last executing test programs:

13m1.63526583s ago: executing program 3 (id=760):
sendmsg$key(0xffffffffffffffff, 0x0, 0x4000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x30}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

13m1.597911754s ago: executing program 3 (id=761):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000241000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000100b9080001400000000a08000240000000000900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0)

13m1.525607738s ago: executing program 3 (id=762):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
shutdown(r0, 0x1)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000170206010100000000000000000a00000a0900020073797a310000000011000300686173683a6e65742c6e6574000000000c00078005001400040000000500010007000000050005000a000000050004000200000003a4a9839c2ec236331df3205ef9bec65adca8961a4b1200fa58258efe8baee89dfbf805ef30abfcf208301418cb0fea912aa916d1a2f030c0fab57a899fa36fe081c4120655bdd198e283b016585a8c1452432f09"], 0x58}, 0x1, 0x0, 0x0, 0x20044040}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000010601ecff0000000000000000000004050001000700000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10010}, 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
shutdown(r0, 0x1) (async)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) (async)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
sendmsg$nl_crypto(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000170206010100000000000000000a00000a0900020073797a310000000011000300686173683a6e65742c6e6574000000000c00078005001400040000000500010007000000050005000a000000050004000200000003a4a9839c2ec236331df3205ef9bec65adca8961a4b1200fa58258efe8baee89dfbf805ef30abfcf208301418cb0fea912aa916d1a2f030c0fab57a899fa36fe081c4120655bdd198e283b016585a8c1452432f09"], 0x58}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000010601ecff0000000000000000000004050001000700000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10010}, 0x1) (async)

13m1.059431906s ago: executing program 3 (id=763):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000100)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) (fail_nth: 1)

13m0.886384127s ago: executing program 3 (id=764):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000840)=@gcm_128={{0x304}, "bbda7c255693784f", "86e5e3df699f9c2502a894116bbe63c8", "957856de", "a8687830aa457ce2"}, 0x28)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) (async)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0605250c"], 0x9) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82440, 0x0) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async)
r4 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000200)=0xffffffff, 0x4)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x88003, 0x0)
r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)
recvmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000001c0)=""/100, 0x64}], 0x2}}], 0x1, 0x101, 0x0) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x4a, &(0x7f0000000040)=0xffff2652, 0x4) (async)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000000c0)=0x3fd, 0x3, 0x0) (async)
mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000140)="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", 0x4f9}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="280000fbffffff0029000000040000002101000000000000c2040000000598f90fff000000000000b7d63a66edb6ccfd7c6e00000100000000006c79c1f69aa90ae107da4288ddbe0caa2dbdb7022f5a6654e3e62528a77db90c27480cf11beff17645df"], 0x28}, 0x20004004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="080000080300"}) (async)
write(r1, &(0x7f0000000000)="2e000000010002", 0x7) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fremovexattr(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="7375978acc810dd323ec"]) (async)
pipe2(&(0x7f00000006c0), 0x880)

13m0.1668858s ago: executing program 3 (id=767):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001004d00000008000300", @ANYRES32=r4, @ANYBLOB="140004006e69637666300000000000000000800400020000000000000000000000010000"], 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0xfffffffc, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x800006, 0xff, 0x1, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x2, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x0, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x3, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x5, 0x5, 0x4, 0x7, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x1, 0x226, 0x4, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x4, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r6 = socket(0x80000000000000a, 0x2, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0)
r8 = dup(r7)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000003700)={0x1, 0x0, [{0x54000, 0x8b, &(0x7f0000000500)=""/139}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000080)=0x4000000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r9, 0x4008af04, &(0x7f0000000040))
fadvise64(r8, 0x3, 0x4000000005, 0x4)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x1}, @register_looper], 0xa0, 0x0, &(0x7f0000000880)="10c08625abf9982e94b458c0da3b7c905f295260753b55dead06085102ea6b836517002dca7b2f466bce24b53e51cde1fb0ec6162f168d38f2520a4f6803dbe50f6f5bfb4cad02bf25bf9bd5c2a3c66c6e4a04d9c01f4b1289aef47e067c6494fa4682ac8b02dd34c6ca2a7a9b360f38fa99a48209b7744f057c8505f0391df0bc6ebb19125b38ea2263bf18948d5466bb973b7d96b0b54ebeafc7274d57b504"})
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r10 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)

12m59.659343193s ago: executing program 32 (id=767):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000), 0xe)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001004d00000008000300", @ANYRES32=r4, @ANYBLOB="140004006e69637666300000000000000000800400020000000000000000000000010000"], 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0xfffffffc, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x800006, 0xff, 0x1, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x2, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x0, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x3, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x5, 0x5, 0x4, 0x7, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x1, 0x226, 0x4, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x4, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r6 = socket(0x80000000000000a, 0x2, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0)
r8 = dup(r7)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000003700)={0x1, 0x0, [{0x54000, 0x8b, &(0x7f0000000500)=""/139}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000080)=0x4000000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r9, 0x4008af04, &(0x7f0000000040))
fadvise64(r8, 0x3, 0x4000000005, 0x4)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x1}, @register_looper], 0xa0, 0x0, &(0x7f0000000880)="10c08625abf9982e94b458c0da3b7c905f295260753b55dead06085102ea6b836517002dca7b2f466bce24b53e51cde1fb0ec6162f168d38f2520a4f6803dbe50f6f5bfb4cad02bf25bf9bd5c2a3c66c6e4a04d9c01f4b1289aef47e067c6494fa4682ac8b02dd34c6ca2a7a9b360f38fa99a48209b7744f057c8505f0391df0bc6ebb19125b38ea2263bf18948d5466bb973b7d96b0b54ebeafc7274d57b504"})
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r10 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)

3m55.769154134s ago: executing program 1 (id=4388):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x7c, 0x4)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)

3m55.685252464s ago: executing program 1 (id=4389):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80184132, &(0x7f0000000340))
r1 = fsopen(&(0x7f00000005c0)='befs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000080)='io#harset', 0x0)
statfs(&(0x7f0000000940)='./file0\x00', &(0x7f0000000a00)=""/136)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000000000020103000000000000000007000010b8000a802c0002800c000280050001003a000000060003400004000006000340000200000c0002800500010021000000080001400000000008f7d0c4361e3ad58fd3e192e0a0000140000000017800028006000340000100000cff028005000100060000000c000280050001001100000006000340000000000600034000020000060003400001000006000340004600000c000280050001001000000014000180080001007f00000108000200ffffffff140001800800010000000000080002006401010114000a80100002800c000280050001003a000000"], 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r2 = socket$inet(0x2, 0x2, 0x3)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0)
sendto(r2, &(0x7f00000006c0)="40a54262ca7733bc78be614ce01c4edbd9026fc2cf0732c553dd250a70132e5c41f2bf36f93e3c6fadec0319aefaa1496ea489e7cfda1bb2b536a0018b76a62d1c4cfc11648b6166255959fb60ed24347ce8cca80aa60cd75e2010d0f6ddddfe4217ec1a27baeeb64782e5c2d4c8d5d2a057f1979d1db58f6f3aa9b243a8a43de89876c4d973bb437a0f90e5a0eb68077db57446c4666a8cf5b28a1e4ace19b1647de03687ede4ba1903da91b3563f3eaaf6a374262dfdc019c62962196b697878be45f3280cdd", 0xc7, 0x20000080, &(0x7f0000000880)=@nfc_llcp={0x27, r4, 0x1, 0x6, 0x2, 0x81, "c7b9021db0d0aa122c4ef92528f03502f1d95e06e2d63bd7c7cd55eeda126c5517f1079ceeb3ad01c65fb6dbc73b55e7757d500d7f7bb81c58677287db8ae3", 0xb}, 0x80)
r7 = socket(0x5, 0x4, 0x40000009)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r7)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450)
sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}}, 0x44054)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4000)
sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000cc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x549004}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)={0x218, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1148}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13b9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5d1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x202}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x111}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "02e4830bf04a25d7482fca123a5d9e41050bfa2f02ab05bde46f31e8cbc85116"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x2000}, 0x20008004)
sendto(r7, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x4000005, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

3m52.48940604s ago: executing program 1 (id=4399):
syz_usb_connect$cdc_ncm(0x0, 0xfa, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x40, 0x8}, [@mdlm_detail={0x82, 0x24, 0x13, 0x9, "73aedec46049ceece8fdeb8bbca12d7981449a02312197951e31e7a1317d615f1a34db781d4af2776bc623cdb495ccd76ac449d18779fbcb0dd75d3fa192aa8887164f12b9d9e9f2b51270f8d142a53ab77008961da7ad4f704b5f70f5dd35182d3bd328b71b72d36676bf7e65f2f647545360b327140030bcb1c768b547"}, @obex={0x5, 0x24, 0x15, 0x9}, @obex={0x5, 0x24, 0x15, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x62, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8}}}}}}}]}}, 0x0)

3m51.237201409s ago: executing program 1 (id=4403):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

3m50.937073804s ago: executing program 1 (id=4405):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3ed900ddff0000002000ebff1000040100"})
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'batadv0\x00'})

3m49.970287257s ago: executing program 1 (id=4409):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_open_dev$video(&(0x7f0000001ec0), 0x8, 0x40200)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r8=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r11, &(0x7f0000001e80)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000000540)="5a91907f0af261b9980f84ef", 0xc}, {&(0x7f0000000580)="7bef8c16eb47403a9865dd17317f8e69a80f9dc867dfe78699ce849deac142761afde43c60bc708d9c95abc2ab1d2c8865f3d95fc5bb24bbf8e829d4b760cc66d3181d632e2b43bc5b6d8e4804f007fdb7bc5baeda3777c43f8a3bf744ec15a75489", 0x62}, {&(0x7f0000000600)="deb2c2fb7c2fa6b23ff24566ecc310356977b7c89ee5fe5fca50ca81777131d0519365a8204f3784a3768d3be4229be78f6de6e0b7ff20c66f40a6252f212a08fc03267c0ca6a731b7c5833147ea8f6972953f8280412bb52e523003fb294630b3910d279cea432de7dc45b8ce5fb7f21e7f2440a948a33405d2cf32f997c85841cde4d03aa4b26fddac2b1bb86eb752eb4f6a5b63123b83b2b4e9ec19be846277e0a2d95174bfabc639bd86403a8dd3e360a5f1f1b70614730c0cebfc16a432e94b53b2e6c5e73f0f8e52c95250960f88a3a2969efeb1eea5daa370b6d48564266ead884605760a6eb39d1458b96ad4d262648c6e53", 0xf6}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="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", 0xfe}, {&(0x7f0000001b80)="606efa0a0e75c39c21cd620cd1619e14850e284df2c61822fb6f5a72feb8e9aaa8341900b8da4c02df8d7d139594ae74f126fcf18496592dd932115ad2d9095a3842cb0e79a926960295ea9e43afb719be94dc8b2ab2ace1d1d2b7723abe6b4673cd546584931b887b00a5ffdfcf14c5f04842579bbad26e80fed24b6d400c00c4336f2f2a49e6e4a65faa63ddd8e7e0c87fe1340c242b1592869d793f59386a63c587a66f240335fd85ae367e91f32135345908455d4fa65c4792a0cd049096f5600ceaf5f9e0a16fa57e8ec4e3db400e0e6e80a2ff90d6730d032e8c6812a81166956ba55d89cb9334eef3cc7f2ae81afdd2ec01a1f0c6", 0xf8}, {&(0x7f0000001c80)="db16336387b3e09a3a0d4283563cc04a2fab496ba0e1dd57330b97ad39c5fada35958b6a077ef3e2d243948e7b9b737b7780d163b403d74e3bb48ba28f63744fa22bd22bf71d5c86a966e712db55d6ce71e9fb055375fc7a6dd4439cffebb83cf5bb413bc17d5a37ee57df4aa8649479c509ee51192763afb917ea1485969b51978709e8973a53d16f3c1c96ca5bc12c300d", 0x92}, {&(0x7f0000001d40)="04c5cb516c76c9892432d07e5f765501488959d1d9d6a6aebd665a685ff2bd16525b90a8306f791b025088bea7c54138d7504f82c799c7b523dee33be3bdc461d0160adb9743b2fe8eaa2374bb30eb1bdc7f011cecf2be30f77c91ef96822b6f89d0896e309d9e398b9f905a3ecf40d06acc8be29dcaa901daf4de58cf05c95daee8ab59cb669761a217942e6e2bdf", 0x8f}], 0x8, 0x0, 0x0, 0x2004041}, 0x4)
r12 = dup(r10)
syz_ublk_setup_queues(r12, r9, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x384, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r12}, <r13=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x37e, 0x0, r12}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
r14 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000e00e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=<r15=>0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000780), 0x9380880df8cb5e9e}}, 0x20)
syz_ublk_setup_queues(r0, r15, &(0x7f0000000200)={0x0, 0x8e1c, 0x400, 0x3, 0xae, 0x0, r4}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x8, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x80000, 0x2, 0x800102c1, 0x0, r0}}, {0x0, 0x0, <r16=>0xffffffffffffffff, {0x0, 0x3a0b, 0x21000, 0x2, 0x21b, 0x0, r0}}], 0x4, 0x0, 0x0)
syz_ublk_setup_queues(r12, r15, &(0x7f0000001f00)={0x0, 0xdeb8, 0x400, 0x1, 0x15b}, &(0x7f0000001f80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3f0b, 0x4, 0x3, 0x1f3, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x515, 0x0, 0x0, 0x25}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x982f, 0x1, 0x2, 0xff, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7650, 0x800, 0x1, 0x339}}], 0x4, &(0x7f0000003200)={0x2e, 0x20, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8803}, 0x0, r8, '\x00', {0x4, 0x371, 0x0, &(0x7f0000002200)=@buf_512="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"}}, &(0x7f0000003280))

3m49.494120204s ago: executing program 33 (id=4409):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_open_dev$video(&(0x7f0000001ec0), 0x8, 0x40200)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r8=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r11, &(0x7f0000001e80)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000000540)="5a91907f0af261b9980f84ef", 0xc}, {&(0x7f0000000580)="7bef8c16eb47403a9865dd17317f8e69a80f9dc867dfe78699ce849deac142761afde43c60bc708d9c95abc2ab1d2c8865f3d95fc5bb24bbf8e829d4b760cc66d3181d632e2b43bc5b6d8e4804f007fdb7bc5baeda3777c43f8a3bf744ec15a75489", 0x62}, {&(0x7f0000000600)="deb2c2fb7c2fa6b23ff24566ecc310356977b7c89ee5fe5fca50ca81777131d0519365a8204f3784a3768d3be4229be78f6de6e0b7ff20c66f40a6252f212a08fc03267c0ca6a731b7c5833147ea8f6972953f8280412bb52e523003fb294630b3910d279cea432de7dc45b8ce5fb7f21e7f2440a948a33405d2cf32f997c85841cde4d03aa4b26fddac2b1bb86eb752eb4f6a5b63123b83b2b4e9ec19be846277e0a2d95174bfabc639bd86403a8dd3e360a5f1f1b70614730c0cebfc16a432e94b53b2e6c5e73f0f8e52c95250960f88a3a2969efeb1eea5daa370b6d48564266ead884605760a6eb39d1458b96ad4d262648c6e53", 0xf6}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="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", 0xfe}, {&(0x7f0000001b80)="606efa0a0e75c39c21cd620cd1619e14850e284df2c61822fb6f5a72feb8e9aaa8341900b8da4c02df8d7d139594ae74f126fcf18496592dd932115ad2d9095a3842cb0e79a926960295ea9e43afb719be94dc8b2ab2ace1d1d2b7723abe6b4673cd546584931b887b00a5ffdfcf14c5f04842579bbad26e80fed24b6d400c00c4336f2f2a49e6e4a65faa63ddd8e7e0c87fe1340c242b1592869d793f59386a63c587a66f240335fd85ae367e91f32135345908455d4fa65c4792a0cd049096f5600ceaf5f9e0a16fa57e8ec4e3db400e0e6e80a2ff90d6730d032e8c6812a81166956ba55d89cb9334eef3cc7f2ae81afdd2ec01a1f0c6", 0xf8}, {&(0x7f0000001c80)="db16336387b3e09a3a0d4283563cc04a2fab496ba0e1dd57330b97ad39c5fada35958b6a077ef3e2d243948e7b9b737b7780d163b403d74e3bb48ba28f63744fa22bd22bf71d5c86a966e712db55d6ce71e9fb055375fc7a6dd4439cffebb83cf5bb413bc17d5a37ee57df4aa8649479c509ee51192763afb917ea1485969b51978709e8973a53d16f3c1c96ca5bc12c300d", 0x92}, {&(0x7f0000001d40)="04c5cb516c76c9892432d07e5f765501488959d1d9d6a6aebd665a685ff2bd16525b90a8306f791b025088bea7c54138d7504f82c799c7b523dee33be3bdc461d0160adb9743b2fe8eaa2374bb30eb1bdc7f011cecf2be30f77c91ef96822b6f89d0896e309d9e398b9f905a3ecf40d06acc8be29dcaa901daf4de58cf05c95daee8ab59cb669761a217942e6e2bdf", 0x8f}], 0x8, 0x0, 0x0, 0x2004041}, 0x4)
r12 = dup(r10)
syz_ublk_setup_queues(r12, r9, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x384, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r12}, <r13=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x37e, 0x0, r12}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
r14 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000e00e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=<r15=>0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000780), 0x9380880df8cb5e9e}}, 0x20)
syz_ublk_setup_queues(r0, r15, &(0x7f0000000200)={0x0, 0x8e1c, 0x400, 0x3, 0xae, 0x0, r4}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x8, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x80000, 0x2, 0x800102c1, 0x0, r0}}, {0x0, 0x0, <r16=>0xffffffffffffffff, {0x0, 0x3a0b, 0x21000, 0x2, 0x21b, 0x0, r0}}], 0x4, 0x0, 0x0)
syz_ublk_setup_queues(r12, r15, &(0x7f0000001f00)={0x0, 0xdeb8, 0x400, 0x1, 0x15b}, &(0x7f0000001f80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3f0b, 0x4, 0x3, 0x1f3, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x515, 0x0, 0x0, 0x25}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x982f, 0x1, 0x2, 0xff, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7650, 0x800, 0x1, 0x339}}], 0x4, &(0x7f0000003200)={0x2e, 0x20, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8803}, 0x0, r8, '\x00', {0x4, 0x371, 0x0, &(0x7f0000002200)=@buf_512="dd05f90f6bdd3c4d3ca8889892f7845a048b5569d80c6ecd136c62cf2d1b0cf93be38379e461949360d8ff51d08d906d3fd7717652c5855289e408d4656208e027375e827fc24e5f92b2aaed064c8b2fb76c77a2a4583ef48f8de3e7c6c5b711fe56c306e53feac5b9a7680c4ed5ec46f87dd42c6ac8c654469c6a07a394e42da8776921c26dd4c7966ae405ab96b02a956289fd65476d56d37645771020923a806b6a991169901c6c2db1de0f9ef1d25fb2ec6e2f594fd43314aecec8517b95df844edfb06d7ac43da17e827528df14beb544a83967dff5d1f265c32a5e4c14ad129047eec9652395c5337c50001e0a416b8db22c2626b31e52c81d9de82a9b44a512998e763740ec71dbc8d7b5b7b44a6485ed752c4d43d71f3f6857604549685be5ab2aa8b217f6c7db641545db1372b9d61c7231a2f7faf33cec45e3a13f546b0df04f11fccaa88f7a524462cf24de314fc6c1529221a48e45b7ba255c5c43e68307b63a7d537713139a5e463b90a62621fd37c9e6abdaf6f26001697d3cae86385f5eeae16f408336714e578a0e7e246727aa56ad1afbbae70c5e0acfbe2be20599b200052163148e4dc8c8b6890bc93b5628467b0715ff61847aced8c7e04ae4dde4341c24a473021fd312be10413ce5eb9e6d294d64904d87887d48856dd0feaf968e1e69488ad28dd9d2ee22fb1cb5710680c76137d59c46ce910591"}}, &(0x7f0000003280))

2m27.890978373s ago: executing program 0 (id=4821):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000240)={0x2, 0x1, 0x12, 0x1b, 0xee, 0x0})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

2m27.405695448s ago: executing program 0 (id=4822):
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000000)=0xa)
setregid(r3, r3)
keyctl$chown(0x4, r0, r2, r3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {<r4=>r2, r3}}, './file0\x00'})
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x400)
keyctl$chown(0x4, r0, r4, r5)

2m27.380323884s ago: executing program 0 (id=4824):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x40f6, 0x81, 0xfffffffb})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, <r2=>0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2})

2m27.279984465s ago: executing program 0 (id=4825):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000400), 0xffff, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m26.893499008s ago: executing program 0 (id=4829):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000280)={<r1=>0x0, 0x1000, "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"}, &(0x7f00000012c0)=0x1008) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xff48, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000080)={r3, 0x7f}, &(0x7f0000000100)=0x8) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001300)={r1, 0xe6c0, 0x9, 0x2889, 0x4, 0x8, 0x7, 0xf, {r3, @in6={{0xa, 0x4e24, 0x1, @mcast1, 0x1}}, 0x9, 0x6, 0x9, 0x26, 0x1ff}}, &(0x7f00000013c0)=0xb0) (rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f000000fb40)={&(0x7f000000fac0)={0x30, r5, 0x603, 0x70bd27, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x14, 0x18, {0xfffffff8, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x20008000)

2m26.728652392s ago: executing program 0 (id=4831):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x3, 0x2, 0x0, 0x1, 0x2, 0xe}, {0x80000008, 0x6, 0x2, 0x1, 0x0, 0x2, 0x5}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCL_SETSEL(r6, 0x4b52, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3778}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004000}, 0x890)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd832b3a515eff9d8a734e45b77000fcdbdf250100000000000000014100000014001700000018"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

2m11.389398913s ago: executing program 34 (id=4831):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x3, 0x2, 0x0, 0x1, 0x2, 0xe}, {0x80000008, 0x6, 0x2, 0x1, 0x0, 0x2, 0x5}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCL_SETSEL(r6, 0x4b52, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x3778}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004000}, 0x890)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd832b3a515eff9d8a734e45b77000fcdbdf250100000000000000014100000014001700000018"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

1m17.71489919s ago: executing program 6 (id=5107):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000100)={0x2, &(0x7f00000e4280)=[{0xe000003, 0x2f9, &(0x7f0000000140)=[0x80000001, 0x5, 0xfffffff5, 0x3, 0x8, 0x6cf, 0x1, 0x3, 0x5, 0x53c000, 0x722, 0x4, 0x6, 0x2, 0x0, 0x7, 0x5, 0xc, 0x6ff08256, 0x6, 0x6c8, 0x7, 0x2, 0x2, 0x0, 0x80000001, 0x7, 0x2, 0x4, 0x9, 0x9, 0x5, 0xed8e, 0xffffffe2, 0x8, 0x1, 0x5, 0xa428, 0x0, 0x5, 0xa, 0x4, 0x2, 0x0, 0x7, 0x1ff, 0x2, 0x4, 0x5, 0x40, 0x4, 0x3, 0xffffffff, 0x200, 0xf, 0x91b9, 0xd39, 0x2, 0xff, 0x6, 0x2, 0x5, 0x3ff, 0x9, 0x7, 0xd, 0x1, 0x6, 0x6, 0x3, 0xffffffff, 0x90, 0x8, 0x1, 0xd, 0x0, 0x4, 0x6, 0xfffffffc, 0x4fc0724c, 0x6, 0x22, 0xfd, 0x3, 0x0, 0x5, 0x5f5, 0x5ae8, 0x0, 0x4, 0x9, 0x7fffffff, 0x0, 0x7f, 0x6, 0x3, 0x5, 0x4, 0x3e00, 0x4, 0x200, 0x0, 0x7ff, 0xe, 0x3, 0xf, 0x2, 0x9, 0x9, 0x10000, 0xa, 0xfffffffd, 0x3, 0x4, 0x9, 0x7fffffff, 0x8, 0x7b, 0x401, 0x8, 0x80000000, 0xffffffff, 0x8000, 0x81, 0x10001, 0xae, 0xfffffffa, 0x4, 0xbb, 0x10e9bf8e, 0xa1, 0x0, 0x1, 0x200, 0x6, 0x5, 0x3, 0x8c3, 0x8, 0x9, 0x7, 0xa21a, 0x10000, 0x1, 0x1, 0x800000, 0x10000000, 0x3, 0xe395, 0x6, 0xde, 0x5, 0xb0c1, 0xfff, 0x1, 0x7, 0x2, 0x3, 0x2, 0x8, 0x7, 0x9, 0x0, 0x80000000, 0x2, 0x8, 0x7f, 0xffffffff, 0xf24, 0xfffffffb, 0x8001, 0xfffffff7, 0x3, 0x4, 0x7, 0x0, 0x3, 0x88, 0x6, 0x3bed, 0x8, 0xb4ddbda, 0xfffffffc, 0x4, 0x1, 0x7, 0x800, 0x7, 0xfffff3e5, 0x0, 0x8, 0x6, 0x7, 0x10, 0x8000, 0xc5, 0x6, 0x8, 0x3, 0x7fffffff, 0x7fff, 0x9, 0x3, 0xfffffff9, 0x7f, 0x7, 0xac1, 0x8000, 0x4, 0x7, 0x5, 0xfffffff8, 0x722, 0x8000, 0x7, 0x9, 0x1, 0x5, 0x80000000, 0x400, 0x7, 0x100, 0x2, 0xfffffff7, 0x6, 0x6, 0x2, 0x2, 0x200, 0xf, 0x8, 0x4fea, 0xd, 0x7, 0x2, 0x6, 0x2, 0x4, 0x4, 0x8, 0x7fff, 0xa04, 0x40, 0x9, 0x1, 0xff, 0x8, 0x7, 0x5, 0xd0, 0x2, 0x530, 0x7b, 0x100, 0x6, 0xffffdee6, 0x6, 0x8, 0x1, 0x1, 0x78, 0xfffffff7, 0xb, 0x8, 0x82, 0x102d, 0xef7c, 0xf3d, 0x9, 0x0, 0x7, 0x1de, 0x6, 0x4, 0x2, 0x6, 0x1000, 0xfffffff9, 0xd, 0xfffffff0, 0x31d5, 0xff, 0x0, 0xb, 0x5, 0x9, 0x3, 0xe, 0xef1, 0xc00000, 0xff, 0x1, 0x5, 0x1, 0x1000, 0x1d6f0ab5, 0x8, 0x400, 0x7, 0x4a8, 0x4, 0xb7, 0x1, 0x7fffffff, 0x400, 0x7, 0x594a, 0x0, 0x62d44bfe, 0x1, 0xfffffff7, 0x4, 0x8, 0x3, 0x51, 0x5, 0x8, 0x10, 0x8, 0x1, 0x10001, 0x0, 0x5, 0x9, 0x0, 0x9, 0xb, 0x2, 0x1, 0x101, 0x9, 0x4, 0x1, 0x80000000, 0x4, 0x2, 0xb, 0x3, 0xfffffffa, 0x2, 0x11cc9bba, 0x7fffffff, 0x5, 0x101, 0x7, 0x8, 0x1, 0x5, 0x215, 0x5, 0x5, 0x3, 0x4, 0x6, 0xfffffffe, 0x6, 0x0, 0x0, 0x1d, 0x5, 0x0, 0xab6, 0x3, 0xff, 0x80, 0x80000001, 0x2, 0x2, 0x51b3, 0xffff0000, 0xe, 0xe16, 0x200, 0xb4, 0x2, 0x4, 0x8, 0x6, 0xffffffa9, 0x3, 0x8, 0x2, 0x1, 0xe, 0xed, 0x101, 0xa1, 0x2, 0x6a8, 0x7, 0x10000, 0x9, 0x0, 0x4ac, 0x8, 0x1, 0x5, 0x1ff, 0x4, 0x2, 0x800, 0x4, 0x2, 0x35e, 0xf, 0x2, 0x7, 0x10, 0x5, 0x7, 0xf88d, 0x0, 0xe13b, 0xb, 0x3, 0xf6, 0x3, 0xfffffffa, 0xaf888e92, 0x3, 0xd, 0x6, 0x40, 0x8001, 0x8, 0xffffffff, 0x80000000, 0x7, 0x1, 0x2, 0x5, 0xf, 0x8, 0x9, 0xb, 0x1, 0x0, 0x3, 0x2, 0x8, 0x2, 0x2, 0x9, 0xc7a6, 0x800, 0x5, 0x5, 0x5, 0x7cd78ca7, 0x2, 0x8, 0x8, 0x80000000, 0x2, 0xed, 0xffffff81, 0x81, 0x1, 0x1, 0x0, 0x7, 0x3, 0x9, 0x81, 0x2, 0x1ff, 0xa3ff, 0x0, 0x3, 0x2, 0x200, 0xffffff01, 0xdb28, 0x336c, 0xe, 0x1, 0x227, 0x80, 0x2, 0x2, 0x4, 0x9, 0xff5, 0xfffffffc, 0xc6, 0x8, 0x8, 0xe5, 0x7, 0xffff8000, 0x23d32b92, 0x6, 0x5, 0x101, 0x8, 0x3, 0x4, 0x1, 0x2, 0x6, 0x0, 0xe, 0xffff1d32, 0x6, 0x9497, 0x9, 0x5, 0x9, 0x0, 0x6, 0x2, 0x8, 0x4, 0x80000001, 0x4, 0x80000001, 0x0, 0x1, 0x3610, 0x1, 0x8, 0x4, 0x2, 0xce25, 0x4, 0x7, 0x8, 0x5, 0x5, 0x5, 0x0, 0x7, 0x2, 0x6, 0x7, 0x96, 0x0, 0xf76, 0x10, 0x7, 0x3, 0x849, 0x64, 0x0, 0x7, 0x101, 0x400, 0x8, 0x5, 0x8, 0x3, 0x8075, 0x8000, 0x0, 0x7fff, 0x0, 0x8000, 0x3, 0x4b, 0x81, 0x3, 0x8f8, 0x2, 0x2, 0xfffffff3, 0x0, 0xff, 0x4, 0x2835, 0x8, 0x400, 0xd, 0x48c, 0x640, 0x4, 0x80000000, 0x8, 0x9, 0x0, 0x6, 0x8865, 0x0, 0x0, 0x7, 0x7f, 0x9, 0x7, 0x9, 0x0, 0xa934380f, 0x69, 0x8, 0x7, 0xc161, 0x7, 0xfffff000, 0x7fffffff, 0x10, 0x1, 0x5, 0x0, 0xb39, 0xe55, 0x1, 0x4, 0x4, 0x1, 0x0, 0x9, 0x8, 0x7, 0x7, 0x7fff, 0xfffffff8, 0x3, 0x3, 0xffffffd4, 0xc74, 0x400, 0x6, 0x312c, 0x5, 0x401, 0x2, 0x500, 0x554, 0x101, 0x4, 0xc, 0x2, 0x8, 0x7, 0x9, 0x7, 0x3c000, 0x1, 0x101, 0x1, 0x4, 0x0, 0x1ff, 0xecd, 0xfba, 0x7, 0x3b, 0x3ed9, 0x81, 0x0, 0x400, 0x0, 0x800, 0x60000, 0xffffff80, 0xffffffff, 0xa, 0x5, 0x7f, 0x8, 0x5, 0x9, 0xfffffffb, 0x4, 0xf4, 0x2, 0x5, 0x2, 0xabec, 0xd, 0x6, 0x9, 0x800, 0x3, 0x200, 0xfffff80d, 0x9, 0x5, 0x8000, 0x2, 0x8, 0x9, 0x7, 0x1ef8, 0x3, 0xcfa, 0x3, 0x0, 0x3, 0x7, 0x90000, 0x8, 0x5, 0x5, 0x3, 0x1000, 0x4, 0x4, 0x7, 0xc, 0xfffffffc, 0x5, 0x0, 0x4, 0x4, 0x80000000, 0xb3e4, 0xfff, 0x0, 0x9, 0x10001, 0x8000, 0x7, 0x8020, 0x8, 0x7fff, 0x0, 0x2, 0xbf2, 0x9, 0xbc, 0x9, 0x856, 0x6, 0x9, 0x6, 0x9, 0x80000001, 0xc2, 0x5, 0x0, 0x9, 0x0, 0x7, 0x80c8, 0x3, 0x9, 0x9, 0x6, 0x0, 0x5, 0xc, 0xad, 0x3, 0x3ff, 0xd, 0xf, 0x4, 0x8, 0x7, 0x3, 0x2, 0x4, 0x101, 0x1, 0x1, 0x1, 0x401, 0x3, 0x4a2, 0x0, 0xc0000000, 0xdd1], 0x5348, 0x7}, {0xe000003, 0x0, 0x0, 0xfffffff4, 0x7}]})

1m16.922550292s ago: executing program 6 (id=5108):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000})
fcntl$lock(r2, 0x26, &(0x7f0000000300)={0x1, 0x2, 0x2005, 0x9})
r3 = socket$kcm(0x10, 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x21)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181ef3e00000006feffff7f10001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000151a0100a5bd1350ffdbdf25946a495f16c770ee2453"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x40010)
close(0x3)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38)
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r7=>r0, 0x2})
syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x4f}, 0x0, 0x0, 0x0)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
getdents(r7, &(0x7f0000000500)=""/4096, 0x1000)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040))
syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

1m14.365746641s ago: executing program 6 (id=5114):
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket(0x15, 0x5, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0))
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0)
write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32=r0], 0x10) (fail_nth: 3)

1m14.00919934s ago: executing program 6 (id=5116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000020010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0)

1m13.982906983s ago: executing program 6 (id=5117):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000040)=0xfffffa78, 0x4)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000240)=""/232, &(0x7f0000000140)=0xfffffffffffffe58)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000), &(0x7f0000000540), &(0x7f0000000140))
mmap$IORING_OFF_CQ_RING(0x0, 0x1, 0x1000002, 0x13, r3, 0x8000000)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0)
landlock_restrict_self(r4, 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="080008200204040006000300030045a3001c006300003f1190780a010104f1ac1414bb4e264e2200089095813645773489dc444284de30d03ecee64d18233b44f133d36ef6f14fc9188e7c4911"], 0x2a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x40094)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)={0x38c, r7, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x300, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x248, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x218, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x38c}, 0x1, 0x0, 0x0, 0x80}, 0x40)

1m13.65283683s ago: executing program 6 (id=5120):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x2) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x204c06b, &(0x7f0000000080)={[], [{@appraise_type}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) (async, rerun: 64)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x40, 0x6, 0xd}, 0x8, 0x5, 0x107f, 0x0, 0x1, 0x101, 0x0}) (rerun: 64)

57.805293252s ago: executing program 35 (id=5120):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x2) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x204c06b, &(0x7f0000000080)={[], [{@appraise_type}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) (async, rerun: 64)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x40, 0x6, 0xd}, 0x8, 0x5, 0x107f, 0x0, 0x1, 0x101, 0x0}) (rerun: 64)

4.455327629s ago: executing program 2 (id=5388):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e22, 0x4ff7, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000008000000029000000360000002f000000000000004238e80eac6f6e4dba39385ba209000000d5ce2ff2a6dc30a28afa4d940490e64db9318d0f172f5491465d95b7c67dba809bf2f934ad0e032c331565baef17f1381294363096251b86adfff434b88b6b9e75f6a706700efc225830bc8f65cc239f5a6834745df4a9618bd28c68c298a74cc01465e3e7de65418a3e317afc5d0c56280bf3257e2829fd75690243a953b327ca646f2cf6de6f1adc4b522eee077145ad25ed1d586d"], 0x18}, 0x1400c0c0)

4.239160123s ago: executing program 2 (id=5391):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000002c0)="a92e81d0991808e33c2330164cf023df139311333d346c653e7b67dbfbd1155562d9e38c5a5f68b424c0d3dbc200688cd412a818ab75388d3d058c2b37f6cb17df9d4b391684cbfbd5ce0567971c9498799ea8d9ceab68c43765bf5b47d5ce28fb8dbd26fd4a0062c3aa73f4833cc8b9ffd326c7b0d82bb18c218231ea4ae7602628d8046c6e101b3baae05a48071d1c802087dc5a646af4fab84350f35aa084ebddaadc5f877528ce65a2df3b46aabd478138a95ee11018bf7e36fd5ed81cea0fbdcff8bc845b46502bb34efe4afb47f2092088837872b04b7ab90b3bdddcdf01b337d9305d085e346d858af40a39f09869087cfd794cc002a0358236f3b55b149e945606ada524944680cbb00a5a", 0x10f}], 0x1, &(0x7f0000001040), 0x0, 0x880}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000001c0)=""/100, 0x64}], 0x2}}], 0x1, 0x101, 0x0)

4.050894064s ago: executing program 2 (id=5393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20000005)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x4000)
setresuid(r2, r2, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
r4 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1)
r5 = fsmount(r4, 0x0, 0x7)
fchdir(r5)
fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xfffffe7a)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000000901040000da0000000000000500f5a4612548ded0bbcb590de3dca19ac12a7991c6e8b503ed299150172b77b33441e50a11502fc71249d29630982234cebef71a568e23d55d4aa55e21bd8fe0c18a6f2fc7ec9f2239e726f286fe42c929d3dc06987dad3c94476090a035115a257e67ae146442297ff332da18a60109b82e4800a301ec2eab1d7c8b8dc4a726e9a738ad905fbb8caf56a5c9d46801d7e8fb44b9b6d6cbeb689075694f82"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
fcntl$setpipe(r3, 0x407, 0xffffffff80000000)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ifreq(r7, 0x8992, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000300)=@ethtool_modinfo={0x42, 0x2, 0xfff}})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x633, 0x0, 0x200000, {{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0xffff, 0x3ffc, 0x5e21, 0x8001, 0x2, 0x20, 0x80}, {@in6=@remote, 0x4d4, 0x3c}, @in=@empty, {0x323, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2007fd, 0x9}, {0x0, 0x0, 0x2, 0x20000000000}, {0x7, 0x5, 0x7}, 0x70bd21, 0x3500, 0xa, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008800)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff18fffc08000340000000100c0009800800014000000081400000000c0a010100000000000000000a0000030900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELOBJ={0x124, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x50, 0x8, "1ff9cabf16d8394701f64ceaf0beeb2f95aad6a995842800d6f38a7cb7fd05c617e86de767537ecfea5b641d054a5754e778d4e88e303003f1ad97a7cd88a79c84cfbfe0428486476adedba0"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x6d, 0x8, "e8fe7ddc8b10a44cde6d47588abff45680f926f4640b7c1e612878f17246feb950c3fd3a09dcd0b1f63088ee41cc275e5c72bb052ea542d668a9107613a5d85b73437d6c75d419bd43b835dde1461e35c47db8f8477a3c6ba8a3a7adabf39ede0f5fdc76251107c5dd"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x600, 0x0, 0x0, {0x6, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELCHAIN={0xb8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x7a, 0xc, "731a1dd4f9e201f21ec7385f5819871a78ff1fd4b4e1b7312c3bdfcd9671454fbb05c11acfe8116270498a7d447ffcc9aee2e2c144a2c20193657276770efb62db3ab88a9b21b5fc29cf51ece22aedec95a2ce83619fa7db2af3ba1996f904963583a7e33edd6c21640268ab48854df01f0f178e2782"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWSET={0x3d8, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0xf4, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'tos\x00'}]}}}, {0x24, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x290, 0x12, 0x0, 0x1, [{0x260, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x250, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x124, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "9b86ead376a461ca5dccd55954bece067a0d98b869afc136bb737876359773fc08d1c2d88acd0ed79acf0447433100243a2aee54acbde076965ec3c924eb33edb808c4affccf3b78e094451a737321c54416e2ae72e52e632eda83afc562ef6a8785af8765407a7740137fcde929bf22960d41d75a2a6a019c0eecfab02be26138bbecf6eec9435e94286fee265d7e7ae84708ad135faa52312d525d348c7d581ced35f1fa8278e72b6e6621"}, @NFTA_DATA_VALUE={0x1d, 0x1, "48b33149e0a128d4d188b8b6a545a753d5c818980d3ec2684c"}, @NFTA_DATA_VALUE={0x43, 0x1, "2f14d808c4179a309f59549c6875403a38895f74ffe1c5b530320d41cde733fd9630f567d31485f61f191ce6470cfbb75890fa866d91e5d20890d65dc9d8b0"}]}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_XOR={0x120, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x99, 0x1, "c5012fb5b52a28fe76bfaffff707e2c4230cee8ec1dd7d4a6fc0be91077fe0403b708f954bb6123436bd9afaeffe2e043c61e7b5ad340af197596bf05423ec836dc71c3ddff360d0d38644c614fd52e07b26ef62b910aa4be0f64994b6a913fb3ff14feb2f589968bb08c8d9054377f5031e400a10dff5e0d1f5e20986892ce083e8392e91e7badc774048583a9ca19d1e27c4d6a6"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "c620964d3901129e74de88fbf7787f4aadab3ec66b8f635a3be177"}]}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x658}, 0x1, 0x0, 0x0, 0x40}, 0x1)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
socket$nl_rdma(0x10, 0x3, 0x14)
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a02003209058121"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @private0, 0x400}, 0x1c)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="98220000240007012ebd7000fbdbdf25027c00000c0001800800020001"], 0x2298}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0)

3.269985699s ago: executing program 4 (id=5397):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x6c6882, 0x91)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x66e03de5, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x8, 0x5, 0x77f87502}})

3.077049044s ago: executing program 4 (id=5398):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ppoll(&(0x7f0000000140)=[{r3, 0x2082}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 9)

1.8735271s ago: executing program 4 (id=5408):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x14)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000002980)=[{{&(0x7f0000000100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/174, 0xae}, {&(0x7f0000002540)=""/38, 0x26}, {&(0x7f0000002580)=""/192, 0xc0}, {&(0x7f0000002640)=""/82, 0x52}, {&(0x7f00000026c0)=""/140, 0x8c}, {&(0x7f0000002780)=""/61, 0x3d}, {&(0x7f00000027c0)=""/118, 0x76}, {&(0x7f0000002840)=""/64, 0x40}], 0xa, &(0x7f0000002940)=""/59, 0x3b}, 0xffff8000}], 0x1, 0x40002021, 0x0)

1.848009052s ago: executing program 2 (id=5409):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r0, 0x0, 0x1400c0c0)

1.753003828s ago: executing program 7 (id=5410):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', <r1=>0x0})
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, 0x12, 0x4, 0x70bd28, 0x25dfdbfd, {0x23, 0x2, 0xa5, 0x4, {0x4e22, 0x4e24, [0x101, 0x9, 0xcb3, 0x8], [0xfff, 0x6, 0x8, 0xffffff24], r1, [0x2, 0xa0dc]}, 0x90, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "9165e02197af23b3fb998ce871032cf359f791cd4c1a221c439b748f6681c528fd7ea3977cbee5e335381f64915c8f1b50beae104f6b457bb260504ba0b4c891"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "0320a760b56afc6e9c45546b1381cfef7291d54f41e4e18503c1f71e394cc6bcfcb0dcad3563797cd1c6544a0111ae132ffad497216b978d20ba2c40d4a43d3c3c5c"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "f3a70af629db610bc2e2e3732dc80285d29c1784e707e575e9356c4bd77d6392f0b063557de1ebc94bbc048e24bedd3faa5bfed09cc3539430eb48a2755718d846ed8601c13127046ad6283edf0c46dcdf5c0ebb473dfe1e55a546a0b73bd42136bbe402f809cb24f87fe3fbd4793d4a317450544c64e761ba00e01722987bdf76ff93d699c9a5e66d2c7abd32b8eaf32cf689eba2070c564c96a6d55237a65652014e65920bc03cfadeb9a65cce100b3693ab69067e2ea69a48e647dc64d0ff03b7c2a38bc5a1e90c0db7a022c156ef60cee3f0a4c75d2f84650d5d11480a0ae58d6527f031cdcf9a49470c71e3df97"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, "9a"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x24004810}, 0x800)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/warn_count', 0x8800, 0x50)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e20, 0x7, @local, 0x10000}, 0x1c)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000380)={'\x00', 0x0, 0x9, 0x1, 0x800, 0x7, <r3=>0xffffffffffffffff})
sched_setaffinity(r3, 0x8, &(0x7f0000000400)=0x8)
r4 = syz_open_dev$hidraw(&(0x7f0000000440), 0xd1a4, 0x400000)
ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000480)={{r0}, "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"})
getsockname$packet(r2, &(0x7f00000014c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001500)=0x14)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)=@newchain={0x7c, 0x64, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {0x5, 0xffe0}, {0xfff1, 0x920eeb08379e1321}}, [@f_rsvp6={{0xa}, {0x4c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xf99316a, 0x2, 0x9}, {0xbf4, 0x9, 0x8a}, 0x21, 0x81, 0x8}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_RSVP_DST={0x14, 0x2, @loopback}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x808}, 0x1)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r2)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x38, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc0)
readv(r2, &(0x7f0000005140)=[{&(0x7f0000002d80)=""/127, 0x7f}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/67, 0x43}, {&(0x7f0000003e80)=""/171, 0xab}, {&(0x7f0000003f40)=""/83, 0x53}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/148, 0x94}, {&(0x7f0000005080)=""/131, 0x83}], 0x8)

1.737022789s ago: executing program 2 (id=5411):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, 0x0, 0x0)

1.685712249s ago: executing program 7 (id=5412):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000002c0)="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", 0x10f}], 0x1, &(0x7f0000001040), 0x0, 0x880}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000001c0)=""/100, 0x64}], 0x2}}], 0x1, 0x101, 0x0)

1.661148836s ago: executing program 2 (id=5413):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000e058103"], 0x0)
syz_usb_connect(0x0, 0x2ba, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0xb6, 0x5e, 0x11, 0x40, 0x403, 0xfb59, 0xf41f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a8, 0x3, 0x7f, 0x4, 0x40, 0xa, "", [{{0x9, 0x4, 0x8c, 0x7, 0x8, 0x53, 0x59, 0x5f, 0x3, [], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0x0, 0x7f, [@generic={0x39, 0x4, "125b493e7d8bfaa757588d8a1356094aefa8c3b404783264a3a073b7a9f7fd516b531f772184f50fcb8cd6d3d726ff0ff6f2ccb5c512b3"}, @generic={0x23, 0x7, "c61224c26b5fc754582c369b87508d3416b5787dfa4ebdf4c01c16687bfcd90f5a"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x4, 0xa1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x4}]}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0x6, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x1}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xb, 0x2, 0x8, [@generic={0x99, 0x30, "ed0f7458b714f49fa7785e17076de63e63f1b71aac8e58d69dde2416436f8a0daad3f790d7703154d87b2607a65f4642dd4375c4f6ef3b1cc404d9f840c5ab47f10a11c22786b1f68ad88d9007980cd45fd39c64158f326d01b951f8dd1ef974e83bb59f888386ddee74e1e1b7f7d1122ea94efa0b7c0c561d91e0c5f42506a44c45c82fb2f77af7802c8fdc3d5c290231567089236d9d"}, @generic={0x2a, 0x24, "8711cd802f3dcdbb2d1eb2450b52ce1442aa9c1151e478546e76bc551f967152ef18bbcf57eba2fe"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x80, 0x1, 0x73}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x4, 0x2, 0x2, [@generic={0x19, 0x1, "f2983c266de48ab69c971791bbe70311f9bd8a32340369"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x7, 0xd9, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x40, 0x0, 0x7a}}]}}, {{0x9, 0x4, 0xd0, 0x9, 0x5, 0xff, 0x1, 0x63, 0x81, [], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x3, 0x7, 0x7f}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x0, 0x5, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x0, 0x81, 0x5, [@generic={0x64, 0x21, "db12483dce79e201d0194370e805f372f28c9067064f50de8aa68f66cf98ee2710363b72f595902e4c43d32a22be648b389798947dd14bea037cdc32edd2f82417f47fb9e458c105a60bf6633ee8c395da39f70e134e08dfebe491eca4e9b844877a"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x2, 0x2, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xa000}, @generic={0x55, 0x1, "13ddb9796c81bb66b84106d878f0050298fa05773246dbb284e643855b5c238c0ac2db760478b824fd4aec00ccd476373df8dd0cd0c100f953b956c0fdedeae400ba7b949bb1b5c4a76e3394a98f5b22d1acc6"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x8, 0x4, 0x1}}]}}, {{0x9, 0x4, 0xd2, 0x4, 0x1, 0x18, 0xed, 0x83, 0xd, [], [{{0x9, 0x5, 0x4, 0x0, 0x3ef, 0x8, 0x41, 0x4}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0x0, 0x10, 0x7, 0x10, 0x9}, 0x35, &(0x7f0000000440)={0x5, 0xf, 0x35, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x82, 0x6, 0x0, 0xff0f, 0x8, [0xff0000, 0xc0, 0xc0, 0x3f, 0x3f, 0x3fc0]}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0xd6, 0xf000, 0x71}]}, 0x1, [{0xbe, &(0x7f0000000480)=@string={0xbe, 0x3, "817bc7877d88ac7f25965b0248536b9c2d99bfd9b9b9dd9b02e7ecc1fb5d3766fed3a885ef1af80ceb476312f6427a4510fc2c5dd7073e6b3dd358e4360d1b1652f711edcd1d21096404b9d4caae2a337faa605f703201e584f21579d7348822bac18f7674265fdacc7f4dbb7c9a2d3830afcaae9c7d4e8193911d32d613980bf967ac60780f4cab13f78b77a7fc4ecd2e1c011e0a6f62b8990b85a54f9415ce7dbb555b91f707d1cddc02f2aa947fe73fd82d563b59627a9d116a16"}}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.533451277s ago: executing program 7 (id=5414):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000100)={0x2, &(0x7f00000e4280)=[{0xe000003, 0x2f9, &(0x7f0000000140)=[0x80000001, 0x5, 0xfffffff5, 0x3, 0x8, 0x6cf, 0x1, 0x3, 0x5, 0x53c000, 0x722, 0x4, 0x6, 0x2, 0x0, 0x7, 0x5, 0xc, 0x6ff08256, 0x6, 0x6c8, 0x7, 0x2, 0x2, 0x0, 0x80000001, 0x7, 0x2, 0x4, 0x9, 0x9, 0x5, 0xed8e, 0xffffffe2, 0x8, 0x1, 0x5, 0xa428, 0x0, 0x5, 0xa, 0x4, 0x2, 0x0, 0x7, 0x1ff, 0x2, 0x4, 0x5, 0x40, 0x4, 0x3, 0xffffffff, 0x200, 0xf, 0x91b9, 0xd39, 0x2, 0xff, 0x6, 0x2, 0x5, 0x3ff, 0x9, 0x7, 0xd, 0x1, 0x6, 0x6, 0x3, 0xffffffff, 0x90, 0x8, 0x1, 0xd, 0x0, 0x4, 0x6, 0xfffffffc, 0x4fc0724c, 0x6, 0x22, 0xfd, 0x3, 0x0, 0x5, 0x5f5, 0x5ae8, 0x0, 0x4, 0x9, 0x7fffffff, 0x0, 0x7f, 0x6, 0x3, 0x5, 0x4, 0x3e00, 0x4, 0x200, 0x0, 0x7ff, 0xe, 0x3, 0xf, 0x2, 0x9, 0x9, 0x10000, 0xa, 0xfffffffd, 0x3, 0x4, 0x9, 0x7fffffff, 0x8, 0x7b, 0x401, 0x8, 0x80000000, 0xffffffff, 0x8000, 0x81, 0x10001, 0xae, 0xfffffffa, 0x4, 0xbb, 0x10e9bf8e, 0xa1, 0x0, 0x1, 0x200, 0x6, 0x5, 0x3, 0x8c3, 0x8, 0x9, 0x7, 0xa21a, 0x10000, 0x1, 0x1, 0x800000, 0x10000000, 0x3, 0xe395, 0x6, 0xde, 0x5, 0xb0c1, 0xfff, 0x1, 0x7, 0x2, 0x3, 0x2, 0x8, 0x7, 0x9, 0x0, 0x80000000, 0x2, 0x8, 0x7f, 0xffffffff, 0xf24, 0xfffffffb, 0x8001, 0xfffffff7, 0x3, 0x4, 0x7, 0x0, 0x3, 0x88, 0x6, 0x3bed, 0x8, 0xb4ddbda, 0xfffffffc, 0x4, 0x1, 0x7, 0x800, 0x7, 0xfffff3e5, 0x0, 0x8, 0x6, 0x7, 0x10, 0x8000, 0xc5, 0x6, 0x8, 0x3, 0x7fffffff, 0x7fff, 0x9, 0x3, 0xfffffff9, 0x7f, 0x7, 0xac1, 0x8000, 0x4, 0x7, 0x5, 0xfffffff8, 0x722, 0x8000, 0x7, 0x9, 0x1, 0x5, 0x80000000, 0x400, 0x7, 0x100, 0x2, 0xfffffff7, 0x6, 0x6, 0x2, 0x2, 0x200, 0xf, 0x8, 0x4fea, 0xd, 0x7, 0x2, 0x6, 0x2, 0x4, 0x4, 0x8, 0x7fff, 0xa04, 0x40, 0x9, 0x1, 0xff, 0x8, 0x7, 0x5, 0xd0, 0x2, 0x530, 0x7b, 0x100, 0x6, 0xffffdee6, 0x6, 0x8, 0x1, 0x1, 0x78, 0xfffffff7, 0xb, 0x8, 0x82, 0x102d, 0xef7c, 0xf3d, 0x9, 0x0, 0x7, 0x1de, 0x6, 0x4, 0x2, 0x6, 0x1000, 0xfffffff9, 0xd, 0xfffffff0, 0x31d5, 0xff, 0x0, 0xb, 0x5, 0x9, 0x3, 0xe, 0xef1, 0xc00000, 0xff, 0x1, 0x5, 0x1, 0x1000, 0x1d6f0ab5, 0x8, 0x400, 0x7, 0x4a8, 0x4, 0xb7, 0x1, 0x7fffffff, 0x400, 0x7, 0x594a, 0x0, 0x62d44bfe, 0x1, 0xfffffff7, 0x4, 0x8, 0x3, 0x51, 0x5, 0x8, 0x10, 0x8, 0x1, 0x10001, 0x0, 0x5, 0x9, 0x0, 0x9, 0xb, 0x2, 0x1, 0x101, 0x9, 0x4, 0x1, 0x80000000, 0x4, 0x2, 0xb, 0x3, 0xfffffffa, 0x2, 0x11cc9bba, 0x7fffffff, 0x5, 0x101, 0x7, 0x8, 0x1, 0x5, 0x215, 0x5, 0x5, 0x3, 0x4, 0x6, 0xfffffffe, 0x6, 0x0, 0x0, 0x1d, 0x5, 0x0, 0xab6, 0x3, 0xff, 0x80, 0x80000001, 0x2, 0x2, 0x51b3, 0xffff0000, 0xe, 0xe16, 0x200, 0xb4, 0x2, 0x4, 0x8, 0x6, 0xffffffa9, 0x3, 0x8, 0x2, 0x1, 0xe, 0xed, 0x101, 0xa1, 0x2, 0x6a8, 0x7, 0x10000, 0x9, 0x0, 0x4ac, 0x8, 0x1, 0x5, 0x1ff, 0x4, 0x2, 0x800, 0x4, 0x2, 0x35e, 0xf, 0x2, 0x7, 0x10, 0x5, 0x7, 0xf88d, 0x0, 0xe13b, 0xb, 0x3, 0xf6, 0x3, 0xfffffffa, 0xaf888e92, 0x3, 0xd, 0x6, 0x40, 0x8001, 0x8, 0xffffffff, 0x80000000, 0x7, 0x1, 0x2, 0x5, 0xf, 0x8, 0x9, 0xb, 0x1, 0x0, 0x3, 0x2, 0x8, 0x2, 0x2, 0x9, 0xc7a6, 0x800, 0x5, 0x5, 0x5, 0x7cd78ca7, 0x2, 0x8, 0x8, 0x80000000, 0x2, 0xed, 0xffffff81, 0x81, 0x1, 0x1, 0x0, 0x7, 0x3, 0x9, 0x81, 0x2, 0x1ff, 0xa3ff, 0x0, 0x3, 0x2, 0x200, 0xffffff01, 0xdb28, 0x336c, 0xe, 0x1, 0x227, 0x80, 0x2, 0x2, 0x4, 0x9, 0xff5, 0xfffffffc, 0xc6, 0x8, 0x8, 0xe5, 0x7, 0xffff8000, 0x23d32b92, 0x6, 0x5, 0x101, 0x8, 0x3, 0x4, 0x1, 0x2, 0x6, 0x0, 0xe, 0xffff1d32, 0x6, 0x9497, 0x9, 0x5, 0x9, 0x0, 0x6, 0x2, 0x8, 0x4, 0x80000001, 0x4, 0x80000001, 0x0, 0x1, 0x3610, 0x1, 0x8, 0x4, 0x2, 0xce25, 0x4, 0x7, 0x8, 0x5, 0x5, 0x5, 0x0, 0x7, 0x2, 0x6, 0x7, 0x96, 0x0, 0xf76, 0x10, 0x7, 0x849, 0x64, 0x0, 0x7, 0x101, 0x400, 0x8, 0x5, 0x8, 0x3, 0x8075, 0x8000, 0x0, 0x7fff, 0x0, 0x8000, 0x7, 0x3, 0x4b, 0x81, 0x3, 0x8f8, 0x2, 0x2, 0xfffffff3, 0x0, 0xff, 0x4, 0x2835, 0x8, 0x400, 0xd, 0x48c, 0x640, 0x4, 0x80000000, 0x8, 0x9, 0x0, 0x6, 0x8865, 0x0, 0x0, 0x7, 0x7f, 0x9, 0x7, 0x9, 0x0, 0xa934380f, 0x69, 0x8, 0x7, 0xc161, 0x7, 0xfffff000, 0x7fffffff, 0x10, 0x1, 0x5, 0x0, 0xb39, 0xe55, 0x1, 0x4, 0x4, 0x1, 0x0, 0x9, 0x8, 0x7, 0x7, 0x7fff, 0xfffffff8, 0x3, 0x3, 0xffffffd4, 0xc74, 0x400, 0x6, 0x312c, 0x5, 0x401, 0x2, 0x500, 0x554, 0x101, 0x4, 0xc, 0x2, 0x8, 0x7, 0x9, 0x7, 0x3c000, 0x1, 0x101, 0x1, 0x4, 0x0, 0x1ff, 0xecd, 0xfba, 0x7, 0x3b, 0x3ed9, 0x81, 0x0, 0x400, 0x0, 0x800, 0x60000, 0xffffff80, 0xffffffff, 0xa, 0x5, 0x7f, 0x8, 0x5, 0x9, 0xfffffffb, 0x4, 0xf4, 0x2, 0x5, 0x2, 0xabec, 0xd, 0x6, 0x9, 0x800, 0x3, 0x200, 0xfffff80d, 0x9, 0x5, 0x8000, 0x2, 0x8, 0x9, 0x7, 0x1ef8, 0x3, 0xcfa, 0x3, 0x0, 0x3, 0x7, 0x90000, 0x8, 0x5, 0x5, 0x3, 0x1000, 0x4, 0x4, 0x7, 0xc, 0xfffffffc, 0x5, 0x0, 0x4, 0x4, 0x80000000, 0xb3e4, 0xfff, 0x0, 0x9, 0x10001, 0x8000, 0x7, 0x8020, 0x8, 0x7fff, 0x0, 0x2, 0xbf2, 0x9, 0xbc, 0x9, 0x856, 0x6, 0x9, 0x6, 0x9, 0x80000001, 0xc2, 0x5, 0x0, 0x9, 0x0, 0x7, 0x80c8, 0x3, 0x9, 0x9, 0x6, 0x0, 0x5, 0xc, 0xad, 0x3, 0x3ff, 0xd, 0xf, 0x4, 0x8, 0x7, 0x3, 0x2, 0x4, 0x101, 0x1, 0x1, 0x1, 0x401, 0x3, 0x4a2, 0x0, 0xc0000000, 0xdd1], 0x5348, 0x7}, {0xe000003, 0x0, 0x0, 0xfffffff4, 0x7}]})

1.521379319s ago: executing program 7 (id=5415):
socket$unix(0x1, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x104, 0x1a, 0x7, 0x870bd2a, 0x0, {{@in=@remote, @in=@empty, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
socket$netlink(0x10, 0x3, 0xb)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x4070bd28, 0x80001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket(0x10, 0x803, 0x0)
fsopen(&(0x7f0000000140)='fuseblk\x00', 0x1)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0)
pipe2(&(0x7f0000000000), 0x80000)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080), 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1.278296163s ago: executing program 7 (id=5416):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003180)=[{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000080)}], 0x2, 0x0, 0x0, 0x40}], 0x1, 0x4000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180000006a001f"], 0x20}], 0x1, 0x0, 0x0, 0x2c0040d0}, 0x10) (fail_nth: 3)

977.196876ms ago: executing program 5 (id=5417):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)

934.17229ms ago: executing program 4 (id=5418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x4040000)

922.470867ms ago: executing program 5 (id=5419):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r0, 0x0, 0x1400c0c0)

772.748163ms ago: executing program 7 (id=5420):
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x56595559, 0x3, @discrete={0x4, 0x5e9}})
ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x0, 0x1, [0x7, 0x5, 0x2, 0x7fff, 0x3, 0x4, 0x1, 0x7]})
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x5bc5c100e7062a53, @sliced={0x0, [0x8, 0x50, 0x9, 0x9, 0x8001, 0x8, 0x1, 0x1, 0x2cf6, 0xfff, 0x2, 0xec18, 0x7, 0x8, 0x4, 0x96b, 0x6, 0x0, 0x1, 0x9, 0x5, 0x8, 0x4, 0x1, 0x69, 0x1, 0x81, 0x40, 0x5, 0x3, 0x3, 0xa3e1, 0x9, 0x40, 0x18c, 0x9b3d, 0x80, 0xfff3, 0x4, 0x7, 0x9, 0x7f, 0x1, 0x4f, 0x6, 0x8, 0x1ff, 0xa40], 0xae50fe6}})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000200)={0x0, 0x1, [0xce07, 0x6, 0x7, 0x60a, 0x0, 0xfffffffd, 0xf11c, 0xc]})
r2 = syz_open_dev$vbi(&(0x7f0000000240), 0x3, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, '\x00', @raw_data=[0x8, 0x80000000, 0x4, 0x9, 0x9, 0x5, 0x5, 0x5, 0x81, 0x2a, 0xf, 0x0, 0xfffffffe, 0x1, 0x8, 0x800, 0xf8, 0x6, 0xfffffffa, 0x401, 0x0, 0x40000, 0x1, 0x8, 0x3, 0xb, 0xc, 0x1, 0x3ff, 0x6, 0x8, 0xfec4]})
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000380)={0x2, @capture={0x0, 0x0, {0x5c9f729d, 0x3}, 0x4, 0x80000001}})
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000480)={0x2, 0x0, [0x9ec, 0x4, 0xfd, 0x10, 0x8680, 0x10, 0x7ff, 0x21fa]})
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000540)={0x2, 0x1, [0x3ff, 0xb465, 0x10001, 0x4954, 0x5, 0x46eb, 0x3ff, 0x800]})
r5 = syz_open_dev$video(&(0x7f0000000580), 0x1, 0x10000)
ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f00000005c0)=0x9)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000600)={0x4, {0x1, 0x3681, 0x2, 0x100}})
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x206000, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
ioctl$VIDIOC_ENUMOUTPUT(r6, 0xc0485630, &(0x7f0000000700)={0xe9, "86d7f835f062eff7ed9df184f47c8820ba64815216b21989c417ea7367a8e7c0", 0x1, 0x9, 0x31, 0x80, 0x2})
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000780)={'TPROXY\x00'}, &(0x7f00000007c0)=0x1e)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000800)={<r7=>0x0, 0xc, 0x1, [0x9]}, &(0x7f0000000840)=0xa)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000880)={r7, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000940)=0x84)
setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000980)={{0x3b, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e23, 0x4, 'lblc\x00', 0x20, 0x4, 0x57}, {@empty, 0x4e23, 0x10000, 0x8, 0x1, 0x7fff}}, 0x44)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/vmcoreinfo', 0x1, 0x14)
ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f0000000a40))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000a80))
write$sndseq(r6, &(0x7f0000000b80)=[{0x80, 0x4, 0x4, 0x8, @time={0x1, 0xe5e}, {0x80, 0x6}, {0x8, 0xfb}, @connect={{0x65}, {0x4, 0x80}}}, {0x2, 0xb, 0x8, 0xf6, @tick=0x7, {0x0, 0x4}, {0x1e, 0x4}, @ext={0x68, &(0x7f0000000ac0)="1d24bfc10ae1cd578487f06c14be11527637801ac60a76df8aafcead9236cf17107c5cb3ef7f4115346ea7f89cf9b2ca24cc448534c59aa18a548e3acb292570b66f896ac7e86fc9ca1978b9be1c118be3f0522f27324c3d77555d20b5dcf1ba05ac7284d3de1c73"}}, {0x40, 0x3, 0x37, 0x0, @tick=0x7fff, {0x8, 0x9}, {0x1, 0x3}, @ext={0x13, &(0x7f0000000b40)="c29638b48958c9ecbb4bbaad8dd71657dbacba"}}], 0x54)
syz_usb_connect(0x1, 0xd73, &(0x7f0000000c00)={{0x12, 0x1, 0x250, 0x8d, 0x55, 0x57, 0x40, 0x1410, 0x6001, 0x3558, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd61, 0x4, 0x0, 0x7, 0x190, 0x9, "", [{{0x9, 0x4, 0xed, 0x7, 0xe, 0xfc, 0x1c, 0x23, 0x6, [@generic={0x36, 0x1d722a76b9261347, "b293c418331834849c1d0a6a85cca919acfc17fc05670c1104e4d6600de65c41a56bbbd1afde160c2c805f4bc375edcda8567d95"}], [{{0x9, 0x5, 0xd, 0x1, 0x200, 0xa, 0xa, 0x5, [@generic={0x3b, 0x5, "62cdba2dea18aa6a96e2cfa9a61dede1d245ae2213134884c722c73945296f4c05b2daac3696fb882edd39751c54a0c85fb8ed254847d4cba5"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x7, 0xdc, 0xc8, [@generic={0x12, 0x23, "48b3d9955760cb654cf7467bab35b980"}, @generic={0xca, 0x23, "b0ff1b57f51e42742796b280223f3aa2a1e15c72038ab7690c3bc1de891badfb625d2b8da6bca3fcc68dde6ce1dfee7e6d96ed0fc8498c06a4ed825bc64a77de928191448f7949ce12614155b96d96d673b0c6beda9c56e1368360fa5bbbadb75ac98b0cacfe8bfbd5bf49c036e394aac308b631d013c25c76ca169e8d9cfc125ec0c1970f9797c6e40b394e6fede344d232a547fb1e6ddee65e439a12b17209177e55f42220de9e07a8dcbb8eadc3e2f616fdf2de4ac286223b85f4efe1a43ef3242890039ae898"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x1, 0x4, 0xf, [@generic={0xec, 0x21, "f645f6d408c05621425a88c50a7f1b91f60993c86b9ed17ac9151da40f4cf1a41be14b89b0930778fa39cb14d8efa2e20718c5f59ebc0ec7c6b5b6d40e31d617f7dfba1dc1bef895df17fe8690b712478cfab8f5455a1a51d5e8954fe9769a6d8691de8050b8e041d5161554a7eefe67f7b5b86b32b893a52842b414c0c20ef3bc1a934678fb075793d1d1c9579a14f299625723b6188f9ed1d0604a1c58ed852f99234f90d777f3d9cb9333b4d14f9105f88899e05bcf380c540c2352b5466c2af65356ddc5e92e330b2f4c5ffd536b52a95b55195f8c1852f7c522cabab6945e542bc5236b4b2cab2a"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x6, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x25}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x5, 0xe5, 0x5}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x40, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0x0, 0xd4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x200}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x8, 0x6, 0x7}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x5, 0x8, 0x3}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x7, 0xe, 0x0, [@generic={0x28, 0x23, "5dfb9030756ca5c670e72ef924ef1fe8e4e28000f1bbf950d706558e4b11ec72d4090be1dc10"}, @generic={0x19, 0xc, "4b0a1a4d9526e51fd1de8275c20b0e8ace01e26993586d"}]}}, {{0x9, 0x5, 0xf, 0x10, 0xd57e66eca949fc0c, 0x4, 0x3, 0x40}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xf, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x8}]}}, {{0x9, 0x5, 0x0, 0x8, 0xf788639822c13cb1, 0x7, 0x17, 0xb8, [@generic={0x2f, 0x0, "0584a22c057b8b6d962fab9eda88fc6a46dd8a7762da29f961bbc2533ed298a6bc50447e095a03dec117a0354b"}]}}]}}, {{0x9, 0x4, 0x4, 0x0, 0xf, 0xc, 0x6a, 0xcb, 0xfe, [@generic={0x15, 0xe, "10e076f959f41ea9c1e78e49b0d67b871900ee"}, @hid_hid={0x9, 0x21, 0x100, 0x3d, 0x1, {0x22, 0x3a2}}], [{{0x9, 0x5, 0x3, 0x10, 0x10, 0x36, 0x8, 0x2, [@generic={0x77, 0x9, "c715c4d1e1f47b10e5f549cea26d368603be59c46f121bef17b587e015f3f2767171a3f875b4437c00b07614150086c26f36496c3ac0da7ccaa364ff3181da7699cfcaaae013b450c205cb381ea75014d71c1f684f0745765c1c8244ba6389fdfc79ff97244cb3a311be562a539e3179c7d4252bd5"}, @generic={0x36, 0xe, "84ff5df6a549164acbf241aaafd3d0419be62a12eae0a2f6699f57032ab18ffa8b312b2221faf1c408414a5fead42ba6dfffcbe6"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0x7, 0x6, 0x2, [@generic={0x93, 0xe, "6c47b46d16919b51c27e66b610bc30a5806ab63b1794c83f8008b080718687e461aa962602efcb4e09d975b1deb0f7c560bae9f5e47ec1b6889cb5da39e2115f565324f9676f3dccd8b6cca2601173344340554d17d1a7b7001332d52d272580b31d60d0c533852e457a8d432c321f16ba86b3c0bd8146758b08a68526d776638f0fa9535a8ddb198caa66a3424106940e"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x4000}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x59, 0x2, 0x6, [@generic={0xc8, 0xba14b6571ce49976, "af06613f87d336d77aaf207ca1ae38785d34faf80a41fe2dfe44346fc65dfe94dffed0246c328d2958b9aa8e746002ef46bc29f3fe8084000a2cacdce67874b44c909ef9a266d0d51087c970bdb7587a7c4b7dbcb71e6bb87b97b110edbc5d29c9980eba365e5fe8c49614473aac64a4b17b60af256ed60d477f1de28446d8c7bcf0286bf582fd82a2cff0ac8114e298eb563cdb6fbfa46bb6b4d84f388d52c29b52a3efef3b4585fe544cd6197b78131cfb79b335dd6f7ff6c5dbac99fcfd6c1d99779c49e7"}, @generic={0x40, 0x4d810e859de62c39, "8b8fa0bf672a05b03dde7afb43d774fedf4eacf8388aa2be8de1187032524bc0ac3d9ee1338b008db2fbddab26c9ba038307b51ddde7698bb35c3464674d"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x0, 0x2, 0xa, [@generic={0x7d, 0x23, "75c4136df73cd14da05a2b8f69e082cd04295632ed5b93a985c87880b93643f1aa715fef78dfd7fd8171f19afa6bd63fb6b82911148f679fe3fb0cd323e2e1fbf85f2088d53f985d1d95eed4228b62cab1efb8608bfd4492494efb126c81f0295ba6cd48a18fb89603420cd82ad350e5dbab014417252354eec4fb"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x81, 0x8, 0xfa, [@generic={0x29, 0x11, "7e34c813157e2cfef28082265fb02372aa41e93566d87a0526cbe20d65aa174739ae9e68a80f30"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x4, 0x4, 0x7e, [@generic={0x7a, 0x5, "c2317ad7abb231b46467bf8702028bef566027b1b2609410216adcd0b4d7fda7bc6a173d165948b44ad2d49b930b07bac2718afb3470f0efa5ceb5d5de6cdd7f4215072df800976f62b785759256e6a02500d2a366e206240cfc6f4eb44ca9ae34e777885b37da39b8291e4355bf0f94ccb8ca8beda8a4f2"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x6, 0x7, 0x10, [@generic={0xcc, 0x0, "bdc8e33be955a36fc3710bf922ddfa71994ee885ff2eb27ffce85cdf5f34e8a1634d0c7ec18dd325164feb68f7a996350b7f53f31843c75cc09b8886c72f747a14410c2dfba947b1e0ff45d2a348631e9583b4a99597fd70a1417b4e8f19bf351954bbb168152dd081c57e5076afdc04be888a261f19ef94c3be2dd3895d577d1e6a428eb72069d7bfebda0ee7c4fb5d20d30a0056304bde9871733678056a55c2e028d929bee9ed1a603a8649e8ba261be72b06ac4259643e4c5e3f282059c8654924872440b78e7916"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x4, 0x5, 0xe, [@generic={0xb9, 0x6, "e5c9e9f0d283d4d8e5636dc3133d488db3db4703006167fc6040597f4378924ed3d6ab12955bfd96937bcf4d2ac5ec7dd8863a06013142f205a281039aab50ea9fd143a3abda4d31a2a8e1dd3e73ce3a3120df3b0ab8167762a5e04200c33adca080fd243530f238eaf705d8b7750edc35f982572cd5b34553ae32ea3b8d80a438299260e542dc398eb1f20127553fda06668227c5ff8d4ff9ce3cf2641f358b069d146f83f08639c8e1969ccddc1d088691b3d6aac131"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x9, 0x48, 0x3}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x1, 0x2, 0x9, [@generic={0x39, 0x7, "f4954af9a081237e6d88bfd298a59b7b39ee96663d792be66058538a08496b3c490de91310ecf495e16c10fcd1b6b0ade908b32bef1baa"}, @generic={0xf0, 0xc, "538a6419e28f786b812a2d5edf689fdee6021d5562bad91dd77bb562f45912ba6aaf4b02e945ae89d500b8cdc780fab34bfa83b2c33546d5c25ef896ce7edabee925b858b35d6bbb952e6bf88f22c0c4143c050f52dc6c0c30d32996f1c2302ca7f5b95ee8f0c760cd96f6a1da41997df57784a3441e7a5ea9e6778e19743be25e78930c6e1d995715aa720cc416edd5035afc3f1eb65dda352a0d00190c902a877eb34ac8490de8816ec85aa32bca7a04487ceb55039139b018ae4ae95678d34349e5dafcb0c9135759096a6de3691b407cdd83645ada086c6628afdbb9c4ac48be9252d4b29cb95406ba20b8d4"}]}}, {{0x9, 0x5, 0x0, 0x12, 0x40, 0x8, 0x8, 0xf7}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x6, 0x2, 0x10, [@generic={0x3c, 0xa, "c4e13b0cca3efb4512091c80d5f453936512558d364f7d443136f1f69b2f9c3a8127624518d6b15f3c7c3e50d37e03e42265d80e85342d2c2222"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x4, 0xcc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x9f0}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x6, 0xa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xffff}, @generic={0x39, 0x31, "375bc62e04ca9b927faeeaaf19ce61ed18553868c1abb4df22286ffec31d32eaaaad2a318a7aa8a52155e4a31319528df356bdbd057e6c"}]}}, {{0x9, 0x5, 0xf, 0x3f0f8ab925497ae2, 0x40, 0x0, 0xa3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xa, 0x9, 0x6}]}}]}}, {{0x9, 0x4, 0x9b, 0xf8, 0x8, 0xa9, 0xae, 0x64, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x4e}, [@processing_unit={0x8, 0x24, 0x7, 0x6, 0x1, 0x2, 'T'}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x2, 0x3, 0xa, 0xa, 0xa], 0x9}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x13, "1f5a"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x3, 0x6, [0x0, 0x3, 0x2, 0x9, 0x4, 0x8], 0x85}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x230de00a9982f850, 0x2, 0x4, 0x4, 0xb, 0x40}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x2d}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x600, 0x6, 0xf, 0xfb2d, 0x53, 0x81}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0x3, "40f26af003"}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0x0, 0xb, "9b6d05ff4ae3"}]}], [{{0x9, 0x5, 0x5, 0x16, 0x10, 0xc, 0xf, 0xff}}, {{0x9, 0x5, 0x2, 0xc, 0x0, 0x3, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x40}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x3, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}, @generic={0xd0, 0x23, "07599ae4251746a8b84a7ece42777e4961c84336ef16dc94f08174e5c08e17dbfe461738287acec4356c0adb2407f5f4fff9d0e4a8e55328287b9ce1f7ff2f13e3e7979246c350e2257665fe8311f7c6152cae4bdcfce76d0be9177147298f93dfbf39e080ee7a162d3a16217d0afef9d1babbe5fdf6a19f142738e1c9900a9b0edaf60075cca19d908dcfda2b91b15694217d00e57b499f467605e82a967e372526294df60700496ee74e8877f05c13213bfc123fb6669cfbb03dc4019e07fbeff0e41b938916b9988e43e7708e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xf8, 0x1, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x2, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x82, 0x5a}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0xa, 0xe, 0xe1}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x3, 0x5, 0x6, [@generic={0x18, 0x4, "0eef0c91231b4c3ac437f5b917fb331b83f882083e9f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x1, 0x5f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x8}]}}]}}, {{0x9, 0x4, 0xa3, 0x8, 0x2, 0x3b, 0x76, 0x1c, 0xe, [], [{{0x9, 0x5, 0x3, 0x10, 0x210, 0x0, 0x1, 0x7, [@generic={0x94, 0x24, "31e0255a5b48a2c692250524162d38e2a2874eeba4c28e3610d5f03b5011e7b2c64973af573e764c3fbb49b8873e9d2f02b49e1947ae4666aba8720fab93aabd201ce45e6e76dad0adcdc7fd2a8b290e761f49b244e29734a0e94a36c5f59966e2c19b218bd758fce2de6dea93b93749f550fdeb38d6688a5bb275af19cb3198180f4b33951c9e9e6b235c9720da7a086eb2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}, {{0x9, 0x5, 0xa2f12ed5f65cb85e, 0x1, 0x0, 0x3, 0x63, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}]}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x200, 0x7b, 0x3, 0xc, 0x10, 0x3}, 0x78, &(0x7f00000019c0)={0x5, 0xf, 0x78, 0x6, [@generic={0x41, 0x10, 0x1, "163f76db2cdd4bbd9368fe9dc7babd6dc90be9ad09d8d9d26eaad8eac37e59ea3ebee7e7c8f9d37948d26063c260d6723d39a6733cf791c585c6e74bf547"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x9, 0x3, 0xfeff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x1, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2b, 0x9, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "f9e83e317b1ffeed3157b94ee83ceaeb"}]}, 0x9, [{0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x20}}, {0x75, &(0x7f0000001a80)=@string={0x75, 0x3, "59074732fc73b2229693f75fee3faae850357b77c7484e39c7f9aeed010e7a4bc284a38d6e02a2597a4b9ed6094999784757ee9bb9b360efc9ce5c74c03a88feffba3e80a064249ce37c1fadd27e0eae1be2a8679084fe4080faaccd8e5b4326cb1629658e3a7fab7784a70a6bdf66a3de9a0a"}}, {0x1f, &(0x7f0000001b00)=@string={0x1f, 0x3, "01eba41fd5d0dbec5d67e6f255cb6b1bf7347cd66d54a10874f528e4ec"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x2c11}}, {0xc, &(0x7f0000001c40)=@string={0xc, 0x3, "8e9d04e460ac985fc09f"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x810}}]})
dup(r1)

709.927617ms ago: executing program 4 (id=5421):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', <r1=>0x0})
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, 0x12, 0x4, 0x70bd28, 0x25dfdbfd, {0x23, 0x2, 0xa5, 0x4, {0x4e22, 0x4e24, [0x101, 0x9, 0xcb3, 0x8], [0xfff, 0x6, 0x8, 0xffffff24], r1, [0x2, 0xa0dc]}, 0x90, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "9165e02197af23b3fb998ce871032cf359f791cd4c1a221c439b748f6681c528fd7ea3977cbee5e335381f64915c8f1b50beae104f6b457bb260504ba0b4c891"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "0320a760b56afc6e9c45546b1381cfef7291d54f41e4e18503c1f71e394cc6bcfcb0dcad3563797cd1c6544a0111ae132ffad497216b978d20ba2c40d4a43d3c3c5c"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "f3a70af629db610bc2e2e3732dc80285d29c1784e707e575e9356c4bd77d6392f0b063557de1ebc94bbc048e24bedd3faa5bfed09cc3539430eb48a2755718d846ed8601c13127046ad6283edf0c46dcdf5c0ebb473dfe1e55a546a0b73bd42136bbe402f809cb24f87fe3fbd4793d4a317450544c64e761ba00e01722987bdf76ff93d699c9a5e66d2c7abd32b8eaf32cf689eba2070c564c96a6d55237a65652014e65920bc03cfadeb9a65cce100b3693ab69067e2ea69a48e647dc64d0ff03b7c2a38bc5a1e90c0db7a022c156ef60cee3f0a4c75d2f84650d5d11480a0ae58d6527f031cdcf9a49470c71e3df97"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, "9a"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x24004810}, 0x800)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/warn_count', 0x8800, 0x50)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e20, 0x7, @local, 0x10000}, 0x1c)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000380)={'\x00', 0x0, 0x9, 0x1, 0x800, 0x7, <r3=>0xffffffffffffffff})
sched_setaffinity(r3, 0x8, &(0x7f0000000400)=0x8)
r4 = syz_open_dev$hidraw(&(0x7f0000000440), 0xd1a4, 0x400000)
ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000480)={{r0}, "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"})
getsockname$packet(r2, &(0x7f00000014c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001500)=0x14)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)=@newchain={0x7c, 0x64, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {0x5, 0xffe0}, {0xfff1, 0x920eeb08379e1321}}, [@f_rsvp6={{0xa}, {0x4c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xf99316a, 0x2, 0x9}, {0xbf4, 0x9, 0x8a}, 0x21, 0x81, 0x8}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_RSVP_DST={0x14, 0x2, @loopback}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x808}, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r2)
readv(r2, &(0x7f0000005140)=[{&(0x7f0000002d80)=""/127, 0x7f}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/67, 0x43}, {&(0x7f0000003e80)=""/171, 0xab}, {&(0x7f0000003f40)=""/83, 0x53}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/148, 0x94}, {&(0x7f0000005080)=""/131, 0x83}], 0x8)

666.634509ms ago: executing program 5 (id=5422):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, 0x0, 0x0)

490.315027ms ago: executing program 5 (id=5423):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000100)={0x2, &(0x7f00000e4280)=[{0xe000003, 0x2f9, &(0x7f0000000140)=[0x80000001, 0x5, 0xfffffff5, 0x3, 0x8, 0x6cf, 0x1, 0x3, 0x5, 0x53c000, 0x722, 0x4, 0x6, 0x2, 0x0, 0x7, 0x5, 0xc, 0x6ff08256, 0x6, 0x6c8, 0x7, 0x2, 0x2, 0x0, 0x80000001, 0x7, 0x2, 0x4, 0x9, 0x9, 0x5, 0xed8e, 0xffffffe2, 0x8, 0x1, 0x5, 0xa428, 0x0, 0x5, 0xa, 0x4, 0x2, 0x0, 0x7, 0x1ff, 0x2, 0x4, 0x5, 0x40, 0x4, 0x3, 0xffffffff, 0x200, 0xf, 0x91b9, 0xd39, 0x2, 0xff, 0x6, 0x2, 0x5, 0x3ff, 0x9, 0x7, 0xd, 0x1, 0x6, 0x6, 0x3, 0xffffffff, 0x90, 0x8, 0x1, 0xd, 0x0, 0x4, 0x6, 0xfffffffc, 0x4fc0724c, 0x6, 0x22, 0xfd, 0x3, 0x0, 0x5, 0x5f5, 0x5ae8, 0x0, 0x4, 0x9, 0x7fffffff, 0x0, 0x7f, 0x6, 0x3, 0x5, 0x4, 0x3e00, 0x4, 0x200, 0x0, 0x7ff, 0xe, 0x3, 0xf, 0x2, 0x9, 0x9, 0x10000, 0xa, 0xfffffffd, 0x3, 0x4, 0x9, 0x7fffffff, 0x8, 0x7b, 0x401, 0x8, 0x80000000, 0xffffffff, 0x8000, 0x81, 0x10001, 0xae, 0xfffffffa, 0x4, 0xbb, 0x10e9bf8e, 0xa1, 0x0, 0x1, 0x200, 0x6, 0x5, 0x3, 0x8c3, 0x8, 0x9, 0x7, 0xa21a, 0x10000, 0x1, 0x1, 0x800000, 0x10000000, 0x3, 0xe395, 0x6, 0xde, 0x5, 0xb0c1, 0xfff, 0x1, 0x7, 0x2, 0x3, 0x2, 0x8, 0x7, 0x9, 0x0, 0x80000000, 0x2, 0x8, 0x7f, 0xffffffff, 0xf24, 0xfffffffb, 0x8001, 0xfffffff7, 0x3, 0x4, 0x7, 0x0, 0x3, 0x88, 0x6, 0x3bed, 0x8, 0xb4ddbda, 0xfffffffc, 0x4, 0x1, 0x7, 0x800, 0x7, 0xfffff3e5, 0x0, 0x8, 0x6, 0x7, 0x10, 0x8000, 0xc5, 0x6, 0x8, 0x3, 0x7fffffff, 0x7fff, 0x9, 0x3, 0xfffffff9, 0x7f, 0x7, 0xac1, 0x8000, 0x4, 0x7, 0x5, 0xfffffff8, 0x722, 0x8000, 0x7, 0x9, 0x1, 0x5, 0x80000000, 0x400, 0x7, 0x100, 0x2, 0xfffffff7, 0x6, 0x6, 0x2, 0x2, 0x200, 0xf, 0x8, 0x4fea, 0xd, 0x7, 0x2, 0x6, 0x2, 0x4, 0x4, 0x8, 0x7fff, 0xa04, 0x40, 0x9, 0x1, 0xff, 0x8, 0x7, 0x5, 0xd0, 0x2, 0x530, 0x7b, 0x100, 0x6, 0xffffdee6, 0x6, 0x8, 0x1, 0x1, 0x78, 0xfffffff7, 0xb, 0x8, 0x82, 0x102d, 0xef7c, 0xf3d, 0x9, 0x0, 0x7, 0x1de, 0x6, 0x4, 0x2, 0x6, 0x1000, 0xfffffff9, 0xd, 0xfffffff0, 0x31d5, 0xff, 0x0, 0xb, 0x5, 0x9, 0x3, 0xe, 0xef1, 0xc00000, 0xff, 0x1, 0x5, 0x1, 0x1000, 0x1d6f0ab5, 0x8, 0x400, 0x7, 0x4a8, 0x4, 0xb7, 0x1, 0x7fffffff, 0x400, 0x7, 0x594a, 0x0, 0x62d44bfe, 0x1, 0xfffffff7, 0x4, 0x8, 0x3, 0x51, 0x5, 0x8, 0x10, 0x8, 0x1, 0x10001, 0x0, 0x5, 0x9, 0x0, 0x9, 0xb, 0x2, 0x1, 0x101, 0x9, 0x4, 0x1, 0x80000000, 0x4, 0x2, 0xb, 0x3, 0xfffffffa, 0x2, 0x11cc9bba, 0x7fffffff, 0x5, 0x101, 0x7, 0x8, 0x1, 0x5, 0x215, 0x5, 0x5, 0x3, 0x4, 0x6, 0xfffffffe, 0x6, 0x0, 0x0, 0x1d, 0x5, 0x0, 0xab6, 0x3, 0xff, 0x80, 0x80000001, 0x2, 0x2, 0x51b3, 0xffff0000, 0xe, 0xe16, 0x200, 0xb4, 0x2, 0x4, 0x8, 0x6, 0xffffffa9, 0x3, 0x8, 0x2, 0x1, 0xe, 0xed, 0x101, 0xa1, 0x2, 0x6a8, 0x7, 0x10000, 0x9, 0x0, 0x4ac, 0x8, 0x1, 0x5, 0x1ff, 0x4, 0x2, 0x800, 0x4, 0x2, 0x35e, 0xf, 0x2, 0x7, 0x10, 0x5, 0x7, 0xf88d, 0x0, 0xe13b, 0xb, 0x3, 0xf6, 0x3, 0xfffffffa, 0xaf888e92, 0x3, 0xd, 0x6, 0x40, 0x8001, 0x8, 0xffffffff, 0x80000000, 0x7, 0x1, 0x2, 0x5, 0xf, 0x8, 0x9, 0xb, 0x1, 0x0, 0x3, 0x2, 0x8, 0x2, 0x2, 0x9, 0xc7a6, 0x800, 0x5, 0x5, 0x5, 0x7cd78ca7, 0x2, 0x8, 0x8, 0x80000000, 0x2, 0xed, 0xffffff81, 0x81, 0x1, 0x1, 0x0, 0x7, 0x3, 0x9, 0x81, 0x2, 0x1ff, 0xa3ff, 0x0, 0x3, 0x2, 0x200, 0xffffff01, 0xdb28, 0x336c, 0xe, 0x1, 0x227, 0x80, 0x2, 0x2, 0x4, 0x9, 0xff5, 0xfffffffc, 0xc6, 0x8, 0x8, 0xe5, 0x7, 0xffff8000, 0x23d32b92, 0x6, 0x5, 0x101, 0x8, 0x3, 0x4, 0x1, 0x2, 0x6, 0x0, 0xe, 0xffff1d32, 0x6, 0x9497, 0x9, 0x5, 0x9, 0x0, 0x6, 0x2, 0x8, 0x4, 0x80000001, 0x4, 0x80000001, 0x0, 0x1, 0x3610, 0x1, 0x8, 0x4, 0x2, 0xce25, 0x4, 0x7, 0x8, 0x5, 0x5, 0x5, 0x0, 0x7, 0x2, 0x6, 0x7, 0x96, 0x0, 0xf76, 0x10, 0x7, 0x849, 0x64, 0x0, 0x7, 0x101, 0x400, 0x8, 0x5, 0x8, 0x3, 0x8075, 0x8000, 0x0, 0x7fff, 0x0, 0x8000, 0x7, 0x3, 0x4b, 0x81, 0x3, 0x8f8, 0x2, 0x2, 0xfffffff3, 0x0, 0xff, 0x4, 0x2835, 0x8, 0x400, 0xd, 0x48c, 0x640, 0x4, 0x80000000, 0x8, 0x9, 0x0, 0x6, 0x8865, 0x0, 0x0, 0x7, 0x7f, 0x9, 0x7, 0x9, 0x0, 0xa934380f, 0x69, 0x8, 0x7, 0xc161, 0x7, 0xfffff000, 0x7fffffff, 0x10, 0x1, 0x5, 0x0, 0xb39, 0xe55, 0x1, 0x4, 0x4, 0x1, 0x0, 0x9, 0x8, 0x7, 0x7, 0x7fff, 0xfffffff8, 0x3, 0x3, 0xffffffd4, 0xc74, 0x400, 0x6, 0x312c, 0x5, 0x401, 0x2, 0x500, 0x554, 0x101, 0x4, 0xc, 0x2, 0x8, 0x7, 0x9, 0x7, 0x3c000, 0x1, 0x101, 0x1, 0x4, 0x0, 0x1ff, 0xecd, 0xfba, 0x7, 0x3b, 0x3ed9, 0x81, 0x0, 0x400, 0x0, 0x800, 0x60000, 0xffffff80, 0xffffffff, 0xa, 0x5, 0x7f, 0x8, 0x5, 0x9, 0xfffffffb, 0x4, 0xf4, 0x2, 0x5, 0x2, 0xabec, 0xd, 0x6, 0x9, 0x800, 0x3, 0x200, 0xfffff80d, 0x9, 0x5, 0x8000, 0x2, 0x8, 0x9, 0x7, 0x1ef8, 0x3, 0xcfa, 0x3, 0x0, 0x3, 0x7, 0x90000, 0x8, 0x5, 0x5, 0x3, 0x1000, 0x4, 0x4, 0x7, 0xc, 0xfffffffc, 0x5, 0x0, 0x4, 0x4, 0x80000000, 0xb3e4, 0xfff, 0x0, 0x9, 0x10001, 0x8000, 0x7, 0x8020, 0x8, 0x7fff, 0x0, 0x2, 0xbf2, 0x9, 0xbc, 0x9, 0x856, 0x6, 0x9, 0x6, 0x9, 0x80000001, 0xc2, 0x5, 0x0, 0x9, 0x0, 0x7, 0x80c8, 0x3, 0x9, 0x9, 0x6, 0x0, 0x5, 0xc, 0xad, 0x3, 0x3ff, 0xd, 0xf, 0x4, 0x8, 0x7, 0x3, 0x2, 0x4, 0x101, 0x1, 0x1, 0x1, 0x401, 0x3, 0x4a2, 0x0, 0xc0000000, 0xdd1], 0x5348, 0x7}, {0xe000003, 0x0, 0x0, 0xfffffff4, 0x7}]})

430.978739ms ago: executing program 4 (id=5424):
socket$unix(0x1, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x104, 0x1a, 0x7, 0x870bd2a, 0x0, {{@in=@remote, @in=@empty, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
socket$netlink(0x10, 0x3, 0xb)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x4070bd28, 0x80001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket(0x10, 0x803, 0x0)
fsopen(&(0x7f0000000140)='fuseblk\x00', 0x1)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0)
pipe2(&(0x7f0000000000), 0x80000)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r7, 0x8001}}, 0x48)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

361.073132ms ago: executing program 5 (id=5425):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0x9}, 0x8)

0s ago: executing program 5 (id=5426):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x14)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r3 = dup3(r2, r1, 0x0)
recvmmsg(r3, &(0x7f0000002980)=[{{&(0x7f0000000100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/174, 0xae}, {&(0x7f0000002540)=""/38, 0x26}, {&(0x7f0000002580)=""/192, 0xc0}, {&(0x7f0000002640)=""/82, 0x52}, {&(0x7f00000026c0)=""/140, 0x8c}, {&(0x7f0000002780)=""/61, 0x3d}, {&(0x7f00000027c0)=""/118, 0x76}, {&(0x7f0000002840)=""/64, 0x40}], 0xa, &(0x7f0000002940)=""/59, 0x3b}, 0xffff8000}], 0x1, 0x40002021, 0x0)

kernel console output (not intermixed with test programs):

930.397229][ T5744] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  930.552512][ T5744] usb 5-1: Using ep0 maxpacket: 32
[  930.554471][ T5744] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  930.554501][ T5744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.559524][ T5744] usb 5-1: config 0 descriptor??
[  930.804755][ T5744] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  930.901231][  T823] usb 6-1: USB disconnect, device number 25
[  930.904351][  T823] em28xx 6-1:0.0: Disconnecting em28xx
[  930.964339][ T5744] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  930.973941][ T5744] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  930.974012][ T5744] usb 5-1: media controller created
[  931.090035][  T823] em28xx 6-1:0.0: Freeing device
[  931.120502][ T5744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  931.226693][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  931.226802][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  931.467132][  T823] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  931.587865][ T7679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  931.618733][ T5744] az6027: usb out operation failed. (-71)
[  931.618756][ T5744] stb0899_attach: Driver disabled by Kconfig
[  931.618766][ T5744] az6027: no front-end attached
[  931.618766][ T5744] 
[  931.619174][ T5744] az6027: usb out operation failed. (-71)
[  931.619185][ T5744] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  931.621454][ T5744] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57
[  931.624576][ T5744] dvb-usb: schedule remote query interval to 400 msecs.
[  931.624597][ T5744] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  931.626199][  T823] usb 6-1: Using ep0 maxpacket: 32
[  931.640547][ T5744] usb 5-1: USB disconnect, device number 125
[  931.684889][  T823] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  931.684921][  T823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.692785][ T7679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  931.712116][  T823] usb 6-1: config 0 descriptor??
[  931.920149][ T7679] bond0 (unregistering): Released all slaves
[  931.944662][T20504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  931.945706][T20504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  931.977688][  T823] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  931.978578][  T823] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  931.978595][  T823] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  932.041548][ T5744] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  932.068625][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5
[  932.211689][ T7679] tipc: Disabling bearer <udp:syz0>
[  932.211877][ T7679] tipc: Left network mode
[  932.354408][T20511] FAULT_INJECTION: forcing a failure.
[  932.354408][T20511] name failslab, interval 1, probability 0, space 0, times 0
[  932.354451][T20511] CPU: 0 UID: 0 PID: 20511 Comm: syz.4.5037 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  932.354483][T20511] Tainted: [L]=SOFTLOCKUP
[  932.354496][T20511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  932.354510][T20511] Call Trace:
[  932.354520][T20511]  <TASK>
[  932.354529][T20511]  dump_stack_lvl+0xe8/0x150
[  932.354563][T20511]  should_fail_ex+0x467/0x600
[  932.354605][T20511]  should_failslab+0xa8/0x100
[  932.354635][T20511]  __kmalloc_noprof+0xfb/0x790
[  932.354660][T20511]  ? tomoyo_encode+0x2ad/0x570
[  932.354692][T20511]  ? tomoyo_encode+0x2ad/0x570
[  932.354732][T20511]  tomoyo_encode+0x2ad/0x570
[  932.354772][T20511]  tomoyo_realpath_from_path+0x5fa/0x640
[  932.354826][T20511]  ? tomoyo_path_number_perm+0x219/0x5f0
[  932.354856][T20511]  tomoyo_path_number_perm+0x246/0x5f0
[  932.354888][T20511]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  932.354916][T20511]  ? __lock_acquire+0x683/0x2ce0
[  932.354963][T20511]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  932.354992][T20511]  ? hook_file_ioctl+0x1f3/0x600
[  932.355039][T20511]  ? lockdep_hardirqs_on+0x7a/0x110
[  932.355088][T20511]  ? __fget_files+0x2a/0x420
[  932.355118][T20511]  ? __fget_files+0x2a/0x420
[  932.355142][T20511]  ? __fget_files+0x3a8/0x420
[  932.355165][T20511]  ? __fget_files+0x2a/0x420
[  932.355195][T20511]  security_file_ioctl+0xc3/0x2a0
[  932.355223][T20511]  __se_sys_ioctl+0x47/0x170
[  932.355251][T20511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  932.355276][T20511]  do_syscall_64+0x174/0x580
[  932.355301][T20511]  ? trace_irq_disable+0x3b/0x140
[  932.355327][T20511]  ? clear_bhb_loop+0x40/0x90
[  932.355354][T20511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  932.355377][T20511] RIP: 0033:0x7f4e5717ce59
[  932.355399][T20511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  932.355419][T20511] RSP: 002b:00007f4e553d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  932.355444][T20511] RAX: ffffffffffffffda RBX: 00007f4e573f5fa0 RCX: 00007f4e5717ce59
[  932.355461][T20511] RDX: 0000000000000004 RSI: 0000000000003b65 RDI: 0000000000000003
[  932.355475][T20511] RBP: 00007f4e553d6090 R08: 0000000000000000 R09: 0000000000000000
[  932.355489][T20511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  932.355503][T20511] R13: 00007f4e573f6038 R14: 00007f4e573f5fa0 R15: 00007ffdeb341408
[  932.355537][T20511]  </TASK>
[  932.355661][T20511] ERROR: Out of memory at tomoyo_realpath_from_path.
[  932.719490][T20517] netlink: 'syz.5.5036': attribute type 64 has an invalid length.
[  932.719514][T20517] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5036'.
[  932.829723][ T5701] usb 3-1: USB disconnect, device number 2
[  933.043272][T20525] FAULT_INJECTION: forcing a failure.
[  933.043272][T20525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  933.043314][T20525] CPU: 0 UID: 0 PID: 20525 Comm: syz.2.5040 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  933.043345][T20525] Tainted: [L]=SOFTLOCKUP
[  933.043354][T20525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  933.043368][T20525] Call Trace:
[  933.043377][T20525]  <TASK>
[  933.043387][T20525]  dump_stack_lvl+0xe8/0x150
[  933.043417][T20525]  should_fail_ex+0x467/0x600
[  933.043457][T20525]  _copy_from_user+0x2d/0xb0
[  933.043485][T20525]  kstrtouint_from_user+0xd6/0x180
[  933.043521][T20525]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  933.043569][T20525]  proc_fail_nth_write+0x8e/0x210
[  933.043594][T20525]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  933.043628][T20525]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  933.043651][T20525]  vfs_write+0x29f/0xbb0
[  933.043690][T20525]  ? __pfx_vfs_write+0x10/0x10
[  933.043720][T20525]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  933.043760][T20525]  ? lockdep_hardirqs_on+0x7a/0x110
[  933.043787][T20525]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  933.043814][T20525]  ? mutex_lock_nested+0x152/0x1d0
[  933.043846][T20525]  ? fdget_pos+0x252/0x320
[  933.043880][T20525]  ksys_write+0x156/0x270
[  933.043911][T20525]  ? __pfx_ksys_write+0x10/0x10
[  933.043950][T20525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.043975][T20525]  do_syscall_64+0x174/0x580
[  933.044001][T20525]  ? trace_irq_disable+0x3b/0x140
[  933.044030][T20525]  ? clear_bhb_loop+0x40/0x90
[  933.044059][T20525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.044081][T20525] RIP: 0033:0x7f76eff7d68e
[  933.044101][T20525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  933.044120][T20525] RSP: 002b:00007f76ee20dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  933.044144][T20525] RAX: ffffffffffffffda RBX: 00007f76ee20e6c0 RCX: 00007f76eff7d68e
[  933.044162][T20525] RDX: 0000000000000001 RSI: 00007f76ee20e0a0 RDI: 0000000000000004
[  933.044176][T20525] RBP: 00007f76ee20e090 R08: 0000000000000000 R09: 0000000000000000
[  933.044190][T20525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  933.044203][T20525] R13: 00007f76f0236038 R14: 00007f76f0235fa0 R15: 00007ffd713c0638
[  933.044243][T20525]  </TASK>
[  933.275905][T20523] 9pnet_fd: Insufficient options for proto=fd
[  933.842706][T20535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5044'.
[  933.842803][T20539] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5043'.
[  933.851625][T20523] sit0: entered promiscuous mode
[  933.851649][T20523] sit0: entered allmulticast mode
[  933.985267][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6
[  934.101315][T20548] netlink: 'syz.2.5046': attribute type 4 has an invalid length.
[  934.101340][T20548] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5046'.
[  934.418753][ T5744] usb 5-1: new full-speed USB device number 126 using dummy_hcd
[  934.470256][T20560] netlink: 'syz.6.5050': attribute type 46 has an invalid length.
[  934.470280][T20560] netlink: 'syz.6.5050': attribute type 28 has an invalid length.
[  934.620996][ T5744] usb 5-1: config 36 has an invalid interface number: 71 but max is 1
[  934.621030][ T5744] usb 5-1: config 36 has 1 interface, different from the descriptor's value: 2
[  934.621054][ T5744] usb 5-1: config 36 has no interface number 0
[  934.621088][ T5744] usb 5-1: config 36 interface 71 has no altsetting 0
[  934.623964][ T5744] usb 5-1: New USB device found, idVendor=05c6, idProduct=904c, bcdDevice=cb.66
[  934.623996][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.624018][ T5744] usb 5-1: Product: syz
[  934.624034][ T5744] usb 5-1: Manufacturer: syz
[  934.624050][ T5744] usb 5-1: SerialNumber: syz
[  934.998999][ T5744] usb 5-1: USB disconnect, device number 126
[  935.801515][   T38] audit: type=1326 audit(1782859568.032:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20550 comm="syz.5.5048" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f075eb2ce59 code=0x0
[  936.283001][T20551] wg2 speed is unknown, defaulting to 1000
[  936.421974][ T5265] 8021q: adding VLAN 0 to HW filter on device eth7
[  936.587111][ T7679] hsr_slave_0: left promiscuous mode
[  936.607289][ T7679] hsr_slave_1: left promiscuous mode
[  936.608577][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  936.608605][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  936.663709][ T7679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  936.663737][ T7679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  936.771819][ T7679] veth1_macvtap: left promiscuous mode
[  936.771891][ T7679] veth0_macvtap: left promiscuous mode
[  936.772116][ T7679] veth1_vlan: left promiscuous mode
[  936.772244][ T7679] veth0_vlan: left promiscuous mode
[  937.909596][T20571] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  937.940682][   T60] Bluetooth: hci0: command 0x0c1a tx timeout
[  937.955666][T20571] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  938.136746][T20571] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  938.188170][ T7679] team0 (unregistering): Port device team_slave_1 removed
[  938.274050][T20571] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  938.274361][T20571] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  938.284067][ T7679] team0 (unregistering): Port device team_slave_0 removed
[  938.416737][T20571] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  938.555758][T20571] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  938.731788][T20596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.746054][T20596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  938.759650][T20596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.760324][T20596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  938.967184][ T5337] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  939.097072][ T5337] usb 5-1: device descriptor read/64, error -71
[  939.417479][ T8585] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  939.641788][ T8585] usb 3-1: Using ep0 maxpacket: 16
[  939.651768][ T8585] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  939.651798][ T8585] usb 3-1: config 0 has no interfaces?
[  939.656659][ T8585] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  939.656689][ T8585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.656711][ T8585] usb 3-1: Product: syz
[  939.656727][ T8585] usb 3-1: Manufacturer: syz
[  939.656742][ T8585] usb 3-1: SerialNumber: syz
[  939.715380][ T8585] usb 3-1: config 0 descriptor??
[  939.923979][T16466] usb 3-1: USB disconnect, device number 3
[  940.021492][   T60] Bluetooth: hci0: command 0x0c1a tx timeout
[  940.139369][T20619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5064'.
[  940.337451][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  940.693092][T20630] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  940.713740][ T5265] 8021q: adding VLAN 0 to HW filter on device eth8
[  941.007545][T20640] fuseblk: Bad value for 'group_id'
[  941.007569][T20640] fuseblk: Bad value for 'group_id'
[  941.211749][T20643] cgroup: none used incorrectly
[  941.473351][T16466] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  941.634474][T16466] usb 5-1: unable to get BOS descriptor or descriptor too short
[  941.636203][T16466] usb 5-1: config index 0 descriptor too short (expected 26766, got 142)
[  941.636231][T16466] usb 5-1: config 1 has too many interfaces: 173, using maximum allowed: 32
[  941.636255][T16466] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  941.636284][T16466] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 173
[  941.645321][T16466] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  941.645352][T16466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  941.645372][T16466] usb 5-1: Product: syz
[  941.645386][T16466] usb 5-1: Manufacturer: syz
[  941.645400][T16466] usb 5-1: SerialNumber: syz
[  941.737282][T16466] usb 5-1: selecting invalid altsetting 1
[  941.738222][T16466] usb 5-1: unit 6 not found!
[  941.927964][T20640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  941.928756][T20640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  942.065974][T20640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5068'.
[  942.097458][   T60] Bluetooth: hci0: command 0x0c1a tx timeout
[  942.288894][T20643] syzkaller1: entered promiscuous mode
[  942.288924][T20643] syzkaller1: entered allmulticast mode
[  942.344154][T16466] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  942.419866][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  942.424110][T14804] udevd[14804]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  942.467230][ T5337] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  942.661313][ T5337] usb 3-1: unable to get BOS descriptor or descriptor too short
[  942.663368][ T5337] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 79, changing to 7
[  942.688299][ T5337] usb 3-1: string descriptor 0 read error: -22
[  942.688459][ T5337] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[  942.688484][ T5337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.906661][ T8585] usb 5-1: USB disconnect, device number 3
[  942.945460][ T5337] snd-usb-us122l 3-1:1.1: usb_set_interface error
[  942.946008][ T5337] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22
[  943.029605][ T5337] usb 3-1: USB disconnect, device number 4
[  943.206665][T20683] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5075'.
[  944.497534][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  945.024597][T20732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5087'.
[  945.456829][T20732] exFAT-fs (nbd4): unable to read boot sector
[  945.456850][T20732] exFAT-fs (nbd4): failed to read boot sector
[  945.456859][T20732] exFAT-fs (nbd4): failed to recognize exfat type
[  945.721974][T20751] exFAT-fs (nbd4): unable to read boot sector
[  945.721994][T20751] exFAT-fs (nbd4): failed to read boot sector
[  945.722005][T20751] exFAT-fs (nbd4): failed to recognize exfat type
[  946.423574][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5097'.
[  946.465484][T20777] FAULT_INJECTION: forcing a failure.
[  946.465484][T20777] name failslab, interval 1, probability 0, space 0, times 0
[  946.465519][T20777] CPU: 0 UID: 0 PID: 20777 Comm: syz.5.5099 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  946.465548][T20777] Tainted: [L]=SOFTLOCKUP
[  946.465556][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  946.465569][T20777] Call Trace:
[  946.465578][T20777]  <TASK>
[  946.465587][T20777]  dump_stack_lvl+0xe8/0x150
[  946.465624][T20777]  should_fail_ex+0x467/0x600
[  946.465663][T20777]  should_failslab+0xa8/0x100
[  946.465691][T20777]  kmem_cache_alloc_node_noprof+0xac/0x660
[  946.465716][T20777]  ? __alloc_skb+0x1d7/0x7a0
[  946.465741][T20777]  ? __alloc_skb+0x1d7/0x7a0
[  946.465770][T20777]  __alloc_skb+0x1d7/0x7a0
[  946.465798][T20777]  netlink_ack+0x136/0xb30
[  946.465826][T20777]  ? __pfx_genl_rcv_msg+0x10/0x10
[  946.465867][T20777]  netlink_rcv_skb+0x2a4/0x4a0
[  946.465896][T20777]  ? __pfx_genl_rcv_msg+0x10/0x10
[  946.465920][T20777]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  946.465961][T20777]  ? netlink_deliver_tap+0x2e/0x1b0
[  946.465989][T20777]  ? netlink_deliver_tap+0x2e/0x1b0
[  946.466019][T20777]  genl_rcv+0x28/0x40
[  946.466040][T20777]  netlink_unicast+0x7f5/0x990
[  946.466078][T20777]  netlink_sendmsg+0x813/0xb40
[  946.466117][T20777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  946.466163][T20777]  ? aa_sock_msg_perm+0x122/0x200
[  946.466201][T20777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  946.466231][T20777]  sock_sendmsg_nosec+0x13a/0x180
[  946.466257][T20777]  ____sys_sendmsg+0x565/0x870
[  946.466286][T20777]  ? __might_fault+0xaf/0x130
[  946.466316][T20777]  ? __pfx_____sys_sendmsg+0x10/0x10
[  946.466355][T20777]  ? import_iovec+0x73/0xa0
[  946.466386][T20777]  ___sys_sendmsg+0x2a5/0x360
[  946.466414][T20777]  ? __lock_acquire+0x683/0x2ce0
[  946.466449][T20777]  ? __pfx____sys_sendmsg+0x10/0x10
[  946.466513][T20777]  ? __fget_files+0x2a/0x420
[  946.466534][T20777]  ? __fget_files+0x3a8/0x420
[  946.466565][T20777]  __x64_sys_sendmsg+0x1b7/0x290
[  946.466591][T20777]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  946.466631][T20777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  946.466651][T20777]  do_syscall_64+0x174/0x580
[  946.466672][T20777]  ? trace_irq_disable+0x3b/0x140
[  946.466694][T20777]  ? clear_bhb_loop+0x40/0x90
[  946.466716][T20777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  946.466733][T20777] RIP: 0033:0x7f075eb2ce59
[  946.466750][T20777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  946.466766][T20777] RSP: 002b:00007f075cd7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  946.466786][T20777] RAX: ffffffffffffffda RBX: 00007f075eda5fa0 RCX: 00007f075eb2ce59
[  946.466798][T20777] RDX: 0000000004000000 RSI: 0000200000000500 RDI: 0000000000000004
[  946.466810][T20777] RBP: 00007f075cd7e090 R08: 0000000000000000 R09: 0000000000000000
[  946.466822][T20777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  946.466832][T20777] R13: 00007f075eda6038 R14: 00007f075eda5fa0 R15: 00007fff5870b908
[  946.466862][T20777]  </TASK>
[  946.586255][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  947.127174][T20788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5102'.
[  947.127209][T20788] openvswitch: netlink: Missing key (keys=40, expected=100)
[  947.396213][T20794] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5103'.
[  948.917226][T20810] sg_write: data in/out 410076/64 bytes for SCSI command 0x0-- guessing data in;
[  948.917226][T20810]    program syz.6.5105 not setting count and/or reply_len properly
[  951.946373][   T60] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  952.074833][T20832] netlink: 'syz.6.5108': attribute type 39 has an invalid length.
[  953.883877][T20832] veth0_macvtap: left promiscuous mode
[  953.925717][T20848] FAULT_INJECTION: forcing a failure.
[  953.925717][T20848] name failslab, interval 1, probability 0, space 0, times 0
[  953.925757][T20848] CPU: 1 UID: 0 PID: 20848 Comm: syz.4.5112 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  953.925791][T20848] Tainted: [L]=SOFTLOCKUP
[  953.925799][T20848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  953.925813][T20848] Call Trace:
[  953.925821][T20848]  <TASK>
[  953.925830][T20848]  dump_stack_lvl+0xe8/0x150
[  953.925859][T20848]  should_fail_ex+0x467/0x600
[  953.925897][T20848]  should_failslab+0xa8/0x100
[  953.925926][T20848]  __kmalloc_noprof+0xfb/0x790
[  953.925950][T20848]  ? nf_tables_newrule+0x1524/0x28a0
[  953.925975][T20848]  ? nf_tables_newrule+0x1524/0x28a0
[  953.926008][T20848]  nf_tables_newrule+0x1524/0x28a0
[  953.926046][T20848]  ? __pfx_nf_tables_newrule+0x10/0x10
[  953.926066][T20848]  ? nfnl_pernet+0x23/0x240
[  953.926092][T20848]  ? nfnl_pernet+0x23/0x240
[  953.926139][T20848]  ? __nla_parse+0x40/0x60
[  953.926167][T20848]  nfnetlink_rcv+0x1291/0x28d0
[  953.926232][T20848]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  953.926278][T20848]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  953.926312][T20848]  ? ref_tracker_free+0x668/0x820
[  953.926359][T20848]  ? skb_clone+0x246/0x3a0
[  953.926391][T20848]  ? __netlink_deliver_tap+0x838/0x880
[  953.926431][T20848]  ? netlink_deliver_tap+0x2e/0x1b0
[  953.926462][T20848]  ? netlink_deliver_tap+0x2e/0x1b0
[  953.926500][T20848]  netlink_unicast+0x7f5/0x990
[  953.926538][T20848]  netlink_sendmsg+0x813/0xb40
[  953.926577][T20848]  ? __pfx_netlink_sendmsg+0x10/0x10
[  953.926611][T20848]  ? aa_sock_msg_perm+0x122/0x200
[  953.926650][T20848]  ? __pfx_netlink_sendmsg+0x10/0x10
[  953.926679][T20848]  sock_sendmsg_nosec+0x13a/0x180
[  953.926706][T20848]  ____sys_sendmsg+0x565/0x870
[  953.926734][T20848]  ? __might_fault+0xaf/0x130
[  953.926765][T20848]  ? __pfx_____sys_sendmsg+0x10/0x10
[  953.926802][T20848]  ? import_iovec+0x73/0xa0
[  953.926831][T20848]  ___sys_sendmsg+0x2a5/0x360
[  953.926861][T20848]  ? __lock_acquire+0x683/0x2ce0
[  953.926897][T20848]  ? __pfx____sys_sendmsg+0x10/0x10
[  953.926962][T20848]  ? __fget_files+0x2a/0x420
[  953.926987][T20848]  ? __fget_files+0x3a8/0x420
[  953.927023][T20848]  __x64_sys_sendmsg+0x1b7/0x290
[  953.927056][T20848]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  953.927116][T20848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.927141][T20848]  do_syscall_64+0x174/0x580
[  953.927169][T20848]  ? trace_irq_disable+0x3b/0x140
[  953.927199][T20848]  ? clear_bhb_loop+0x40/0x90
[  953.927227][T20848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.927250][T20848] RIP: 0033:0x7f4e5717ce59
[  953.927271][T20848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  953.927291][T20848] RSP: 002b:00007f4e553d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  953.927316][T20848] RAX: ffffffffffffffda RBX: 00007f4e573f5fa0 RCX: 00007f4e5717ce59
[  953.927333][T20848] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  953.927348][T20848] RBP: 00007f4e553d6090 R08: 0000000000000000 R09: 0000000000000000
[  953.927362][T20848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  953.927376][T20848] R13: 00007f4e573f6038 R14: 00007f4e573f5fa0 R15: 00007ffdeb341408
[  953.927412][T20848]  </TASK>
[  954.132284][T20850] FAULT_INJECTION: forcing a failure.
[  954.132284][T20850] name failslab, interval 1, probability 0, space 0, times 0
[  954.132322][T20850] CPU: 0 UID: 0 PID: 20850 Comm: syz.2.5113 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  954.132350][T20850] Tainted: [L]=SOFTLOCKUP
[  954.132357][T20850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  954.132368][T20850] Call Trace:
[  954.132377][T20850]  <TASK>
[  954.132385][T20850]  dump_stack_lvl+0xe8/0x150
[  954.132413][T20850]  should_fail_ex+0x467/0x600
[  954.132447][T20850]  should_failslab+0xa8/0x100
[  954.132473][T20850]  __kmalloc_noprof+0xfb/0x790
[  954.132502][T20850]  ? ___neigh_create+0x719/0x23a0
[  954.132522][T20850]  ? ___neigh_create+0x719/0x23a0
[  954.132550][T20850]  ___neigh_create+0x719/0x23a0
[  954.132579][T20850]  ? ip6_neigh_lookup+0x14e/0x490
[  954.132611][T20850]  ? ip6_neigh_lookup+0x14e/0x490
[  954.132631][T20850]  ip6_neigh_lookup+0x3db/0x490
[  954.132654][T20850]  ? __pfx_ip6_neigh_lookup+0x10/0x10
[  954.132680][T20850]  ? ip6_dst_neigh_lookup+0x74/0xf0
[  954.132712][T20850]  addr_resolve+0x14e8/0x2100
[  954.132743][T20850]  ? addr_resolve+0xfe/0x2100
[  954.132780][T20850]  ? __pfx_addr_resolve+0x10/0x10
[  954.132827][T20850]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  954.132866][T20850]  rdma_resolve_ip+0x43b/0x6a0
[  954.132896][T20850]  ? __pfx_addr_handler+0x10/0x10
[  954.132922][T20850]  rdma_resolve_addr+0x6cd/0x21a0
[  954.132955][T20850]  ? __pfx_rdma_resolve_addr+0x10/0x10
[  954.132989][T20850]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  954.133014][T20850]  ? lockdep_hardirqs_on+0x7a/0x110
[  954.133062][T20850]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  954.133086][T20850]  ? mutex_lock_nested+0x152/0x1d0
[  954.133114][T20850]  ? ucma_resolve_ip+0x2fe/0x490
[  954.133141][T20850]  ucma_resolve_ip+0x336/0x490
[  954.133172][T20850]  ? __pfx_ucma_resolve_ip+0x10/0x10
[  954.133214][T20850]  ucma_write+0x257/0x2f0
[  954.133239][T20850]  ? __pfx_ucma_write+0x10/0x10
[  954.133262][T20850]  ? security_file_permission+0x75/0x260
[  954.133287][T20850]  ? rw_verify_area+0x209/0x4d0
[  954.133316][T20850]  vfs_writev+0x4c4/0x990
[  954.133337][T20850]  ? __pfx_ucma_write+0x10/0x10
[  954.133364][T20850]  ? __pfx_vfs_writev+0x10/0x10
[  954.133397][T20850]  ? __fget_files+0x2a/0x420
[  954.133424][T20850]  ? __fget_files+0x3a8/0x420
[  954.133444][T20850]  ? __fget_files+0x2a/0x420
[  954.133474][T20850]  do_writev+0x15a/0x2e0
[  954.133495][T20850]  ? __pfx_do_writev+0x10/0x10
[  954.133523][T20850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.133545][T20850]  do_syscall_64+0x174/0x580
[  954.133569][T20850]  ? trace_irq_disable+0x3b/0x140
[  954.133594][T20850]  ? clear_bhb_loop+0x40/0x90
[  954.133619][T20850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.133638][T20850] RIP: 0033:0x7f76effbce59
[  954.133658][T20850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  954.133676][T20850] RSP: 002b:00007f76ee20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  954.133699][T20850] RAX: ffffffffffffffda RBX: 00007f76f0235fa0 RCX: 00007f76effbce59
[  954.133714][T20850] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000010
[  954.133727][T20850] RBP: 00007f76ee20e090 R08: 0000000000000000 R09: 0000000000000000
[  954.133740][T20850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  954.133752][T20850] R13: 00007f76f0236038 R14: 00007f76f0235fa0 R15: 00007ffd713c0638
[  954.133783][T20850]  </TASK>
[  954.216090][T20852] FAULT_INJECTION: forcing a failure.
[  954.216090][T20852] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  954.216127][T20852] CPU: 0 UID: 0 PID: 20852 Comm: syz.6.5114 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  954.216156][T20852] Tainted: [L]=SOFTLOCKUP
[  954.216164][T20852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  954.216176][T20852] Call Trace:
[  954.216184][T20852]  <TASK>
[  954.216192][T20852]  dump_stack_lvl+0xe8/0x150
[  954.216221][T20852]  should_fail_ex+0x467/0x600
[  954.216256][T20852]  _copy_from_user+0x2d/0xb0
[  954.216281][T20852]  snd_seq_oss_write+0x6e2/0x950
[  954.216352][T20852]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  954.216373][T20852]  ? __lock_acquire+0x683/0x2ce0
[  954.216406][T20852]  ? apparmor_file_permission+0x1f4/0x300
[  954.216433][T20852]  ? security_file_permission+0x75/0x260
[  954.216460][T20852]  odev_write+0x5d/0x80
[  954.216506][T20852]  ? __pfx_odev_write+0x10/0x10
[  954.216531][T20852]  vfs_write+0x29f/0xbb0
[  954.216565][T20852]  ? __pfx_vfs_write+0x10/0x10
[  954.216591][T20852]  ? __fget_files+0x2a/0x420
[  954.216616][T20852]  ? __fget_files+0x2a/0x420
[  954.216636][T20852]  ? __fget_files+0x3a8/0x420
[  954.216656][T20852]  ? __fget_files+0x2a/0x420
[  954.216685][T20852]  ksys_write+0x156/0x270
[  954.216712][T20852]  ? __pfx_ksys_write+0x10/0x10
[  954.216746][T20852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.216767][T20852]  do_syscall_64+0x174/0x580
[  954.216792][T20852]  ? trace_irq_disable+0x3b/0x140
[  954.216817][T20852]  ? clear_bhb_loop+0x40/0x90
[  954.216841][T20852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.216861][T20852] RIP: 0033:0x7fce33b6ce59
[  954.216880][T20852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  954.216897][T20852] RSP: 002b:00007fce31dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  954.216919][T20852] RAX: ffffffffffffffda RBX: 00007fce33de5fa0 RCX: 00007fce33b6ce59
[  954.216935][T20852] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000008
[  954.216948][T20852] RBP: 00007fce31dc6090 R08: 0000000000000000 R09: 0000000000000000
[  954.216961][T20852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  954.216974][T20852] R13: 00007fce33de6038 R14: 00007fce33de5fa0 R15: 00007ffc17248c68
[  954.217017][T20852]  </TASK>
[  954.847667][T20863] ALSA: mixer_oss: invalid OSS volume 'ä²:Ž‘ž;*Ç£Íf.¤ùqVEat¡©ÌpR%m9'
[  954.847709][T20863] ALSA: mixer_oss: invalid OSS volume '8‰vù’j/l3©ˆ÷ŸRë1cð]´pª�ïÕ›åd'
[  954.847765][T20863] ALSA: mixer_oss: invalid OSS volume 'X²¨õaO¨¦H'€s»QvpvNµ=ˆï�Ìç«œ‹g;O'
[  954.847791][T20863] ALSA: mixer_oss: invalid OSS volume '¼OK‘¼_cŠ§Þ®Åa>Æ×bÓ×ìh³T&dÉsm'
[  954.847807][T20863] ALSA: mixer_oss: invalid OSS volume '°zÿ‡#¾jq#¾-oiû½R‘q{q/ºU sTfp'
[  954.847837][T20863] ALSA: mixer_oss: invalid OSS volume 'ã(©.X‹ÅwiÛ#…²¯_œÀQ%róȽµ#ÄG('
[  954.847881][T20863] ALSA: mixer_oss: invalid OSS volume 'ڮˣ=ÑÊšµŠGt—!p7n…EUr‹k'ͲnV'
[  954.847902][T20863] ALSA: mixer_oss: invalid OSS volume '‚b×ú­v¹¶Ð{�åg>¿¸¦ï
ä¢ùNÒù©$p'
[  954.847938][T20863] ALSA: mixer_oss: invalid OSS volume 'ÓBn@9ŠqOÅöì0ÆaõMEGŒ’°kº¹™'
[  954.847983][T20863] ALSA: mixer_oss: invalid OSS volume '<„©õîÔ�ƒ%uÐú
Ê«—"b=Ò4'
[  954.848028][T20863] ALSA: mixer_oss: invalid OSS volume 'mÿÄT…cݱ뛦%Q¯Âsê'
[  954.848049][T20863] ALSA: mixer_oss: invalid OSS volume 's _Õ×åÁIGDohp1æ¡£[�£�þàÚBê'
[  954.848063][T20863] ALSA: mixer_oss: invalid OSS volume '1¶.L<—C~Ë[ uÝ@•€´Àú+îÀ˜ÆõŠ(ã'
[  954.848079][T20863] ALSA: mixer_oss: invalid OSS volume '§Ò‹¿M:HÜQø�IëÙÿq‚©Ìâ}ÝÏOÿ½´'
[  954.848094][T20863] ALSA: mixer_oss: invalid OSS volume ',Bȯ
½µ�Qµ*ÓG†?K™V‚eÜLÌ…ŽWþ'
[  954.848108][T20863] ALSA: mixer_oss: invalid OSS volume '‚'÷©–ÿ‘ú'
[  954.848127][T20863] ALSA: mixer_oss: invalid OSS volume '‹ÞÈwññ6UoéÀe’NÛÙ.øâAû=¹Ý.Nk'
[  954.848139][T20863] ALSA: mixer_oss: invalid OSS volume ''
[  954.848193][T20863] ALSA: mixer_oss: invalid OSS volume ',àö¤¨œ§iç'
[  954.848217][T20863] ALSA: mixer_oss: invalid OSS volume '!›²øþ~9—+#sô;VPÖf¯é±tÖ¨[Ë>+z1'
[  954.848239][T20863] ALSA: mixer_oss: invalid OSS volume '{³7Þø_‡ÍéIUv�Þ²�ø–'
[  954.848260][T20863] ALSA: mixer_oss: invalid OSS volume '{”J±™†öË?ȳ¬¡Ut©‡w^ï6ÛÕk„¨'
[  954.848294][T20863] ALSA: mixer_oss: invalid OSS volume 'ñWdll´©rƒ)<rŒs¸¹šþÐ;½?d䎖
Å'
[  954.848310][T20863] ALSA: mixer_oss: invalid OSS volume 'î•Ä3Kftª[þÇ’þ„ÿ±~ãQ2à`3Ѷ1'
[  954.848326][T20863] ALSA: mixer_oss: invalid OSS volume 'i›œ˜QÒÇWaì¤ãô+é¥TÃ\c%©kIL„º'
[  954.848346][T20863] ALSA: mixer_oss: invalid OSS volume '¥í3µ¢ÈÙ1Ý.…Ir˜qÈFóÃÅŸ)F�’'
[  954.848368][T20863] ALSA: mixer_oss: invalid OSS volume 'ùsJgâ'
[  954.848422][T20863] ALSA: mixer_oss: invalid OSS volume 'ëó¶ZÜOƒU'
[  954.848457][T20863] ALSA: mixer_oss: invalid OSS volume '¬†Îì¯�¿îN‰¤¼>O•9)'^¬ª.bŽ-9‹?('
[  954.848492][T20863] ALSA: mixer_oss: invalid OSS volume 'gÚ-ºåYÿß0H5nDíˆ<¦·†UÚÖßÄ'
[  954.848510][T20863] ALSA: mixer_oss: invalid OSS volume '$)FXkk·xk“Ø'
[  954.848556][T20863] ALSA: mixer_oss: invalid OSS volume '?'
[  954.848567][T20863] ALSA: mixer_oss: invalid OSS volume '‰!¿:‡?üm5iÑc£'
[  954.848583][T20863] ALSA: mixer_oss: invalid OSS volume '@ÑÇ›2qì„ÃÑ>ž4kð¯?nb¥¤¬@«ÕU'
[  954.848602][T20863] ALSA: mixer_oss: invalid OSS volume '9Ä’â�Œ¦0ÈXÃ’/àŽU«ZýàTÏCÞuzðr'
[  954.848622][T20863] ALSA: mixer_oss: invalid OSS volume 'm¿µõÛÅ}ÍaÂO_žÒºÒ:0WS”]‘'
[  954.848664][T20863] ALSA: mixer_oss: invalid OSS volume 'ôÅ�µÿd¿C=Æë£ß4aî‹—è؇©)G;‹½'
[  954.848698][T20863] ALSA: mixer_oss: invalid OSS volume '`-ÞÂVÚ�Ï°
«ÿñFÅ9˜c1êŽò1IÁe,'
[  954.848737][T20863] ALSA: mixer_oss: invalid OSS volume 'Q¯,‹ž­gW.²³^óW´+¹aD€¿ìØ{«e7Ç'
[  954.848748][T20863] ALSA: mixer_oss: invalid OSS volume '_-D±�'
[  954.848763][T20863] ALSA: mixer_oss: invalid OSS volume '(.rÖp
p…ÊÅŠ�Þ=üž'
[  954.848780][T20863] ALSA: mixer_oss: invalid OSS volume 'XÁ}ÚøLšáOF¯+™�*tÕi�GñŠ"á¼\'
[  954.848795][T20863] ALSA: mixer_oss: invalid OSS volume ']SbG`ÄG‡GÕƒUeùÉÓC2+ø÷së�ó�'
[  954.848826][T20863] ALSA: mixer_oss: invalid OSS volume '^é¹e`nŒ´04ÛÒ½õ'
[  954.848858][T20863] ALSA: mixer_oss: invalid OSS volume '˜b¦]ŠØXÆÙt�üê’ÐrEÔTvJ9ÃïýÓš'
[  954.848918][T20863] ALSA: mixer_oss: invalid OSS volume '¹G ´‰é]Ñø®£¤€üuJÑ‹êÌ€ù7ÿ¨tæ'
[  954.848939][T20863] ALSA: mixer_oss: invalid OSS volume 'x\$ÍÙ|‰‰×üè~ðJÇã‘;$¸lÓ"Ìb€'
[  954.848964][T20863] ALSA: mixer_oss: invalid OSS volume '²{è-'
[  954.848982][T20863] ALSA: mixer_oss: invalid OSS volume '?ZÜNVýS‘UdÀæ©.°V�Û1º)0GqŠœ[¡'
[  954.848997][T20863] ALSA: mixer_oss: invalid OSS volume '¦‘ÄôÈgw\,qIô8˜å‰*‡Ýk飸Ä(q~'
[  954.849011][T20863] ALSA: mixer_oss: invalid OSS volume 'Úá“þ„VÆÂï¸k,¼äÄõù°–b]S§“'
[  954.855571][T20863] kernel profiling enabled (shift: 5)
[  955.399988][T20876] netlink: 'syz.2.5122': attribute type 39 has an invalid length.
[  955.481381][T20876] veth0_macvtap: left promiscuous mode
[  955.890339][T20884] sd 0:0:1:0: PR command failed: 1026
[  955.890393][T20884] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  955.890438][T20884] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  955.932427][T20884] netdevsim netdevsim4: Direct firmware load for .. failed with error -2
[  955.932448][T20884] netdevsim netdevsim4: Falling back to sysfs fallback for: ..
[  956.492780][ T4919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  956.552293][ T4919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  956.567245][ T4919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  956.606894][ T4919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  956.649286][ T4919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  957.356426][T20899] FAULT_INJECTION: forcing a failure.
[  957.356426][T20899] name failslab, interval 1, probability 0, space 0, times 0
[  957.356455][T20899] CPU: 0 UID: 0 PID: 20899 Comm: syz.4.5128 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  957.356474][T20899] Tainted: [L]=SOFTLOCKUP
[  957.356478][T20899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  957.356486][T20899] Call Trace:
[  957.356491][T20899]  <TASK>
[  957.356497][T20899]  dump_stack_lvl+0xe8/0x150
[  957.356515][T20899]  should_fail_ex+0x467/0x600
[  957.356541][T20899]  should_failslab+0xa8/0x100
[  957.356559][T20899]  __kmalloc_cache_noprof+0xa1/0x670
[  957.356574][T20899]  ? nfnetlink_rcv+0x102a/0x28d0
[  957.356589][T20899]  ? nfnetlink_rcv+0x102a/0x28d0
[  957.356607][T20899]  nfnetlink_rcv+0x102a/0x28d0
[  957.356659][T20899]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  957.356690][T20899]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  957.356710][T20899]  ? ref_tracker_free+0x668/0x820
[  957.356746][T20899]  ? skb_clone+0x246/0x3a0
[  957.356765][T20899]  ? __netlink_deliver_tap+0x838/0x880
[  957.356787][T20899]  ? netlink_deliver_tap+0x2e/0x1b0
[  957.356804][T20899]  ? netlink_deliver_tap+0x2e/0x1b0
[  957.356829][T20899]  netlink_unicast+0x7f5/0x990
[  957.356850][T20899]  netlink_sendmsg+0x813/0xb40
[  957.356877][T20899]  ? __pfx_netlink_sendmsg+0x10/0x10
[  957.356896][T20899]  ? aa_sock_msg_perm+0x122/0x200
[  957.356922][T20899]  ? __pfx_netlink_sendmsg+0x10/0x10
[  957.356953][T20899]  sock_sendmsg_nosec+0x13a/0x180
[  957.356978][T20899]  ____sys_sendmsg+0x565/0x870
[  957.357006][T20899]  ? __might_fault+0xaf/0x130
[  957.357036][T20899]  ? __pfx_____sys_sendmsg+0x10/0x10
[  957.357074][T20899]  ? import_iovec+0x73/0xa0
[  957.357105][T20899]  ___sys_sendmsg+0x2a5/0x360
[  957.357134][T20899]  ? __lock_acquire+0x683/0x2ce0
[  957.357185][T20899]  ? __pfx____sys_sendmsg+0x10/0x10
[  957.357255][T20899]  ? __fget_files+0x2a/0x420
[  957.357280][T20899]  ? __fget_files+0x3a8/0x420
[  957.357316][T20899]  __x64_sys_sendmsg+0x1b7/0x290
[  957.357350][T20899]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  957.357409][T20899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.357433][T20899]  do_syscall_64+0x174/0x580
[  957.357464][T20899]  ? clear_bhb_loop+0x40/0x90
[  957.357493][T20899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.357514][T20899] RIP: 0033:0x7f4e5717ce59
[  957.357534][T20899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  957.357554][T20899] RSP: 002b:00007f4e553d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  957.357580][T20899] RAX: ffffffffffffffda RBX: 00007f4e573f5fa0 RCX: 00007f4e5717ce59
[  957.357596][T20899] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  957.357611][T20899] RBP: 00007f4e553d6090 R08: 0000000000000000 R09: 0000000000000000
[  957.357626][T20899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  957.357639][T20899] R13: 00007f4e573f6038 R14: 00007f4e573f5fa0 R15: 00007ffdeb341408
[  957.357676][T20899]  </TASK>
[  957.935805][T20888] wg2 speed is unknown, defaulting to 1000
[  958.416221][ T7172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.757032][   T60] Bluetooth: hci1: command tx timeout
[  959.138974][T16466] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  959.287201][T16466] usb 5-1: Using ep0 maxpacket: 16
[  959.358503][T16466] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  959.358536][T16466] usb 5-1: config 0 has no interface number 0
[  959.358605][T16466] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  959.358634][T16466] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  959.401946][T16466] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  959.401982][T16466] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  959.402005][T16466] usb 5-1: Product: syz
[  959.402020][T16466] usb 5-1: SerialNumber: syz
[  959.449028][T16466] usb 5-1: config 0 descriptor??
[  959.455001][T16466] cm109 5-1:0.8: invalid payload size 0, expected 4
[  959.489146][T16466] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input58
[  959.765804][    C1] cm109_urb_ctl_callback: 468 callbacks suppressed
[  959.765833][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  959.766080][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  959.766322][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  959.766565][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  959.766792][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  959.771878][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  959.772125][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  959.772357][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  959.772592][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  959.772817][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  959.865292][T16466] usb 5-1: USB disconnect, device number 4
[  959.865397][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  959.960800][ T7172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  960.029673][T16466] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  960.569514][ T7172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  960.820393][   T60] Bluetooth: hci1: command tx timeout
[  961.011506][ T7172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.199170][T20888] bridge0: port 1(bridge_slave_0) entered blocking state
[  961.199620][T20888] bridge0: port 1(bridge_slave_0) entered disabled state
[  961.199942][T20888] bridge_slave_0: entered allmulticast mode
[  961.203994][T20888] bridge_slave_0: entered promiscuous mode
[  961.243462][T20888] bridge0: port 2(bridge_slave_1) entered blocking state
[  961.243838][T20888] bridge0: port 2(bridge_slave_1) entered disabled state
[  961.244171][T20888] bridge_slave_1: entered allmulticast mode
[  961.268300][T20888] bridge_slave_1: entered promiscuous mode
[  961.361983][T20888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  961.384702][T20888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  961.490144][T20888] team0: Port device team_slave_0 added
[  961.496382][T20888] team0: Port device team_slave_1 added
[  961.641038][T20888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  961.641058][T20888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  961.641086][T20888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  961.703106][T20888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  961.703129][T20888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  961.703163][T20888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  962.103956][T20888] hsr_slave_0: entered promiscuous mode
[  962.105296][T20888] hsr_slave_1: entered promiscuous mode
[  962.106340][T20888] debugfs: 'hsr0' already exists in 'hsr'
[  962.106363][T20888] Cannot create hsr debugfs directory
[  962.319526][ T7172] ªªªªª: left allmulticast mode
[  962.319563][ T7172] ªªªªª: left promiscuous mode
[  962.332969][ T7172] bridge0: port 2(ªªªªª) entered disabled state
[  962.428134][ T7172] bridge_slave_0: left allmulticast mode
[  962.428164][ T7172] bridge_slave_0: left promiscuous mode
[  962.431443][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state
[  962.560019][ T7172] pim6reg: left allmulticast mode
[  962.897244][   T60] Bluetooth: hci1: command tx timeout
[  963.408582][ T7172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  963.467794][ T7172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  963.491107][ T7172] bond0 (unregistering): Released all slaves
[  963.876630][ T8585] wg2 speed is unknown, defaulting to 1000
[  963.876812][ T8585] syz1: Port: 1 Link DOWN
[  964.953516][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9
[  964.978469][   T60] Bluetooth: hci1: command tx timeout
[  966.081203][ T7172] hsr_slave_0: left promiscuous mode
[  966.183789][ T7172] hsr_slave_1: left promiscuous mode
[  966.185062][ T7172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  966.185089][ T7172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  966.242800][ T7172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  966.242828][ T7172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  966.419402][ T7172] veth1_macvtap: left promiscuous mode
[  966.419821][ T7172] veth1_vlan: left promiscuous mode
[  966.431172][ T7172] veth0_vlan: left promiscuous mode
[  967.518482][ T7172] team0 (unregistering): Port device team_slave_1 removed
[  967.560030][ T7172] team0 (unregistering): Port device team_slave_0 removed
[  967.831594][ T7172] team0 (unregistering): Port device dummy0 removed
[  967.863442][T18004] smbdirect: ib_dev[syz1] removed
[  968.216015][T20888] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  968.244359][T20888] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  968.245402][T20888] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  968.340508][T20888] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  968.342442][T20888] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  968.550530][T20888] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  968.553889][T20888] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  968.583748][T20888] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  968.700037][T20888] 8021q: adding VLAN 0 to HW filter on device bond0
[  968.733495][T20888] 8021q: adding VLAN 0 to HW filter on device team0
[  968.788567][T17983] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.788896][T17983] bridge0: port 1(bridge_slave_0) entered forwarding state
[  968.862230][T18004] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.862395][T18004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  969.740877][ T7172] IPVS: stop unused estimator thread 0...
[  969.791780][T20888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  969.905904][T20888] veth0_vlan: entered promiscuous mode
[  969.923986][T20888] veth1_vlan: entered promiscuous mode
[  969.992984][T20888] veth0_macvtap: entered promiscuous mode
[  970.012658][T20888] veth1_macvtap: entered promiscuous mode
[  970.058653][T20888] batman_adv: batadv0: Interface activated: batadv_slave_0
[  970.082563][T20888] batman_adv: batadv0: Interface activated: batadv_slave_1
[  970.103355][ T7172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  970.104340][ T7172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  970.104386][ T7172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  970.104426][ T7172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  971.797818][ T4919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  971.844013][ T4919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  971.887131][ T4919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  971.904581][ T4919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  971.935504][ T4919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  972.023886][T17983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.023908][T17983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.254238][T21077] mmap: syz.5.5141 (21077): VmData 37462016 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  972.395580][ T7165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.395603][ T7165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.777180][ T8585] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  972.939463][ T8585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  972.939495][ T8585] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  972.939510][ T8585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  972.939523][ T8585] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  972.941682][ T8585] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  972.941712][ T8585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.941728][ T8585] usb 5-1: Product: syz
[  972.941737][ T8585] usb 5-1: Manufacturer: syz
[  972.941746][ T8585] usb 5-1: SerialNumber: syz
[  973.042866][ T8585] usb 5-1: config 0 descriptor??
[  973.081011][ T8585] ums-isd200 5-1:0.0: USB Mass Storage device detected
[  973.117203][ T5701] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  973.267086][ T5701] usb 3-1: Using ep0 maxpacket: 32
[  973.269474][ T5701] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  973.269502][ T5701] usb 3-1: config 0 has no interface number 0
[  973.269552][ T5701] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  973.269581][ T5701] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  973.269604][ T5701] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  973.269629][ T5701] usb 3-1: config 0 interface 196 has no altsetting 0
[  973.274218][ T5701] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  973.274248][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.274279][ T5701] usb 3-1: Product: syz
[  973.274309][ T5701] usb 3-1: Manufacturer: syz
[  973.274322][ T5701] usb 3-1: SerialNumber: syz
[  973.286772][ T5701] usb 3-1: config 0 descriptor??
[  973.291134][T21089] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  973.566490][ T8585] ums-isd200 5-1:0.0: probe with driver ums-isd200 failed with error -22
[  973.677398][T21083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5143'.
[  973.711387][ T8585] usb 5-1: USB disconnect, device number 5
[  973.996872][T21089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5126'.
[  973.996906][T21089] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  974.085049][T21070] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.086117][T21070] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.086122][ T5701] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  974.086438][T21070] bridge_slave_0: entered allmulticast mode
[  974.123344][T21070] bridge_slave_0: entered promiscuous mode
[  974.162885][ T5701] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[  974.162940][T21070] bridge0: port 2(bridge_slave_1) entered blocking state
[  974.163376][T21070] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.163733][T21070] bridge_slave_1: entered allmulticast mode
[  974.195083][   T60] Bluetooth: hci2: command tx timeout
[  974.203532][T21070] bridge_slave_1: entered promiscuous mode
[  974.326755][T21070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  974.402274][   T32] usb 3-1: USB disconnect, device number 5
[  974.419123][T21070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  974.613201][T21070] team0: Port device team_slave_0 added
[  974.616521][T21070] team0: Port device team_slave_1 added
[  974.621723][   T32] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[  974.688643][T21070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  974.688657][T21070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  974.688674][T21070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  974.695699][T21070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  974.695712][T21070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  974.695729][T21070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  974.767158][ T5701] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  974.779244][T21070] hsr_slave_0: entered promiscuous mode
[  974.781252][T21070] hsr_slave_1: entered promiscuous mode
[  974.782930][T21070] debugfs: 'hsr0' already exists in 'hsr'
[  974.782953][T21070] Cannot create hsr debugfs directory
[  974.918340][ T5701] usb 5-1: Using ep0 maxpacket: 16
[  974.924587][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  974.924646][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  974.924667][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  974.924680][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  974.924695][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  974.925780][ T5701] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  974.925807][ T5701] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  974.925823][ T5701] usb 5-1: Manufacturer: syz
[  974.952573][ T5701] usb 5-1: config 0 descriptor??
[  975.493041][ T5701] rc_core: IR keymap rc-hauppauge not found
[  975.493067][ T5701] Registered IR keymap rc-empty
[  975.493241][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.509975][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.578129][ T5701] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  975.600954][ T5701] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input59
[  975.625141][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.637389][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.661258][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.677371][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.698957][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.729372][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.752661][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.767249][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.787443][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  975.808914][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  976.005160][ T5701] mceusb 5-1:0.0: Registered 渶 with mce emulator interface version 1
[  976.005189][ T5701] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  976.024973][ T5701] usb 5-1: USB disconnect, device number 6
[  976.260128][   T60] Bluetooth: hci2: command tx timeout
[  976.629052][T21121] Invalid source name
[  977.125590][T21070] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  977.170476][T21070] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  977.187753][T21070] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  977.282166][T21070] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  977.284712][T21070] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  977.377620][T21070] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  977.396428][T21130] syzkaller1: entered promiscuous mode
[  977.396453][T21130] syzkaller1: entered allmulticast mode
[  977.427415][T21070] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  977.491116][T21070] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  978.184666][T21070] 8021q: adding VLAN 0 to HW filter on device bond0
[  978.251936][T21070] 8021q: adding VLAN 0 to HW filter on device team0
[  978.271500][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.271816][ T7165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  978.329155][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.329316][ T7165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  978.347794][   T60] Bluetooth: hci2: command tx timeout
[  978.419176][   T32] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  978.567113][   T32] usb 3-1: Using ep0 maxpacket: 16
[  978.569615][   T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  978.569674][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  978.569705][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  978.569728][   T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  978.569753][   T32] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  978.571217][   T32] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  978.571246][   T32] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  978.571268][   T32] usb 3-1: Manufacturer: syz
[  978.591134][   T32] usb 3-1: config 0 descriptor??
[  978.728922][T21155] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5158'.
[  978.990569][   T32] rc_core: IR keymap rc-hauppauge not found
[  978.990594][   T32] Registered IR keymap rc-empty
[  978.990778][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.008632][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.032663][   T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  979.036778][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input60
[  979.054969][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.067444][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.088005][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.113389][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.127459][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.153544][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.171559][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.189920][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.208401][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.218462][ T8585] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  979.227276][   T32] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  979.376730][ T8585] usb 5-1: device descriptor read/64, error -71
[  979.444320][   T32] mceusb 3-1:0.0: Registered 渶 with mce emulator interface version 1
[  979.444346][   T32] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  979.517377][   T32] usb 3-1: USB disconnect, device number 6
[  979.625095][ T8585] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  979.787122][ T8585] usb 5-1: device descriptor read/64, error -71
[  979.897578][ T8585] usb usb5-port1: attempt power cycle
[  980.274144][ T8585] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  980.287997][ T8585] usb 5-1: device descriptor read/8, error -71
[  980.427143][   T60] Bluetooth: hci2: command tx timeout
[  980.548083][ T8585] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  980.582262][ T8585] usb 5-1: device descriptor read/8, error -71
[  980.701646][ T8585] usb usb5-port1: unable to enumerate USB device
[  980.711130][T21070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  981.840994][T21070] veth0_vlan: entered promiscuous mode
[  981.852374][T21070] veth1_vlan: entered promiscuous mode
[  981.979658][T21070] veth0_macvtap: entered promiscuous mode
[  981.989928][T21070] veth1_macvtap: entered promiscuous mode
[  982.007228][ T8585] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  982.024637][T21070] batman_adv: batadv0: Interface activated: batadv_slave_0
[  982.051464][T21070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  982.103395][ T7679] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  982.105016][ T7679] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  982.105065][ T7679] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  982.105106][ T7679] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  982.167322][ T8585] usb 3-1: device descriptor read/64, error -71
[  982.231468][T14862] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  982.389542][T14862] usb 5-1: Using ep0 maxpacket: 32
[  982.392222][T14862] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  982.392251][T14862] usb 5-1: config 0 has no interface number 0
[  982.392296][T14862] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  982.392322][T14862] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  982.392345][T14862] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  982.392368][T14862] usb 5-1: config 0 interface 196 has no altsetting 0
[  982.400641][T14862] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  982.400675][T14862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.400696][T14862] usb 5-1: Product: syz
[  982.400711][T14862] usb 5-1: Manufacturer: syz
[  982.400727][T14862] usb 5-1: SerialNumber: syz
[  982.448454][T14862] usb 5-1: config 0 descriptor??
[  982.449575][T21195] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  982.667885][ T8585] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  983.021382][ T8585] usb 3-1: device descriptor read/64, error -71
[  983.162700][ T8585] usb usb3-port1: attempt power cycle
[  983.492630][T14862] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -110
[  983.498891][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5166'.
[  983.498923][T21195] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  983.851950][ T8585] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  983.890068][ T8585] usb 3-1: device descriptor read/8, error -71
[  984.370693][ T8585] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  984.426136][ T8585] usb 3-1: device descriptor read/8, error -71
[  984.529745][ T8585] usb usb3-port1: unable to enumerate USB device
[  985.028482][T14862] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached
[  985.806041][ T7682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  985.806065][ T7682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  986.021636][ T7168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  986.021658][ T7168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  986.160918][  T199] usb 5-1: USB disconnect, device number 11
[  986.735655][  T199] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected
[  987.455297][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5177'.
[  987.474434][T21246] netlink: 'syz.5.5177': attribute type 23 has an invalid length.
[  987.564008][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5177'.
[  988.127215][ T5718] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  988.208230][T21268] netlink: 'syz.2.5184': attribute type 21 has an invalid length.
[  988.208256][T21268] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5184'.
[  988.277235][ T5718] usb 8-1: Using ep0 maxpacket: 32
[  988.279578][ T5718] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[  988.279606][ T5718] usb 8-1: config 0 has no interface number 0
[  988.279656][ T5718] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  988.279684][ T5718] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  988.279768][ T5718] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  988.279796][ T5718] usb 8-1: config 0 interface 196 has no altsetting 0
[  988.282931][ T5718] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  988.282961][ T5718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.282983][ T5718] usb 8-1: Product: syz
[  988.282999][ T5718] usb 8-1: Manufacturer: syz
[  988.283014][ T5718] usb 8-1: SerialNumber: syz
[  988.395379][ T5718] usb 8-1: config 0 descriptor??
[  988.396494][T21258] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  989.046713][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5180'.
[  989.046745][T21258] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  989.093070][ T5718] ipheth 8-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  989.120480][ T5718] ipheth 8-1:0.196: Apple iPhone USB Ethernet device attached
[  989.310749][  T199] usb 8-1: USB disconnect, device number 2
[  989.599584][  T199] ipheth 8-1:0.196: Apple iPhone USB Ethernet now disconnected
[  989.813589][T21307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5192'.
[  990.053669][T21315] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in;
[  990.053669][T21315]    program syz.7.5195 not setting count and/or reply_len properly
[  990.637878][   T38] audit: type=1400 audit(1782859622.862:210): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="::-" pid=21337 comm="syz.7.5201"
[  990.902299][T21344] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5202'.
[  991.140436][T21353] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in;
[  991.140436][T21353]    program syz.4.5207 not setting count and/or reply_len properly
[  991.370512][T14862] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  991.525971][T14862] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  991.525994][T14862] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  991.526007][T14862] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  991.526039][T14862] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  991.526056][T14862] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  991.549043][T14862] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  991.549074][T14862] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  991.549094][T14862] usb 8-1: Product: syz
[  991.549107][T14862] usb 8-1: Manufacturer: syz
[  991.592129][T14862] cdc_wdm 8-1:1.0: skipping garbage
[  991.592150][T14862] cdc_wdm 8-1:1.0: skipping garbage
[  991.607733][T14862] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[  991.607762][T14862] cdc_wdm 8-1:1.0: Unknown control protocol
[  991.811455][T21374] netlink: 'syz.5.5213': attribute type 10 has an invalid length.
[  991.849333][T21374] veth1_macvtap: left promiscuous mode
[  992.004253][T21354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  992.004661][T21354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  992.206017][T21380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5215'.
[  992.236730][T21382] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in;
[  992.236730][T21382]    program syz.5.5217 not setting count and/or reply_len properly
[  992.363242][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE
[  992.392806][  T199] usb 8-1: USB disconnect, device number 3
[  992.661246][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  992.661376][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  992.732933][  T823] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  992.733024][  T823] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  992.765341][  T823] usb 6-1: USB disconnect, device number 26
[  992.847116][ T5694] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  993.007135][ T5694] usb 5-1: Using ep0 maxpacket: 16
[  993.010612][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  993.010757][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  993.010789][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  993.010813][ T5694] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  993.010838][ T5694] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  993.013640][ T5694] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  993.013671][ T5694] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  993.013693][ T5694] usb 5-1: Manufacturer: syz
[  993.081658][T21404] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in;
[  993.081658][T21404]    program syz.7.5226 not setting count and/or reply_len properly
[  993.153898][ T5694] usb 5-1: config 0 descriptor??
[  993.479246][ T5694] rc_core: IR keymap rc-hauppauge not found
[  993.479280][ T5694] Registered IR keymap rc-empty
[  993.479449][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.509938][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.542231][ T5694] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  993.563926][ T5694] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input61
[  993.596739][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.617800][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.637636][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.657260][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.677340][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.698004][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.717157][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.737286][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.757342][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.779184][ T5694] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  993.829110][ T5694] mceusb 5-1:0.0: Registered 渶 with mce emulator interface version 1
[  993.829139][ T5694] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  993.864807][ T5694] usb 5-1: USB disconnect, device number 12
[  995.778999][ T4919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  995.850139][ T4919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  995.852250][ T4919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  995.853651][ T4919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  995.854677][ T4919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  997.523585][T21496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5259'.
[  998.018327][   T60] Bluetooth: hci4: command tx timeout
[  998.138588][T21518] bpf: Bad value for 'mode'
[  998.480222][T21524] FAULT_INJECTION: forcing a failure.
[  998.480222][T21524] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  998.480249][T21524] CPU: 1 UID: 0 PID: 21524 Comm: syz.7.5269 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  998.480268][T21524] Tainted: [L]=SOFTLOCKUP
[  998.480273][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  998.480281][T21524] Call Trace:
[  998.480286][T21524]  <TASK>
[  998.480292][T21524]  dump_stack_lvl+0xe8/0x150
[  998.480309][T21524]  should_fail_ex+0x467/0x600
[  998.480332][T21524]  _copy_to_user+0x31/0xb0
[  998.480349][T21524]  simple_read_from_buffer+0xe1/0x170
[  998.480368][T21524]  proc_fail_nth_read+0x1be/0x230
[  998.480384][T21524]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  998.480400][T21524]  ? rw_verify_area+0x250/0x4d0
[  998.480417][T21524]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  998.480430][T21524]  vfs_read+0x219/0xa90
[  998.480450][T21524]  ? __pfx_vfs_read+0x10/0x10
[  998.480467][T21524]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  998.480485][T21524]  ? lockdep_hardirqs_on+0x7a/0x110
[  998.480501][T21524]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  998.480516][T21524]  ? mutex_lock_nested+0x152/0x1d0
[  998.480534][T21524]  ? fdget_pos+0x252/0x320
[  998.480553][T21524]  ksys_read+0x156/0x270
[  998.480570][T21524]  ? __pfx_ksys_read+0x10/0x10
[  998.480591][T21524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.480604][T21524]  do_syscall_64+0x174/0x580
[  998.480620][T21524]  ? trace_irq_disable+0x3b/0x140
[  998.480639][T21524]  ? clear_bhb_loop+0x40/0x90
[  998.480654][T21524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  998.480676][T21524] RIP: 0033:0x7f0be898d68e
[  998.480689][T21524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  998.480699][T21524] RSP: 002b:00007f0be6c25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  998.480714][T21524] RAX: ffffffffffffffda RBX: 00007f0be6c266c0 RCX: 00007f0be898d68e
[  998.480724][T21524] RDX: 000000000000000f RSI: 00007f0be6c260a0 RDI: 0000000000000004
[  998.480732][T21524] RBP: 00007f0be6c26090 R08: 0000000000000000 R09: 0000000000000000
[  998.480740][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  998.480748][T21524] R13: 00007f0be8c46038 R14: 00007f0be8c45fa0 R15: 00007ffdfa4ffbf8
[  998.480767][T21524]  </TASK>
[  998.575481][T21525] binder: 21521:21525 ioctl c0306201 0 returned -14
[  999.014561][T21459] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.015132][T21459] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.015540][T21459] bridge_slave_0: entered allmulticast mode
[  999.020754][T21459] bridge_slave_0: entered promiscuous mode
[  999.033129][T21459] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.033647][T21459] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.033959][T21459] bridge_slave_1: entered allmulticast mode
[  999.038672][T21459] bridge_slave_1: entered promiscuous mode
[  999.164707][T21459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  999.173385][T21459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  999.726122][T21459] team0: Port device team_slave_0 added
[  999.853954][T21459] team0: Port device team_slave_1 added
[  999.915878][   T38] audit: type=1326 audit(1782859632.142:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21549 comm="syz.7.5278" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0be89cce59 code=0x0
[  999.987098][T16466] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1000.010539][T21459] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1000.010557][T21459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1000.010588][T21459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1000.014582][T21459] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1000.014599][T21459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1000.014630][T21459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1000.106727][   T60] Bluetooth: hci4: command tx timeout
[ 1000.143544][T16466] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1000.143580][T16466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.143603][T16466] usb 3-1: Product: syz
[ 1000.143619][T16466] usb 3-1: Manufacturer: syz
[ 1000.143635][T16466] usb 3-1: SerialNumber: syz
[ 1000.254246][T21459] hsr_slave_0: entered promiscuous mode
[ 1000.257281][ T5778] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1000.283055][T21459] hsr_slave_1: entered promiscuous mode
[ 1000.284910][T21459] debugfs: 'hsr0' already exists in 'hsr'
[ 1000.289071][T21459] Cannot create hsr debugfs directory
[ 1000.397242][ T5778] usb 6-1: Using ep0 maxpacket: 32
[ 1000.399802][ T5778] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[ 1000.399830][ T5778] usb 6-1: config 0 has no interface number 0
[ 1000.399881][ T5778] usb 6-1: config 0 interface 184 has no altsetting 0
[ 1000.403937][ T5778] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1000.403968][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.403990][ T5778] usb 6-1: Product: syz
[ 1000.404005][ T5778] usb 6-1: Manufacturer: syz
[ 1000.404021][ T5778] usb 6-1: SerialNumber: syz
[ 1000.469894][ T5778] usb 6-1: config 0 descriptor??
[ 1000.612844][T16466] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1000.612909][T16466] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[ 1000.614370][T16466] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1000.614425][T16466] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1000.745864][T16466] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1000.783240][T16466] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[ 1000.812877][T16466] usb 3-1: USB disconnect, device number 11
[ 1001.085575][ T5778] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1001.085613][ T5778] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1001.335879][ T5778] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[ 1001.335915][ T5778] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[ 1001.335936][ T5778] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1001.336292][ T5778] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61
[ 1001.820695][T16466] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1001.826160][T21459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1001.947165][T16466] usb 3-1: device descriptor read/64, error -71
[ 1002.193036][T16466] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1002.197171][   T60] Bluetooth: hci4: command tx timeout
[ 1002.225367][T21459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.317244][T16466] usb 3-1: device descriptor read/64, error -71
[ 1002.474353][T16466] usb usb3-port1: attempt power cycle
[ 1002.746146][T21459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.827234][T16466] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1002.847856][T16466] usb 3-1: device descriptor read/8, error -71
[ 1002.999453][ T5701] usb 6-1: USB disconnect, device number 27
[ 1003.087203][T16466] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1003.112495][T16466] usb 3-1: device descriptor read/8, error -71
[ 1003.360166][T16466] usb usb3-port1: unable to enumerate USB device
[ 1003.503622][T21459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.962888][T21597] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[ 1003.962888][T21597]    program syz.7.5293 not setting count and/or reply_len properly
[ 1004.257254][   T60] Bluetooth: hci4: command tx timeout
[ 1004.675230][T21459] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1004.733966][T21459] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1004.735277][T21459] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1004.784969][T21459] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1004.796007][T21459] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1004.970505][T21459] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1005.016873][T21459] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1005.055161][T21459] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1005.067279][T21618] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[ 1005.067279][T21618]    program syz.2.5301 not setting count and/or reply_len properly
[ 1005.297316][T16466] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[ 1005.469446][T16466] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1005.469484][T16466] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1005.469536][T16466] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1005.469562][T16466] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.632203][T21459] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1005.640491][T16466] usb 8-1: config 0 descriptor??
[ 1005.750004][T21459] 8021q: adding VLAN 0 to HW filter on device team0
[ 1005.775634][T17980] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1005.775801][T17980] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1005.819816][T17980] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1005.820007][T17980] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1005.827415][ T5718] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1005.978447][ T5718] usb 6-1: Using ep0 maxpacket: 32
[ 1005.985045][ T5718] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 1005.985077][ T5718] usb 6-1: config 0 has no interface number 0
[ 1005.985186][ T5718] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1005.985216][ T5718] usb 6-1: config 0 interface 85 has no altsetting 0
[ 1006.000100][ T5718] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1006.000191][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.000214][ T5718] usb 6-1: Product: syz
[ 1006.000229][ T5718] usb 6-1: Manufacturer: syz
[ 1006.000244][ T5718] usb 6-1: SerialNumber: syz
[ 1006.036422][ T5718] usb 6-1: config 0 descriptor??
[ 1006.090900][T16466] isku 0003:1E7D:319C.001D: item fetching failed at offset 3/7
[ 1006.091669][T16466] isku 0003:1E7D:319C.001D: parse failed
[ 1006.091751][T16466] isku 0003:1E7D:319C.001D: probe with driver isku failed with error -22
[ 1006.268560][   T60] Bluetooth: hci2: SCO packet for unknown connection handle 2848
[ 1006.320935][T16466] usb 8-1: USB disconnect, device number 4
[ 1006.484399][T21638] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5306'.
[ 1006.721282][ T5718] appletouch 6-1:0.85: Geyser mode initialized.
[ 1006.727940][ T5718] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input62
[ 1006.955046][T21632] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5305'.
[ 1007.113999][T18826] usb 6-1: USB disconnect, device number 28
[ 1007.300544][T18826] appletouch 6-1:0.85: input: appletouch disconnected
[ 1007.329954][ T5694] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1007.477138][ T5694] usb 3-1: Using ep0 maxpacket: 32
[ 1007.479124][ T5694] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[ 1007.479169][ T5694] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1007.479200][ T5694] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1007.479216][ T5694] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1007.479231][ T5694] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1007.479246][ T5694] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1007.481466][ T5694] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1007.481514][ T5694] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1007.481529][ T5694] usb 3-1: Product: syz
[ 1007.481538][ T5694] usb 3-1: Manufacturer: syz
[ 1007.481547][ T5694] usb 3-1: SerialNumber: syz
[ 1007.524256][ T5694] usb 3-1: config 0 descriptor??
[ 1007.596839][ T5694] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1007.603880][ T5694] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1007.717793][T16466] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1007.736311][  T823] usb 3-1: USB disconnect, device number 16
[ 1007.754994][  T823] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[ 1007.799753][T21656] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[ 1007.799753][T21656]    program syz.5.5311 not setting count and/or reply_len properly
[ 1007.927713][T16466] usb 8-1: Using ep0 maxpacket: 32
[ 1007.930197][T16466] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[ 1007.930225][T16466] usb 8-1: config 0 has no interface number 0
[ 1007.930275][T16466] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1007.930302][T16466] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1007.930326][T16466] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1007.930352][T16466] usb 8-1: config 0 interface 196 has no altsetting 0
[ 1008.008934][T16466] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 1008.008970][T16466] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1008.008993][T16466] usb 8-1: Product: syz
[ 1008.009008][T16466] usb 8-1: Manufacturer: syz
[ 1008.009024][T16466] usb 8-1: SerialNumber: syz
[ 1008.052055][T16466] usb 8-1: config 0 descriptor??
[ 1008.061132][T21651] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1008.447651][T21665] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5314'.
[ 1008.451812][T21459] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1008.726068][T21651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5310'.
[ 1008.726103][T21651] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1008.806863][T16466] ipheth 8-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[ 1008.854106][T16466] ipheth 8-1:0.196: Apple iPhone USB Ethernet device attached
[ 1009.075504][T16466] usb 8-1: USB disconnect, device number 5
[ 1009.330547][T21684] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[ 1009.330547][T21684]    program syz.2.5319 not setting count and/or reply_len properly
[ 1009.490849][T16466] ipheth 8-1:0.196: Apple iPhone USB Ethernet now disconnected
[ 1009.537470][T14862] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1009.687093][T14862] usb 6-1: Using ep0 maxpacket: 32
[ 1009.690757][T14862] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 1009.690787][T14862] usb 6-1: config 0 has no interface number 0
[ 1009.690837][T14862] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1009.690866][T14862] usb 6-1: config 0 interface 85 has no altsetting 0
[ 1009.735657][T14862] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1009.735690][T14862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.735713][T14862] usb 6-1: Product: syz
[ 1009.735729][T14862] usb 6-1: Manufacturer: syz
[ 1009.735745][T14862] usb 6-1: SerialNumber: syz
[ 1009.770181][T21459] veth0_vlan: entered promiscuous mode
[ 1009.804790][T14862] usb 6-1: config 0 descriptor??
[ 1009.896062][T21693] overlayfs: conflicting lowerdir path
[ 1009.976187][T21701] FAULT_INJECTION: forcing a failure.
[ 1009.976187][T21701] name failslab, interval 1, probability 0, space 0, times 0
[ 1009.976230][T21701] CPU: 1 UID: 0 PID: 21701 Comm: syz.7.5321 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1009.976264][T21701] Tainted: [L]=SOFTLOCKUP
[ 1009.976273][T21701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1009.976287][T21701] Call Trace:
[ 1009.976296][T21701]  <TASK>
[ 1009.976306][T21701]  dump_stack_lvl+0xe8/0x150
[ 1009.976336][T21701]  should_fail_ex+0x467/0x600
[ 1009.976374][T21701]  should_failslab+0xa8/0x100
[ 1009.976402][T21701]  __kvmalloc_node_noprof+0x176/0x880
[ 1009.976430][T21701]  ? __rhashtable_init_noprof+0x54d/0xaf0
[ 1009.976452][T21701]  ? __rhashtable_init_noprof+0x54d/0xaf0
[ 1009.976480][T21701]  __rhashtable_init_noprof+0x54d/0xaf0
[ 1009.976508][T21701]  __rhltable_init_noprof+0x26/0x70
[ 1009.976534][T21701]  nf_tables_newtable+0x6a7/0x1950
[ 1009.976589][T21701]  nfnetlink_rcv+0x1291/0x28d0
[ 1009.976654][T21701]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1009.976700][T21701]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[ 1009.976733][T21701]  ? ref_tracker_free+0x668/0x820
[ 1009.976780][T21701]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1009.976808][T21701]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1009.976858][T21701]  netlink_unicast+0x7f5/0x990
[ 1009.976893][T21701]  netlink_sendmsg+0x813/0xb40
[ 1009.976932][T21701]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1009.976966][T21701]  ? aa_sock_msg_perm+0x122/0x200
[ 1009.977001][T21701]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1009.977028][T21701]  sock_sendmsg_nosec+0x13a/0x180
[ 1009.977053][T21701]  ____sys_sendmsg+0x565/0x870
[ 1009.977080][T21701]  ? __might_fault+0xaf/0x130
[ 1009.977108][T21701]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1009.977141][T21701]  ? import_iovec+0x73/0xa0
[ 1009.977166][T21701]  ___sys_sendmsg+0x2a5/0x360
[ 1009.977191][T21701]  ? __lock_acquire+0x683/0x2ce0
[ 1009.977221][T21701]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1009.977280][T21701]  ? __fget_files+0x2a/0x420
[ 1009.977301][T21701]  ? __fget_files+0x3a8/0x420
[ 1009.977331][T21701]  __x64_sys_sendmsg+0x1b7/0x290
[ 1009.977361][T21701]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1009.977408][T21701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1009.977432][T21701]  do_syscall_64+0x174/0x580
[ 1009.977457][T21701]  ? trace_irq_disable+0x3b/0x140
[ 1009.977486][T21701]  ? clear_bhb_loop+0x40/0x90
[ 1009.977511][T21701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1009.977532][T21701] RIP: 0033:0x7f0be89cce59
[ 1009.977553][T21701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1009.977573][T21701] RSP: 002b:00007f0be6c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1009.977609][T21701] RAX: ffffffffffffffda RBX: 00007f0be8c45fa0 RCX: 00007f0be89cce59
[ 1009.977626][T21701] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[ 1009.977641][T21701] RBP: 00007f0be6c26090 R08: 0000000000000000 R09: 0000000000000000
[ 1009.977655][T21701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1009.977668][T21701] R13: 00007f0be8c46038 R14: 00007f0be8c45fa0 R15: 00007ffdfa4ffbf8
[ 1009.977703][T21701]  </TASK>
[ 1010.052724][T21459] veth1_vlan: entered promiscuous mode
[ 1010.475867][T14862] appletouch 6-1:0.85: Geyser mode initialized.
[ 1010.487527][T14862] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input63
[ 1010.692202][T21681] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5318'.
[ 1010.748013][T21459] veth0_macvtap: entered promiscuous mode
[ 1010.911113][T21459] veth1_macvtap: entered promiscuous mode
[ 1011.048741][ T5718] usb 6-1: USB disconnect, device number 29
[ 1011.076128][T21716] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[ 1011.076128][T21716]    program syz.7.5327 not setting count and/or reply_len properly
[ 1011.153888][T21459] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1011.178410][T21459] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1011.211119][T15035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.211386][T15035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.211430][T15035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.211481][T15035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1011.270159][ T5718] appletouch 6-1:0.85: input: appletouch disconnected
[ 1012.137125][T18826] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1012.342208][T18826] usb 8-1: Using ep0 maxpacket: 32
[ 1012.359492][T18826] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[ 1012.359524][T18826] usb 8-1: config 0 has no interface number 0
[ 1012.359580][T18826] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1012.359604][T18826] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1012.359624][T18826] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1012.359648][T18826] usb 8-1: config 0 interface 196 has no altsetting 0
[ 1012.374296][T18826] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 1012.374328][T18826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.374352][T18826] usb 8-1: Product: syz
[ 1012.374367][T18826] usb 8-1: Manufacturer: syz
[ 1012.374382][T18826] usb 8-1: SerialNumber: syz
[ 1012.536220][T18826] usb 8-1: config 0 descriptor??
[ 1012.543056][T21728] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1013.182016][T21725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5329'.
[ 1013.182049][T21725] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1013.301496][T18826] ipheth 8-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[ 1013.677614][T18826] ipheth 8-1:0.196: Apple iPhone USB Ethernet device attached
[ 1013.746409][T18826] usb 8-1: USB disconnect, device number 6
[ 1013.905859][T21755] netlink: 'syz.2.5335': attribute type 29 has an invalid length.
[ 1014.012533][T21758] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[ 1014.012533][T21758]    program syz.5.5336 not setting count and/or reply_len properly
[ 1014.106144][T21756] netlink: 'syz.2.5335': attribute type 29 has an invalid length.
[ 1014.125193][ T7168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1014.125215][ T7168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1014.200407][T18826] ipheth 8-1:0.196: Apple iPhone USB Ethernet now disconnected
[ 1014.399440][ T8585] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1014.549089][ T8585] usb 3-1: Using ep0 maxpacket: 32
[ 1014.551633][ T8585] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8
[ 1014.551686][ T8585] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1014.551711][ T8585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.573605][ T8585] usb 3-1: config 0 descriptor??
[ 1014.586886][ T8585] hub 3-1:0.0: USB hub found
[ 1014.637738][ T7164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1014.637762][ T7164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1014.779434][  T823] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1014.806851][ T8585] hub 3-1:0.0: 1 port detected
[ 1014.886869][T21772] FAULT_INJECTION: forcing a failure.
[ 1014.886869][T21772] name failslab, interval 1, probability 0, space 0, times 0
[ 1014.887113][T21772] CPU: 0 UID: 0 PID: 21772 Comm: syz.4.5247 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1014.887143][T21772] Tainted: [L]=SOFTLOCKUP
[ 1014.887148][T21772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1014.887156][T21772] Call Trace:
[ 1014.887161][T21772]  <TASK>
[ 1014.887167][T21772]  dump_stack_lvl+0xe8/0x150
[ 1014.887188][T21772]  should_fail_ex+0x467/0x600
[ 1014.887237][T21772]  should_failslab+0xa8/0x100
[ 1014.887254][T21772]  __kmalloc_noprof+0xfb/0x790
[ 1014.887268][T21772]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1014.887288][T21772]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1014.887311][T21772]  tomoyo_realpath_from_path+0xef/0x640
[ 1014.887335][T21772]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1014.887351][T21772]  tomoyo_path_number_perm+0x246/0x5f0
[ 1014.887368][T21772]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1014.887390][T21772]  ? __lock_acquire+0x683/0x2ce0
[ 1014.887423][T21772]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1014.887440][T21772]  ? hook_file_ioctl+0x1f3/0x600
[ 1014.887459][T21772]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1014.887486][T21772]  ? __fget_files+0x2a/0x420
[ 1014.887502][T21772]  ? __fget_files+0x2a/0x420
[ 1014.887514][T21772]  ? __fget_files+0x3a8/0x420
[ 1014.887527][T21772]  ? __fget_files+0x2a/0x420
[ 1014.887543][T21772]  security_file_ioctl+0xc3/0x2a0
[ 1014.887559][T21772]  __se_sys_ioctl+0x47/0x170
[ 1014.887576][T21772]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.887590][T21772]  do_syscall_64+0x174/0x580
[ 1014.887606][T21772]  ? trace_irq_disable+0x3b/0x140
[ 1014.887627][T21772]  ? clear_bhb_loop+0x40/0x90
[ 1014.887652][T21772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.887673][T21772] RIP: 0033:0x7f698e3ace59
[ 1014.887693][T21772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1014.887704][T21772] RSP: 002b:00007f698c5fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1014.887719][T21772] RAX: ffffffffffffffda RBX: 00007f698e625fa0 RCX: 00007f698e3ace59
[ 1014.887728][T21772] RDX: 0000000000000000 RSI: 0000000080047453 RDI: 0000000000000004
[ 1014.887736][T21772] RBP: 00007f698c5fe090 R08: 0000000000000000 R09: 0000000000000000
[ 1014.887745][T21772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1014.887753][T21772] R13: 00007f698e626038 R14: 00007f698e625fa0 R15: 00007ffcc51ec2c8
[ 1014.887772][T21772]  </TASK>
[ 1014.887827][T21772] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1015.008581][  T823] usb 8-1: Using ep0 maxpacket: 32
[ 1015.292071][  T823] usb 8-1: config 0 has an invalid interface number: 85 but max is 0
[ 1015.292104][  T823] usb 8-1: config 0 has no interface number 0
[ 1015.292155][  T823] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1015.292185][  T823] usb 8-1: config 0 interface 85 has no altsetting 0
[ 1015.331371][  T823] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1015.331404][  T823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1015.331425][  T823] usb 8-1: Product: syz
[ 1015.331442][  T823] usb 8-1: Manufacturer: syz
[ 1015.331458][  T823] usb 8-1: SerialNumber: syz
[ 1015.361539][  T823] usb 8-1: config 0 descriptor??
[ 1015.720188][T21785] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5344'.
[ 1015.754382][T21755] netlink: 'syz.2.5335': attribute type 2 has an invalid length.
[ 1015.852309][   T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[ 1015.852343][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1015.852382][   T60] Tainted: [L]=SOFTLOCKUP
[ 1015.852392][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1015.852407][   T60] Workqueue: hci1 hci_rx_work
[ 1015.852445][   T60] Call Trace:
[ 1015.852455][   T60]  <TASK>
[ 1015.852466][   T60]  dump_stack_lvl+0xe8/0x150
[ 1015.852498][   T60]  sysfs_create_dir_ns+0x271/0x2a0
[ 1015.852527][   T60]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1015.852568][   T60]  ? rt_spin_unlock+0x163/0x200
[ 1015.852597][   T60]  kobject_add_internal+0x62c/0xce0
[ 1015.852642][   T60]  kobject_add+0x163/0x240
[ 1015.852675][   T60]  ? rt_spin_unlock+0x157/0x200
[ 1015.852704][   T60]  ? __pfx_kobject_add+0x10/0x10
[ 1015.852747][   T60]  ? get_device_parent+0x370/0x3a0
[ 1015.852782][   T60]  device_add+0x3fa/0xb80
[ 1015.852815][   T60]  hci_conn_add_sysfs+0xd5/0x210
[ 1015.852848][   T60]  le_conn_complete_evt+0xfef/0x1580
[ 1015.852904][   T60]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1015.852939][   T60]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1015.852969][   T60]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1015.852999][   T60]  ? rt_mutex_slowunlock+0x219/0x460
[ 1015.853024][   T60]  ? skb_pull_data+0xf0/0x200
[ 1015.853063][   T60]  hci_le_conn_complete_evt+0x187/0x470
[ 1015.853107][   T60]  hci_event_packet+0x67a/0xf10
[ 1015.853145][   T60]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1015.853177][   T60]  ? __pfx_hci_event_packet+0x10/0x10
[ 1015.853207][   T60]  ? rt_spin_unlock+0x157/0x200
[ 1015.853241][   T60]  ? hci_send_to_monitor+0xe2/0x590
[ 1015.853270][   T60]  hci_rx_work+0x3ee/0x1020
[ 1015.853312][   T60]  ? process_one_work+0x8cd/0x12b0
[ 1015.853346][   T60]  process_one_work+0x93a/0x12b0
[ 1015.853400][   T60]  ? __pfx_process_one_work+0x10/0x10
[ 1015.853432][   T60]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1015.853467][   T60]  ? assign_work+0x3cf/0x5d0
[ 1015.853508][   T60]  worker_thread+0xb05/0x10d0
[ 1015.853586][   T60]  kthread+0x388/0x470
[ 1015.853615][   T60]  ? __pfx_worker_thread+0x10/0x10
[ 1015.853648][   T60]  ? __pfx_kthread+0x10/0x10
[ 1015.853677][   T60]  ret_from_fork+0x514/0xb70
[ 1015.853708][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[ 1015.853732][   T60]  ? __switch_to+0xc89/0x1420
[ 1015.853756][   T60]  ? __pfx_kthread+0x10/0x10
[ 1015.853783][   T60]  ret_from_fork_asm+0x1a/0x30
[ 1015.853827][   T60]  </TASK>
[ 1015.853929][   T60] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1015.853973][   T60] Bluetooth: hci1: failed to register connection device
[ 1016.319240][  T823] appletouch 8-1:0.85: Geyser mode initialized.
[ 1016.319786][ T8585] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1016.320121][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[ 1016.397386][ T5718] usb 3-1: USB disconnect, device number 17
[ 1016.397726][T18826] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 1016.400622][  T823] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input64
[ 1016.467020][ T8585] usb 6-1: device descriptor read/64, error -32
[ 1016.594702][T14862] usb 8-1: USB disconnect, device number 7
[ 1016.613764][T21789] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[ 1016.613764][T21789]    program syz.4.5345 not setting count and/or reply_len properly
[ 1016.697226][ T8585] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1016.719626][T14862] appletouch 8-1:0.85: input: appletouch disconnected
[ 1016.861754][ T8585] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[ 1016.861789][ T8585] usb 6-1: config 0 has no interface number 0
[ 1016.861840][ T8585] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 1016.861870][ T8585] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1016.865113][ T8585] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 1016.865146][ T8585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.865168][ T8585] usb 6-1: Product: syz
[ 1016.865185][ T8585] usb 6-1: Manufacturer: syz
[ 1016.865201][ T8585] usb 6-1: SerialNumber: syz
[ 1016.882997][ T8585] usb 6-1: config 0 descriptor??
[ 1016.884090][T21785] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1016.890643][ T8585] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 1016.956605][ T8585] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1017.094532][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[ 1017.295506][T21785] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1017.455418][T21785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5344'.
[ 1017.507108][ T5718] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[ 1017.658603][  T823] usb 6-1: USB disconnect, device number 31
[ 1017.678655][ T5718] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1017.678686][ T5718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.678707][ T5718] usb 8-1: Product: syz
[ 1017.678722][ T5718] usb 8-1: Manufacturer: syz
[ 1017.678739][ T5718] usb 8-1: SerialNumber: syz
[ 1017.743487][  T823] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1017.745923][ T5718] usb 8-1: config 0 descriptor??
[ 1017.775316][  T823] cyberjack 6-1:0.69: device disconnected
[ 1018.012283][ T5718] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1018.167878][T21813] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[ 1018.167878][T21813]    program syz.4.5354 not setting count and/or reply_len properly
[ 1018.214270][T21797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1018.214940][T21797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1018.367431][T14862] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1018.765506][T21797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1018.766376][T21797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1019.137778][ T8585] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[ 1019.330918][ T8585] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1019.330954][ T8585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.330977][ T8585] usb 6-1: Product: syz
[ 1019.330992][ T8585] usb 6-1: Manufacturer: syz
[ 1019.331008][ T8585] usb 6-1: SerialNumber: syz
[ 1019.363707][ T8585] usb 6-1: config 0 descriptor??
[ 1019.507177][ T5694] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1019.587162][ T8585] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1019.677154][ T5694] usb 5-1: Using ep0 maxpacket: 32
[ 1019.688928][ T5694] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[ 1019.688962][ T5694] usb 5-1: config 0 has no interface number 0
[ 1019.689582][ T5694] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1019.689616][ T5694] usb 5-1: config 0 interface 85 has no altsetting 0
[ 1019.727812][ T5694] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1019.728245][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.728272][ T5694] usb 5-1: Product: syz
[ 1019.728289][ T5694] usb 5-1: Manufacturer: syz
[ 1019.728306][ T5694] usb 5-1: SerialNumber: syz
[ 1019.769614][ T5694] usb 5-1: config 0 descriptor??
[ 1019.966571][ T5718] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1019.983562][ T5718] usb 8-1: USB disconnect, device number 8
[ 1020.195478][T21815] netlink: 'syz.5.5355': attribute type 10 has an invalid length.
[ 1020.241165][T21815] team0: Device veth0_vlan failed to register rx_handler
[ 1020.460331][ T5694] appletouch 5-1:0.85: Geyser mode initialized.
[ 1020.595761][ T5694] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input65
[ 1020.705355][T21834] netlink: 'syz.7.5363': attribute type 2 has an invalid length.
[ 1020.747550][T14862] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1020.852147][T21836] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in;
[ 1020.852147][T21836]    program syz.7.5364 not setting count and/or reply_len properly
[ 1020.907092][T14862] usb 3-1: Using ep0 maxpacket: 32
[ 1020.912821][T14862] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[ 1020.912852][T14862] usb 3-1: config 0 has no interface number 0
[ 1020.912901][T14862] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1020.912928][T14862] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1020.912951][T14862] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1020.912976][T14862] usb 3-1: config 0 interface 196 has no altsetting 0
[ 1020.977784][T14862] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 1020.977821][T14862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.977843][T14862] usb 3-1: Product: syz
[ 1020.977859][T14862] usb 3-1: Manufacturer: syz
[ 1020.977875][T14862] usb 3-1: SerialNumber: syz
[ 1021.021406][T14862] usb 3-1: config 0 descriptor??
[ 1021.022562][T21832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1021.079138][ T5694] usb 5-1: USB disconnect, device number 13
[ 1021.594726][ T5694] appletouch 5-1:0.85: input: appletouch disconnected
[ 1021.653766][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5362'.
[ 1021.653801][T21832] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1021.735069][ T8585] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1021.774810][T14862] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[ 1021.835016][T14862] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[ 1021.835383][ T8585] usb 6-1: USB disconnect, device number 32
[ 1022.029562][T14862] usb 3-1: USB disconnect, device number 19
[ 1022.148237][T21848] input: syz0 as /devices/virtual/input/input66
[ 1022.208523][T14862] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[ 1023.107210][T16466] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1023.259440][T16466] usb 5-1: Using ep0 maxpacket: 32
[ 1023.278542][T16466] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[ 1023.278574][T16466] usb 5-1: config 0 has no interface number 0
[ 1023.278625][T16466] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1023.278655][T16466] usb 5-1: config 0 interface 85 has no altsetting 0
[ 1023.332135][T16466] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1023.332170][T16466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.332194][T16466] usb 5-1: Product: syz
[ 1023.332209][T16466] usb 5-1: Manufacturer: syz
[ 1023.332226][T16466] usb 5-1: SerialNumber: syz
[ 1023.376486][T16466] usb 5-1: config 0 descriptor??
[ 1024.102505][T16466] appletouch 5-1:0.85: Geyser mode initialized.
[ 1024.109925][T16466] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input67
[ 1024.271025][   T60] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1024.274171][ T8585] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1024.274199][ T8585] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[ 1024.341459][ T5778] usb 5-1: USB disconnect, device number 14
[ 1024.341621][    C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19
[ 1024.494629][ T5778] appletouch 5-1:0.85: input: appletouch disconnected
[ 1025.107194][ T5778] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1025.257158][ T5778] usb 3-1: Using ep0 maxpacket: 16
[ 1025.260167][ T5778] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1025.261761][ T5778] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1025.261786][ T5778] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1025.262110][ T5778] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1025.262140][ T5778] usb 3-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0
[ 1025.265658][ T5778] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1025.265689][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.265711][ T5778] usb 3-1: Product: syz
[ 1025.265728][ T5778] usb 3-1: Manufacturer: syz
[ 1025.265744][ T5778] usb 3-1: SerialNumber: syz
[ 1025.430221][T21920] FAULT_INJECTION: forcing a failure.
[ 1025.430221][T21920] name failslab, interval 1, probability 0, space 0, times 0
[ 1025.430257][T21920] CPU: 1 UID: 0 PID: 21920 Comm: syz.4.5398 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1025.430284][T21920] Tainted: [L]=SOFTLOCKUP
[ 1025.430290][T21920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1025.430300][T21920] Call Trace:
[ 1025.430308][T21920]  <TASK>
[ 1025.430315][T21920]  dump_stack_lvl+0xe8/0x150
[ 1025.430343][T21920]  should_fail_ex+0x467/0x600
[ 1025.430388][T21920]  should_failslab+0xa8/0x100
[ 1025.430411][T21920]  __kmalloc_cache_noprof+0xa1/0x670
[ 1025.430431][T21920]  ? binder_alloc_new_buf+0x1ffe/0x31f0
[ 1025.430455][T21920]  ? binder_alloc_new_buf+0x1ffe/0x31f0
[ 1025.430479][T21920]  binder_alloc_new_buf+0x1ffe/0x31f0
[ 1025.430524][T21920]  ? __pfx_binder_alloc_new_buf+0x10/0x10
[ 1025.430540][T21920]  ? __kmalloc_cache_noprof+0x3cd/0x670
[ 1025.430560][T21920]  ? binder_transaction+0x20db/0x7010
[ 1025.430585][T21920]  ? binder_transaction+0x20db/0x7010
[ 1025.430617][T21920]  binder_transaction+0x28be/0x7010
[ 1025.430663][T21920]  ? unwind_get_return_address+0x4d/0x90
[ 1025.430706][T21920]  ? __pfx_binder_transaction+0x10/0x10
[ 1025.430729][T21920]  ? __lock_acquire+0x683/0x2ce0
[ 1025.430760][T21920]  ? __lock_acquire+0x683/0x2ce0
[ 1025.430794][T21920]  ? __lock_acquire+0x683/0x2ce0
[ 1025.430826][T21920]  ? __lock_acquire+0x683/0x2ce0
[ 1025.430855][T21920]  ? __lock_acquire+0x683/0x2ce0
[ 1025.430882][T21920]  ? __might_fault+0xaf/0x130
[ 1025.430902][T21920]  ? __might_fault+0xaf/0x130
[ 1025.430944][T21920]  binder_ioctl_write_read+0xb5c/0xa5d0
[ 1025.431004][T21920]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[ 1025.431028][T21920]  ? ktime_expiry_to_cycles+0x4e/0x1e0
[ 1025.431050][T21920]  ? lock_acquire+0x106/0x350
[ 1025.431077][T21920]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1025.431112][T21920]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1025.431145][T21920]  ? reacquire_held_locks+0x104/0x190
[ 1025.431185][T21920]  ? rt_spin_unlock+0x157/0x200
[ 1025.431212][T21920]  ? binder_get_thread+0x176/0x6d0
[ 1025.431232][T21920]  ? binder_ioctl+0x189/0x1b10
[ 1025.431262][T21920]  binder_ioctl+0x420/0x1b10
[ 1025.431283][T21920]  ? do_vfs_ioctl+0xcc7/0x1550
[ 1025.431310][T21920]  ? do_vfs_ioctl+0x116e/0x1550
[ 1025.431338][T21920]  ? do_vfs_ioctl+0x1184/0x1550
[ 1025.431360][T21920]  ? __pfx_binder_ioctl+0x10/0x10
[ 1025.431388][T21920]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1025.431427][T21920]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1025.431447][T21920]  ? hook_file_ioctl+0x1f3/0x600
[ 1025.431470][T21920]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1025.431512][T21920]  ? __fget_files+0x2a/0x420
[ 1025.431536][T21920]  ? __fget_files+0x2a/0x420
[ 1025.431558][T21920]  ? __fget_files+0x3a8/0x420
[ 1025.431575][T21920]  ? __fget_files+0x2a/0x420
[ 1025.431597][T21920]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1025.431619][T21920]  ? __pfx_binder_ioctl+0x10/0x10
[ 1025.431638][T21920]  __se_sys_ioctl+0xff/0x170
[ 1025.431661][T21920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.431680][T21920]  do_syscall_64+0x174/0x580
[ 1025.431702][T21920]  ? trace_irq_disable+0x3b/0x140
[ 1025.431723][T21920]  ? clear_bhb_loop+0x40/0x90
[ 1025.431753][T21920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.431771][T21920] RIP: 0033:0x7f698e3ace59
[ 1025.431788][T21920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1025.431803][T21920] RSP: 002b:00007f698c5dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1025.431827][T21920] RAX: ffffffffffffffda RBX: 00007f698e626090 RCX: 00007f698e3ace59
[ 1025.431841][T21920] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004
[ 1025.431854][T21920] RBP: 00007f698c5dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1025.431867][T21920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1025.431879][T21920] R13: 00007f698e626128 R14: 00007f698e626090 R15: 00007ffcc51ec2c8
[ 1025.431912][T21920]  </TASK>
[ 1025.682753][T21908] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5393'.
[ 1025.897594][ T5778] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 1025.897652][ T5778] cdc_ncm 3-1:1.0: bind() failure
[ 1025.981101][ T5778] usb 3-1: USB disconnect, device number 20
[ 1026.188332][T21933] FAULT_INJECTION: forcing a failure.
[ 1026.188332][T21933] name failslab, interval 1, probability 0, space 0, times 0
[ 1026.188373][T21933] CPU: 0 UID: 0 PID: 21933 Comm: syz.7.5404 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1026.188403][T21933] Tainted: [L]=SOFTLOCKUP
[ 1026.188412][T21933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1026.188426][T21933] Call Trace:
[ 1026.188434][T21933]  <TASK>
[ 1026.188444][T21933]  dump_stack_lvl+0xe8/0x150
[ 1026.188476][T21933]  should_fail_ex+0x467/0x600
[ 1026.188517][T21933]  should_failslab+0xa8/0x100
[ 1026.188548][T21933]  __kmalloc_noprof+0xfb/0x790
[ 1026.188571][T21933]  ? __kasan_kmalloc+0x93/0xb0
[ 1026.188593][T21933]  ? drm_atomic_commit_init+0x9e/0x370
[ 1026.188622][T21933]  ? drm_atomic_commit_init+0x9e/0x370
[ 1026.188656][T21933]  ? drm_lease_held+0x185/0x290
[ 1026.188690][T21933]  drm_atomic_commit_init+0x9e/0x370
[ 1026.188724][T21933]  drm_atomic_commit_alloc+0xbc/0x100
[ 1026.188756][T21933]  drm_atomic_helper_disable_plane+0x41/0x200
[ 1026.188850][T21933]  drm_mode_cursor_common+0xd94/0x15e0
[ 1026.188930][T21933]  ? __pfx_drm_mode_cursor_common+0x10/0x10
[ 1026.188976][T21933]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1026.189019][T21933]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1026.189046][T21933]  ? rt_mutex_slowunlock+0x4ee/0xa20
[ 1026.189071][T21933]  ? drm_mode_cursor_ioctl+0xbb/0x130
[ 1026.189106][T21933]  drm_mode_cursor_ioctl+0xd4/0x130
[ 1026.189140][T21933]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[ 1026.189185][T21933]  ? rt_spin_unlock+0x163/0x200
[ 1026.189212][T21933]  ? drm_is_current_master+0x1a2/0x210
[ 1026.189238][T21933]  drm_ioctl_kernel+0x2e2/0x3b0
[ 1026.189272][T21933]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[ 1026.189304][T21933]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 1026.189345][T21933]  drm_ioctl+0x713/0xba0
[ 1026.189385][T21933]  ? __pfx_drm_mode_cursor_ioctl+0x10/0x10
[ 1026.189416][T21933]  ? __pfx_drm_ioctl+0x10/0x10
[ 1026.189459][T21933]  ? __fget_files+0x2a/0x420
[ 1026.189489][T21933]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1026.189517][T21933]  ? __pfx_drm_ioctl+0x10/0x10
[ 1026.189547][T21933]  __se_sys_ioctl+0xff/0x170
[ 1026.189577][T21933]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.189603][T21933]  do_syscall_64+0x174/0x580
[ 1026.189631][T21933]  ? trace_irq_disable+0x3b/0x140
[ 1026.189659][T21933]  ? clear_bhb_loop+0x40/0x90
[ 1026.189684][T21933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.189705][T21933] RIP: 0033:0x7f0be89cce59
[ 1026.189726][T21933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1026.189745][T21933] RSP: 002b:00007f0be6c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1026.189770][T21933] RAX: ffffffffffffffda RBX: 00007f0be8c45fa0 RCX: 00007f0be89cce59
[ 1026.189786][T21933] RDX: 0000200000001880 RSI: 00000000c01c64a3 RDI: 0000000000000003
[ 1026.189800][T21933] RBP: 00007f0be6c26090 R08: 0000000000000000 R09: 0000000000000000
[ 1026.189814][T21933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1026.189827][T21933] R13: 00007f0be8c46038 R14: 00007f0be8c45fa0 R15: 00007ffdfa4ffbf8
[ 1026.189865][T21933]  </TASK>
[ 1027.067110][T18826] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1027.200702][T21960] FAULT_INJECTION: forcing a failure.
[ 1027.200702][T21960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1027.200744][T21960] CPU: 0 UID: 0 PID: 21960 Comm: syz.7.5416 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1027.200775][T21960] Tainted: [L]=SOFTLOCKUP
[ 1027.200784][T21960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1027.200797][T21960] Call Trace:
[ 1027.200806][T21960]  <TASK>
[ 1027.200817][T21960]  dump_stack_lvl+0xe8/0x150
[ 1027.200848][T21960]  should_fail_ex+0x467/0x600
[ 1027.200888][T21960]  _copy_from_iter+0x1d3/0x1660
[ 1027.200920][T21960]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1027.200947][T21960]  ? __pfx__copy_from_iter+0x10/0x10
[ 1027.200969][T21960]  ? __alloc_skb+0x276/0x7a0
[ 1027.200995][T21960]  ? __alloc_skb+0x276/0x7a0
[ 1027.201027][T21960]  ? netlink_sendmsg+0x650/0xb40
[ 1027.201058][T21960]  ? skb_put+0x112/0x210
[ 1027.201088][T21960]  netlink_sendmsg+0x6c0/0xb40
[ 1027.201130][T21960]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1027.201165][T21960]  ? aa_sock_msg_perm+0x122/0x200
[ 1027.201204][T21960]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1027.201234][T21960]  sock_sendmsg_nosec+0x13a/0x180
[ 1027.201261][T21960]  ____sys_sendmsg+0x565/0x870
[ 1027.201291][T21960]  ? __might_fault+0xaf/0x130
[ 1027.201322][T21960]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1027.201370][T21960]  ? import_iovec+0x73/0xa0
[ 1027.201400][T21960]  ___sys_sendmsg+0x2a5/0x360
[ 1027.201428][T21960]  ? __lock_acquire+0x683/0x2ce0
[ 1027.201464][T21960]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1027.201531][T21960]  ? __fget_files+0x2a/0x420
[ 1027.201555][T21960]  ? __fget_files+0x3a8/0x420
[ 1027.201588][T21960]  __x64_sys_sendmsg+0x1b7/0x290
[ 1027.201621][T21960]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1027.201673][T21960]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1027.201698][T21960]  do_syscall_64+0x174/0x580
[ 1027.201725][T21960]  ? trace_irq_disable+0x3b/0x140
[ 1027.201754][T21960]  ? clear_bhb_loop+0x40/0x90
[ 1027.201781][T21960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1027.201804][T21960] RIP: 0033:0x7f0be89cce59
[ 1027.201826][T21960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1027.201844][T21960] RSP: 002b:00007f0be6c26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1027.201868][T21960] RAX: ffffffffffffffda RBX: 00007f0be8c45fa0 RCX: 00007f0be89cce59
[ 1027.201885][T21960] RDX: 0000000000000010 RSI: 00002000000007c0 RDI: 0000000000000003
[ 1027.201899][T21960] RBP: 00007f0be6c26090 R08: 0000000000000000 R09: 0000000000000000
[ 1027.201913][T21960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1027.201926][T21960] R13: 00007f0be8c46038 R14: 00007f0be8c45fa0 R15: 00007ffdfa4ffbf8
[ 1027.201961][T21960]  </TASK>
[ 1027.223217][T18826] usb 3-1: Using ep0 maxpacket: 16
[ 1027.398324][T18826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1027.399169][T18826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1027.399202][T18826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1027.399228][T18826] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1027.399275][T18826] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[ 1027.399302][T18826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.600314][T18826] usb 3-1: config 0 descriptor??
[ 1027.829505][T21952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1027.836197][T21952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1028.097749][ T5718] usb 8-1: new low-speed USB device number 9 using dummy_hcd
[ 1028.155998][T18826] nintendo 0003:057E:2019.001E: unknown main item tag 0x0
[ 1028.156039][T18826] nintendo 0003:057E:2019.001E: unknown main item tag 0x0
[ 1028.156066][T18826] nintendo 0003:057E:2019.001E: unknown main item tag 0x0
[ 1028.156094][T18826] nintendo 0003:057E:2019.001E: unknown main item tag 0x0
[ 1028.156119][T18826] nintendo 0003:057E:2019.001E: unknown main item tag 0x0
[ 1028.185905][   T60] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1028.200088][ T8585] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[ 1028.200113][ T8585] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[ 1028.229377][T18826] nintendo 0003:057E:2019.001E: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0
[ 1028.247394][ T5718] usb 8-1: Invalid ep0 maxpacket: 64
[ 1028.299062][T18826] nintendo 0003:057E:2019.001E: Failed to get joycon info; ret=-38
[ 1028.299138][T18826] nintendo 0003:057E:2019.001E: Failed to retrieve controller info; ret=-38
[ 1028.299159][T18826] nintendo 0003:057E:2019.001E: Failed to initialize controller; ret=-38
[ 1028.382740][ T5718] usb 8-1: new low-speed USB device number 10 using dummy_hcd
[ 1028.450264][T18826] nintendo 0003:057E:2019.001E: probe - fail = -38
[ 1028.450440][T18826] nintendo 0003:057E:2019.001E: probe with driver nintendo failed with error -38
[ 1028.473783][T18826] usb 3-1: USB disconnect, device number 21
[ 1028.547105][ T5718] usb 8-1: Invalid ep0 maxpacket: 64
[ 1028.548296][ T5718] usb usb8-port1: attempt power cycle
[ 1028.662802][ T8585] =========================================================[ 1028.662802][ T8585] ==================================================================
[ 1028.662821][ T8585] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400
[ 1028.662862][ T8585] Read of size 1 at addr ffff888034ab87e8 by task kworker/0:8/8585
[ 1028.662880][ T8585] 
[ 1028.662896][ T8585] CPU: 0 UID: 0 PID: 8585 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1028.662927][ T8585] Tainted: [L]=SOFTLOCKUP
[ 1028.662935][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1028.662949][ T8585] Workqueue: events rfkill_op_handler
[ 1028.662983][ T8585] Call Trace:
[ 1028.662993][ T8585]  <TASK>
[ 1028.663002][ T8585]  dump_stack_lvl+0xe8/0x150
[ 1028.663028][ T8585]  print_address_description+0x55/0x1e0
[ 1028.663124][ T8585]  ? rt_spin_lock+0x83/0x400
[ 1028.663141][ T8585]  print_report+0x58/0x70
[ 1028.663164][ T8585]  kasan_report+0x117/0x150
[ 1028.663191][ T8585]  ? rt_spin_lock+0x83/0x400
[ 1028.663214][ T8585]  ? bt_accept_unlink+0x7d/0x2f0
[ 1028.663243][ T8585]  __kasan_check_byte+0x2a/0x40
[ 1028.663267][ T8585]  lock_acquire+0x84/0x350
[ 1028.663297][ T8585]  ? __local_bh_disable_ip+0x3c/0x420
[ 1028.663330][ T8585]  rt_spin_lock+0x83/0x400
[ 1028.663349][ T8585]  ? bt_accept_unlink+0x7d/0x2f0
[ 1028.663377][ T8585]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1028.663396][ T8585]  ? rcu_is_watching+0x15/0xb0
[ 1028.663425][ T8585]  ? __local_bh_disable_ip+0x3c/0x420
[ 1028.663457][ T8585]  ? bt_accept_unlink+0x61/0x2f0
[ 1028.663486][ T8585]  bt_accept_unlink+0x7d/0x2f0
[ 1028.663515][ T8585]  ? bt_accept_unlink+0x61/0x2f0
[ 1028.663544][ T8585]  l2cap_sock_teardown_cb+0x17e/0x490
[ 1028.663604][ T8585]  l2cap_chan_del+0x98/0x600
[ 1028.663632][ T8585]  l2cap_conn_del+0x2f2/0x520
[ 1028.663657][ T8585]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[ 1028.663679][ T8585]  hci_conn_hash_flush+0x105/0x260
[ 1028.663704][ T8585]  hci_dev_close_sync+0x7fc/0x10a0
[ 1028.663741][ T8585]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1028.663768][ T8585]  ? __pfx_hci_dev_close_sync+0x10/0x10
[ 1028.663800][ T8585]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1028.663826][ T8585]  ? hci_dev_do_close+0x28/0xc0
[ 1028.663868][ T8585]  hci_dev_do_close+0x30/0xc0
[ 1028.663899][ T8585]  hci_rfkill_set_block+0x1f4/0x290
[ 1028.663929][ T8585]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[ 1028.663957][ T8585]  rfkill_set_block+0x1c1/0x4f0
[ 1028.663983][ T8585]  ? process_one_work+0x8cd/0x12b0
[ 1028.664008][ T8585]  rfkill_epo+0x7e/0x180
[ 1028.664021][ T8585]  rfkill_op_handler+0x84/0x240
[ 1028.664037][ T8585]  process_one_work+0x93a/0x12b0
[ 1028.664059][ T8585]  ? __pfx_process_one_work+0x10/0x10
[ 1028.664076][ T8585]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1028.664091][ T8585]  ? assign_work+0x3cf/0x5d0
[ 1028.664109][ T8585]  worker_thread+0xb05/0x10d0
[ 1028.664130][ T8585]  ? __kthread_parkme+0x71/0x1f0
[ 1028.664144][ T8585]  kthread+0x388/0x470
[ 1028.664157][ T8585]  ? __pfx_worker_thread+0x10/0x10
[ 1028.664175][ T8585]  ? __pfx_kthread+0x10/0x10
[ 1028.664188][ T8585]  ret_from_fork+0x514/0xb70
[ 1028.664204][ T8585]  ? __pfx_ret_from_fork+0x10/0x10
[ 1028.664218][ T8585]  ? __switch_to+0xc89/0x1420
[ 1028.664230][ T8585]  ? __pfx_kthread+0x10/0x10
[ 1028.664244][ T8585]  ret_from_fork_asm+0x1a/0x30
[ 1028.664263][ T8585]  </TASK>
[ 1028.664268][ T8585] 
[ 1028.664272][ T8585] Allocated by task 15035:
[ 1028.664279][ T8585]  kasan_save_track+0x3e/0x80
[ 1028.664299][ T8585]  __kasan_kmalloc+0x93/0xb0
[ 1028.664317][ T8585]  __kmalloc_node_track_caller_noprof+0x566/0x7b0
[ 1028.664338][ T8585]  __alloc_skb+0x2bd/0x7a0
[ 1028.664351][ T8585]  nsim_dev_trap_report_work+0x2b1/0xcb0
[ 1028.664369][ T8585]  process_one_work+0x93a/0x12b0
[ 1028.664385][ T8585]  worker_thread+0xb05/0x10d0
[ 1028.664401][ T8585]  kthread+0x388/0x470
[ 1028.664413][ T8585]  ret_from_fork+0x514/0xb70
[ 1028.664425][ T8585]  ret_from_fork_asm+0x1a/0x30
[ 1028.664437][ T8585] 
[ 1028.664440][ T8585] Freed by task 15035:
[ 1028.664446][ T8585]  kasan_save_track+0x3e/0x80
[ 1028.664457][ T8585]  kasan_save_free_info+0x40/0x50
[ 1028.664472][ T8585]  __kasan_slab_free+0x5c/0x80
[ 1028.664483][ T8585]  kfree+0x1c5/0x6c0
[ 1028.664496][ T8585]  skb_release_data+0x85e/0xab0
[ 1028.664518][ T8585]  __kfree_skb+0x5d/0x210
[ 1028.664540][ T8585]  nsim_dev_trap_report_work+0x879/0xcb0
[ 1028.664567][ T8585]  process_one_work+0x93a/0x12b0
[ 1028.664593][ T8585]  worker_thread+0xb05/0x10d0
[ 1028.664618][ T8585]  kthread+0x388/0x470
[ 1028.664630][ T8585]  ret_from_fork+0x514/0xb70
[ 1028.664641][ T8585]  ret_from_fork_asm+0x1a/0x30
[ 1028.664654][ T8585] 
[ 1028.664658][ T8585] The buggy address belongs to the object at ffff888034ab8000
[ 1028.664658][ T8585]  which belongs to the cache kmalloc-4k of size 4096
[ 1028.664669][ T8585] The buggy address is located 2024 bytes inside of
[ 1028.664669][ T8585]  freed 4096-byte region [ffff888034ab8000, ffff888034ab9000)
[ 1028.664682][ T8585] 
[ 1028.664686][ T8585] The buggy address belongs to the physical page:
[ 1028.664719][ T8585] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34ab8
[ 1028.664732][ T8585] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1028.664742][ T8585] flags: 0x80000000000040(head|node=0|zone=1)
[ 1028.664753][ T8585] page_type: f5(slab)
[ 1028.664764][ T8585] raw: 0080000000000040 ffff88813feaa140 dead000000000100 dead000000000122
[ 1028.664775][ T8585] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1028.664786][ T8585] head: 0080000000000040 ffff88813feaa140 dead000000000100 dead000000000122
[ 1028.664797][ T8585] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[ 1028.664807][ T8585] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1028.664817][ T8585] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 1028.664824][ T8585] page dumped because: kasan: bad access detected
[ 1028.664837][ T8585] page_owner tracks the page as allocated
[ 1028.664842][ T8585] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 22641042937
[ 1028.664862][ T8585]  post_alloc_hook+0x1f9/0x250
[ 1028.664874][ T8585]  get_page_from_freelist+0x264c/0x26c0
[ 1028.664888][ T8585]  __alloc_frozen_pages_noprof+0x1a6/0x390
[ 1028.664901][ T8585]  allocate_slab+0x79/0x5e0
[ 1028.664916][ T8585]  refill_objects+0x2d8/0x350
[ 1028.664932][ T8585]  __pcs_replace_empty_main+0x330/0x690
[ 1028.664946][ T8585]  __kmalloc_cache_noprof+0x467/0x670
[ 1028.664958][ T8585]  kobject_uevent_env+0x28c/0x9e0
[ 1028.664970][ T8585]  kernel_add_sysfs_param+0xb1/0xe0
[ 1028.665041][ T8585]  param_sysfs_builtin+0x199/0x250
[ 1028.665053][ T8585]  param_sysfs_builtin_init+0x23/0x30
[ 1028.665064][ T8585]  do_one_initcall+0x250/0x870
[ 1028.665077][ T8585]  do_initcall_level+0x10a/0x1a0
[ 1028.665120][ T8585]  do_initcalls+0x59/0xa0
[ 1028.665132][ T8585]  kernel_init_freeable+0x29d/0x3e0
[ 1028.665145][ T8585]  kernel_init+0x1d/0x1d0
[ 1028.665161][ T8585] page last free pid 199 tgid 199 ts 22598895923 stack trace:
[ 1028.665170][ T8585]  free_pages_prepare+0x935/0xa30
[ 1028.665180][ T8585]  __free_contig_range_common+0x174/0x340
[ 1028.665195][ T8585]  free_pages_bulk+0x48/0x120
[ 1028.665207][ T8585]  vfree+0x26f/0x510
[ 1028.665216][ T8585]  delayed_vfree_work+0x55/0x80
[ 1028.665228][ T8585]  process_one_work+0x93a/0x12b0
[ 1028.665243][ T8585]  worker_thread+0xb05/0x10d0
[ 1028.665259][ T8585]  kthread+0x388/0x470
[ 1028.665271][ T8585]  ret_from_fork+0x514/0xb70
[ 1028.665283][ T8585]  ret_from_fork_asm+0x1a/0x30
[ 1028.665296][ T8585] 
[ 1028.665299][ T8585] Memory state around the buggy address:
[ 1028.665306][ T8585]  ffff888034ab8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1028.665314][ T8585]  ffff888034ab8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1028.665323][ T8585] >ffff888034ab8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1028.665331][ T8585]                                                           ^
[ 1028.665340][ T8585]  ffff888034ab8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1028.665348][ T8585]  ffff888034ab8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1028.665354][ T8585] ==================================================================
[ 1028.672281][ T8585] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1028.672304][ T8585] CPU: 0 UID: 0 PID: 8585 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1028.672333][ T8585] Tainted: [L]=SOFTLOCKUP
[ 1028.672340][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1028.672353][ T8585] Workqueue: events rfkill_op_handler
[ 1028.672385][ T8585] Call Trace:
[ 1028.672393][ T8585]  <TASK>
[ 1028.672401][ T8585]  vpanic+0x56c/0xa60
[ 1028.672431][ T8585]  ? __pfx_vpanic+0x10/0x10
[ 1028.672458][ T8585]  ? __pfx___schedule+0x10/0x10
[ 1028.672482][ T8585]  panic+0xc5/0xd0
[ 1028.672507][ T8585]  ? __pfx_panic+0x10/0x10
[ 1028.672534][ T8585]  ? preempt_schedule_common+0x82/0xd0
[ 1028.672558][ T8585]  ? rt_spin_lock+0x83/0x400
[ 1028.672576][ T8585]  check_panic_on_warn+0x89/0xb0
[ 1028.672599][ T8585]  ? rt_spin_lock+0x83/0x400
[ 1028.672616][ T8585]  end_report+0x73/0x170
[ 1028.672638][ T8585]  ? rt_spin_lock+0x83/0x400
[ 1028.672654][ T8585]  kasan_report+0x128/0x150
[ 1028.672676][ T8585]  ? rt_spin_lock+0x83/0x400
[ 1028.672697][ T8585]  ? bt_accept_unlink+0x7d/0x2f0
[ 1028.672722][ T8585]  __kasan_check_byte+0x2a/0x40
[ 1028.672744][ T8585]  lock_acquire+0x84/0x350
[ 1028.672770][ T8585]  ? __local_bh_disable_ip+0x3c/0x420
[ 1028.672801][ T8585]  rt_spin_lock+0x83/0x400
[ 1028.672818][ T8585]  ? bt_accept_unlink+0x7d/0x2f0
[ 1028.672853][ T8585]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1028.672871][ T8585]  ? rcu_is_watching+0x15/0xb0
[ 1028.672897][ T8585]  ? __local_bh_disable_ip+0x3c/0x420
[ 1028.672925][ T8585]  ? bt_accept_unlink+0x61/0x2f0
[ 1028.672951][ T8585]  bt_accept_unlink+0x7d/0x2f0
[ 1028.672976][ T8585]  ? bt_accept_unlink+0x61/0x2f0
[ 1028.673003][ T8585]  l2cap_sock_teardown_cb+0x17e/0x490
[ 1028.673027][ T8585]  l2cap_chan_del+0x98/0x600
[ 1028.673052][ T8585]  l2cap_conn_del+0x2f2/0x520
[ 1028.673073][ T8585]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[ 1028.673093][ T8585]  hci_conn_hash_flush+0x105/0x260
[ 1028.673116][ T8585]  hci_dev_close_sync+0x7fc/0x10a0
[ 1028.673148][ T8585]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1028.673175][ T8585]  ? __pfx_hci_dev_close_sync+0x10/0x10
[ 1028.673203][ T8585]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1028.673227][ T8585]  ? hci_dev_do_close+0x28/0xc0
[ 1028.673257][ T8585]  hci_dev_do_close+0x30/0xc0
[ 1028.673284][ T8585]  hci_rfkill_set_block+0x1f4/0x290
[ 1028.673310][ T8585]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[ 1028.673338][ T8585]  rfkill_set_block+0x1c1/0x4f0
[ 1028.673382][ T8585]  ? process_one_work+0x8cd/0x12b0
[ 1028.673408][ T8585]  rfkill_epo+0x7e/0x180
[ 1028.673427][ T8585]  rfkill_op_handler+0x84/0x240
[ 1028.673453][ T8585]  process_one_work+0x93a/0x12b0
[ 1028.673486][ T8585]  ? __pfx_process_one_work+0x10/0x10
[ 1028.673511][ T8585]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1028.673535][ T8585]  ? assign_work+0x3cf/0x5d0
[ 1028.673563][ T8585]  worker_thread+0xb05/0x10d0
[ 1028.673595][ T8585]  ? __kthread_parkme+0x71/0x1f0
[ 1028.673617][ T8585]  kthread+0x388/0x470
[ 1028.673639][ T8585]  ? __pfx_worker_thread+0x10/0x10
[ 1028.673665][ T8585]  ? __pfx_kthread+0x10/0x10
[ 1028.673687][ T8585]  ret_from_fork+0x514/0xb70
[ 1028.673710][ T8585]  ? __pfx_ret_from_fork+0x10/0x10
[ 1028.673732][ T8585]  ? __switch_to+0xc89/0x1420
[ 1028.673752][ T8585]  ? __pfx_kthread+0x10/0x10
[ 1028.673774][ T8585]  ret_from_fork_asm+0x1a/0x30
[ 1028.673803][ T8585]  </TASK>
[ 1028.674077][ T8585] Kernel Offset: disabled