last executing test programs:

2m24.14175547s ago: executing program 1 (id=744):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000280)={0x0, 0x0, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f0000000380))
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
r4 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="8f3e04dec33f572e3c148a574e470b0000", @ANYRES16=r3, @ANYBLOB="98f31bd4e5c195f5297fe27e89a8b070648b3795ffc98a714a4477f9d253dfd13a", @ANYRES8=r3, @ANYRESHEX=0x0, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4048804)

2m24.095182867s ago: executing program 1 (id=745):
r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_persistent(0x16, 0x0, r0)
r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1412, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0xc90}, 0x20000090)
listen(r1, 0x1)
mq_timedreceive(r1, &(0x7f0000000200)=""/165, 0xa5, 0x2, &(0x7f00000002c0))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002280)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r2, &(0x7f0000009080)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10)
syz_fuse_handle_req(r2, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x0, 0x1, 0x40000000000, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x8000, 0xffffffff, r4, r5, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x1080, &(0x7f0000000380)={[{@uuid_null}, {@redirect_dir_nofollow}, {@uuid_null}], [{@fowner_eq={'fowner', 0x3d, r4}}]})
prctl$PR_GET_FPEMU(0x9, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x4400, 0x31)

2m23.420801811s ago: executing program 1 (id=752):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x1000000, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

2m22.442963349s ago: executing program 1 (id=756):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfff, &(0x7f0000000300)={[0x7fff]}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x28)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x111}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0xfffffffffffffe0f, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYRES64], 0x34}, 0x2, 0x34005}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m22.287609951s ago: executing program 1 (id=759):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x7, 0x401, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x800)
close_range(r0, r1, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
read(r2, &(0x7f0000000100)=""/159, 0xfffffe5a)

2m21.957880179s ago: executing program 1 (id=761):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private0, 0x4}}, 0x7ff, 0x10000, 0xa6, 0xe1ec, 0x3}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)

2m21.722595624s ago: executing program 32 (id=761):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private0, 0x4}}, 0x7ff, 0x10000, 0xa6, 0xe1ec, 0x3}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)

10.69770579s ago: executing program 3 (id=1669):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x101022, 0x1d1)
read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]})
sendto$inet(r1, &(0x7f0000000080), 0x0, 0x24020804, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x101022, 0x1d1) (async)
read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) (async)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]}) (async)
sendto$inet(r1, &(0x7f0000000080), 0x0, 0x24020804, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) (async)

10.641449149s ago: executing program 3 (id=1670):
mkdir(&(0x7f0000000040)='./file1\x00', 0x1c)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x10001})
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x8000000000000000, 0x20476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfefb})
fchown(r0, 0xee01, 0x0)

10.481502262s ago: executing program 3 (id=1673):
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000005c0)=@nl=@unspec, 0x80, 0x0}, 0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33)

10.374368109s ago: executing program 3 (id=1675):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r3 = dup(r2)
write$6lowpan_enable(r3, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
chdir(&(0x7f0000000180)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11d)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200a0c5, 0x0)

10.210831771s ago: executing program 3 (id=1677):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001500), 0x400, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001580)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff})
r1 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000140)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10)
ptrace(0x10, r1)
ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3863, 0x208, 0x9, 0x800, 0x5, 0x9, 0xfff9}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x28000000, 0x4, 0x3, 0x400000, 0x14, "3eccd800001f0000001f001000000004010100"})
r6 = socket$kcm(0x2, 0xa, 0x2)
prlimit64(r1, 0xb, &(0x7f0000000200)={0xa81, 0x6}, 0x0)
syz_usb_connect$uac1(0x7, 0xf3, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x9, 0xb0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x3, 0x3, 'qx'}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x5, 0x6, "0da06f67"}, @extension_unit={0xb, 0x24, 0x8, 0x7c, 0x0, 0x7, "01841d23"}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0xf6, "ed09dacd67"}, @processing_unit={0x0, 0x24, 0x7, 0x6, 0x5, 0x5, "c7f2ef"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xf0, 0x3, 0x0, 0xf3, "f06cd4", '~dP'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x6, 0xc, "42a9"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x40, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x5, 0x40, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x4, 0x8, {0x7, 0x25, 0x1, 0x1, 0xf, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb6, 0xc4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xb, 0x2, 0x8, 0x3, "949d2cc186c4"}, @as_header={0x7, 0x24, 0x1, 0x3, 0xc, 0x1002}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0x12, "ad7a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0x7, 0x7, {0x7, 0x25, 0x1, 0x2, 0xd, 0x7fff}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xff, 0xf7, 0x6, 0x40, 0x3}, 0x48, &(0x7f0000000240)={0x5, 0xf, 0x48, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0xc, 0x0, 0x0, 0xf000, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0xcb, "5e0e25dce05d35b58e5a20abd06300d9"}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x5d90, 0xf000, 0x9, [0x30, 0xc0, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x49, 0xf, 0x4, 0xb, 0x5}]}, 0x15555555555555bf, [{0x74, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}, {0x45, &(0x7f0000000400)=@string={0x45, 0x3, "a9fa1d86d580357b94ee404a10d095c57a5e49da0836f8c97bf28508c2d0c76951e54ade53877fd890134ba75eda6901f3491e87ee3e73478a86f7734e1a8d571ff5a1"}}, {0x4, &(0x7f0000000480)=@string={0x4, 0x3, "5cef"}}, {0xe7, &(0x7f00000004c0)=@string={0xe7, 0x3, "f000cb0d7f29b3d604971ffabfbe9de251369e06035ab0abb6c84812fb1f127cbbc5bce7621fb34bf1b679a0b9c2e469834b6dc1265579bfc29353d51e4dae9c42da7861a1e430f60d490c19e2510a45ae1f85ee80c45f9098d40bf4072f7bbb01d3e9e2912923a5abd9927cf1ce42b046d2f33d9025ed136576042b955b05f117801d15e65ded0a28557a5327b4e70edd99e7f882cbb460d387321c06d374bebb1c182bfca64d0a006b8264b1353dc2f6a25a5e077fa7f6fd44739c0a91f1513016c79e793c31ff47482508bccd2ef4511fdf645a97cfb063c17945237976ce7def89da69"}}, {0xad, &(0x7f00000007c0)=@string={0xffffffffffffffc0, 0x3, "fd5f698bd3c8bb92b7d88a49bbffa6da5b2ee8c7b9992449a19945d75c423cc877a0bfceacc41ed164c258cb531d8f2fbb2087422219b5000227459354875e960ff339b05e0f809ce58d1e5e3c7ad88d5caa7da5cee2104589505e801e5fe42ca2615a7d3a7dcf375e35a15325a7a1e97e35b95b2ca3e1139eed48e569008155347892009df70eca67659d4b204d404b8e76f15ebd1767a15e9b5598c8af7b9ebc991f9ae163d222721b07"}}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x20)
truncate(&(0x7f0000000040)='./bus\x00', 0x7)
write$UHID_CREATE2(r0, &(0x7f0000000680)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x2, 0x1, 0x1bc, 0x3, 0xbe4, 0x0, "c61c"}}, 0x11a)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

9.561823181s ago: executing program 3 (id=1685):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @mcast1, 0x8001}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0)
write$UHID_INPUT(r5, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000700)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e21, 0x0, @loopback}, @ib={0x1b, 0x3, 0x5, {"477b4a7e0001050000090400"}, 0x0, 0x0, 0x3ffffffffffffffc}}}, 0x118)

9.303863867s ago: executing program 33 (id=1685):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @mcast1, 0x8001}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0)
write$UHID_INPUT(r5, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000700)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e21, 0x0, @loopback}, @ib={0x1b, 0x3, 0x5, {"477b4a7e0001050000090400"}, 0x0, 0x0, 0x3ffffffffffffffc}}}, 0x118)

6.625925963s ago: executing program 2 (id=1691):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000027c0)=""/4069, 0xfe5}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000000140)=""/120, 0x78}, {&(0x7f00000005c0)=""/138, 0x8a}], 0x5, 0x0, 0x0, 0xffffffff}, 0x40000100)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2b20dd9dc19d7fac80841b6234ead9f6aea35be46a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000000)

6.464440179s ago: executing program 2 (id=1692):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

6.395916396s ago: executing program 4 (id=1693):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032fbd7000fddbdf2508000000080003a6", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084)

6.257990799s ago: executing program 4 (id=1694):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x30}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000005c0)=@nl=@unspec, 0x80, 0x0}, 0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33)

5.22983716s ago: executing program 2 (id=1697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/105, 0x69}], 0x5, 0x0, 0x300}, 0x4db}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x40010020, 0x0)

5.085450188s ago: executing program 2 (id=1700):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000080)={0x2, "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"})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd1f, &(0x7f00000004c0)={&(0x7f0000000280)={0x20, 0x1409, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40040000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r2, 0x1382000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000400)={0xa, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="830772fe", 0x4}], 0x1, 0x0, 0x0, 0xa6820000}, 0xafe6)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03060000f40000000000020000000900020073797a32000000090001007300001400030008000240000000000800014000000000140000001100"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r5, 0xffffffffffffffff, 0x600000000000000)
r6 = landlock_create_ruleset(&(0x7f0000000000)={0x8213, 0x0, 0x6}, 0x18, 0x3)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000040)={0x21, r0}, 0x0)

5.007029355s ago: executing program 4 (id=1701):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1}, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20", @ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="eec30b2591ad46698563c1f8e4e9acf7d62cf135d83ca595a68093a5de13f9b8ac7d85d0687d27e784b74bd9e9c54624a6dea8633824947d9ef825e82fa11ecfb3009fa1f304c6e162822016ead969afd3a315d5ea6dd3eafec8054996db8be0d91171bcb398bcd0735e27bccbc4a8ec25065305c2c2d68ddcd3dfcade09ff56"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r4, 0x29, 0x3, 0x0, &(0x7f0000000200))
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000), 0x0, 0x0})
syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, &(0x7f0000000040))

4.104270655s ago: executing program 0 (id=1703):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYBLOB="5e30f23db3de"], 0x72)

3.885399252s ago: executing program 0 (id=1704):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x5, 0x7fffffffffffffff, 0x1}}, 0x30)
syz_clone(0x4200011, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000e40)='./file0\x00', 0x1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000640)='./file0\x00')
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x6bb1})
fchown(r2, 0xffffffffffffffff, 0xee01)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x3e00, 0x0)

3.677806785s ago: executing program 2 (id=1705):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30008044)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925501000000000000008004000000ffe80900ff1ffff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

3.384860251s ago: executing program 0 (id=1708):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff457}]]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f00000001c0))
r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0585605, &(0x7f00000005c0)={0x2, 0x0, @raw_data})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x22052, r0, 0x2000)

3.237836001s ago: executing program 2 (id=1709):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x30}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000005c0)=@nl=@unspec, 0x80, 0x0}, 0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33)

2.897877227s ago: executing program 34 (id=1709):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x30}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000005c0)=@nl=@unspec, 0x80, 0x0}, 0x14)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33)

2.516817781s ago: executing program 5 (id=1712):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYBLOB="5e30f23db3de"], 0x72)

2.290014158s ago: executing program 0 (id=1713):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xf0}, 0x0)

2.067093995s ago: executing program 4 (id=1714):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000080)={0x2, "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"})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd1f, &(0x7f00000004c0)={&(0x7f0000000280)={0x20, 0x1409, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40040000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r2, 0x1382000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000400)={0xa, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="830772fe", 0x4}], 0x1, 0x0, 0x0, 0xa6820000}, 0xafe6)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03060000f40000000000020000000900020073797a32000000090001007300001400030008000240000000000800014000000000140000001100"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r5, 0xffffffffffffffff, 0x600000000000000)
r6 = landlock_create_ruleset(&(0x7f0000000000)={0x8213, 0x0, 0x6}, 0x18, 0x3)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000040)={0x21, r0}, 0x0)

1.941070672s ago: executing program 5 (id=1715):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x7, @private0, 0x4}}, 0x7ff, 0x10000, 0xa6, 0xe1ec, 0x3}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)

1.861775403s ago: executing program 0 (id=1716):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000027c0)=""/4069, 0xfe5}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f00000004c0)=""/38, 0x26}], 0x6, 0x0, 0x0, 0xffffffff}, 0x40000100)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2b20dd9dc19d7fac80841b6234ead9f6aea35be46a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000000)

1.717852099s ago: executing program 5 (id=1717):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x8847, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)

1.572595845s ago: executing program 0 (id=1718):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000)
ioctl$FS_IOC_GETVERSION(r1, 0x5b23, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000)
lsm_list_modules(0x0, &(0x7f0000000040), 0x0)

1.510000228s ago: executing program 5 (id=1719):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000b80)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a40000000000000400b3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba9dcf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b22e", 0x90}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/220, 0xdc}], 0x1}, 0xd0)

1.449998835s ago: executing program 5 (id=1720):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}, 0x800800}], 0x1, 0x0)

1.25661943s ago: executing program 5 (id=1721):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1}, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20", @ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="eec30b2591ad46698563c1f8e4e9acf7d62cf135d83ca595a68093a5de13f9b8ac7d85d0687d27e784b74bd9e9c54624a6dea8633824947d9ef825e82fa11ecfb3009fa1f304c6e162822016ead969afd3a315d5ea6dd3eafec8054996db8be0d91171bcb398bcd0735e27bccbc4a8ec25065305c2c2d68ddcd3dfcade09ff56"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r4, 0x29, 0x3, 0x0, &(0x7f0000000200))
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000), 0x0, 0x0})
syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, &(0x7f0000000040))

1.167651371s ago: executing program 4 (id=1722):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYBLOB="5e30f23db3de"], 0x72)

509.752768ms ago: executing program 4 (id=1723):
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000b40)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@dccp_packet={0x8, 0x6, "f214c0", 0x32, 0x21, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e20, 0x4e20, 0x4, 0x1, 0xd, 0x0, 0x0, 0x1, 0x3, "f8be20", 0x8, "e44751"}, "efcdd7c780a7ac0a30178129acde2b319721c802e51d5ffe8c0b4170f9a393c03e91"}}}}}, 0x68)

0s ago: executing program 35 (id=1723):
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000b40)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@dccp_packet={0x8, 0x6, "f214c0", 0x32, 0x21, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e20, 0x4e20, 0x4, 0x1, 0xd, 0x0, 0x0, 0x1, 0x3, "f8be20", 0x8, "e44751"}, "efcdd7c780a7ac0a30178129acde2b319721c802e51d5ffe8c0b4170f9a393c03e91"}}}}}, 0x68)

kernel console output (not intermixed with test programs):

ce is in use and cannot be enslaved
[  306.644486][  T121] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  306.824267][  T121] usb 5-1: Using ep0 maxpacket: 16
[  306.832094][  T121] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  306.840697][  T121] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.851220][  T121] usb 5-1: config 0 has no interface number 0
[  306.861102][  T121] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  306.870618][  T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.879164][  T121] usb 5-1: Product: syz
[  306.883513][  T121] usb 5-1: Manufacturer: syz
[  306.888486][  T121] usb 5-1: SerialNumber: syz
[  306.897390][  T121] usb 5-1: config 0 descriptor??
[  306.963138][T10149] netlink: 'syz.2.1258': attribute type 2 has an invalid length.
[  306.971422][T10149] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1258'.
[  307.128288][  T121] usb 5-1: Found UVC 0.00 device syz (046d:08d3)
[  307.139446][  T121] usb 5-1: No valid video chain found.
[  307.717576][T10169] exFAT-fs (nullb0): invalid boot record signature
[  307.725529][T10169] exFAT-fs (nullb0): failed to read boot sector
[  307.732187][T10169] exFAT-fs (nullb0): failed to recognize exfat type
[  307.830719][ T5942] usb 5-1: USB disconnect, device number 19
[  307.919695][T10173] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  307.929832][T10173] UDF-fs: Scanning with blocksize 4096 failed
[  307.940860][T10174] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  307.949303][T10174] UDF-fs: Scanning with blocksize 4096 failed
[  307.961557][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.978124][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.194734][ T5890] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  308.367720][ T5890] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  308.398030][ T5890] usb 3-1: config 0 has no interface number 0
[  308.406149][  T121] usb 1-1: USB disconnect, device number 44
[  308.429992][ T5890] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.452300][ T5890] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.466469][ T5890] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  308.482539][ T5890] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  308.498316][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.531894][ T5890] usb 3-1: config 0 descriptor??
[  308.586110][T10183] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1270'.
[  308.699460][T10177] netlink: 'syz.4.1267': attribute type 2 has an invalid length.
[  308.716402][T10186] qnx4: no qnx4 filesystem (no root dir).
[  308.730318][T10177] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1267'.
[  308.752942][ T5890] usbhid 3-1:0.1: can't add hid device: -71
[  308.766478][ T5890] usbhid 3-1:0.1: probe with driver usbhid failed with error -71
[  308.797068][ T5890] usb 3-1: USB disconnect, device number 31
[  309.044098][ T5940] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  309.176405][T10202] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:0
[  309.187013][T10202] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:0
[  309.201842][T10205] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1277'.
[  309.236358][ T5940] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.261690][ T5940] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  309.274551][ T5940] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  309.282438][T10207] FAULT_INJECTION: forcing a failure.
[  309.282438][T10207] name failslab, interval 1, probability 0, space 0, times 0
[  309.294182][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  309.302686][T10207] CPU: 1 UID: 0 PID: 10207 Comm: syz.0.1279 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  309.302722][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  309.302739][T10207] Call Trace:
[  309.302749][T10207]  <TASK>
[  309.302759][T10207]  dump_stack_lvl+0x189/0x250
[  309.302793][T10207]  ? __pfx____ratelimit+0x10/0x10
[  309.302823][T10207]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.302850][T10207]  ? __pfx__printk+0x10/0x10
[  309.302891][T10207]  ? __pfx___might_resched+0x10/0x10
[  309.302913][T10207]  ? fs_reclaim_acquire+0x7d/0x100
[  309.302951][T10207]  should_fail_ex+0x414/0x560
[  309.302993][T10207]  should_failslab+0xa8/0x100
[  309.303021][T10207]  __kmalloc_cache_noprof+0x70/0x3d0
[  309.303047][T10207]  ? nfnetlink_rcv+0xeff/0x2520
[  309.303077][T10207]  nfnetlink_rcv+0xeff/0x2520
[  309.303139][T10207]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  309.303183][T10207]  ? ref_tracker_free+0x63a/0x7d0
[  309.303242][T10207]  ? __netlink_deliver_tap+0x807/0x850
[  309.303285][T10207]  ? netlink_deliver_tap+0x2e/0x1b0
[  309.303313][T10207]  ? netlink_deliver_tap+0x2e/0x1b0
[  309.303351][T10207]  netlink_unicast+0x758/0x8d0
[  309.303391][T10207]  netlink_sendmsg+0x805/0xb30
[  309.303435][T10207]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.303471][T10207]  ? aa_sock_msg_perm+0xf1/0x1d0
[  309.303500][T10207]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  309.303533][T10207]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.303587][T10207]  __sock_sendmsg+0x21c/0x270
[  309.303707][T10207]  ____sys_sendmsg+0x505/0x830
[  309.303755][T10207]  ? __pfx_____sys_sendmsg+0x10/0x10
[  309.303810][T10207]  ? import_iovec+0x74/0xa0
[  309.303848][T10207]  ___sys_sendmsg+0x21f/0x2a0
[  309.303885][T10207]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.303967][T10207]  ? __fget_files+0x2a/0x420
[  309.303997][T10207]  ? __fget_files+0x3a0/0x420
[  309.304042][T10207]  __x64_sys_sendmsg+0x19b/0x260
[  309.304095][T10207]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  309.304148][T10207]  ? __pfx_ksys_write+0x10/0x10
[  309.304175][T10207]  ? rcu_is_watching+0x15/0xb0
[  309.304205][T10207]  ? do_syscall_64+0xbe/0x3b0
[  309.304241][T10207]  do_syscall_64+0xfa/0x3b0
[  309.304269][T10207]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.304297][T10207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.304322][T10207]  ? clear_bhb_loop+0x60/0xb0
[  309.304350][T10207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.304372][T10207] RIP: 0033:0x7ff33038e929
[  309.304394][T10207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.304415][T10207] RSP: 002b:00007ff33116f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  309.304447][T10207] RAX: ffffffffffffffda RBX: 00007ff3305b5fa0 RCX: 00007ff33038e929
[  309.304465][T10207] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  309.304478][T10207] RBP: 00007ff33116f090 R08: 0000000000000000 R09: 0000000000000000
[  309.304493][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.304506][T10207] R13: 0000000000000000 R14: 00007ff3305b5fa0 R15: 00007ffe37ea38a8
[  309.304542][T10207]  </TASK>
[  309.618976][ T5940] usb 4-1: SerialNumber: syz
[  309.796237][T10213] bond0: Error: Cannot enslave bond to itself.
[  309.845677][ T5940] usb 4-1: 0:2 : does not exist
[  309.852358][ T5940] usb 4-1: unit 5: unexpected type 0x0a
[  309.904650][ T5940] usb 4-1: USB disconnect, device number 51
[  309.967490][ T7992] udevd[7992]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  310.433553][T10226] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1286'.
[  310.468931][T10218] netlink: 'syz.0.1283': attribute type 2 has an invalid length.
[  310.480198][T10218] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1283'.
[  310.490758][T10225] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1286'.
[  310.911865][T10246] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1292'.
[  310.949085][T10250] Invalid logical block size (46591)
[  311.204309][ T5890] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  311.378376][ T5890] usb 4-1: Using ep0 maxpacket: 8
[  311.383686][T10262] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1299'.
[  311.393210][T10263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1299'.
[  311.409217][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  311.414964][T10262] syz.4.1299: attempt to access beyond end of device
[  311.414964][T10262] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  311.419618][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  311.433715][T10262] FAT-fs (nbd4): unable to read boot sector
[  311.446839][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  311.460456][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  311.465785][T10263] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  311.471606][ T5890] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.477823][T10263] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  311.491477][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  311.506711][T10263] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  311.507559][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.513221][T10263] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  311.528849][T10263] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  311.535353][T10263] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  311.542785][T10263] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  311.549332][T10263] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  311.556656][T10263] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  311.564281][T10263] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  311.747629][ T5890] usb 4-1: GET_CAPABILITIES returned 0
[  311.759244][ T5890] usbtmc 4-1:16.0: can't read capabilities
[  311.927570][T10271] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  311.991609][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.001381][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.089615][T10267] netlink: 'syz.4.1300': attribute type 2 has an invalid length.
[  312.098179][T10267] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1300'.
[  312.495748][T10285] overlayfs: missing 'lowerdir'
[  312.781713][ T5890] usb 4-1: USB disconnect, device number 52
[  312.821524][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  312.854756][T10300] VFS: Can't find a romfs filesystem on dev rnullb0.
[  312.854756][T10300] 
[  313.145034][T10303] netlink: 'syz.2.1313': attribute type 2 has an invalid length.
[  313.326033][T10317] FAULT_INJECTION: forcing a failure.
[  313.326033][T10317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  313.339535][T10317] CPU: 0 UID: 0 PID: 10317 Comm: syz.2.1317 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  313.339565][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  313.339578][T10317] Call Trace:
[  313.339586][T10317]  <TASK>
[  313.339595][T10317]  dump_stack_lvl+0x189/0x250
[  313.339623][T10317]  ? __pfx____ratelimit+0x10/0x10
[  313.339649][T10317]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.339671][T10317]  ? __pfx__printk+0x10/0x10
[  313.339694][T10317]  ? __might_fault+0xb0/0x130
[  313.339730][T10317]  should_fail_ex+0x414/0x560
[  313.339765][T10317]  _copy_from_user+0x2d/0xb0
[  313.339797][T10317]  kstrtouint_from_user+0xc4/0x170
[  313.339826][T10317]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  313.339869][T10317]  proc_fail_nth_write+0x88/0x240
[  313.339901][T10317]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  313.339938][T10317]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  313.339970][T10317]  vfs_write+0x27b/0xa90
[  313.340005][T10317]  ? __pfx_vfs_write+0x10/0x10
[  313.340030][T10317]  ? __fget_files+0x2a/0x420
[  313.340063][T10317]  ? __fget_files+0x3a0/0x420
[  313.340090][T10317]  ? __fget_files+0x2a/0x420
[  313.340128][T10317]  ksys_write+0x145/0x250
[  313.340155][T10317]  ? __pfx_ksys_write+0x10/0x10
[  313.340184][T10317]  ? do_syscall_64+0xbe/0x3b0
[  313.340216][T10317]  do_syscall_64+0xfa/0x3b0
[  313.340240][T10317]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.340264][T10317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.340283][T10317]  ? clear_bhb_loop+0x60/0xb0
[  313.340301][T10317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.340315][T10317] RIP: 0033:0x7f85b6f8d3df
[  313.340340][T10317] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  313.340352][T10317] RSP: 002b:00007f85b7ea4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  313.340368][T10317] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f85b6f8d3df
[  313.340379][T10317] RDX: 0000000000000001 RSI: 00007f85b7ea40a0 RDI: 0000000000000005
[  313.340388][T10317] RBP: 00007f85b7ea4090 R08: 0000000000000000 R09: 0000000000000000
[  313.340397][T10317] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  313.340405][T10317] R13: 0000000000000000 R14: 00007f85b71b5fa0 R15: 00007fffe7c13de8
[  313.340428][T10317]  </TASK>
[  314.067812][T10330] __nla_validate_parse: 4 callbacks suppressed
[  314.067832][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1322'.
[  314.176787][ T5890] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  314.250540][T10333] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  314.363804][ T5890] usb 3-1: config 0 has an invalid interface number: 25 but max is 0
[  314.382485][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.395369][ T5890] usb 3-1: config 0 has no interface number 0
[  314.403451][ T5890] usb 3-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  314.417773][ T5890] usb 3-1: config 0 interface 25 has no altsetting 0
[  314.432073][ T5890] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee
[  314.442042][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.451134][ T5890] usb 3-1: Product: syz
[  314.455929][ T5890] usb 3-1: Manufacturer: syz
[  314.460902][ T5890] usb 3-1: SerialNumber: syz
[  314.474740][ T5890] usb 3-1: config 0 descriptor??
[  314.688127][ T5890] usb 3-1: Found UVC 0.00 device syz (1b3b:2951)
[  314.701602][ T5890] usb 3-1: No valid video chain found.
[  314.730057][T10336] netlink: 'syz.3.1324': attribute type 2 has an invalid length.
[  314.740914][T10336] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1324'.
[  314.901000][T10325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.934623][T10325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  315.012124][T10346] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1327'.
[  315.082832][T10354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1320'.
[  315.097328][T10325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1320'.
[  315.187935][ T5940] usb 3-1: USB disconnect, device number 32
[  315.479144][T10363] FAULT_INJECTION: forcing a failure.
[  315.479144][T10363] name failslab, interval 1, probability 0, space 0, times 0
[  315.494509][T10363] CPU: 1 UID: 0 PID: 10363 Comm: syz.0.1331 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  315.494539][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  315.494552][T10363] Call Trace:
[  315.494560][T10363]  <TASK>
[  315.494569][T10363]  dump_stack_lvl+0x189/0x250
[  315.494598][T10363]  ? __pfx____ratelimit+0x10/0x10
[  315.494624][T10363]  ? __pfx_dump_stack_lvl+0x10/0x10
[  315.494647][T10363]  ? __pfx__printk+0x10/0x10
[  315.494677][T10363]  ? __pfx___might_resched+0x10/0x10
[  315.494698][T10363]  ? fs_reclaim_acquire+0x7d/0x100
[  315.494729][T10363]  should_fail_ex+0x414/0x560
[  315.494766][T10363]  should_failslab+0xa8/0x100
[  315.494793][T10363]  kmem_cache_alloc_noprof+0x73/0x3c0
[  315.494815][T10363]  ? __kernfs_new_node+0xd7/0x7e0
[  315.494851][T10363]  __kernfs_new_node+0xd7/0x7e0
[  315.494882][T10363]  ? __lock_acquire+0xab9/0xd20
[  315.494921][T10363]  ? __pfx___kernfs_new_node+0x10/0x10
[  315.494954][T10363]  ? kernfs_root+0x1c/0x230
[  315.494990][T10363]  ? kernfs_root+0x1c/0x230
[  315.495018][T10363]  ? kernfs_root+0x1c/0x230
[  315.495045][T10363]  ? kernfs_root+0x1c/0x230
[  315.495077][T10363]  kernfs_new_node+0x102/0x210
[  315.495112][T10363]  __kernfs_create_file+0x4b/0x2e0
[  315.495140][T10363]  sysfs_add_file_mode_ns+0x238/0x300
[  315.495176][T10363]  sysfs_merge_group+0x177/0x310
[  315.495210][T10363]  ? __pfx_sysfs_merge_group+0x10/0x10
[  315.495239][T10363]  ? do_raw_spin_unlock+0x122/0x240
[  315.495267][T10363]  ? _raw_spin_unlock+0x28/0x50
[  315.495293][T10363]  dpm_sysfs_add+0xd2/0x270
[  315.495320][T10363]  device_add+0x4d8/0xb50
[  315.495340][T10363]  ? iommufd_test+0x2b8b/0x5170
[  315.495376][T10363]  iommufd_test+0x2f95/0x5170
[  315.495415][T10363]  ? __pfx_iommufd_test+0x10/0x10
[  315.495443][T10363]  ? __lock_acquire+0xab9/0xd20
[  315.495483][T10363]  ? __might_fault+0xb0/0x130
[  315.495529][T10363]  iommufd_fops_ioctl+0x45e/0x580
[  315.495557][T10363]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  315.495606][T10363]  ? __fget_files+0x2a/0x420
[  315.495641][T10363]  ? __fget_files+0x2a/0x420
[  315.495673][T10363]  ? bpf_lsm_file_ioctl+0x9/0x20
[  315.495692][T10363]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  315.495712][T10363]  __se_sys_ioctl+0xfc/0x170
[  315.495738][T10363]  do_syscall_64+0xfa/0x3b0
[  315.495763][T10363]  ? lockdep_hardirqs_on+0x9c/0x150
[  315.495788][T10363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.495809][T10363]  ? clear_bhb_loop+0x60/0xb0
[  315.495834][T10363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.495854][T10363] RIP: 0033:0x7ff33038e929
[  315.495872][T10363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.495887][T10363] RSP: 002b:00007ff33116f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  315.495909][T10363] RAX: ffffffffffffffda RBX: 00007ff3305b5fa0 RCX: 00007ff33038e929
[  315.495924][T10363] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003
[  315.495936][T10363] RBP: 00007ff33116f090 R08: 0000000000000000 R09: 0000000000000000
[  315.495948][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  315.495960][T10363] R13: 0000000000000000 R14: 00007ff3305b5fa0 R15: 00007ffe37ea38a8
[  315.495990][T10363]  </TASK>
[  315.985646][T10368] FAULT_INJECTION: forcing a failure.
[  315.985646][T10368] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  316.015720][T10368] CPU: 1 UID: 0 PID: 10368 Comm: syz.0.1332 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  316.015750][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  316.015763][T10368] Call Trace:
[  316.015771][T10368]  <TASK>
[  316.015779][T10368]  dump_stack_lvl+0x189/0x250
[  316.015808][T10368]  ? __pfx____ratelimit+0x10/0x10
[  316.015833][T10368]  ? __pfx_dump_stack_lvl+0x10/0x10
[  316.015856][T10368]  ? __pfx__printk+0x10/0x10
[  316.015879][T10368]  ? __might_fault+0xb0/0x130
[  316.015913][T10368]  should_fail_ex+0x414/0x560
[  316.015948][T10368]  _copy_to_iter+0x3f5/0x16f0
[  316.015990][T10368]  ? __pfx__copy_to_iter+0x10/0x10
[  316.016015][T10368]  ? __skb_try_recv_from_queue+0x58f/0x730
[  316.016043][T10368]  ? __skb_try_recv_datagram+0x3da/0x4e0
[  316.016071][T10368]  __skb_datagram_iter+0xf8/0x990
[  316.016093][T10368]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  316.016123][T10368]  skb_copy_datagram_iter+0xc5/0x230
[  316.016148][T10368]  netlink_recvmsg+0x2ab/0xa30
[  316.016186][T10368]  ? __pfx_netlink_recvmsg+0x10/0x10
[  316.016218][T10368]  ? __lock_acquire+0xab9/0xd20
[  316.016244][T10368]  ? aa_sock_msg_perm+0xf1/0x1d0
[  316.016269][T10368]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  316.016298][T10368]  ? __pfx_netlink_recvmsg+0x10/0x10
[  316.016334][T10368]  sock_recvmsg_nosec+0x183/0x1c0
[  316.016363][T10368]  ____sys_recvmsg+0x3aa/0x460
[  316.016391][T10368]  ? __pfx_____sys_recvmsg+0x10/0x10
[  316.016440][T10368]  ? import_iovec+0x74/0xa0
[  316.016473][T10368]  ___sys_recvmsg+0x1b5/0x510
[  316.016499][T10368]  ? __pfx____sys_recvmsg+0x10/0x10
[  316.016552][T10368]  ? __might_fault+0xb0/0x130
[  316.016578][T10368]  do_recvmmsg+0x307/0x770
[  316.016607][T10368]  ? __pfx_do_recvmmsg+0x10/0x10
[  316.016639][T10368]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  316.016685][T10368]  __x64_sys_recvmmsg+0x190/0x240
[  316.016708][T10368]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  316.016725][T10368]  ? rcu_is_watching+0x15/0xb0
[  316.016751][T10368]  ? do_syscall_64+0xbe/0x3b0
[  316.016781][T10368]  do_syscall_64+0xfa/0x3b0
[  316.016805][T10368]  ? lockdep_hardirqs_on+0x9c/0x150
[  316.016828][T10368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.016848][T10368]  ? clear_bhb_loop+0x60/0xb0
[  316.016872][T10368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.016892][T10368] RIP: 0033:0x7ff33038e929
[  316.016911][T10368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  316.016928][T10368] RSP: 002b:00007ff33116f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  316.016949][T10368] RAX: ffffffffffffffda RBX: 00007ff3305b5fa0 RCX: 00007ff33038e929
[  316.016965][T10368] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003
[  316.016977][T10368] RBP: 00007ff33116f090 R08: 0000000000000000 R09: 0000000000000000
[  316.016990][T10368] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000002
[  316.017002][T10368] R13: 0000000000000000 R14: 00007ff3305b5fa0 R15: 00007ffe37ea38a8
[  316.017032][T10368]  </TASK>
[  316.374124][ T5903] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  316.534446][ T5903] usb 4-1: Using ep0 maxpacket: 32
[  316.562781][ T5903] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  316.588446][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.605789][T10374] netlink: 'syz.2.1336': attribute type 2 has an invalid length.
[  316.614426][ T5903] usb 4-1: Product: syz
[  316.614450][ T5903] usb 4-1: Manufacturer: syz
[  316.614467][ T5903] usb 4-1: SerialNumber: syz
[  316.620982][ T5903] usb 4-1: config 0 descriptor??
[  316.624793][T10374] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1336'.
[  316.663734][ T5903] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  316.724286][ T5942] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  316.874412][ T5942] usb 5-1: device descriptor read/64, error -71
[  317.029302][T10390] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1342'.
[  317.124252][ T5942] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  317.284502][ T5942] usb 5-1: device descriptor read/64, error -71
[  317.405714][ T5942] usb usb5-port1: attempt power cycle
[  317.683312][   T30] audit: type=1400 audit(1751298431.998:17): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041
[  317.684719][ T5903] gspca_stk1135: reg_w 0x7 err -71
[  317.788564][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  317.795157][ T5903] gspca_stk1135: Sensor write failed
[  317.803040][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  317.815811][ T5903] gspca_stk1135: Sensor write failed
[  317.821432][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  317.828189][ T5903] gspca_stk1135: Sensor read failed
[  317.840644][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  317.847251][ T5940] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  317.854916][ T5942] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  317.865131][ T5903] gspca_stk1135: Sensor read failed
[  317.870526][ T5903] gspca_stk1135: Detected sensor type unknown (0x0)
[  317.878571][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  317.885891][ T5903] gspca_stk1135: Sensor read failed
[  317.891729][ T5942] usb 5-1: device descriptor read/8, error -71
[  317.898372][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  317.904946][ T5903] gspca_stk1135: Sensor read failed
[  317.910294][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  317.916917][ T5903] gspca_stk1135: Sensor write failed
[  317.922262][ T5903] gspca_stk1135: serial bus timeout: status=0x00
[  317.941276][ T5903] gspca_stk1135: Sensor write failed
[  317.947564][ T5903] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  317.964961][ T5903] usb 4-1: USB disconnect, device number 53
[  318.038224][ T5940] usb 3-1: config 0 has an invalid interface number: 37 but max is 0
[  318.046568][ T5940] usb 3-1: config 0 has no interface number 0
[  318.052763][ T5940] usb 3-1: config 0 interface 37 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.065716][ T5940] usb 3-1: config 0 interface 37 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.075636][ T5940] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  318.086009][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.111020][ T5940] usb 3-1: config 0 descriptor??
[  318.154814][ T5942] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  318.186643][ T5942] usb 5-1: device descriptor read/8, error -71
[  318.304981][ T5942] usb usb5-port1: unable to enumerate USB device
[  318.525940][ T5940] uclogic 0003:256C:006D.000F: interface is invalid, ignoring
[  318.614166][  T121] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  318.728332][   T43] usb 3-1: USB disconnect, device number 33
[  318.744389][  T121] usb 1-1: device descriptor read/64, error -71
[  318.844119][ T5940] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  318.984122][  T121] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  318.994101][ T5940] usb 4-1: Using ep0 maxpacket: 32
[  319.002778][ T5940] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  319.011993][ T5940] usb 4-1: config 0 has no interface number 0
[  319.020748][ T5940] usb 4-1: config 0 interface 12 has no altsetting 0
[  319.030709][ T5940] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  319.040253][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.048428][ T5940] usb 4-1: Product: syz
[  319.053085][ T5940] usb 4-1: Manufacturer: syz
[  319.058268][ T5940] usb 4-1: SerialNumber: syz
[  319.065480][ T5940] usb 4-1: config 0 descriptor??
[  319.114111][  T121] usb 1-1: device descriptor read/64, error -71
[  319.226527][  T121] usb usb1-port1: attempt power cycle
[  319.296407][T10428] 9pnet_fd: Insufficient options for proto=fd
[  319.496798][T10435] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1359'.
[  319.574224][  T121] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  319.604870][  T121] usb 1-1: device descriptor read/8, error -71
[  319.844137][  T121] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  319.864836][  T121] usb 1-1: device descriptor read/8, error -71
[  319.904453][   T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  319.977299][  T121] usb usb1-port1: unable to enumerate USB device
[  320.064084][   T43] usb 3-1: Using ep0 maxpacket: 8
[  320.071257][   T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  320.083482][   T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  320.089630][ T5940] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  320.100602][   T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  320.110580][ T5940] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  320.118659][   T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  320.123783][ T5940] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  320.140365][   T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  320.142598][ T5940] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  320.154499][   T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  320.171159][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.175099][ T5940] usb 4-1: USB disconnect, device number 54
[  320.414399][   T43] usb 3-1: GET_CAPABILITIES returned 0
[  320.421270][   T43] usbtmc 3-1:16.0: can't read capabilities
[  320.627316][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.637401][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.704143][ T5940] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  320.868610][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.880744][ T5940] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  320.891413][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.903794][ T5940] usb 5-1: config 0 descriptor??
[  320.984607][   T43] usb 3-1: USB disconnect, device number 34
[  321.074300][ T5903] usb 4-1: new low-speed USB device number 55 using dummy_hcd
[  321.117929][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.128048][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.139306][ T5940] usbhid 5-1:0.0: can't add hid device: -71
[  321.150604][ T5940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  321.165134][ T5940] usb 5-1: USB disconnect, device number 24
[  321.225333][ T5903] usb 4-1: Invalid ep0 maxpacket: 64
[  321.364107][ T5903] usb 4-1: new low-speed USB device number 56 using dummy_hcd
[  321.524178][ T5903] usb 4-1: Invalid ep0 maxpacket: 64
[  321.529873][ T5903] usb usb4-port1: attempt power cycle
[  321.584311][   T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  321.784252][   T43] usb 5-1: Using ep0 maxpacket: 16
[  321.790920][T10461] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1370'.
[  321.796948][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.819363][   T43] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  321.830481][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.846168][   T43] usb 5-1: config 0 descriptor??
[  321.894075][ T5903] usb 4-1: new low-speed USB device number 57 using dummy_hcd
[  321.924843][ T5903] usb 4-1: Invalid ep0 maxpacket: 64
[  322.067204][ T5903] usb 4-1: new low-speed USB device number 58 using dummy_hcd
[  322.095585][ T5903] usb 4-1: Invalid ep0 maxpacket: 64
[  322.101466][ T5903] usb usb4-port1: unable to enumerate USB device
[  322.288350][   T43] kye 0003:0458:5016.0010: control desc unexpectedly large
[  322.323583][   T43] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0010/input/input28
[  322.417394][   T43] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0010/input/input29
[  322.501484][   T43] kye 0003:0458:5016.0010: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0
[  322.579842][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  322.586277][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  322.681308][ T5903] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  322.728347][T10473] net_ratelimit: 66 callbacks suppressed
[  322.728366][T10473] openvswitch: netlink: Flow actions attr not present in new flow.
[  322.866906][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short
[  322.879368][ T5903] usb 3-1: not running at top speed; connect to a high speed hub
[  322.887742][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.900830][ T5903] usb 3-1: config 3 has an invalid interface number: 93 but max is 1
[  322.910401][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.919279][ T5903] usb 3-1: config 3 has an invalid interface number: 29 but max is 1
[  322.929953][ T5942] usb 5-1: USB disconnect, device number 25
[  322.942155][ T5903] usb 3-1: config 3 has no interface number 0
[  322.950385][ T5903] usb 3-1: config 3 has no interface number 1
[  322.960421][ T5903] usb 3-1: config 3 interface 29 has no altsetting 0
[  322.977625][ T5903] usb 3-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=5c.5c
[  322.988989][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.997092][ T5903] usb 3-1: Product: syz
[  322.997112][ T5903] usb 3-1: Manufacturer: syz
[  322.997129][ T5903] usb 3-1: SerialNumber: syz
[  323.232690][T10468] syz.2.1373: attempt to access beyond end of device
[  323.232690][T10468] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[  323.247617][T10468] syz.2.1373: attempt to access beyond end of device
[  323.247617][T10468] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0
[  323.262545][T10468] Mount JFS Failure: -5
[  323.292999][ T5903] usb 3-1: USB disconnect, device number 35
[  323.464163][ T5890] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  323.624507][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  323.631953][ T5890] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  323.641833][T10488] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1382'.
[  323.651294][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  323.661302][ T5890] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  323.672675][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  323.682956][ T5890] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  323.699259][ T5890] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  323.708638][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.923248][ T5890] usb 1-1: GET_CAPABILITIES returned 0
[  323.936537][ T5890] usbtmc 1-1:16.0: can't read capabilities
[  323.991936][T10498] sp0: Synchronizing with TNC
[  324.136637][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.166654][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.432794][T10516] overlay: ./file0 is not a directory
[  324.526604][T10521] FAULT_INJECTION: forcing a failure.
[  324.526604][T10521] name failslab, interval 1, probability 0, space 0, times 0
[  324.559212][T10521] CPU: 0 UID: 0 PID: 10521 Comm: syz.4.1394 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  324.559243][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  324.559255][T10521] Call Trace:
[  324.559263][T10521]  <TASK>
[  324.559272][T10521]  dump_stack_lvl+0x189/0x250
[  324.559299][T10521]  ? __pfx____ratelimit+0x10/0x10
[  324.559322][T10521]  ? __pfx_dump_stack_lvl+0x10/0x10
[  324.559352][T10521]  ? __pfx__printk+0x10/0x10
[  324.559375][T10521]  ? __pfx___might_resched+0x10/0x10
[  324.559392][T10521]  ? fs_reclaim_acquire+0x7d/0x100
[  324.559420][T10521]  should_fail_ex+0x414/0x560
[  324.559452][T10521]  should_failslab+0xa8/0x100
[  324.559474][T10521]  __kmalloc_cache_noprof+0x70/0x3d0
[  324.559494][T10521]  ? fuse_get_tree+0x76/0x4e0
[  324.559515][T10521]  fuse_get_tree+0x76/0x4e0
[  324.559537][T10521]  vfs_get_tree+0x8f/0x2b0
[  324.559562][T10521]  do_new_mount+0x24a/0xa40
[  324.559595][T10521]  __se_sys_mount+0x317/0x410
[  324.559628][T10521]  ? __pfx___se_sys_mount+0x10/0x10
[  324.559652][T10521]  ? rcu_is_watching+0x15/0xb0
[  324.559676][T10521]  ? do_syscall_64+0xbe/0x3b0
[  324.559699][T10521]  ? __x64_sys_mount+0x20/0xc0
[  324.559727][T10521]  do_syscall_64+0xfa/0x3b0
[  324.559750][T10521]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.559772][T10521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.559791][T10521]  ? clear_bhb_loop+0x60/0xb0
[  324.559813][T10521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.559832][T10521] RIP: 0033:0x7fcc2dd8e929
[  324.559849][T10521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.559866][T10521] RSP: 002b:00007fcc2ec2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  324.559887][T10521] RAX: ffffffffffffffda RBX: 00007fcc2dfb5fa0 RCX: 00007fcc2dd8e929
[  324.559901][T10521] RDX: 0000200000000100 RSI: 0000200000002480 RDI: 0000200000002440
[  324.559915][T10521] RBP: 00007fcc2ec2c090 R08: 0000200000000600 R09: 0000000000000000
[  324.559928][T10521] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000002
[  324.559940][T10521] R13: 0000000000000000 R14: 00007fcc2dfb5fa0 R15: 00007ffc35525188
[  324.559969][T10521]  </TASK>
[  324.564962][ T5921] usb 1-1: USB disconnect, device number 49
[  324.664170][ T5903] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  324.809214][T10524] ./file0: Can't lookup blockdev
[  324.865484][T10526] netlink: 'syz.4.1396': attribute type 10 has an invalid length.
[  324.890722][T10526] team0: Port device wlan1 added
[  324.918179][T10526] input: syz1 as /devices/virtual/input/input30
[  324.956768][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.980159][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.002020][ T5903] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  325.042493][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.066654][ T5903] usb 3-1: config 0 descriptor??
[  325.764143][ T5921] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  325.911069][T10537] FAULT_INJECTION: forcing a failure.
[  325.911069][T10537] name failslab, interval 1, probability 0, space 0, times 0
[  325.923984][ T5921] usb 5-1: device descriptor read/64, error -71
[  325.930441][T10537] CPU: 1 UID: 0 PID: 10537 Comm: syz.3.1401 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  325.930472][T10537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  325.930485][T10537] Call Trace:
[  325.930494][T10537]  <TASK>
[  325.930504][T10537]  dump_stack_lvl+0x189/0x250
[  325.930533][T10537]  ? __pfx____ratelimit+0x10/0x10
[  325.930559][T10537]  ? __pfx_dump_stack_lvl+0x10/0x10
[  325.930582][T10537]  ? __pfx__printk+0x10/0x10
[  325.930609][T10537]  ? __pfx___might_resched+0x10/0x10
[  325.930629][T10537]  ? fs_reclaim_acquire+0x7d/0x100
[  325.930662][T10537]  should_fail_ex+0x414/0x560
[  325.930699][T10537]  should_failslab+0xa8/0x100
[  325.930725][T10537]  __kmalloc_noprof+0xcb/0x4f0
[  325.930747][T10537]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  325.930765][T10537]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  325.930802][T10537]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  325.930832][T10537]  genl_family_rcv_msg_doit+0xb8/0x300
[  325.930860][T10537]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  325.930884][T10537]  ? rcu_is_watching+0x15/0xb0
[  325.930907][T10537]  ? apparmor_capable+0x137/0x1b0
[  325.930937][T10537]  ? bpf_lsm_capable+0x9/0x20
[  325.930959][T10537]  ? security_capable+0x7e/0x2e0
[  325.930987][T10537]  genl_rcv_msg+0x60e/0x790
[  325.931014][T10537]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.931032][T10537]  ? ref_tracker_free+0x63a/0x7d0
[  325.931051][T10537]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  325.931069][T10537]  ? __pfx_nl80211_set_station+0x10/0x10
[  325.931091][T10537]  ? __pfx_nl80211_post_doit+0x10/0x10
[  325.931112][T10537]  ? __pfx_ref_tracker_free+0x10/0x10
[  325.931144][T10537]  netlink_rcv_skb+0x205/0x470
[  325.931182][T10537]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.931205][T10537]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.931251][T10537]  ? down_read+0x1ad/0x2e0
[  325.931281][T10537]  genl_rcv+0x28/0x40
[  325.931298][T10537]  netlink_unicast+0x758/0x8d0
[  325.931335][T10537]  netlink_sendmsg+0x805/0xb30
[  325.931374][T10537]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.931405][T10537]  ? aa_sock_msg_perm+0xf1/0x1d0
[  325.931431][T10537]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  325.931460][T10537]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.931488][T10537]  __sock_sendmsg+0x21c/0x270
[  325.931517][T10537]  ____sys_sendmsg+0x505/0x830
[  325.931555][T10537]  ? __pfx_____sys_sendmsg+0x10/0x10
[  325.931597][T10537]  ? import_iovec+0x74/0xa0
[  325.931631][T10537]  ___sys_sendmsg+0x21f/0x2a0
[  325.931664][T10537]  ? __pfx____sys_sendmsg+0x10/0x10
[  325.931737][T10537]  ? __fget_files+0x2a/0x420
[  325.931765][T10537]  ? __fget_files+0x3a0/0x420
[  325.931805][T10537]  __x64_sys_sendmsg+0x19b/0x260
[  325.931839][T10537]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  325.931882][T10537]  ? __pfx_ksys_write+0x10/0x10
[  325.931913][T10537]  ? do_syscall_64+0xbe/0x3b0
[  325.931944][T10537]  do_syscall_64+0xfa/0x3b0
[  325.931969][T10537]  ? lockdep_hardirqs_on+0x9c/0x150
[  325.931993][T10537]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.932014][T10537]  ? clear_bhb_loop+0x60/0xb0
[  325.932039][T10537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.932058][T10537] RIP: 0033:0x7fa36ff8e929
[  325.932077][T10537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.932093][T10537] RSP: 002b:00007fa370dcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.932115][T10537] RAX: ffffffffffffffda RBX: 00007fa3701b5fa0 RCX: 00007fa36ff8e929
[  325.932130][T10537] RDX: 0000000000001000 RSI: 0000200000001080 RDI: 0000000000000003
[  325.932144][T10537] RBP: 00007fa370dcf090 R08: 0000000000000000 R09: 0000000000000000
[  325.932163][T10537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.932175][T10537] R13: 0000000000000000 R14: 00007fa3701b5fa0 R15: 00007ffecef46cc8
[  325.932207][T10537]  </TASK>
[  326.359748][T10540] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1402'.
[  326.398616][ T1214] usb 3-1: USB disconnect, device number 36
[  326.474746][ T5921] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  326.614102][ T5921] usb 5-1: device descriptor read/64, error -71
[  326.725353][ T5921] usb usb5-port1: attempt power cycle
[  326.784676][ T5942] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  326.947303][ T5942] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  326.964153][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.986129][ T5942] usb 4-1: config 0 descriptor??
[  327.074252][ T5921] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  327.118550][ T5921] usb 5-1: device descriptor read/8, error -71
[  327.364152][ T5921] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  327.385256][ T5921] usb 5-1: device descriptor read/8, error -71
[  327.495166][ T5921] usb usb5-port1: unable to enumerate USB device
[  327.544318][   T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  327.704126][   T43] usb 3-1: Using ep0 maxpacket: 8
[  327.729284][   T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  327.743836][   T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  327.759012][T10568] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1411'.
[  327.771138][   T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  327.789288][   T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  327.799827][   T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  327.817405][   T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  327.828811][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.050484][   T43] usb 3-1: GET_CAPABILITIES returned 0
[  328.063504][   T43] usbtmc 3-1:16.0: can't read capabilities
[  328.258143][T10564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.297781][T10564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.418713][ T5942] pegasus 4-1:0.0: probe with driver pegasus failed with error -32
[  328.484740][T10577] FAULT_INJECTION: forcing a failure.
[  328.484740][T10577] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  328.510206][T10577] CPU: 0 UID: 0 PID: 10577 Comm: syz.4.1414 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  328.510247][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  328.510261][T10577] Call Trace:
[  328.510269][T10577]  <TASK>
[  328.510279][T10577]  dump_stack_lvl+0x189/0x250
[  328.510308][T10577]  ? __pfx____ratelimit+0x10/0x10
[  328.510334][T10577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.510358][T10577]  ? __pfx__printk+0x10/0x10
[  328.510381][T10577]  ? __might_fault+0xb0/0x130
[  328.510416][T10577]  should_fail_ex+0x414/0x560
[  328.510452][T10577]  _copy_to_iter+0x3f5/0x16f0
[  328.510493][T10577]  ? __pfx__copy_to_iter+0x10/0x10
[  328.510518][T10577]  ? __skb_try_recv_from_queue+0x58f/0x730
[  328.510546][T10577]  ? __skb_try_recv_datagram+0x3da/0x4e0
[  328.510574][T10577]  __skb_datagram_iter+0xf8/0x990
[  328.510597][T10577]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  328.510627][T10577]  skb_copy_datagram_iter+0xc5/0x230
[  328.510653][T10577]  netlink_recvmsg+0x2ab/0xa30
[  328.510691][T10577]  ? __pfx_netlink_recvmsg+0x10/0x10
[  328.510733][T10577]  ? __pfx_netlink_recvmsg+0x10/0x10
[  328.510761][T10577]  sock_recvmsg_nosec+0x183/0x1c0
[  328.510790][T10577]  ____sys_recvmsg+0x3aa/0x460
[  328.510819][T10577]  ? __pfx_____sys_recvmsg+0x10/0x10
[  328.510868][T10577]  ? import_iovec+0x74/0xa0
[  328.510903][T10577]  ___sys_recvmsg+0x1b5/0x510
[  328.510928][T10577]  ? __pfx____sys_recvmsg+0x10/0x10
[  328.510982][T10577]  ? __might_fault+0xb0/0x130
[  328.511008][T10577]  do_recvmmsg+0x307/0x770
[  328.511037][T10577]  ? __pfx_do_recvmmsg+0x10/0x10
[  328.511069][T10577]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  328.511115][T10577]  __x64_sys_recvmmsg+0x190/0x240
[  328.511138][T10577]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  328.511156][T10577]  ? rcu_is_watching+0x15/0xb0
[  328.511182][T10577]  ? do_syscall_64+0xbe/0x3b0
[  328.511218][T10577]  do_syscall_64+0xfa/0x3b0
[  328.511243][T10577]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.511267][T10577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.511287][T10577]  ? clear_bhb_loop+0x60/0xb0
[  328.511311][T10577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.511332][T10577] RIP: 0033:0x7fcc2dd8e929
[  328.511351][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.511369][T10577] RSP: 002b:00007fcc2ec2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  328.511391][T10577] RAX: ffffffffffffffda RBX: 00007fcc2dfb5fa0 RCX: 00007fcc2dd8e929
[  328.511407][T10577] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003
[  328.511420][T10577] RBP: 00007fcc2ec2c090 R08: 0000000000000000 R09: 0000000000000000
[  328.511432][T10577] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000002
[  328.511445][T10577] R13: 0000000000000000 R14: 00007fcc2dfb5fa0 R15: 00007ffc35525188
[  328.511476][T10577]  </TASK>
[  328.869174][T10579] Invalid logical block size (51711)
[  329.062643][ T5921] usb 3-1: USB disconnect, device number 37
[  329.229964][T10593] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1420'.
[  329.387963][T10599] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1423'.
[  329.798991][ T5940] usb 4-1: USB disconnect, device number 59
[  329.919572][T10612] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1429'.
[  330.016124][T10610] Mount JFS Failure: -22
[  330.265972][ T5942] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  330.437020][ T5942] usb 5-1: Using ep0 maxpacket: 16
[  330.460157][ T5942] usb 5-1: config 0 has no interfaces?
[  330.474235][ T5942] usb 5-1: New USB device found, idVendor=0b7d, idProduct=3138, bcdDevice= 0.00
[  330.504054][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.525297][ T5942] usb 5-1: config 0 descriptor??
[  330.709304][T10633] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1438'.
[  330.844353][  T121] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  330.922093][T10641] kvm_pr_unimpl_wrmsr: 1247 callbacks suppressed
[  330.922109][T10641] kvm: kvm [10640]: vcpu0, guest rIP: 0x161 Unhandled WRMSR(0xc2) = 0x400
[  330.938998][T10641] kvm: kvm [10640]: vcpu0, guest rIP: 0x161 Unhandled WRMSR(0xc2) = 0x400
[  330.948125][T10641] kvm: kvm [10640]: vcpu0, guest rIP: 0x161 Unhandled WRMSR(0xc2) = 0x400
[  330.956978][T10641] kvm: kvm [10640]: vcpu0, guest rIP: 0x161 Unhandled WRMSR(0xc2) = 0x400
[  330.966587][T10641] kvm: kvm [10640]: vcpu0, guest rIP: 0x161 Unhandled WRMSR(0xc2) = 0x400
[  330.975707][T10641] kvm: kvm [10640]: vcpu0, guest rIP: 0x161 Unhandled WRMSR(0xc2) = 0x400
[  330.984681][T10641] kvm: kvm [10640]: vcpu0, guest rIP: 0x161 Unhandled WRMSR(0xc2) = 0x400
[  330.993800][T10641] kvm: kvm [10640]: vcpu0, guest rIP: 0x161 Unhandled WRMSR(0xc2) = 0x400
[  331.003677][T10641] kvm: kvm [10640]: vcpu0, guest rIP: 0x161 Unhandled WRMSR(0xc2) = 0x400
[  331.012575][T10641] kvm: kvm [10640]: vcpu0, guest rIP: 0x161 Unhandled WRMSR(0xc2) = 0x400
[  331.023183][  T121] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  331.032343][  T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.044208][ T5940] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  331.056999][  T121] usb 4-1: config 0 descriptor??
[  331.204051][ T5940] usb 1-1: Using ep0 maxpacket: 32
[  331.222479][ T5940] usb 1-1: config 0 has an invalid interface number: 180 but max is 0
[  331.244102][ T5940] usb 1-1: config 0 has no interface number 0
[  331.251198][ T5940] usb 1-1: config 0 interface 180 has no altsetting 0
[  331.266951][ T5940] usb 1-1: New USB device found, idVendor=050d, idProduct=1202, bcdDevice=47.d7
[  331.284034][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.292235][ T5940] usb 1-1: Product: syz
[  331.304120][ T5940] usb 1-1: Manufacturer: syz
[  331.308787][ T5940] usb 1-1: SerialNumber: syz
[  331.326662][ T5940] usb 1-1: config 0 descriptor??
[  331.447168][T10645] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1430'.
[  331.462626][T10645] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1430'.
[  331.632171][T10639] can: request_module (can-proto-4) failed.
[  331.632176][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.670236][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.701519][ T5942] usb 1-1: USB disconnect, device number 50
[  331.939453][T10652] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/rnullb0": -EINTR
[  332.053549][T10661] XFS (rnullb0): Invalid superblock magic number
[  332.317420][T10673] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1448'.
[  332.495319][  T121] pegasus 4-1:0.0: probe with driver pegasus failed with error -32
[  332.527279][ T5921] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  332.694096][ T5921] usb 3-1: Using ep0 maxpacket: 8
[  332.707389][ T5921] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  332.734027][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  332.743921][ T5921] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  332.756723][ T5921] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  332.774128][ T5921] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  332.795689][ T5921] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  332.808687][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.024946][T10689] /dev/rnullb0: Can't open blockdev
[  333.048257][ T5921] usb 3-1: GET_CAPABILITIES returned 0
[  333.061907][ T5921] usbtmc 3-1:16.0: can't read capabilities
[  333.079106][ T5942] usb 5-1: USB disconnect, device number 30
[  333.385944][T10693] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  333.392268][T10693] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  333.421391][T10693] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  333.450874][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.477745][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  333.558007][T10697] /dev/rnullb0: Can't open blockdev
[  333.722033][ T5940] usb 3-1: USB disconnect, device number 38
[  333.868898][ T5942] usb 4-1: USB disconnect, device number 60
[  333.995674][T10705] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1457'.
[  334.074058][  T121] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  334.204213][  T121] usb 5-1: device descriptor read/64, error -71
[  334.454099][  T121] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  334.500660][T10709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1459'.
[  334.584100][  T121] usb 5-1: device descriptor read/64, error -71
[  334.686313][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'.
[  334.714549][  T121] usb usb5-port1: attempt power cycle
[  334.846214][T10715] vlan1: entered promiscuous mode
[  334.851714][T10715] vlan1: entered allmulticast mode
[  334.878655][T10715] veth0_vlan: entered allmulticast mode
[  335.074556][  T121] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  335.105245][  T121] usb 5-1: device descriptor read/8, error -71
[  335.169991][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'.
[  335.297972][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout
[  335.381201][ T5890] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  335.391636][  T121] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  335.451617][  T121] usb 5-1: device descriptor read/8, error -71
[  335.458579][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  335.465913][ T5848] Bluetooth: hci2: command 0x041b tx timeout
[  335.564514][ T5890] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  335.579388][  T121] usb usb5-port1: unable to enumerate USB device
[  335.585200][T10730] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1466'.
[  335.599410][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.648564][ T5890] usb 4-1: config 0 descriptor??
[  336.181739][ T5903] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  336.306350][T10743] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1471'.
[  336.317996][T10742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1471'.
[  336.344185][ T5903] usb 3-1: Using ep0 maxpacket: 8
[  336.365950][ T5903] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  336.386178][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  336.404135][ T5903] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  336.416609][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  336.434466][ T5903] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  336.459373][ T5903] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  336.474102][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.514221][ T5890] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[  336.536939][ T5890] usb 4-1: USB disconnect, device number 61
[  336.689617][ T5903] usb 3-1: GET_CAPABILITIES returned 0
[  336.696775][ T5903] usbtmc 3-1:16.0: can't read capabilities
[  336.747490][ T5848] Bluetooth: hci2: unexpected event for opcode 0x1004
[  336.755852][T10747] Mount JFS Failure: -22
[  336.794092][ T5942] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  336.906597][T10734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.915787][T10734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.944090][ T5942] usb 1-1: Using ep0 maxpacket: 16
[  336.954312][ T5942] usb 1-1: config 0 has an invalid interface number: 142 but max is 0
[  336.968041][ T5942] usb 1-1: config 0 has no interface number 0
[  336.979630][ T5942] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1
[  337.004237][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.012796][ T5942] usb 1-1: Product: syz
[  337.017809][ T5942] usb 1-1: Manufacturer: syz
[  337.022456][ T5942] usb 1-1: SerialNumber: syz
[  337.048622][ T5942] usb 1-1: config 0 descriptor??
[  337.069007][T10751] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1475'.
[  337.136591][  T121] usb 3-1: USB disconnect, device number 39
[  337.268776][ T5942] usb 1-1: Found UVC 0.00 device syz (1bcf:0b40)
[  337.268801][ T5942] usb 1-1: Forcing UVC version to 1.0a
[  337.268817][ T5942] usb 1-1: No valid video chain found.
[  337.270856][ T5942] usb 1-1: USB disconnect, device number 51
[  337.974060][ T5903] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  338.144073][ T5903] usb 3-1: Using ep0 maxpacket: 8
[  338.151296][ T5903] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  338.162181][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  338.182441][ T5903] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  338.194142][  T121] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  338.203249][ T5903] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  338.224059][ T5903] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  338.245213][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.372338][  T121] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  338.402807][  T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.426019][  T121] usb 4-1: config 0 descriptor??
[  338.482499][ T5903] usb 3-1: GET_CAPABILITIES returned 0
[  338.488730][ T5903] usbtmc 3-1:16.0: can't read capabilities
[  338.498778][T10775] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1485'.
[  339.139277][  T121] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[  339.155884][  T121] usb 4-1: USB disconnect, device number 62
[  339.834092][ T5903] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  339.994158][ T5903] usb 1-1: Using ep0 maxpacket: 8
[  340.001778][ T5903] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  340.012008][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  340.021870][ T5903] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  340.034745][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  340.044972][ T5903] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  340.058214][ T5903] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  340.067452][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.260611][T10799] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1494'.
[  340.287868][ T5903] usb 1-1: GET_CAPABILITIES returned 0
[  340.297914][ T5903] usbtmc 1-1:16.0: can't read capabilities
[  340.570828][T10803] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  340.579114][T10803] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  340.585947][T10803] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  340.593619][T10785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.608212][T10785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.670881][T10806] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  340.786032][  T121] usb 3-1: USB disconnect, device number 40
[  340.833649][   T24] usb 1-1: USB disconnect, device number 52
[  341.044118][   T43] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  341.154323][  T121] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  341.196000][   T43] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  341.206066][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.218096][   T43] usb 5-1: config 0 descriptor??
[  341.304108][  T121] usb 3-1: Using ep0 maxpacket: 16
[  341.316994][  T121] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  341.326460][  T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.335540][  T121] usb 3-1: Product: syz
[  341.339754][  T121] usb 3-1: Manufacturer: syz
[  341.345803][  T121] usb 3-1: SerialNumber: syz
[  341.567048][T10810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.585105][T10810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.648860][  T121] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  341.708205][  T121] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71
[  341.734898][T10818] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1503'.
[  341.742156][  T121] usb 3-1: USB disconnect, device number 41
[  341.772896][ T7992] udevd[7992]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  341.956680][   T43] pegasus 5-1:0.0: probe with driver pegasus failed with error -71
[  341.995461][   T43] usb 5-1: USB disconnect, device number 35
[  342.109044][T10827] FAULT_INJECTION: forcing a failure.
[  342.109044][T10827] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.122428][T10827] CPU: 0 UID: 0 PID: 10827 Comm: syz.0.1506 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  342.122457][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  342.122470][T10827] Call Trace:
[  342.122479][T10827]  <TASK>
[  342.122488][T10827]  dump_stack_lvl+0x189/0x250
[  342.122516][T10827]  ? __pfx____ratelimit+0x10/0x10
[  342.122541][T10827]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.122564][T10827]  ? __pfx__printk+0x10/0x10
[  342.122598][T10827]  should_fail_ex+0x414/0x560
[  342.122632][T10827]  _copy_to_user+0x31/0xb0
[  342.122653][T10827]  simple_read_from_buffer+0xe1/0x170
[  342.122685][T10827]  proc_fail_nth_read+0x1df/0x250
[  342.122718][T10827]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  342.122750][T10827]  ? rw_verify_area+0x258/0x650
[  342.122839][T10827]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  342.122872][T10827]  vfs_read+0x1fd/0x980
[  342.122901][T10827]  ? __pfx___mutex_lock+0x10/0x10
[  342.122927][T10827]  ? __pfx_vfs_read+0x10/0x10
[  342.122952][T10827]  ? __fget_files+0x2a/0x420
[  342.122984][T10827]  ? __fget_files+0x3a0/0x420
[  342.123010][T10827]  ? __fget_files+0x2a/0x420
[  342.123046][T10827]  ksys_read+0x145/0x250
[  342.123072][T10827]  ? __pfx_ksys_read+0x10/0x10
[  342.123101][T10827]  ? do_syscall_64+0xbe/0x3b0
[  342.123129][T10827]  do_syscall_64+0xfa/0x3b0
[  342.123147][T10827]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.123164][T10827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.123179][T10827]  ? clear_bhb_loop+0x60/0xb0
[  342.123197][T10827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.123211][T10827] RIP: 0033:0x7ff33038d33c
[  342.123225][T10827] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  342.123238][T10827] RSP: 002b:00007ff33116f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  342.123255][T10827] RAX: ffffffffffffffda RBX: 00007ff3305b5fa0 RCX: 00007ff33038d33c
[  342.123266][T10827] RDX: 000000000000000f RSI: 00007ff33116f0a0 RDI: 0000000000000004
[  342.123275][T10827] RBP: 00007ff33116f090 R08: 0000000000000000 R09: 0000000000000000
[  342.123285][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.123293][T10827] R13: 0000000000000000 R14: 00007ff3305b5fa0 R15: 00007ffe37ea38a8
[  342.123322][T10827]  </TASK>
[  342.352107][    C0] vkms_vblank_simulate: vblank timer overrun
[  342.495012][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout
[  342.657660][ T5848] Bluetooth: hci2: command 0x041b tx timeout
[  342.657683][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  342.707712][T10838] binder: 10837:10838 unknown command 0
[  342.713480][T10838] binder: 10837:10838 ioctl c0306201 200000000540 returned -22
[  342.721668][  T121] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  342.809051][T10840] netlink: 'syz.2.1512': attribute type 2 has an invalid length.
[  342.824153][T10840] netlink: 'syz.2.1512': attribute type 4 has an invalid length.
[  342.831941][T10840] netlink: 'syz.2.1512': attribute type 8 has an invalid length.
[  342.847717][T10840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1512'.
[  342.884312][  T121] usb 1-1: Using ep0 maxpacket: 8
[  342.901736][  T121] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  342.918804][  T121] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  342.931373][  T121] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  342.947149][  T121] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  342.957508][  T121] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  342.963484][T10847] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1514'.
[  342.976475][  T121] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  342.988490][T10844] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1514'.
[  342.992655][  T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.040280][T10848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1515'.
[  343.054434][T10846] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1515'.
[  343.074772][T10848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1515'.
[  343.212671][  T121] usb 1-1: GET_CAPABILITIES returned 0
[  343.240554][T10852] netlink: 'syz.3.1517': attribute type 4 has an invalid length.
[  343.254851][  T121] usbtmc 1-1:16.0: can't read capabilities
[  343.459895][T10831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.470180][T10831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.614308][ T5942] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  343.716420][  T121] usb 4-1: new low-speed USB device number 63 using dummy_hcd
[  343.766136][ T5942] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  343.777961][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.800994][ T5942] usb 5-1: config 0 descriptor??
[  343.878979][  T121] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  343.897381][T10863] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  343.903406][  T121] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  343.916210][   T43] usb 1-1: USB disconnect, device number 53
[  343.925247][  T121] usb 4-1: config 0 interface 0 has no altsetting 0
[  343.936789][  T121] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  343.946218][  T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.958346][  T121] usb 4-1: config 0 descriptor??
[  343.964765][T10860] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  344.079197][T10865] netlink: 'syz.2.1523': attribute type 2 has an invalid length.
[  344.087883][T10865] netlink: 'syz.2.1523': attribute type 4 has an invalid length.
[  344.102159][T10865] netlink: 'syz.2.1523': attribute type 8 has an invalid length.
[  344.110263][T10865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1523'.
[  344.188431][T10867] binder: 10866:10867 unknown command 0
[  344.194521][T10867] binder: 10866:10867 ioctl c0306201 200000000540 returned -22
[  344.217709][  T121] usbhid 4-1:0.0: can't add hid device: -71
[  344.229295][  T121] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  344.242505][  T121] usb 4-1: USB disconnect, device number 63
[  344.307790][T10872] openvswitch: netlink: VXLAN extension message has 16 unknown bytes.
[  344.337481][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1526'.
[  344.559975][ T5942] pegasus 5-1:0.0: probe with driver pegasus failed with error -71
[  344.596776][T10882] XFS (rnullb0): Invalid superblock magic number
[  344.599434][ T5942] usb 5-1: USB disconnect, device number 36
[  345.116131][T10898] netlink: 'syz.0.1532': attribute type 2 has an invalid length.
[  345.129674][T10898] netlink: 'syz.0.1532': attribute type 4 has an invalid length.
[  345.139673][T10898] netlink: 'syz.0.1532': attribute type 8 has an invalid length.
[  345.149091][T10898] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1532'.
[  345.246242][T10900] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  345.783052][T10926] FAULT_INJECTION: forcing a failure.
[  345.783052][T10926] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  345.800840][T10926] CPU: 1 UID: 0 PID: 10926 Comm: syz.3.1540 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  345.800871][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  345.800885][T10926] Call Trace:
[  345.800893][T10926]  <TASK>
[  345.800902][T10926]  dump_stack_lvl+0x189/0x250
[  345.800932][T10926]  ? __pfx____ratelimit+0x10/0x10
[  345.800958][T10926]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.800981][T10926]  ? __pfx__printk+0x10/0x10
[  345.801004][T10926]  ? __might_fault+0xb0/0x130
[  345.801039][T10926]  should_fail_ex+0x414/0x560
[  345.801076][T10926]  _copy_from_user+0x2d/0xb0
[  345.801108][T10926]  ___sys_recvmsg+0x12e/0x510
[  345.801134][T10926]  ? __pfx____sys_recvmsg+0x10/0x10
[  345.801188][T10926]  ? __might_fault+0xb0/0x130
[  345.801215][T10926]  do_recvmmsg+0x307/0x770
[  345.801244][T10926]  ? __pfx_do_recvmmsg+0x10/0x10
[  345.801278][T10926]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  345.801323][T10926]  __x64_sys_recvmmsg+0x190/0x240
[  345.801346][T10926]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  345.801363][T10926]  ? rcu_is_watching+0x15/0xb0
[  345.801389][T10926]  ? do_syscall_64+0xbe/0x3b0
[  345.801419][T10926]  do_syscall_64+0xfa/0x3b0
[  345.801451][T10926]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.801475][T10926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.801496][T10926]  ? clear_bhb_loop+0x60/0xb0
[  345.801521][T10926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.801540][T10926] RIP: 0033:0x7fa36ff8e929
[  345.801559][T10926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.801576][T10926] RSP: 002b:00007fa370dcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  345.801598][T10926] RAX: ffffffffffffffda RBX: 00007fa3701b5fa0 RCX: 00007fa36ff8e929
[  345.801614][T10926] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003
[  345.801626][T10926] RBP: 00007fa370dcf090 R08: 0000000000000000 R09: 0000000000000000
[  345.801639][T10926] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000002
[  345.801652][T10926] R13: 0000000000000000 R14: 00007fa3701b5fa0 R15: 00007ffecef46cc8
[  345.801683][T10926]  </TASK>
[  345.844086][ T5903] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  346.234131][ T5903] usb 1-1: Using ep0 maxpacket: 8
[  346.259178][ T5903] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  346.273888][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  346.284121][ T5903] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  346.309365][ T5903] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  346.322639][ T5903] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  346.336474][ T5903] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  346.348922][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.374198][   T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  346.461146][T10935] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1544'.
[  346.474135][  T121] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  346.559000][   T43] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  346.568383][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.579586][   T43] usb 5-1: config 0 descriptor??
[  346.594608][ T5903] usb 1-1: GET_CAPABILITIES returned 0
[  346.605053][ T5903] usbtmc 1-1:16.0: can't read capabilities
[  346.644121][  T121] usb 4-1: Using ep0 maxpacket: 8
[  346.659216][  T121] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  346.679963][  T121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  346.704418][  T121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  346.714894][  T121] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  346.728457][  T121] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  346.738631][  T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.803339][T10915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.813386][T10915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.938105][T10946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.987911][  T121] usb 4-1: usb_control_msg returned -32
[  347.004880][  T121] usbtmc 4-1:16.0: can't read capabilities
[  347.233876][  T121] usb 4-1: USB disconnect, device number 64
[  347.379786][   T43] pegasus 5-1:0.0: probe with driver pegasus failed with error -71
[  347.400559][   T43] usb 5-1: USB disconnect, device number 37
[  347.466207][  T121] usb 1-1: USB disconnect, device number 54
[  347.720116][   T30] audit: type=1800 audit(1751298462.038:18): pid=10955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1551" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  347.870289][T10965] XFS (rnullb0): Invalid superblock magic number
[  347.974357][T10960] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  347.974797][T10972] validate_nla: 3 callbacks suppressed
[  347.974816][T10972] netlink: 'syz.4.1553': attribute type 2 has an invalid length.
[  347.998751][T10972] netlink: 'syz.4.1553': attribute type 4 has an invalid length.
[  348.007699][T10972] netlink: 'syz.4.1553': attribute type 8 has an invalid length.
[  348.017019][T10972] __nla_validate_parse: 1 callbacks suppressed
[  348.017038][T10972] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1553'.
[  348.021131][T10963] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  348.132670][T10974] FAULT_INJECTION: forcing a failure.
[  348.132670][T10974] name failslab, interval 1, probability 0, space 0, times 0
[  348.154326][T10974] CPU: 1 UID: 0 PID: 10974 Comm: syz.4.1554 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  348.154357][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  348.154370][T10974] Call Trace:
[  348.154378][T10974]  <TASK>
[  348.154386][T10974]  dump_stack_lvl+0x189/0x250
[  348.154415][T10974]  ? __pfx____ratelimit+0x10/0x10
[  348.154440][T10974]  ? __pfx_dump_stack_lvl+0x10/0x10
[  348.154463][T10974]  ? __pfx__printk+0x10/0x10
[  348.154502][T10974]  should_fail_ex+0x414/0x560
[  348.154546][T10974]  should_failslab+0xa8/0x100
[  348.154573][T10974]  kmem_cache_alloc_noprof+0x73/0x3c0
[  348.154595][T10974]  ? skb_clone+0x212/0x3a0
[  348.154619][T10974]  skb_clone+0x212/0x3a0
[  348.154642][T10974]  __netlink_deliver_tap+0x404/0x850
[  348.154683][T10974]  ? netlink_deliver_tap+0x2e/0x1b0
[  348.154712][T10974]  netlink_deliver_tap+0x19c/0x1b0
[  348.154740][T10974]  netlink_sendskb+0x68/0x140
[  348.154767][T10974]  netlink_rcv_skb+0x28c/0x470
[  348.154793][T10974]  ? __pfx_genl_rcv_msg+0x10/0x10
[  348.154813][T10974]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  348.154858][T10974]  ? down_read+0x1ad/0x2e0
[  348.154888][T10974]  genl_rcv+0x28/0x40
[  348.154905][T10974]  netlink_unicast+0x758/0x8d0
[  348.154934][T10974]  netlink_sendmsg+0x805/0xb30
[  348.154964][T10974]  ? __pfx_netlink_sendmsg+0x10/0x10
[  348.154990][T10974]  ? aa_sock_msg_perm+0xf1/0x1d0
[  348.155009][T10974]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  348.155033][T10974]  ? __pfx_netlink_sendmsg+0x10/0x10
[  348.155056][T10974]  __sock_sendmsg+0x21c/0x270
[  348.155079][T10974]  ____sys_sendmsg+0x505/0x830
[  348.155109][T10974]  ? __pfx_____sys_sendmsg+0x10/0x10
[  348.155142][T10974]  ? import_iovec+0x74/0xa0
[  348.155171][T10974]  ___sys_sendmsg+0x21f/0x2a0
[  348.155202][T10974]  ? __pfx____sys_sendmsg+0x10/0x10
[  348.155258][T10974]  ? __fget_files+0x2a/0x420
[  348.155280][T10974]  ? __fget_files+0x3a0/0x420
[  348.155313][T10974]  __x64_sys_sendmsg+0x19b/0x260
[  348.155341][T10974]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  348.155375][T10974]  ? __pfx_ksys_write+0x10/0x10
[  348.155393][T10974]  ? rcu_is_watching+0x15/0xb0
[  348.155413][T10974]  ? do_syscall_64+0xbe/0x3b0
[  348.155437][T10974]  do_syscall_64+0xfa/0x3b0
[  348.155458][T10974]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.155477][T10974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.155493][T10974]  ? clear_bhb_loop+0x60/0xb0
[  348.155513][T10974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.155529][T10974] RIP: 0033:0x7fcc2dd8e929
[  348.155549][T10974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.155563][T10974] RSP: 002b:00007fcc2ec2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  348.155581][T10974] RAX: ffffffffffffffda RBX: 00007fcc2dfb5fa0 RCX: 00007fcc2dd8e929
[  348.155593][T10974] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  348.155604][T10974] RBP: 00007fcc2ec2c090 R08: 0000000000000000 R09: 0000000000000000
[  348.155614][T10974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.155623][T10974] R13: 0000000000000000 R14: 00007fcc2dfb5fa0 R15: 00007ffc35525188
[  348.155648][T10974]  </TASK>
[  348.634046][  T121] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  348.826421][  T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.826457][  T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.826482][  T121] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  348.826535][  T121] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  348.826560][  T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.829814][  T121] usb 3-1: config 0 descriptor??
[  349.051247][T10996] netlink: 'syz.3.1562': attribute type 2 has an invalid length.
[  349.059745][T10996] netlink: 'syz.3.1562': attribute type 4 has an invalid length.
[  349.068059][T10996] netlink: 'syz.3.1562': attribute type 8 has an invalid length.
[  349.076438][T10996] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1562'.
[  349.205737][   T43] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  349.224753][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1563'.
[  349.225808][T11004] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1563'.
[  349.243694][  T121] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd
[  349.258625][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'.
[  349.288799][  T121] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  349.424538][   T43] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  349.433674][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.452573][   T43] usb 1-1: config 0 descriptor??
[  349.514616][  T121] usb 3-1: USB disconnect, device number 42
[  350.144111][  T121] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  350.230774][   T43] pegasus 1-1:0.0: probe with driver pegasus failed with error -71
[  350.235328][   T43] usb 1-1: USB disconnect, device number 55
[  350.294429][  T121] usb 5-1: Using ep0 maxpacket: 8
[  350.297661][  T121] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  350.297695][  T121] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  350.297720][  T121] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  350.297748][  T121] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  350.297774][  T121] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  350.297819][  T121] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  350.297844][  T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.507125][  T121] usb 5-1: GET_CAPABILITIES returned 0
[  350.507177][  T121] usbtmc 5-1:16.0: can't read capabilities
[  350.711752][T11015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.712276][T11015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.804951][  T121] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  350.965225][  T121] usb 4-1: Using ep0 maxpacket: 32
[  350.972538][  T121] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  350.972567][  T121] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  350.972590][  T121] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  350.972639][  T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  350.972663][  T121] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  350.972688][  T121] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  350.972731][  T121] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  350.972755][  T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.979954][  T121] usb 4-1: config 0 descriptor??
[  351.001010][   T30] audit: type=1400 audit(1751298465.318:19): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  351.240494][  T121] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  351.279852][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'.
[  351.332743][    C0] vkms_vblank_simulate: vblank timer overrun
[  351.340012][  T121] usb 4-1: USB disconnect, device number 65
[  351.369856][  T121] usblp1: removed
[  351.473349][   T43] usb 5-1: USB disconnect, device number 38
[  351.608175][T11042] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.790185][T11050] exFAT-fs (rnullb0): invalid boot record signature
[  351.797574][  T121] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  351.806413][T11050] exFAT-fs (rnullb0): failed to read boot sector
[  351.812863][T11050] exFAT-fs (rnullb0): failed to recognize exfat type
[  351.871138][T11052] openvswitch: netlink: Flow actions attr not present in new flow.
[  351.945462][ T5890] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  351.974042][  T121] usb 4-1: Using ep0 maxpacket: 32
[  351.981583][  T121] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  352.000309][  T121] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  352.009770][  T121] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  352.019290][  T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  352.029621][  T121] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  352.040043][  T121] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  352.053356][  T121] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  352.063613][  T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.095634][  T121] usb 4-1: config 0 descriptor??
[  352.118091][ T5890] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  352.131877][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.181736][ T5890] usb 3-1: config 0 descriptor??
[  352.542671][  T121] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  352.603201][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'.
[  352.740684][ T5890] pegasus 3-1:0.0: probe with driver pegasus failed with error -71
[  352.765943][ T5903] usb 4-1: USB disconnect, device number 66
[  352.768348][ T5890] usb 3-1: USB disconnect, device number 43
[  352.800463][ T5903] usblp0: removed
[  353.009007][T11075] FAULT_INJECTION: forcing a failure.
[  353.009007][T11075] name failslab, interval 1, probability 0, space 0, times 0
[  353.021945][T11075] CPU: 1 UID: 0 PID: 11075 Comm: syz.4.1593 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  353.021967][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  353.021976][T11075] Call Trace:
[  353.021984][T11075]  <TASK>
[  353.021991][T11075]  dump_stack_lvl+0x189/0x250
[  353.022014][T11075]  ? __pfx____ratelimit+0x10/0x10
[  353.022032][T11075]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.022048][T11075]  ? __pfx__printk+0x10/0x10
[  353.022073][T11075]  ? __pfx___might_resched+0x10/0x10
[  353.022102][T11075]  ? fs_reclaim_acquire+0x7d/0x100
[  353.022134][T11075]  should_fail_ex+0x414/0x560
[  353.022165][T11075]  should_failslab+0xa8/0x100
[  353.022185][T11075]  __kmalloc_cache_noprof+0x70/0x3d0
[  353.022202][T11075]  ? fuse_get_tree+0xb5/0x4e0
[  353.022219][T11075]  fuse_get_tree+0xb5/0x4e0
[  353.022236][T11075]  vfs_get_tree+0x8f/0x2b0
[  353.022257][T11075]  do_new_mount+0x24a/0xa40
[  353.022283][T11075]  __se_sys_mount+0x317/0x410
[  353.022308][T11075]  ? __pfx___se_sys_mount+0x10/0x10
[  353.022332][T11075]  ? do_syscall_64+0xbe/0x3b0
[  353.022349][T11075]  ? __x64_sys_mount+0x20/0xc0
[  353.022371][T11075]  do_syscall_64+0xfa/0x3b0
[  353.022389][T11075]  ? lockdep_hardirqs_on+0x9c/0x150
[  353.022406][T11075]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.022420][T11075]  ? clear_bhb_loop+0x60/0xb0
[  353.022437][T11075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.022452][T11075] RIP: 0033:0x7fcc2dd8e929
[  353.022465][T11075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.022478][T11075] RSP: 002b:00007fcc2ec2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  353.022494][T11075] RAX: ffffffffffffffda RBX: 00007fcc2dfb5fa0 RCX: 00007fcc2dd8e929
[  353.022506][T11075] RDX: 0000200000000100 RSI: 0000200000002480 RDI: 0000200000002440
[  353.022516][T11075] RBP: 00007fcc2ec2c090 R08: 0000200000000600 R09: 0000000000000000
[  353.022526][T11075] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000002
[  353.022535][T11075] R13: 0000000000000000 R14: 00007fcc2dfb5fa0 R15: 00007ffc35525188
[  353.022556][T11075]  </TASK>
[  353.323899][T11078] FAULT_INJECTION: forcing a failure.
[  353.323899][T11078] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.349924][T11078] CPU: 0 UID: 0 PID: 11078 Comm: syz.0.1594 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  353.349953][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  353.349966][T11078] Call Trace:
[  353.349974][T11078]  <TASK>
[  353.349982][T11078]  dump_stack_lvl+0x189/0x250
[  353.350012][T11078]  ? __pfx____ratelimit+0x10/0x10
[  353.350038][T11078]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.350060][T11078]  ? __pfx__printk+0x10/0x10
[  353.350084][T11078]  ? __might_fault+0xb0/0x130
[  353.350109][T11078]  should_fail_ex+0x414/0x560
[  353.350135][T11078]  _copy_from_user+0x2d/0xb0
[  353.350159][T11078]  input_event_from_user+0xb2/0x280
[  353.350182][T11078]  ? __pfx_input_event_from_user+0x10/0x10
[  353.350207][T11078]  ? input_inject_event+0xbc/0x320
[  353.350224][T11078]  evdev_write+0x2a6/0x480
[  353.350248][T11078]  ? __pfx_evdev_write+0x10/0x10
[  353.350268][T11078]  ? bpf_lsm_file_permission+0x9/0x20
[  353.350281][T11078]  ? security_file_permission+0x75/0x290
[  353.350304][T11078]  ? rw_verify_area+0x258/0x650
[  353.350320][T11078]  ? __pfx_evdev_write+0x10/0x10
[  353.350340][T11078]  vfs_write+0x27b/0xa90
[  353.350367][T11078]  ? __pfx_vfs_write+0x10/0x10
[  353.350385][T11078]  ? __fget_files+0x2a/0x420
[  353.350408][T11078]  ? __fget_files+0x2a/0x420
[  353.350427][T11078]  ? __fget_files+0x3a0/0x420
[  353.350447][T11078]  ? __fget_files+0x2a/0x420
[  353.350474][T11078]  ksys_write+0x145/0x250
[  353.350493][T11078]  ? __pfx_ksys_write+0x10/0x10
[  353.350509][T11078]  ? rcu_is_watching+0x15/0xb0
[  353.350528][T11078]  ? do_syscall_64+0xbe/0x3b0
[  353.350549][T11078]  do_syscall_64+0xfa/0x3b0
[  353.350567][T11078]  ? lockdep_hardirqs_on+0x9c/0x150
[  353.350584][T11078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.350599][T11078]  ? clear_bhb_loop+0x60/0xb0
[  353.350617][T11078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.350631][T11078] RIP: 0033:0x7ff33038e929
[  353.350645][T11078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.350657][T11078] RSP: 002b:00007ff33116f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  353.350674][T11078] RAX: ffffffffffffffda RBX: 00007ff3305b5fa0 RCX: 00007ff33038e929
[  353.350685][T11078] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  353.350694][T11078] RBP: 00007ff33116f090 R08: 0000000000000000 R09: 0000000000000000
[  353.350703][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.350721][T11078] R13: 0000000000000000 R14: 00007ff3305b5fa0 R15: 00007ffe37ea38a8
[  353.350743][T11078]  </TASK>
[  353.610802][    C0] vkms_vblank_simulate: vblank timer overrun
[  353.755106][ T5942] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  353.924158][ T5942] usb 5-1: Using ep0 maxpacket: 8
[  353.931716][ T5942] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  353.944276][ T5942] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  353.955773][ T5942] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  353.967298][ T5942] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  353.979214][ T5942] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  354.012808][ T5942] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  354.026558][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.044169][ T5890] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  354.084161][ T5903] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  354.206523][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.222037][ T5890] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  354.232923][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.245190][ T5903] usb 4-1: Using ep0 maxpacket: 16
[  354.257903][ T5942] usb 5-1: GET_CAPABILITIES returned 0
[  354.264513][ T5942] usbtmc 5-1:16.0: can't read capabilities
[  354.264595][ T5890] usb 3-1: config 0 descriptor??
[  354.272472][ T5903] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  354.292078][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.304183][ T5903] usb 4-1: Product: syz
[  354.308688][ T5903] usb 4-1: Manufacturer: syz
[  354.319001][ T5903] usb 4-1: SerialNumber: syz
[  354.336745][ T5903] usb 4-1: config 0 descriptor??
[  354.359967][ T5903] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  354.385427][ T5903] usb 4-1: Detected FT232H
[  354.463769][T11079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.473060][T11079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.491077][ T5890] usbhid 3-1:0.0: can't add hid device: -71
[  354.498050][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  354.509321][ T5890] usb 3-1: USB disconnect, device number 44
[  354.544753][ T5903] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  354.664109][  T121] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  354.760999][ T5942] usb 5-1: USB disconnect, device number 39
[  354.820011][  T121] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  354.833275][  T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.848114][  T121] usb 1-1: config 0 descriptor??
[  354.934081][ T5890] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  354.961393][ T5903] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  355.094133][ T5890] usb 3-1: Using ep0 maxpacket: 16
[  355.103060][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.117267][ T5890] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  355.127131][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.139918][ T5890] usb 3-1: config 0 descriptor??
[  355.167146][  T121] pegasus 1-1:0.0: probe with driver pegasus failed with error -71
[  355.180866][  T121] usb 1-1: USB disconnect, device number 56
[  355.203404][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.221325][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.258170][ T5942] usb 4-1: USB disconnect, device number 67
[  355.273013][ T5942] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  355.283442][ T5942] ftdi_sio 4-1:0.0: device disconnected
[  355.515396][T11106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  355.695501][T11115] FAULT_INJECTION: forcing a failure.
[  355.695501][T11115] name failslab, interval 1, probability 0, space 0, times 0
[  355.713436][T11115] CPU: 1 UID: 0 PID: 11115 Comm: syz.3.1610 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  355.713467][T11115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  355.713481][T11115] Call Trace:
[  355.713489][T11115]  <TASK>
[  355.713498][T11115]  dump_stack_lvl+0x189/0x250
[  355.713530][T11115]  ? __pfx____ratelimit+0x10/0x10
[  355.713556][T11115]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.713579][T11115]  ? __pfx__printk+0x10/0x10
[  355.713608][T11115]  ? __pfx___might_resched+0x10/0x10
[  355.713628][T11115]  ? fs_reclaim_acquire+0x7d/0x100
[  355.713660][T11115]  should_fail_ex+0x414/0x560
[  355.713702][T11115]  should_failslab+0xa8/0x100
[  355.713729][T11115]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  355.713754][T11115]  ? __alloc_skb+0x112/0x2d0
[  355.713787][T11115]  __alloc_skb+0x112/0x2d0
[  355.713819][T11115]  netlink_ack+0x146/0xa50
[  355.713843][T11115]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.713860][T11115]  ? ref_tracker_free+0x63a/0x7d0
[  355.713879][T11115]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  355.713898][T11115]  ? __pfx_nl80211_post_doit+0x10/0x10
[  355.713918][T11115]  ? __pfx_ref_tracker_free+0x10/0x10
[  355.713948][T11115]  netlink_rcv_skb+0x28c/0x470
[  355.713975][T11115]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.713996][T11115]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.714039][T11115]  ? down_read+0x1ad/0x2e0
[  355.714070][T11115]  genl_rcv+0x28/0x40
[  355.714087][T11115]  netlink_unicast+0x758/0x8d0
[  355.714124][T11115]  netlink_sendmsg+0x805/0xb30
[  355.714162][T11115]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.714193][T11115]  ? aa_sock_msg_perm+0xf1/0x1d0
[  355.714217][T11115]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  355.714247][T11115]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.714275][T11115]  __sock_sendmsg+0x21c/0x270
[  355.714304][T11115]  ____sys_sendmsg+0x505/0x830
[  355.714342][T11115]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.714384][T11115]  ? import_iovec+0x74/0xa0
[  355.714419][T11115]  ___sys_sendmsg+0x21f/0x2a0
[  355.714453][T11115]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.714524][T11115]  ? __fget_files+0x2a/0x420
[  355.714551][T11115]  ? __fget_files+0x3a0/0x420
[  355.714592][T11115]  __x64_sys_sendmsg+0x19b/0x260
[  355.714627][T11115]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  355.714676][T11115]  ? __pfx_ksys_write+0x10/0x10
[  355.714699][T11115]  ? rcu_is_watching+0x15/0xb0
[  355.714726][T11115]  ? do_syscall_64+0xbe/0x3b0
[  355.714755][T11115]  do_syscall_64+0xfa/0x3b0
[  355.714780][T11115]  ? lockdep_hardirqs_on+0x9c/0x150
[  355.714804][T11115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.714824][T11115]  ? clear_bhb_loop+0x60/0xb0
[  355.714849][T11115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.714869][T11115] RIP: 0033:0x7fa36ff8e929
[  355.714888][T11115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.714905][T11115] RSP: 002b:00007fa370dcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.714927][T11115] RAX: ffffffffffffffda RBX: 00007fa3701b5fa0 RCX: 00007fa36ff8e929
[  355.714943][T11115] RDX: 0000000000001000 RSI: 0000200000001080 RDI: 0000000000000003
[  355.714956][T11115] RBP: 00007fa370dcf090 R08: 0000000000000000 R09: 0000000000000000
[  355.714969][T11115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.714982][T11115] R13: 0000000000000000 R14: 00007fa3701b5fa0 R15: 00007ffecef46cc8
[  355.715014][T11115]  </TASK>
[  356.550695][   T30] audit: type=1800 audit(1751298470.868:20): pid=11135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1618" name="bus" dev="overlay" ino=2188 res=0 errno=0
[  356.554882][ T5890] usbhid 3-1:0.0: can't add hid device: -71
[  356.579909][ T5940] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  356.580312][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  356.662570][ T5890] usb 3-1: USB disconnect, device number 45
[  356.709844][T11137] syzkaller1: entered promiscuous mode
[  356.717124][T11137] syzkaller1: entered allmulticast mode
[  356.774179][ T5940] usb 5-1: Using ep0 maxpacket: 8
[  356.783395][ T5940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  356.797490][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  356.807657][ T5940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  356.822234][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  356.832595][ T5940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  356.853692][ T5940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  356.863288][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.104430][ T5940] usb 5-1: GET_CAPABILITIES returned 0
[  357.117884][ T5940] usbtmc 5-1:16.0: can't read capabilities
[  357.215212][T11151] IPVS: length: 231 != 24
[  357.232787][T11149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.246423][T11149] syz.0.1624: attempt to access beyond end of device
[  357.246423][T11149] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  357.262845][T11149] SQUASHFS error: Failed to read block 0x0: -5
[  357.270613][T11149] unable to read squashfs_super_block
[  357.297194][T11152] netlink: 'syz.0.1624': attribute type 1 has an invalid length.
[  357.305138][T11129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.305605][T11129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.636035][T11165] hpfs: Bad magic ... probably not HPFS
[  357.669369][ T5940] usb 5-1: USB disconnect, device number 40
[  358.465351][ T5942] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  358.550441][T11199] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffc
[  358.652394][ T5942] usb 4-1: Using ep0 maxpacket: 16
[  358.665267][ T5942] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  358.678974][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  358.694830][ T5942] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  358.704097][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.712342][ T5942] usb 4-1: Product: syz
[  358.728658][ T5942] usb 4-1: Manufacturer: syz
[  358.748277][ T5942] usb 4-1: SerialNumber: syz
[  358.774880][ T5942] usb 4-1: config 0 descriptor??
[  358.793850][ T5942] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  358.810725][ T5942] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  359.306936][ T5940] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  359.383848][T11227] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  359.390723][T11227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  359.406651][T11227] vhci_hcd vhci_hcd.0: Device attached
[  359.408257][ T5942] em28xx 4-1:0.0: chip ID is em2765
[  359.432408][   T51] Bluetooth: hci3: unexpected subevent 0x0a length: 91 > 30
[  359.474102][ T5940] usb 5-1: Using ep0 maxpacket: 16
[  359.497081][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.518615][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.534226][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  359.554152][T11229] vhci_hcd: connection closed
[  359.556948][ T9013] vhci_hcd: stop threads
[  359.576015][ T5940] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  359.596543][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.618884][ T5942] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  359.648417][ T5942] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  359.666150][ T5942] em28xx 4-1:0.0: No AC97 audio processor
[  359.690123][ T5940] usb 5-1: config 0 descriptor??
[  359.717539][ T9013] vhci_hcd: release socket
[  359.731413][ T5942] usb 4-1: USB disconnect, device number 68
[  359.741961][ T5942] em28xx 4-1:0.0: Disconnecting em28xx
[  359.755643][ T9013] vhci_hcd: disconnect device
[  359.757667][ T5942] em28xx 4-1:0.0: Freeing device
[  359.764081][ T5890] usb 37-1: new high-speed USB device number 2 using vhci_hcd
[  359.786820][ T5890] usb 37-1: enqueue for inactive port 0
[  359.884081][ T5890] vhci_hcd: vhci_device speed not set
[  360.128180][   T51] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  360.130782][ T5940] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  360.131820][T11243] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  360.155636][T11243] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  360.168466][ T5940] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  360.204183][ T5940] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  360.211646][ T5940] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  360.300795][ T5940] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  360.321211][ T5940] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  360.329169][ T5940] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  360.339031][T11254] overlay: ./file0 is not a directory
[  360.353212][ T5940] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  360.378839][ T5940] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  360.397036][ T5940] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0
[  360.498821][ T5940] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input32
[  360.548607][ T5940] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  360.598273][ T5940] usb 5-1: USB disconnect, device number 41
[  360.717806][T11262] fido_id[11262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  360.910933][T11264] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  360.917295][T11264] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  360.923497][T11264] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  360.932992][T11264] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  361.460252][T11286] XFS (rnullb0): Invalid superblock magic number
[  362.234032][ T5940] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  362.334487][  T121] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  362.359122][T11309] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1683'.
[  362.394172][ T5940] usb 3-1: device descriptor read/64, error -71
[  362.494310][  T121] usb 5-1: Using ep0 maxpacket: 8
[  362.517502][  T121] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  362.528216][  T121] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  362.538141][  T121] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  362.549713][  T121] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  362.560115][  T121] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.573600][  T121] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  362.582781][  T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.634106][ T5940] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  362.751580][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.764855][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.773836][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.784059][ T5940] usb 3-1: device descriptor read/64, error -71
[  362.791605][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.802843][  T121] usb 5-1: GET_CAPABILITIES returned 0
[  362.808869][  T121] usbtmc 5-1:16.0: can't read capabilities
[  362.815847][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.895418][ T5940] usb usb3-port1: attempt power cycle
[  362.974143][   T51] Bluetooth: hci2: command 0x041b tx timeout
[  362.980358][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  363.016440][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.052236][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.082568][T11311] chnl_net:caif_netlink_parms(): no params data found
[  363.244030][ T5940] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  363.295972][ T5940] usb 3-1: device descriptor read/8, error -71
[  363.313469][T11311] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.326710][T11311] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.348268][T11311] bridge_slave_0: entered allmulticast mode
[  363.367049][T11311] bridge_slave_0: entered promiscuous mode
[  363.386276][T11311] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.395339][T11311] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.402658][T11311] bridge_slave_1: entered allmulticast mode
[  363.416645][T11311] bridge_slave_1: entered promiscuous mode
[  363.506517][T11311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.523500][T11311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.545174][ T5940] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  363.593792][ T5940] usb 3-1: device descriptor read/8, error -71
[  363.597191][   T24] usb 5-1: USB disconnect, device number 42
[  363.705389][ T5940] usb usb3-port1: unable to enumerate USB device
[  363.758421][T11311] team0: Port device team_slave_0 added
[  363.776598][T11311] team0: Port device team_slave_1 added
[  363.828645][T11311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.837735][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.865817][T11311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.878461][T11311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.887776][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.914334][T11311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.968954][T11311] hsr_slave_0: entered promiscuous mode
[  363.975550][T11311] hsr_slave_1: entered promiscuous mode
[  363.982070][T11311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.989710][T11311] Cannot create hsr debugfs directory
[  364.184507][T11311] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  364.199080][T11311] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  364.206072][ T5828] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  364.218472][T11311] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  364.231540][T11311] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  364.340068][T11311] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.365719][T11311] 8021q: adding VLAN 0 to HW filter on device team0
[  364.373977][ T5828] usb 1-1: config index 0 descriptor too short (expected 69, got 36)
[  364.382255][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  364.400762][ T5828] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  364.405714][ T9013] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.412093][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.417716][ T9013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.426874][ T5828] usb 1-1: Product: syz
[  364.437759][ T5828] usb 1-1: Manufacturer: syz
[  364.442402][ T5828] usb 1-1: SerialNumber: syz
[  364.457158][ T5828] usb 1-1: config 0 descriptor??
[  364.473135][ T5828] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  364.492470][ T9013] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.499693][ T9013] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.894195][   T51] Bluetooth: hci1: command tx timeout
[  364.919481][T11311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.971898][ T5828] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  365.004195][ T5828] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  365.054778][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  365.060724][ T5828] usb 1-1: USB disconnect, device number 57
[  365.160117][T11349] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1691'.
[  365.180196][T11347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1691'.
[  365.578829][T11311] veth0_vlan: entered promiscuous mode
[  365.600804][T11311] veth1_vlan: entered promiscuous mode
[  365.741434][T11311] veth0_macvtap: entered promiscuous mode
[  365.799056][T11311] veth1_macvtap: entered promiscuous mode
[  365.876619][T11311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.941206][T11311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.019477][ T1104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.039107][ T1104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.087305][ T1104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.138770][ T1104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.288826][ T9006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.305710][T11363] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1694'.
[  366.325268][ T9006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.363234][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.382058][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.696165][T11372] exFAT-fs (rnullb0): invalid boot record signature
[  366.712302][T11372] exFAT-fs (rnullb0): failed to read boot sector
[  366.718777][T11372] exFAT-fs (rnullb0): failed to recognize exfat type
[  366.793346][T11377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1700'.
[  366.810427][   T30] audit: type=1326 audit(1751298481.128:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85b6f8e929 code=0x0
[  366.865340][ T5920] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  366.974378][   T51] Bluetooth: hci1: command tx timeout
[  366.994603][  T121] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  367.024177][ T5920] usb 1-1: Using ep0 maxpacket: 16
[  367.039058][T11370] qnx4: no qnx4 filesystem (no root dir).
[  367.047954][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short
[  367.063519][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -71
[  367.073284][ T5920] usb 1-1: can't read configurations, error -71
[  367.079724][   T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  367.144048][  T121] usb 5-1: Using ep0 maxpacket: 8
[  367.151201][  T121] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  367.161947][  T121] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  367.171878][  T121] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  367.187455][  T121] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  367.197812][  T121] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  367.211139][  T121] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  367.222095][  T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.238156][   T24] usb 6-1: not running at top speed; connect to a high speed hub
[  367.250899][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.261707][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  367.270886][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  367.287893][   T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  367.300101][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.308736][   T24] usb 6-1: Product: ⠁
[  367.313068][   T24] usb 6-1: Manufacturer: 렮䁀補蟲눅갣횟✝坴컮
[  367.321448][   T24] usb 6-1: SerialNumber: syz
[  367.436557][  T121] usb 5-1: GET_CAPABILITIES returned 0
[  367.443367][  T121] usbtmc 5-1:16.0: can't read capabilities
[  367.547564][   T24] usb 6-1: 0:2 : does not exist
[  367.568347][   T24] usb 6-1: USB disconnect, device number 2
[  367.662496][T11376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.674545][T11376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.982957][ T5903] usb 5-1: USB disconnect, device number 43
[  368.108512][T11385] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  368.114895][T11385] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  368.121146][T11385] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  368.127581][T11385] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  368.133743][T11385] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  368.182753][T11385] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  368.347628][ T7350] syz_tun (unregistering): left allmulticast mode
[  368.398278][T11390] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1707'.
[  368.587789][ T1104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.746766][ T1104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.159294][ T1104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.499522][ T1104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.546374][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.562248][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.571177][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.590427][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.599358][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.756652][T11409] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1714'.
[  369.841502][   T30] audit: type=1326 audit(1751298484.158:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.4.1714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc2dd8e929 code=0x0
[  370.014947][T11417] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1716'.
[  370.044557][T11414] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1716'.
[  370.061557][T11419] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1717'.
[  370.121675][ T1104] bridge0: port 3(batadv0) entered disabled state
[  370.156399][ T1104] bridge_slave_1: left allmulticast mode
[  370.175173][   T51] Bluetooth: hci1: command 0x0419 tx timeout
[  370.175225][ T5848] Bluetooth: hci2: command 0x041b tx timeout
[  370.192059][ T1104] bridge_slave_1: left promiscuous mode
[  370.213821][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.242620][ T1104] bridge_slave_0: left allmulticast mode
[  370.251976][ T1104] bridge_slave_0: left promiscuous mode
[  370.274272][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.554329][ T5890] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  370.727673][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  370.735044][ T5890] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  370.746988][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  370.756865][ T5890] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  370.767062][ T5890] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  370.780984][ T5890] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  370.790226][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.844122][  T121] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  370.887229][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  370.899903][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.912731][ T1104] bond0 (unregistering): Released all slaves
[  370.968209][T11406] chnl_net:caif_netlink_parms(): no params data found
[  371.010163][ T1104] tipc: Left network mode
[  371.030439][  T121] usb 6-1: Using ep0 maxpacket: 8
[  371.035979][ T5890] usb 1-1: GET_CAPABILITIES returned 0
[  371.041525][ T5890] usbtmc 1-1:16.0: can't read capabilities
[  371.069208][  T121] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  371.081741][  T121] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  371.128735][  T121] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024
[  371.176421][  T121] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  371.210858][  T121] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  371.268455][  T121] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  371.305264][  T121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.310498][ T5940] usb 1-1: USB disconnect, device number 60
[  371.468206][T11406] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.488202][T11406] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.504284][T11406] bridge_slave_0: entered allmulticast mode
[  371.522580][T11406] bridge_slave_0: entered promiscuous mode
[  371.577111][  T121] usb 6-1: GET_CAPABILITIES returned 0
[  371.582678][  T121] usbtmc 6-1:16.0: can't read capabilities
[  371.657411][T11406] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.676788][T11406] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.694348][ T5848] Bluetooth: hci3: command tx timeout
[  371.702462][T11406] bridge_slave_1: entered allmulticast mode
[  371.717601][T11406] bridge_slave_1: entered promiscuous mode
[  371.797720][ T1104] ------------[ cut here ]------------
[  371.803251][ T1104] Have pending ack frames!
[  371.809481][T11428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.834580][T11428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.860973][ T1104] WARNING: net/mac80211/main.c:1716 at ieee80211_free_ack_frame+0x4d/0x60, CPU#1: kworker/u8:6/1104
[  371.872240][ T1104] Modules linked in:
[  371.877063][ T1104] CPU: 1 UID: 0 PID: 1104 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  371.889390][ T1104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  371.900109][ T1104] Workqueue: netns cleanup_net
[  371.906164][ T1104] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60
[  371.912375][ T1104] Code: 00 00 e8 36 f7 70 fe 31 c0 5b c3 cc cc cc cc cc e8 08 86 db f6 c6 05 b5 18 c8 04 01 90 48 c7 c7 c0 6f b0 8c e8 84 2a 9f f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90
[  371.932690][ T1104] RSP: 0000:ffffc90003e57610 EFLAGS: 00010246
[  371.939778][ T1104] RAX: a9c0bc598ba03600 RBX: ffff88803106ba00 RCX: ffff888027395a00
[  371.948607][ T1104] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  371.957762][ T1104] RBP: ffffc90003e57718 R08: 0000000000000003 R09: 0000000000000004
[  371.967056][ T1104] R10: dffffc0000000000 R11: fffffbfff1c3a428 R12: ffffc90003e57680
[  371.975501][ T1104] R13: ffff88805d69c5b0 R14: ffff88807dc72fa8 R15: 0000000000000001
[  371.983609][ T1104] FS:  0000000000000000(0000) GS:ffff888125ae4000(0000) knlGS:0000000000000000
[  371.993548][ T1104] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  372.000614][ T1104] CR2: 00007f5b3f8b5480 CR3: 000000000e136000 CR4: 00000000003526f0
[  372.008797][ T1104] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000
[  372.017403][ T1104] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  372.025703][ T1104] Call Trace:
[  372.029255][ T1104]  <TASK>
[  372.032224][ T1104]  idr_for_each+0x1b5/0x290
[  372.036824][ T1104]  ? __pfx_ieee80211_free_ack_frame+0x10/0x10
[  372.043043][ T1104]  ? __pfx_idr_for_each+0x10/0x10
[  372.048186][ T1104]  ? kobject_put+0x270/0x480
[  372.053463][ T1104]  ? kfree+0x18e/0x440
[  372.058571][ T1104]  ieee80211_free_hw+0xc6/0x480
[  372.063492][ T1104]  mac80211_hwsim_del_radio+0x2de/0x460
[  372.069157][ T1104]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  372.075452][ T1104]  hwsim_exit_net+0x584/0x640
[  372.080181][ T1104]  ? __pfx_hwsim_exit_net+0x10/0x10
[  372.085484][ T1104]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  372.091445][ T1104]  ops_undo_list+0x497/0x990
[  372.096270][ T1104]  ? __pfx_ops_undo_list+0x10/0x10
[  372.101540][ T1104]  cleanup_net+0x4c5/0x800
[  372.106610][ T1104]  ? __pfx_cleanup_net+0x10/0x10
[  372.111607][ T1104]  ? _raw_spin_unlock_irq+0x23/0x50
[  372.117004][ T1104]  ? process_scheduled_works+0x9ef/0x17b0
[  372.122776][ T1104]  ? process_scheduled_works+0x9ef/0x17b0
[  372.128865][ T1104]  process_scheduled_works+0xae1/0x17b0
[  372.134809][ T1104]  ? __pfx_process_scheduled_works+0x10/0x10
[  372.140899][ T1104]  worker_thread+0x8a0/0xda0
[  372.145590][ T1104]  kthread+0x70e/0x8a0
[  372.149702][ T1104]  ? __pfx_worker_thread+0x10/0x10
[  372.155459][ T1104]  ? __pfx_kthread+0x10/0x10
[  372.160102][ T1104]  ? _raw_spin_unlock_irq+0x23/0x50
[  372.165782][ T1104]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.172100][ T1104]  ? __pfx_kthread+0x10/0x10
[  372.176934][ T1104]  ret_from_fork+0x3fc/0x770
[  372.181582][ T1104]  ? __pfx_ret_from_fork+0x10/0x10
[  372.186798][ T1104]  ? __switch_to_asm+0x39/0x70
[  372.191805][ T1104]  ? __switch_to_asm+0x33/0x70
[  372.196695][ T1104]  ? __pfx_kthread+0x10/0x10
[  372.201354][ T1104]  ret_from_fork_asm+0x1a/0x30
[  372.206433][ T1104]  </TASK>
[  372.210158][ T1104] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  372.217497][ T1104] CPU: 1 UID: 0 PID: 1104 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) 
[  372.229417][ T1104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  372.239499][ T1104] Workqueue: netns cleanup_net
[  372.244296][ T1104] Call Trace:
[  372.247673][ T1104]  <TASK>
[  372.250621][ T1104]  dump_stack_lvl+0x99/0x250
[  372.255242][ T1104]  ? __asan_memcpy+0x40/0x70
[  372.259856][ T1104]  ? __pfx_dump_stack_lvl+0x10/0x10
[  372.265066][ T1104]  ? __pfx__printk+0x10/0x10
[  372.269680][ T1104]  panic+0x2db/0x790
[  372.273586][ T1104]  ? __pfx_panic+0x10/0x10
[  372.278014][ T1104]  ? ret_from_fork_asm+0x1a/0x30
[  372.282968][ T1104]  __warn+0x334/0x4c0
[  372.286955][ T1104]  ? ieee80211_free_ack_frame+0x4d/0x60
[  372.292530][ T1104]  ? ieee80211_free_ack_frame+0x4d/0x60
[  372.298179][ T1104]  report_bug+0x2be/0x4f0
[  372.302527][ T1104]  ? ieee80211_free_ack_frame+0x4d/0x60
[  372.308089][ T1104]  ? ieee80211_free_ack_frame+0x4d/0x60
[  372.313642][ T1104]  ? ieee80211_free_ack_frame+0x4f/0x60
[  372.319284][ T1104]  handle_bug+0x84/0x160
[  372.323546][ T1104]  exc_invalid_op+0x1a/0x50
[  372.328068][ T1104]  asm_exc_invalid_op+0x1a/0x20
[  372.333013][ T1104] RIP: 0010:ieee80211_free_ack_frame+0x4d/0x60
[  372.339365][ T1104] Code: 00 00 e8 36 f7 70 fe 31 c0 5b c3 cc cc cc cc cc e8 08 86 db f6 c6 05 b5 18 c8 04 01 90 48 c7 c7 c0 6f b0 8c e8 84 2a 9f f6 90 <0f> 0b 90 90 eb c8 cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90
[  372.359000][ T1104] RSP: 0000:ffffc90003e57610 EFLAGS: 00010246
[  372.365097][ T1104] RAX: a9c0bc598ba03600 RBX: ffff88803106ba00 RCX: ffff888027395a00
[  372.373092][ T1104] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  372.381605][ T1104] RBP: ffffc90003e57718 R08: 0000000000000003 R09: 0000000000000004
[  372.389647][ T1104] R10: dffffc0000000000 R11: fffffbfff1c3a428 R12: ffffc90003e57680
[  372.397716][ T1104] R13: ffff88805d69c5b0 R14: ffff88807dc72fa8 R15: 0000000000000001
[  372.405851][ T1104]  idr_for_each+0x1b5/0x290
[  372.410394][ T1104]  ? __pfx_ieee80211_free_ack_frame+0x10/0x10
[  372.416491][ T1104]  ? __pfx_idr_for_each+0x10/0x10
[  372.421561][ T1104]  ? kobject_put+0x270/0x480
[  372.426171][ T1104]  ? kfree+0x18e/0x440
[  372.430261][ T1104]  ieee80211_free_hw+0xc6/0x480
[  372.435213][ T1104]  mac80211_hwsim_del_radio+0x2de/0x460
[  372.440852][ T1104]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  372.446955][ T1104]  hwsim_exit_net+0x584/0x640
[  372.451763][ T1104]  ? __pfx_hwsim_exit_net+0x10/0x10
[  372.457021][ T1104]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  372.462910][ T1104]  ops_undo_list+0x497/0x990
[  372.467548][ T1104]  ? __pfx_ops_undo_list+0x10/0x10
[  372.472856][ T1104]  cleanup_net+0x4c5/0x800
[  372.477327][ T1104]  ? __pfx_cleanup_net+0x10/0x10
[  372.482429][ T1104]  ? _raw_spin_unlock_irq+0x23/0x50
[  372.487652][ T1104]  ? process_scheduled_works+0x9ef/0x17b0
[  372.493410][ T1104]  ? process_scheduled_works+0x9ef/0x17b0
[  372.499165][ T1104]  process_scheduled_works+0xae1/0x17b0
[  372.504862][ T1104]  ? __pfx_process_scheduled_works+0x10/0x10
[  372.510894][ T1104]  worker_thread+0x8a0/0xda0
[  372.515531][ T1104]  kthread+0x70e/0x8a0
[  372.519634][ T1104]  ? __pfx_worker_thread+0x10/0x10
[  372.524775][ T1104]  ? __pfx_kthread+0x10/0x10
[  372.529390][ T1104]  ? _raw_spin_unlock_irq+0x23/0x50
[  372.534628][ T1104]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.539891][ T1104]  ? __pfx_kthread+0x10/0x10
[  372.544514][ T1104]  ret_from_fork+0x3fc/0x770
[  372.549315][ T1104]  ? __pfx_ret_from_fork+0x10/0x10
[  372.554488][ T1104]  ? __switch_to_asm+0x39/0x70
[  372.559325][ T1104]  ? __switch_to_asm+0x33/0x70
[  372.564117][ T1104]  ? __pfx_kthread+0x10/0x10
[  372.568747][ T1104]  ret_from_fork_asm+0x1a/0x30
[  372.573652][ T1104]  </TASK>
[  372.577132][ T1104] Kernel Offset: disabled
[  372.581589][ T1104] Rebooting in 86400 seconds..