][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.866823][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.872768][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.879324][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.889004][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.897251][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.906807][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.912792][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.919543][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.929323][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.938004][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.954548][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.960506][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.972038][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.980159][ T7867] /dev/rnullb0: Can't open blockdev
[ 1600.994219][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.000112][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.016230][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.022412][ T7870] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1601.027083][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.038151][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.055028][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.060930][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.087186][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.096917][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.110285][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.118740][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.130108][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.140162][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.155245][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.161252][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.176798][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.182850][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.191486][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.200491][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.219672][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.241492][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.251728][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.264789][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.277227][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.285278][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.291127][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.306148][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.311993][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.328079][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.358734][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.391916][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.408382][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.426595][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.432781][ T1216] usb 7-1: USB disconnect, device number 50
[ 1601.459446][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.468415][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.478121][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.487251][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.496489][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.502431][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.516756][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.527594][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.536142][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.547627][ T7878] overlay: ./file0 is not a directory
[ 1601.557173][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.578435][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.597255][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.604394][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.610620][ T7867] /dev/rnullb0: Can't open blockdev
[ 1601.800061][ T7885] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12918'.
[ 1601.835014][ T7885] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1601.993097][ T3081] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1602.163088][ T3081] usb 3-1: Using ep0 maxpacket: 32
[ 1602.182201][ T3081] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1602.203722][ T3081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1602.249610][ T3081] usb 3-1: Product: syz
[ 1602.266194][ T3081] usb 3-1: Manufacturer: syz
[ 1602.281092][ T3081] usb 3-1: SerialNumber: syz
[ 1602.300024][ T3081] usb 3-1: config 0 descriptor??
[ 1602.328120][ T3081] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1602.458590][ T7893] loop4: detected capacity change from 0 to 7
[ 1602.476026][ T7893] Dev loop4: unable to read RDB block 7
[ 1602.492014][ T7893]  loop4: unable to read partition table
[ 1602.502385][ T7893] loop4: partition table beyond EOD, truncated
[ 1602.521396][ T7893] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà – ) failed (rc=-5)
[ 1603.233048][T20284] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1603.393866][T20284] usb 6-1: Using ep0 maxpacket: 16
[ 1603.405394][T20284] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 1603.421434][T20284] usb 6-1: config 0 has no interface number 0
[ 1603.430888][T20284] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1603.441601][T20284] usb 6-1: config 0 interface 41 has no altsetting 0
[ 1603.462377][T20284] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1603.478792][T20284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1603.488706][T20284] usb 6-1: Product: syz
[ 1603.506271][T20284] usb 6-1: Manufacturer: syz
[ 1603.521472][T20284] usb 6-1: SerialNumber: syz
[ 1603.535894][T20284] usb 6-1: config 0 descriptor??
[ 1603.555315][ T7897] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1603.567856][T20284] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22
[ 1604.234838][T26083] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1604.436776][T26083] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1604.447316][T26083] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1604.461285][T26083] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1604.470848][T26083] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1604.486967][T26083] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1604.497385][T26083] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1604.497742][ T7920] binder: 7919:7920 ioctl c0306201 2000000003c0 returned -14
[ 1604.505961][T26083] usb 7-1: Product: syz
[ 1604.533452][T26083] usb 7-1: Manufacturer: syz
[ 1604.545731][T26083] cdc_wdm 7-1:1.0: skipping garbage
[ 1604.551857][T26083] cdc_wdm 7-1:1.0: skipping garbage
[ 1604.564465][T26083] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1604.570437][T26083] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1604.662851][ T7923] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12936'.
[ 1604.677990][ T7923] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12936'.
[ 1604.688698][ T7923] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12936'.
[ 1604.704547][ T7923] /dev/rnullb0: Can't open blockdev
[ 1604.934610][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12937'.
[ 1604.943855][ T7926] FAULT_INJECTION: forcing a failure.
[ 1604.943855][ T7926] name failslab, interval 1, probability 0, space 0, times 0
[ 1604.957670][ T7926] CPU: 1 UID: 0 PID: 7926 Comm: syz.7.12937 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1604.957697][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1604.957710][ T7926] Call Trace:
[ 1604.957718][ T7926]  <TASK>
[ 1604.957738][ T7926]  dump_stack_lvl+0x189/0x250
[ 1604.957763][ T7926]  ? __pfx____ratelimit+0x10/0x10
[ 1604.957787][ T7926]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1604.957807][ T7926]  ? __pfx__printk+0x10/0x10
[ 1604.957842][ T7926]  should_fail_ex+0x414/0x560
[ 1604.957876][ T7926]  should_failslab+0xa8/0x100
[ 1604.957900][ T7926]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1604.957919][ T7926]  ? skb_clone+0x212/0x3a0
[ 1604.957943][ T7926]  skb_clone+0x212/0x3a0
[ 1604.957965][ T7926]  __netlink_deliver_tap+0x404/0x850
[ 1604.958000][ T7926]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1604.958025][ T7926]  netlink_deliver_tap+0x19c/0x1b0
[ 1604.958050][ T7926]  netlink_sendskb+0x68/0x140
[ 1604.958075][ T7926]  netlink_rcv_skb+0x28c/0x470
[ 1604.958100][ T7926]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1604.958120][ T7926]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1604.958158][ T7926]  ? down_read+0x1ad/0x2e0
[ 1604.958184][ T7926]  genl_rcv+0x28/0x40
[ 1604.958200][ T7926]  netlink_unicast+0x75b/0x8d0
[ 1604.958231][ T7926]  netlink_sendmsg+0x805/0xb30
[ 1604.958262][ T7926]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1604.958287][ T7926]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1604.958307][ T7926]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1604.958333][ T7926]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1604.958358][ T7926]  __sock_sendmsg+0x219/0x270
[ 1604.958382][ T7926]  ____sys_sendmsg+0x505/0x830
[ 1604.958404][ T7926]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1604.958428][ T7926]  ? import_iovec+0x74/0xa0
[ 1604.958447][ T7926]  ___sys_sendmsg+0x21f/0x2a0
[ 1604.958465][ T7926]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1604.958517][ T7926]  ? __fget_files+0x2a/0x420
[ 1604.958539][ T7926]  ? __fget_files+0x3a0/0x420
[ 1604.958571][ T7926]  __x64_sys_sendmsg+0x19b/0x260
[ 1604.958598][ T7926]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1604.958642][ T7926]  ? __pfx_ksys_write+0x10/0x10
[ 1604.958663][ T7926]  ? rcu_is_watching+0x15/0xb0
[ 1604.958688][ T7926]  ? do_syscall_64+0xbe/0x3b0
[ 1604.958716][ T7926]  do_syscall_64+0xfa/0x3b0
[ 1604.958739][ T7926]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1604.958761][ T7926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1604.958780][ T7926]  ? clear_bhb_loop+0x60/0xb0
[ 1604.958802][ T7926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1604.958820][ T7926] RIP: 0033:0x7f441338e929
[ 1604.958836][ T7926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1604.958851][ T7926] RSP: 002b:00007f44142c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1604.958870][ T7926] RAX: ffffffffffffffda RBX: 00007f44135b5fa0 RCX: 00007f441338e929
[ 1604.958883][ T7926] RDX: 0000000000000820 RSI: 0000200000000000 RDI: 0000000000000005
[ 1604.958895][ T7926] RBP: 00007f44142c6090 R08: 0000000000000000 R09: 0000000000000000
[ 1604.958907][ T7926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1604.958918][ T7926] R13: 0000000000000000 R14: 00007f44135b5fa0 R15: 00007ffdd7c83198
[ 1604.958947][ T7926]  </TASK>
[ 1605.324985][ T7928] /dev/rnullb0: Can't open blockdev
[ 1605.516465][ T3081] gspca_stk1135: reg_w 0x352 err -71
[ 1605.524235][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1605.549354][ T3081] gspca_stk1135: Sensor write failed
[ 1605.565499][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1605.582119][ T3081] gspca_stk1135: Sensor write failed
[ 1605.594721][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1605.612627][ T3081] gspca_stk1135: Sensor read failed
[ 1605.627456][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1605.660648][ T3081] gspca_stk1135: Sensor read failed
[ 1605.679999][ T3081] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1605.698795][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1605.711095][ T3081] gspca_stk1135: Sensor read failed
[ 1605.720366][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1605.731122][ T7936] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12940'.
[ 1605.732077][ T3081] gspca_stk1135: Sensor read failed
[ 1605.755023][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1605.762205][ T3081] gspca_stk1135: Sensor write failed
[ 1605.771461][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1605.781774][ T3081] gspca_stk1135: Sensor write failed
[ 1605.799485][ T3081] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[ 1605.814599][ T3081] usb 3-1: USB disconnect, device number 124
[ 1606.052431][T26083] usb 6-1: USB disconnect, device number 33
[ 1606.575386][ T7954] Invalid source name
[ 1606.579468][ T7954] UBIFS error (pid: 7954): cannot open "/dev/rnullb0", error -22
[ 1606.686563][ T7956] netlink: 'syz.2.12949': attribute type 10 has an invalid length.
[ 1607.026773][ T3081] usb 7-1: USB disconnect, device number 51
[ 1607.073167][   T24] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1607.242776][ T7970] loop4: detected capacity change from 0 to 7
[ 1607.265287][ T7970] Dev loop4: unable to read RDB block 7
[ 1607.270911][ T7970]  loop4: unable to read partition table
[ 1607.284688][   T24] usb 3-1: Using ep0 maxpacket: 16
[ 1607.300741][ T7970] loop4: partition table beyond EOD, truncated
[ 1607.311179][   T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 1607.328156][ T7970] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1607.343571][   T24] usb 3-1: config 0 has no interface number 0
[ 1607.353969][   T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1607.381618][   T24] usb 3-1: config 0 interface 41 has no altsetting 0
[ 1607.405505][   T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1607.432195][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1607.455593][   T24] usb 3-1: Product: syz
[ 1607.459838][   T24] usb 3-1: Manufacturer: syz
[ 1607.475134][   T24] usb 3-1: SerialNumber: syz
[ 1607.494053][ T3081] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1607.498482][   T24] usb 3-1: config 0 descriptor??
[ 1607.511258][ T7961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1607.535038][   T24] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22
[ 1607.660968][ T7983] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1607.673070][ T3081] usb 7-1: Using ep0 maxpacket: 32
[ 1607.692666][ T3081] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1607.707012][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.740451][ T3081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1607.765538][ T3081] usb 7-1: Product: syz
[ 1607.777203][ T3081] usb 7-1: Manufacturer: syz
[ 1607.787216][ T3081] usb 7-1: SerialNumber: syz
[ 1607.818092][ T3081] usb 7-1: config 0 descriptor??
[ 1607.839210][ T3081] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1608.200529][ T7996] /dev/rnullb0: Can't open blockdev
[ 1608.387801][ T8001] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12966'.
[ 1608.730101][ T8007] loop4: detected capacity change from 0 to 7
[ 1608.745434][ T8007] Dev loop4: unable to read RDB block 7
[ 1608.751479][ T8007]  loop4: unable to read partition table
[ 1608.761693][ T8007] loop4: partition table beyond EOD, truncated
[ 1608.769473][ T8007] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1609.750202][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12979'.
[ 1609.877902][ T5924] usb 3-1: USB disconnect, device number 125
[ 1609.911061][ T8038] /dev/rnullb0: Can't open blockdev
[ 1609.990040][ T8040] binder: 8039:8040 ioctl c0306201 2000000003c0 returned -14
[ 1610.090837][ T8042] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12982'.
[ 1610.121454][ T8042] FAULT_INJECTION: forcing a failure.
[ 1610.121454][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1610.145630][ T8044] /dev/rnullb0: Can't open blockdev
[ 1610.161297][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.7.12982 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1610.161328][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1610.161342][ T8042] Call Trace:
[ 1610.161351][ T8042]  <TASK>
[ 1610.161361][ T8042]  dump_stack_lvl+0x189/0x250
[ 1610.161389][ T8042]  ? __pfx____ratelimit+0x10/0x10
[ 1610.161417][ T8042]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1610.161441][ T8042]  ? __pfx__printk+0x10/0x10
[ 1610.161477][ T8042]  should_fail_ex+0x414/0x560
[ 1610.161519][ T8042]  _copy_to_user+0x31/0xb0
[ 1610.161550][ T8042]  simple_read_from_buffer+0xe1/0x170
[ 1610.161584][ T8042]  proc_fail_nth_read+0x1df/0x250
[ 1610.161608][ T8042]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1610.161632][ T8042]  ? rw_verify_area+0x258/0x650
[ 1610.161656][ T8042]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1610.161678][ T8042]  vfs_read+0x200/0x980
[ 1610.161709][ T8042]  ? __pfx___mutex_lock+0x10/0x10
[ 1610.161738][ T8042]  ? __pfx_vfs_read+0x10/0x10
[ 1610.161764][ T8042]  ? __fget_files+0x2a/0x420
[ 1610.161798][ T8042]  ? __fget_files+0x3a0/0x420
[ 1610.161826][ T8042]  ? __fget_files+0x2a/0x420
[ 1610.161862][ T8042]  ksys_read+0x145/0x250
[ 1610.161888][ T8042]  ? __pfx_ksys_read+0x10/0x10
[ 1610.161908][ T8042]  ? rcu_is_watching+0x15/0xb0
[ 1610.161934][ T8042]  ? do_syscall_64+0xbe/0x3b0
[ 1610.161977][ T8042]  do_syscall_64+0xfa/0x3b0
[ 1610.162000][ T8042]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1610.162024][ T8042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1610.162068][ T8042]  ? clear_bhb_loop+0x60/0xb0
[ 1610.162089][ T8042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1610.162106][ T8042] RIP: 0033:0x7f441338d33c
[ 1610.162135][ T8042] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1610.162150][ T8042] RSP: 002b:00007f44142c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1610.162169][ T8042] RAX: ffffffffffffffda RBX: 00007f44135b5fa0 RCX: 00007f441338d33c
[ 1610.162189][ T8042] RDX: 000000000000000f RSI: 00007f44142c60a0 RDI: 0000000000000006
[ 1610.162200][ T8042] RBP: 00007f44142c6090 R08: 0000000000000000 R09: 0000000000000000
[ 1610.162212][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1610.162222][ T8042] R13: 0000000000000000 R14: 00007f44135b5fa0 R15: 00007ffdd7c83198
[ 1610.162250][ T8042]  </TASK>
[ 1610.545953][ T8049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12985'.
[ 1610.868990][ T8057] /dev/rnullb0: Can't open blockdev
[ 1611.044943][ T3081] gspca_stk1135: reg_w 0x352 err -71
[ 1611.051338][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1611.061482][ T3081] gspca_stk1135: Sensor write failed
[ 1611.070536][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1611.083182][ T3081] gspca_stk1135: Sensor write failed
[ 1611.100656][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1611.108361][ T3081] gspca_stk1135: Sensor read failed
[ 1611.123364][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1611.138697][ T3081] gspca_stk1135: Sensor read failed
[ 1611.167646][ T3081] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1611.176558][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1611.183545][ T3081] gspca_stk1135: Sensor read failed
[ 1611.188837][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1611.195919][ T3081] gspca_stk1135: Sensor read failed
[ 1611.201167][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1611.228951][ T3081] gspca_stk1135: Sensor write failed
[ 1611.234498][   T10] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1611.243241][ T3081] gspca_stk1135: serial bus timeout: status=0x00
[ 1611.249945][ T3081] gspca_stk1135: Sensor write failed
[ 1611.261681][ T3081] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[ 1611.272968][ T3081] usb 7-1: USB disconnect, device number 52
[ 1611.406580][   T10] usb 3-1: Using ep0 maxpacket: 16
[ 1611.420517][   T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 1611.432457][   T10] usb 3-1: config 0 has no interface number 0
[ 1611.441707][   T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1611.458694][   T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1611.471899][   T10] usb 3-1: config 0 interface 41 has no altsetting 0
[ 1611.497825][   T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1611.508447][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1611.518890][   T10] usb 3-1: Product: syz
[ 1611.528022][   T10] usb 3-1: Manufacturer: syz
[ 1611.532705][   T10] usb 3-1: SerialNumber: syz
[ 1611.546229][   T10] usb 3-1: config 0 descriptor??
[ 1611.551988][ T8059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1611.565301][ T8059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1611.784339][ T8059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1611.798493][ T8059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1611.827971][ T8076] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 1611.847330][ T8076] Error validating options; rc = [-22]
[ 1612.035921][ T8079] loop4: detected capacity change from 0 to 7
[ 1612.054830][ T8079] Dev loop4: unable to read RDB block 7
[ 1612.060452][ T8079]  loop4: unable to read partition table
[ 1612.076868][ T8079] loop4: partition table beyond EOD, truncated
[ 1612.081815][ T8084] /dev/rnullb0: Can't open blockdev
[ 1612.093324][ T8079] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1612.217259][   T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32
[ 1612.256570][ T8088] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1612.371095][ T8092] Bluetooth: MGMT ver 1.23
[ 1612.594758][   T10] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1612.745934][ T8099] /dev/rnullb0: Can't open blockdev
[ 1612.773236][   T10] usb 7-1: Using ep0 maxpacket: 32
[ 1612.789150][   T10] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1612.799356][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1612.812105][   T10] usb 7-1: Product: syz
[ 1612.821481][   T10] usb 7-1: Manufacturer: syz
[ 1612.828864][   T10] usb 7-1: SerialNumber: syz
[ 1612.838353][   T10] usb 7-1: config 0 descriptor??
[ 1612.849576][   T10] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1613.052481][ T8108] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13011'.
[ 1614.085287][   T24] usb 3-1: USB disconnect, device number 126
[ 1614.225206][ T8116] loop4: detected capacity change from 0 to 7
[ 1614.253715][ T8116] Dev loop4: unable to read RDB block 7
[ 1614.270490][ T8116]  loop4: unable to read partition table
[ 1614.277140][ T8116] loop4: partition table beyond EOD, truncated
[ 1614.288995][ T8116] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà–  ) failed (rc=-5)
[ 1614.408007][ T8120] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1615.094736][   T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1615.263016][   T24] usb 6-1: Using ep0 maxpacket: 16
[ 1615.288558][   T24] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[ 1615.305067][   T24] usb 6-1: config 0 has no interface number 0
[ 1615.311316][   T24] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1615.343007][   T24] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1615.354963][   T24] usb 6-1: config 0 interface 41 has no altsetting 0
[ 1615.377103][   T24] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1615.386224][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1615.404851][   T24] usb 6-1: Product: syz
[ 1615.409052][   T24] usb 6-1: Manufacturer: syz
[ 1615.415339][   T24] usb 6-1: SerialNumber: syz
[ 1615.422832][   T24] usb 6-1: config 0 descriptor??
[ 1615.429559][ T8136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1615.453531][ T8136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1615.682579][ T8136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1615.703167][ T8136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1615.882463][   T10] gspca_stk1135: reg_w 0x352 err -71
[ 1615.904564][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1615.923160][   T10] gspca_stk1135: Sensor write failed
[ 1615.934392][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1615.944228][   T10] gspca_stk1135: Sensor write failed
[ 1615.949575][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1615.973042][   T10] gspca_stk1135: Sensor read failed
[ 1615.983426][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1616.000791][   T10] gspca_stk1135: Sensor read failed
[ 1616.021039][   T10] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1616.031241][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1616.051466][   T10] gspca_stk1135: Sensor read failed
[ 1616.058333][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1616.073104][   T10] gspca_stk1135: Sensor read failed
[ 1616.084070][ T8145] /dev/rnullb0: Can't open blockdev
[ 1616.090251][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1616.098227][   T10] gspca_stk1135: Sensor write failed
[ 1616.106246][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1616.112657][   T10] gspca_stk1135: Sensor write failed
[ 1616.119210][   T10] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[ 1616.127633][   T24] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32
[ 1616.166218][   T10] usb 7-1: USB disconnect, device number 53
[ 1616.391796][ T8149] binder: 8148:8149 ioctl c0306201 2000000003c0 returned -14
[ 1616.579866][ T8158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13030'.
[ 1616.833231][   T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1616.973289][   T24] usb 7-1: device descriptor read/64, error -71
[ 1617.213223][   T24] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1617.373113][   T24] usb 7-1: device descriptor read/64, error -71
[ 1617.484526][   T24] usb usb7-port1: attempt power cycle
[ 1617.845139][   T24] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1617.883742][   T24] usb 7-1: device descriptor read/8, error -71
[ 1617.893271][ T7144] usb 6-1: USB disconnect, device number 34
[ 1618.153140][   T24] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1618.183689][   T24] usb 7-1: device descriptor read/8, error -71
[ 1618.218354][ T8176] /dev/rnullb0: Can't open blockdev
[ 1618.316093][   T24] usb usb7-port1: unable to enumerate USB device
[ 1618.543206][   T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1618.723264][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1618.738012][   T10] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1618.753064][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1618.762617][   T10] usb 6-1: Product: syz
[ 1618.767361][   T10] usb 6-1: Manufacturer: syz
[ 1618.772012][   T10] usb 6-1: SerialNumber: syz
[ 1618.780048][   T10] usb 6-1: config 0 descriptor??
[ 1618.789169][   T10] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1620.295204][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13045'.
[ 1620.304837][ T8192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1620.316153][ T8192] /dev/rnullb0: Can't open blockdev
[ 1620.469843][ T8196] loop4: detected capacity change from 0 to 7
[ 1620.481958][ T8196] Dev loop4: unable to read RDB block 7
[ 1620.488327][ T8196]  loop4: unable to read partition table
[ 1620.498443][ T8196] loop4: partition table beyond EOD, truncated
[ 1620.505776][ T8196] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1620.565483][ T3081] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1620.723524][ T3081] usb 3-1: Using ep0 maxpacket: 16
[ 1620.735323][ T3081] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 1620.763250][ T3081] usb 3-1: config 0 has no interface number 0
[ 1620.769472][ T3081] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1620.798243][ T3081] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1620.809542][ T3081] usb 3-1: config 0 interface 41 has no altsetting 0
[ 1620.820810][ T3081] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1620.831311][ T3081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1620.843254][ T3081] usb 3-1: Product: syz
[ 1620.847476][ T3081] usb 3-1: Manufacturer: syz
[ 1620.852450][ T3081] usb 3-1: SerialNumber: syz
[ 1620.861191][ T3081] usb 3-1: config 0 descriptor??
[ 1620.868996][ T8194] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1620.878159][ T8194] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1621.103408][ T8194] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1621.111552][ T8194] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1621.284179][ T8209] syzkaller1: entered promiscuous mode
[ 1621.289766][ T8209] syzkaller1: entered allmulticast mode
[ 1621.540213][ T3081] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32
[ 1621.706184][ T8217] netlink: 160 bytes leftover after parsing attributes in process `syz.6.13054'.
[ 1621.822845][   T10] gspca_stk1135: reg_w 0x352 err -71
[ 1621.838885][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1621.857255][   T10] gspca_stk1135: Sensor write failed
[ 1621.877312][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1621.896605][   T10] gspca_stk1135: Sensor write failed
[ 1621.901948][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1621.930901][   T10] gspca_stk1135: Sensor read failed
[ 1621.948958][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1621.960091][   T10] gspca_stk1135: Sensor read failed
[ 1621.968122][   T10] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1621.977558][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1621.986310][   T10] gspca_stk1135: Sensor read failed
[ 1621.991795][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1622.000820][   T10] gspca_stk1135: Sensor read failed
[ 1622.007891][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1622.019572][   T10] gspca_stk1135: Sensor write failed
[ 1622.030159][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1622.039085][   T10] gspca_stk1135: Sensor write failed
[ 1622.046247][   T10] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1622.060936][   T10] usb 6-1: USB disconnect, device number 35
[ 1622.063240][ T8222] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13055'.
[ 1622.111557][ T8222] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1622.242004][ T8225] loop4: detected capacity change from 0 to 7
[ 1622.254044][ T8225] Dev loop4: unable to read RDB block 7
[ 1622.259826][ T8225]  loop4: unable to read partition table
[ 1622.266133][ T8225] loop4: partition table beyond EOD, truncated
[ 1622.272788][ T8225] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ") failed (rc=-5)
[ 1622.495761][ T8230] ucma_write: process 1343 (syz.5.13058) changed security contexts after opening file descriptor, this is not allowed.
[ 1623.429826][   T10] usb 3-1: USB disconnect, device number 127
[ 1624.094002][   T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1624.263200][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1624.297735][   T10] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1624.326939][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.343387][   T10] usb 6-1: Product: syz
[ 1624.347666][   T10] usb 6-1: Manufacturer: syz
[ 1624.352293][   T10] usb 6-1: SerialNumber: syz
[ 1624.395893][   T10] usb 6-1: config 0 descriptor??
[ 1624.408753][   T10] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1624.723385][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13068'.
[ 1625.007296][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1625.173022][   T24] usb 3-1: Using ep0 maxpacket: 8
[ 1625.189204][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1625.211197][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1625.231795][   T24] usb 3-1: Product: syz
[ 1625.244040][   T24] usb 3-1: Manufacturer: syz
[ 1625.255689][   T24] usb 3-1: SerialNumber: syz
[ 1625.281645][   T24] usb 3-1: config 0 descriptor??
[ 1625.509141][   T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1625.525429][ T8270] binder: 8269:8270 ioctl c0306201 2000000003c0 returned -14
[ 1625.822241][   T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1625.855188][   T24] usb 3-1: USB disconnect, device number 2
[ 1625.895369][ T8276] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 1625.965184][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13074'.
[ 1626.272921][T17569] Bluetooth: hci0: ACL packet for unknown connection handle 2249
[ 1626.446561][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1626.663077][   T24] usb 3-1: Using ep0 maxpacket: 16
[ 1626.703554][   T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 1626.711682][   T24] usb 3-1: config 0 has no interface number 0
[ 1626.738248][   T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1626.776970][   T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1626.823071][   T24] usb 3-1: config 0 interface 41 has no altsetting 0
[ 1626.855836][   T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1626.883083][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1626.913072][   T24] usb 3-1: Product: syz
[ 1626.917276][   T24] usb 3-1: Manufacturer: syz
[ 1626.952686][   T24] usb 3-1: SerialNumber: syz
[ 1626.993973][   T24] usb 3-1: config 0 descriptor??
[ 1627.000546][ T8284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1627.018152][ T8284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1627.267899][ T8284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1627.303777][ T8284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1627.456926][   T10] gspca_stk1135: reg_w 0x352 err -71
[ 1627.474155][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1627.492236][   T10] gspca_stk1135: Sensor write failed
[ 1627.502696][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1627.525478][   T10] gspca_stk1135: Sensor write failed
[ 1627.531049][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1627.541098][T27758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1627.565900][   T10] gspca_stk1135: Sensor read failed
[ 1627.572379][T27758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1627.580603][T27758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1627.591387][T27758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1627.592198][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1627.600474][T27758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1627.656850][   T10] gspca_stk1135: Sensor read failed
[ 1627.673049][   T10] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1627.694499][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1627.712341][ T3549] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1627.728327][   T10] gspca_stk1135: Sensor read failed
[ 1627.734096][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1627.740480][   T10] gspca_stk1135: Sensor read failed
[ 1627.761983][   T24] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32
[ 1627.773301][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1627.803864][   T10] gspca_stk1135: Sensor write failed
[ 1627.828670][   T10] gspca_stk1135: serial bus timeout: status=0x00
[ 1627.848520][   T10] gspca_stk1135: Sensor write failed
[ 1627.869656][   T10] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1627.886567][ T3549] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1627.897852][   T10] usb 6-1: USB disconnect, device number 36
[ 1628.059824][ T3549] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1628.210897][ T3549] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1628.343091][   T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1628.517960][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1628.550781][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1628.602374][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1628.646031][   T10] usb 6-1: New USB device found, idVendor=1223, idProduct=0107, bcdDevice= 0.00
[ 1628.665811][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1628.696589][   T10] usb 6-1: config 0 descriptor??
[ 1628.717882][ T3549] bridge_slave_1: left allmulticast mode
[ 1628.734685][ T3549] bridge_slave_1: left promiscuous mode
[ 1628.740688][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1628.752344][ T3549] bridge_slave_0: left allmulticast mode
[ 1628.760735][ T3549] bridge_slave_0: left promiscuous mode
[ 1628.767394][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1629.138725][   T10] hid (null): unknown global tag 0xc
[ 1629.148906][   T10] hid (null): usage index exceeded
[ 1629.156210][   T10] hid (null): usage index exceeded
[ 1629.176090][   T10] hid (null): unknown global tag 0xc
[ 1629.181450][   T10] hid (null): invalid report_size 1078742164
[ 1629.188675][   T10] hid (null): unknown global tag 0xc
[ 1629.231410][   T10] hid-generic 0003:1223:0107.003E: unknown global tag 0xc
[ 1629.246357][   T10] hid-generic 0003:1223:0107.003E: item 0 1 1 12 parsing failed
[ 1629.275168][   T10] hid-generic 0003:1223:0107.003E: probe with driver hid-generic failed with error -22
[ 1629.288728][ T5905] usb 3-1: USB disconnect, device number 3
[ 1629.499199][ T3549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1629.512519][ T3549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1629.521435][ T8322] /dev/rnullb0: Can't open blockdev
[ 1629.538466][ T3549] bond0 (unregistering): Released all slaves
[ 1629.595542][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13083'.
[ 1629.638566][T20284] usb 6-1: USB disconnect, device number 37
[ 1629.700858][T27758] Bluetooth: hci2: command tx timeout
[ 1629.744110][ T8297] chnl_net:caif_netlink_parms(): no params data found
[ 1629.751977][ T8326] loop4: detected capacity change from 0 to 7
[ 1629.757466][ T3549] tipc: Disabling bearer <udp:syz2>
[ 1629.763594][ T3549] tipc: Left network mode
[ 1629.784164][ T8326] Dev loop4: unable to read RDB block 7
[ 1629.789833][ T8326]  loop4: unable to read partition table
[ 1629.798157][ T8326] loop4: partition table beyond EOD, truncated
[ 1629.804771][ T8326] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1629.826186][    C1] ==================================================================
[ 1629.834292][    C1] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0
[ 1629.841958][    C1] Write of size 8 at addr ffff88807c4c6ac0 by task pool_workqueue_/3
[ 1629.850036][    C1] 
[ 1629.852387][    C1] CPU: 1 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1629.852410][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1629.852429][    C1] Call Trace:
[ 1629.852438][    C1]  <IRQ>
[ 1629.852446][    C1]  dump_stack_lvl+0x189/0x250
[ 1629.852471][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1629.852493][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1629.852512][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1629.852532][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1629.852551][    C1]  ? lock_release+0x4b/0x3e0
[ 1629.852580][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1629.852601][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1629.852623][    C1]  print_report+0xd2/0x2b0
[ 1629.852648][    C1]  ? flush_tlb_func+0x23d/0x6c0
[ 1629.852670][    C1]  kasan_report+0x118/0x150
[ 1629.852693][    C1]  ? flush_tlb_func+0x23d/0x6c0
[ 1629.852719][    C1]  kasan_check_range+0x2b0/0x2c0
[ 1629.852742][    C1]  flush_tlb_func+0x23d/0x6c0
[ 1629.852768][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1629.852789][    C1]  ? sched_clock_cpu+0x74/0x430
[ 1629.852807][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1629.852825][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1629.852849][    C1]  __flush_smp_call_function_queue+0x370/0xaa0
[ 1629.852869][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1629.852894][    C1]  __sysvec_call_function_single+0xa8/0x3d0
[ 1629.852920][    C1]  sysvec_call_function_single+0x9e/0xc0
[ 1629.852942][    C1]  </IRQ>
[ 1629.852948][    C1]  <TASK>
[ 1629.852955][    C1]  asm_sysvec_call_function_single+0x1a/0x20
[ 1629.852975][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[ 1629.852998][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 cb bf 18 f6 e8 f6 f0 4f f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[ 1629.853014][    C1] RSP: 0018:ffffc90000087aa0 EFLAGS: 00000286
[ 1629.853031][    C1] RAX: 61efc2f895049c00 RBX: 0000000000000000 RCX: 61efc2f895049c00
[ 1629.853045][    C1] RDX: 0000000000000000 RSI: ffffffff8da6993f RDI: 0000000000000001
[ 1629.853057][    C1] RBP: ffffc90000087b40 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6
[ 1629.853071][    C1] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: 0000000000000000
[ 1629.853084][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000010f54
[ 1629.853106][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1629.853132][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1629.853152][    C1]  irqentry_exit+0x6f/0x90
[ 1629.853174][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1629.853193][    C1] RIP: 0010:lockdep_unregister_key+0x2c5/0x310
[ 1629.853220][    C1] Code: 65 48 8b 05 1d a3 25 11 48 3b 44 24 10 0f 84 26 fe ff ff e8 4d 8e d8 09 e8 78 8f d8 09 41 f7 c7 00 02 00 00 74 bd fb 40 84 ed <75> bc eb cd 90 0f 0b 90 e9 19 ff ff ff 90 0f 0b 90 e9 2a ff ff ff
[ 1629.853237][    C1] RSP: 0018:ffffc90000087c00 EFLAGS: 00000202
[ 1629.853253][    C1] RAX: 61efc2f895049c00 RBX: 0000000000000001 RCX: 61efc2f895049c00
[ 1629.853267][    C1] RDX: ffffffff93876358 RSI: ffffffff8da7d37d RDI: ffffffff8be4b100
[ 1629.853281][    C1] RBP: ffff888023e1c101 R08: 0000000000000000 R09: ffffffff81aafe18
[ 1629.853296][    C1] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: 0000000000000000
[ 1629.853309][    C1] R13: 0000000000001000 R14: 0000000000000001 R15: 0000000000000202
[ 1629.853324][    C1]  ? __is_module_percpu_address+0x28/0x3f0
[ 1629.853353][    C1]  pwq_release_workfn+0x6d5/0x870
[ 1629.853377][    C1]  kthread_worker_fn+0x507/0xb60
[ 1629.853400][    C1]  ? kthread_worker_fn+0xe4/0xb60
[ 1629.853421][    C1]  ? __pfx_pwq_release_workfn+0x10/0x10
[ 1629.853452][    C1]  kthread+0x70e/0x8a0
[ 1629.853475][    C1]  ? __pfx_kthread_worker_fn+0x10/0x10
[ 1629.853495][    C1]  ? __pfx_kthread+0x10/0x10
[ 1629.853516][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1629.853537][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1629.853559][    C1]  ? __pfx_kthread+0x10/0x10
[ 1629.853581][    C1]  ret_from_fork+0x3fc/0x770
[ 1629.853598][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1629.853618][    C1]  ? __switch_to_asm+0x39/0x70
[ 1629.853640][    C1]  ? __switch_to_asm+0x33/0x70
[ 1629.853661][    C1]  ? __pfx_kthread+0x10/0x10
[ 1629.853683][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1629.853714][    C1]  </TASK>
[ 1629.853722][    C1] 
[ 1630.256859][    C1] Allocated by task 6178:
[ 1630.261186][    C1]  kasan_save_track+0x3e/0x80
[ 1630.265865][    C1]  __kasan_slab_alloc+0x6c/0x80
[ 1630.270720][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1630.276185][    C1]  copy_mm+0xdb/0x4b0
[ 1630.280165][    C1]  copy_process+0x1706/0x3c00
[ 1630.284836][    C1]  kernel_clone+0x21e/0x870
[ 1630.289335][    C1]  __x64_sys_clone+0x18b/0x1e0
[ 1630.294098][    C1]  do_syscall_64+0xfa/0x3b0
[ 1630.298604][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1630.304488][    C1] 
[ 1630.306897][    C1] Freed by task 8316:
[ 1630.310869][    C1]  kasan_save_track+0x3e/0x80
[ 1630.315544][    C1]  kasan_save_free_info+0x46/0x50
[ 1630.320570][    C1]  __kasan_slab_free+0x62/0x70
[ 1630.325334][    C1]  kmem_cache_free+0x18f/0x400
[ 1630.330096][    C1]  exit_mm+0x1da/0x2c0
[ 1630.334202][    C1]  do_exit+0x648/0x2300
[ 1630.338359][    C1]  do_group_exit+0x21c/0x2d0
[ 1630.342959][    C1]  get_signal+0x1286/0x1340
[ 1630.347472][    C1]  arch_do_signal_or_restart+0x9a/0x750
[ 1630.353036][    C1]  exit_to_user_mode_loop+0x75/0x110
[ 1630.358325][    C1]  do_syscall_64+0x2bd/0x3b0
[ 1630.362916][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1630.368812][    C1] 
[ 1630.371132][    C1] The buggy address belongs to the object at ffff88807c4c60c0
[ 1630.371132][    C1]  which belongs to the cache mm_struct of size 2584
[ 1630.385109][    C1] The buggy address is located 2560 bytes inside of
[ 1630.385109][    C1]  freed 2584-byte region [ffff88807c4c60c0, ffff88807c4c6ad8)
[ 1630.399093][    C1] 
[ 1630.401419][    C1] The buggy address belongs to the physical page:
[ 1630.407819][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c4c0
[ 1630.416586][    C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1630.425088][    C1] memcg:ffff8880212a7c01
[ 1630.429321][    C1] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1630.437226][    C1] page_type: f5(slab)
[ 1630.441205][    C1] raw: 00fff00000000040 ffff88801a84bb40 ffffea0001fb6800 dead000000000003
[ 1630.449783][    C1] raw: 0000000000000000 00000000800b000b 00000000f5000000 ffff8880212a7c01
[ 1630.458366][    C1] head: 00fff00000000040 ffff88801a84bb40 ffffea0001fb6800 dead000000000003
[ 1630.467040][    C1] head: 0000000000000000 00000000800b000b 00000000f5000000 ffff8880212a7c01
[ 1630.475709][    C1] head: 00fff00000000003 ffffea0001f13001 00000000ffffffff 00000000ffffffff
[ 1630.484373][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1630.493041][    C1] page dumped because: kasan: bad access detected
[ 1630.499472][    C1] page_owner tracks the page as allocated
[ 1630.505182][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5637, tgid 5637 (dhcpcd), ts 59578333368, free_ts 59487694695
[ 1630.526015][    C1]  post_alloc_hook+0x240/0x2a0
[ 1630.530795][    C1]  get_page_from_freelist+0x21e4/0x22c0
[ 1630.536346][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1630.542180][    C1]  alloc_pages_mpol+0x232/0x4a0
[ 1630.547031][    C1]  allocate_slab+0x8a/0x370
[ 1630.551536][    C1]  ___slab_alloc+0xbeb/0x1410
[ 1630.556204][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[ 1630.561654][    C1]  mm_alloc+0x23/0xd0
[ 1630.565629][    C1]  alloc_bprm+0x378/0x5b0
[ 1630.569975][    C1]  do_execveat_common+0x1b3/0x6a0
[ 1630.575018][    C1]  __x64_sys_execve+0x94/0xb0
[ 1630.579711][    C1]  do_syscall_64+0xfa/0x3b0
[ 1630.584226][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1630.590128][    C1] page last free pid 5633 tgid 5633 stack trace:
[ 1630.596460][    C1]  __free_frozen_pages+0xb80/0xd80
[ 1630.601579][    C1]  __put_partials+0x156/0x1a0
[ 1630.606266][    C1]  put_cpu_partial+0x17c/0x250
[ 1630.611048][    C1]  __slab_free+0x2d5/0x3c0
[ 1630.615485][    C1]  qlist_free_all+0x97/0x140
[ 1630.620075][    C1]  kasan_quarantine_reduce+0x148/0x160
[ 1630.625538][    C1]  __kasan_slab_alloc+0x22/0x80
[ 1630.630395][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1630.635874][    C1]  getname_flags+0xb8/0x540
[ 1630.640478][    C1]  vfs_fstatat+0x43/0x170
[ 1630.644813][    C1]  __x64_sys_newfstatat+0x116/0x190
[ 1630.650009][    C1]  do_syscall_64+0xfa/0x3b0
[ 1630.654517][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1630.660432][    C1] 
[ 1630.662763][    C1] Memory state around the buggy address:
[ 1630.668390][    C1]  ffff88807c4c6980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1630.676472][    C1]  ffff88807c4c6a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1630.684542][    C1] >ffff88807c4c6a80: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc
[ 1630.692594][    C1]                                            ^
[ 1630.698741][    C1]  ffff88807c4c6b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1630.706804][    C1]  ffff88807c4c6b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1630.714860][    C1] ==================================================================
[ 1630.722927][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1630.730132][    C1] CPU: 1 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[ 1630.741765][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1630.751820][    C1] Call Trace:
[ 1630.755110][    C1]  <IRQ>
[ 1630.757972][    C1]  dump_stack_lvl+0x99/0x250
[ 1630.762601][    C1]  ? __asan_memcpy+0x40/0x70
[ 1630.767215][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1630.772433][    C1]  ? __pfx__printk+0x10/0x10
[ 1630.777040][    C1]  panic+0x2db/0x790
[ 1630.780957][    C1]  ? __pfx_panic+0x10/0x10
[ 1630.785378][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1630.791278][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1630.797636][    C1]  ? print_memory_metadata+0x314/0x400
[ 1630.803118][    C1]  ? flush_tlb_func+0x23d/0x6c0
[ 1630.807984][    C1]  check_panic_on_warn+0x89/0xb0
[ 1630.812926][    C1]  ? flush_tlb_func+0x23d/0x6c0
[ 1630.817786][    C1]  end_report+0x78/0x160
[ 1630.822034][    C1]  kasan_report+0x129/0x150
[ 1630.826544][    C1]  ? flush_tlb_func+0x23d/0x6c0
[ 1630.831422][    C1]  kasan_check_range+0x2b0/0x2c0
[ 1630.836406][    C1]  flush_tlb_func+0x23d/0x6c0
[ 1630.841111][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1630.846317][    C1]  ? sched_clock_cpu+0x74/0x430
[ 1630.851182][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1630.855961][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1630.861161][    C1]  __flush_smp_call_function_queue+0x370/0xaa0
[ 1630.867316][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1630.872528][    C1]  __sysvec_call_function_single+0xa8/0x3d0
[ 1630.878430][    C1]  sysvec_call_function_single+0x9e/0xc0
[ 1630.884065][    C1]  </IRQ>
[ 1630.886996][    C1]  <TASK>
[ 1630.889945][    C1]  asm_sysvec_call_function_single+0x1a/0x20
[ 1630.895924][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[ 1630.901822][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 cb bf 18 f6 e8 f6 f0 4f f6 fb bf 01 00 00 00 <e8> 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[ 1630.921426][    C1] RSP: 0018:ffffc90000087aa0 EFLAGS: 00000286
[ 1630.927495][    C1] RAX: 61efc2f895049c00 RBX: 0000000000000000 RCX: 61efc2f895049c00
[ 1630.935485][    C1] RDX: 0000000000000000 RSI: ffffffff8da6993f RDI: 0000000000000001
[ 1630.943457][    C1] RBP: ffffc90000087b40 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6
[ 1630.951428][    C1] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: 0000000000000000
[ 1630.959397][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000010f54
[ 1630.967387][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1630.973120][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1630.978928][    C1]  irqentry_exit+0x6f/0x90
[ 1630.983348][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1630.988812][    C1] RIP: 0010:lockdep_unregister_key+0x2c5/0x310
[ 1630.994985][    C1] Code: 65 48 8b 05 1d a3 25 11 48 3b 44 24 10 0f 84 26 fe ff ff e8 4d 8e d8 09 e8 78 8f d8 09 41 f7 c7 00 02 00 00 74 bd fb 40 84 ed <75> bc eb cd 90 0f 0b 90 e9 19 ff ff ff 90 0f 0b 90 e9 2a ff ff ff
[ 1631.014597][    C1] RSP: 0018:ffffc90000087c00 EFLAGS: 00000202
[ 1631.020671][    C1] RAX: 61efc2f895049c00 RBX: 0000000000000001 RCX: 61efc2f895049c00
[ 1631.028637][    C1] RDX: ffffffff93876358 RSI: ffffffff8da7d37d RDI: ffffffff8be4b100
[ 1631.036626][    C1] RBP: ffff888023e1c101 R08: 0000000000000000 R09: ffffffff81aafe18
[ 1631.044614][    C1] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: 0000000000000000
[ 1631.052587][    C1] R13: 0000000000001000 R14: 0000000000000001 R15: 0000000000000202
[ 1631.060561][    C1]  ? __is_module_percpu_address+0x28/0x3f0
[ 1631.066405][    C1]  pwq_release_workfn+0x6d5/0x870
[ 1631.071435][    C1]  kthread_worker_fn+0x507/0xb60
[ 1631.076404][    C1]  ? kthread_worker_fn+0xe4/0xb60
[ 1631.081434][    C1]  ? __pfx_pwq_release_workfn+0x10/0x10
[ 1631.086982][    C1]  kthread+0x70e/0x8a0
[ 1631.091054][    C1]  ? __pfx_kthread_worker_fn+0x10/0x10
[ 1631.096516][    C1]  ? __pfx_kthread+0x10/0x10
[ 1631.101112][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1631.106311][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1631.111512][    C1]  ? __pfx_kthread+0x10/0x10
[ 1631.116119][    C1]  ret_from_fork+0x3fc/0x770
[ 1631.120717][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1631.125830][    C1]  ? __switch_to_asm+0x39/0x70
[ 1631.130602][    C1]  ? __switch_to_asm+0x33/0x70
[ 1631.135367][    C1]  ? __pfx_kthread+0x10/0x10
[ 1631.139968][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1631.144749][    C1]  </TASK>
[ 1631.148119][    C1] Kernel Offset: disabled
[ 1631.152443][    C1] Rebooting in 86400 seconds..