last executing test programs:

1m27.54854847s ago: executing program 1 (id=161):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff)
write$nci(r3, &(0x7f00000004c0)=ANY=[], 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)

1m22.378890013s ago: executing program 1 (id=167):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x2a, &(0x7f00000025c0)=""/222, &(0x7f00000026c0)=0xde)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r1, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x490}}], 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000400000000000000daaa000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000f00000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x1af286b, 0x0})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={<r5=>0x0, @in6={{0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x401, 0x800, 0x1, 0x6, 0x3}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r5, 0x2}, 0x8)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0)
r8 = socket(0x2d, 0x2, 0x0)
r9 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r9, 0x41, 0x1ff)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000140)='size=4G%')
r10 = socket$packet(0x11, 0x3, 0x300)
fstat(r10, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
setresuid(0x0, r11, r11)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000b00)={0x0, <r12=>0x0})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r8)
r13 = socket$inet6(0xa, 0x3, 0x7)
sendmsg$netlink(r6, &(0x7f0000003e00)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc, &(0x7f0000003d80)=[{&(0x7f0000000300)={0x10c, 0x12, 0x20, 0x70bd27, 0x25dfdbff, "", [@generic="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"]}, 0x10c}, {&(0x7f0000000780)={0x37c, 0x1b, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x47, 0x0, 0x0, @u32=0x9}, @generic="814efd5663b6c068d9e9db9e53ace5c5ec7f10f333f48d410f225d5888353528b3bcca8f4167017de8891d49ecbbfc1e1bf7215668a9cc6c5b14288ec7b7e3cff1500aafe6fe06be246f4527f452c72a3714a6cad67e9bb1a2e2bf0248edc52867fa37febd450f70d72a65167e226557b7ef47e45b88b997ef16a0c79d44861accf3bc880415775a21606c412a1388c1bab52b0d69887a91809bb5d455c6863e5a04a666f75dfca1680f43617654a532dde4f557f661f8698d54ffa3d6058630d5f882a9e6", @generic="235244a45e2ac7eb2080a04ab272303cf0ae40056a778a52ec4a576565b9ceb23881009f16578d8bec571cb5c56956fac1f49148d10398192c3870839fd14ff2be969c37493edb0009c06c0b353380caf91971be2c5ed8bedd0aa3dc727325441d55ee78056f83c1ae9cf33e8aaefaa9a775fd1d0c182ef9a68494c05e98278c775aa75a37647ef5c3e09401df6c422beb2837d1c4a09cade2ae7fa634efd6ec4b37569827942cecac23d0d66edc96df3ef5c05f89d725df0ac7e7b1", @nested={0x1dd, 0x64, 0x0, 0x1, [@generic="7767daae543899f2b9fe59e038c13568f9f752ca576dd22ac494ecc6345255cb6b982ab50969a8934ac087674a4daa9927386aa26b73b139ef6a42f2aa60285b21051c03a6249f3be5e24bbab0403c8e60c44230395b19e9be7f2fa15bd6ba28add5710c518f4f3409325004b82c44e56c276897a1f92ce1375eb05030ed1510070dd8ae9a7466d04c5e0f3d56ead5344bf6", @typed={0x8, 0x165, 0x0, 0x0, @pid}, @generic="505f344892064f903fe4929449b107515e92f48726f2e6fc15a1f2ef6a8829ff43c037f8b79fd41b14c6c78a7eaa65892df2a2b39ac230e50fa98fdecd5dbde0a877b3123d705a7e685c3ead1b85f540d72c1e4f5a9e8b257195b892ad060ae8f59c274dd9b5125d0837e1f3aca862f9490ec4ced066080fb4e9c6ddd98b5cba4f026a5570c57a40d2f9613faacda20599e10b94f35b0363c8d9b6088679c52c1b17a909317b004500a7270d5e4271fbf2b96d2ecbabcadcb49f92d4f6289930becf14cdcf09f2f75f776aa9", @typed={0x8, 0x166, 0x0, 0x0, @u32=0xd}, @typed={0x8, 0x118, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="362d73933b0c945c82115275c7cc6b889105ffa595495463f62d246d15fab2e9011084d12c6398e2ca3489cf16945976e4a593b2d83c2e458932c0b0cb6c2c386ace348685f3e856694393d0cf1526c0064d3bfd22954d511f6b7c9cb63ec0381a02f4"]}]}, 0x37c}, {&(0x7f0000000e00)={0x22c, 0x10, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@generic="a593485644a8c8b4f9", @nested={0x103, 0x1d, 0x0, 0x1, [@nested={0x4, 0x16}, @typed={0x8, 0x150, 0x0, 0x0, @uid=r11}, @generic="d28f0ee5974c4d495646f467f6b95d164c694afd87f5923181efeb0f4e59d48fe5ada23b3fd3ddfc07cc5956a5f9bcef59d9b6dbfef907056f9c4246b2", @typed={0x6, 0x5f, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0xfe, 0x0, 0x0, @u32=0x3}, @generic="97b3ec4432e0b5850b5857d6bdc9c2596230fefd93251f078c41d04511cbf8a98d963741be5a3dcc1cd0a8accbeb4730c6a2b0c173d3f96c6bcc775ee8d968a13d8538f985603d05edb4cc4d0138703e57f39d4aec3838d2fcaccf52b2dc656fdb6d9269a07bf665ec938d7739c48402d497cd5296280292e0f2e01929acf3461d06121fb5b3bf9740d0187eb38f362cef22a30241eb876feadebcb916d4", @typed={0x8, 0x7b, 0x0, 0x0, @pid=r12}]}, @nested={0xc2, 0xcb, 0x0, 0x1, [@typed={0x8, 0x155, 0x0, 0x0, @ipv4=@remote}, @generic="69162908f40f2506c38e58370237944741c557272bc497b57be5df745972df63cf25b6a0e905c57c90f6f774c68994d4e9e4ef69b882894aa39995a7dab49ae63aa49e48d7b20adb45ef1fa3ac8f9530eaecb37ad0e654ae78ac0080cbc30c91b3ede9560983db889d27c5b4d098066334cc372771c11a09", @generic="a46a381e035a1427836cc7d5f3a04183f4f33519851c8b24da33d69d0773bbaf82a2b4bdd26cfbace453e6815ecb3ea85b3d48e568b6daec74ea897ec00c"]}, @typed={0xc, 0x10c, 0x0, 0x0, @u64=0x7f}, @generic="fdccba0b8ec90759573a620691b0aad793676e68a1b221c4ab5644c983f430efefb2ea9bcda3d3dbb61c6823d1aff316824e4ef7c6ca7a474c6ec126"]}, 0x22c}, {&(0x7f0000002700)={0x1638, 0x17, 0x8, 0x70bd26, 0x25dfdbfe, "", [@nested={0x1a1, 0x5c, 0x0, 0x1, [@generic="8bf9531f511fdba41702c967b1e5ebbcc30f28820692f26f5eb5b394ee3f143a8b1e64f4aacde50fe5c3d5911bebca1ac82df1431b906c02dbbfd673e2eb95838da19918cbfecb634b83854b961582bc32c918f1c7c54197079b371c9680342e10ae971b056b3a2d828a6c5b4476c8f0f6037f49d25f02e04945657f463ff51850205ddf46a5a64a99c281dfee1717f1619e55ccc244ec18fc80c1ff3c2ef4f9df8b31252c", @generic="ce95e0bddd79c21ff822567f931bbe64da297dfc6dbb6a004993923bee58498ae68a074fa5a27281dc9dbb518e45539412f352f6576ed5bee1a586345d20e8abdf83368144c48151033391febc446bf29d6d1b7c20cffbf137ffae25a647264b54f46296b37c0f35b8f4d32de8d72ff084e2332e444cf84186", @nested={0x4, 0xf8}, @typed={0xc, 0xf8, 0x0, 0x0, @u64=0xffffffffffffffff}, @generic="e36d29fa04c675bb22a699988b7e88521e290fc37292ede0586f2f867e3b3fbb14bc8a5d6d1b4ca28171c034c80be01a89dc0a240fe7bc18ba5747f7f199d74bb2f7f5d3dfcea355d6186c3095ff9c2ba9fb070c5977e39f26b6ac253e88b3", @typed={0x8, 0xdb, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x1f6, 0xa4, 0x0, 0x1, [@generic="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", @typed={0x14, 0x125, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="44aa380320e14c4954abe0d5418479fb6027200cba82e75f7ac77f76a679303e52da4c9306e1e1a5d9ef9dad101ec83271891f04f78425272044b16b4e8f81303794b2b2c675f63548d488f4ba1ff47a93dd5ecf9ee50ef3f26e5124535124649335830bf0fdca7b3aa68262b2e829a8d7038f5e94d688b8eb917c709d64482f37c0553e25a798b77f064494b776f60c4b095a4778dbec6dc8e68c564d5cc921e902cede1e913addff1ce188f9ddb8044f6d9137afd77a6eb5a800495608f118ab35b8c88b294b76b02162518f803b75be5f53376c655c8553d81a434a69", @nested={0x4, 0x5b}]}, @generic="35daa84d8a998454738b5764aac896ad6dd4cf080bc63c7e978372beecce1d883fb1455d97c4eb6f0b570614ca37f5a3b27220f511d303e296dce228063ae5bd2441fc7c1690cac1d5379e0107155e5b3bc361a2599dbd230a3ccb0b0c754b22950e49654d49c22806fe1a0b172a4fd85caac7ba7e9ed6363b20d0750672d9843220eb1f00f6fd3b6ef48033c2033335c03cafa89279d0fc", @nested={0xb3, 0x4d, 0x0, 0x1, [@nested={0x4, 0x10c}, @nested={0x4, 0x169}, @nested={0x4, 0x20}, @generic="955f1b9d4d79ae6e23bed769957522faa78fca564a735a", @generic="c8a134130c4e46ba08c8c8a38fa6f718e72ea83e9ff6fb13cd5d2c35868cb58a6a81d77499507ae4c9e4abccbdb87eb8eaccdfcadc42352b2d2ab79e691e7191257af437a4c4994105389b8425e18d0461fd3985b402922dd62dd786e8851c036313c9feb9e6035c3afc322574eb1593b54062e3d9e7b0ac0d204848904c028b3d576400848a011cd466342a"]}, @nested={0xae, 0x88, 0x0, 0x1, [@nested={0x4, 0x81}, @generic="dd189eb6b1c64aa545c4b3d0c527cd00a6cfedd81c059ffcf574bd54c53433ceb99a15ae05c49a296a3f36a54404b6450530f223c60901a10ee25f3aa4f291516c6dd2b7a3b672bf72fc00cadffa1d9493cf069d000061d717fac167c82a4caab2922146c6e7d8a3b4c74c1ee05abaa406c6c04c5d7f1986b34321427620198b63c4fa5ab47a9150ad9e8c3960f605d42d7900aa6ca4a976bdce257b048fa257b1ea", @typed={0x4, 0xea}]}, @typed={0x14, 0x20, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x27, 0xa6, 0x0, 0x1, [@nested={0x4, 0xef}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0xd}, @nested={0x4, 0x9d}, @nested={0x4, 0xbb}, @generic="f00ad67ab53de81a5e761da5c0af7a"]}, @typed={0x7, 0x7c, 0x0, 0x0, @str=',,\x00'}, @nested={0x48, 0x114, 0x0, 0x1, [@typed={0x42, 0xf2, 0x0, 0x0, @binary="d2202cf0e73e0a025f702f28a3a8f28818bde499f62e21b6fefb1491ce3efa1e34c3650b4dbbfe1670bcc57aaf2c97516e21e045a7598a5f2f2aa2c1a198"}]}, @nested={0x1004, 0x68, 0x0, 0x1, [@generic="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"]}]}, 0x1638}, {&(0x7f0000003d40)={0x24, 0x3c, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x4, 0xea}, @typed={0x8, 0x128, 0x0, 0x0, @fd=r13}, @nested={0x8, 0xaf, 0x0, 0x1, [@nested={0x4, 0x169}]}]}, 0x24}], 0x5, 0x0, 0x0, 0x804}, 0xf04de4a337c16ead)
close(r8)
writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="240e857fe863733040cdb8c36226e744f4ec12b1353d1366484c6df4944148348ebf273355bd81a528f0da9ce5c4ad2215bf74c5", 0x34}], 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYRES32=r14, @ANYBLOB="9e59"], 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x0)

1m21.508514575s ago: executing program 1 (id=172):
r0 = socket(0x2, 0x805, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x98cbdd08856ddb1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8084}, 0x80)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)

1m20.869510168s ago: executing program 1 (id=174):
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x50, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)

1m19.795665686s ago: executing program 1 (id=178):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x4000000000009)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455cb, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x80000, 0x0)

1m17.735552717s ago: executing program 1 (id=181):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
mount(0x0, 0x0, 0x0, 0x8, 0x0)
socket$inet(0x2, 0x2, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

56.819374512s ago: executing program 32 (id=181):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
mount(0x0, 0x0, 0x0, 0x8, 0x0)
socket$inet(0x2, 0x2, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

13.667600145s ago: executing program 0 (id=287):
r0 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0x100000000000035)
ptrace(0x4206, r0)

12.420730841s ago: executing program 0 (id=293):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x10, 0x80003, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10)
listen(r0, 0xa)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00')
r1 = accept(r0, 0x0, 0x0)
write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
socket$kcm(0x2, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'})

10.795351923s ago: executing program 0 (id=295):
r0 = io_uring_setup(0x664b, &(0x7f0000000500))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r4, 0xc178fd0b, &(0x7f0000000138)="0400000000000000000000007801")
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), 0x0}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

9.04083866s ago: executing program 2 (id=299):
openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00')
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)

8.614002356s ago: executing program 2 (id=301):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000400)={0x0, 0x5, 0xe9, 0x0, 0x5}) (async)
set_robust_list(0x0, 0x0)
madvise(&(0x7f0000021000/0x4000)=nil, 0x4000, 0xd) (async)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mount(0x0, 0x0, 0x0, 0x2208004, 0x0)

7.890969551s ago: executing program 0 (id=304):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x722a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0xa, "7b3a31dd"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_4={0x3, 0x2, 0x5, "67f11a4c"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}]}}, 0x0}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f00000003c0)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x2}, 0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={r5, 0x37, "5b60537e2edf68c7100a88f8a4cc80e650a58f361de989447f78e4f930d6c6b92aedbca0d38ef571de4b33a5037aa6f53ca91470948749"}, &(0x7f00000002c0)=0x3f)
syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd60cb800000303aff00000000000000000000ffffac1e0001ff02000000000000000000000000000104009078090000000100000008ff0100000000000000000000d2820001ff010000000000000000000000000001698c00f3efe4973a99ba68eafdd626d66c8aea38520e539901b2449868face62b7dabfd4340cc0e1ac7db66911171d0cf74a6045051170ae8b1905deed99c61ff0c8ef9e9b0b96f8163cac8e121597db00b1310b94b2687d0a5010b525a0a3515b05484191f263a4b707ae54954eacb64d4b59010000000000"], 0x0)
recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc\x00', &(0x7f0000000140)='zonefs\x00', 0x400004, 0x0)
r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0xd0)
mkdirat(r6, &(0x7f0000000540)='./config/nullb/nullb0\x00', 0xcf)
mkdir(&(0x7f0000000040)='proc\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='proc\x00', 0x0, &(0x7f0000000140))
r7 = openat(0xffffffffffffff9c, &(0x7f0000000220)='./config/usb_gadget/g1/bDeviceClass\x00', 0x1, 0x0)
pwritev(r7, &(0x7f0000001740), 0x0, 0x2, 0x7)

5.401688381s ago: executing program 2 (id=309):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
socket(0x8, 0x2, 0xfffffffc)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832})
syz_clone3(0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="b9882cebeb6899e7363fae7283e4e2ebe92bfbb1b1fe28f487155782097e82670e7efbebb98ba781c0054911c705892abfb2756c9a69c5754715d38dc3915cc989fb6b309d72b43e00", @ANYRES16, @ANYRESOCT, @ANYBLOB="432de310708a504147add488798b1f68863740ddfa4fcfd886c0307fe0d7bf1544774ec19f96ba5e14477a10f7271c3bbbdd9a606b91da0e483b766e35d56aef059a83386abf3b1e92d3ed7b207d618bda6e1dd107bfc3634a097756f169680285e64350b187e13e49d71f4232d877ec892c5e75", @ANYBLOB="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", @ANYRESDEC=r0, @ANYRESDEC, @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x240008c1}, 0x4001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00005da000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r3, 0x0)
syz_open_dev$sg(0x0, 0xd, 0x553503)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00')
preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000300)={0x1, r4})
write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045)
io_uring_setup(0x6bad, &(0x7f0000000180)={0x0, 0xf8ad, 0x40, 0x2, 0x100397, 0x0, r4})
setsockopt(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x2000)

5.39535996s ago: executing program 4 (id=310):
r0 = socket$alg(0x26, 0x5, 0x0)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000000), &(0x7f00000000c0), 0x4, 0x5)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e", 0x3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}, {&(0x7f0000000840)=""/86, 0x56}], 0x2}, 0x0)

4.810480833s ago: executing program 3 (id=312):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d", 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="2c4facfbe6240015561f4308febe5c7c5a0703ba7b8be10b6930e02d982526d710268ad119ddb86d602e688939c23be77b65d5ef34bca755c7d2f6902217623cc71382f4a0fc4407f417a373ef38195892aaed419f99a07a58fe784fff5123144185f22a579b3d68692af56115874aba709e0d5186c08d655fb0c5bd5b5bee5bc88f2dae8a785468249582b9fc3b1ee343fcceccba4f515900066a546d2f81912427bd312d824494158449c0c668fd6f0c149044276f008d5f1fa7a3368c65a8f688decf9e0e", 0xc6}, {0x0}], 0x2}}], 0x2, 0x2090)
write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003fd4b20127b080bf82664e51c36a4c4681dd332c6cb068cd11d13dae5f798032ed4237ad618305d0bffb28dac3b13bd148e2d7e8798ce2deb330ec7cdfdc5cddd477f3ffd22b884e91529740da75f625d46b48a6aa4c40", 0x434)

4.791150451s ago: executing program 2 (id=313):
r0 = io_uring_setup(0x664b, &(0x7f0000000500))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r4, 0xc178fd0b, &(0x7f0000000138)="0400000000000000000000007801")
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), 0x0}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

4.511322471s ago: executing program 0 (id=314):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
shutdown(r0, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x3c, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=<r8=>r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\a'], 0x10)
close_range(r5, 0xffffffffffffffff, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000001100)={0x2c, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008"], 0x50)
write$smackfs_labels_list(r11, &(0x7f0000000000)={[{'\x00'}, {}, {'s@#!/^&{'}]}, 0xd)

3.299640083s ago: executing program 4 (id=315):
socketpair(0x1a, 0x6, 0x795, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000040)={0xff, 0x0, '\x00', 0x1, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
io_setup(0x16, &(0x7f0000000400)=<r0=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="27090240330026000000186a000009"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}])
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x74, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x56, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x9}, @val={0x5, 0x9, {0x9, 0x85, 0xfc, "5abe8e809bd4"}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x12, 0x3c, 0x6}}, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x40, 0xd8}}, @void}}]}, 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x80)
syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004090054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240b0001ff23000c2403"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})

3.27270473s ago: executing program 3 (id=316):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCFLSH(r0, 0x400455cb, 0x4)

2.937829778s ago: executing program 3 (id=317):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0', [{0x20, 'cgrop.^\xd5\x81rt'}], 0xa, "68cefe672e30369f4b1e73fca8e11b70f708f12a6c900128cb9a5440b42a9504984d2db98584ec1626642aaca9670a8eb4dd36e48e7a3da997d6e5999b58e1765fcd7cefde9c59801df5f5e5078a289ab655e36197d229caf4cfe7cc4e5edc2a3e399f565f4a2a651cae1a3ad264f863112d29"}, 0x8a)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffc]}, 0x0, 0x8)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x7})
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x46, '\x00', @data=0x3, 0x5}]})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r3, 0x4bfb, &(0x7f0000000200))
r4 = gettid()
timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r4}, &(0x7f00000000c0)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r5, 0x0)
io_pgetevents(0x0, 0xf, 0x0, 0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={[0x6]}, 0x8})
chdir(&(0x7f0000000240)='./file0\x00')
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183e9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e425a4146056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423d27f7b78fafa060000006eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f87d2a1a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a42010e24f69de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc46f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4670b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400000000000000000000000000000001df00", 0x1000}}, 0x1006)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})
bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e)

2.703569307s ago: executing program 2 (id=318):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0)
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000600))
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0)
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
write(r1, &(0x7f0000000040)='1h', 0x2)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb9, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x5b, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x393}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x6, 0xe, 0x8, 0x20, 0x7}, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="050f1108010c100a0918000000000fff00"], 0x6, [{0x6e, &(0x7f0000000140)=@string={0x6e, 0x3, "7f02fd930106cb819d130a5fd09f9b1bcf4731d5e501afa528b75ea7c8ca3a79b008d2d11ff44b24288f7e0343dab1e6815cd429cf0e18b4fe5d6ab84d48a5cc1443ec3331c3451adbbc7c41681e8e60ed9bcad7be1e893c0be42a4c0f38d185d829fcf7198c41e3f366d165"}}, {0x65, &(0x7f0000000280)=@string={0x65, 0x3, "3657fa9deb6ec6386a0129be1ec5d10ff196bc57be57eb0358f57058538a1719b81759890088bfb07559411ba152e8bdf750c6c787aa42efe5138c86a7a4943785195043955419f01224e8a5f34b2949e7e1b49ec0bb2c5bb54ba5ad0552aec994de90"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40c}}, {0xd3, &(0x7f0000000380)=@string={0xd3, 0x3, "e05ceb9007a6303eafaa0bbfc939404072bc3673488131e3ad362582c9b5b9639af5c9e2629672e8bf5059cdaf7b185ac09f646548a6ed7df55a8632410cc396769bcf79a4fc2c4969580f84ce9e3b701a7359c0d1e75fd424225c83c3c8d1dc50d7603305965dc1ec23a9d63b780acbeea09d97eb1fa7263799e4cbd0ddaeab66cf5b7f6732bda3f6dc2128483652edff7b68ebe1c7b015d396b9869c51d37a983ca571cef5f678b19e46a25e5830054ab09d26ba8c938fb34860d5a6459a17368de90b053873419375d9d169492638e8"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x421}}]})
r2 = getpgid(0x0)
syz_open_procfs(r2, &(0x7f0000000780)='net/netfilter\x00')
ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000422c8983a7802a5ac0ca2f5423aab9dc8ca87d36b887b6ed3ac22bec87c9023a138e61a5c2bdd42a35213bc7d9c2f1cb955cb09bd1933bd906058b8306cf2effdeb1139e2ea58795908974cc76d0b7eeb65228eb293aaffad486578fc8e5a14885a938c03c394b2a859d0f095864e0edf45bc9378a70ba92e575dfcaba2fae233ddbde2da171", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, r6, 0x25, 0x0, @val=@perf_event={0x17}}, 0x18)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="b84fbdff8a20", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4f}}}}}}}, 0x0)
r8 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x82)
ioctl$MEMGETREGIONCOUNT(r8, 0x80044d07, &(0x7f0000000080))
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f00000007c0)={0x0, 0x2, [0x9, 0x4, 0x1, 0x1, 0xc, 0x663]})
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x3, 0x0, 0xe, 0x0, 0xfffffffc, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xfffc, 0x0, @local, 0x3}}, @sadb_sa={0x2, 0x1, 0x0, 0xff, 0x3, 0xeb, 0x2}, @sadb_address={0x5, 0x5, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x8}}]}, 0x70}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.390211081s ago: executing program 3 (id=319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (fail_nth: 5)

1.482824661s ago: executing program 4 (id=320):
r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pwritev2(r0, &(0x7f0000001700)=[{&(0x7f0000000100)="704eefaa14c8c1c8db3e42a9eef70f5dedb37630cfae6b4a832683ce7f34c84fd43bcb521638a6011920e48ba86159f8e7ddf76c939a8c0e510106e0ce514f291331bdf75e26a9dde3944ce869118fee18395ccf6cee025dad1398c9bb616e1b09895400f741706c01d6c0f77703c46d339e3e0d1275df7a3d587fbb7173a279a84f82ddfbc829502499563c5f1d86cb847d7012069f1299752d5d26d5db55c0736675f81395a95f5d4813e8487506c5", 0xb0}, {&(0x7f00000001c0)="4da9e78e5907fa4aefdee117754a80dd8a8aa96cd8b41de4a505c8ebace576de748281624d48c81f1d670fe1db51dac22472dd08302e6d12c40efe74ff2445057a5c614f595f7d1d22a0017631d593fec230e1ed803c8db003e2c67d2e83698f96f086", 0x63}, {&(0x7f0000000280)="08959a88607f935bd0f9847b46f796fd9ea7cf125438e32b35428fcdfe75fba05ea8709f034e77e9b5491e406fa5b4b17f38044ab8a3d712313a38e45211476671b22427cb9296aa2b5fee4d6739495d68a9967f905feaf044e75c7a22922676e754c538723bb57eb2a61c6b4f621a0a2036406de590e4d469e4ed782054503d9a98a88533bf2b3a29018afb86be76d50b34a4c0ce821671", 0x98}, {&(0x7f0000000340)="d4b04692091e1634ce18db6120a4edb387c75527097ac704a0dacee63bc6350f5fc8f42468cd4cc4262b509876bc167af755bdd0b126b84ad470a856785d7c6cb1c6962d1ad94e05ef8c366751dd60d21d1f25f93337ab0a5e1e5be52023c85f9380b6be366ffc1fbe2b685f4c137f12ad46ea19e3c4138caf166c7abad2a4c1476e168355f1c16651fa38938c221415346b36f07be96e54c90dec20cdbeaf44aaa03ef55e3ba38356d869132601dc4e01a61bec86a81aa11b37297f4a21", 0xbe}, {&(0x7f0000000400)="b9b2bd70e13628ca48df3425bb96fe952024ac465a72fc27926b2293761f39b6f75eb41c11010492bc0ea3169160421422fe38e58a8301ba1421d86596f86e79fee46c8a6ed5ef062fe98b9fc5fde8ff451c4869c9168d3792860f005fb200286741937f8936397843547736bda330d8891818bebe0aace1adf7d415e6ce1d190aee32fe0e4d8d2629311cbced558f015a26f4762ec1967af6519a69", 0x9c}, {&(0x7f00000004c0)="b9ac792cf37e2689ec76", 0xa}, {&(0x7f0000000500)="fead5209ff586adb1a1501e7a9d74dd52a870194109333e203e17a9b91f1bd547cf6179f509f44f068b6d065c6fa5cd8929d717684c5956d990c0f553f3ec1b4cb80e02598217a820f3e8649d307ec7cb598ccd526bbb3f51c42a3019bca845044a5d775934faf5b17b0497c032c0a69684b63fc0a1cc40aeecb1100750a55d7dd945fa95cac103454154bbd359421d450c94595256a65a997aeabcd4cabcc03c48446d5b24741d4330455806619d9cf8722770b916b9330be8f4e00724804c2a67b1d508b814bb4b6caa31e082828e01aaa1c512dda56b356668fdfa1d931fe1771caa3d781c43e32b30e5ba83fa218adac2a3f48ed30138d6290af5558723f5767b2d20fd383a7bb82c763ba5dce6c9b0d0d1afd24c03828df3b2d37414e09eca57f5651e1445a9a4eb5eb44e7691ad0e9a7de357eb91e3f6da55c9b2d4b393964bb919c7ef9cd18a36b2db0255ee47c2a1461db5657ea7e2efdb2b13354fffbc84612c0409f7808a8f2b96e158556f506ed458c17a5a11d7e0144b496b82d7e7d80cf33fb97ae7942951eec96d71387213f00e7510b4bd7d76b242748ba23b09fcbebb012f00dc439c9e2f7ccf5ee5ff321ff8770b7230b5bcf9e5f9a3f956585b7982f3db2eea2bab6e06b95db7ae1e03215af3f9d5cb6ba5c602dab3eb9415dbe3f5065bfe0375820a401793ec8f685ebc887440b321422ba3d4534df671696ab6f5c9056f9291a9a22356558d1f158901913a3530cdef4fb0ab732938c10cce6963316e27f43d4c0e9240c5734d80abe894584df53a72774df1c60a4567060ea02042af4e7e0d5e79cae35960064431e670ac97177f4a190e2c1568b5c92cf3413b9463272ff8015a689ff097f87fd5c57a5f422a359834384ab2b6a024c0da53de4d1070d57ede3c83e116f4bcbeff40494c86830ba8998d55dae4ba2936847d72162d41a8a5d213f2c13c470bb7d75f2a764070c50683b65ad7b1c39943669b54e37cccfd455d8d2ca6a04a7e0c981c2b4f448a0b9b4ba2beac06db80f418a8ec2bf73f172017891f44f808f8386f2e3a9b50f568fe2266d50ce7c024d3c5a9e0fc9183e3669a220561e0466898da13ddbefc01489771a0d6a3a27ff4d0fa81b9b5f5709d782130333df12ae372d1e13708aca39e5d3b461c2560a6ea6a2ae960a09c21206b6831d1ebf7952039aa033f0343e814a71843df42075ee6816162d3a8d702dfabb054b3f8fc3276a9fe932387a7f5b513bad4de8d709f6240654ae38e94ebcf10f6f886c14463bebf4ebdbbb9eef477afd4a7ef58a4ba8af868190828d9581d426b648fabb93c7cda8c9232e794d5349870fd3728113c038028f363247dc10b44221a97b32d1113f817cf5ccf4d8e94dd6998d69839783256098b4bd4ca3c2e34ed3a7c2c1d4f4da4e4272dfcd0a4ac9dd269fd9af72312f4e72a2f699c3d39059c51d3945bcdcf66e3ce20ec6ec249a050702bb96b46aeb4126d17b8ddd63cf3f5886a346b409df7f24575b39bc0dc333e241af7199540bf56c6e78306b01920678b6db001f01f3926b35da163bd635c0f3c851fe268fe8af0afcc4472e679ce593baa24cf26646f93029d08d994f21f5c6bd7dd31cd3f350361d481bf9c2301224d25a3f0ce100e28f9932183df6e466ee8be9106bb69bd6f7ef05b085d01c6299f9b48c8bafeccded8b59f40489236408779f8618269701bc836961ec4cd35e2e99d27b009abd955a342a54ea3694f8c6ccd5e5351e1ee4bf61c6d40130d7319ed79ed8ce627319652c7d257c5d4b7b2330560d64685d212663d4b4e894a8eb1c53b39e1f2eaea4401906fda6133bcbbe7299557f50125f238b19da96c17973d8d16cc03e95336d03dac6c42d97188a6b424710fec44a690de617ce2b2e0f3cc5d7902f001cdafdd915248786fae4b873c88458036c3e4e307afff3547140d8e14ae75664b01d8aece5ec845cb7dfb6f2fef4ca4c3f76ef15cb89289671d135f8f99c8f8153001164a7a71354df95e574e72965adb384ae799aa3f42b43ac68830d4b62636e513b0ae7244332d041a1a08d19297af3c602fb2718ca22fe4528af480762ad83c68033f4fee9bc3e8781ac1671dc7124a01143921e7811dc45038132e11b2021120abf7bffb61b7c2e22af9362ea817ee8f4a9e8ba13a7518402c41eecead53110264454dd2207311cb8be8fd4c65e58303dda7261e20e5b565d743aa56a67bed28e55f07ff2c4e39712014254034363f6cc22c026698611e6eb322d041b05d8128cdcedb42119f40c36db9f8602602f6b4d9fcfafe75b1653a9d6ac0d4134fadb7a303f41ec18ef7748da9ce19cc050f2435b6872cae82bf7373c9544a9d32cbe9a47700546365aa4b476a76b36e38c486c80ddd71315e6e50e9b50e74866a145efe454b0decb6004a031d50b72f24b1d5b38ce2e53abceb5d55c43da0c90c0edf72cccb5b21a44f40ce52c1c2336a0d4fc9e7c0ff7acec51ac5306567ebe720730ab75ab5b6ef542348f6a434cd2bcf709fac52c858738dfc71b631fed996d4cd67f03ddbf9dcab58d7a64a405106c33ccaaaeb6ca6edb904a52910ad4611ced8b7205c74b19a2541d2a491fda8986a392f01cc480239c1435eaa01a2366b77d5cf8a0e6a3c7d28d0a1c883a698362f939f0b0a19cb6c2e028898e3da5300ed4ab67a6cd55fb96e2121c6f028c914659ff054a19d7ad91634f1a475c1f32f3bef51e212da06100b6627a84a6436d1e95cb815e3f307445966a8b07d76b52be8a2282a4645e0df99f59d61fa8ebb5a5ef766ae34805500c39e5ea182b702310d60a4125538a0a8a85a7d4500e264b06af02c3b5f44c23ec79ec0682bc9d7637b238a4458f64d742d1c5937d6b0331422080cb4e6ad69f1b5dc641dacda6bb24f802f11e095e55c8d98055358d99e1606f47fe98ceffbde2f365d581c75188d6ec67c0a8987208f65c3c60c46d7cf8022d301d917dd8285ea6d54f0b6540fb9b91630df0d2dffd51bec4c84c8a9ba14fab2744b3b38df44bd4522808720f9b93893e8eced3a9ced37a9fb75e559cfd614caf1ec888dcb151f4564cc1da6a4b64d5afef853ddebb44a464916f4ba08228bfe0b6458bb4b248ece88f7f9fab1b80ab72b836805824807c72091209379bbe0b29f2318cc07561a37506e460dce5901f20b5abcf60f5c7541481cbb5ebc015533173b3ef3bb601c2c23d19fae15209a1f673c8fc2aa7c8a0f09471b8a02abfa432157b58a54bbc506d157bc5d2a4773204d57b2c3637a4bb8e9c4d4cbff2d87f30d01f72b42c0a9e36c330421d5ace579c13b34ae843b2efd892f1a5fef25cd38be3d0a0445f59a2b042b6422ceeff32d9a6c9edeccd6b93363f935838fdf3a58b2939755917dc19da28e8392309ed252b2a21725058aad84fb6cd0e837bce5f33ed449841845e1dcd30c232b6b8ebecbeb4e514a17f056e1ea06c9b63f1eff6c5cbb406607acf798e04ac92b1570084b8819ce852863f520871cae8220e15ba9b225ad3371a05a9060146b73a46706972cfc08687575773bfe50971f2233f8f256bcf837cf258176e5bdeebe7df7e0b7253a053513c6d643c46e35c6800e8d52354b2f870703e322cf76cdd0b5fb4e126d77ada669eea16268dbe677b7794ed9ce81e817d427089a6a7c8bd6fcfc8e3c05523aa7c3fb2b27286d1568d2409d01b5208ff6dd4bc9ff55a4f8f1c35a49577d073347786311f352daeba746f0f80fd2711a08d072b31d4100d3a135cf5f596aa3298cb22f15c6e10b5811b84783523c3f82130334b10aed17e1f965968351fdc85b7a137e09a7e919e3f2bb9e61c0a4f32be3c0025dbbe2a06ad97ff825204b59d9303b2399442db8f4834000227c96b342add9d5b927b11e4da83b59754486af603a10a95a4616456e2b59c921f883b589c38d84baec080bf73bc56f8ee7faba8ad3ec196bda9dea67e6e109f5fc1b7df5405992956f4bbe58f77e9ab5a8e59d50b1df1ecb03b3e01a478c96bded457633b4fc742601c0aee9a4c0b96b4a248b77f764596850b725db47e8523fa5674455f617e0174f08b81b3a996c60043e34e32a73575ad336613f0b9dbd9d7abf329188034d69e35b1f3805feca11456795447d731c3bace225dcc2cecdc26c6b61ce7c5d6c027209e52d3dce9dc1549d60ee064e22324a29f767c11f32cf319f07cc916fada91dd35d3ca2e2bebbfc2d43d1e8ba7935c1b52823eaa8aa50d7b3d2bf7abe0cb13bc2a15b35121252e51ebde85838876aa49481f67555214cb418c023788ff2762d424970d9ba18951d36e4ffa1b3e476a4e2c1c2365ab4dbeb933b109270e3b25c2567058d56e9557e15ea031db45eb32c7bea3079d8da3477de82c0c26229bf2b182f63beae933deae94deea92a73b0146267be0bd8c9abc1f71cb3471cf5c05e0ea5d4593fd90954ef6c8969ccee33ebad4e8e9b3926ce955f6dbbfa3e567a1a4a0441f4f6ebdffae26ce90b66b4afc2bf3186ef7f3d93efc74fbd28948bb696296dfcd9cf5cf9d7bea619927778833aef2f5e0f7e5baf76751d67bb52181187ef22f92b1b689a4c48c25f350471a10be8bef483a3dabe9e7d374ca26b7d9686c288c969b9f803bb8add6f6199d3c3a2471ac3037ca5748f24a0c0eb9ce98247cc767b6c0be8734a7c743a36f699aa5f37364c2c681bd94a1052c8bfb4119059455d9b323e7fd517457c6b4bc60a27d00519ea458d8955fc315897ecf36d76744ac9827bc35e1ebb173ecce16bbc6fc570765acd87d08bb19073016c2de55fb82069a3737b67b1a67c81f0af6088d06e38768cb55325c514c2d4bcd2fc524d7faa06360d25fedfa432a01f8b08f95a3e0a544bde8ba4d915711611d57f9cb6707198e65798ea87c87b3f3711720cdc7dbbf4a5e52bfef2611c04ac21729ec79bf2fa59f76bee6fedab5847db12aceb57f92e2e96e8b8d3498eea4a52726e550c1b20c4f34db5101633c1a4cfbe971a78acaf5b88277c547f2d4959bccdac45dd97745881913dfa01f002b71f1dcf23bc4f24379aaedb2a02424905a9e49fa77dbc73e92edb2407f68de24b8338f9d34571793843ec8f5798fa04f729487745ea81504f0c67e06e74aa29b0c0646e120af6313ee79d1012278b4ab74cd3e1e9b21ee15004d61cedc2968024c540948a4279e29ffe38475354d18d14618312d4f5c54df3e39eb8a3db0ed5e26131bf7ec969ea701ed76a66be27037271b4b824725d7e12ea61b99fb2635fbf3c592fa128d82fa4cf2144bc7ee53e865417326aeb13804de5be2543d1cd957e691fa67a64da7195931e2a73bf4b674276219cc7355c3b132582c8b3b5b667e5b1071231143d92004420e1a4e765e0ea495b652d33d6a9791ad52144131536dbc13550d734fce573d6ed30a47f2f67be09273f5712df385f52f3392772c4917e1a1b959b803cb0f78d0999c2853dda84a6f0cf70a5de3ad2f24bf04ad276596680fd1c298d055453bbb1dc7f83156b055db9e6b5de7171ad4ad0105a8e9bc581add67e4120f85b0db810af570e156f4fd8e6e0fdcf901524ce7e1d6ea8d14cd8da7baaf2ea0fbf83716cf4a4e53396b2e5dea823b982fc56436ce6158dfcf3e4de3e248d94f8a83b9acaed7b203564cbed11b8d7c1827ba31036d2eb38f0d5dde6dce7a0a3519045a11b734a16b67a786acb6d26246b007ecb91fddea66f6af25b7f8bcac1899809aeca5bee24cbc84d654dcd82a2ad23f9a92eb8aa10269d025c5637d2e9388c8ea509d78", 0x1000}, {&(0x7f0000001500)="1685e5ffcecda3f56ecdfb55d2e5fc77732d0b6128750410ddf480bc682a65d1ef3e0787091b6b101a4454229aff646e29a433e1b382d5529c30a6ea06f682bc006343d42f9b1015dd5f4f9bbee7f95dc8a232ceda2f502b90c4c260a12acd7a16f764d8dfbfd94d179e8dc28a5e4f060e278c2ba266f48d869014", 0x7b}, {&(0x7f0000001580)="8adc8662151c185843a5ecbfb51db694f0ef4672743f0b319fac1d3f3537f1da0d8a440b8c017e6ac8648ad11a7b8a011b05a3a0c81abfb51a41269eb678a37ccb615475109b1ed75e14573e459bf5e48fc98ebaa1a4a26800eeb2f462608ac05b9d1eca71", 0x65}, {&(0x7f0000001600)="83f9c827b685a1e41748b049684eee66ac241e31afdeb279f4eace1299eb112e67976624cca5db95005962a7804da51c74bd4fa0b0a291c69b719ed646d7d47e39b64235200bf7c390e42cffb02a984df48c145d526e70105e7213bf5b86b5f1ed6ce34a82bb2c374aef7913b951477f6967524c335ae2b1dd743e5a1527400723d621bff854d7ce74e45bb8b1bd91e28ae9c6e83729eade3bf7507e348436004aa1bcaa50198a81ca21449634d7b4e9ad89e0a7dc7d16e8eba1442210df9df349ba80cb403be0da9666a5227370148def793f0cdc10eb6c581002310fd7f7b9b7", 0xe1}], 0xa, 0x7f, 0x9, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYBLOB="0000000000000000b702000014000000b702000000000000850000005100"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}})
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) (async)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard')

1.356313604s ago: executing program 3 (id=321):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = dup2(r1, r1)
sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="487b153642828f6d2ae4a43afbe80fe391022661fa564f1ce5543bd52cb9cd38006164557cfd406a07d387f40b164b543a4084e50c692478f1241f910c41e7477baf77f61cd2435f67f6fa9409c7080371aa91f4d688c710cb8769c0", 0x5c}, {&(0x7f0000000080)}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000040000000000000001701000400000000290000001f49a0ce05be59a3fd2659d21190e6a58d57c9657835844ef31e631701b546e90e9deaa874dd3dde860000001800000000000000170100000400000009000000000000001800000000000000170100000300000001000000000000001800000000000000170100000300000000000000000000001800000000000000170100000300"/184], 0xb8, 0x800}], 0x1, 0x4000)

1.163610155s ago: executing program 3 (id=322):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r1, &(0x7f0000001040)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)

1.071763837s ago: executing program 4 (id=323):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38)
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="aa29a936b96ce4a04edb420a350a9d1b", 0x10}], 0x1)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000001c0))
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)='measure ', 0x8)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=ANY=[@ANYBLOB="1800000004140100adbd7000fedbdf0c08001100"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r6=>r3, {0x0, 0x4}}, './security/ima/policy\x00'})
write$cgroup_pid(r6, &(0x7f0000000000), 0x12)
splice(r0, 0x0, r3, 0x0, 0x80, 0xe)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000206030000000000000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
clock_gettime(0x0, &(0x7f0000000300)={<r8=>0x0, <r9=>0x0})
timer_settime(0x0, 0x1, &(0x7f0000000380)={{}, {r8, r9+10000000}}, &(0x7f00000003c0))
listen(r7, 0x0)
getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

978.209176ms ago: executing program 2 (id=324):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}], 0x1, 0x4404c880)
syz_io_uring_setup(0x537c, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000180), &(0x7f0000000300), 0x0)
sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
r2 = syz_usb_connect$midi(0x2, 0x88, &(0x7f0000000680)=ANY=[@ANYBLOB="12011003000000081e0468404000010203010902760001010ce0030904000001010330090b2403000902080809080d0724010900070009240303f401100600062402024c3d000000000000000724011e00070007240102000700072401070007000b240301070200fb040507072401ff7f0700090506080004fc020f0c250108941bb876939c1139"], &(0x7f0000000a00)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x1, 0xfb, 0xfd, 0x40, 0x6}, 0x90, &(0x7f0000000780)={0x5, 0xf, 0x90, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0xb1, 0x0, 0xe310, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x8, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x7, 0x8, 0x4, 0x2}, @generic={0x6e, 0x10, 0xa, "ab64cf6bcfccf53391f50803d5e5cd0e48e533265961f2f5ed2147246525fd552a1ce6cd5b750281d352a5f319cd97a1777503f6872cae3e26a653fda10e3cf03b30d42c34aaec9bfa850d768ca1ed4636ccd4b9c27259e943417a4ad374def5f8bd9687dec57603c0315d"}]}, 0x4, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x4421}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x441}}, {0x9b, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x860}}]})
syz_usb_control_io$uac2(r2, &(0x7f0000000b40)={0x14, &(0x7f0000000e80)=ANY=[@ANYBLOB="202346d7f5ac6c4a66521ec51fb22f34993a2cc0ab20daa5cca5df735e3e0000003e0ca1a33a8d7d0f4c85eabd12675e8c629f9a0b2f135a6786fba297760ce4e4ffbf4a0342ecf8c7c987425ffc854d1b319468d684109180157a2e63824d1db367ba7b772a5e18b7f1a46679d42b6e7b6847763a8eb0bef5da3e48eeb8f3298e542e829f3d727000acef6df04d87ead46e4f72cb8175447e0630212fb970cd82fc71323731e5d2b47a28536537c99960f9d319f976af3129cc7554478d523c449d52c8c2f6cb1e5241a1bf07423f963887fc385ebfbef762f5658a9780e7dac71e98a335bbedeb1091642be3ad31"], &(0x7f0000001280)=ANY=[@ANYBLOB="0003040000000403256a4eb657d7afce7dc66533da3730195257160f2fc0cf0c31ea3c4ea15a634fa46b31201cb9c76e6a93a5970654e6e4102c401eb8156a928145eb269c9721b156d20469b4c57db9f7a1f575d764c32f2378b785c456162e821d505199c9b67da7dcb42b808b91c4246fbc1f7109e9a9ec2177fe525cfe71c9a0cb6342a24505f895a68153f64feea5c428c9aff7ff2ad923f48757a114edfb2da64ba5b7706f69bbdd548e845828d474b9dff21b8ed7e363655485e36ab6caecdb"]}, &(0x7f0000000e00)={0x44, &(0x7f0000000b80)={0x40, 0x13, 0xa5, "59a87529b0d183ba752399378a14ef2ca0a44300a875f67856b435f9977f07036fefd116eecc079a1414f89d7db8aeb3654d1d38132de6cd7279b6edbdbf22868d26bb00464ec30f5f48fa816ea1a5ff124965b857983794512999d69b0ab6c42ab99dd3fd2d3f059eba98c6b0195f85652758e95c817adc5be8e1a0cbfa5a9e3aa71970df59adf15a00ab8454a2fc4259c9321012d3fe585cb95bcc4efa78ad66c71f6f38"}, &(0x7f0000000c40)={0x0, 0xa, 0x1}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000cc0)=ANY=[@ANYBLOB="208100ffffec60"], &(0x7f0000000d00)={0x20, 0x82, 0x3, "2ab1ec"}, &(0x7f0000000d40)=ANY=[@ANYBLOB="3e830500000050"], &(0x7f0000000d80)=ANY=[@ANYBLOB="208401010000d3"], &(0x7f0000000dc0)={0x20, 0x85, 0x3, "362a82"}})
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff000000000000000085000000530000001801000020207525000000e76b2055207b1af8ff00000000bfa100000000000007010000f8fffffeb702000008000000b70600000000000085000047f7c0142fa8"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc00}, 0x94)
r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000628000480240001800b000100657874686472000014000280080006400000000108000740000000150900010073797a30000000000900020073797a3200000000050007"], 0x84}, 0x1, 0x0, 0x0, 0x10010}, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="201011"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000001380)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)={0x40, 0x19, 0x2, "9813"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/use-gss-proxy\x00', 0x82, 0x184)
setns(0xc9, 0x0)
r8 = socket(0x2a, 0x2, 0x9)
connect(r8, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffff, 0x4000}, 0x80)
write$nbd(r8, 0x0, 0x0)
read$FUSE(r7, 0x0, 0x0)
ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000000100))
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="001f000000000000340012800e00010069703665727370616e0000002000028006001800540000000500160002000000040012"], 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x20000010)

669.924951ms ago: executing program 4 (id=325):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c40)=@newtfilter={0x4d8, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4a8, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6b9a, 0x9, 0x5, 0x4, 0x4, 0x289, 0xd1, 0x9, 0x0, 0x8, 0x3, 0x7, 0x5, 0x19e, 0x3ff, 0x10001, 0x4, 0x2, 0x4, 0x0, 0x1000, 0x2, 0x5, 0x6, 0x0, 0x6, 0x2, 0x50e, 0x7f, 0x3, 0xf, 0x7fff, 0x3, 0x6, 0x9, 0xfffff8b3, 0xfffffffe, 0xffff, 0xccc0, 0x7f, 0x8, 0x65a, 0x3, 0x3, 0xd9, 0xffff, 0xa3a, 0x5, 0x5, 0x5, 0x400, 0x3, 0xff, 0x5, 0x6, 0x1, 0x8802, 0x80000000, 0x5, 0xb911, 0xa000000, 0x69e4, 0x7, 0x3, 0x8, 0x8, 0x80000001, 0x4, 0x4, 0x3, 0x1, 0x2, 0xd, 0x2, 0x2, 0x2, 0x2, 0x917, 0x2, 0xa7, 0x7, 0x8, 0x1, 0x7, 0xc3, 0x5, 0x1, 0x1, 0x9, 0x5, 0x4, 0xb, 0x7, 0x9, 0x63, 0xfffffe00, 0x2040, 0x2, 0x90c7, 0x3, 0x1000, 0x8, 0x8, 0x698c, 0x7ff, 0x1, 0x9, 0x8001, 0x7e9, 0x2, 0x6, 0x2c, 0x10, 0x2, 0x0, 0x1, 0xb, 0x8, 0x200, 0x8000, 0x7, 0x9, 0x9, 0x2, 0x3, 0xfffffdc8, 0xfff, 0x6, 0x9, 0x100, 0x80, 0x1, 0xa9, 0x6, 0x3, 0x2de, 0x3, 0x1, 0x4, 0x101, 0x6, 0x1000, 0x0, 0x5, 0x0, 0x3, 0x9, 0x16c, 0x1, 0x8000, 0x1, 0x8, 0x9, 0x7, 0x99, 0x3, 0x8, 0x8, 0x4b81, 0x7fffffff, 0x10000, 0x7, 0x5, 0x3, 0x8, 0xffff, 0x401, 0x2a53, 0x9, 0x40, 0x7, 0xd80, 0xfff, 0x8, 0x0, 0x4, 0x29, 0x9, 0x8, 0x7ff, 0x2, 0x8, 0x7f, 0x0, 0x401, 0x7, 0x8, 0x7ff, 0x800, 0x1, 0x6, 0xffffffff, 0x3, 0xff, 0x0, 0x8, 0x7, 0x6, 0x9, 0x5, 0xffffffff, 0xdba, 0xdf5, 0x6, 0x1, 0x4, 0xf8, 0x800, 0x9, 0x5, 0x1, 0x9, 0x2, 0x7, 0x7, 0x5, 0x432, 0x9, 0x5, 0x2, 0x2, 0x6, 0x4, 0x8, 0xa, 0x5, 0x6e06, 0x44, 0x4, 0x8, 0x2, 0x0, 0x2, 0x9, 0x7, 0xfffff001, 0x4, 0x6, 0x7f, 0x4, 0x800, 0x10, 0x10001, 0x1ff, 0x6, 0x9, 0xfffff1f7, 0x1, 0xb94, 0x80000001, 0x4, 0x6, 0x3, 0x6, 0x8001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x7, 0xc, 0x40, 0x2, {0x2, 0x2, 0x1c00, 0x4, 0x8, 0x4}, {0x5, 0x0, 0x4, 0x7, 0x6, 0x2}, 0x10, 0x1000, 0x99}}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_POLICE={0x54, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x5, 0x7, 0x8, {0x9, 0x1, 0xffff, 0x1, 0x7, 0x401}, {0x7, 0x2, 0x7, 0x6, 0x1, 0x3ff}, 0x2, 0x401, 0x8}}]}]}}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) (fail_nth: 5)

323.766978ms ago: executing program 0 (id=326):
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, 0x0, 0x30)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x0, 0x0})
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
socket$kcm(0x2b, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)

0s ago: executing program 4 (id=327):
r0 = io_uring_setup(0x664b, &(0x7f0000000500))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r4, 0xc178fd0b, &(0x7f0000000138)="0400000000000000000000007801")
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

get.0 gadget.1: fail, usb_ep_enable returned -22
[  130.137516][ T5779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  130.219346][ T5710] mos7720 2-1:1.0: Moschip 2 port adapter converter detected
[  130.320082][ T5715] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  130.553717][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short
[  130.555243][ T5715] usb 1-1: not running at top speed; connect to a high speed hub
[  130.555284][ T5715] usb 1-1: New USB device found, idVendor=19d2, idProduct=0017, bcdDevice=55.5f
[  130.595564][ T5715] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  130.595655][ T5715] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 1
[  130.654517][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.654548][ T5715] usb 1-1: Product: syz
[  130.654564][ T5715] usb 1-1: Manufacturer: syz
[  130.654580][ T5715] usb 1-1: SerialNumber: syz
[  131.444506][ T3336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.444527][ T3336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.475414][ T5710] usb 2-1: mos7720: usb_control_msg() failed: -71
[  131.505546][ T5710] usb 2-1: mos7720: usb_control_msg() failed: -71
[  131.508066][ T5710] usb 2-1: mos7720: usb_control_msg() failed: -71
[  131.530397][ T5710] usb 2-1: mos7720: usb_control_msg() failed: -71
[  131.607543][ T5715] usb 1-1: USB disconnect, device number 2
[  131.654981][ T5710] usb 2-1: mos7720: usb_control_msg() failed: -71
[  132.335260][ T5710] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  132.569228][ T3293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.569253][ T3293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.612330][ T5810] FAULT_INJECTION: forcing a failure.
[  132.612330][ T5810] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  132.612367][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  132.612390][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  132.612400][ T5810] Call Trace:
[  132.612407][ T5810]  <TASK>
[  132.612414][ T5810]  dump_stack_lvl+0xe8/0x150
[  132.612447][ T5810]  should_fail_ex+0x467/0x600
[  132.612486][ T5810]  prepare_alloc_pages+0x223/0x690
[  132.612515][ T5810]  __alloc_frozen_pages_noprof+0x12f/0x380
[  132.612545][ T5810]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  132.612588][ T5810]  __alloc_pages_noprof+0x10/0x100
[  132.612619][ T5810]  alloc_pages_bulk_noprof+0x67e/0x890
[  132.612644][ T5810]  ? copy_splice_read+0x16f/0xab0
[  132.612665][ T5810]  ? copy_splice_read+0x16f/0xab0
[  132.612696][ T5810]  copy_splice_read+0x19f/0xab0
[  132.612732][ T5810]  ? rcu_is_watching+0x15/0xb0
[  132.612753][ T5810]  ? __pfx_copy_splice_read+0x10/0x10
[  132.612771][ T5810]  ? trace_kmalloc+0x2a/0xf0
[  132.612788][ T5810]  ? look_up_lock_class+0x57/0x110
[  132.612813][ T5810]  ? register_lock_class+0x31/0x2e0
[  132.612831][ T5810]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  132.612862][ T5810]  ? alloc_pipe_info+0x35d/0x4c0
[  132.612888][ T5810]  ? __pfx_copy_splice_read+0x10/0x10
[  132.612908][ T5810]  splice_direct_to_actor+0x496/0xcc0
[  132.612933][ T5810]  ? kstrtouint+0x6e/0xe0
[  132.612969][ T5810]  ? __pfx_direct_splice_actor+0x10/0x10
[  132.612992][ T5810]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  132.613025][ T5810]  do_splice_direct+0x19b/0x2a0
[  132.613051][ T5810]  ? __pfx_do_splice_direct+0x10/0x10
[  132.613077][ T5810]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  132.613111][ T5810]  ? rw_verify_area+0x209/0x4d0
[  132.613152][ T5810]  do_sendfile+0x540/0x7e0
[  132.613181][ T5810]  ? lockdep_hardirqs_on+0x7a/0x110
[  132.613215][ T5810]  ? __pfx_do_sendfile+0x10/0x10
[  132.613252][ T5810]  __se_sys_sendfile64+0x144/0x1a0
[  132.613279][ T5810]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  132.613312][ T5810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.613332][ T5810]  do_syscall_64+0x174/0x580
[  132.613356][ T5810]  ? trace_irq_disable+0x3b/0x140
[  132.613384][ T5810]  ? clear_bhb_loop+0x70/0xc0
[  132.613406][ T5810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.613424][ T5810] RIP: 0033:0x7f92639de0d9
[  132.613462][ T5810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.613484][ T5810] RSP: 002b:00007f9261c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  132.613504][ T5810] RAX: ffffffffffffffda RBX: 00007f9263c65fa0 RCX: 00007f92639de0d9
[  132.613519][ T5810] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  132.613530][ T5810] RBP: 00007f9261c36090 R08: 0000000000000000 R09: 0000000000000000
[  132.613542][ T5810] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000001
[  132.613553][ T5810] R13: 00007f9263c66038 R14: 00007f9263c65fa0 R15: 00007ffc715dce28
[  132.613583][ T5810]  </TASK>
[  133.143591][ T5710] usb 2-1: USB disconnect, device number 2
[  133.144600][    C0] usb 2-1: mos7715_interrupt_callback - Error -19 submitting control urb
[  133.200317][ T5710] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  133.234695][ T5710] mos7720 2-1:1.0: device disconnected
[  133.337885][ T5815] Zero length message leads to an empty skb
[  133.414914][ T5817] FAULT_INJECTION: forcing a failure.
[  133.414914][ T5817] name failslab, interval 1, probability 0, space 0, times 0
[  133.414952][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  133.414981][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  133.414994][ T5817] Call Trace:
[  133.415002][ T5817]  <TASK>
[  133.415011][ T5817]  dump_stack_lvl+0xe8/0x150
[  133.415049][ T5817]  should_fail_ex+0x467/0x600
[  133.415098][ T5817]  should_failslab+0xa8/0x100
[  133.415126][ T5817]  kmem_cache_alloc_noprof+0xa4/0x650
[  133.415161][ T5817]  ? skb_clone+0x212/0x3a0
[  133.415190][ T5817]  ? skb_clone+0x212/0x3a0
[  133.415228][ T5817]  skb_clone+0x212/0x3a0
[  133.415257][ T5817]  ? nfnetlink_rcv+0x4b0/0x28d0
[  133.415287][ T5817]  nfnetlink_rcv+0x4e2/0x28d0
[  133.415312][ T5817]  ? __local_bh_enable+0x1e1/0x2f0
[  133.415348][ T5817]  ? lockdep_hardirqs_on+0x7a/0x110
[  133.415377][ T5817]  ? __dev_queue_xmit+0x294/0x3880
[  133.415412][ T5817]  ? __dev_queue_xmit+0x1ee9/0x3880
[  133.415454][ T5817]  ? __dev_queue_xmit+0x294/0x3880
[  133.415491][ T5817]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  133.415535][ T5817]  ? ref_tracker_free+0x668/0x820
[  133.415559][ T5817]  ? __pfx_ref_tracker_free+0x10/0x10
[  133.415580][ T5817]  ? __asan_memcpy+0x40/0x70
[  133.415612][ T5817]  ? __skb_clone+0x5c/0x6c0
[  133.415646][ T5817]  ? __skb_clone+0x449/0x6c0
[  133.415681][ T5817]  ? skb_clone+0x246/0x3a0
[  133.415714][ T5817]  ? __netlink_deliver_tap+0x811/0x860
[  133.415744][ T5817]  ? netlink_deliver_tap+0x2e/0x1b0
[  133.415780][ T5817]  ? netlink_deliver_tap+0x2e/0x1b0
[  133.415809][ T5817]  ? netlink_deliver_tap+0x2e/0x1b0
[  133.415846][ T5817]  netlink_unicast+0x7f5/0x990
[  133.415884][ T5817]  netlink_sendmsg+0x813/0xb40
[  133.415925][ T5817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.415958][ T5817]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  133.415989][ T5817]  ? __kernel_text_address+0xd/0x30
[  133.416023][ T5817]  ? unwind_get_return_address+0x4d/0x90
[  133.416049][ T5817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.416085][ T5817]  sock_sendmsg_nosec+0x13a/0x180
[  133.416123][ T5817]  ____sys_sendmsg+0x565/0x870
[  133.416147][ T5817]  ? __might_fault+0xaf/0x130
[  133.416169][ T5817]  ? __pfx_____sys_sendmsg+0x10/0x10
[  133.416200][ T5817]  ? import_iovec+0x73/0xa0
[  133.416223][ T5817]  ___sys_sendmsg+0x2a5/0x360
[  133.416246][ T5817]  ? __lock_acquire+0x683/0x2ce0
[  133.416267][ T5817]  ? __pfx____sys_sendmsg+0x10/0x10
[  133.416318][ T5817]  ? __fget_files+0x2a/0x420
[  133.416337][ T5817]  ? __fget_files+0x3a8/0x420
[  133.416363][ T5817]  __x64_sys_sendmsg+0x1b7/0x290
[  133.416390][ T5817]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  133.416428][ T5817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.416447][ T5817]  do_syscall_64+0x174/0x580
[  133.416470][ T5817]  ? trace_irq_disable+0x3b/0x140
[  133.416498][ T5817]  ? clear_bhb_loop+0x70/0xc0
[  133.416520][ T5817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.416537][ T5817] RIP: 0033:0x7f891490e0d9
[  133.416553][ T5817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.416568][ T5817] RSP: 002b:00007f8912b66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  133.416588][ T5817] RAX: ffffffffffffffda RBX: 00007f8914b95fa0 RCX: 00007f891490e0d9
[  133.416601][ T5817] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  133.416613][ T5817] RBP: 00007f8912b66090 R08: 0000000000000000 R09: 0000000000000000
[  133.416626][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.416637][ T5817] R13: 00007f8914b96038 R14: 00007f8914b95fa0 R15: 00007ffd959ae728
[  133.416663][ T5817]  </TASK>
[  134.138930][ T5819] process 'syz.2.17' launched './file2' with NULL argv: empty string added
[  134.174651][ T5823] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  134.254176][ T3404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.254199][ T3404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.593617][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.593641][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.871962][   T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.093539][ T5834] capability: warning: `syz.2.21' uses deprecated v2 capabilities in a way that may be insecure
[  135.164951][ T5834] program syz.2.21 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.338144][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[  135.460981][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.461678][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.462917][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.529826][  T143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.664542][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.812107][   T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.812980][   T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.813384][   T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.813728][   T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.814112][   T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.814323][   T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.814805][   T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.814990][   T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.815646][   T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.815920][   T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.816098][   T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.816286][   T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.816460][   T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.816936][   T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.436067][ T5849] jffs2: notice: (5849) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  138.781661][ T1325] ieee802154 phy0 wpan0: encryption failed: -22
[  138.808970][ T1325] ieee802154 phy1 wpan1: encryption failed: -22
[  139.555202][ T5850] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  139.789322][ T5850] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  139.926505][ T5850] usb 2-1: unable to read config index 0 descriptor/start: -71
[  139.926549][ T5850] usb 2-1: can't read configurations, error -71
[  140.572797][ T5874] netlink: Conntrack attr has 4 unknown bytes
[  140.572857][ T5874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.311720][ T5887] FAULT_INJECTION: forcing a failure.
[  141.311720][ T5887] name failslab, interval 1, probability 0, space 0, times 0
[  141.314896][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  141.314929][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  141.314940][ T5887] Call Trace:
[  141.314946][ T5887]  <TASK>
[  141.314955][ T5887]  dump_stack_lvl+0xe8/0x150
[  141.314986][ T5887]  should_fail_ex+0x467/0x600
[  141.315019][ T5887]  should_failslab+0xa8/0x100
[  141.315040][ T5887]  kmem_cache_alloc_noprof+0xa4/0x650
[  141.315070][ T5887]  ? skb_clone+0x212/0x3a0
[  141.315093][ T5887]  ? skb_clone+0x212/0x3a0
[  141.315122][ T5887]  skb_clone+0x212/0x3a0
[  141.315150][ T5887]  __netlink_deliver_tap+0x413/0x860
[  141.315185][ T5887]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.315210][ T5887]  netlink_deliver_tap+0x19c/0x1b0
[  141.315239][ T5887]  netlink_unicast+0x7b8/0x990
[  141.315269][ T5887]  netlink_sendmsg+0x813/0xb40
[  141.315301][ T5887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.315331][ T5887]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  141.315360][ T5887]  ? __kernel_text_address+0xd/0x30
[  141.315390][ T5887]  ? unwind_get_return_address+0x4d/0x90
[  141.315413][ T5887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.315438][ T5887]  sock_sendmsg_nosec+0x13a/0x180
[  141.315477][ T5887]  ____sys_sendmsg+0x565/0x870
[  141.315503][ T5887]  ? __might_fault+0xaf/0x130
[  141.315529][ T5887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.315563][ T5887]  ? import_iovec+0x73/0xa0
[  141.315590][ T5887]  ___sys_sendmsg+0x2a5/0x360
[  141.315618][ T5887]  ? __lock_acquire+0x683/0x2ce0
[  141.315639][ T5887]  ? __pfx____sys_sendmsg+0x10/0x10
[  141.315690][ T5887]  ? __fget_files+0x2a/0x420
[  141.315708][ T5887]  ? __fget_files+0x3a8/0x420
[  141.315735][ T5887]  __x64_sys_sendmsg+0x1b7/0x290
[  141.315762][ T5887]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  141.315814][ T5887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.315835][ T5887]  do_syscall_64+0x174/0x580
[  141.315858][ T5887]  ? trace_irq_disable+0x3b/0x140
[  141.315887][ T5887]  ? clear_bhb_loop+0x70/0xc0
[  141.315912][ T5887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.315932][ T5887] RIP: 0033:0x7fbf6170e0d9
[  141.315951][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.315967][ T5887] RSP: 002b:00007fbf5f966028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.315988][ T5887] RAX: ffffffffffffffda RBX: 00007fbf61995fa0 RCX: 00007fbf6170e0d9
[  141.316012][ T5887] RDX: 0000000004008010 RSI: 0000200000000000 RDI: 0000000000000003
[  141.316025][ T5887] RBP: 00007fbf5f966090 R08: 0000000000000000 R09: 0000000000000000
[  141.316037][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.316049][ T5887] R13: 00007fbf61996038 R14: 00007fbf61995fa0 R15: 00007ffc3a516578
[  141.316079][ T5887]  </TASK>
[  143.388913][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.587439][ T5871] bridge_slave_1 (unregistering): left allmulticast mode
[  143.587477][ T5871] bridge_slave_1 (unregistering): left promiscuous mode
[  143.587573][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.054709][ T5944] program syz.1.48 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.591656][ T5948] netlink: 'syz.1.50': attribute type 8 has an invalid length.
[  148.706606][ T5950] netlink: 'syz.1.50': attribute type 8 has an invalid length.
[  150.538670][ T5968] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  151.950969][ T5984] jffs2: notice: (5984) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  152.305635][ T5984] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR
[  153.934819][ T6003] FAULT_INJECTION: forcing a failure.
[  153.934819][ T6003] name failslab, interval 1, probability 0, space 0, times 0
[  153.939022][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  153.939054][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  153.939068][ T6003] Call Trace:
[  153.939076][ T6003]  <TASK>
[  153.939087][ T6003]  dump_stack_lvl+0xe8/0x150
[  153.939125][ T6003]  should_fail_ex+0x467/0x600
[  153.939157][ T6003]  should_failslab+0xa8/0x100
[  153.939178][ T6003]  __kmalloc_noprof+0xfe/0x780
[  153.939194][ T6003]  ? trace_kmem_cache_alloc+0x29/0xe0
[  153.939222][ T6003]  ? security_sk_alloc+0x52/0x360
[  153.939251][ T6003]  ? security_sk_alloc+0x52/0x360
[  153.939285][ T6003]  security_sk_alloc+0x52/0x360
[  153.939316][ T6003]  sk_prot_alloc+0x101/0x210
[  153.939345][ T6003]  sk_alloc+0x3a/0x390
[  153.939371][ T6003]  inet_create+0x7a9/0x1000
[  153.939398][ T6003]  ? inet_create+0x9d/0x1000
[  153.939426][ T6003]  __sock_create+0x4b3/0x9d0
[  153.939455][ T6003]  mptcp_subflow_create_socket+0xfd/0x810
[  153.939491][ T6003]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[  153.939534][ T6003]  __mptcp_nmpc_sk+0x155/0x790
[  153.939572][ T6003]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[  153.939601][ T6003]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  153.939630][ T6003]  mptcp_bind+0xab/0x1d0
[  153.939664][ T6003]  __sys_bind+0x2e9/0x410
[  153.939688][ T6003]  ? __pfx___sys_bind+0x10/0x10
[  153.939724][ T6003]  ? __pfx_ksys_write+0x10/0x10
[  153.939767][ T6003]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.939792][ T6003]  __x64_sys_bind+0x7a/0x90
[  153.939819][ T6003]  do_syscall_64+0x174/0x580
[  153.939848][ T6003]  ? trace_irq_disable+0x3b/0x140
[  153.939882][ T6003]  ? clear_bhb_loop+0x70/0xc0
[  153.939908][ T6003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.939930][ T6003] RIP: 0033:0x7f92639de0d9
[  153.939951][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.939969][ T6003] RSP: 002b:00007f9261c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  153.939992][ T6003] RAX: ffffffffffffffda RBX: 00007f9263c65fa0 RCX: 00007f92639de0d9
[  153.940008][ T6003] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003
[  153.940021][ T6003] RBP: 00007f9261c36090 R08: 0000000000000000 R09: 0000000000000000
[  153.940033][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.940045][ T6003] R13: 00007f9263c66038 R14: 00007f9263c65fa0 R15: 00007ffc715dce28
[  153.940080][ T6003]  </TASK>
[  154.452588][ T6006] warning: `syz.4.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  154.461850][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'.
[  154.614389][   T31] IPVS: starting estimator thread 0...
[  154.703716][ T6013] IPVS: using max 10 ests per chain, 24000 per kthread
[  154.940040][   T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  154.961503][ T6012] syz.0.67 (6012) used greatest stack depth: 19328 bytes left
[  155.115486][   T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  155.117129][   T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.117157][   T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  155.178589][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  155.178622][   T31] usb 5-1: SerialNumber: syz
[  156.953693][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'.
[  157.010514][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.011881][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.466376][ T6030] FAULT_INJECTION: forcing a failure.
[  157.466376][ T6030] name failslab, interval 1, probability 0, space 0, times 0
[  157.466414][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  157.466441][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  157.466454][ T6030] Call Trace:
[  157.466463][ T6030]  <TASK>
[  157.466472][ T6030]  dump_stack_lvl+0xe8/0x150
[  157.466510][ T6030]  should_fail_ex+0x467/0x600
[  157.466551][ T6030]  should_failslab+0xa8/0x100
[  157.466579][ T6030]  __kmalloc_noprof+0xfe/0x780
[  157.466602][ T6030]  ? tomoyo_encode+0x2ad/0x570
[  157.466628][ T6030]  ? tomoyo_encode+0x2ad/0x570
[  157.466664][ T6030]  tomoyo_encode+0x2ad/0x570
[  157.466702][ T6030]  tomoyo_realpath_from_path+0x5fa/0x640
[  157.466742][ T6030]  ? tomoyo_path_number_perm+0x219/0x5f0
[  157.466766][ T6030]  tomoyo_path_number_perm+0x246/0x5f0
[  157.466791][ T6030]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  157.466813][ T6030]  ? __lock_acquire+0x683/0x2ce0
[  157.466851][ T6030]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  157.466879][ T6030]  ? hook_file_ioctl+0x1f3/0x600
[  157.466910][ T6030]  ? lockdep_hardirqs_on+0x7a/0x110
[  157.466973][ T6030]  ? __fget_files+0x2a/0x420
[  157.467002][ T6030]  ? __fget_files+0x2a/0x420
[  157.467025][ T6030]  ? __fget_files+0x3a8/0x420
[  157.467049][ T6030]  ? __fget_files+0x2a/0x420
[  157.467079][ T6030]  security_file_ioctl+0xc3/0x2a0
[  157.467106][ T6030]  __se_sys_ioctl+0x47/0x170
[  157.467139][ T6030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.467164][ T6030]  do_syscall_64+0x174/0x580
[  157.467194][ T6030]  ? trace_irq_disable+0x3b/0x140
[  157.467230][ T6030]  ? clear_bhb_loop+0x70/0xc0
[  157.467258][ T6030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.467282][ T6030] RIP: 0033:0x7f71b958e0d9
[  157.467303][ T6030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.467322][ T6030] RSP: 002b:00007f71b77e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  157.467346][ T6030] RAX: ffffffffffffffda RBX: 00007f71b9815fa0 RCX: 00007f71b958e0d9
[  157.467362][ T6030] RDX: 0000000000000000 RSI: 0000000080345621 RDI: 0000000000000003
[  157.467375][ T6030] RBP: 00007f71b77e6090 R08: 0000000000000000 R09: 0000000000000000
[  157.467388][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.467400][ T6030] R13: 00007f71b9816038 R14: 00007f71b9815fa0 R15: 00007ffc79897d78
[  157.467434][ T6030]  </TASK>
[  157.483681][ T6030] ERROR: Out of memory at tomoyo_realpath_from_path.
[  157.531982][   T31] usb 5-1: 0:2 : does not exist
[  158.496771][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.72'.
[  158.700560][ T5850] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  158.769011][   T31] usb 5-1: USB disconnect, device number 2
[  158.861707][ T5850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  158.863221][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.863245][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  158.863296][ T5850] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  158.867871][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.867897][ T5850] usb 2-1: Product: syz
[  158.867914][ T5850] usb 2-1: Manufacturer: syz
[  158.867929][ T5850] usb 2-1: SerialNumber: syz
[  159.110041][ T5710] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  159.283889][ T5850] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  159.283953][ T5850] cdc_ncm 2-1:1.0: bind() failure
[  159.288588][ T5710] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  159.313296][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.430570][ T5595] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  159.451404][ T5710] usb 1-1: config 0 descriptor??
[  159.453325][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.475710][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.477442][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.518968][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.567822][ T5710] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  159.574469][ T5598] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  159.692646][ T5850] usb 2-1: USB disconnect, device number 5
[  159.731282][ T5595] usb 3-1: New USB device found, idVendor=05ac, idProduct=aecb, bcdDevice=c4.69
[  159.735251][ T5595] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  159.735281][ T5595] usb 3-1: config 0 has no interface number 0
[  159.735316][ T5595] usb 3-1: config 0 interface 196 has no altsetting 0
[  159.777874][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.777906][ T5595] usb 3-1: Product: syz
[  159.777923][ T5595] usb 3-1: Manufacturer: syz
[  159.777939][ T5595] usb 3-1: SerialNumber: syz
[  159.803260][ T5598] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb
[  159.804990][ T5598] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  159.834170][ T5598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=250
[  159.834201][ T5598] usb 4-1: Product: syz
[  159.834217][ T5598] usb 4-1: Manufacturer: syz
[  159.834232][ T5598] usb 4-1: SerialNumber: syz
[  159.920756][ T5710] gp8psk: usb in 137 operation failed.
[  159.920797][ T5710] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  159.920842][ T5710] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  160.032453][ T5595] usb 3-1: config 0 descriptor??
[  160.046780][ T5710] usb 1-1: USB disconnect, device number 3
[  161.574470][ T6070] tmpfs: Unknown parameter '0x0000000000000005j'
[  161.653151][ T5595] ipheth 3-1:0.196: Unable to find alternate settings interface
[  161.753768][ T5598] usb 4-1: USB disconnect, device number 2
[  161.760590][ T5595] usb 3-1: USB disconnect, device number 2
[  161.811850][ T6074] FAULT_INJECTION: forcing a failure.
[  161.811850][ T6074] name failslab, interval 1, probability 0, space 0, times 0
[  161.811890][ T6074] CPU: 1 UID: 0 PID: 6074 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  161.811916][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  161.811930][ T6074] Call Trace:
[  161.811938][ T6074]  <TASK>
[  161.811948][ T6074]  dump_stack_lvl+0xe8/0x150
[  161.811986][ T6074]  should_fail_ex+0x467/0x600
[  161.812027][ T6074]  should_failslab+0xa8/0x100
[  161.812055][ T6074]  kmem_cache_alloc_noprof+0xa4/0x650
[  161.812106][ T6074]  ? skb_clone+0x212/0x3a0
[  161.812142][ T6074]  ? skb_clone+0x212/0x3a0
[  161.812180][ T6074]  skb_clone+0x212/0x3a0
[  161.812221][ T6074]  __netlink_deliver_tap+0x413/0x860
[  161.812266][ T6074]  ? netlink_deliver_tap+0x2e/0x1b0
[  161.812298][ T6074]  netlink_deliver_tap+0x19c/0x1b0
[  161.812331][ T6074]  netlink_unicast+0x7b8/0x990
[  161.812371][ T6074]  netlink_sendmsg+0x813/0xb40
[  161.812411][ T6074]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.812445][ T6074]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  161.812483][ T6074]  ? __kernel_text_address+0xd/0x30
[  161.812518][ T6074]  ? unwind_get_return_address+0x4d/0x90
[  161.812546][ T6074]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.812576][ T6074]  sock_sendmsg_nosec+0x13a/0x180
[  161.812617][ T6074]  ____sys_sendmsg+0x565/0x870
[  161.812647][ T6074]  ? __might_fault+0xaf/0x130
[  161.812678][ T6074]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.812718][ T6074]  ? import_iovec+0x73/0xa0
[  161.812748][ T6074]  ___sys_sendmsg+0x2a5/0x360
[  161.812778][ T6074]  ? __lock_acquire+0x683/0x2ce0
[  161.812805][ T6074]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.812876][ T6074]  ? __fget_files+0x2a/0x420
[  161.812900][ T6074]  ? __fget_files+0x3a8/0x420
[  161.812937][ T6074]  __x64_sys_sendmsg+0x1b7/0x290
[  161.812971][ T6074]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.813022][ T6074]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.813048][ T6074]  do_syscall_64+0x174/0x580
[  161.813087][ T6074]  ? trace_irq_disable+0x3b/0x140
[  161.813122][ T6074]  ? clear_bhb_loop+0x70/0xc0
[  161.813150][ T6074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.813174][ T6074] RIP: 0033:0x7f92639de0d9
[  161.813195][ T6074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.813214][ T6074] RSP: 002b:00007f9261c36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.813238][ T6074] RAX: ffffffffffffffda RBX: 00007f9263c65fa0 RCX: 00007f92639de0d9
[  161.813253][ T6074] RDX: 0000000024008800 RSI: 0000200000000040 RDI: 0000000000000003
[  161.813268][ T6074] RBP: 00007f9261c36090 R08: 0000000000000000 R09: 0000000000000000
[  161.813281][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.813294][ T6074] R13: 00007f9263c66038 R14: 00007f9263c65fa0 R15: 00007ffc715dce28
[  161.813330][ T6074]  </TASK>
[  162.604707][ T6090] program syz.4.90 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  163.036793][ T6104] openvswitch: netlink: Flow key attribute not present in set flow.
[  163.270885][ T6112] FAULT_INJECTION: forcing a failure.
[  163.270885][ T6112] name failslab, interval 1, probability 0, space 0, times 0
[  163.270923][ T6112] CPU: 1 UID: 0 PID: 6112 Comm: syz.1.98 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  163.270948][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.270958][ T6112] Call Trace:
[  163.270966][ T6112]  <TASK>
[  163.270973][ T6112]  dump_stack_lvl+0xe8/0x150
[  163.271005][ T6112]  should_fail_ex+0x467/0x600
[  163.271040][ T6112]  should_failslab+0xa8/0x100
[  163.271064][ T6112]  kmem_cache_alloc_noprof+0xa4/0x650
[  163.271093][ T6112]  ? skb_clone+0x212/0x3a0
[  163.271118][ T6112]  ? skb_clone+0x212/0x3a0
[  163.271147][ T6112]  skb_clone+0x212/0x3a0
[  163.271174][ T6112]  __netlink_deliver_tap+0x413/0x860
[  163.271208][ T6112]  ? netlink_deliver_tap+0x2e/0x1b0
[  163.271234][ T6112]  netlink_deliver_tap+0x19c/0x1b0
[  163.271259][ T6112]  netlink_unicast+0x7b8/0x990
[  163.271289][ T6112]  netlink_sendmsg+0x813/0xb40
[  163.271322][ T6112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.271348][ T6112]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  163.271375][ T6112]  ? __kernel_text_address+0xd/0x30
[  163.271404][ T6112]  ? unwind_get_return_address+0x4d/0x90
[  163.271426][ T6112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.271450][ T6112]  sock_sendmsg_nosec+0x13a/0x180
[  163.271482][ T6112]  ____sys_sendmsg+0x565/0x870
[  163.271505][ T6112]  ? __might_fault+0xaf/0x130
[  163.271528][ T6112]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.271569][ T6112]  ? import_iovec+0x73/0xa0
[  163.271594][ T6112]  ___sys_sendmsg+0x2a5/0x360
[  163.271617][ T6112]  ? __lock_acquire+0x683/0x2ce0
[  163.271638][ T6112]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.271695][ T6112]  ? __fget_files+0x2a/0x420
[  163.271718][ T6112]  ? __fget_files+0x3a8/0x420
[  163.271748][ T6112]  __x64_sys_sendmsg+0x1b7/0x290
[  163.271775][ T6112]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  163.271814][ T6112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.271834][ T6112]  do_syscall_64+0x174/0x580
[  163.271857][ T6112]  ? trace_irq_disable+0x3b/0x140
[  163.271886][ T6112]  ? clear_bhb_loop+0x70/0xc0
[  163.271908][ T6112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.271926][ T6112] RIP: 0033:0x7fbf6170e0d9
[  163.271942][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.271956][ T6112] RSP: 002b:00007fbf5f966028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.271976][ T6112] RAX: ffffffffffffffda RBX: 00007fbf61995fa0 RCX: 00007fbf6170e0d9
[  163.271989][ T6112] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  163.272000][ T6112] RBP: 00007fbf5f966090 R08: 0000000000000000 R09: 0000000000000000
[  163.272010][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.272021][ T6112] R13: 00007fbf61996038 R14: 00007fbf61995fa0 R15: 00007ffc3a516578
[  163.272050][ T6112]  </TASK>
[  163.272844][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'.
[  163.510058][   T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  163.721752][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  163.721795][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  163.724271][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  163.724299][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.724320][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  163.724376][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.784761][ T5788] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  163.818561][   T10] uvcvideo 3-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  163.930032][ T5788] usb 5-1: Using ep0 maxpacket: 8
[  163.935313][ T5788] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  163.937555][ T5788] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.937583][ T5788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.978613][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.978644][ T5788] usb 5-1: Product: syz
[  163.978882][ T5788] usb 5-1: Manufacturer: syz
[  163.978900][ T5788] usb 5-1: SerialNumber: syz
[  164.250447][   T10] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1).
[  164.250611][   T10] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770.
[  164.476177][ T5788] usb 5-1: unit 6 not found!
[  164.476204][ T5788] usb 5-1: unit 0 not found!
[  164.492944][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  164.499072][   T10] usb 3-1: USB disconnect, device number 3
[  164.501842][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'.
[  164.586035][ T6121] tmpfs: Unknown parameter 'nr�bloc'
[  164.646595][    T9] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  164.651742][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.651795][    T9] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  164.651825][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  164.714409][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.714438][    T9] usb 2-1: Product: syz
[  164.714453][    T9] usb 2-1: Manufacturer: syz
[  164.714469][    T9] usb 2-1: SerialNumber: syz
[  164.873682][    T9] usb-storage 2-1:1.0: USB Mass Storage device detected
[  164.902682][ T6126] program syz.0.103 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  164.990796][ T6118] binder: 6116:6118 ioctl c0306201 200000000640 returned -22
[  165.024598][ T6118] binder: 6116:6118 ioctl c0306201 200000000640 returned -22
[  165.069768][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.108728][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.134329][    T9] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  165.212752][ T5788] usb 5-1: USB disconnect, device number 3
[  165.445821][    T9] usb 2-1: USB disconnect, device number 6
[  165.610033][ T5595] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  165.630156][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.720127][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  165.800167][ T5595] usb 1-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00
[  165.830291][ T5595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.830330][ T5595] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  165.830376][ T5595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.859968][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  166.016002][ T5595] usb 1-1: config 0 descriptor??
[  166.156993][ T5788] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  166.236305][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.40
[  166.241451][   T10] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 145, changing to 11
[  166.241491][   T10] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.241520][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  166.311826][ T5788] usb 5-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00
[  166.314315][ T5788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.314350][ T5788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.314394][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.386845][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.386875][   T10] usb 3-1: Product: syz
[  166.386891][   T10] usb 3-1: Manufacturer: syz
[  166.386907][   T10] usb 3-1: SerialNumber: syz
[  166.602339][ T5788] usb 5-1: config 0 descriptor??
[  166.805476][ T5595] hid-generic 0003:0EEF:722A.0001: unbalanced collection at end of report description
[  166.806569][ T5595] hid-generic 0003:0EEF:722A.0001: probe with driver hid-generic failed with error -22
[  166.930734][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.931323][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.982100][ T6134] 9p: Unknown Cache mode or invalid value f
[  167.029456][ T6142] FAULT_INJECTION: forcing a failure.
[  167.029456][ T6142] name failslab, interval 1, probability 0, space 0, times 0
[  167.030550][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.1.108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  167.030580][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  167.030593][ T6142] Call Trace:
[  167.030602][ T6142]  <TASK>
[  167.030611][ T6142]  dump_stack_lvl+0xe8/0x150
[  167.030656][ T6142]  should_fail_ex+0x467/0x600
[  167.030696][ T6142]  should_failslab+0xa8/0x100
[  167.030724][ T6142]  __kmalloc_noprof+0xfe/0x780
[  167.030749][ T6142]  ? ip_options_get+0x51/0x570
[  167.030815][ T6142]  ? ip_options_get+0x51/0x570
[  167.030845][ T6142]  ip_options_get+0x51/0x570
[  167.030878][ T6142]  ip_cmsg_send+0x591/0xa70
[  167.030923][ T6142]  raw_sendmsg+0x5cd/0x1a20
[  167.030962][ T6142]  ? tomoyo_check_inet_address+0x27f/0x930
[  167.030991][ T6142]  ? __pfx_raw_sendmsg+0x10/0x10
[  167.031013][ T6142]  ? __lock_acquire+0x683/0x2ce0
[  167.031051][ T6142]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  167.031096][ T6142]  ? sock_rps_record_flow+0x19/0x350
[  167.031127][ T6142]  ? inet_sendmsg+0x298/0x320
[  167.031157][ T6142]  ? __pfx_inet_sendmsg+0x10/0x10
[  167.031183][ T6142]  sock_sendmsg_nosec+0x10e/0x180
[  167.031223][ T6142]  ____sys_sendmsg+0x565/0x870
[  167.031262][ T6142]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.031303][ T6142]  ? import_iovec+0x73/0xa0
[  167.031333][ T6142]  ___sys_sendmsg+0x2a5/0x360
[  167.031361][ T6142]  ? __lock_acquire+0x683/0x2ce0
[  167.031387][ T6142]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.031454][ T6142]  ? __fget_files+0x2a/0x420
[  167.031479][ T6142]  ? __fget_files+0x3a8/0x420
[  167.031515][ T6142]  __x64_sys_sendmsg+0x1b7/0x290
[  167.031547][ T6142]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  167.031596][ T6142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.031621][ T6142]  do_syscall_64+0x174/0x580
[  167.031650][ T6142]  ? trace_irq_disable+0x3b/0x140
[  167.031684][ T6142]  ? clear_bhb_loop+0x70/0xc0
[  167.031711][ T6142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.031734][ T6142] RIP: 0033:0x7fbf6170e0d9
[  167.031756][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.031783][ T6142] RSP: 002b:00007fbf5f966028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.031807][ T6142] RAX: ffffffffffffffda RBX: 00007fbf61995fa0 RCX: 00007fbf6170e0d9
[  167.031824][ T6142] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003
[  167.031838][ T6142] RBP: 00007fbf5f966090 R08: 0000000000000000 R09: 0000000000000000
[  167.031851][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.031864][ T6142] R13: 00007fbf61996038 R14: 00007fbf61995fa0 R15: 00007ffc3a516578
[  167.031897][ T6142]  </TASK>
[  167.440909][ T5788] hid-generic 0003:0EEF:722A.0002: unbalanced collection at end of report description
[  167.441430][ T5788] hid-generic 0003:0EEF:722A.0002: probe with driver hid-generic failed with error -22
[  167.547097][   T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5
[  167.688841][   T36] usb 1-1: USB disconnect, device number 4
[  167.814419][ T5595] usb 5-1: USB disconnect, device number 4
[  167.883419][ T6147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  167.883440][ T6147] IPv6: NLM_F_CREATE should be set when creating new route
[  168.069130][    C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  168.219051][    C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  168.233082][   T10] usb 3-1: USB disconnect, device number 4
[  169.482498][ T6164] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.114'.
[  170.809997][ T5850] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  170.999961][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  171.439986][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  171.449972][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  171.459967][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  171.469976][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  171.479970][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  171.489969][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  171.499965][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  171.509965][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  172.598742][ T6182] program syz.1.118 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  172.620786][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'.
[  172.793667][ T5850] usb 1-1: device descriptor read/all, error -71
[  172.917540][   T10] appletouch 3-1:1.0: input: appletouch disconnected
[  173.597585][ T6193] FAULT_INJECTION: forcing a failure.
[  173.597585][ T6193] name failslab, interval 1, probability 0, space 0, times 0
[  173.597655][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  173.597683][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  173.597697][ T6193] Call Trace:
[  173.597706][ T6193]  <TASK>
[  173.597715][ T6193]  dump_stack_lvl+0xe8/0x150
[  173.597755][ T6193]  should_fail_ex+0x467/0x600
[  173.597797][ T6193]  should_failslab+0xa8/0x100
[  173.597833][ T6193]  __kmalloc_cache_noprof+0xa0/0x6b0
[  173.597859][ T6193]  ? snd_pcm_oss_change_params_locked+0x16d/0x3c80
[  173.597884][ T6193]  ? snd_pcm_oss_change_params_locked+0x16d/0x3c80
[  173.597917][ T6193]  snd_pcm_oss_change_params_locked+0x16d/0x3c80
[  173.597943][ T6193]  ? __lock_acquire+0x683/0x2ce0
[  173.597986][ T6193]  ? do_raw_spin_lock+0x12b/0x2f0
[  173.598027][ T6193]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  173.598065][ T6193]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  173.598097][ T6193]  ? lockdep_hardirqs_on+0x7a/0x110
[  173.598126][ T6193]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  173.598156][ T6193]  ? mutex_lock_interruptible_nested+0x152/0x1d0
[  173.598180][ T6193]  ? snd_pcm_oss_get_active_substream+0x198/0x280
[  173.598213][ T6193]  snd_pcm_oss_get_active_substream+0x20b/0x280
[  173.598247][ T6193]  snd_pcm_oss_set_rate+0x1bc/0x4f0
[  173.598278][ T6193]  snd_pcm_oss_ioctl+0xc31/0xe00
[  173.598318][ T6193]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  173.598357][ T6193]  __se_sys_ioctl+0xff/0x170
[  173.598390][ T6193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.598416][ T6193]  do_syscall_64+0x174/0x580
[  173.598446][ T6193]  ? trace_irq_disable+0x3b/0x140
[  173.598484][ T6193]  ? clear_bhb_loop+0x70/0xc0
[  173.598513][ T6193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.598536][ T6193] RIP: 0033:0x7f891490e0d9
[  173.598558][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.598577][ T6193] RSP: 002b:00007f8912b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.598601][ T6193] RAX: ffffffffffffffda RBX: 00007f8914b95fa0 RCX: 00007f891490e0d9
[  173.598618][ T6193] RDX: 0000200000000240 RSI: 00000000c0045002 RDI: 0000000000000003
[  173.598632][ T6193] RBP: 00007f8912b66090 R08: 0000000000000000 R09: 0000000000000000
[  173.598646][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.598658][ T6193] R13: 00007f8914b96038 R14: 00007f8914b95fa0 R15: 00007ffd959ae728
[  173.598694][ T6193]  </TASK>
[  174.798131][ T6202] netlink: 'syz.2.126': attribute type 1 has an invalid length.
[  175.041054][ T6202] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.894640][ T5788] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  175.905556][   T37] audit: type=1326 audit(1787072491.598:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6210 comm="syz.0.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92639de0d9 code=0x7ffc0000
[  175.946820][   T37] audit: type=1326 audit(1787072491.628:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6210 comm="syz.0.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92639de0d9 code=0x7ffc0000
[  175.982073][   T37] audit: type=1326 audit(1787072491.808:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6210 comm="syz.0.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92639de0d9 code=0x7ffc0000
[  175.982364][   T37] audit: type=1326 audit(1787072491.808:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6210 comm="syz.0.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92639de0d9 code=0x7ffc0000
[  176.040369][   T37] audit: type=1326 audit(1787072491.768:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6210 comm="syz.0.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92639de0d9 code=0x7ffc0000
[  176.048197][   T37] audit: type=1326 audit(1787072491.868:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6210 comm="syz.0.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92639de0d9 code=0x7ffc0000
[  176.048256][   T37] audit: type=1326 audit(1787072491.868:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6210 comm="syz.0.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92639de0d9 code=0x7ffc0000
[  176.048320][   T37] audit: type=1326 audit(1787072491.868:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6210 comm="syz.0.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f92639de0d9 code=0x7ffc0000
[  176.048368][   T37] audit: type=1326 audit(1787072491.868:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6210 comm="syz.0.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92639de0d9 code=0x7ffc0000
[  176.049113][   T37] audit: type=1326 audit(1787072491.868:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6210 comm="syz.0.129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92639de0d9 code=0x7ffc0000
[  176.344803][ T5850] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  176.380065][ T5788] usb 2-1: Using ep0 maxpacket: 32
[  176.381272][ T5788] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  176.425100][ T5788] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  176.425131][ T5788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.425153][ T5788] usb 2-1: config 0 has no interface number 0
[  176.425200][ T5788] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  176.479419][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.479448][ T5788] usb 2-1: Product: syz
[  176.479462][ T5788] usb 2-1: Manufacturer: syz
[  176.479478][ T5788] usb 2-1: SerialNumber: syz
[  176.592492][ T5850] usb 5-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.40
[  176.594154][ T5850] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 145, changing to 11
[  176.594185][ T5850] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.594212][ T5850] usb 5-1: config 1 interface 0 has no altsetting 0
[  176.597602][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.597629][ T5850] usb 5-1: Product: syz
[  176.597644][ T5850] usb 5-1: Manufacturer: syz
[  176.597660][ T5850] usb 5-1: SerialNumber: syz
[  176.747150][ T5788] usb 2-1: config 0 descriptor??
[  176.844855][ T5788] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[  176.847061][ T5788] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[  176.957346][ T6224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.958783][ T6224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.959048][ T5788] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  176.998776][ T6233] kernel profiling enabled (shift: 63)
[  176.998790][ T6233] profiling shift: 63 too large
[  179.222942][ T6224] 9p: Unknown Cache mode or invalid value f
[  179.404352][ T5788] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71)
[  179.657957][ T5850] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6
[  180.147221][ T5850] usb 5-1: USB disconnect, device number 5
[  180.163887][ T5788] radio-raremono 2-1:0.35: V4L2 device registered as radio48
[  180.214324][ T5788] usb 2-1: USB disconnect, device number 7
[  180.215359][ T5788] radio-raremono 2-1:0.35: Thanko's Raremono disconnected
[  180.721841][ T6258] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  180.881021][ T5850] appletouch 5-1:1.0: input: appletouch disconnected
[  181.047267][ T6263] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.142:6263
[  181.281582][ T6270] FAULT_INJECTION: forcing a failure.
[  181.281582][ T6270] name failslab, interval 1, probability 0, space 0, times 0
[  181.281620][ T6270] CPU: 0 UID: 0 PID: 6270 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  181.281646][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  181.281660][ T6270] Call Trace:
[  181.281668][ T6270]  <TASK>
[  181.281678][ T6270]  dump_stack_lvl+0xe8/0x150
[  181.281719][ T6270]  should_fail_ex+0x467/0x600
[  181.281761][ T6270]  should_failslab+0xa8/0x100
[  181.281790][ T6270]  kmem_cache_alloc_noprof+0xa4/0x650
[  181.281825][ T6270]  ? radix_tree_node_alloc+0xcf/0x400
[  181.281853][ T6270]  ? radix_tree_node_alloc+0xcf/0x400
[  181.281889][ T6270]  radix_tree_node_alloc+0xcf/0x400
[  181.281926][ T6270]  idr_get_free+0x295/0xa20
[  181.281966][ T6270]  idr_alloc_u32+0x190/0x340
[  181.282006][ T6270]  ? __pfx_idr_alloc_u32+0x10/0x10
[  181.282041][ T6270]  ? __local_bh_disable_ip+0x3c/0x420
[  181.282067][ T6270]  ? l2tp_tunnel_register+0x141/0x14c0
[  181.282092][ T6270]  ? l2tp_tunnel_register+0x141/0x14c0
[  181.282130][ T6270]  l2tp_tunnel_register+0x17a/0x14c0
[  181.282171][ T6270]  ? __pfx_l2tp_tunnel_register+0x10/0x10
[  181.282220][ T6270]  ? do_raw_spin_lock+0x12b/0x2f0
[  181.282257][ T6270]  ? pcpu_alloc+0x10/0x310
[  181.282303][ T6270]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  181.282331][ T6270]  ? lockdep_hardirqs_on+0x7a/0x110
[  181.282366][ T6270]  ? l2tp_tunnel_create+0x278/0x410
[  181.282384][ T6270]  ? l2tp_tunnel_create+0x302/0x410
[  181.282407][ T6270]  pppol2tp_connect+0x8e3/0x18b0
[  181.282441][ T6270]  ? __pfx_pppol2tp_connect+0x10/0x10
[  181.282464][ T6270]  ? __might_fault+0xaf/0x130
[  181.282496][ T6270]  ? bpf_lsm_socket_connect+0x9/0x20
[  181.282522][ T6270]  __sys_connect+0x336/0x470
[  181.282546][ T6270]  ? __pfx___sys_connect+0x10/0x10
[  181.282576][ T6270]  ? __pfx_ksys_write+0x10/0x10
[  181.282603][ T6270]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.282623][ T6270]  __x64_sys_connect+0x7a/0x90
[  181.282644][ T6270]  do_syscall_64+0x174/0x580
[  181.282666][ T6270]  ? trace_irq_disable+0x3b/0x140
[  181.282694][ T6270]  ? clear_bhb_loop+0x70/0xc0
[  181.282715][ T6270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.282733][ T6270] RIP: 0033:0x7f891490e0d9
[  181.282750][ T6270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.282764][ T6270] RSP: 002b:00007f8912b66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  181.282783][ T6270] RAX: ffffffffffffffda RBX: 00007f8914b95fa0 RCX: 00007f891490e0d9
[  181.282796][ T6270] RDX: 000000000000003a RSI: 0000200000000080 RDI: 0000000000000003
[  181.282806][ T6270] RBP: 00007f8912b66090 R08: 0000000000000000 R09: 0000000000000000
[  181.282816][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.282826][ T6270] R13: 00007f8914b96038 R14: 00007f8914b95fa0 R15: 00007ffd959ae728
[  181.282853][ T6270]  </TASK>
[  183.048834][ T6294] FAULT_INJECTION: forcing a failure.
[  183.048834][ T6294] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  183.048875][ T6294] CPU: 1 UID: 0 PID: 6294 Comm: syz.0.135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  183.048901][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  183.048914][ T6294] Call Trace:
[  183.048923][ T6294]  <TASK>
[  183.048932][ T6294]  dump_stack_lvl+0xe8/0x150
[  183.048971][ T6294]  should_fail_ex+0x467/0x600
[  183.049012][ T6294]  prepare_alloc_pages+0x223/0x690
[  183.049043][ T6294]  __alloc_frozen_pages_noprof+0x12f/0x380
[  183.049074][ T6294]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  183.049105][ T6294]  ? __pfx_policy_nodemask+0x10/0x10
[  183.049132][ T6294]  ? __lock_acquire+0x683/0x2ce0
[  183.049161][ T6294]  alloc_pages_mpol+0xce/0x280
[  183.049192][ T6294]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  183.049223][ T6294]  vma_alloc_folio_noprof+0xe1/0x1e0
[  183.049254][ T6294]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  183.049283][ T6294]  ? __pte_offset_map+0x29/0x200
[  183.049326][ T6294]  do_pte_missing+0x835/0x28f0
[  183.049366][ T6294]  ? handle_mm_fault+0xe8/0x13f0
[  183.049408][ T6294]  handle_mm_fault+0xd28/0x13f0
[  183.049452][ T6294]  ? handle_mm_fault+0xe8/0x13f0
[  183.049490][ T6294]  ? __pfx_handle_mm_fault+0x10/0x10
[  183.049558][ T6294]  ? lock_mm_and_find_vma+0xa7/0x340
[  183.049588][ T6294]  do_user_addr_fault+0x744/0x1340
[  183.049641][ T6294]  exc_page_fault+0x6a/0xc0
[  183.049671][ T6294]  asm_exc_page_fault+0x26/0x30
[  183.049694][ T6294] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  183.049718][ T6294] Code: 2c 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  183.049737][ T6294] RSP: 0018:ffffc90006dbf4f8 EFLAGS: 00050206
[  183.049758][ T6294] RAX: ffff88803a742001 RBX: ffff88803a74209d RCX: 000000000000059f
[  183.049774][ T6294] RDX: 0000000000000000 RSI: ffff88803a7428dd RDI: 0000200000003000
[  183.049789][ T6294] RBP: ffffc90006dbf670 R08: ffff88803a742e7b R09: 1ffff110074e85cf
[  183.049805][ T6294] R10: dffffc0000000000 R11: ffffed10074e85d0 R12: dffffc0000000000
[  183.049821][ T6294] R13: 0000000000000ddf R14: 000020000000359f R15: 00007ffffffff000
[  183.049855][ T6294]  _copy_to_iter+0x619/0x1810
[  183.049894][ T6294]  ? __pfx__copy_to_iter+0x10/0x10
[  183.049913][ T6294]  ? reacquire_held_locks+0x104/0x190
[  183.049950][ T6294]  ? rt_spin_unlock+0x157/0x200
[  183.049977][ T6294]  __skb_datagram_iter+0xf8/0x980
[  183.050011][ T6294]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  183.050052][ T6294]  skb_copy_datagram_iter+0xb5/0x240
[  183.050096][ T6294]  netlink_recvmsg+0x2b9/0xa50
[  183.050139][ T6294]  ? __pfx_netlink_recvmsg+0x10/0x10
[  183.050175][ T6294]  ? __lock_acquire+0x683/0x2ce0
[  183.050201][ T6294]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  183.050230][ T6294]  ? security_socket_recvmsg+0x7e/0x2c0
[  183.050266][ T6294]  ? __pfx_netlink_recvmsg+0x10/0x10
[  183.050298][ T6294]  sock_recvmsg+0x196/0x1e0
[  183.050325][ T6294]  ____sys_recvmsg+0x1f2/0x4b0
[  183.050367][ T6294]  ? __pfx_____sys_recvmsg+0x10/0x10
[  183.050416][ T6294]  ? import_iovec+0x73/0xa0
[  183.050449][ T6294]  ___sys_recvmsg+0x213/0x5a0
[  183.050489][ T6294]  ? __pfx____sys_recvmsg+0x10/0x10
[  183.050526][ T6294]  ? __fget_files+0x2a/0x420
[  183.050580][ T6294]  ? __fget_files+0x3a8/0x420
[  183.050616][ T6294]  do_recvmmsg+0x320/0x7f0
[  183.050658][ T6294]  ? __pfx_do_recvmmsg+0x10/0x10
[  183.050691][ T6294]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  183.050732][ T6294]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  183.050771][ T6294]  __x64_sys_recvmmsg+0x198/0x250
[  183.050808][ T6294]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  183.050850][ T6294]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.050874][ T6294]  do_syscall_64+0x174/0x580
[  183.050903][ T6294]  ? trace_irq_disable+0x3b/0x140
[  183.050939][ T6294]  ? clear_bhb_loop+0x70/0xc0
[  183.050968][ T6294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.050991][ T6294] RIP: 0033:0x7f92639de0d9
[  183.051013][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.051032][ T6294] RSP: 002b:00007f9261c36028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  183.051055][ T6294] RAX: ffffffffffffffda RBX: 00007f9263c65fa0 RCX: 00007f92639de0d9
[  183.051071][ T6294] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003
[  183.051085][ T6294] RBP: 00007f9261c36090 R08: 0000000000000000 R09: 0000000000000000
[  183.051098][ T6294] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001
[  183.051112][ T6294] R13: 00007f9263c66038 R14: 00007f9263c65fa0 R15: 00007ffc715dce28
[  183.051148][ T6294]  </TASK>
[  184.500059][ T6063] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  184.814611][ T6308] FAULT_INJECTION: forcing a failure.
[  184.814611][ T6308] name failslab, interval 1, probability 0, space 0, times 0
[  184.814639][ T6308] CPU: 0 UID: 0 PID: 6308 Comm: syz.2.153 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  184.814657][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  184.814666][ T6308] Call Trace:
[  184.814672][ T6308]  <TASK>
[  184.814679][ T6308]  dump_stack_lvl+0xe8/0x150
[  184.814708][ T6308]  should_fail_ex+0x467/0x600
[  184.814738][ T6308]  should_failslab+0xa8/0x100
[  184.814761][ T6308]  kmem_cache_alloc_noprof+0xa4/0x650
[  184.814787][ T6308]  ? skb_clone+0x212/0x3a0
[  184.814810][ T6308]  ? skb_clone+0x212/0x3a0
[  184.814836][ T6308]  skb_clone+0x212/0x3a0
[  184.814861][ T6308]  __netlink_deliver_tap+0x413/0x860
[  184.814892][ T6308]  ? netlink_deliver_tap+0x2e/0x1b0
[  184.814915][ T6308]  netlink_deliver_tap+0x19c/0x1b0
[  184.814937][ T6308]  netlink_unicast+0x7b8/0x990
[  184.814965][ T6308]  netlink_sendmsg+0x813/0xb40
[  184.814994][ T6308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.815017][ T6308]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  184.815042][ T6308]  ? __kernel_text_address+0xd/0x30
[  184.815067][ T6308]  ? unwind_get_return_address+0x4d/0x90
[  184.815087][ T6308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.815108][ T6308]  sock_sendmsg_nosec+0x13a/0x180
[  184.815138][ T6308]  ____sys_sendmsg+0x565/0x870
[  184.815159][ T6308]  ? __might_fault+0xaf/0x130
[  184.815180][ T6308]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.815208][ T6308]  ? import_iovec+0x73/0xa0
[  184.815230][ T6308]  ___sys_sendmsg+0x2a5/0x360
[  184.815257][ T6308]  ? __lock_acquire+0x683/0x2ce0
[  184.815276][ T6308]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.815331][ T6308]  ? __fget_files+0x2a/0x420
[  184.815348][ T6308]  ? __fget_files+0x3a8/0x420
[  184.815373][ T6308]  __x64_sys_sendmsg+0x1b7/0x290
[  184.815397][ T6308]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.815433][ T6308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.815450][ T6308]  do_syscall_64+0x174/0x580
[  184.815471][ T6308]  ? trace_irq_disable+0x3b/0x140
[  184.815497][ T6308]  ? clear_bhb_loop+0x70/0xc0
[  184.815517][ T6308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.815533][ T6308] RIP: 0033:0x7f891490e0d9
[  184.815547][ T6308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.815560][ T6308] RSP: 002b:00007f8912b66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.815576][ T6308] RAX: ffffffffffffffda RBX: 00007f8914b95fa0 RCX: 00007f891490e0d9
[  184.815588][ T6308] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  184.815598][ T6308] RBP: 00007f8912b66090 R08: 0000000000000000 R09: 0000000000000000
[  184.815608][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.815617][ T6308] R13: 00007f8914b96038 R14: 00007f8914b95fa0 R15: 00007ffd959ae728
[  184.815642][ T6308]  </TASK>
[  184.863334][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'.
[  187.772663][ T6063] usb 1-1: device descriptor read/all, error -71
[  188.610024][ T6063] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  189.068093][ T6334] kernel profiling enabled (shift: 63)
[  189.068113][ T6334] profiling shift: 63 too large
[  190.548101][ T4900] Bluetooth: hci5: command 0x1003 tx timeout
[  190.562597][ T5597] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  191.741027][ T6063] usb 1-1: device descriptor read/all, error -71
[  191.741376][ T6063] usb usb1-port1: attempt power cycle
[  193.606147][ T6374] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.166'.
[  193.899422][ T6382] FAULT_INJECTION: forcing a failure.
[  193.899422][ T6382] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.899450][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.4.169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  193.899468][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  193.899478][ T6382] Call Trace:
[  193.899484][ T6382]  <TASK>
[  193.899490][ T6382]  dump_stack_lvl+0xe8/0x150
[  193.899519][ T6382]  should_fail_ex+0x467/0x600
[  193.899549][ T6382]  _copy_to_iter+0x404/0x1810
[  193.899570][ T6382]  ? lockdep_hardirqs_on+0x7a/0x110
[  193.899597][ T6382]  ? __pfx__copy_to_iter+0x10/0x10
[  193.899611][ T6382]  ? reacquire_held_locks+0x104/0x190
[  193.899637][ T6382]  ? rt_spin_unlock+0x157/0x200
[  193.899657][ T6382]  __skb_datagram_iter+0xf8/0x980
[  193.899682][ T6382]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  193.899712][ T6382]  skb_copy_datagram_iter+0xb5/0x240
[  193.899742][ T6382]  netlink_recvmsg+0x2b9/0xa50
[  193.899772][ T6382]  ? __pfx_netlink_recvmsg+0x10/0x10
[  193.899808][ T6382]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  193.899829][ T6382]  ? security_socket_recvmsg+0x7e/0x2c0
[  193.899855][ T6382]  ? __pfx_netlink_recvmsg+0x10/0x10
[  193.899904][ T6382]  sock_recvmsg+0x196/0x1e0
[  193.899938][ T6382]  ____sys_recvmsg+0x1f2/0x4b0
[  193.899968][ T6382]  ? iovec_from_user+0x87/0x250
[  193.900002][ T6382]  ? __pfx_____sys_recvmsg+0x10/0x10
[  193.900045][ T6382]  ? import_iovec+0x73/0xa0
[  193.900066][ T6382]  ___sys_recvmsg+0x213/0x5a0
[  193.900087][ T6382]  ? ktime_get_ts64+0xa9/0x410
[  193.900117][ T6382]  ? __pfx____sys_recvmsg+0x10/0x10
[  193.900143][ T6382]  ? __fget_files+0x2a/0x420
[  193.900174][ T6382]  ? __fget_files+0x3a8/0x420
[  193.900199][ T6382]  do_recvmmsg+0x320/0x7f0
[  193.900228][ T6382]  ? __pfx_do_recvmmsg+0x10/0x10
[  193.900260][ T6382]  ? get_timespec64+0x119/0x1b0
[  193.900277][ T6382]  ? __pfx_get_timespec64+0x10/0x10
[  193.900302][ T6382]  __x64_sys_recvmmsg+0x1b7/0x250
[  193.900327][ T6382]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  193.900357][ T6382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.900375][ T6382]  do_syscall_64+0x174/0x580
[  193.900395][ T6382]  ? trace_irq_disable+0x3b/0x140
[  193.900422][ T6382]  ? clear_bhb_loop+0x70/0xc0
[  193.900442][ T6382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.900458][ T6382] RIP: 0033:0x7f881fbbe0d9
[  193.900473][ T6382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.900486][ T6382] RSP: 002b:00007f881de16028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  193.900503][ T6382] RAX: ffffffffffffffda RBX: 00007f881fe45fa0 RCX: 00007f881fbbe0d9
[  193.900515][ T6382] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  193.900525][ T6382] RBP: 00007f881de16090 R08: 0000200000003700 R09: 0000000000000000
[  193.900536][ T6382] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001
[  193.900546][ T6382] R13: 00007f881fe46038 R14: 00007f881fe45fa0 R15: 00007ffce6e646d8
[  193.900570][ T6382]  </TASK>
[  194.089997][ T5595] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  194.285610][ T5595] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  194.300070][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.327578][ T5595] usb 3-1: config 0 descriptor??
[  194.360704][ T5595] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  194.395807][ T6385] FAULT_INJECTION: forcing a failure.
[  194.395807][ T6385] name failslab, interval 1, probability 0, space 0, times 0
[  194.395845][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz.4.171 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  194.395871][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  194.395885][ T6385] Call Trace:
[  194.395896][ T6385]  <TASK>
[  194.395906][ T6385]  dump_stack_lvl+0xe8/0x150
[  194.395946][ T6385]  should_fail_ex+0x467/0x600
[  194.395990][ T6385]  should_failslab+0xa8/0x100
[  194.396017][ T6385]  __kmalloc_noprof+0xfe/0x780
[  194.396040][ T6385]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  194.396062][ T6385]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  194.396095][ T6385]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  194.396129][ T6385]  genl_family_rcv_msg_doit+0xda/0x340
[  194.396160][ T6385]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  194.396187][ T6385]  ? rcu_is_watching+0x15/0xb0
[  194.396215][ T6385]  ? cap_capable+0x123/0x460
[  194.396238][ T6385]  ? safesetid_security_capable+0xa9/0x1a0
[  194.396265][ T6385]  ? bpf_lsm_capable+0x9/0x20
[  194.396286][ T6385]  ? security_capable+0x7e/0x2c0
[  194.396321][ T6385]  genl_rcv_msg+0x614/0x7a0
[  194.396350][ T6385]  ? __pfx_genl_rcv_msg+0x10/0x10
[  194.396372][ T6385]  ? __pfx_ip_vs_genl_set_cmd+0x10/0x10
[  194.396413][ T6385]  ? kasan_check_range+0x97/0x2c0
[  194.396454][ T6385]  netlink_rcv_skb+0x226/0x4a0
[  194.396486][ T6385]  ? __pfx_genl_rcv_msg+0x10/0x10
[  194.396508][ T6385]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  194.396550][ T6385]  ? netlink_deliver_tap+0x2e/0x1b0
[  194.396579][ T6385]  ? netlink_deliver_tap+0x2e/0x1b0
[  194.396614][ T6385]  genl_rcv+0x28/0x40
[  194.396633][ T6385]  netlink_unicast+0x7f5/0x990
[  194.396671][ T6385]  netlink_sendmsg+0x813/0xb40
[  194.396708][ T6385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.396741][ T6385]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  194.396774][ T6385]  ? __kernel_text_address+0xd/0x30
[  194.396809][ T6385]  ? unwind_get_return_address+0x4d/0x90
[  194.396836][ T6385]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.396866][ T6385]  sock_sendmsg_nosec+0x13a/0x180
[  194.396909][ T6385]  ____sys_sendmsg+0x565/0x870
[  194.396938][ T6385]  ? __might_fault+0xaf/0x130
[  194.396968][ T6385]  ? __pfx_____sys_sendmsg+0x10/0x10
[  194.397007][ T6385]  ? import_iovec+0x73/0xa0
[  194.397037][ T6385]  ___sys_sendmsg+0x2a5/0x360
[  194.397065][ T6385]  ? __lock_acquire+0x683/0x2ce0
[  194.397093][ T6385]  ? __pfx____sys_sendmsg+0x10/0x10
[  194.397169][ T6385]  ? __fget_files+0x2a/0x420
[  194.397193][ T6385]  ? __fget_files+0x3a8/0x420
[  194.397230][ T6385]  __x64_sys_sendmsg+0x1b7/0x290
[  194.397263][ T6385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  194.397311][ T6385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.397337][ T6385]  do_syscall_64+0x174/0x580
[  194.397366][ T6385]  ? trace_irq_disable+0x3b/0x140
[  194.397411][ T6385]  ? clear_bhb_loop+0x70/0xc0
[  194.397439][ T6385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.397462][ T6385] RIP: 0033:0x7f881fbbe0d9
[  194.397483][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.397501][ T6385] RSP: 002b:00007f881de16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  194.397524][ T6385] RAX: ffffffffffffffda RBX: 00007f881fe45fa0 RCX: 00007f881fbbe0d9
[  194.397541][ T6385] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000004
[  194.397555][ T6385] RBP: 00007f881de16090 R08: 0000000000000000 R09: 0000000000000000
[  194.397568][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.397581][ T6385] R13: 00007f881fe46038 R14: 00007f881fe45fa0 R15: 00007ffce6e646d8
[  194.397617][ T6385]  </TASK>
[  194.781095][ T5595] gp8psk: usb in 128 operation failed.
[  194.782941][ T5595] gp8psk: usb in 137 operation failed.
[  194.782963][ T5595] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  194.783006][ T5595] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  194.846645][ T5595] usb 3-1: USB disconnect, device number 5
[  200.459248][ T1325] ieee802154 phy0 wpan0: encryption failed: -22
[  200.459424][ T1325] ieee802154 phy1 wpan1: encryption failed: -22
[  208.072245][ T5710] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  208.220003][ T5710] usb 5-1: Using ep0 maxpacket: 16
[  208.221069][ T5710] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  208.222795][ T5710] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  208.222822][ T5710] usb 5-1: config 0 has no interface number 0
[  208.222870][ T5710] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  208.222971][ T5710] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 576
[  208.223001][ T5710] usb 5-1: config 0 interface 41 has no altsetting 0
[  208.226026][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.226117][ T5710] usb 5-1: Product: syz
[  208.226136][ T5710] usb 5-1: Manufacturer: syz
[  208.226152][ T5710] usb 5-1: SerialNumber: syz
[  208.486888][ T5710] usb 5-1: config 0 descriptor??
[  208.488081][ T6476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  208.488276][ T6476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  210.170890][ T6476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  210.171024][ T6476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  210.491294][ T6501] MTRR 1 not used
[  211.317636][ T5710] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  211.317929][ T5710] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  213.223269][ T5595] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  213.777127][ T5595] usb 3-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.40
[  213.896419][ T5595] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 145, changing to 11
[  213.896497][ T5595] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.896563][ T5595] usb 3-1: config 1 interface 0 has no altsetting 0
[  214.909254][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.909326][ T5595] usb 3-1: Product: syz
[  214.909352][ T5595] usb 3-1: Manufacturer: syz
[  214.909414][ T5595] usb 3-1: SerialNumber: syz
[  219.342597][ T5595] usb 3-1: can't set config #1, error -71
[  219.776025][ T5595] usb 3-1: USB disconnect, device number 6
[  220.318279][ T5710] usb 5-1: USB disconnect, device number 6
[  221.086914][ T6533] FAULT_INJECTION: forcing a failure.
[  221.086914][ T6533] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  221.086952][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  221.086978][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  221.086992][ T6533] Call Trace:
[  221.087000][ T6533]  <TASK>
[  221.087010][ T6533]  dump_stack_lvl+0xe8/0x150
[  221.087048][ T6533]  should_fail_ex+0x467/0x600
[  221.087090][ T6533]  _copy_from_user+0x2d/0xb0
[  221.087120][ T6533]  __se_sys_io_uring_setup+0x1b4/0x2c0
[  221.087151][ T6533]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  221.087176][ T6533]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  221.087224][ T6533]  ? __pfx_ksys_write+0x10/0x10
[  221.087262][ T6533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.087288][ T6533]  do_syscall_64+0x174/0x580
[  221.087316][ T6533]  ? trace_irq_disable+0x3b/0x140
[  221.087362][ T6533]  ? clear_bhb_loop+0x70/0xc0
[  221.087390][ T6533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.087413][ T6533] RIP: 0033:0x7f92639de0d9
[  221.087435][ T6533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.087453][ T6533] RSP: 002b:00007f9261bf3ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  221.087478][ T6533] RAX: ffffffffffffffda RBX: 00002000000010c8 RCX: 00007f92639de0d9
[  221.087494][ T6533] RDX: 0000200000001148 RSI: 00002000000010c8 RDI: 0000000000000368
[  221.087515][ T6533] RBP: 00002000000010c0 R08: 0000200000000340 R09: 0000000000000000
[  221.087530][ T6533] R10: 0000200000001150 R11: 0000000000000206 R12: 0000200000001148
[  221.087545][ T6533] R13: 0000200000001150 R14: 00007f9261bf3fd8 R15: 0000000000000000
[  221.087579][ T6533]  </TASK>
[  221.473770][ T4900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  221.515995][ T4900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  221.549689][ T4900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  221.555542][ T4900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  221.556386][ T4900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  221.800967][ T6535] loop8: detected capacity change from 0 to 8
[  222.145524][ T6535] Dev loop8: unable to read RDB block 8
[  222.145588][ T6535]  loop8: unable to read partition table
[  222.145804][ T6535] loop8: partition table beyond EOD, truncated
[  222.145841][ T6535] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  222.647756][ T6063] IPVS: starting estimator thread 0...
[  222.740125][ T6553] IPVS: using max 8 ests per chain, 19200 per kthread
[  222.966168][ T5710] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  223.001563][ T5480] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  223.125198][ T5710] usb 3-1: not running at top speed; connect to a high speed hub
[  223.125242][ T5710] usb 3-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.40
[  223.128800][ T5710] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  223.128836][ T5710] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  223.128869][ T5710] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  223.128895][ T5710] usb 3-1: config 1 interface 0 has no altsetting 0
[  223.174735][ T5480] usb 1-1: Using ep0 maxpacket: 8
[  223.180634][ T5480] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  223.202247][ T5480] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.206039][ T5480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.271657][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.271689][ T5710] usb 3-1: Product: syz
[  223.271706][ T5710] usb 3-1: Manufacturer: Ё
[  223.271723][ T5710] usb 3-1: SerialNumber: syz
[  223.318640][ T6551] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  223.417791][ T5480] usb 1-1: config 0 descriptor??
[  223.564615][ T5480] gspca_main: vc032x-2.14.0 probing 046d:0892
[  223.724924][ T5597] Bluetooth: hci5: command tx timeout
[  223.893832][ T5710] usbhid 3-1:1.0: can't add hid device: -71
[  223.894006][ T5710] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  224.084075][ T5710] usb 3-1: USB disconnect, device number 7
[  224.180091][   T36] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  224.290403][ T5480] gspca_vc032x: reg_r err -32
[  224.290502][ T5480] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[  224.341813][   T36] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  224.343757][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.396149][   T36] usb 5-1: config 0 descriptor??
[  224.421528][   T36] cp210x 5-1:0.0: cp210x converter detected
[  224.760065][ T5710] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  224.874346][ T5788] usb 1-1: USB disconnect, device number 10
[  224.963994][ T5710] usb 3-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.40
[  225.008638][ T5710] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 145, changing to 11
[  225.008676][ T5710] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  225.008700][ T5710] usb 3-1: config 1 interface 0 has no altsetting 0
[  225.089283][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.089317][ T5710] usb 3-1: Product: syz
[  225.089328][ T5710] usb 3-1: Manufacturer: syz
[  225.089339][ T5710] usb 3-1: SerialNumber: syz
[  225.168535][   T36] usb 5-1: cp210x converter now attached to ttyUSB0
[  225.264163][   T36] usb 5-1: USB disconnect, device number 7
[  225.368000][   T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  225.644831][ T6566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.645434][ T6566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.727556][ T6566] 9p: Unknown Cache mode or invalid value f
[  225.742047][   T36] cp210x 5-1:0.0: device disconnected
[  225.801493][ T5597] Bluetooth: hci5: command tx timeout
[  225.845688][ T5710] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7
[  226.045935][ T5710] usb 3-1: USB disconnect, device number 8
[  226.196331][ T5710] appletouch 3-1:1.0: input: appletouch disconnected
[  226.276286][ T5892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.464838][ T6578] gtp0: entered promiscuous mode
[  226.464865][ T6578] gtp0: entered allmulticast mode
[  227.880156][ T5788] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  228.030152][ T5788] usb 1-1: Using ep0 maxpacket: 8
[  228.034245][ T5788] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  228.036011][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  228.036087][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.084159][ T5788] usb 1-1: config 0 descriptor??
[  228.425574][ T5597] Bluetooth: hci5: command tx timeout
[  228.561063][ T5788] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  228.865148][ T5892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.954898][ T6611] =======================================================
[  228.954898][ T6611] WARNING: The mand mount option has been deprecated and
[  228.954898][ T6611]          and is ignored by this kernel. Remove the mand
[  228.954898][ T6611]          option from the mount to silence this warning.
[  228.954898][ T6611] =======================================================
[  229.636577][ T5892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.941584][ T1607] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  230.850739][ T4900] Bluetooth: hci5: command tx timeout
[  230.956229][ T6063] usb 1-1: USB disconnect, device number 11
[  230.982672][ T1607] usb 3-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.40
[  230.985259][ T1607] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 145, changing to 11
[  230.985296][ T1607] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.985326][ T1607] usb 3-1: config 1 interface 0 has no altsetting 0
[  230.988402][ T1607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.988429][ T1607] usb 3-1: Product: syz
[  230.988446][ T1607] usb 3-1: Manufacturer: syz
[  230.988461][ T1607] usb 3-1: SerialNumber: syz
[  231.800295][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.800955][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.922357][ T6642] 9p: Unknown Cache mode or invalid value f
[  231.968188][ T5892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.988192][ T1607] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input8
[  232.051189][ T1607] usb 3-1: USB disconnect, device number 9
[  232.293526][ T1607] appletouch 3-1:1.0: input: appletouch disconnected
[  232.372387][ T6652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.232'.
[  232.662579][ T6655] Illegal XDP return value 137772015 on prog  (id 20) dev N/A, expect packet loss!
[  232.763406][ T6658] MTRR 1 not used
[  232.835180][ T6662] netlink: 48 bytes leftover after parsing attributes in process `syz.3.233'.
[  234.964211][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[  235.318286][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.333646][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.333903][ T6540] bridge_slave_0: entered allmulticast mode
[  235.338747][ T6540] bridge_slave_0: entered promiscuous mode
[  235.415499][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.415629][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.415852][ T6540] bridge_slave_1: entered allmulticast mode
[  235.443059][ T6540] bridge_slave_1: entered promiscuous mode
[  235.795224][ T6697] FAULT_INJECTION: forcing a failure.
[  235.795224][ T6697] name failslab, interval 1, probability 0, space 0, times 0
[  235.795262][ T6697] CPU: 1 UID: 0 PID: 6697 Comm: syz.2.242 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  235.795287][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  235.795300][ T6697] Call Trace:
[  235.795308][ T6697]  <TASK>
[  235.795318][ T6697]  dump_stack_lvl+0xe8/0x150
[  235.795358][ T6697]  should_fail_ex+0x467/0x600
[  235.795400][ T6697]  should_failslab+0xa8/0x100
[  235.795428][ T6697]  kmem_cache_alloc_noprof+0xa4/0x650
[  235.795464][ T6697]  ? skb_clone+0x212/0x3a0
[  235.795494][ T6697]  ? skb_clone+0x212/0x3a0
[  235.795532][ T6697]  skb_clone+0x212/0x3a0
[  235.795567][ T6697]  __netlink_deliver_tap+0x413/0x860
[  235.795608][ T6697]  ? netlink_deliver_tap+0x2e/0x1b0
[  235.795642][ T6697]  netlink_deliver_tap+0x19c/0x1b0
[  235.795674][ T6697]  netlink_unicast+0x7b8/0x990
[  235.795713][ T6697]  netlink_sendmsg+0x813/0xb40
[  235.795758][ T6697]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.795792][ T6697]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  235.795825][ T6697]  ? __kernel_text_address+0xd/0x30
[  235.795861][ T6697]  ? unwind_get_return_address+0x4d/0x90
[  235.795889][ T6697]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.795920][ T6697]  sock_sendmsg_nosec+0x13a/0x180
[  235.795960][ T6697]  ____sys_sendmsg+0x565/0x870
[  235.795990][ T6697]  ? __might_fault+0xaf/0x130
[  235.796020][ T6697]  ? __pfx_____sys_sendmsg+0x10/0x10
[  235.796068][ T6697]  ? import_iovec+0x73/0xa0
[  235.796099][ T6697]  ___sys_sendmsg+0x2a5/0x360
[  235.796128][ T6697]  ? __lock_acquire+0x683/0x2ce0
[  235.796155][ T6697]  ? __pfx____sys_sendmsg+0x10/0x10
[  235.796226][ T6697]  ? __fget_files+0x2a/0x420
[  235.796251][ T6697]  ? __fget_files+0x3a8/0x420
[  235.796287][ T6697]  __x64_sys_sendmsg+0x1b7/0x290
[  235.796321][ T6697]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  235.796369][ T6697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.796393][ T6697]  do_syscall_64+0x174/0x580
[  235.796422][ T6697]  ? trace_irq_disable+0x3b/0x140
[  235.796458][ T6697]  ? clear_bhb_loop+0x70/0xc0
[  235.796485][ T6697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.796509][ T6697] RIP: 0033:0x7f891490e0d9
[  235.796530][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.796549][ T6697] RSP: 002b:00007f8912b66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  235.796572][ T6697] RAX: ffffffffffffffda RBX: 00007f8914b95fa0 RCX: 00007f891490e0d9
[  235.796588][ T6697] RDX: 0000000020000080 RSI: 00002000000001c0 RDI: 0000000000000003
[  235.796603][ T6697] RBP: 00007f8912b66090 R08: 0000000000000000 R09: 0000000000000000
[  235.796616][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.796629][ T6697] R13: 00007f8914b96038 R14: 00007f8914b95fa0 R15: 00007ffd959ae728
[  235.796665][ T6697]  </TASK>
[  236.707228][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.757588][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.790974][ T6718] pimreg: entered allmulticast mode
[  236.931857][ T1607] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  237.100877][ T1607] usb 4-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.40
[  237.102508][ T1607] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 145, changing to 11
[  237.102555][ T1607] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  237.102586][ T1607] usb 4-1: config 1 interface 0 has no altsetting 0
[  237.108653][ T1607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.108683][ T1607] usb 4-1: Product: syz
[  237.108700][ T1607] usb 4-1: Manufacturer: syz
[  237.108717][ T1607] usb 4-1: SerialNumber: syz
[  237.613820][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.615296][ T5892] bridge_slave_1: left allmulticast mode
[  237.615403][ T5892] bridge_slave_1: left promiscuous mode
[  237.623313][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.661529][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.776963][ T6717] 9p: Unknown Cache mode or invalid value f
[  237.843133][ T1607] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9
[  237.880047][ T4900] Bluetooth: hci0: command 0x0406 tx timeout
[  237.957525][ T5892] bridge_slave_0: left allmulticast mode
[  237.957562][ T5892] bridge_slave_0: left promiscuous mode
[  237.957839][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.970025][ T4900] Bluetooth: hci2: command 0x0406 tx timeout
[  237.970060][ T4900] Bluetooth: hci4: command 0x0406 tx timeout
[  237.970404][ T4900] Bluetooth: hci3: command 0x0406 tx timeout
[  237.996235][ T1607] usb 4-1: USB disconnect, device number 3
[  238.305519][ T1607] appletouch 4-1:1.0: input: appletouch disconnected
[  238.365738][ T6734] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.239'.
[  238.794812][ T6743] FAULT_INJECTION: forcing a failure.
[  238.794812][ T6743] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.794859][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: syz.3.248 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  238.794886][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  238.794903][ T6743] Call Trace:
[  238.794912][ T6743]  <TASK>
[  238.794922][ T6743]  dump_stack_lvl+0xe8/0x150
[  238.794961][ T6743]  should_fail_ex+0x467/0x600
[  238.795002][ T6743]  _copy_to_user+0x31/0xb0
[  238.795032][ T6743]  mptcp_getsockopt+0x1ba4/0x1ed0
[  238.795067][ T6743]  ? __pfx_mptcp_getsockopt+0x10/0x10
[  238.795090][ T6743]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  238.795125][ T6743]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  238.795166][ T6743]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  238.795201][ T6743]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  238.795241][ T6743]  ? __lock_acquire+0x683/0x2ce0
[  238.795272][ T6743]  ? __lock_acquire+0x683/0x2ce0
[  238.795302][ T6743]  ? __lock_acquire+0x683/0x2ce0
[  238.795329][ T6743]  ? unwind_next_frame+0x8f/0x2550
[  238.795361][ T6743]  ? is_bpf_text_address+0x26/0x2b0
[  238.795406][ T6743]  ? is_bpf_text_address+0x292/0x2b0
[  238.795431][ T6743]  ? is_bpf_text_address+0x26/0x2b0
[  238.795492][ T6743]  ? __lock_acquire+0x683/0x2ce0
[  238.795545][ T6743]  ? __might_fault+0xaf/0x130
[  238.795584][ T6743]  ? sock_common_getsockopt+0x2d/0xb0
[  238.795610][ T6743]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  238.795635][ T6743]  do_sock_getsockopt+0x51d/0x7e0
[  238.795670][ T6743]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  238.795716][ T6743]  ? __fget_files+0x3a8/0x420
[  238.795741][ T6743]  ? __fget_files+0x2a/0x420
[  238.795774][ T6743]  __x64_sys_getsockopt+0x1aa/0x250
[  238.795819][ T6743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.795844][ T6743]  do_syscall_64+0x174/0x580
[  238.795872][ T6743]  ? trace_irq_disable+0x3b/0x140
[  238.795914][ T6743]  ? clear_bhb_loop+0x70/0xc0
[  238.795943][ T6743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.795966][ T6743] RIP: 0033:0x7f71b958e0d9
[  238.795988][ T6743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.796006][ T6743] RSP: 002b:00007f71b77e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  238.796029][ T6743] RAX: ffffffffffffffda RBX: 00007f71b9815fa0 RCX: 00007f71b958e0d9
[  238.796045][ T6743] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003
[  238.796057][ T6743] RBP: 00007f71b77e6090 R08: 00002000000000c0 R09: 0000000000000000
[  238.796071][ T6743] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.796084][ T6743] R13: 00007f71b9816038 R14: 00007f71b9815fa0 R15: 00007ffc79897d78
[  238.796119][ T6743]  </TASK>
[  239.020006][ T5710] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  239.180045][ T5710] usb 5-1: Using ep0 maxpacket: 16
[  239.180937][ T5710] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  239.184200][ T5710] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  239.184228][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  239.184249][ T5710] usb 5-1: config 1 has no interface number 0
[  239.184303][ T5710] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  239.184328][ T5710] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  239.184357][ T5710] usb 5-1: config 1 interface 105 has no altsetting 0
[  239.250004][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  239.250036][ T5710] usb 5-1: Product: syz
[  239.250053][ T5710] usb 5-1: Manufacturer: syz
[  239.250070][ T5710] usb 5-1: SerialNumber: syz
[  239.382676][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'.
[  239.517603][ T5710] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22
[  239.720786][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.721535][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.385651][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.387390][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.718450][ T5715] usb 5-1: USB disconnect, device number 8
[  242.206898][ T5892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.261077][ T5892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.312789][ T5892] bond0 (unregistering): Released all slaves
[  242.332987][ T6540] team0: Port device team_slave_0 added
[  242.586870][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1
[  242.588394][ T6755] netlink: 'syz.4.250': attribute type 12 has an invalid length.
[  242.588417][ T6755] netlink: 'syz.4.250': attribute type 29 has an invalid length.
[  242.588433][ T6755] netlink: 148 bytes leftover after parsing attributes in process `syz.4.250'.
[  242.588466][ T6755] netlink: 59 bytes leftover after parsing attributes in process `syz.4.250'.
[  242.670995][ T6540] team0: Port device team_slave_1 added
[  242.796053][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.796071][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.796100][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.856239][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.856256][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  242.856281][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.553608][ T6842] kernel profiling enabled (shift: 63)
[  250.553622][ T6842] profiling shift: 63 too large
[  253.055129][ T6849] overlayfs: missing 'lowerdir'
[  253.085244][ T6847] FAULT_INJECTION: forcing a failure.
[  253.085244][ T6847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  253.085284][ T6847] CPU: 1 UID: 0 PID: 6847 Comm: syz.0.264 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  253.085311][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  253.085325][ T6847] Call Trace:
[  253.085334][ T6847]  <TASK>
[  253.085343][ T6847]  dump_stack_lvl+0xe8/0x150
[  253.085382][ T6847]  should_fail_ex+0x467/0x600
[  253.085423][ T6847]  _copy_to_user+0x31/0xb0
[  253.085454][ T6847]  bpf_test_finish+0x4ea/0x690
[  253.085497][ T6847]  ? __pfx_bpf_test_finish+0x10/0x10
[  253.085536][ T6847]  ? _copy_from_user+0x94/0xb0
[  253.085563][ T6847]  ? bpf_test_init+0x113/0x150
[  253.085594][ T6847]  bpf_prog_test_run_xdp+0x8bc/0x11d0
[  253.085647][ T6847]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  253.085685][ T6847]  ? __fget_files+0x2a/0x420
[  253.085716][ T6847]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  253.085750][ T6847]  bpf_prog_test_run+0x2cb/0x340
[  253.085779][ T6847]  __sys_bpf+0xa22/0xd90
[  253.085810][ T6847]  ? __pfx___sys_bpf+0x10/0x10
[  253.085836][ T6847]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  253.085872][ T6847]  ? rt_mutex_slowunlock+0x219/0x460
[  253.085916][ T6847]  ? ksys_write+0x248/0x270
[  253.085947][ T6847]  ? __pfx_ksys_write+0x10/0x10
[  253.085980][ T6847]  __x64_sys_bpf+0xba/0xd0
[  253.086016][ T6847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.086041][ T6847]  do_syscall_64+0x174/0x580
[  253.086071][ T6847]  ? trace_irq_disable+0x3b/0x140
[  253.086117][ T6847]  ? clear_bhb_loop+0x70/0xc0
[  253.086146][ T6847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.086170][ T6847] RIP: 0033:0x7f92639de0d9
[  253.086191][ T6847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.086210][ T6847] RSP: 002b:00007f9261c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  253.086233][ T6847] RAX: ffffffffffffffda RBX: 00007f9263c65fa0 RCX: 00007f92639de0d9
[  253.086249][ T6847] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a
[  253.086263][ T6847] RBP: 00007f9261c36090 R08: 0000000000000000 R09: 0000000000000000
[  253.086277][ T6847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.086289][ T6847] R13: 00007f9263c66038 R14: 00007f9263c65fa0 R15: 00007ffc715dce28
[  253.086325][ T6847]  </TASK>
[  253.739654][ T6540] hsr_slave_0: entered promiscuous mode
[  253.751011][ T6540] hsr_slave_1: entered promiscuous mode
[  253.775386][ T6540] debugfs: 'hsr0' already exists in 'hsr'
[  253.775418][ T6540] Cannot create hsr debugfs directory
[  254.157584][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2
[  254.384966][ T6863] FAULT_INJECTION: forcing a failure.
[  254.384966][ T6863] name failslab, interval 1, probability 0, space 0, times 0
[  254.385001][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.0.271 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  254.385027][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  254.385041][ T6863] Call Trace:
[  254.385050][ T6863]  <TASK>
[  254.385059][ T6863]  dump_stack_lvl+0xe8/0x150
[  254.385096][ T6863]  should_fail_ex+0x467/0x600
[  254.385136][ T6863]  should_failslab+0xa8/0x100
[  254.385163][ T6863]  kmem_cache_alloc_noprof+0xa4/0x650
[  254.385196][ T6863]  ? skb_clone+0x212/0x3a0
[  254.385219][ T6863]  ? skb_clone+0x212/0x3a0
[  254.385247][ T6863]  skb_clone+0x212/0x3a0
[  254.385274][ T6863]  __netlink_deliver_tap+0x413/0x860
[  254.385308][ T6863]  ? netlink_deliver_tap+0x2e/0x1b0
[  254.385333][ T6863]  netlink_deliver_tap+0x19c/0x1b0
[  254.385366][ T6863]  netlink_unicast+0x7b8/0x990
[  254.385398][ T6863]  netlink_sendmsg+0x813/0xb40
[  254.385440][ T6863]  ? __lock_acquire+0x683/0x2ce0
[  254.385463][ T6863]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.385488][ T6863]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  254.385520][ T6863]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.385544][ T6863]  sock_sendmsg_nosec+0x13a/0x180
[  254.385579][ T6863]  ____sys_sendmsg+0x565/0x870
[  254.385612][ T6863]  ? __might_fault+0xaf/0x130
[  254.385638][ T6863]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.385673][ T6863]  ? import_iovec+0x73/0xa0
[  254.385700][ T6863]  ___sys_sendmsg+0x2a5/0x360
[  254.385728][ T6863]  ? __lock_acquire+0x683/0x2ce0
[  254.385754][ T6863]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.385795][ T6863]  ? kstrtouint+0x6e/0xe0
[  254.385850][ T6863]  ? __fget_files+0x2a/0x420
[  254.385871][ T6863]  ? __fget_files+0x3a8/0x420
[  254.385904][ T6863]  __sys_sendmmsg+0x279/0x4d0
[  254.385934][ T6863]  ? __pfx___sys_sendmmsg+0x10/0x10
[  254.385966][ T6863]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  254.385995][ T6863]  ? ksys_write+0x248/0x270
[  254.386019][ T6863]  ? __pfx_ksys_write+0x10/0x10
[  254.386046][ T6863]  __x64_sys_sendmmsg+0xa0/0xc0
[  254.386071][ T6863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.386091][ T6863]  do_syscall_64+0x174/0x580
[  254.386114][ T6863]  ? trace_irq_disable+0x3b/0x140
[  254.386145][ T6863]  ? clear_bhb_loop+0x70/0xc0
[  254.386168][ T6863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.386184][ T6863] RIP: 0033:0x7f92639de0d9
[  254.386201][ T6863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.386218][ T6863] RSP: 002b:00007f9261c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  254.386238][ T6863] RAX: ffffffffffffffda RBX: 00007f9263c65fa0 RCX: 00007f92639de0d9
[  254.386251][ T6863] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  254.386263][ T6863] RBP: 00007f9261c36090 R08: 0000000000000000 R09: 0000000000000000
[  254.386277][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.386299][ T6863] R13: 00007f9263c66038 R14: 00007f9263c65fa0 R15: 00007ffc715dce28
[  254.386344][ T6863]  </TASK>
[  254.389520][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'.
[  254.746008][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'.
[  255.399789][ T6874] overlayfs: missing 'lowerdir'
[  257.617871][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[  257.630648][ T5710] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  257.693504][ T6890] capability: warning: `syz.0.281' uses 32-bit capabilities (legacy support in use)
[  257.734658][ T6890] program syz.0.281 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  257.761892][ T5710] usb 5-1: device descriptor read/64, error -71
[  258.090848][ T5710] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  258.111496][ T5892] hsr_slave_0: left promiscuous mode
[  258.153653][ T5892] hsr_slave_1: left promiscuous mode
[  258.155041][ T5892] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.199101][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.232375][ T5892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.232407][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.240045][ T5710] usb 5-1: device descriptor read/64, error -71
[  258.320078][ T1607] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  258.350480][ T5710] usb usb5-port1: attempt power cycle
[  258.460007][ T1607] usb 1-1: device descriptor read/64, error -71
[  258.710070][ T1607] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  258.771560][ T5710] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  258.793268][ T5710] usb 5-1: device descriptor read/8, error -71
[  258.849988][ T1607] usb 1-1: device descriptor read/64, error -71
[  258.915191][ T5892] veth1_macvtap: left promiscuous mode
[  258.960574][ T1607] usb usb1-port1: attempt power cycle
[  258.977031][ T5892] veth0_macvtap: left promiscuous mode
[  258.977397][ T5892] veth1_vlan: left promiscuous mode
[  258.977867][ T5892] veth0_vlan: left promiscuous mode
[  259.290025][ T5710] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  259.310263][ T1607] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  259.310807][ T5710] usb 5-1: device descriptor read/8, error -71
[  259.838879][ T5710] usb usb5-port1: unable to enumerate USB device
[  260.369811][ T1607] usb 1-1: device descriptor read/8, error -71
[  260.563247][ T5715] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  260.607806][ T6915] netlink: ct family unspecified
[  260.607843][ T6915] openvswitch: netlink: Actions may not be safe on all matching packets
[  260.661513][ T1607] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  260.683756][ T1607] usb 1-1: device descriptor read/8, error -71
[  260.710857][ T5715] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  260.712156][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.738026][ T5715] usb 4-1: config 0 descriptor??
[  260.745676][ T5715] cp210x 4-1:0.0: cp210x converter detected
[  260.803404][ T1607] usb usb1-port1: unable to enumerate USB device
[  261.181413][ T5715] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71
[  261.183720][ T5715] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  261.183750][ T5715] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  261.295667][ T5715] usb 4-1: cp210x converter now attached to ttyUSB0
[  262.011771][ T5715] usb 4-1: USB disconnect, device number 4
[  262.040958][ T1325] ieee802154 phy0 wpan0: encryption failed: -22
[  262.041035][ T1325] ieee802154 phy1 wpan1: encryption failed: -22
[  262.227192][ T6926] netlink: ct family unspecified
[  262.227241][ T6926] openvswitch: netlink: Actions may not be safe on all matching packets
[  262.334812][ T5715] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  262.363628][ T5715] cp210x 4-1:0.0: device disconnected
[  262.417565][ T6930] overlayfs: missing 'lowerdir'
[  263.504679][ T6946] CIFS: Attempting to mount //127.0.0.1/share
[  263.654245][ T5595] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  263.700789][ T6947] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes)
[  263.748286][ T6946] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11
[  263.749063][ T6946] CIFS: VFS: cifs_mount failed w/return code = -11
[  263.931375][ T5595] usb 4-1: Using ep0 maxpacket: 32
[  263.932214][ T5595] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  263.933756][ T5595] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  263.933791][ T5595] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  263.933822][ T5595] usb 4-1: config 0 interface 0 has no altsetting 0
[  263.933857][ T5595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.994568][ T5595] usb 4-1: config 0 descriptor??
[  264.438755][ T5595] hid-alps 0003:044E:120B.0003: unknown main item tag 0x2
[  264.438799][ T5595] hid-alps 0003:044E:120B.0003: item fetching failed at offset 3/24
[  264.443319][ T5595] hid-alps 0003:044E:120B.0003: parse failed
[  264.443528][ T5595] hid-alps 0003:044E:120B.0003: probe with driver hid-alps failed with error -22
[  264.646717][ T5595] usb 4-1: USB disconnect, device number 5
[  264.932171][ T5892] team0 (unregistering): Port device team_slave_1 removed
[  265.002128][ T5892] team0 (unregistering): Port device team_slave_0 removed
[  266.303026][ T6962] FAULT_INJECTION: forcing a failure.
[  266.303026][ T6962] name failslab, interval 1, probability 0, space 0, times 0
[  266.303074][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: syz.3.297 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  266.303105][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  266.303127][ T6962] Call Trace:
[  266.303137][ T6962]  <TASK>
[  266.303147][ T6962]  dump_stack_lvl+0xe8/0x150
[  266.303190][ T6962]  should_fail_ex+0x467/0x600
[  266.303238][ T6962]  should_failslab+0xa8/0x100
[  266.303271][ T6962]  __kmalloc_noprof+0xfe/0x780
[  266.303298][ T6962]  ? tomoyo_encode+0x2ad/0x570
[  266.303329][ T6962]  ? tomoyo_encode+0x2ad/0x570
[  266.303374][ T6962]  tomoyo_encode+0x2ad/0x570
[  266.303415][ T6962]  tomoyo_realpath_from_path+0x5fa/0x640
[  266.303460][ T6962]  ? tomoyo_path_number_perm+0x219/0x5f0
[  266.303488][ T6962]  tomoyo_path_number_perm+0x246/0x5f0
[  266.303518][ T6962]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  266.303544][ T6962]  ? __lock_acquire+0x683/0x2ce0
[  266.303589][ T6962]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  266.303622][ T6962]  ? hook_file_ioctl+0x1f3/0x600
[  266.303660][ T6962]  ? lockdep_hardirqs_on+0x7a/0x110
[  266.303716][ T6962]  ? __fget_files+0x2a/0x420
[  266.303747][ T6962]  ? __fget_files+0x2a/0x420
[  266.303774][ T6962]  ? __fget_files+0x3a8/0x420
[  266.303800][ T6962]  ? __fget_files+0x2a/0x420
[  266.303833][ T6962]  security_file_ioctl+0xc3/0x2a0
[  266.303863][ T6962]  __se_sys_ioctl+0x47/0x170
[  266.303899][ T6962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.303927][ T6962]  do_syscall_64+0x174/0x580
[  266.303970][ T6962]  ? trace_irq_disable+0x3b/0x140
[  266.304012][ T6962]  ? clear_bhb_loop+0x70/0xc0
[  266.304044][ T6962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.304071][ T6962] RIP: 0033:0x7f71b958e0d9
[  266.304094][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.304117][ T6962] RSP: 002b:00007f71b77e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  266.304143][ T6962] RAX: ffffffffffffffda RBX: 00007f71b9815fa0 RCX: 00007f71b958e0d9
[  266.304162][ T6962] RDX: 0000200000000040 RSI: 00000000c02c640e RDI: 0000000000000003
[  266.304184][ T6962] RBP: 00007f71b77e6090 R08: 0000000000000000 R09: 0000000000000000
[  266.304200][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.304216][ T6962] R13: 00007f71b9816038 R14: 00007f71b9815fa0 R15: 00007ffc79897d78
[  266.304257][ T6962]  </TASK>
[  266.309134][ T6962] ERROR: Out of memory at tomoyo_realpath_from_path.
[  266.509993][ T5788] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  266.692323][ T5788] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  266.694479][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.772942][ T5788] usb 1-1: config 0 descriptor??
[  266.797515][ T5788] cp210x 1-1:0.0: cp210x converter detected
[  266.940405][ T6966] overlay: Unknown parameter '/'
[  267.015611][ T6967] overlayfs: failed to clone lowerpath
[  267.060338][ T6947] cifsd (6947) used greatest stack depth: 18880 bytes left
[  267.199323][ T5788] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71
[  267.202332][ T5788] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  267.202362][ T5788] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  267.318213][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3
[  267.520672][ T5788] usb 1-1: cp210x converter now attached to ttyUSB0
[  267.569686][ T5788] usb 1-1: USB disconnect, device number 16
[  268.027209][ T5788] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  268.045771][ T5788] cp210x 1-1:0.0: device disconnected
[  268.126144][ T6982] FAULT_INJECTION: forcing a failure.
[  268.126144][ T6982] name failslab, interval 1, probability 0, space 0, times 0
[  268.126182][ T6982] CPU: 1 UID: 0 PID: 6982 Comm: syz.3.305 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  268.126209][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  268.126223][ T6982] Call Trace:
[  268.126231][ T6982]  <TASK>
[  268.126241][ T6982]  dump_stack_lvl+0xe8/0x150
[  268.126282][ T6982]  should_fail_ex+0x467/0x600
[  268.126325][ T6982]  should_failslab+0xa8/0x100
[  268.126362][ T6982]  kmem_cache_alloc_noprof+0xa4/0x650
[  268.126401][ T6982]  ? can_rx_register+0x16d/0x770
[  268.126431][ T6982]  ? can_rx_register+0x16d/0x770
[  268.126471][ T6982]  can_rx_register+0x16d/0x770
[  268.126503][ T6982]  ? dev_get_by_index+0x22/0x2d0
[  268.126536][ T6982]  ? dev_get_by_index+0x22/0x2d0
[  268.126569][ T6982]  ? __pfx_bcm_rx_handler+0x10/0x10
[  268.126596][ T6982]  bcm_rx_setup+0x145d/0x2000
[  268.126637][ T6982]  bcm_sendmsg+0x2b9/0x7a0
[  268.126663][ T6982]  ? __pfx_bcm_sendmsg+0x10/0x10
[  268.126689][ T6982]  ? __lock_acquire+0x683/0x2ce0
[  268.126718][ T6982]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  268.126753][ T6982]  ? __kernel_text_address+0xd/0x30
[  268.126790][ T6982]  ? unwind_get_return_address+0x4d/0x90
[  268.126819][ T6982]  ? __pfx_bcm_sendmsg+0x10/0x10
[  268.126839][ T6982]  sock_sendmsg_nosec+0x13a/0x180
[  268.126884][ T6982]  ____sys_sendmsg+0x565/0x870
[  268.126925][ T6982]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.126966][ T6982]  ? import_iovec+0x73/0xa0
[  268.127003][ T6982]  ___sys_sendmsg+0x2a5/0x360
[  268.127033][ T6982]  ? __lock_acquire+0x683/0x2ce0
[  268.127062][ T6982]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.127132][ T6982]  ? __fget_files+0x2a/0x420
[  268.127158][ T6982]  ? __fget_files+0x3a8/0x420
[  268.127195][ T6982]  __x64_sys_sendmsg+0x1b7/0x290
[  268.127230][ T6982]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  268.127283][ T6982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.127309][ T6982]  do_syscall_64+0x174/0x580
[  268.127338][ T6982]  ? trace_irq_disable+0x3b/0x140
[  268.127381][ T6982]  ? clear_bhb_loop+0x70/0xc0
[  268.127411][ T6982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.127435][ T6982] RIP: 0033:0x7f71b958e0d9
[  268.127457][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.127477][ T6982] RSP: 002b:00007f71b77e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.127500][ T6982] RAX: ffffffffffffffda RBX: 00007f71b9815fa0 RCX: 00007f71b958e0d9
[  268.127516][ T6982] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005
[  268.127529][ T6982] RBP: 00007f71b77e6090 R08: 0000000000000000 R09: 0000000000000000
[  268.127542][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.127555][ T6982] R13: 00007f71b9816038 R14: 00007f71b9815fa0 R15: 00007ffc79897d78
[  268.127594][ T6982]  </TASK>
[  269.459980][ T5788] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  269.616402][ T5788] usb 1-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00
[  269.620486][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.620524][ T5788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  269.620571][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.705234][ T5788] usb 1-1: config 0 descriptor??
[  270.016846][ T6540] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  270.091746][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  270.094972][ T6540] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  270.180536][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  270.184305][ T6540] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  270.383393][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  270.409632][ T5788] hid-generic 0003:0EEF:722A.0004: unbalanced collection at end of report description
[  270.426803][ T5788] hid-generic 0003:0EEF:722A.0004: probe with driver hid-generic failed with error -22
[  270.457161][ T6984] proc: Unknown parameter 'zonefs'
[  270.479671][ T6540] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  270.614514][ T5788] usb 1-1: USB disconnect, device number 17
[  270.745453][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  272.807383][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.939998][ T5715] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  273.095571][ T7040] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  273.103288][ T6540] 8021q: adding VLAN 0 to HW filter on device team0
[  273.138762][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short
[  273.138828][ T5715] usb 5-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40
[  273.140502][ T5715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.140537][ T5715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  273.144165][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.144194][ T5715] usb 5-1: Product: syz
[  273.144210][ T5715] usb 5-1: Manufacturer: syz
[  273.144227][ T5715] usb 5-1: SerialNumber: syz
[  273.279317][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4
[  273.464810][  T160] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.464959][  T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.548357][ T5715] usb 5-1: USB disconnect, device number 13
[  273.704720][ T7051] FAULT_INJECTION: forcing a failure.
[  273.704720][ T7051] name failslab, interval 1, probability 0, space 0, times 0
[  273.704753][ T7051] CPU: 1 UID: 0 PID: 7051 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  273.704774][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  273.704785][ T7051] Call Trace:
[  273.704792][ T7051]  <TASK>
[  273.704799][ T7051]  dump_stack_lvl+0xe8/0x150
[  273.704835][ T7051]  should_fail_ex+0x467/0x600
[  273.704870][ T7051]  should_failslab+0xa8/0x100
[  273.704895][ T7051]  kmem_cache_alloc_noprof+0xa4/0x650
[  273.704926][ T7051]  ? skb_clone+0x212/0x3a0
[  273.704950][ T7051]  ? skb_clone+0x212/0x3a0
[  273.704981][ T7051]  skb_clone+0x212/0x3a0
[  273.705011][ T7051]  __netlink_deliver_tap+0x413/0x860
[  273.705050][ T7051]  ? netlink_deliver_tap+0x2e/0x1b0
[  273.705077][ T7051]  netlink_deliver_tap+0x19c/0x1b0
[  273.705105][ T7051]  netlink_unicast+0x7b8/0x990
[  273.705140][ T7051]  netlink_sendmsg+0x813/0xb40
[  273.705180][ T7051]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.705210][ T7051]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  273.705236][ T7051]  ? __kernel_text_address+0xd/0x30
[  273.705264][ T7051]  ? unwind_get_return_address+0x4d/0x90
[  273.705286][ T7051]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.705319][ T7051]  sock_sendmsg_nosec+0x13a/0x180
[  273.705357][ T7051]  ____sys_sendmsg+0x565/0x870
[  273.705395][ T7051]  ? __might_fault+0xaf/0x130
[  273.705422][ T7051]  ? __pfx_____sys_sendmsg+0x10/0x10
[  273.705457][ T7051]  ? import_iovec+0x73/0xa0
[  273.705486][ T7051]  ___sys_sendmsg+0x2a5/0x360
[  273.705519][ T7051]  ? __lock_acquire+0x683/0x2ce0
[  273.705545][ T7051]  ? __pfx____sys_sendmsg+0x10/0x10
[  273.705613][ T7051]  ? __fget_files+0x2a/0x420
[  273.705638][ T7051]  ? __fget_files+0x3a8/0x420
[  273.705674][ T7051]  __x64_sys_sendmsg+0x1b7/0x290
[  273.705708][ T7051]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  273.705760][ T7051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.705786][ T7051]  do_syscall_64+0x174/0x580
[  273.705815][ T7051]  ? trace_irq_disable+0x3b/0x140
[  273.705851][ T7051]  ? clear_bhb_loop+0x70/0xc0
[  273.705879][ T7051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.705903][ T7051] RIP: 0033:0x7f71b958e0d9
[  273.705924][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.705944][ T7051] RSP: 002b:00007f71b77e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.705968][ T7051] RAX: ffffffffffffffda RBX: 00007f71b9815fa0 RCX: 00007f71b958e0d9
[  273.705985][ T7051] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003
[  273.706000][ T7051] RBP: 00007f71b77e6090 R08: 0000000000000000 R09: 0000000000000000
[  273.706014][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.706027][ T7051] R13: 00007f71b9816038 R14: 00007f71b9815fa0 R15: 00007ffc79897d78
[  273.706063][ T7051]  </TASK>
[  274.059717][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.074436][ T6450] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.180960][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  274.472210][ T7054] loop5: detected capacity change from 0 to 7
[  274.522729][ T7056] jfs: Unknown parameter 'discardput/event#'
[  274.563054][ T7054] Dev loop5: unable to read RDB block 7
[  274.563103][ T7054]  loop5: unable to read partition table
[  274.563345][ T7054] loop5: partition table beyond EOD, truncated
[  274.563391][ T7054] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  274.851901][   T37] kauditd_printk_skb: 55 callbacks suppressed
[  274.851924][   T37] audit: type=1807 audit(1787072590.648:67): action=measure res=1
[  274.894816][ T7061] ima: policy update completed
[  274.894994][   T37] audit: type=1802 audit(1787072590.718:68): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.4.323" res=1 errno=0
[  275.020030][ T5715] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  275.057686][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'.
[  275.175005][ T5715] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  275.176594][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.278037][ T5715] usb 4-1: config 0 descriptor??
[  275.305277][ T5715] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  275.440043][ T7071] FAULT_INJECTION: forcing a failure.
[  275.440043][ T7071] name failslab, interval 1, probability 0, space 0, times 0
[  275.440084][ T7071] CPU: 1 UID: 0 PID: 7071 Comm: syz.4.325 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  275.440110][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  275.440123][ T7071] Call Trace:
[  275.440132][ T7071]  <TASK>
[  275.440142][ T7071]  dump_stack_lvl+0xe8/0x150
[  275.440180][ T7071]  should_fail_ex+0x467/0x600
[  275.440224][ T7071]  should_failslab+0xa8/0x100
[  275.440254][ T7071]  kmem_cache_alloc_noprof+0xa4/0x650
[  275.440290][ T7071]  ? skb_clone+0x212/0x3a0
[  275.440320][ T7071]  ? skb_clone+0x212/0x3a0
[  275.440373][ T7071]  skb_clone+0x212/0x3a0
[  275.440410][ T7071]  __netlink_deliver_tap+0x413/0x860
[  275.440453][ T7071]  ? netlink_deliver_tap+0x2e/0x1b0
[  275.440486][ T7071]  netlink_deliver_tap+0x19c/0x1b0
[  275.440518][ T7071]  netlink_unicast+0x7b8/0x990
[  275.440559][ T7071]  netlink_sendmsg+0x813/0xb40
[  275.440603][ T7071]  ? __pfx_netlink_sendmsg+0x10/0x10
[  275.440638][ T7071]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  275.440672][ T7071]  ? __kernel_text_address+0xd/0x30
[  275.440708][ T7071]  ? unwind_get_return_address+0x4d/0x90
[  275.440737][ T7071]  ? __pfx_netlink_sendmsg+0x10/0x10
[  275.440768][ T7071]  sock_sendmsg_nosec+0x13a/0x180
[  275.440809][ T7071]  ____sys_sendmsg+0x565/0x870
[  275.440840][ T7071]  ? __might_fault+0xaf/0x130
[  275.440877][ T7071]  ? __pfx_____sys_sendmsg+0x10/0x10
[  275.440921][ T7071]  ? import_iovec+0x73/0xa0
[  275.440954][ T7071]  ___sys_sendmsg+0x2a5/0x360
[  275.440984][ T7071]  ? __lock_acquire+0x683/0x2ce0
[  275.441012][ T7071]  ? __pfx____sys_sendmsg+0x10/0x10
[  275.441084][ T7071]  ? __fget_files+0x2a/0x420
[  275.441109][ T7071]  ? __fget_files+0x3a8/0x420
[  275.441146][ T7071]  __x64_sys_sendmsg+0x1b7/0x290
[  275.441180][ T7071]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  275.441232][ T7071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.441259][ T7071]  do_syscall_64+0x174/0x580
[  275.441288][ T7071]  ? trace_irq_disable+0x3b/0x140
[  275.441325][ T7071]  ? clear_bhb_loop+0x70/0xc0
[  275.441354][ T7071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.441378][ T7071] RIP: 0033:0x7f881fbbe0d9
[  275.441401][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.441420][ T7071] RSP: 002b:00007f881de16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  275.441446][ T7071] RAX: ffffffffffffffda RBX: 00007f881fe45fa0 RCX: 00007f881fbbe0d9
[  275.441463][ T7071] RDX: 0000000004040050 RSI: 0000200000000000 RDI: 0000000000000003
[  275.441477][ T7071] RBP: 00007f881de16090 R08: 0000000000000000 R09: 0000000000000000
[  275.441491][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.441505][ T7071] R13: 00007f881fe46038 R14: 00007f881fe45fa0 R15: 00007ffce6e646d8
[  275.441541][ T7071]  </TASK>
[  275.931703][   T37] audit: type=1800 audit(1787072591.678:69): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125988 res=0 errno=0
[  275.984459][   T37] audit: type=1800 audit(1787072591.808:70): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=126017 res=0 errno=0
[  275.987167][ T7060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.322'.
[  275.999683][   T37] audit: type=1800 audit(1787072591.808:71): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=125995 res=0 errno=0
[  276.354455][   T37] audit: type=1800 audit(1787072592.178:72): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=125996 res=0 errno=0
[  276.364217][ T5715] gspca_stv06xx: I2C: Read error writing address: -71
[  276.368270][ T5715] ==================================================================
[  276.368286][ T5715] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  276.368317][ T5715] Read of size 8 at addr ffffc90005439008 by task kworker/0:5/5715
[  276.368335][ T5715] 
[  276.368348][ T5715] CPU: 0 UID: 0 PID: 5715 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  276.368374][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  276.368390][ T5715] Workqueue: usb_hub_wq hub_event
[  276.368416][ T5715] Call Trace:
[  276.368424][ T5715]  <TASK>
[  276.368435][ T5715]  dump_stack_lvl+0xe8/0x150
[  276.368467][ T5715]  print_address_description+0x55/0x1e0
[  276.368498][ T5715]  ? __list_add_valid_or_report+0x4e/0x130
[  276.368518][ T5715]  print_report+0x58/0x70
[  276.368545][ T5715]  kasan_report+0x117/0x150
[  276.368570][ T5715]  ? __list_add_valid_or_report+0x4e/0x130
[  276.368598][ T5715]  __list_add_valid_or_report+0x4e/0x130
[  276.368623][ T5715]  kcov_remote_stop+0x457/0x680
[  276.368660][ T5715]  hub_event+0x4789/0x4cf0
[  276.368712][ T5715]  ? __pfx_hub_event+0x10/0x10
[  276.368736][ T5715]  ? process_scheduled_works+0xa20/0x14e0
[  276.368766][ T5715]  ? rcu_is_watching+0x15/0xb0
[  276.368795][ T5715]  ? process_scheduled_works+0xa20/0x14e0
[  276.368819][ T5715]  process_scheduled_works+0xa8e/0x14e0
[  276.368860][ T5715]  ? __pfx_process_scheduled_works+0x10/0x10
[  276.368896][ T5715]  ? assign_work+0x3cf/0x5d0
[  276.368923][ T5715]  worker_thread+0xa47/0xfb0
[  276.368958][ T5715]  ? __kthread_parkme+0x71/0x1f0
[  276.368991][ T5715]  kthread+0x388/0x470
[  276.369022][ T5715]  ? __pfx_worker_thread+0x10/0x10
[  276.369048][ T5715]  ? __pfx_kthread+0x10/0x10
[  276.369087][ T5715]  ret_from_fork+0x514/0xb70
[  276.369119][ T5715]  ? __pfx_ret_from_fork+0x10/0x10
[  276.369150][ T5715]  ? __switch_to+0xc89/0x1420
[  276.369177][ T5715]  ? __pfx_kthread+0x10/0x10
[  276.369208][ T5715]  ret_from_fork_asm+0x1a/0x30
[  276.369248][ T5715]  </TASK>
[  276.369256][ T5715] 
[  276.369261][ T5715] The buggy address belongs to a vmalloc virtual mapping
[  276.369281][ T5715] Memory state around the buggy address:
[  276.369293][ T5715]  ffffc90005438f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  276.369307][ T5715]  ffffc90005438f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  276.369322][ T5715] >ffffc90005439000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  276.369332][ T5715]                       ^
[  276.369343][ T5715]  ffffc90005439080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  276.369357][ T5715]  ffffc90005439100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  276.369368][ T5715] ==================================================================
[  276.369395][ T5715] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  276.369411][ T5715] CPU: 0 UID: 0 PID: 5715 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  276.369435][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  276.369448][ T5715] Workqueue: usb_hub_wq hub_event
[  276.369470][ T5715] Call Trace:
[  276.369478][ T5715]  <TASK>
[  276.369486][ T5715]  vpanic+0x56c/0xa60
[  276.369519][ T5715]  ? __pfx_vpanic+0x10/0x10
[  276.369556][ T5715]  panic+0xc5/0xd0
[  276.369589][ T5715]  ? __pfx_panic+0x10/0x10
[  276.369624][ T5715]  ? __list_add_valid_or_report+0x4e/0x130
[  276.369647][ T5715]  ? rcu_is_watching+0x15/0xb0
[  276.369676][ T5715]  ? __list_add_valid_or_report+0x4e/0x130
[  276.369699][ T5715]  check_panic_on_warn+0x89/0xb0
[  276.369735][ T5715]  ? __list_add_valid_or_report+0x4e/0x130
[  276.369757][ T5715]  end_report+0x73/0x170
[  276.369781][ T5715]  ? __list_add_valid_or_report+0x4e/0x130
[  276.369803][ T5715]  kasan_report+0x128/0x150
[  276.369831][ T5715]  ? __list_add_valid_or_report+0x4e/0x130
[  276.369854][ T5715]  __list_add_valid_or_report+0x4e/0x130
[  276.369877][ T5715]  kcov_remote_stop+0x457/0x680
[  276.369914][ T5715]  hub_event+0x4789/0x4cf0
[  276.369967][ T5715]  ? __pfx_hub_event+0x10/0x10
[  276.369991][ T5715]  ? process_scheduled_works+0xa20/0x14e0
[  276.370020][ T5715]  ? rcu_is_watching+0x15/0xb0
[  276.370048][ T5715]  ? process_scheduled_works+0xa20/0x14e0
[  276.370080][ T5715]  process_scheduled_works+0xa8e/0x14e0
[  276.370118][ T5715]  ? __pfx_process_scheduled_works+0x10/0x10
[  276.370145][ T5715]  ? assign_work+0x3cf/0x5d0
[  276.370170][ T5715]  worker_thread+0xa47/0xfb0
[  276.370202][ T5715]  ? __kthread_parkme+0x71/0x1f0
[  276.370233][ T5715]  kthread+0x388/0x470
[  276.370262][ T5715]  ? __pfx_worker_thread+0x10/0x10
[  276.370286][ T5715]  ? __pfx_kthread+0x10/0x10
[  276.370316][ T5715]  ret_from_fork+0x514/0xb70
[  276.370348][ T5715]  ? __pfx_ret_from_fork+0x10/0x10
[  276.370379][ T5715]  ? __switch_to+0xc89/0x1420
[  276.370416][ T5715]  ? __pfx_kthread+0x10/0x10
[  276.370454][ T5715]  ret_from_fork_asm+0x1a/0x30
[  276.370497][ T5715]  </TASK>
[  276.370682][ T5715] Kernel Offset: disabled